litmus-cli 1.4.40 → 1.4.42

package/dist/lib/connect-skills.js

@@ -0,0 +1,150 @@
+import { readFileSync } from "fs";
+import readline from "readline";
+import chalk from "chalk";
+import ora from "ora";
+import { importSkills, planSkillImport, ServerError } from "./api.js";
+import { info, warn } from "./errors.js";
+import { pickSkills } from "./skill-picker.js";
+import { collectSkillFiles, importSummaryLines, lastAnswered, overUploadCaps, planRequest, rememberAnswered, skillNames, skillSetDigest, SKILLS_PICKUP, } from "./skill-import.js";
+const NAMES_SHOWN = 5;
+const ASK_ATTEMPTS = 3;
+export function describeSkills(names) {
+    const shown = names.slice(0, NAMES_SHOWN).join(", ");
+    const more = names.length - NAMES_SHOWN;
+    return more > 0 ? `${shown} and ${more} more` : shown;
+}
+function askLine(question) {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve) => rl.question(question, (a) => {
+        rl.close();
+        resolve(a);
+    }));
+}
+/** Enter or yes imports, no declines. Anything else is asked again, and never read as
+ *  consent: after a few tries it is a no. */
+async function askYesNo(ask, question) {
+    let q = question;
+    for (let i = 0; i < ASK_ATTEMPTS; i++) {
+        const a = (await ask(q)).trim().toLowerCase();
+        if (a === "" || a === "y" || a === "yes")
+            return true;
+        if (a === "n" || a === "no")
+            return false;
+        q = `  Please answer y or n. ${chalk.dim("[Y/n]")} `;
+    }
+    return false;
+}
+/** Not offered at all: the assessment does not allow it (403) or the backend has no
+ *  such route (404). Nothing to tell the candidate. */
+function notOffered(err) {
+    return err instanceof ServerError && (err.statusCode === 403 || err.statusCode === 404);
+}
+/**
+ * The server's plan for these files: one request for every source folder, so the
+ * server dedupes across them and applies the upload's skill cap to the whole set. A
+ * skill it cannot read is left out and named, with the server's reason, never the
+ * skills beside it. Null when there is nothing to offer.
+ */
+async function planFiles(input, all) {
+    try {
+        const plan = await planSkillImport(input.backendUrl, input.token, planRequest(all));
+        for (const r of plan.refused)
+            warn(`Leaving out ~/.${r.path}: ${r.reason}`);
+        return plan;
+    }
+    catch (err) {
+        if (notOffered(err)) {
+            if (input.verbose)
+                info(`Skill import not offered: ${err instanceof Error ? err.message : String(err)}`);
+            return null;
+        }
+        // A refusal of the set as a whole (over the skill cap, say): say why, offer nothing.
+        warn(`Couldn't offer your skills for import: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+export async function offerSkillImport(input) {
+    if (input.flag === false)
+        return null;
+    const all = collectSkillFiles(input.home);
+    if (all.length === 0)
+        return null;
+    const plan = await planFiles(input, all);
+    if (!plan)
+        return null;
+    const wanted = new Set(plan.upload);
+    const files = all.filter((f) => wanted.has(f.path));
+    // The server's own grouping, so a row in the picker is exactly one skill it will
+    // install. A backend without it gets the whole set, as before.
+    const byName = new Map(plan.skills.map((s) => [s.name, s.paths]));
+    const names = byName.size > 0 ? [...byName.keys()].sort() : skillNames(plan.upload);
+    if (names.length === 0)
+        return null;
+    const n = names.length;
+    const found = `Found ${n} AI skill${n === 1 ? "" : "s"} on this computer (${describeSkills(names)}).`;
+    const over = overUploadCaps(files);
+    if (over) {
+        info(`${found} Together they are ${over}, more than one import takes.`);
+        return null;
+    }
+    const pending = { files, names, digest: skillSetDigest(files), assessmentId: input.assessmentId };
+    if (input.flag === true)
+        return pending;
+    // The picker draws on stdout and reads keys from stdin: both must be the terminal.
+    if (!(input.isTTY ?? (process.stdin.isTTY && process.stdout.isTTY))) {
+        info(`${found} Run with --skills to import ${n === 1 ? "it" : "them"} into your workspace.`);
+        return null;
+    }
+    // Asked once per set of skills: a candidate who reconnects every day is asked
+    // again only after they add or change one.
+    if (lastAnswered(input.assessmentId, input.home) === pending.digest)
+        return null;
+    const ask = input.ask ?? askLine;
+    const yes = await askYesNo(ask, `Do you want to import your AI skills into this workspace? ${chalk.dim("[Y/n]")} `);
+    // Then the skills themselves, each switched on or off. The digest stays the whole
+    // set's, so a candidate who kept some is not asked again until a skill changes.
+    const chosen = !yes ? [] : byName.size === 0 ? names : ((await (input.pick ?? pickSkills)(names)) ?? []);
+    if (chosen.length === 0) {
+        rememberAnswered(input.assessmentId, pending.digest, input.home);
+        info("Skipped. To import them later, add --skills to your `litmus connect` command.");
+        return null;
+    }
+    if (byName.size === 0)
+        return pending;
+    const keep = new Set(chosen.flatMap((name) => byName.get(name) ?? []));
+    return { ...pending, files: files.filter((f) => keep.has(f.path)), names: chosen };
+}
+/**
+ * Start the upload and return what to print when it is done. Never rejects: the
+ * workspace opens while this runs, and its outcome is reported at the end of connect.
+ */
+export function startSkillImport(backendUrl, token, pending, home) {
+    info(`Importing your ${pending.names.length === 1 ? "skill" : "skills"} in the background...`);
+    return (async () => {
+        try {
+            const result = await importSkills(backendUrl, token, pending.files.map((f) => ({ path: f.path, data: readFileSync(f.abs) })));
+            rememberAnswered(pending.assessmentId, pending.digest, home);
+            const lines = importSummaryLines(result);
+            return () => {
+                if (result.installed.length > 0) {
+                    ora().succeed(`${lines[0]} ${SKILLS_PICKUP}`);
+                    for (const line of lines.slice(1))
+                        warn(line);
+                }
+                else {
+                    warn("No skills were imported.");
+                    for (const line of lines)
+                        warn(line);
+                }
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return () => {
+                warn(`Couldn't import your skills: ${message}`);
+                info("Your workspace is fine. Run `litmus connect` again to retry.");
+            };
+        }
+    })();
+}
+//# sourceMappingURL=connect-skills.js.map

