muonroi-cli 1.2.0

package/dist/ee/intercept.test.js

@@ -0,0 +1,170 @@
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { startStubEEServer } from "../__test-stubs__/ee-server.js";
+import { createEEClient, resetEEClientState } from "./client.js";
+import { getLastSurfacedState, resetLastSurfacedState, setDefaultEEClient, updateLastSurfacedState } from "./intercept.js";
+import { setRenderSink } from "./render.js";
+const baseReq = {
+    toolName: "bash",
+    toolInput: { command: "rm -rf /" },
+    cwd: "/tmp",
+    tenantId: "local",
+    scope: { kind: "global" },
+};
+const sampleMatch = {
+    principle_uuid: "p-uuid-001",
+    embedding_model_version: "nomic-embed-text-v1.5",
+    confidence: 0.85,
+    why: "Dangerous command detected",
+    message: "Avoid destructive commands",
+    scope_label: "global",
+    last_matched_at: "2026-04-30T00:00:00Z",
+};
+describe("updateLastSurfacedState / resetLastSurfacedState", () => {
+    afterEach(() => {
+        resetLastSurfacedState();
+    });
+    it("updateLastSurfacedState sets surfacedIds and timestamp", () => {
+        updateLastSurfacedState(["id-1", "id-2"]);
+        const state = getLastSurfacedState();
+        expect(state.surfacedIds).toEqual(["id-1", "id-2"]);
+        expect(typeof state.timestamp).toBe("string");
+        expect(state.timestamp).not.toBe("");
+    });
+    it("updateLastSurfacedState with empty array is a no-op", () => {
+        updateLastSurfacedState(["id-1"]);
+        updateLastSurfacedState([]);
+        const state = getLastSurfacedState();
+        // Should still have previous value
+        expect(state.surfacedIds).toEqual(["id-1"]);
+    });
+    it("resetLastSurfacedState clears surfacedIds to []", () => {
+        updateLastSurfacedState(["id-1"]);
+        resetLastSurfacedState();
+        const state = getLastSurfacedState();
+        expect(state.surfacedIds).toEqual([]);
+    });
+});
+describe("intercept integration", () => {
+    let stub;
+    let captured;
+    beforeEach(async () => {
+        captured = [];
+        setRenderSink((line) => captured.push(line));
+        resetEEClientState();
+    });
+    afterEach(async () => {
+        if (stub)
+            await stub.stop();
+    });
+    it("decision=block returns response unchanged (caller aborts)", async () => {
+        stub = await startStubEEServer({
+            intercept: () => ({ decision: "block", reason: "too dangerous" }),
+        });
+        const client = createEEClient({
+            baseUrl: `http://127.0.0.1:${stub.port}`,
+            timeoutMs: 2000,
+        });
+        setDefaultEEClient(client);
+        // Use the full intercept function (from intercept.ts)
+        const { intercept } = await import("./intercept.js");
+        const resp = await intercept(baseReq);
+        expect(resp.decision).toBe("block");
+        expect(resp.reason).toBe("too dangerous");
+        // No matches emitted on block
+        expect(captured).toHaveLength(0);
+    });
+    it("decision=allow with matches[] emits rendered lines via sink", async () => {
+        stub = await startStubEEServer({
+            intercept: () => ({
+                decision: "allow",
+                matches: [sampleMatch],
+            }),
+        });
+        const client = createEEClient({
+            baseUrl: `http://127.0.0.1:${stub.port}`,
+            timeoutMs: 2000,
+        });
+        setDefaultEEClient(client);
+        const { intercept } = await import("./intercept.js");
+        const resp = await intercept(baseReq);
+        expect(resp.decision).toBe("allow");
+        expect(resp.matches).toHaveLength(1);
+        // The render sink should have captured the warning
+        expect(captured).toHaveLength(1);
+        expect(captured[0]).toContain("Avoid destructive commands");
+        expect(captured[0]).toContain("Dangerous command detected");
+        expect(captured[0]).toContain("global");
+    });
+    it("posttool carries tenantId + scope (awaitable Promise<void>)", async () => {
+        stub = await startStubEEServer({
+            posttool: () => { },
+        });
+        const client = createEEClient({
+            baseUrl: `http://127.0.0.1:${stub.port}`,
+            timeoutMs: 2000,
+        });
+        setDefaultEEClient(client);
+        const { posttool } = await import("./posttool.js");
+        // posttool is now async (Promise<void>) so it can be awaited by PostToolUse handler
+        const result = posttool({
+            toolName: "bash",
+            toolInput: { command: "ls" },
+            outcome: { success: true },
+            cwd: "/tmp",
+            tenantId: "local",
+            scope: { kind: "global" },
+        });
+        expect(result).toBeInstanceOf(Promise);
+        await result; // await to let HTTP settle
+        expect(stub.calls.posttool).toHaveLength(1);
+        expect(stub.calls.posttool[0].tenantId).toBe("local");
+        expect(stub.calls.posttool[0].scope).toEqual({ kind: "global" });
+    });
+});
+describe("401 refresh path", () => {
+    let stub;
+    beforeEach(() => {
+        resetEEClientState();
+    });
+    afterEach(async () => {
+        if (stub)
+            await stub.stop();
+    });
+    it("retries once with refreshed token on 401", async () => {
+        let _callCount = 0;
+        stub = await startStubEEServer({
+            intercept: () => {
+                _callCount++;
+                // First call should be the retry after 401
+                return { decision: "allow", matches: [sampleMatch] };
+            },
+        });
+        // We need a custom intercept flow that handles 401.
+        // The 401 is surfaced by the client as reason='auth-required'.
+        // For this test, we'll mock the fetch to return 401 first, then succeed.
+        let fetchCallCount = 0;
+        const mockFetch = async (input, init) => {
+            fetchCallCount++;
+            if (fetchCallCount === 1) {
+                // First call: return 401
+                return new Response(JSON.stringify({ error: "unauthorized" }), {
+                    status: 401,
+                    headers: { "Content-Type": "application/json" },
+                });
+            }
+            // Subsequent calls: proxy to real stub
+            const url = typeof input === "string" ? input : input.url;
+            const stubUrl = url.replace(/http:\/\/[^/]+/, `http://127.0.0.1:${stub.port}`);
+            return fetch(stubUrl, init);
+        };
+        const client = createEEClient({
+            baseUrl: `http://127.0.0.1:${stub.port}`,
+            timeoutMs: 2000,
+            fetchImpl: mockFetch,
+        });
+        // Test that the client returns auth-required on 401
+        const resp = await client.intercept(baseReq);
+        expect(resp.reason).toBe("auth-required");
+    });
+});
+//# sourceMappingURL=intercept.test.js.map

