muonroi-cli 1.2.3 → 1.3.1

package/dist/ee/extract-session.test.js

@@ -1,197 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { createEEClient } from "./client.js";
-import { setDefaultEEClient } from "./intercept.js";
-import { startStubEEServer } from "../__test-stubs__/ee-server.js";
-import { buildExtractTranscript, extractSession } from "./extract-session.js";
-// ─── Helpers ──────────────────────────────────────────────────────────────────
-function makeUserMsg(text) {
-    return { role: "user", content: [{ type: "text", text }] };
-}
-function makeAssistantMsg(text) {
-    return { role: "assistant", content: [{ type: "text", text }] };
-}
-function makeToolResultMsg(result) {
-    return {
-        role: "tool",
-        content: [{ type: "tool-result", toolCallId: "x", output: result }],
-    };
-}
-function fiveUserMessages() {
-    return [
-        makeUserMsg("msg 1"),
-        makeAssistantMsg("reply 1"),
-        makeUserMsg("msg 2"),
-        makeAssistantMsg("reply 2"),
-        makeUserMsg("msg 3"),
-        makeAssistantMsg("reply 3"),
-        makeUserMsg("msg 4"),
-        makeAssistantMsg("reply 4"),
-        makeUserMsg("msg 5"),
-        makeAssistantMsg("reply 5"),
-    ];
-}
-// ─── Mocked client ────────────────────────────────────────────────────────────
-describe("extractSession — unit (mocked client)", () => {
-    const mockExtract = vi.fn().mockResolvedValue({ ok: true, mistakes: 0 });
-    const mockClient = {
-        extract: mockExtract,
-        health: vi.fn(),
-        intercept: vi.fn(),
-        posttool: vi.fn(),
-        routeModel: vi.fn(),
-        coldRoute: vi.fn(),
-        feedback: vi.fn(),
-        touch: vi.fn(),
-        routeFeedback: vi.fn(),
-        promptStale: vi.fn(),
-        stats: vi.fn(),
-        graph: vi.fn(),
-        timeline: vi.fn(),
-        gates: vi.fn(),
-        evolve: vi.fn(),
-        sharePrinciple: vi.fn(),
-        importPrinciple: vi.fn(),
-        routeTask: vi.fn(),
-        search: vi.fn(),
-        user: vi.fn(),
-    };
-    beforeEach(() => {
-        vi.clearAllMocks();
-        setDefaultEEClient(mockClient);
-    });
-    afterEach(() => {
-        // Reset to null so other tests use real client
-        setDefaultEEClient(null);
-    });
-    // Test 1: fewer than 5 user messages → skip
-    it("Test 1: returns immediately when < 5 user messages", async () => {
-        const messages = [
-            makeUserMsg("a"),
-            makeAssistantMsg("b"),
-            makeUserMsg("c"),
-            makeAssistantMsg("d"),
-        ];
-        await extractSession(messages, "/proj", "cli-exit");
-        expect(mockExtract).not.toHaveBeenCalled();
-    });
-    // Test 2: exactly 4 user messages mixed with other roles → skip
-    it("Test 2: skips with exactly 4 user messages mixed with assistant/tool", async () => {
-        const messages = [
-            makeUserMsg("u1"),
-            makeAssistantMsg("a1"),
-            makeToolResultMsg("result1"),
-            makeUserMsg("u2"),
-            makeAssistantMsg("a2"),
-            makeUserMsg("u3"),
-            makeAssistantMsg("a3"),
-            makeUserMsg("u4"),
-        ];
-        await extractSession(messages, "/proj", "cli-exit");
-        expect(mockExtract).not.toHaveBeenCalled();
-    });
-    // Test 3: 5+ user messages → call extract
-    it("Test 3: calls client.extract() when >= 5 user messages", async () => {
-        await extractSession(fiveUserMessages(), "/proj", "cli-exit");
-        expect(mockExtract).toHaveBeenCalledOnce();
-    });
-    // Test 4: passes compacted transcript (string) not raw messages
-    it("Test 4: passes compacted transcript string to extract", async () => {
-        await extractSession(fiveUserMessages(), "/proj", "cli-exit");
-        const call = mockExtract.mock.calls[0];
-        expect(typeof call[0].transcript).toBe("string");
-        expect(call[0].transcript.length).toBeGreaterThan(0);
-        // Should be serialized text format (e.g. "[User]: ..."), NOT a JSON array string like '[{"role":...'
-        expect(call[0].transcript).not.toMatch(/^\[\{"role"/);
-    });
-    // Test 5: passes AbortSignal.timeout(2000) as second arg
-    it("Test 5: passes AbortSignal.timeout(2000) to client.extract()", async () => {
-        await extractSession(fiveUserMessages(), "/proj", "cli-exit");
-        const call = mockExtract.mock.calls[0];
-        const signal = call[1];
-        expect(signal).toBeInstanceOf(AbortSignal);
-        // The signal should not be aborted immediately (we have 2s budget)
-        expect(signal.aborted).toBe(false);
-    });
-    // Test 6: passes correct meta.source
-    it("Test 6a: passes meta.source='cli-exit' correctly", async () => {
-        await extractSession(fiveUserMessages(), "/proj", "cli-exit");
-        expect(mockExtract.mock.calls[0][0].meta?.source).toBe("cli-exit");
-    });
-    it("Test 6b: passes meta.source='cli-clear' correctly", async () => {
-        await extractSession(fiveUserMessages(), "/proj", "cli-clear");
-        expect(mockExtract.mock.calls[0][0].meta?.source).toBe("cli-clear");
-    });
-    // Test 7: swallows errors — never throws
-    it("Test 7: swallows errors from client.extract() and never throws", async () => {
-        mockExtract.mockRejectedValueOnce(new Error("EE server down"));
-        await expect(extractSession(fiveUserMessages(), "/proj", "cli-exit")).resolves.toBeUndefined();
-    });
-    // Test 10: resumed session (3 prior + 3 new = 6 total) triggers extraction (D-07)
-    it("Test 10: resumed session with 6 total user msgs triggers extraction", async () => {
-        // Simulate: 3 prior session user msgs + 3 new session user msgs = 6 total
-        const messages = [
-            makeUserMsg("prior 1"),
-            makeAssistantMsg("prior reply 1"),
-            makeUserMsg("prior 2"),
-            makeAssistantMsg("prior reply 2"),
-            makeUserMsg("prior 3"),
-            makeAssistantMsg("prior reply 3"),
-            makeUserMsg("new 1"),
-            makeAssistantMsg("new reply 1"),
-            makeUserMsg("new 2"),
-            makeAssistantMsg("new reply 2"),
-            makeUserMsg("new 3"),
-            makeAssistantMsg("new reply 3"),
-        ];
-        await extractSession(messages, "/proj", "cli-exit", "session-123");
-        expect(mockExtract).toHaveBeenCalledOnce();
-        expect(mockExtract.mock.calls[0][0].meta?.sessionId).toBe("session-123");
-    });
-});
-// ─── buildExtractTranscript unit tests ───────────────────────────────────────
-describe("buildExtractTranscript", () => {
-    // Test 8: truncates tool result bodies > 500 chars
-    it("Test 8: truncates tool result bodies longer than 500 chars", () => {
-        const longResult = "x".repeat(1000);
-        const messages = [
-            makeUserMsg("question"),
-            makeAssistantMsg("answer"),
-            makeToolResultMsg(longResult),
-        ];
-        const output = buildExtractTranscript(messages);
-        expect(output).toContain("[truncated]");
-        // The output should be shorter than the raw concatenation would be
-        expect(output.length).toBeLessThan(longResult.length + 200);
-    });
-    it("does not truncate tool results <= 500 chars", () => {
-        const shortResult = "y".repeat(499);
-        const messages = [
-            makeUserMsg("question"),
-            makeAssistantMsg("answer"),
-            makeToolResultMsg(shortResult),
-        ];
-        const output = buildExtractTranscript(messages);
-        expect(output).not.toContain("[truncated]");
-    });
-});
-// ─── Integration test (real stub server) ─────────────────────────────────────
-describe("extractSession — integration (real stub server)", () => {
-    it("Test 9: completes within 2s against stub with 3s latency (D-04)", async () => {
-        // Start stub with 3s artificial latency
-        const stub = await startStubEEServer({ latencyMs: 3000 });
-        const client = createEEClient({ baseUrl: `http://127.0.0.1:${stub.port}` });
-        setDefaultEEClient(client);
-        try {
-            const start = Date.now();
-            await extractSession(fiveUserMessages(), "/proj", "cli-exit");
-            const elapsed = Date.now() - start;
-            // AbortSignal.timeout(2000) fires, error is swallowed, function returns
-            expect(elapsed).toBeLessThan(2500);
-        }
-        finally {
-            setDefaultEEClient(null);
-            await stub.stop();
-        }
-    });
-});
-//# sourceMappingURL=extract-session.test.js.map