package/dist/lib/connect-skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-skills.js","sourceRoot":"","sources":["../../src/lib/connect-skills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AACjC,OAAO,QAAQ,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,GAAG,MAAM,KAAK,CAAA;AAErB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AACrE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,aAAa,GAEd,MAAM,mBAAmB,CAAA;AAmC1B,MAAM,WAAW,GAAG,CAAC,CAAA;AACrB,MAAM,YAAY,GAAG,CAAC,CAAA;AAEtB,MAAM,UAAU,cAAc,CAAC,KAAe;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,WAAW,CAAA;IACvC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACrF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1D,EAAE,CAAC,KAAK,EAAE,CAAA;QACV,OAAO,CAAC,CAAC,CAAC,CAAA;IACZ,CAAC,CAAC,CAAC,CAAA;AACL,CAAC;AAED;6CAC6C;AAC7C,KAAK,UAAU,QAAQ,CAAC,GAAmC,EAAE,QAAgB;IAC3E,IAAI,CAAC,GAAG,QAAQ,CAAA;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC7C,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QACzC,CAAC,GAAG,2BAA2B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAA;IACtD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;uDACuD;AACvD,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,GAAG,YAAY,WAAW,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAA;AACzF,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CACtB,KAAsB,EACtB,GAAqB;IAErB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QACnF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QAC3E,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,OAAO;gBAAE,IAAI,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACxG,OAAO,IAAI,CAAA;QACb,CAAC;QACD,qFAAqF;QACrF,IAAI,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAClG,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAsB;IAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IACnD,iFAAiF;IACjF,+DAA+D;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACnF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEnC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAA;IACtB,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,sBAAsB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAA;IACrG,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,GAAG,KAAK,sBAAsB,IAAI,+BAA+B,CAAC,CAAA;QACvE,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAA;IACjG,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAA;IAEvC,mFAAmF;IACnF,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,GAAG,KAAK,gCAAgC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,CAAA;QAC5F,OAAO,IAAI,CAAA;IACb,CAAC;IACD,8EAA8E;IAC9E,2CAA2C;IAC3C,IAAI,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAEhF,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAA;IAChC,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,GAAG,EACH,6DAA6D,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CACnF,CAAA;IACD,kFAAkF;IAClF,gFAAgF;IAChF,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACxG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,gBAAgB,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAChE,IAAI,CAAC,+EAA+E,CAAC,CAAA;QACrF,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,CAAA;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACtE,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,KAAa,EACb,OAA2B,EAC3B,IAAa;IAEb,IAAI,CAAC,kBAAkB,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,uBAAuB,CAAC,CAAA;IAC9F,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,UAAU,EACV,KAAK,EACL,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CACxE,CAAA;YACD,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC5D,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;YACxC,OAAO,GAAG,EAAE;gBACV,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC,CAAA;oBAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;wBAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC/C,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,0BAA0B,CAAC,CAAA;oBAChC,KAAK,MAAM,IAAI,IAAI,KAAK;wBAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBACtC,CAAC;YACH,CAAC,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChE,OAAO,GAAG,EAAE;gBACV,IAAI,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAA;gBAC/C,IAAI,CAAC,8DAA8D,CAAC,CAAA;YACtE,CAAC,CAAA;QACH,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;AACN,CAAC"}

