oh-my-codex 0.20.2 → 0.20.5

package/dist/adapt/herdr/authority.js

@@ -0,0 +1,71 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { join } from "node:path";
+import { omxAdaptersDir } from "../../utils/paths.js";
+function authorityPath(baseDir) {
+    return join(baseDir ?? join(omxAdaptersDir(), "herdr"), "authority.json");
+}
+export function readAuthority(options = {}) {
+    try {
+        return JSON.parse(readFileSync(authorityPath(options.baseDir), "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+function writeAuthorityAtomic(record, baseDir) {
+    const path = authorityPath(baseDir);
+    mkdirSync(join(baseDir ?? join(omxAdaptersDir(), "herdr")), {
+        recursive: true,
+    });
+    const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
+    writeFileSync(tmp, `${JSON.stringify(record, null, 2)}\n`, "utf-8");
+    renameSync(tmp, path);
+}
+export function recordAuthority(record, options = {}) {
+    const now = new Date().toISOString();
+    const existing = readAuthority(options);
+    writeAuthorityAtomic({
+        ...record,
+        acquired_at: record.acquired_at ?? existing?.acquired_at ?? now,
+        updated_at: now,
+    }, options.baseDir);
+}
+export function clearAuthority(options = {}) {
+    const path = authorityPath(options.baseDir);
+    if (existsSync(path)) {
+        try {
+            rmSync(path);
+        }
+        catch {
+            // best-effort
+        }
+    }
+}
+const defaultPidAlive = (pid) => {
+    if (!Number.isFinite(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        // ESRCH => no such process; EPERM => exists but not ours (treat as alive)
+        return error.code === "EPERM";
+    }
+};
+/**
+ * Crash reconciliation: if an authority record exists but its owner process is
+ * no longer alive, clear it so Herdr returns to normal screen detection. Call
+ * on session-start. Returns true when a stale record was cleared.
+ */
+export function reconcileStaleAuthority(options = {}) {
+    const record = readAuthority(options);
+    if (!record)
+        return false;
+    const alive = (options.pidAlive ?? defaultPidAlive)(record.owner_pid);
+    if (alive)
+        return false;
+    clearAuthority(options);
+    return true;
+}
+//# sourceMappingURL=authority.js.map

package/dist/adapt/herdr/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../../../src/adapt/herdr/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAsBtD,SAAS,aAAa,CAAC,OAAgB;IACtC,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,aAAa,CAC5B,OAAO,GAA0B,EAAE;IAEnC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAChB,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAClC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAuB,EAAE,OAAgB;IACtE,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE;QAC3D,SAAS,EAAE,IAAI;KACf,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,eAAe,CAC9B,MAC8C,EAC9C,OAAO,GAA0B,EAAE;IAEnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACxC,oBAAoB,CACnB;QACC,GAAG,MAAM;QACT,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ,EAAE,WAAW,IAAI,GAAG;QAC/D,UAAU,EAAE,GAAG;KACf,EACD,OAAO,CAAC,OAAO,CACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAO,GAA0B,EAAE;IACjE,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACR,cAAc;QACf,CAAC;IACF,CAAC;AACF,CAAC;AAQD,MAAM,eAAe,GAAqB,CAAC,GAAG,EAAE,EAAE;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,0EAA0E;QAC1E,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC1D,CAAC;AACF,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACtC,OAAO,GAA4D,EAAE;IAErE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,cAAc,CAAC,OAAO,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/adapt/herdr/bridge.d.ts

@@ -0,0 +1,84 @@
+import type { HookEventEnvelope, HookEventName } from "../../hooks/extensibility/types.js";
+import { type HerdrRollupInput, type HerdrSemanticState } from "./semantic.js";
+import { type HerdrEnv, type HerdrTransport, type HerdrTransportResult } from "./transport.js";
+export declare const HERDR_BRIDGE_SOURCE = "omx:runtime";
+export declare const HERDR_BRIDGE_AGENT = "codex";
+export interface HerdrBridgeOptions {
+    env?: HerdrEnv;
+    transport?: HerdrTransport;
+    source?: string;
+    agent?: string;
+    /** Injectable seq provider; defaults to the durable cross-process store. */
+    seqFn?: (source: string) => number;
+    /** Base dir for the durable seq/authority stores (tests). */
+    stateBaseDir?: string;
+    /**
+     * Returns true when an OMX workflow other than this one remains active, so
+     * release must be suppressed. Defaults to "nothing else active".