package/dist/ee/extract-session.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extract-session.test.js","sourceRoot":"","sources":["../../src/ee/extract-session.test.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE9E,iFAAiF;AAEjF,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAA6B,CAAC;AACxF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAA6B,CAAC;AAC7F,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KACzC,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,WAAW,CAAC,OAAO,CAAC;QACpB,gBAAgB,CAAC,SAAS,CAAC;QAC3B,WAAW,CAAC,OAAO,CAAC;QACpB,gBAAgB,CAAC,SAAS,CAAC;QAC3B,WAAW,CAAC,OAAO,CAAC;QACpB,gBAAgB,CAAC,SAAS,CAAC;QAC3B,WAAW,CAAC,OAAO,CAAC;QACpB,gBAAgB,CAAC,SAAS,CAAC;QAC3B,WAAW,CAAC,OAAO,CAAC;QACpB,gBAAgB,CAAC,SAAS,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;QACnB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;QACtB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;QACpB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;QACvB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;QACxB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;KACP,CAAC;IAET,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,+CAA+C;QAC/C,kBAAkB,CAAC,IAAW,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,4CAA4C;IAC5C,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,QAAQ,GAAmB;YAC/B,WAAW,CAAC,GAAG,CAAC;YAChB,gBAAgB,CAAC,GAAG,CAAC;YACrB,WAAW,CAAC,GAAG,CAAC;YAChB,gBAAgB,CAAC,GAAG,CAAC;SACtB,CAAC;QACF,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,QAAQ,GAAmB;YAC/B,WAAW,CAAC,IAAI,CAAC;YACjB,gBAAgB,CAAC,IAAI,CAAC;YACtB,iBAAiB,CAAC,SAAS,CAAC;YAC5B,WAAW,CAAC,IAAI,CAAC;YACjB,gBAAgB,CAAC,IAAI,CAAC;YACtB,WAAW,CAAC,IAAI,CAAC;YACjB,gBAAgB,CAAC,IAAI,CAAC;YACtB,WAAW,CAAC,IAAI,CAAC;SAClB,CAAC;QACF,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,0CAA0C;IAC1C,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,cAAc,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,cAAc,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACrD,qGAAqG;QACrG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,yDAAyD;IACzD,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,cAAc,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAgB,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC3C,mEAAmE;QACnE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,cAAc,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,cAAc,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/D,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,WAAW,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,CAAC,cAAc,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,kFAAkF;IAClF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,0EAA0E;QAC1E,MAAM,QAAQ,GAAmB;YAC/B,WAAW,CAAC,SAAS,CAAC;YACtB,gBAAgB,CAAC,eAAe,CAAC;YACjC,WAAW,CAAC,SAAS,CAAC;YACtB,gBAAgB,CAAC,eAAe,CAAC;YACjC,WAAW,CAAC,SAAS,CAAC;YACtB,gBAAgB,CAAC,eAAe,CAAC;YACjC,WAAW,CAAC,OAAO,CAAC;YACpB,gBAAgB,CAAC,aAAa,CAAC;YAC/B,WAAW,CAAC,OAAO,CAAC;YACpB,gBAAgB,CAAC,aAAa,CAAC;YAC/B,WAAW,CAAC,OAAO,CAAC;YACpB,gBAAgB,CAAC,aAAa,CAAC;SAChC,CAAC;QACF,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC3C,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,mDAAmD;IACnD,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAmB;YAC/B,WAAW,CAAC,UAAU,CAAC;YACvB,gBAAgB,CAAC,QAAQ,CAAC;YAC1B,iBAAiB,CAAC,UAAU,CAAC;SAC9B,CAAC;QACF,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACxC,mEAAmE;QACnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAmB;YAC/B,WAAW,CAAC,UAAU,CAAC;YACvB,gBAAgB,CAAC,QAAQ,CAAC;YAC1B,iBAAiB,CAAC,WAAW,CAAC;SAC/B,CAAC;QACF,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,wCAAwC;QACxC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,kBAAkB,CAAC,MAAa,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,cAAc,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAEnC,wEAAwE;YACxE,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,kBAAkB,CAAC,IAAW,CAAC,CAAC;YAChC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/ee/health.js