package/dist/ee/intercept.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intercept.test.js","sourceRoot":"","sources":["../../src/ee/intercept.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAmB,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC3H,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,OAAO,GAAqB;IAChC,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;IAClC,GAAG,EAAE,MAAM;IACX,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;CAC1B,CAAC;AAEF,MAAM,WAAW,GAAmB;IAClC,cAAc,EAAE,YAAY;IAC5B,uBAAuB,EAAE,uBAAuB;IAChD,UAAU,EAAE,IAAI;IAChB,GAAG,EAAE,4BAA4B;IACjC,OAAO,EAAE,4BAA4B;IACrC,WAAW,EAAE,QAAQ;IACrB,eAAe,EAAE,sBAAsB;CACxC,CAAC;AAEF,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,SAAS,CAAC,GAAG,EAAE;QACb,sBAAsB,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,uBAAuB,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACrC,mCAAmC;QACnC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,sBAAsB,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,IAAgB,CAAC;IACrB,IAAI,QAAkB,CAAC;IAEvB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,GAAG,EAAE,CAAC;QACd,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,kBAAkB,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,IAAI,GAAG,MAAM,iBAAiB,CAAC;YAC7B,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;YACxC,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE3B,sDAAsD;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC1C,8BAA8B;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,IAAI,GAAG,MAAM,iBAAiB,CAAC;YAC7B,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,CAAC,WAAW,CAAC;aACvB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;YACxC,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE3B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,mDAAmD;QACnD,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,IAAI,GAAG,MAAM,iBAAiB,CAAC;YAC7B,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;YACxC,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE3B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QACnD,oFAAoF;QACpF,MAAM,MAAM,GAAG,QAAQ,CAAC;YACtB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC5B,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC1B,GAAG,EAAE,MAAM;YACX,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,CAAC,CAAC,2BAA2B;QAEzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,IAAgB,CAAC;IAErB,UAAU,CAAC,GAAG,EAAE;QACd,kBAAkB,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,GAAG,MAAM,iBAAiB,CAAC;YAC7B,SAAS,EAAE,GAAG,EAAE;gBACd,UAAU,EAAE,CAAC;gBACb,2CAA2C;gBAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,CAAC;SACF,CAAC,CAAC;QAEH,oDAAoD;QACpD,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,SAAS,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpD,cAAc,EAAE,CAAC;YACjB,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;gBACzB,yBAAyB;gBACzB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;oBAC7D,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAC;YACL,CAAC;YACD,uCAAuC;YACvC,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAAiB,CAAC,GAAG,CAAC;YACvE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,OAAO,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;YACxC,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/ee/judge.d.ts