package/dist/lib/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,YAAY,6BAA6B,CAAA;AAEtD,qBAAa,UAAW,SAAQ,KAAK;;CAEpC;AAID,QAAA,IAAI,YAAY,EAAE;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAEN,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,YAAY,CAAC,GAAG,IAAI,CAEvE;AAED,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAA;AAEnD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAElE;AAED;;;;;;;;GAQG;AACH,wBAAgB,KAAK,CACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAAE,GAC/D,KAAK,CA2BP;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,YAAY,6BAA6B,CAAA;AAEtD,qBAAa,UAAW,SAAQ,KAAK;;CAEpC;AAID,QAAA,IAAI,YAAY,EAAE;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAEN,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,YAAY,CAAC,GAAG,IAAI,CAEvE;AAED,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAA;AAEnD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAElE;AAED;;;;;;;;GAQG;AACH,wBAAgB,KAAK,CACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAAE,GAC/D,KAAK,CA2BP;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE7C;AAED;;GAEG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE1C"}

package/dist/lib/errors.js

@@ -41,9 +41,13 @@ export function setErrorContext(ctx) {
 export function reportEvent(severity, message, hint, event) {
     const apiBase = errorContext.apiBase || process.env.LITMUS_API_URL || DEFAULT_API_BASE;
     const url = `${apiBase}/api/cli/errors`;
+    // ENG-2763: the token is what lets the server tell a report from this CLI apart
+    // from anyone else posting to the same public endpoint. The route resolves it
+    // to a candidate and never logs it; it is absent only before a command has one.
     const payload = JSON.stringify({
         severity,
         event,
+        token: errorContext.token,
         message,
         hint,
         candidateEmail: errorContext.candidateEmail,

package/dist/lib/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,MAAM,IAAI,CAAA;AAEnB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE1C,wEAAwE;AACxE,0EAA0E;AAC1E,mEAAmE;AACnE,mEAAmE;AACnE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,YAAY,GAAG,0BAA0B,CAAA;AAEtD,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,gBAAgB,KAAK,EAAE,CAAA,CAAC,CAAC;CAC1B;AACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,YAAY,CAAA;AAEnE,wEAAwE;AACxE,IAAI,YAAY,GAKZ,EAAE,CAAA;AAEN,MAAM,UAAU,eAAe,CAAC,GAAiC;IAC/D,YAAY,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,GAAG,EAAE,CAAA;AAC5C,CAAC;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,WAAW,CACzB,QAAkB,EAClB,OAAe,EACf,IAAa,EACb,KAAc;IAEd,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,gBAAgB,CAAA;IACtF,MAAM,GAAG,GAAG,GAAG,OAAO,iBAAiB,CAAA;IAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,QAAQ;QACR,KAAK;QACL,OAAO;QACP,IAAI;QACJ,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;QACvB,WAAW,EAAE,OAAO,CAAC,OAAO;KAC7B,CAAC,CAAA;IAEF,OAAO,KAAK,CAAC,GAAG,EAAE;QAChB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAK,CAAC;KACnC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,OAAe;IAC1D,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,KAAK,CACnB,OAAe,EACf,IAAa,EACb,IAAgE;IAEhE,+DAA+D;IAC/D,MAAM,EAAE,cAAc,EAAE,QAAQ,GAAG,OAAO,EAAE,GAC1C,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAEnG,OAAO,CAAC,KAAK,EAAE,CAAA;IACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,CAAA;IAC7C,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAA;IAC7C,CAAC;IACD,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,sBAAsB,YAAY,sCAAsC,CAAC,CACpF,CAAA;IACD,OAAO,CAAC,KAAK,EAAE,CAAA;IAEf,8FAA8F;IAC9F,MAAM,aAAa,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,wBAAwB,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;IAEnG,gDAAgD;IAChD,mEAAmE;IACnE,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,IAAK,CAAC,CAAA;IACtC,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,IAAI,UAAU,EAAE,CAAA;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,CAAA;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAA;AACxC,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,EAAE,MAAM,IAAI,CAAA;AAEnB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE1C,wEAAwE;AACxE,0EAA0E;AAC1E,mEAAmE;AACnE,mEAAmE;AACnE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,YAAY,GAAG,0BAA0B,CAAA;AAEtD,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,gBAAgB,KAAK,EAAE,CAAA,CAAC,CAAC;CAC1B;AACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,YAAY,CAAA;AAEnE,wEAAwE;AACxE,IAAI,YAAY,GAKZ,EAAE,CAAA;AAEN,MAAM,UAAU,eAAe,CAAC,GAAiC;IAC/D,YAAY,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,GAAG,EAAE,CAAA;AAC5C,CAAC;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,WAAW,CACzB,QAAkB,EAClB,OAAe,EACf,IAAa,EACb,KAAc;IAEd,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,gBAAgB,CAAA;IACtF,MAAM,GAAG,GAAG,GAAG,OAAO,iBAAiB,CAAA;IAEvC,gFAAgF;IAChF,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,QAAQ;QACR,KAAK;QACL,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,OAAO;QACP,IAAI;QACJ,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;QACvB,WAAW,EAAE,OAAO,CAAC,OAAO;KAC7B,CAAC,CAAA;IAEF,OAAO,KAAK,CAAC,GAAG,EAAE;QAChB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAK,CAAC;KACnC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,OAAe;IAC1D,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,KAAK,CACnB,OAAe,EACf,IAAa,EACb,IAAgE;IAEhE,+DAA+D;IAC/D,MAAM,EAAE,cAAc,EAAE,QAAQ,GAAG,OAAO,EAAE,GAC1C,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAEnG,OAAO,CAAC,KAAK,EAAE,CAAA;IACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,CAAA;IAC7C,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAA;IAC7C,CAAC;IACD,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,sBAAsB,YAAY,sCAAsC,CAAC,CACpF,CAAA;IACD,OAAO,CAAC,KAAK,EAAE,CAAA;IAEf,8FAA8F;IAC9F,MAAM,aAAa,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,wBAAwB,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;IAEnG,gDAAgD;IAChD,mEAAmE;IACnE,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,IAAK,CAAC,CAAA;IACtC,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAExD,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,IAAI,UAAU,EAAE,CAAA;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,CAAA;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAA;AACxC,CAAC"}