@@ -1,64 +0,0 @@
-import { getCachedAuthToken, getCachedServerBaseUrl } from "./auth.js";
-import { getDefaultEEClient } from "./intercept.js";
-import { getCircuitState } from "./client.js";
-const HEALTH_TIMEOUT_MS = 3000;
-/**
- * Simple health check — backwards compatible.
- */
-export async function health() {
-    return getDefaultEEClient().health();
-}
-/**
- * Detailed health check that respects thin-client mode.
- * For thin-client: checks VPS /health AND /api/gates (matching health-check.sh reference).
- * For local: checks localhost /health.
- */
-export async function healthDetailed() {
-    const serverBaseUrl = getCachedServerBaseUrl();
-    const authToken = getCachedAuthToken();
-    const circuit = getCircuitState();
-    const mode = serverBaseUrl ? "thin-client" : "local";
-    if (mode === "thin-client" && serverBaseUrl) {
-        const [serverResult, gatesResult] = await Promise.all([
-            checkEndpoint(serverBaseUrl, "/health"),
-            checkEndpoint(serverBaseUrl, "/api/gates", authToken),
-        ]);
-        return {
-            ok: serverResult.ok && gatesResult.ok,
-            status: serverResult.status,
-            mode,
-            circuit,
-            components: {
-                server: serverResult,
-                gates: gatesResult,
-            },
-        };
-    }
-    const serverResult = await getDefaultEEClient().health();
-    return {
-        ok: serverResult.ok,
-        status: serverResult.status,
-        mode,
-        circuit,
-        components: {
-            server: serverResult,
-            gates: null,
-        },
-    };
-}
-async function checkEndpoint(baseUrl, path, token) {
-    try {
-        const headers = {};
-        if (token)
-            headers.Authorization = `Bearer ${token}`;
-        const resp = await fetch(`${baseUrl}${path}`, {
-            headers,
-            signal: AbortSignal.timeout(HEALTH_TIMEOUT_MS),
-        });
-        return { ok: resp.ok, status: resp.status };
-    }
-    catch {
-        return { ok: false, status: 0 };
-    }
-}
-//# sourceMappingURL=health.js.map