@@ -0,0 +1,36 @@
+/**
+ * src/ee/judge.ts
+ *
+ * Deterministic auto-judge classifier (EE-09).
+ * Classifies every tool call as FOLLOWED | IGNORED | IRRELEVANT using
+ * deterministic rules — no LLM involved.
+ *
+ * fireFeedback() fires /api/feedback fire-and-forget per match, and
+ * /api/principle/touch on FOLLOWED matches (EE-10 decay refresh).
+ */
+import type { Classification, InterceptResponse, PostToolPayload } from "./types.js";
+export interface JudgeContext {
+    warningResponse: InterceptResponse | null;
+    toolName: string;
+    outcome: PostToolPayload["outcome"];
+    cwdMatchedAtPretool: boolean;
+    diffPresent: boolean;
+    tenantId: string;
+}
+/**
+ * Deterministic classification rules (from RESEARCH Auto-Judge Deterministic Rules):
+ *
+ * 1. No matches or cwd mismatch → IRRELEVANT
+ * 2. Outcome failed → IGNORED
+ * 3. Any match has expectedBehavior='should-not-edit' AND diff present → IGNORED
+ * 4. Otherwise → FOLLOWED
+ */
+export declare function judge(ctx: JudgeContext): Classification;
+/**
+ * Fire feedback for each match in the warning response.
+ * - Always calls /api/feedback per match (fire-and-forget).
+ * - On FOLLOWED, also calls /api/principle/touch per match (EE-10 decay refresh).
+ *
+ * B-4 invariant: returns void synchronously. All HTTP calls are fire-and-forget.
+ */
+export declare function fireFeedback(ctx: JudgeContext): void;

