oh-my-codex 0.20.3 → 0.20.5

package/dist/adapt/herdr/bridge.js

@@ -0,0 +1,222 @@
+import { clearAuthority, recordAuthority, } from "./authority.js";
+import { sanitizeMessage, sanitizeMetadata } from "./sanitize.js";
+import { isTerminalHookEvent, mapHookEventToHerdrState, rollupTeamState, } from "./semantic.js";
+import { nextSeq as durableNextSeq } from "./seq-store.js";
+import { CliHerdrTransport, SocketHerdrTransport, detectHerdrEnv, } from "./transport.js";
+export const HERDR_BRIDGE_SOURCE = "omx:runtime";
+export const HERDR_BRIDGE_AGENT = "codex";
+/**
+ * Opt-in, best-effort OMX -> Herdr lifecycle/status bridge.
+ *
+ * - No behavior change outside a detected Herdr pane.
+ * - Ordered: seq comes from a durable cross-process per-source store, so stale
+ *   reports cannot win across concurrent hook processes or restarts.
+ * - Non-blocking / failure-isolated: transport errors are captured and returned,
+ *   never thrown.
+ * - Release is gated on remaining active workflows and records/clears authority
+ *   for crash reconciliation.
+ */
+export class HerdrBridge {
+    env;
+    transport;
+    source;
+    agent;
+    seqFn;
+    workflowActiveFn;
+    stateBaseDir;
+    sessionId;
+    logger;
+    released = false;
+    authorityRecorded = false;
+    constructor(options = {}) {
+        this.env = options.env ?? detectHerdrEnv();
+        this.source = options.source ?? HERDR_BRIDGE_SOURCE;
+        this.agent = options.agent ?? HERDR_BRIDGE_AGENT;
+        this.stateBaseDir = options.stateBaseDir;
+        this.sessionId = options.sessionId;
+        this.logger = options.logger;
+        this.seqFn =
+            options.seqFn ??
+                ((source) => durableNextSeq(source, { baseDir: this.stateBaseDir }));
+        this.workflowActiveFn = options.workflowActiveFn ?? (() => false);
+        this.transport = this.env.enabled
+            ? (options.transport ?? defaultTransport(this.env))
+            : (options.transport ?? null);
+    }
+    get enabled() {
+        return this.env.enabled;
+    }
+    nextSeq() {
+        return this.seqFn(this.source);
+    }
+    skip(reason) {
+        return { attempted: false, ok: false, skipped: true, reason };
+    }
+    async reportState(state, options = {}) {
+        if (!this.env.enabled || !this.env.paneId || !this.transport) {
+            return this.skip("herdr-not-detected");
+        }
+        const seq = this.nextSeq();
+        const message = sanitizeMessage(options.message);
+        const metadata = sanitizeMetadata(options.metadata);
+        try {
+            const result = await this.transport.reportAgent({
+                paneId: this.env.paneId,
+                source: this.source,
+                agent: this.agent,
+                state,
+                message,
+                metadata,
+                seq,
+            });
+            if (result.ok)
+                this.ensureAuthorityRecorded();
+            else
+                this.log("herdr report failed", { state, seq, result });
+            return {
+                attempted: true,
+                ok: result.ok,
+                skipped: false,
+                reason: result.detail,
+                state,
+                seq,
+                transport: result,
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            this.log("herdr report threw", { state, seq, error: message });
+            return {
+                attempted: true,
+                ok: false,
+                skipped: false,
+                reason: `report threw: ${message}`,
+                state,
+                seq,
+            };
+        }
+    }
+    async reportHookEvent(event, options = {}) {
+        if (!this.env.enabled)
+            return this.skip("herdr-not-detected");
+        const mapping = mapHookEventToHerdrState(event);