package/dist/lib/hook-logger.cjs

@@ -465,6 +465,96 @@ function versionHeader(config) {
     : {}
 }
 
+// ── Session over (ENG-2768) ──────────────────────────────────────
+// Only `litmus submit` releases the hooks and the registry. A session that
+// ends any other way (web submit, deadline, the company ending it) leaves the
+// hooks live, and the walk-up above finds the folder's config whatever the
+// registry says, so every AI turn in an ended assessment folder kept sending
+// the candidate's prompt and reply to a server that answers `400 Session over`
+// every time: 12,229 of them over three days in production.
+//
+// So the refusal is remembered in the folder. The first refusal writes
+// `.litmus/session-over`, and every later invocation that resolves to that
+// folder stops before it records, appends, uploads or revives anything. The
+// watcher writes the same marker when IT is told the session is over (see
+// watcher.ts), which usually comes first.
+//
+// Only a refusal that can never turn into an acceptance counts: "Session over"
+// (which `/cli/activity` also returns for a token that matches no candidate,
+// ENG-2749) and "Invalid token" (its older spelling there, and other routes').
+// A 5xx, a timeout or a 429 is transient and must never silence capture of a
+// live session.
+//
+// The marker names the token it was written for, as a hash. A folder re-used
+// by a later `litmus init` carries a new token, and the old marker does not
+// silence it. A marker that names no token (unreadable, or hand-made) still
+// silences: it can only ever stop capture, never start it.
+//
+// The same hash is also written as an empty file under
+// ~/.litmus/sessions-over/, because the folder may not be writable, and a
+// folder we could not mark would otherwise keep uploading for as long as
+// another assessment keeps the user-scope hooks installed. Either copy is
+// enough.
+const SESSION_OVER_MARKER = "session-over"
+const SESSIONS_OVER_DIR = path.join(os.homedir() || os.tmpdir(), ".litmus", "sessions-over")
+const MAX_REFUSAL_BODY_BYTES = 16 * 1024
+const FINAL_REFUSAL_CODES = new Set(["session over", "invalid token"])
+
+function isFinalRefusal(status, rawBody) {
+  if (status < 400 || status >= 500 || status === 429) return false
+  let body
+  try { body = JSON.parse(rawBody) } catch { return false }
+  const detail = body && body.detail
+  const code = typeof detail === "string"
+    ? detail
+    : detail && typeof detail === "object" && typeof detail.error === "string" ? detail.error : null
+  return typeof code === "string" && FINAL_REFUSAL_CODES.has(code.trim().toLowerCase())
+}
+
+function tokenDigest(token) {
+  return typeof token === "string" && token
+    ? crypto.createHash("sha256").update(token).digest("hex")
+    : null
+}
+
+function writeSessionOverMarker(litmusDir, config, reason) {
+  const digest = tokenDigest(config && config.token)
+  try {
+    fs.writeFileSync(path.join(litmusDir, SESSION_OVER_MARKER), JSON.stringify({
+      reason,
+      at: new Date().toISOString(),
+      tokenSha256: digest,
+    }) + "\n")
+  } catch { /* unwritable folder; the home copy below still counts */ }
+  if (!digest) return
+  try {
+    fs.mkdirSync(SESSIONS_OVER_DIR, { recursive: true })
+    fs.writeFileSync(path.join(SESSIONS_OVER_DIR, digest), "")
+  } catch { /* best effort; the next refusal tries again */ }
+}
+
+function sessionOverMarked(litmusDir) {
+  const current = tokenDigest((readConfig(litmusDir) || {}).token)
+  if (current) {
+    try {
+      if (fs.statSync(path.join(SESSIONS_OVER_DIR, current)).isFile()) return true
+    } catch { /* not recorded at home */ }
+  }
+  let raw
+  try {
+    raw = fs.readFileSync(path.join(litmusDir, SESSION_OVER_MARKER), "utf8")
+  } catch {
+    return false
+  }
+  let marked = null
+  try {
+    const parsed = JSON.parse(raw)
+    if (parsed && typeof parsed.tokenSha256 === "string" && parsed.tokenSha256) marked = parsed.tokenSha256
+  } catch { /* names no token */ }
+  if (!marked) return true
+  return !current || current === marked
+}
+
 /**
  * POST the event to /cli/activity and WAIT for it to complete, bounded.
  *
@@ -474,16 +564,17 @@ function versionHeader(config) {
  * the in-zip activity.jsonl) kept working, so nothing surfaced it.
  *
  * Resolves rather than rejects on every failure path: a telemetry upload must
- * never fail a candidate's prompt. Both timers are cleared on settle.
+ * never fail a candidate's prompt. Both timers are cleared on settle. Resolves
+ * `{ sessionOver }`, true only when the server refused the token for good.
  */
 function uploadEvent(config, event) {
-  if (!config || !config.token || !config.backendUrl) return Promise.resolve()
+  if (!config || !config.token || !config.backendUrl) return Promise.resolve({ sessionOver: false })
 