package/dist/ee/judge.js

@@ -0,0 +1,56 @@
+/**
+ * src/ee/judge.ts
+ *
+ * Deterministic auto-judge classifier (EE-09).
+ * Classifies every tool call as FOLLOWED | IGNORED | IRRELEVANT using
+ * deterministic rules — no LLM involved.
+ *
+ * fireFeedback() fires /api/feedback fire-and-forget per match, and
+ * /api/principle/touch on FOLLOWED matches (EE-10 decay refresh).
+ */
+import { getDefaultEEClient } from "./intercept.js";
+/**
+ * Deterministic classification rules (from RESEARCH Auto-Judge Deterministic Rules):
+ *
+ * 1. No matches or cwd mismatch → IRRELEVANT
+ * 2. Outcome failed → IGNORED
+ * 3. Any match has expectedBehavior='should-not-edit' AND diff present → IGNORED
+ * 4. Otherwise → FOLLOWED
+ */
+export function judge(ctx) {
+    if (!ctx.warningResponse?.matches?.length || !ctx.cwdMatchedAtPretool) {
+        return "IRRELEVANT";
+    }
+    if (!ctx.outcome.success) {
+        return "IGNORED";
+    }
+    if (ctx.warningResponse.matches.some((m) => m.expectedBehavior === "should-not-edit" && ctx.diffPresent)) {
+        return "IGNORED";
+    }
+    return "FOLLOWED";
+}
+/**
+ * Fire feedback for each match in the warning response.
+ * - Always calls /api/feedback per match (fire-and-forget).
+ * - On FOLLOWED, also calls /api/principle/touch per match (EE-10 decay refresh).
+ *
+ * B-4 invariant: returns void synchronously. All HTTP calls are fire-and-forget.
+ */
+export function fireFeedback(ctx) {
+    const cls = judge(ctx);
+    const matches = ctx.warningResponse?.matches ?? [];
+    const client = getDefaultEEClient();
+    for (const m of matches) {
+        client.feedback({
+            principle_uuid: m.principle_uuid,
+            classification: cls,
+            tool_name: ctx.toolName,
+            duration_ms: ctx.outcome.durationMs ?? 0,
+            tenantId: ctx.tenantId,
+        });
+        if (cls === "FOLLOWED") {
+            client.touch(m.principle_uuid, ctx.tenantId);
+        }
+    }
+}
+//# sourceMappingURL=judge.js.map

package/dist/ee/judge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge.js","sourceRoot":"","sources":["../../src/ee/judge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAYpD;;;;;;;GAOG;AACH,MAAM,UAAU,KAAK,CAAC,GAAiB;IACrC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACtE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,iBAAiB,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACzG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,GAAiB;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,EAAE,OAAO,IAAI,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC;YACd,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,cAAc,EAAE,GAAG;YACnB,SAAS,EAAE,GAAG,CAAC,QAAQ;YACvB,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC;YACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC,CAAC;QACH,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/ee/judge.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/ee/judge.test.js