+        const outcome = await this.reportState(mapping.state, {
+            message: options.message ?? mapping.reason,
+            metadata: options.metadata,
+        });
+        if (isTerminalHookEvent(event)) {
+            const release = await this.release();
+            return { ...outcome, released: release.released ?? release.ok };
+        }
+        return outcome;
+    }
+    async reportTeamRollup(input, options = {}) {
+        if (!this.env.enabled)
+            return this.skip("herdr-not-detected");
+        const rollup = rollupTeamState(input);
+        return this.reportState(rollup.state, {
+            message: rollup.reason,
+            metadata: options.metadata,
+        });
+    }
+    /**
+     * Release `omx:runtime` authority. Suppressed while another OMX workflow
+     * remains active (a single terminal event must not release authority for
+     * still-running workflows). Clears the authority record on release.
+     */
+    async release() {
+        if (!this.env.enabled || !this.env.paneId || !this.transport) {
+            return this.skip("herdr-not-detected");
+        }
+        if (this.released) {
+            return { attempted: false, ok: true, skipped: true, reason: "already-released" };
+        }
+        if (this.workflowActiveFn()) {
+            return {
+                attempted: false,
+                ok: true,
+                skipped: true,
+                reason: "workflow-still-active",
+            };
+        }
+        const seq = this.nextSeq();
+        try {
+            const result = await this.transport.releaseAgent({
+                paneId: this.env.paneId,
+                source: this.source,
+                seq,
+            });
+            this.released = true;
+            this.clearAuthorityRecord();
+            if (!result.ok)
+                this.log("herdr release failed", { seq, result });
+            return {
+                attempted: true,
+                ok: result.ok,
+                skipped: false,
+                reason: result.detail,
+                seq,
+                released: true,
+                transport: result,
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            this.log("herdr release threw", { seq, error: message });
+            this.released = true;
+            this.clearAuthorityRecord();
+            return {
+                attempted: true,
+                ok: false,
+                skipped: false,
+                reason: `release threw: ${message}`,
+                seq,
+                released: true,
+            };
+        }
+    }
+    ensureAuthorityRecorded() {
+        if (this.authorityRecorded || !this.env.paneId)
+            return;
+        this.authorityRecorded = true;
+        try {
+            recordAuthority({
+                pane_id: this.env.paneId,
+                source: this.source,
+                owner_pid: process.pid,
+                session_id: this.sessionId,
+            }, { baseDir: this.stateBaseDir });
+        }
+        catch (error) {
+            this.log("herdr authority record failed", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    clearAuthorityRecord() {
+        try {
+            clearAuthority({ baseDir: this.stateBaseDir });
+        }
+        catch {
+            // best-effort
+        }
+    }
+    log(message, meta) {
+        try {
+            this.logger?.(message, meta);
+        }
+        catch {
+            // A misbehaving logger must not break the bridge.
+        }
+    }
+}
+function defaultTransport(env) {
+    if (env.socketPath) {
+        return new SocketHerdrTransport({ socketPath: env.socketPath });
+    }
+    return new CliHerdrTransport({ binPath: env.binPath });
+}
+export function createHerdrBridge(options = {}) {
+    return new HerdrBridge(options);
+}
+//# sourceMappingURL=bridge.js.map