package/dist/ee/health.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/ee/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAa9C,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,OAAO,kBAAkB,EAAE,CAAC,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,aAAa,GAAG,sBAAsB,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;IAErD,IAAI,IAAI,KAAK,aAAa,IAAI,aAAa,EAAE,CAAC;QAC5C,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC;YACvC,aAAa,CAAC,aAAa,EAAE,YAAY,EAAE,SAAS,CAAC;SACtD,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,YAAY,CAAC,EAAE,IAAI,WAAW,CAAC,EAAE;YACrC,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,IAAI;YACJ,OAAO;YACP,UAAU,EAAE;gBACV,MAAM,EAAE,YAAY;gBACpB,KAAK,EAAE,WAAW;aACnB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,kBAAkB,EAAE,CAAC,MAAM,EAAE,CAAC;IACzD,OAAO;QACL,EAAE,EAAE,YAAY,CAAC,EAAE;QACnB,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,IAAI;QACJ,OAAO;QACP,UAAU,EAAE;YACV,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,IAAI;SACZ;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,IAAY,EACZ,KAAqB;IAErB,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;YAC5C,OAAO;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC;SAC/C,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/ee/index.d.ts

@@ -1,10 +0,0 @@
-export { getCachedAuthToken, getEmbeddingModelVersion, loadEEAuthToken, refreshAuthToken } from "./auth.js";
-export { type CreateEEClientOpts, createEEClient } from "./client.js";
-export { health, healthDetailed, type EEHealthResult } from "./health.js";
-export { bootstrapEEClient, getDefaultEEClient, intercept, interceptWithDefaults, setDefaultEEClient, } from "./intercept.js";
-export { posttool } from "./posttool.js";
-export { emitMatches, getRenderSink, renderInterceptWarning, setRenderSink } from "./render.js";
-export { buildScope, resetScopeCache, scopeLabel } from "./scope.js";
-export type { Classification, EEClient, FeedbackPayload, InterceptMatch, InterceptRequest, InterceptResponse, PostToolPayload, Scope, } from "./types.js";
-export { classifyViaBrain, getEmbeddingRaw, resetBridge, routeFeedback, routeModel, searchCollection, } from "./bridge.js";
-export type { EEPoint, EERouteResult } from "./bridge.js";

package/dist/ee/index.js

@@ -1,9 +0,0 @@
-export { getCachedAuthToken, getEmbeddingModelVersion, loadEEAuthToken, refreshAuthToken } from "./auth.js";
-export { createEEClient } from "./client.js";
-export { health, healthDetailed } from "./health.js";
-export { bootstrapEEClient, getDefaultEEClient, intercept, interceptWithDefaults, setDefaultEEClient, } from "./intercept.js";
-export { posttool } from "./posttool.js";
-export { emitMatches, getRenderSink, renderInterceptWarning, setRenderSink } from "./render.js";
-export { buildScope, resetScopeCache, scopeLabel } from "./scope.js";
-export { classifyViaBrain, getEmbeddingRaw, resetBridge, routeFeedback, routeModel, searchCollection, } from "./bridge.js";
-//# sourceMappingURL=index.js.map