@@ -0,0 +1,139 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { fireFeedback, judge } from "./judge.js";
+// Mock the intercept module to control getDefaultEEClient
+const mockFeedback = vi.fn();
+const mockTouch = vi.fn();
+vi.mock("./intercept.js", () => ({
+    getDefaultEEClient: () => ({
+        feedback: mockFeedback,
+        touch: mockTouch,
+    }),
+}));
+function makeMatch(overrides = {}) {
+    return {
+        principle_uuid: "P1",
+        embedding_model_version: "v1",
+        confidence: 0.9,
+        why: "test reason",
+        message: "test message",
+        scope_label: "global",
+        last_matched_at: new Date().toISOString(),
+        ...overrides,
+    };
+}
+function makeCtx(overrides = {}) {
+    return {
+        warningResponse: {
+            decision: "allow",
+            matches: [makeMatch()],
+        },
+        toolName: "Edit",
+        outcome: { success: true, durationMs: 50 },
+        cwdMatchedAtPretool: true,
+        diffPresent: false,
+        tenantId: "local",
+        ...overrides,
+    };
+}
+describe("judge() deterministic classifier", () => {
+    it("no warningResponse.matches returns IRRELEVANT", () => {
+        const ctx = makeCtx({ warningResponse: { decision: "allow" } });
+        expect(judge(ctx)).toBe("IRRELEVANT");
+    });
+    it("empty matches array returns IRRELEVANT", () => {
+        const ctx = makeCtx({
+            warningResponse: { decision: "allow", matches: [] },
+        });
+        expect(judge(ctx)).toBe("IRRELEVANT");
+    });
+    it("cwdMatchedAtPretool=false returns IRRELEVANT", () => {
+        const ctx = makeCtx({ cwdMatchedAtPretool: false });
+        expect(judge(ctx)).toBe("IRRELEVANT");
+    });
+    it("successful outcome with matches returns FOLLOWED", () => {
+        const ctx = makeCtx();
+        expect(judge(ctx)).toBe("FOLLOWED");
+    });
+    it("failed outcome with matches returns IGNORED", () => {
+        const ctx = makeCtx({
+            outcome: { success: false, durationMs: 10 },
+        });
+        expect(judge(ctx)).toBe("IGNORED");
+    });
+    it("expectedBehavior=should-not-edit AND diffPresent=true returns IGNORED even with success", () => {
+        const ctx = makeCtx({
+            warningResponse: {
+                decision: "allow",
+                matches: [makeMatch({ expectedBehavior: "should-not-edit" })],
+            },
+            diffPresent: true,
+        });
+        expect(judge(ctx)).toBe("IGNORED");
+    });
+    it("expectedBehavior=should-not-edit AND diffPresent=false returns FOLLOWED", () => {
+        const ctx = makeCtx({
+            warningResponse: {
+                decision: "allow",
+                matches: [makeMatch({ expectedBehavior: "should-not-edit" })],
+            },
+            diffPresent: false,
+        });
+        expect(judge(ctx)).toBe("FOLLOWED");
+    });
+    it("null warningResponse returns IRRELEVANT", () => {
+        const ctx = makeCtx({ warningResponse: null });
+        expect(judge(ctx)).toBe("IRRELEVANT");
+    });
+});
+describe("fireFeedback()", () => {
+    beforeEach(() => {
+        mockFeedback.mockClear();
+        mockTouch.mockClear();
+    });
+    it("FOLLOWED: calls feedback() once per match AND touch() once per match", () => {
+        const ctx = makeCtx({
+            warningResponse: {
+                decision: "allow",
+                matches: [makeMatch({ principle_uuid: "P1" })],
+            },
+        });
+        fireFeedback(ctx);
+        expect(mockFeedback).toHaveBeenCalledOnce();
+        expect(mockFeedback).toHaveBeenCalledWith(expect.objectContaining({
+            principle_uuid: "P1",
+            classification: "FOLLOWED",
+            tool_name: "Edit",
+        }));
+        expect(mockTouch).toHaveBeenCalledOnce();
+        expect(mockTouch).toHaveBeenCalledWith("P1", "local");
+    });
+    it("IGNORED: calls feedback() but NOT touch()", () => {
+        const ctx = makeCtx({
+            outcome: { success: false, durationMs: 10 },
+        });
+        fireFeedback(ctx);
+        expect(mockFeedback).toHaveBeenCalledOnce();
+        expect(mockFeedback).toHaveBeenCalledWith(expect.objectContaining({ classification: "IGNORED" }));
+        expect(mockTouch).not.toHaveBeenCalled();
+    });
+    it("IRRELEVANT (no matches): does not call feedback or touch", () => {
+        const ctx = makeCtx({ warningResponse: null });
+        fireFeedback(ctx);
+        expect(mockFeedback).not.toHaveBeenCalled();
+        expect(mockTouch).not.toHaveBeenCalled();
+    });
+    it("multiple matches: calls feedback and touch for each", () => {
+        const ctx = makeCtx({
+            warningResponse: {
+                decision: "allow",
+                matches: [makeMatch({ principle_uuid: "P1" }), makeMatch({ principle_uuid: "P2" })],
+            },
+        });
+        fireFeedback(ctx);
+        expect(mockFeedback).toHaveBeenCalledTimes(2);
+        expect(mockTouch).toHaveBeenCalledTimes(2);
+        expect(mockTouch).toHaveBeenCalledWith("P1", "local");
+        expect(mockTouch).toHaveBeenCalledWith("P2", "local");
+    });
+});
+//# sourceMappingURL=judge.test.js.map