package/dist/adapt/herdr/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/adapt/herdr/bridge.ts"],"names":[],"mappings":"AAIA,OAAO,EACN,cAAc,EACd,eAAe,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAIN,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACN,iBAAiB,EAIjB,oBAAoB,EACpB,cAAc,GACd,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAiC1C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,WAAW;IACN,GAAG,CAAW;IACd,SAAS,CAAwB;IACjC,MAAM,CAAS;IACf,KAAK,CAAS;IACd,KAAK,CAA6B;IAClC,gBAAgB,CAAgB;IAChC,YAAY,CAAU;IACtB,SAAS,CAAU;IACnB,MAAM,CAAgC;IAC/C,QAAQ,GAAG,KAAK,CAAC;IACjB,iBAAiB,GAAG,KAAK,CAAC;IAElC,YAAY,OAAO,GAAuB,EAAE;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,cAAc,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;QACpD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,KAAK;YACT,OAAO,CAAC,KAAK;gBACb,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO;YAChC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;IACzB,CAAC;IAEO,OAAO;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAEO,IAAI,CAAC,MAAc;QAC1B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,WAAW,CAChB,KAAyB,EACzB,OAAO,GAA4D,EAAE;QAErE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;gBAC/C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK;gBACL,OAAO;gBACP,QAAQ;gBACR,GAAG;aACH,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,EAAE;gBAAE,IAAI,CAAC,uBAAuB,EAAE,CAAC;;gBACzC,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,OAAO;gBACN,SAAS,EAAE,IAAI;gBACf,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK;gBACL,GAAG;gBACH,SAAS,EAAE,MAAM;aACjB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/D,OAAO;gBACN,SAAS,EAAE,IAAI;gBACf,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,OAAO,EAAE;gBAClC,KAAK;gBACL,GAAG;aACH,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,KAAiD,EACjD,OAAO,GAA4D,EAAE;QAErE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAsB,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE;YACrD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM;YAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,KAAuB,EACvB,OAAO,GAA0C,EAAE;QAEnD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE;YACrC,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACZ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC7B,OAAO;gBACN,SAAS,EAAE,KAAK;gBAChB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,uBAAuB;aAC/B,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;gBAChD,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG;aACH,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAClE,OAAO;gBACN,SAAS,EAAE,IAAI;gBACf,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG;gBACH,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,MAAM;aACjB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,OAAO;gBACN,SAAS,EAAE,IAAI;gBACf,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,kBAAkB,OAAO,EAAE;gBACnC,GAAG;gBACH,QAAQ,EAAE,IAAI;aACd,CAAC;QACH,CAAC;IACF,CAAC;IAEO,uBAAuB;QAC9B,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO;QACvD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC;YACJ,eAAe,CACd;gBACC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;gBACxB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,OAAO,CAAC,GAAG;gBACtB,UAAU,EAAE,IAAI,CAAC,SAAS;aAC1B,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,CAC9B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,+BAA+B,EAAE;gBACzC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,oBAAoB;QAC3B,IAAI,CAAC;YACJ,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACR,cAAc;QACf,CAAC;IACF,CAAC;IAEO,GAAG,CAAC,OAAe,EAAE,IAA8B;QAC1D,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,kDAAkD;QACnD,CAAC;IACF,CAAC;CACD;AAED,SAAS,gBAAgB,CAAC,GAAa;IACtC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,IAAI,oBAAoB,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAO,GAAuB,EAAE;IACjE,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/adapt/herdr/sanitize.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Bound and redact operator/agent text before it crosses the OMX -> Herdr
+ * boundary. OMX lifecycle context can contain prompts, source text, absolute
+ * paths, and secrets; none of that should be shipped verbatim to Herdr's
+ * display surfaces. Applied to the semantic `message` and to display-only
+ * metadata tokens.
+ */
+export declare const MAX_MESSAGE_LEN = 120;
+export declare const MAX_TOKEN_KEY_LEN = 32;
+export declare const MAX_TOKEN_VALUE_LEN = 80;
+export declare const MAX_TOKENS = 16;
+/** Sanitize a semantic message: collapse whitespace, redact paths/secrets, cap length. */
+export declare function sanitizeMessage(message: string | undefined, maxLen?: number): string | undefined;
+/**
+ * Sanitize display-only metadata tokens: cap key/value length and token count,
+ * drop secret-like keys/values, redact absolute paths. Returns undefined when
+ * nothing survives.
+ */
+export declare function sanitizeMetadata(metadata: Record<string, string> | undefined): Record<string, string> | undefined;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/adapt/herdr/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/adapt/herdr/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,UAAU,KAAK,CAAC;AAgB7B,0FAA0F;AAC1F,wBAAgB,eAAe,CAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,SAAkB,GACtB,MAAM,GAAG,SAAS,CAQpB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAuBpC"}