package/dist/ee/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ee/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC5G,OAAO,EAA2B,cAAc,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAC;AAC1E,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,SAAS,EACT,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAWrE,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,aAAa,EACb,UAAU,EACV,gBAAgB,GACjB,MAAM,aAAa,CAAC"}

package/dist/ee/intercept.js

@@ -1,117 +0,0 @@
-import { getCachedAuthToken, getCachedServerBaseUrl, loadEEAuthToken, refreshAuthToken } from "./auth.js";
-import { getTenantId } from "./tenant.js";
-import { createEEClient } from "./client.js";
-import { emitMatches } from "./render.js";
-import { buildScope } from "./scope.js";
-// ─── Surfaced-state tracking for prompt-stale reconciliation ─────────────────
-let _lastSurfacedIds = [];
-let _lastSurfacedTimestamp = null;
-/**
- * Returns the last surfaced suggestion IDs and timestamp from the most recent
- * intercept call that returned matches. Used by prompt-stale reconciliation
- * callers (compact, clear, session-end).
- */
-export function getLastSurfacedState() {
-    return {
-        surfacedIds: [..._lastSurfacedIds],
-        timestamp: _lastSurfacedTimestamp ?? new Date().toISOString(),
-    };
-}
-/**
- * Allows non-HTTP code paths (e.g. PIL Layer 3 bridge search) to register
- * point IDs they injected into the prompt. These IDs join the HTTP-intercept
- * surfaced IDs for prompt-stale reconciliation.
- */
-export function updateLastSurfacedState(ids) {
-    if (ids.length === 0)
-        return;
-    _lastSurfacedIds = [...ids];
-    _lastSurfacedTimestamp = new Date().toISOString();
-}
-/**
- * Resets surfaced state to empty. Called after prompt-stale reconciliation
- * dispatches so the same IDs are not re-reported on the next turn.
- */
-export function resetLastSurfacedState() {
-    _lastSurfacedIds = [];
-    _lastSurfacedTimestamp = null;
-}
-/**
- * Module-level default EE client instance (lazy-initialized on first use).
- * Use setDefaultEEClient() to inject a custom client (e.g. in tests or at boot
- * after loading auth token from config).
- */
-let _defaultClient = null;
-export function setDefaultEEClient(c) {
-    _defaultClient = c;
-}
-export function getDefaultEEClient() {
-    if (!_defaultClient)
-        _defaultClient = createEEClient({
-            baseUrl: getCachedServerBaseUrl() ?? undefined,
-            authToken: getCachedAuthToken() ?? undefined,
-        });
-    return _defaultClient;
-}
-/**
- * Call the EE intercept endpoint using the default client.
- * Blocks until a decision is received or the timeout elapses (falls back to allow).
- *
- * Phase 1: requires tenantId + scope explicitly.
- * - On 401 (surfaced as reason='auth-required'): refreshes token, rebuilds client, retries once.
- * - On allow + matches[]: emits rendered ⚠ lines via render sink.
- */
-export async function intercept(req, opts) {
-    const client = opts ? createEEClient(opts) : getDefaultEEClient();
-    let resp = await client.intercept(req);
-    // 401 refresh path: client surfaces 401 as { decision: 'allow', reason: 'auth-required' }
-    if (resp.reason === "auth-required") {
-        await refreshAuthToken();
-        _defaultClient = createEEClient({
-            authToken: getCachedAuthToken() ?? undefined,
-        });
-        resp = await getDefaultEEClient().intercept(req);
-    }
-    // Emit rendered warnings for allow + matches
-    if (resp.decision === "allow" && resp.matches) {
-        emitMatches(resp.matches);
-    }
-    // Track surfaced IDs for prompt-stale reconciliation
-    if (resp.surfacedIds && resp.surfacedIds.length > 0) {
-        _lastSurfacedIds = [...resp.surfacedIds];
-        _lastSurfacedTimestamp = new Date().toISOString();
-    }
-    else if (resp.matches && resp.matches.length > 0) {
-        _lastSurfacedIds = resp.matches.map((m) => m.principle_uuid);
-        _lastSurfacedTimestamp = new Date().toISOString();
-    }
-    return resp;
-}
-/**
- * @deprecated — pass tenantId + scope explicitly. This helper fills defaults
- * for Phase 0 callers that haven't been migrated yet.
- *
- * Fills tenantId='local' and scope (computed via buildScope({ cwd })) when omitted.
- */
-export async function interceptWithDefaults(req) {
-    const tenantId = req.tenantId ?? getTenantId();
-    const scope = req.scope ?? (await buildScope({ cwd: req.cwd }));
-    return intercept({
-        toolName: req.toolName,
-        toolInput: req.toolInput,
-        cwd: req.cwd,
-        tenantId,
-        scope,
-    });
-}
-/**
- * Bootstrap the EE client with auth token from ~/.experience/config.json.
- * Called once at session boot.
- */
-export async function bootstrapEEClient(home) {
-    await loadEEAuthToken({ home });
-    _defaultClient = createEEClient({
-        authToken: getCachedAuthToken() ?? undefined,
-    });
-}
-//# sourceMappingURL=intercept.js.map