+     */
+    workflowActiveFn?: () => boolean;
+    /** Best-effort logger; never throws into the OMX run. */
+    logger?: (message: string, meta?: Record<string, unknown>) => void;
+    /** Session id recorded on the authority record for crash reconciliation. */
+    sessionId?: string;
+}
+export interface HerdrBridgeOutcome {
+    attempted: boolean;
+    ok: boolean;
+    skipped: boolean;
+    reason: string;
+    state?: HerdrSemanticState;
+    seq?: number;
+    released?: boolean;
+    transport?: HerdrTransportResult;
+}
+/**
+ * Opt-in, best-effort OMX -> Herdr lifecycle/status bridge.
+ *
+ * - No behavior change outside a detected Herdr pane.
+ * - Ordered: seq comes from a durable cross-process per-source store, so stale
+ *   reports cannot win across concurrent hook processes or restarts.
+ * - Non-blocking / failure-isolated: transport errors are captured and returned,
+ *   never thrown.
+ * - Release is gated on remaining active workflows and records/clears authority
+ *   for crash reconciliation.
+ */
+export declare class HerdrBridge {
+    private readonly env;
+    private readonly transport;
+    private readonly source;
+    private readonly agent;
+    private readonly seqFn;
+    private readonly workflowActiveFn;
+    private readonly stateBaseDir?;
+    private readonly sessionId?;
+    private readonly logger?;
+    private released;
+    private authorityRecorded;
+    constructor(options?: HerdrBridgeOptions);
+    get enabled(): boolean;
+    private nextSeq;
+    private skip;
+    reportState(state: HerdrSemanticState, options?: {
+        message?: string;
+        metadata?: Record<string, string>;
+    }): Promise<HerdrBridgeOutcome>;
+    reportHookEvent(event: HookEventEnvelope | HookEventName | string, options?: {
+        message?: string;
+        metadata?: Record<string, string>;
+    }): Promise<HerdrBridgeOutcome>;
+    reportTeamRollup(input: HerdrRollupInput, options?: {
+        metadata?: Record<string, string>;
+    }): Promise<HerdrBridgeOutcome>;
+    /**
+     * Release `omx:runtime` authority. Suppressed while another OMX workflow
+     * remains active (a single terminal event must not release authority for
+     * still-running workflows). Clears the authority record on release.
+     */
+    release(): Promise<HerdrBridgeOutcome>;
+    private ensureAuthorityRecorded;
+    private clearAuthorityRecord;
+    private log;
+}
+export declare function createHerdrBridge(options?: HerdrBridgeOptions): HerdrBridge;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/adapt/herdr/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/adapt/herdr/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,iBAAiB,EACjB,aAAa,EACb,MAAM,oCAAoC,CAAC;AAM5C,OAAO,EACN,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EAKvB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAEN,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAGzB,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,mBAAmB,gBAAgB,CAAC;AACjD,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAE1C,MAAM,WAAW,kBAAkB;IAClC,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC;IACjC,yDAAyD;IACzD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACnE,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAW;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,iBAAiB,CAAS;IAElC,YAAY,OAAO,GAAE,kBAAuB,EAc3C;IAED,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,IAAI;IAIN,WAAW,CAChB,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAO,GACnE,OAAO,CAAC,kBAAkB,CAAC,CAwC7B;IAEK,eAAe,CACpB,KAAK,EAAE,iBAAiB,GAAG,aAAa,GAAG,MAAM,EACjD,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAO,GACnE,OAAO,CAAC,kBAAkB,CAAC,CAY7B;IAEK,gBAAgB,CACrB,KAAK,EAAE,gBAAgB,EACvB,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAO,GACjD,OAAO,CAAC,kBAAkB,CAAC,CAO7B;IAED;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAgD3C;IAED,OAAO,CAAC,uBAAuB;IAoB/B,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,GAAG;CAOX;AASD,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,kBAAuB,GAAG,WAAW,CAE/E"}

package/dist/adapt/herdr/bridge.js

@@ -0,0 +1,222 @@
+import { clearAuthority, recordAuthority, } from "./authority.js";
+import { sanitizeMessage, sanitizeMetadata } from "./sanitize.js";
+import { isTerminalHookEvent, mapHookEventToHerdrState, rollupTeamState, } from "./semantic.js";
+import { nextSeq as durableNextSeq } from "./seq-store.js";
+import { CliHerdrTransport, SocketHerdrTransport, detectHerdrEnv, } from "./transport.js";
+export const HERDR_BRIDGE_SOURCE = "omx:runtime";
+export const HERDR_BRIDGE_AGENT = "codex";
+/**
+ * Opt-in, best-effort OMX -> Herdr lifecycle/status bridge.