package/dist/adapt/herdr/sanitize.js

@@ -0,0 +1,70 @@
+/**
+ * Bound and redact operator/agent text before it crosses the OMX -> Herdr
+ * boundary. OMX lifecycle context can contain prompts, source text, absolute
+ * paths, and secrets; none of that should be shipped verbatim to Herdr's
+ * display surfaces. Applied to the semantic `message` and to display-only
+ * metadata tokens.
+ */
+export const MAX_MESSAGE_LEN = 120;
+export const MAX_TOKEN_KEY_LEN = 32;
+export const MAX_TOKEN_VALUE_LEN = 80;
+export const MAX_TOKENS = 16;
+const SECRET_KEY_PATTERN = /(secret|token|password|passwd|api[_-]?key|authorization|bearer|credential|private[_-]?key|access[_-]?key)/i;
+const SECRET_VALUE_PATTERN = /(bearer\s+[a-z0-9._-]+|sk-[a-z0-9]{8,}|gh[pousr]_[a-z0-9]{8,}|eyj[a-z0-9._-]{10,}|[a-f0-9]{32,})/i;
+const ABS_PATH_PATTERN = /(?:\/[^\s:]+){2,}|[a-zA-Z]:\\[^\s]+/g;
+function collapseWhitespace(value) {
+    return value.replace(/[\r\n\t]+/g, " ").replace(/\s{2,}/g, " ").trim();
+}
+function redactPaths(value) {
+    return value.replace(ABS_PATH_PATTERN, "[path]");
+}
+/** Sanitize a semantic message: collapse whitespace, redact paths/secrets, cap length. */
+export function sanitizeMessage(message, maxLen = MAX_MESSAGE_LEN) {
+    if (message === undefined)
+        return undefined;
+    let out = collapseWhitespace(message);
+    if (out.length === 0)
+        return undefined;
+    if (SECRET_VALUE_PATTERN.test(out))
+        out = "[redacted]";
+    out = redactPaths(out);
+    if (out.length > maxLen)
+        out = `${out.slice(0, maxLen - 1)}…`;
+    return out;
+}
+/**
+ * Sanitize display-only metadata tokens: cap key/value length and token count,
+ * drop secret-like keys/values, redact absolute paths. Returns undefined when
+ * nothing survives.
+ */
+export function sanitizeMetadata(metadata) {
+    if (!metadata)
+        return undefined;
+    const out = {};
+    let count = 0;
+    for (const [rawKey, rawValue] of Object.entries(metadata)) {
+        if (count >= MAX_TOKENS)
+            break;
+        if (typeof rawValue !== "string")
+            continue;
+        const key = rawKey.slice(0, MAX_TOKEN_KEY_LEN);
+        if (SECRET_KEY_PATTERN.test(key))
+            continue;
+        let value = collapseWhitespace(rawValue);
+        if (value.length === 0)
+            continue;
+        if (SECRET_VALUE_PATTERN.test(value)) {
+            value = "[redacted]";
+        }
+        else {
+            value = redactPaths(value);
+        }
+        if (value.length > MAX_TOKEN_VALUE_LEN) {
+            value = `${value.slice(0, MAX_TOKEN_VALUE_LEN - 1)}…`;
+        }
+        out[key] = value;
+        count += 1;
+    }
+    return Object.keys(out).length > 0 ? out : undefined;
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/adapt/herdr/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../../src/adapt/herdr/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAE7B,MAAM,kBAAkB,GACvB,4GAA4G,CAAC;AAC9G,MAAM,oBAAoB,GACzB,mGAAmG,CAAC;AACrG,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAEhE,SAAS,kBAAkB,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAC9B,OAA2B,EAC3B,MAAM,GAAG,eAAe;IAExB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,YAAY,CAAC;IACvD,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM;QAAE,GAAG,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;IAC9D,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC/B,QAA4C;IAE5C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,IAAI,UAAU;YAAE,MAAM;QAC/B,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,SAAS;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC/C,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,IAAI,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,KAAK,GAAG,YAAY,CAAC;QACtB,CAAC;aAAM,CAAC;YACP,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACxC,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC;QACvD,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACjB,KAAK,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}