package/dist/ee/intercept.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"intercept.js","sourceRoot":"","sources":["../../src/ee/intercept.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC1G,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGxC,gFAAgF;AAChF,IAAI,gBAAgB,GAAa,EAAE,CAAC;AACpC,IAAI,sBAAsB,GAAkB,IAAI,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,gBAAgB,CAAC;QAClC,SAAS,EAAE,sBAAsB,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAa;IACnD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7B,gBAAgB,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IAC5B,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,gBAAgB,GAAG,EAAE,CAAC;IACtB,sBAAsB,GAAG,IAAI,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,IAAI,cAAc,GAA6C,IAAI,CAAC;AAEpE,MAAM,UAAU,kBAAkB,CAAC,CAAoC;IACrE,cAAc,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,cAAc;QACjB,cAAc,GAAG,cAAc,CAAC;YAC9B,OAAO,EAAE,sBAAsB,EAAE,IAAI,SAAS;YAC9C,SAAS,EAAE,kBAAkB,EAAE,IAAI,SAAS;SAC7C,CAAC,CAAC;IACL,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAqB,EAAE,IAAyB;IAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAClE,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAEvC,0FAA0F;IAC1F,IAAK,IAAY,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC7C,MAAM,gBAAgB,EAAE,CAAC;QACzB,cAAc,GAAG,cAAc,CAAC;YAC9B,SAAS,EAAE,kBAAkB,EAAE,IAAI,SAAS;SAC7C,CAAC,CAAC;QACH,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,6CAA6C;IAC7C,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9C,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,qDAAqD;IACrD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,gBAAgB,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpD,CAAC;SAAM,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC7D,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAyG;IAEzG,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAU,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;QACf,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,QAAQ;QACR,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAa;IACnD,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,cAAc,GAAG,cAAc,CAAC;QAC9B,SAAS,EAAE,kBAAkB,EAAE,IAAI,SAAS;KAC7C,CAAC,CAAC;AACL,CAAC"}