   let url
   try {
     url = new URL(`${config.backendUrl}/cli/activity`)
   } catch {
-    return Promise.resolve() // malformed backendUrl — nothing to do
+    return Promise.resolve({ sessionOver: false }) // malformed backendUrl — nothing to do
   }
 
   const body = JSON.stringify({ events: [event] })
@@ -492,11 +583,12 @@ function uploadEvent(config, event) {
   return new Promise((resolve) => {
     let settled = false
     let guard = null
+    let sessionOver = false
     const done = () => {
       if (settled) return
       settled = true
       if (guard) clearTimeout(guard)
-      resolve()
+      resolve({ sessionOver })
     }
 
     const req = reqFn(url, {
@@ -518,7 +610,24 @@ function uploadEvent(config, event) {
       timeout: UPLOAD_TIMEOUT_MS,
     })
     // Drain the response so the socket can close and the event loop empty.
-    req.on("response", (res) => { res.resume(); res.on("end", done); res.on("error", done) })
+    // A 4xx body is kept (capped) because it is the only place the server says
+    // the assessment is over for good (ENG-2768, see isFinalRefusal).
+    req.on("response", (res) => {
+      const status = res.statusCode || 0
+      const chunks = []
+      let kept = 0
+      res.on("data", (chunk) => {
+        if (status >= 400 && status < 500 && kept < MAX_REFUSAL_BODY_BYTES) {
+          chunks.push(chunk)
+          kept += chunk.length
+        }
+      })
+      res.on("end", () => {
+        if (chunks.length) sessionOver = isFinalRefusal(status, Buffer.concat(chunks).toString("utf8"))
+        done()
+      })
+      res.on("error", done)
+    })
     req.on("error", done)        // network down, DNS, refused, destroyed
     req.on("timeout", () => { req.destroy(); done() })
     // Backstop in case none of the above fires (a socket wedged before connect).
@@ -1775,6 +1884,15 @@ async function main() {
   try { parsed = JSON.parse(raw) } catch { /* extractPrompt reports the failure */ }
   const cursorShaped = isCursorPayload(parsed)
 
+  // ENG-2768: an assessment whose session is over records nothing more. Asked
+  // here, before any transcript read, against the same placement the event
+  // would get (the payload's workspace roots are the only roots any tool's
+  // extractor reports), and asked again below once the event's own placement
+  // is known.
+  const earlyRoots = parsed && Array.isArray(parsed.workspace_roots) ? parsed.workspace_roots : []
+  const earlyLitmusDir = resolveAssessmentDir(parsed, earlyRoots)
+  if (earlyLitmusDir && sessionOverMarked(earlyLitmusDir)) return
+
   // ENG-2477: a capture SELF-TEST probe. `litmus init` (and `litmus doctor`)
   // run this script the way the tool would — the tool's own payload shape, on
   // stdin, through the command string in the tool's own config file — plus
@@ -1826,7 +1944,7 @@ async function main() {
   if (effectiveTool === "cursor" && parsed && parsed.hook_event_name === CURSOR_EDIT_EVENT) {
     const roots = Array.isArray(parsed.workspace_roots) ? parsed.workspace_roots : []
     const editLitmusDir = resolveAssessmentDir(parsed, roots)
-    if (!editLitmusDir) return
+    if (!editLitmusDir || sessionOverMarked(editLitmusDir)) return
     recordCursorFileEdit(parsed, parsed.session_id || parsed.conversation_id || null,
                          path.dirname(editLitmusDir))
     return
@@ -1864,6 +1982,7 @@ async function main() {
 
   const litmusDir = resolveAssessmentDir(parsed, workspaceRoots)
   if (!litmusDir) return
+  if (litmusDir !== earlyLitmusDir && sessionOverMarked(litmusDir)) return
 