package/dist/adapt/herdr/semantic.d.ts

@@ -0,0 +1,67 @@
+import type { HookEventEnvelope, HookEventName } from "../../hooks/extensibility/types.js";
+/**
+ * Herdr semantic agent states, as documented by the official Herdr socket/CLI
+ * protocol (herdr.dev/docs/agents, /docs/socket-api). `state` is semantic: it
+ * drives Herdr waits, notifications, and workspace rollups. Display-only detail
+ * is carried separately as metadata tokens.
+ */
+export declare const HERDR_SEMANTIC_STATES: readonly ["working", "blocked", "idle", "unknown"];
+export type HerdrSemanticState = (typeof HERDR_SEMANTIC_STATES)[number];
+export interface HerdrStateMapping {
+    state: HerdrSemanticState;
+    /** Whether OMX should release Herdr authority after reporting this state. */
+    terminal: boolean;
+    /** Short, non-authoritative rationale for the mapping decision. */
+    reason: string;
+}
+/**
+ * Map a single OMX hook lifecycle event to a Herdr semantic state. Unknown or
+ * unmapped events resolve to `unknown` rather than guessing, matching the issue
+ * requirement that reconciliation-uncertain state is reported as `unknown`.
+ */
+export declare function mapHookEventToHerdrState(event: HookEventEnvelope | HookEventName | string): HerdrStateMapping;
+export declare function isTerminalHookEvent(event: HookEventEnvelope | HookEventName | string): boolean;
+export type HerdrWorkerState = "working" | "blocked" | "done" | "failed" | "idle" | "unknown";
+export interface HerdrRollupWorker {
+    id: string;
+    state: HerdrWorkerState;
+    /**
+     * True when this worker/task is blocked specifically on user action. Only
+     * user-blocking workers escalate the rollup to `blocked`; a worker blocked on
+     * the system alone does not make the whole pane look blocked.
+     */
+    blockedOnUser?: boolean;
+}
+export interface HerdrRollupInput {
+    /** The leader (or a workflow) is waiting on a user decision. */
+    leaderBlockedOnUser?: boolean;
+    workers: HerdrRollupWorker[];
+    /** The whole run has reached a terminal outcome. */
+    runTerminal?: boolean;
+}
+export interface HerdrRollupResult {
+    state: HerdrSemanticState;
+    reason: string;
+    counts: {
+        total: number;
+        working: number;
+        blocked: number;
+        blockedOnUser: number;
+        done: number;
+        failed: number;
+        idle: number;
+        unknown: number;
+    };
+}
+/**
+ * Roll up authoritative OMX Team worker/task state into a single Herdr semantic
+ * state, rather than relying on Herdr's pane-output inference.
+ *
+ * Precedence, per issue #3241:
+ *   1. `blocked` if the leader needs user input or an authoritative worker/task
+ *      is blocked on user action.
+ *   2. otherwise `working` while any worker/task is active.
+ *   3. otherwise `idle` when the run is terminal (or nothing is active).
+ */
+export declare function rollupTeamState(input: HerdrRollupInput): HerdrRollupResult;
+//# sourceMappingURL=semantic.d.ts.map

package/dist/adapt/herdr/semantic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic.d.ts","sourceRoot":"","sources":["../../../src/adapt/herdr/semantic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,iBAAiB,EACjB,aAAa,EACb,MAAM,oCAAoC,CAAC;AAE5C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,YACjC,SAAS,EACT,SAAS,EACT,MAAM,EACN,SAAS,CACA,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAmDxE,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,iBAAiB,GAAG,aAAa,GAAG,MAAM,GAC/C,iBAAiB,CA8BnB;AAED,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,iBAAiB,GAAG,aAAa,GAAG,MAAM,GAC/C,OAAO,CAGT;AAED,MAAM,MAAM,gBAAgB,GACzB,SAAS,GACT,SAAS,GACT,MAAM,GACN,QAAQ,GACR,MAAM,GACN,SAAS,CAAC;AAEb,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAChC,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KAChB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAiE1E"}