package/dist/ee/intercept.test.js

@@ -1,170 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { startStubEEServer } from "../__test-stubs__/ee-server.js";
-import { createEEClient, resetEEClientState } from "./client.js";
-import { getLastSurfacedState, resetLastSurfacedState, setDefaultEEClient, updateLastSurfacedState } from "./intercept.js";
-import { setRenderSink } from "./render.js";
-const baseReq = {
-    toolName: "bash",
-    toolInput: { command: "rm -rf /" },
-    cwd: "/tmp",
-    tenantId: "local",
-    scope: { kind: "global" },
-};
-const sampleMatch = {
-    principle_uuid: "p-uuid-001",
-    embedding_model_version: "nomic-embed-text-v1.5",
-    confidence: 0.85,
-    why: "Dangerous command detected",
-    message: "Avoid destructive commands",
-    scope_label: "global",
-    last_matched_at: "2026-04-30T00:00:00Z",
-};
-describe("updateLastSurfacedState / resetLastSurfacedState", () => {
-    afterEach(() => {
-        resetLastSurfacedState();
-    });
-    it("updateLastSurfacedState sets surfacedIds and timestamp", () => {
-        updateLastSurfacedState(["id-1", "id-2"]);
-        const state = getLastSurfacedState();
-        expect(state.surfacedIds).toEqual(["id-1", "id-2"]);
-        expect(typeof state.timestamp).toBe("string");
-        expect(state.timestamp).not.toBe("");
-    });
-    it("updateLastSurfacedState with empty array is a no-op", () => {
-        updateLastSurfacedState(["id-1"]);
-        updateLastSurfacedState([]);
-        const state = getLastSurfacedState();
-        // Should still have previous value
-        expect(state.surfacedIds).toEqual(["id-1"]);
-    });
-    it("resetLastSurfacedState clears surfacedIds to []", () => {
-        updateLastSurfacedState(["id-1"]);
-        resetLastSurfacedState();
-        const state = getLastSurfacedState();
-        expect(state.surfacedIds).toEqual([]);
-    });
-});
-describe("intercept integration", () => {
-    let stub;
-    let captured;
-    beforeEach(async () => {
-        captured = [];
-        setRenderSink((line) => captured.push(line));
-        resetEEClientState();
-    });
-    afterEach(async () => {
-        if (stub)
-            await stub.stop();
-    });
-    it("decision=block returns response unchanged (caller aborts)", async () => {
-        stub = await startStubEEServer({
-            intercept: () => ({ decision: "block", reason: "too dangerous" }),
-        });
-        const client = createEEClient({
-            baseUrl: `http://127.0.0.1:${stub.port}`,
-            timeoutMs: 2000,
-        });
-        setDefaultEEClient(client);
-        // Use the full intercept function (from intercept.ts)
-        const { intercept } = await import("./intercept.js");
-        const resp = await intercept(baseReq);
-        expect(resp.decision).toBe("block");
-        expect(resp.reason).toBe("too dangerous");
-        // No matches emitted on block
-        expect(captured).toHaveLength(0);
-    });
-    it("decision=allow with matches[] emits rendered lines via sink", async () => {
-        stub = await startStubEEServer({
-            intercept: () => ({
-                decision: "allow",
-                matches: [sampleMatch],
-            }),
-        });
-        const client = createEEClient({
-            baseUrl: `http://127.0.0.1:${stub.port}`,
-            timeoutMs: 2000,
-        });
-        setDefaultEEClient(client);
-        const { intercept } = await import("./intercept.js");
-        const resp = await intercept(baseReq);
-        expect(resp.decision).toBe("allow");
-        expect(resp.matches).toHaveLength(1);
-        // The render sink should have captured the warning
-        expect(captured).toHaveLength(1);
-        expect(captured[0]).toContain("Avoid destructive commands");
-        expect(captured[0]).toContain("Dangerous command detected");
-        expect(captured[0]).toContain("global");
-    });
-    it("posttool carries tenantId + scope (awaitable Promise<void>)", async () => {
-        stub = await startStubEEServer({
-            posttool: () => { },
-        });
-        const client = createEEClient({
-            baseUrl: `http://127.0.0.1:${stub.port}`,
-            timeoutMs: 2000,
-        });
-        setDefaultEEClient(client);
-        const { posttool } = await import("./posttool.js");
-        // posttool is now async (Promise<void>) so it can be awaited by PostToolUse handler
-        const result = posttool({
-            toolName: "bash",
-            toolInput: { command: "ls" },
-            outcome: { success: true },
-            cwd: "/tmp",
-            tenantId: "local",
-            scope: { kind: "global" },
-        });
-        expect(result).toBeInstanceOf(Promise);
-        await result; // await to let HTTP settle
-        expect(stub.calls.posttool).toHaveLength(1);
-        expect(stub.calls.posttool[0].tenantId).toBe("local");
-        expect(stub.calls.posttool[0].scope).toEqual({ kind: "global" });
-    });
-});
-describe("401 refresh path", () => {
-    let stub;
-    beforeEach(() => {
-        resetEEClientState();
-    });
-    afterEach(async () => {
-        if (stub)
-            await stub.stop();
-    });
-    it("retries once with refreshed token on 401", async () => {
-        let _callCount = 0;
-        stub = await startStubEEServer({
-            intercept: () => {
-                _callCount++;
-                // First call should be the retry after 401
-                return { decision: "allow", matches: [sampleMatch] };
-            },
-        });
-        // We need a custom intercept flow that handles 401.
-        // The 401 is surfaced by the client as reason='auth-required'.
-        // For this test, we'll mock the fetch to return 401 first, then succeed.
-        let fetchCallCount = 0;
-        const mockFetch = async (input, init) => {
-            fetchCallCount++;
-            if (fetchCallCount === 1) {
-                // First call: return 401
-                return new Response(JSON.stringify({ error: "unauthorized" }), {
-                    status: 401,
-                    headers: { "Content-Type": "application/json" },
-                });
-            }
-            // Subsequent calls: proxy to real stub
-            const url = typeof input === "string" ? input : input.url;
-            const stubUrl = url.replace(/http:\/\/[^/]+/, `http://127.0.0.1:${stub.port}`);
-            return fetch(stubUrl, init);
-        };
-        const client = createEEClient({
-            baseUrl: `http://127.0.0.1:${stub.port}`,
-            timeoutMs: 2000,
-            fetchImpl: mockFetch,
-        });
-        // Test that the client returns auth-required on 401
-        const resp = await client.intercept(baseReq);
-        expect(resp.reason).toBe("auth-required");
-    });
-});
-//# sourceMappingURL=intercept.test.js.map