package/dist/ee/judge.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge.test.js","sourceRoot":"","sources":["../../src/ee/judge.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAqB,KAAK,EAAE,MAAM,YAAY,CAAC;AAGpE,0DAA0D;AAC1D,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC7B,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QACzB,QAAQ,EAAE,YAAY;QACtB,KAAK,EAAE,SAAS;KACjB,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,SAAS,SAAS,CAAC,YAAqC,EAAE;IACxD,OAAO;QACL,cAAc,EAAE,IAAI;QACpB,uBAAuB,EAAE,IAAI;QAC7B,UAAU,EAAE,GAAG;QACf,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,QAAQ;QACrB,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACzC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,YAAmC,EAAE;IACpD,OAAO;QACL,eAAe,EAAE;YACf,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,CAAC,SAAS,EAAE,CAAC;SACvB;QACD,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;QAC1C,mBAAmB,EAAE,IAAI;QACzB,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,OAAO;QACjB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,eAAe,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,eAAe,EAAE;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC;aAC9D;YACD,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,eAAe,EAAE;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC;aAC9D;YACD,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,YAAY,CAAC,SAAS,EAAE,CAAC;QACzB,SAAS,CAAC,SAAS,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,eAAe,EAAE;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;aAC/C;SACF,CAAC,CAAC;QACH,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC5C,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,CAAC,gBAAgB,CAAC;YACtB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,UAAU;YAC1B,SAAS,EAAE,MAAM;SAClB,CAAC,CACH,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE;SAC5C,CAAC,CAAC;QACH,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC5C,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAClG,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,eAAe,EAAE;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;aACpF;SACF,CAAC,CAAC;QACH,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/ee/offline-queue.d.ts

@@ -0,0 +1,37 @@
+/** Queue entry shape — self-contained, no external type deps. */
+export interface QueueEntry {
+    endpoint: string;
+    body: unknown;
+    enqueuedAt: number;
+}
+/**
+ * Returns the absolute path to the offline queue directory.
+ * Consistent with auth.ts homeOverride pattern.
+ */
+export declare function getQueueDir(homeOverride?: string): string;
+/**
+ * Persists a failed EE request to the local queue.
+ *
+ * Creates queue directory lazily (D-11).
+ * Enforces MAX_QUEUE_SIZE cap by deleting oldest entry (D-04).
+ */
+export declare function enqueue(entry: QueueEntry, homeOverride?: string): Promise<void>;
+/**
+ * Replays queued EE requests in FIFO order.
+ *
+ * Fire-and-forget wrapper (D-08) — returns void immediately.
+ * The caller (recordCircuitSuccess in client.ts) must NOT await this.
+ *
+ * @param fetchImpl - fetch implementation (injectable for tests)
+ * @param headers   - HTTP headers to include (Content-Type + optional auth)
+ * @param baseUrl   - EE base URL (e.g. "http://localhost:8082")
+ * @param homeOverride - Optional home dir override (for tests)
+ */
+export declare function drainQueue(fetchImpl: typeof fetch, headers: Record<string, string>, baseUrl: string, homeOverride?: string): void;
+/**
+ * Awaitable version of drainQueue — for tests only.
+ *
+ * Production code must use drainQueue() (void).
+ * Tests use drainQueueAsync() to await completion before asserting.
+ */
+export declare function drainQueueAsync(fetchImpl: typeof fetch, headers: Record<string, string>, baseUrl: string, homeOverride?: string): Promise<void>;