+ *
+ * - No behavior change outside a detected Herdr pane.
+ * - Ordered: seq comes from a durable cross-process per-source store, so stale
+ *   reports cannot win across concurrent hook processes or restarts.
+ * - Non-blocking / failure-isolated: transport errors are captured and returned,
+ *   never thrown.
+ * - Release is gated on remaining active workflows and records/clears authority
+ *   for crash reconciliation.
+ */
+export class HerdrBridge {
+    env;
+    transport;
+    source;
+    agent;
+    seqFn;
+    workflowActiveFn;
+    stateBaseDir;
+    sessionId;
+    logger;
+    released = false;
+    authorityRecorded = false;
+    constructor(options = {}) {
+        this.env = options.env ?? detectHerdrEnv();
+        this.source = options.source ?? HERDR_BRIDGE_SOURCE;
+        this.agent = options.agent ?? HERDR_BRIDGE_AGENT;
+        this.stateBaseDir = options.stateBaseDir;
+        this.sessionId = options.sessionId;
+        this.logger = options.logger;
+        this.seqFn =
+            options.seqFn ??
+                ((source) => durableNextSeq(source, { baseDir: this.stateBaseDir }));
+        this.workflowActiveFn = options.workflowActiveFn ?? (() => false);
+        this.transport = this.env.enabled
+            ? (options.transport ?? defaultTransport(this.env))
+            : (options.transport ?? null);
+    }
+    get enabled() {
+        return this.env.enabled;
+    }
+    nextSeq() {
+        return this.seqFn(this.source);
+    }
+    skip(reason) {
+        return { attempted: false, ok: false, skipped: true, reason };
+    }
+    async reportState(state, options = {}) {
+        if (!this.env.enabled || !this.env.paneId || !this.transport) {
+            return this.skip("herdr-not-detected");
+        }
+        const seq = this.nextSeq();
+        const message = sanitizeMessage(options.message);
+        const metadata = sanitizeMetadata(options.metadata);
+        try {
+            const result = await this.transport.reportAgent({
+                paneId: this.env.paneId,
+                source: this.source,
+                agent: this.agent,
+                state,
+                message,
+                metadata,
+                seq,
+            });
+            if (result.ok)
+                this.ensureAuthorityRecorded();
+            else
+                this.log("herdr report failed", { state, seq, result });
+            return {
+                attempted: true,
+                ok: result.ok,
+                skipped: false,
+                reason: result.detail,
+                state,
+                seq,
+                transport: result,
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            this.log("herdr report threw", { state, seq, error: message });
+            return {
+                attempted: true,
+                ok: false,
+                skipped: false,
+                reason: `report threw: ${message}`,
+                state,
+                seq,
+            };
+        }
+    }
+    async reportHookEvent(event, options = {}) {
+        if (!this.env.enabled)
+            return this.skip("herdr-not-detected");
+        const mapping = mapHookEventToHerdrState(event);
+        const outcome = await this.reportState(mapping.state, {
+            message: options.message ?? mapping.reason,
+            metadata: options.metadata,
+        });
+        if (isTerminalHookEvent(event)) {
+            const release = await this.release();
+            return { ...outcome, released: release.released ?? release.ok };
+        }
+        return outcome;
+    }
+    async reportTeamRollup(input, options = {}) {
+        if (!this.env.enabled)
+            return this.skip("herdr-not-detected");
+        const rollup = rollupTeamState(input);
+        return this.reportState(rollup.state, {
+            message: rollup.reason,
+            metadata: options.metadata,
+        });
+    }
+    /**
+     * Release `omx:runtime` authority. Suppressed while another OMX workflow
+     * remains active (a single terminal event must not release authority for
+     * still-running workflows). Clears the authority record on release.