package/dist/adapt/herdr/semantic.js

@@ -0,0 +1,170 @@
+/**
+ * Herdr semantic agent states, as documented by the official Herdr socket/CLI
+ * protocol (herdr.dev/docs/agents, /docs/socket-api). `state` is semantic: it
+ * drives Herdr waits, notifications, and workspace rollups. Display-only detail
+ * is carried separately as metadata tokens.
+ */
+export const HERDR_SEMANTIC_STATES = [
+    "working",
+    "blocked",
+    "idle",
+    "unknown",
+];
+/**
+ * OMX hook lifecycle events that map to Herdr `working`. These represent an
+ * active turn, an active workflow, or active workers/tasks.
+ */
+const WORKING_EVENTS = new Set([
+    "session-start",
+    "run.heartbeat",
+    "worker.assigned",
+    "worker.recovered",
+    "test-started",
+    "pre-tool-use",
+    "post-tool-use",
+]);
+/**
+ * OMX hook lifecycle events that map to Herdr `blocked`. These represent an
+ * approval, question, or user decision that OMX is waiting on.
+ */
+const BLOCKED_EVENTS = new Set([
+    "blocked",
+    "run.blocked_on_user",
+    "run.blocked_on_system",
+    "needs-input",
+    "handoff-needed",
+]);
+/**
+ * OMX hook lifecycle events that map to Herdr `idle`. These represent a turn,
+ * workflow, or session reaching a terminal or resting state. Herdr derives its
+ * own `done`/seen behavior from `idle`.
+ */
+const IDLE_EVENTS = new Set([
+    "turn-complete",
+    "finished",
+    "failed",
+    "stop",
+    "session-end",
+    "session-idle",
+]);
+/**
+ * OMX lifecycle events after which OMX should release `omx:runtime` authority so
+ * Herdr can safely return to its normal Codex screen detection. Only whole-
+ * session shutdown releases authority; per-run `finished`/`failed` map to `idle`
+ * without releasing, because a single run ending does not mean OMX has left the
+ * pane.
+ */
+const TERMINAL_EVENTS = new Set(["stop", "session-end"]);
+/**
+ * Map a single OMX hook lifecycle event to a Herdr semantic state. Unknown or
+ * unmapped events resolve to `unknown` rather than guessing, matching the issue
+ * requirement that reconciliation-uncertain state is reported as `unknown`.
+ */
+export function mapHookEventToHerdrState(event) {
+    const name = typeof event === "string" ? event : event.event;
+    if (BLOCKED_EVENTS.has(name)) {
+        return {
+            state: "blocked",
+            terminal: false,
+            reason: `OMX event '${name}' requires user/system attention.`,
+        };
+    }
+    if (WORKING_EVENTS.has(name)) {
+        return {
+            state: "working",
+            terminal: false,
+            reason: `OMX event '${name}' indicates active work.`,
+        };
+    }
+    if (IDLE_EVENTS.has(name)) {
+        return {
+            state: "idle",
+            terminal: TERMINAL_EVENTS.has(name),
+            reason: `OMX event '${name}' reached a terminal/resting state.`,
+        };
+    }
+    return {
+        state: "unknown",
+        terminal: false,
+        reason: `OMX event '${name}' has no authoritative Herdr mapping.`,
+    };
+}
+export function isTerminalHookEvent(event) {
+    const name = typeof event === "string" ? event : event.event;
+    return TERMINAL_EVENTS.has(name);
+}
+/**
+ * Roll up authoritative OMX Team worker/task state into a single Herdr semantic
+ * state, rather than relying on Herdr's pane-output inference.
+ *
+ * Precedence, per issue #3241:
+ *   1. `blocked` if the leader needs user input or an authoritative worker/task
+ *      is blocked on user action.
+ *   2. otherwise `working` while any worker/task is active.
+ *   3. otherwise `idle` when the run is terminal (or nothing is active).
+ */
+export function rollupTeamState(input) {
+    const counts = {
+        total: input.workers.length,
+        working: 0,
+        blocked: 0,
+        blockedOnUser: 0,
+        done: 0,
+        failed: 0,
+        idle: 0,
+        unknown: 0,
+    };
+    for (const worker of input.workers) {
+        switch (worker.state) {
+            case "working":
+                counts.working += 1;
+                break;
+            case "blocked":
+                counts.blocked += 1;
+                if (worker.blockedOnUser !== false)
+                    counts.blockedOnUser += 1;
+                break;
+            case "done":
+                counts.done += 1;
+                break;
+            case "failed":
+                counts.failed += 1;
+                break;
+            case "idle":
+                counts.idle += 1;
+                break;
+            default:
+                counts.unknown += 1;
+                break;
+        }
+    }
+    if (input.leaderBlockedOnUser) {
+        return {
+            state: "blocked",
+            reason: "Leader is blocked on user action.",
+            counts,
+        };
+    }
+    if (counts.blockedOnUser > 0) {
+        return {
+            state: "blocked",
+            reason: `${counts.blockedOnUser} worker/task blocked on user action.`,
+            counts,
+        };
+    }
+    if (counts.working > 0) {
+        return {
+            state: "working",
+            reason: `${counts.working} worker/task active.`,
+            counts,
+        };
+    }
+    return {
+        state: "idle",
+        reason: input.runTerminal
+            ? "Run reached a terminal state; no active workers."
+            : "No active or user-blocked workers.",
+        counts,
+    };
+}
+//# sourceMappingURL=semantic.js.map