package/dist/ee/intercept.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"intercept.test.js","sourceRoot":"","sources":["../../src/ee/intercept.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAmB,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC3H,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,OAAO,GAAqB;IAChC,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;IAClC,GAAG,EAAE,MAAM;IACX,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;CAC1B,CAAC;AAEF,MAAM,WAAW,GAAmB;IAClC,cAAc,EAAE,YAAY;IAC5B,uBAAuB,EAAE,uBAAuB;IAChD,UAAU,EAAE,IAAI;IAChB,GAAG,EAAE,4BAA4B;IACjC,OAAO,EAAE,4BAA4B;IACrC,WAAW,EAAE,QAAQ;IACrB,eAAe,EAAE,sBAAsB;CACxC,CAAC;AAEF,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,SAAS,CAAC,GAAG,EAAE;QACb,sBAAsB,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,uBAAuB,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACrC,mCAAmC;QACnC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,sBAAsB,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,IAAgB,CAAC;IACrB,IAAI,QAAkB,CAAC;IAEvB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,GAAG,EAAE,CAAC;QACd,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,kBAAkB,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,IAAI,GAAG,MAAM,iBAAiB,CAAC;YAC7B,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;YACxC,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE3B,sDAAsD;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC1C,8BAA8B;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,IAAI,GAAG,MAAM,iBAAiB,CAAC;YAC7B,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,CAAC,WAAW,CAAC;aACvB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;YACxC,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE3B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,mDAAmD;QACnD,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,IAAI,GAAG,MAAM,iBAAiB,CAAC;YAC7B,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;YACxC,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE3B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QACnD,oFAAoF;QACpF,MAAM,MAAM,GAAG,QAAQ,CAAC;YACtB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC5B,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC1B,GAAG,EAAE,MAAM;YACX,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,CAAC,CAAC,2BAA2B;QAEzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,IAAgB,CAAC;IAErB,UAAU,CAAC,GAAG,EAAE;QACd,kBAAkB,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,GAAG,MAAM,iBAAiB,CAAC;YAC7B,SAAS,EAAE,GAAG,EAAE;gBACd,UAAU,EAAE,CAAC;gBACb,2CAA2C;gBAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,CAAC;SACF,CAAC,CAAC;QAEH,oDAAoD;QACpD,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,SAAS,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpD,cAAc,EAAE,CAAC;YACjB,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;gBACzB,yBAAyB;gBACzB,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;oBAC7D,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAC;YACL,CAAC;YACD,uCAAuC;YACvC,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,KAAiB,CAAC,GAAG,CAAC;YACvE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,OAAO,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;YACxC,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/ee/judge.d.ts

@@ -1,36 +0,0 @@
-/**
- * src/ee/judge.ts
- *
- * Deterministic auto-judge classifier (EE-09).
- * Classifies every tool call as FOLLOWED | IGNORED | IRRELEVANT using
- * deterministic rules — no LLM involved.
- *
- * fireFeedback() fires /api/feedback fire-and-forget per match, and
- * /api/principle/touch on FOLLOWED matches (EE-10 decay refresh).
- */
-import type { Classification, InterceptResponse, PostToolPayload } from "./types.js";
-export interface JudgeContext {
-    warningResponse: InterceptResponse | null;
-    toolName: string;
-    outcome: PostToolPayload["outcome"];
-    cwdMatchedAtPretool: boolean;
-    diffPresent: boolean;
-    tenantId: string;
-}
-/**
- * Deterministic classification rules (from RESEARCH Auto-Judge Deterministic Rules):
- *
- * 1. No matches or cwd mismatch → IRRELEVANT
- * 2. Outcome failed → IGNORED
- * 3. Any match has expectedBehavior='should-not-edit' AND diff present → IGNORED
- * 4. Otherwise → FOLLOWED
- */
-export declare function judge(ctx: JudgeContext): Classification;
-/**
- * Fire feedback for each match in the warning response.
- * - Always calls /api/feedback per match (fire-and-forget).
- * - On FOLLOWED, also calls /api/principle/touch per match (EE-10 decay refresh).
- *
- * B-4 invariant: returns void synchronously. All HTTP calls are fire-and-forget.
- */
-export declare function fireFeedback(ctx: JudgeContext): void;