+     */
+    async release() {
+        if (!this.env.enabled || !this.env.paneId || !this.transport) {
+            return this.skip("herdr-not-detected");
+        }
+        if (this.released) {
+            return { attempted: false, ok: true, skipped: true, reason: "already-released" };
+        }
+        if (this.workflowActiveFn()) {
+            return {
+                attempted: false,
+                ok: true,
+                skipped: true,
+                reason: "workflow-still-active",
+            };
+        }
+        const seq = this.nextSeq();
+        try {
+            const result = await this.transport.releaseAgent({
+                paneId: this.env.paneId,
+                source: this.source,
+                seq,
+            });
+            this.released = true;
+            this.clearAuthorityRecord();
+            if (!result.ok)
+                this.log("herdr release failed", { seq, result });
+            return {
+                attempted: true,
+                ok: result.ok,
+                skipped: false,
+                reason: result.detail,
+                seq,
+                released: true,
+                transport: result,
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            this.log("herdr release threw", { seq, error: message });
+            this.released = true;
+            this.clearAuthorityRecord();
+            return {
+                attempted: true,
+                ok: false,
+                skipped: false,
+                reason: `release threw: ${message}`,
+                seq,
+                released: true,
+            };
+        }
+    }
+    ensureAuthorityRecorded() {
+        if (this.authorityRecorded || !this.env.paneId)
+            return;
+        this.authorityRecorded = true;
+        try {
+            recordAuthority({
+                pane_id: this.env.paneId,
+                source: this.source,
+                owner_pid: process.pid,
+                session_id: this.sessionId,
+            }, { baseDir: this.stateBaseDir });
+        }
+        catch (error) {
+            this.log("herdr authority record failed", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    clearAuthorityRecord() {
+        try {
+            clearAuthority({ baseDir: this.stateBaseDir });
+        }
+        catch {
+            // best-effort
+        }
+    }
+    log(message, meta) {
+        try {
+            this.logger?.(message, meta);
+        }
+        catch {
+            // A misbehaving logger must not break the bridge.
+        }
+    }
+}
+function defaultTransport(env) {
+    if (env.socketPath) {
+        return new SocketHerdrTransport({ socketPath: env.socketPath });
+    }
+    return new CliHerdrTransport({ binPath: env.binPath });
+}
+export function createHerdrBridge(options = {}) {
+    return new HerdrBridge(options);
+}
+//# sourceMappingURL=bridge.js.map

package/dist/adapt/herdr/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/adapt/herdr/bridge.ts"],"names":[],"mappings":"AAIA,OAAO,EACN,cAAc,EACd,eAAe,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAIN,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACN,iBAAiB,EAIjB,oBAAoB,EACpB,cAAc,GACd,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAiC1C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,WAAW;IACN,GAAG,CAAW;IACd,SAAS,CAAwB;IACjC,MAAM,CAAS;IACf,KAAK,CAAS;IACd,KAAK,CAA6B;IAClC,gBAAgB,CAAgB;IAChC,YAAY,CAAU;IACtB,SAAS,CAAU;IACnB,MAAM,CAAgC;IAC/C,QAAQ,GAAG,KAAK,CAAC;IACjB,iBAAiB,GAAG,KAAK,CAAC;IAElC,YAAY,OAAO,GAAuB,EAAE;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,cAAc,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;QACpD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,KAAK;YACT,OAAO,CAAC,KAAK;gBACb,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO;YAChC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;IACzB,CAAC;IAEO,OAAO;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAEO,IAAI,CAAC,MAAc;QAC1B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,WAAW,CAChB,KAAyB,EACzB,OAAO,GAA4D,EAAE;QAErE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;gBAC/C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK;gBACL,OAAO;gBACP,QAAQ;gBACR,GAAG;aACH,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,EAAE;gBAAE,IAAI,CAAC,uBAAuB,EAAE,CAAC;;gBACzC,