package/dist/adapt/herdr/semantic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic.js","sourceRoot":"","sources":["../../../src/adapt/herdr/semantic.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,SAAS;IACT,SAAS;IACT,MAAM;IACN,SAAS;CACA,CAAC;AAGX;;;GAGG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS;IACtC,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,cAAc;IACd,cAAc;IACd,eAAe;CACf,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS;IACtC,SAAS;IACT,qBAAqB;IACrB,uBAAuB;IACvB,aAAa;IACb,gBAAgB;CAChB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS;IACnC,eAAe;IACf,UAAU;IACV,QAAQ;IACR,MAAM;IACN,aAAa;IACb,cAAc;CACd,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;AAUjE;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACvC,KAAiD;IAEjD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IAE7D,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO;YACN,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,cAAc,IAAI,mCAAmC;SAC7D,CAAC;IACH,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO;YACN,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,cAAc,IAAI,0BAA0B;SACpD,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO;YACN,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;YACnC,MAAM,EAAE,cAAc,IAAI,qCAAqC;SAC/D,CAAC;IACH,CAAC;IAED,OAAO;QACN,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,cAAc,IAAI,uCAAuC;KACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAClC,KAAiD;IAEjD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IAC7D,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AA4CD;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,KAAuB;IACtD,MAAM,MAAM,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC3B,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,CAAC;KACV,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACpC,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,SAAS;gBACb,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,MAAM;YACP,KAAK,SAAS;gBACb,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK;oBAAE,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;gBAC9D,MAAM;YACP,KAAK,MAAM;gBACV,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;gBACjB,MAAM;YACP,KAAK,QAAQ;gBACZ,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;gBACnB,MAAM;YACP,KAAK,MAAM;gBACV,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;gBACjB,MAAM;YACP;gBACC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,MAAM;QACR,CAAC;IACF,CAAC;IAED,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC/B,OAAO;YACN,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,mCAAmC;YAC3C,MAAM;SACN,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO;YACN,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,GAAG,MAAM,CAAC,aAAa,sCAAsC;YACrE,MAAM;SACN,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACN,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,sBAAsB;YAC/C,MAAM;SACN,CAAC;IACH,CAAC;IAED,OAAO;QACN,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,KAAK,CAAC,WAAW;YACxB,CAAC,CAAC,kDAAkD;YACpD,CAAC,CAAC,oCAAoC;QACvC,MAAM;KACN,CAAC;AACH,CAAC"}

package/dist/adapt/herdr/seq-store.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Durable, atomic, per-source monotonic sequence store for Herdr reports.
+ *
+ * Herdr accepts but ignores a report whose `seq <= last accepted seq for the
+ * same source`. Hooks run as short-lived processes, so an in-memory counter
+ * resets to 1 on every process/restart and would (a) let legitimate new reports
+ * be rejected as stale after a restart and (b) fail to prevent stale reports
+ * across concurrent processes. This store persists the counter under
+ * `.omx/adapters/herdr/seq/<sanitized-source>.json` and serializes concurrent
+ * increments with an atomic mkdir lock, so seq is strictly increasing per source
+ * across processes and restarts.
+ */
+export interface SeqStoreOptions {
+    /** Base `.omx/adapters/herdr` dir; defaults to the resolved OMX adapters dir. */
+    baseDir?: string;
+    /** Max time to wait for the lock before giving up (best-effort). */
+    lockTimeoutMs?: number;
+    /** Consider a held lock stale after this age (crash recovery). */
+    lockStaleMs?: number;
+}
+/** Filesystem-safe, collision-resistant file stem for a source id. */
+export declare function sanitizeSourceKey(source: string): string;
+/**
+ * Atomically read-increment-persist the per-source counter and return the new
+ * seq. Strictly increasing and unique per source across concurrent processes
+ * and restarts. Falls back to a time-derived seq only if the lock cannot be
+ * acquired, so a report is never dropped and never regresses below the last
+ * persisted value.
+ */
+export declare function nextSeq(source: string, options?: SeqStoreOptions): number;
+export declare function readPersistedSeq(source: string, options?: SeqStoreOptions): number;
+//# sourceMappingURL=seq-store.d.ts.map

package/dist/adapt/herdr/seq-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seq-store.d.ts","sourceRoot":"","sources":["../../../src/adapt/herdr/seq-store.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,eAAe;IAC/B,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAUD,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGxD;AA2ED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,MAAM,CA8B7E;AAUD,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,eAAoB,GAC3B,MAAM,CAER"}