package/dist/ee/offline-queue.js

@@ -0,0 +1,163 @@
+/**
+ * Offline queue module for Experience Engine write operations.
+ *
+ * Persists failed EE requests (feedback, extract, prompt-stale) to disk so they
+ * survive process restarts and are replayed when EE recovers.
+ *
+ * Design decisions (from CONTEXT.md):
+ *  - D-01: One JSON file per entry in ~/.muonroi-cli/ee-offline-queue/
+ *  - D-02: Timestamp-based filenames for natural FIFO ordering
+ *  - D-03: Each entry stores endpoint, body, enqueuedAt
+ *  - D-04: Cap at 100 entries; oldest deleted before writing new
+ *  - D-08: drainQueue() is fire-and-forget (returns void)
+ *  - D-11: Queue directory created lazily on first enqueue
+ *
+ * NO imports from client.ts or intercept.ts (prevents circular deps).
+ * fetchImpl and headers are passed as parameters.
+ */
+import { promises as fs } from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+// ─── Constants ────────────────────────────────────────────────────────────────
+const MAX_QUEUE_SIZE = 100;
+const QUEUE_DIR_NAME = "ee-offline-queue";
+// ─── Path helpers ─────────────────────────────────────────────────────────────
+/**
+ * Returns the absolute path to the offline queue directory.
+ * Consistent with auth.ts homeOverride pattern.
+ */
+export function getQueueDir(homeOverride) {
+    return path.join(homeOverride ?? os.homedir(), ".muonroi-cli", QUEUE_DIR_NAME);
+}
+// ─── Internal helpers ─────────────────────────────────────────────────────────
+/**
+ * Generate a unique filename for a new queue entry.
+ * Format: `{Date.now()}-{random4}.json` (D-02)
+ * The timestamp prefix ensures natural FIFO ordering on readdir + sort.
+ */
+function makeFilename() {
+    const ts = Date.now();
+    const rnd = Math.random().toString(36).slice(2, 6);
+    return `${ts}-${rnd}.json`;
+}
+/**
+ * Returns sorted list of .json filenames in the queue directory.
+ * Lexicographic sort on timestamp-prefixed names = chronological FIFO order.
+ *
+ * Throws ENOENT if directory does not exist — callers handle this.
+ */
+async function getSortedFiles(dir) {
+    const entries = await fs.readdir(dir);
+    return entries.filter((f) => f.endsWith(".json")).sort();
+}
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Persists a failed EE request to the local queue.
+ *
+ * Creates queue directory lazily (D-11).
+ * Enforces MAX_QUEUE_SIZE cap by deleting oldest entry (D-04).
+ */
+export async function enqueue(entry, homeOverride) {
+    const dir = getQueueDir(homeOverride);
+    // D-11: lazy init — create dir only when needed
+    await fs.mkdir(dir, { recursive: true });
+    const files = await getSortedFiles(dir);
+    // D-04: cap enforcement — drop oldest before writing new
+    if (files.length >= MAX_QUEUE_SIZE) {
+        await fs.unlink(path.join(dir, files[0])).catch(() => {
+            /* ignore if already gone */
+        });
+    }
+    const filename = makeFilename();
+    await fs.writeFile(path.join(dir, filename), JSON.stringify(entry), "utf8");
+    if (process.env.MUONROI_DEBUG) {
+        console.debug("[muonroi-cli] EE offline queue: enqueued %s (cap=%d)", entry.endpoint, MAX_QUEUE_SIZE);
+    }
+}
+/**
+ * Internal async implementation shared by drainQueue (fire-and-forget)
+ * and drainQueueAsync (awaitable, for tests).
+ *
+ * Sequential replay (D-06):
+ *  - Reads sorted queue files in FIFO order
+ *  - POSTs each entry to baseUrl + entry.endpoint
+ *  - Deletes file on HTTP success (resp.ok)
+ *  - Discards corrupt (unparseable) files silently
+ *  - Stops on HTTP failure or network error (D-07) — leaves file + remaining
+ *
+ * D-11: If queue directory doesn't exist yet, returns early (no error).
+ */
+async function drainQueueInternal(fetchImpl, headers, baseUrl, homeOverride) {
+    const dir = getQueueDir(homeOverride);
+    let files;
+    try {
+        files = await getSortedFiles(dir);
+    }
+    catch {
+        // ENOENT — queue dir never created (no entries ever queued). Normal path.
+        return;
+    }
+    for (const file of files) {
+        const filePath = path.join(dir, file);
+        // Parse entry — discard corrupt files
+        let entry;
+        try {
+            const raw = await fs.readFile(filePath, "utf8");
+            entry = JSON.parse(raw);
+        }
+        catch {
+            // Corrupt JSON — delete silently and continue
+            await fs.unlink(filePath).catch(() => { });
+            continue;
+        }
+        // Replay the entry
+        try {
+            const resp = await fetchImpl(`${baseUrl}${entry.endpoint}`, {
+                method: "POST",
+                headers,
+                body: JSON.stringify(entry.body),
+                signal: AbortSignal.timeout(5000),
+            });
+            if (resp.ok) {
+                // Success — delete file and continue to next
+                await fs.unlink(filePath).catch(() => { });
+                if (process.env.MUONROI_DEBUG) {
+                    console.debug("[muonroi-cli] EE offline queue: replayed %s", entry.endpoint);
+                }
+            }
+            else {
+                // D-07: server returned error — stop drain, leave file + remaining
+                break;
+            }
+        }
+        catch {
+            // D-07: network failure — stop drain, leave file + remaining
+            break;
+        }
+    }
+}
+/**
+ * Replays queued EE requests in FIFO order.
+ *
+ * Fire-and-forget wrapper (D-08) — returns void immediately.
+ * The caller (recordCircuitSuccess in client.ts) must NOT await this.
+ *
+ * @param fetchImpl - fetch implementation (injectable for tests)
+ * @param headers   - HTTP headers to include (Content-Type + optional auth)
+ * @param baseUrl   - EE base URL (e.g. "http://localhost:8082")
+ * @param homeOverride - Optional home dir override (for tests)
+ */
+export function drainQueue(fetchImpl, headers, baseUrl, homeOverride) {
+    // D-08: fire-and-forget — the returned Promise is intentionally not awaited
+    void drainQueueInternal(fetchImpl, headers, baseUrl, homeOverride);
+}
+/**
+ * Awaitable version of drainQueue — for tests only.
+ *
+ * Production code must use drainQueue() (void).
+ * Tests use drainQueueAsync() to await completion before asserting.
+ */
+export async function drainQueueAsync(fetchImpl, headers, baseUrl, homeOverride) {
+    await drainQueueInternal(fetchImpl, headers, baseUrl, homeOverride);
+}
+//# sourceMappingURL=offline-queue.js.map