   // Claim as LATE as possible — only once we know we have content and somewhere
   // to put it. Claiming earlier would let an invocation that then bails (no
@@ -1993,7 +2112,15 @@ async function main() {
 
   // 2. Upload to the server. Awaited, bounded — see uploadEvent.
   const config = readConfig(litmusDir)
-  await uploadEvent(config, event)
+  const upload = await uploadEvent(config, event)
+
+  // ENG-2768: the server says this token will never be accepted again. Mark
+  // the folder so the next turn stops at the top of main(), and skip the
+  // revival below: there is no session left for a watcher to serve.
+  if (upload.sessionOver) {
+    writeSessionOverMarker(litmusDir, config, "server refused the token")
+    return
+  }
 
   // 3. Revive a dead watcher (ENG-1491). Strictly after the capture/upload
   // work — this is a courtesy, and it must never cost the prompt anything.
@@ -2008,6 +2135,9 @@ async function main() {
 // Exported for unit tests only; every hook invocation runs this file directly.
 module.exports = {
   watcherPresumedDead,
+  isFinalRefusal,
+  sessionOverMarked,
+  SESSION_OVER_MARKER,
   reviveThrottleAllows,
   buildDrainFrame,
   trimEventToBytes,

package/dist/lib/session-over.d.ts

@@ -0,0 +1,32 @@
+/**
+ * ENG-2768: the "this session is over" marker the hook logger reads at the top
+ * of every invocation. Kept in step with `writeSessionOverMarker` and
+ * `sessionOverMarked` in hook-logger.cjs (that file is standalone CommonJS and
+ * cannot import this one): same names, same JSON shape.
+ *
+ * Two copies, either one enough. `.litmus/session-over` names the token as a
+ * sha256 hash, so a later `litmus init` into the same folder, which carries a
+ * new token, is not silenced by it. `~/.litmus/sessions-over/<hash>` is the
+ * same fact recorded outside the folder, for a folder that cannot be written.
+ */
+export declare const SESSION_OVER_MARKER = "session-over";
+export declare function sessionsOverDir(): string;
+export declare function writeSessionOverMarker(projectDir: string, token: string | undefined, reason: string): boolean;
+/** Has the session this folder's config belongs to been marked over? */
+export declare function sessionOverMarked(projectDir: string): boolean;
+/**
+ * What the watcher does with its own AI capture when the server says the
+ * session is over. The marker silences the hook logger in this folder even
+ * while another assessment keeps the user-scope hooks installed; the release
+ * drops the registry entry, the folder's own hooks and trust entries, and the
+ * user-scope hooks once no assessment is left. Only `litmus submit` used to do
+ * the release, so a session that ended any other way kept a live hook.
+ *
+ * Run by the watcher because it is alive exactly when the session ends, so no
+ * hook writer races it (the ENG-1289 concurrency problem). Marker first: it
+ * alone already stops capture, so a release that throws halfway loses nothing.
+ * The marker also keeps startTracker from bringing a watcher back here, whose
+ * hook self-heal would otherwise reinstall everything this just released.
+ */
+export declare function retireAiCaptureForEndedSession(projectDir: string, token: string | undefined): void;
+//# sourceMappingURL=session-over.d.ts.map

package/dist/lib/session-over.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-over.d.ts","sourceRoot":"","sources":["../../src/lib/session-over.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,iBAAiB,CAAA;AAEjD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAMD,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAmB7G;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAuB7D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAGlG"}