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,OAAO;gBACN,SAAS,EAAE,IAAI;gBACf,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK;gBACL,GAAG;gBACH,SAAS,EAAE,MAAM;aACjB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/D,OAAO;gBACN,SAAS,EAAE,IAAI;gBACf,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,OAAO,EAAE;gBAClC,KAAK;gBACL,GAAG;aACH,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,KAAiD,EACjD,OAAO,GAA4D,EAAE;QAErE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAsB,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE;YACrD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM;YAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,KAAuB,EACvB,OAAO,GAA0C,EAAE;QAEnD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE;YACrC,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACZ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC7B,OAAO;gBACN,SAAS,EAAE,KAAK;gBAChB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,uBAAuB;aAC/B,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;gBAChD,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG;aACH,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAClE,OAAO;gBACN,SAAS,EAAE,IAAI;gBACf,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG;gBACH,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,MAAM;aACjB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,OAAO;gBACN,SAAS,EAAE,IAAI;gBACf,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,kBAAkB,OAAO,EAAE;gBACnC,GAAG;gBACH,QAAQ,EAAE,IAAI;aACd,CAAC;QACH,CAAC;IACF,CAAC;IAEO,uBAAuB;QAC9B,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO;QACvD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC;YACJ,eAAe,CACd;gBACC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;gBACxB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,OAAO,CAAC,GAAG;gBACtB,UAAU,EAAE,IAAI,CAAC,SAAS;aAC1B,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,CAC9B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,+BAA+B,EAAE;gBACzC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,oBAAoB;QAC3B,IAAI,CAAC;YACJ,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACR,cAAc;QACf,CAAC;IACF,CAAC;IAEO,GAAG,CAAC,OAAe,EAAE,IAA8B;QAC1D,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,kDAAkD;QACnD,CAAC;IACF,CAAC;CACD;AAED,SAAS,gBAAgB,CAAC,GAAa;IACtC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,IAAI,oBAAoB,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAO,GAAuB,EAAE;IACjE,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/adapt/herdr/sanitize.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Bound and redact operator/agent text before it crosses the OMX -> Herdr
+ * boundary. OMX lifecycle context can contain prompts, source text, absolute
+ * paths, and secrets; none of that should be shipped verbatim to Herdr's
+ * display surfaces. Applied to the semantic `message` and to display-only
+ * metadata tokens.
+ */
+export declare const MAX_MESSAGE_LEN = 120;
+export declare const MAX_TOKEN_KEY_LEN = 32;
+export declare const MAX_TOKEN_VALUE_LEN = 80;
+export declare const MAX_TOKENS = 16;
+/** Sanitize a semantic message: collapse whitespace, redact paths/secrets, cap length. */
+export declare function sanitizeMessage(message: string | undefined, maxLen?: number): string | undefined;
+/**
+ * Sanitize display-only metadata tokens: cap key/value length and token count,
+ * drop secret-like keys/values, redact absolute paths. Returns undefined when
+ * nothing survives.
+ */
+export declare function sanitizeMetadata(metadata: Record<string, string> | undefined): Record<string, string> | undefined;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/adapt/herdr/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/adapt/herdr/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,UAAU,KAAK,CAAC;AAgB7B,0FAA0F;AAC1F,wBAAgB,eAAe,CAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,SAAkB,GACtB,MAAM,GAAG,SAAS,CAQpB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAuBpC"}

package/dist/adapt/herdr/sanitize.js

@@ -0,0 +1,70 @@
+/**
+ * Bound and redact operator/agent text before it crosses the OMX -> Herdr
+ * boundary. OMX lifecycle context can contain prompts, source text, absolute
+ * paths, and secrets; none of that should be shipped verbatim to Herdr's
+ * display surfaces. Applied to the semantic `message` and to display-only
+ * metadata tokens.