package/dist/ee/offline-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"offline-queue.js","sourceRoot":"","sources":["../../src/ee/offline-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,iFAAiF;AAEjF,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAW1C,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,YAAqB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AACjF,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,SAAS,YAAY;IACnB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAiB,EAAE,YAAqB;IACpE,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAEtC,gDAAgD;IAChD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAExC,yDAAyD;IACzD,IAAI,KAAK,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACnD,4BAA4B;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAE5E,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CACX,sDAAsD,EACtD,KAAK,CAAC,QAAQ,EACd,cAAc,CACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,kBAAkB,CAC/B,SAAuB,EACvB,OAA+B,EAC/B,OAAe,EACf,YAAqB;IAErB,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAEtC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO;IACT,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEtC,sCAAsC;QACtC,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;YAC9C,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE;gBAC1D,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;gBAChC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACZ,6CAA6C;gBAC7C,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAE1C,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CACX,6CAA6C,EAC7C,KAAK,CAAC,QAAQ,CACf,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,MAAM;QACR,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CACxB,SAAuB,EACvB,OAA+B,EAC/B,OAAe,EACf,YAAqB;IAErB,4EAA4E;IAC5E,KAAK,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAuB,EACvB,OAA+B,EAC/B,OAAe,EACf,YAAqB;IAErB,MAAM,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AACtE,CAAC"}

package/dist/ee/offline-queue.test.d.ts

@@ -0,0 +1 @@
+export {};