package/dist/lib/session-over.js

@@ -0,0 +1,99 @@
+import { mkdirSync, readFileSync, statSync, writeFileSync } from "fs";
+import os from "os";
+import path from "path";
+import { createHash } from "crypto";
+import { releaseAiTrackingForAssessment } from "./ai-tracking.js";
+/**
+ * ENG-2768: the "this session is over" marker the hook logger reads at the top
+ * of every invocation. Kept in step with `writeSessionOverMarker` and
+ * `sessionOverMarked` in hook-logger.cjs (that file is standalone CommonJS and
+ * cannot import this one): same names, same JSON shape.
+ *
+ * Two copies, either one enough. `.litmus/session-over` names the token as a
+ * sha256 hash, so a later `litmus init` into the same folder, which carries a
+ * new token, is not silenced by it. `~/.litmus/sessions-over/<hash>` is the
+ * same fact recorded outside the folder, for a folder that cannot be written.
+ */
+export const SESSION_OVER_MARKER = "session-over";
+export function sessionsOverDir() {
+    return path.join(os.homedir() || os.tmpdir(), ".litmus", "sessions-over");
+}
+function tokenDigest(token) {
+    return typeof token === "string" && token ? createHash("sha256").update(token).digest("hex") : null;
+}
+export function writeSessionOverMarker(projectDir, token, reason) {
+    const digest = tokenDigest(token);
+    let written = false;
+    try {
+        writeFileSync(path.join(projectDir, ".litmus", SESSION_OVER_MARKER), JSON.stringify({
+            reason,
+            at: new Date().toISOString(),
+            tokenSha256: digest,
+        }) + "\n");
+        written = true;
+    }
+    catch { /* unwritable folder; the home copy below still counts */ }
+    if (digest) {
+        try {
+            mkdirSync(sessionsOverDir(), { recursive: true });
+            writeFileSync(path.join(sessionsOverDir(), digest), "");
+            written = true;
+        }
+        catch { /* best effort */ }
+    }
+    return written;
+}
+/** Has the session this folder's config belongs to been marked over? */
+export function sessionOverMarked(projectDir) {
+    let current = null;
+    try {
+        current = tokenDigest(JSON.parse(readFileSync(path.join(projectDir, ".litmus", "config.json"), "utf8")).token);
+    }
+    catch { /* no readable config */ }
+    if (current) {
+        try {
+            if (statSync(path.join(sessionsOverDir(), current)).isFile())
+                return true;
+        }
+        catch { /* not recorded at home */ }
+    }
+    let raw;
+    try {
+        raw = readFileSync(path.join(projectDir, ".litmus", SESSION_OVER_MARKER), "utf8");
+    }
+    catch {
+        return false;
+    }
+    let marked = null;
+    try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed?.tokenSha256 === "string" && parsed.tokenSha256)
+            marked = parsed.tokenSha256;
+    }
+    catch { /* names no token */ }
+    if (!marked)
+        return true;
+    return !current || current === marked;
+}
+/**
+ * What the watcher does with its own AI capture when the server says the
+ * session is over. The marker silences the hook logger in this folder even
+ * while another assessment keeps the user-scope hooks installed; the release
+ * drops the registry entry, the folder's own hooks and trust entries, and the
+ * user-scope hooks once no assessment is left. Only `litmus submit` used to do
+ * the release, so a session that ended any other way kept a live hook.
+ *
+ * Run by the watcher because it is alive exactly when the session ends, so no
+ * hook writer races it (the ENG-1289 concurrency problem). Marker first: it
+ * alone already stops capture, so a release that throws halfway loses nothing.
+ * The marker also keeps startTracker from bringing a watcher back here, whose
+ * hook self-heal would otherwise reinstall everything this just released.
+ */
+export function retireAiCaptureForEndedSession(projectDir, token) {
+    writeSessionOverMarker(projectDir, token, "watcher: server signaled session over");
+    try {
+        releaseAiTrackingForAssessment(projectDir);
+    }
+    catch { /* best effort */ }
+}
+//# sourceMappingURL=session-over.js.map

package/dist/lib/session-over.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-over.js","sourceRoot":"","sources":["../../src/lib/session-over.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AACrE,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAA;AAEjE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAA;AAEjD,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACrG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,KAAyB,EAAE,MAAc;IAClG,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAClF,MAAM;YACN,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,WAAW,EAAE,MAAM;SACpB,CAAC,GAAG,IAAI,CAAC,CAAA;QACV,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IAAC,MAAM,CAAC,CAAC,yDAAyD,CAAC,CAAC;IACrE,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,SAAS,CAAC,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACjD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;YACvD,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,IAAI,OAAO,GAAkB,IAAI,CAAA;IACjC,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC,KAAK,CAAC,CAAA;IACzI,CAAC;IAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAA;QAC3E,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,MAAM,GAAkB,IAAI,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B,CAAA;QAC3D,IAAI,OAAO,MAAM,EAAE,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW;YAAE,MAAM,GAAG,MAAM,CAAC,WAAW,CAAA;IAChG,CAAC;IAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,OAAO,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,CAAA;AACvC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,8BAA8B,CAAC,UAAkB,EAAE,KAAyB;IAC1F,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,uCAAuC,CAAC,CAAA;IAClF,IAAI,CAAC;QAAC,8BAA8B,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAChF,CAAC"}