+ */
+export const MAX_MESSAGE_LEN = 120;
+export const MAX_TOKEN_KEY_LEN = 32;
+export const MAX_TOKEN_VALUE_LEN = 80;
+export const MAX_TOKENS = 16;
+const SECRET_KEY_PATTERN = /(secret|token|password|passwd|api[_-]?key|authorization|bearer|credential|private[_-]?key|access[_-]?key)/i;
+const SECRET_VALUE_PATTERN = /(bearer\s+[a-z0-9._-]+|sk-[a-z0-9]{8,}|gh[pousr]_[a-z0-9]{8,}|eyj[a-z0-9._-]{10,}|[a-f0-9]{32,})/i;
+const ABS_PATH_PATTERN = /(?:\/[^\s:]+){2,}|[a-zA-Z]:\\[^\s]+/g;
+function collapseWhitespace(value) {
+    return value.replace(/[\r\n\t]+/g, " ").replace(/\s{2,}/g, " ").trim();
+}
+function redactPaths(value) {
+    return value.replace(ABS_PATH_PATTERN, "[path]");
+}
+/** Sanitize a semantic message: collapse whitespace, redact paths/secrets, cap length. */
+export function sanitizeMessage(message, maxLen = MAX_MESSAGE_LEN) {
+    if (message === undefined)
+        return undefined;
+    let out = collapseWhitespace(message);
+    if (out.length === 0)
+        return undefined;
+    if (SECRET_VALUE_PATTERN.test(out))
+        out = "[redacted]";
+    out = redactPaths(out);
+    if (out.length > maxLen)
+        out = `${out.slice(0, maxLen - 1)}…`;
+    return out;
+}
+/**
+ * Sanitize display-only metadata tokens: cap key/value length and token count,
+ * drop secret-like keys/values, redact absolute paths. Returns undefined when
+ * nothing survives.
+ */
+export function sanitizeMetadata(metadata) {
+    if (!metadata)
+        return undefined;
+    const out = {};
+    let count = 0;
+    for (const [rawKey, rawValue] of Object.entries(metadata)) {
+        if (count >= MAX_TOKENS)
+            break;
+        if (typeof rawValue !== "string")
+            continue;
+        const key = rawKey.slice(0, MAX_TOKEN_KEY_LEN);
+        if (SECRET_KEY_PATTERN.test(key))
+            continue;
+        let value = collapseWhitespace(rawValue);
+        if (value.length === 0)
+            continue;
+        if (SECRET_VALUE_PATTERN.test(value)) {
+            value = "[redacted]";
+        }
+        else {
+            value = redactPaths(value);
+        }
+        if (value.length > MAX_TOKEN_VALUE_LEN) {
+            value = `${value.slice(0, MAX_TOKEN_VALUE_LEN - 1)}…`;
+        }
+        out[key] = value;
+        count += 1;
+    }
+    return Object.keys(out).length > 0 ? out : undefined;
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/adapt/herdr/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../../src/adapt/herdr/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAE7B,MAAM,kBAAkB,GACvB,4GAA4G,CAAC;AAC9G,MAAM,oBAAoB,GACzB,mGAAmG,CAAC;AACrG,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAEhE,SAAS,kBAAkB,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAC9B,OAA2B,EAC3B,MAAM,GAAG,eAAe;IAExB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,YAAY,CAAC;IACvD,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM;QAAE,GAAG,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;IAC9D,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC/B,QAA4C;IAE5C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,IAAI,UAAU;YAAE,MAAM;QAC/B,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,SAAS;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC/C,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,IAAI,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,KAAK,GAAG,YAAY,CAAC;QACtB,CAAC;aAAM,CAAC;YACP,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACxC,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC;QACvD,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACjB,KAAK,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}

package/dist/adapt/herdr/semantic.d.ts

@@ -0,0 +1,67 @@
+import type { HookEventEnvelope, HookEventName } from "../../hooks/extensibility/types.js";
+/**
+ * Herdr semantic agent states, as documented by the official Herdr socket/CLI
+ * protocol (herdr.dev/docs/agents, /docs/socket-api). `state` is semantic: it
+ * drives Herdr waits, notifications, and workspace rollups. Display-only detail
+ * is carried separately as metadata tokens.
+ */
+export declare const HERDR_SEMANTIC_STATES: readonly ["working", "blocked", "idle", "unknown"];
+export type HerdrSemanticState = (typeof HERDR_SEMANTIC_STATES)[number];
+export interface HerdrStateMapping {
+    state: HerdrSemanticState;
+    /** Whether OMX should release Herdr authority after reporting this state. */
+    terminal: boolean;
+    /** Short, non-authoritative rationale for the mapping decision. */
+    reason: string;
+}
+/**
+ * Map a single OMX hook lifecycle event to a Herdr semantic state. Unknown or
+ * unmapped events resolve to `unknown` rather than guessing, matching the issue
+ * requirement that reconciliation-uncertain state is reported as `unknown`.
+ */
+export declare function mapHookEventToHerdrState(event: HookEventEnvelope | HookEventName | string): HerdrStateMapping;
+export declare function isTerminalHookEvent(event: HookEventEnvelope | HookEventName | string): boolean;
+export type HerdrWorkerState = "working" | "blocked" | "done" | "failed" | "idle" | "unknown";
+export interface HerdrRollupWorker {
+    id: string;
+    state: HerdrWorkerState;
+    /**
+     * True when this worker/task is blocked specifically on user action. Only
+     * user-blocking workers escalate the rollup to `blocked`; a worker blocked on
+     * the system alone does not make the whole pane look blocked.
+     */
+    blockedOnUser?: boolean;
+}
+export interface HerdrRollupInput {
+    /** The leader (or a workflow) is waiting on a user decision. */
+    leaderBlockedOnUser?: boolean;
+    workers: HerdrRollupWorker[];
+    /** The whole run has reached a terminal outcome. */
+    runTerminal?: boolean;
+}
+export interface HerdrRollupResult {
+    state: HerdrSemanticState;
+    reason: string;
+    counts: {
+        total: number;
+        working: number;
+        blocked: number;
+        blockedOnUser: number;
+        done: number;
+        failed: number;
+        idle: number;
+        unknown: number;
+    };
+}
+/**
+ * Roll up authoritative OMX Team worker/task state into a single Herdr semantic
+ * state, rather than relying on Herdr's pane-output inference.
+ *
+ * Precedence, per issue #3241:
+ *   1. `blocked` if the leader needs user input or an authoritative worker/task
+ *      is blocked on user action.
+ *   2. otherwise `working` while any worker/task is active.
+ *   3. otherwise `idle` when the run is terminal (or nothing is active).
+ */
+export declare function rollupTeamState(input: HerdrRollupInput): HerdrRollupResult;
+//# sourceMappingURL=semantic.d.ts.map

package/dist/adapt/herdr/semantic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic.d.ts","sourceRoot":"","sources":["../../../src/adapt/herdr/semantic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,iBAAiB,EACjB,aAAa,EACb,MAAM,oCAAoC,CAAC;AAE5C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,YACjC,SAAS,EACT,SAAS,EACT,MAAM,EACN,SAAS,CACA,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAmDxE,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,iBAAiB,GAAG,aAAa,GAAG,MAAM,GAC/C,iBAAiB,CA8BnB;AAED,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,iBAAiB,GAAG,aAAa,GAAG,MAAM,GAC/C,OAAO,CAGT;AAED,MAAM,MAAM,gBAAgB,GACzB,SAAS,GACT,SAAS,GACT,MAAM,GACN,QAAQ,GACR,MAAM,GACN,SAAS,CAAC;AAEb,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAChC,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KAChB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAiE1E"}