package/dist/lib/skill-import.d.ts

@@ -0,0 +1,82 @@
+/**
+ * ENG-2814 — find the candidate's own AI tool skills on THIS machine, for `litmus
+ * connect` to offer to import into their workspace.
+ *
+ * Runs on the laptop because that is the only place the skills are: the workspace
+ * cannot see the candidate's home. The upload goes to the same `/workspace/skills`
+ * routes the assessment page's Import skills dialog uses, and NOTHING about which
+ * files are skills is decided here: `POST /workspace/skills/plan` runs the upload's
+ * own parser over the paths and SKILL.md heads and answers with the files to send
+ * (`backend/services/candidate_skills.py`). One parser cannot disagree with itself.
+ *
+ * Every folder an AI tool reads Agent Skills (`<name>/SKILL.md`) from is looked in.
+ * A folder that does not exist costs nothing; a skill found in two of them (a
+ * `.claude/skills` copy of an `.agents/skills` one, say) is imported once, and the
+ * server reports the other as a duplicate.
+ */
+export declare const SKILL_SOURCES: ReadonlyArray<{
+    dir: string;
+    tools: string;
+}>;
+export declare const PLAN_HEAD_CHARS: number;
+export interface LocalSkillFile {
+    /** Sent to the server. The source folder without its dot (`claude/skills/x/SKILL.md`):
+     *  the server skips hidden folders other than the ones it knows hold skills, and
+     *  `.cursor` or `.gemini` are not among them. */
+    path: string;
+    abs: string;
+    size: number;
+    mtimeMs: number;
+}
+/**
+ * Every file under each skills folder that exists.
+ *
+ * A link is followed only where it stays inside what the candidate agreed to share.
+ * An entry directly under a skills folder may be a link (a skill kept in dotfiles and
+ * linked in is common), and it sets the boundary: below it, a file or folder whose
+ * real path leaves that entry is not collected, so a link in a skill cannot carry an
+ * unrelated file off the laptop under the skill's name.
+ */
+export declare function collectSkillFiles(home?: string): LocalSkillFile[];
+export declare const MAX_UPLOAD_BYTES: number;
+export declare const MAX_UPLOAD_FILES = 1000;
+/** Why these files cannot be uploaded in one import, or null when they fit. */
+export declare function overUploadCaps(files: LocalSkillFile[]): string | null;
+export interface SkillPlanRequest {
+    /** Leave out a skill the server cannot read and name it in `refused`, rather than
+     *  refusing every skill over one malformed SKILL.md. */
+    skipInvalid: true;
+    paths: string[];
+    skillFiles: Record<string, string>;
+    unreadable: string[];
+    truncated: string[];
+}
+/** The plan route's body: every path, and the head of each SKILL.md. */
+export declare function planRequest(files: LocalSkillFile[]): SkillPlanRequest;
+/** The skill folder names among the paths the server said to send, for the prompt. */
+export declare function skillNames(kept: string[]): string[];
+/**
+ * What the candidate was last asked about, per assessment, so a candidate who
+ * reconnects every day of a work trial is asked again only when their skills changed.
+ * A digest of the kept files' paths, sizes and modification times: cheap, and any
+ * edit to a skill changes it.
+ */
+export declare function skillSetDigest(files: LocalSkillFile[]): string;
+export declare function lastAnswered(assessmentId: string, home?: string): string | null;
+/** Best effort: failing to remember only means being asked again next time. */
+export declare function rememberAnswered(assessmentId: string, digest: string, home?: string): void;
+export interface SkillImportResult {
+    installed: string[];
+    skipped: {
+        name: string;
+        dest: string;
+        reason: string;
+    }[];
+    ignored: string[];
+    duplicates: string[];
+    aider: string | null;
+}
+/** What the import did, in the same words the assessment page's dialog used. */
+export declare function importSummaryLines(result: SkillImportResult): string[];
+export declare const SKILLS_PICKUP = "In Copilot, run /skills reload.";
+//# sourceMappingURL=skill-import.d.ts.map

package/dist/lib/skill-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-import.d.ts","sourceRoot":"","sources":["../../src/lib/skill-import.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAOvE,CAAA;AAUD,eAAO,MAAM,eAAe,QAAY,CAAA;AAExC,MAAM,WAAW,cAAc;IAC7B;;qDAEiD;IACjD,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAQD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,MAAqB,GAAG,cAAc,EAAE,CAiD/E;AAID,eAAO,MAAM,gBAAgB,QAAmB,CAAA;AAChD,eAAO,MAAM,gBAAgB,OAAO,CAAA;AAEpC,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM,GAAG,IAAI,CAKrE;AAED,MAAM,WAAW,gBAAgB;IAC/B;4DACwD;IACxD,WAAW,EAAE,IAAI,CAAA;IACjB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,gBAAgB,CAkBrE;AAED,sFAAsF;AACtF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAOnD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM,CAM9D;AAMD,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE,MAAqB,GAAG,MAAM,GAAG,IAAI,CAQ7F;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAAqB,GAAG,IAAI,CAexG;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACzD,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAQD,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAgBtE;AAED,eAAO,MAAM,aAAa,oCAAoC,CAAA"}