opencastle 0.27.1 → 0.27.2

package/dist/cli/convoy/event-schemas.js

@@ -0,0 +1,185 @@
+import * as v from 'valibot';
+export const EVENT_DATA_SCHEMAS = {
+    convoy_started: v.looseObject({ name: v.optional(v.string()) }),
+    convoy_finished: v.looseObject({ status: v.string() }),
+    convoy_failed: v.looseObject({ status: v.string(), reason: v.optional(v.string()) }),
+    convoy_guard: v.looseObject({ checks: v.optional(v.array(v.string())) }),
+    task_started: v.looseObject({ worker_id: v.optional(v.string()) }),
+    task_done: v.looseObject({
+        status: v.optional(v.string()),
+        retries: v.optional(v.number()),
+        worker_id: v.optional(v.string()),
+    }),
+    task_failed: v.looseObject({
+        reason: v.string(),
+        worker_id: v.optional(v.string()),
+        gate: v.optional(v.string()),
+        hook: v.optional(v.string()),
+    }),
+    task_skipped: v.looseObject({ reason: v.string() }),
+    task_retried: v.looseObject({ previous_status: v.string() }),
+    task_waiting_input: v.looseObject({
+        task_id: v.optional(v.string()),
+        reason: v.optional(v.string()),
+    }),
+    review_started: v.looseObject({
+        level: v.string(),
+        task_id: v.optional(v.string()),
+        model: v.optional(v.string()),
+    }),
+    review_verdict: v.looseObject({
+        level: v.string(),
+        verdict: v.string(),
+        tokens: v.number(),
+        model: v.optional(v.string()),
+        feedback_length: v.optional(v.number()),
+        budget_exceeded: v.optional(v.boolean()),
+        budget_downgrade: v.optional(v.boolean()),
+        budget_skip: v.optional(v.boolean()),
+        passes: v.optional(v.number()),
+        blocks: v.optional(v.number()),
+    }),
+    dispute_opened: v.looseObject({
+        dispute_id: v.string(),
+        task_id: v.string(),
+        agent: v.optional(v.string()),
+        reason: v.optional(v.string()),
+    }),
+    dlq_entry_created: v.looseObject({
+        dlq_id: v.string(),
+        task_id: v.string(),
+        agent: v.optional(v.string()),
+        attempts: v.optional(v.number()),
+    }),
+    drift_check_result: v.looseObject({
+        score: v.optional(v.number()),
+        threshold: v.optional(v.number()),
+        passed: v.optional(v.boolean()),
+    }),
+    drift_detected: v.looseObject({
+        score: v.optional(v.number()),
+        files: v.optional(v.array(v.string())),
+    }),
+    circuit_breaker_tripped: v.looseObject({
+        agent: v.optional(v.string()),
+        failure_count: v.optional(v.number()),
+        threshold: v.optional(v.number()),
+    }),
+    circuit_breaker_fallback: v.looseObject({
+        original_agent: v.optional(v.string()),
+        fallback_agent: v.optional(v.string()),
+        task_id: v.optional(v.string()),
+    }),
+    circuit_breaker_blocked: v.looseObject({
+        agent: v.optional(v.string()),
+        task_id: v.optional(v.string()),
+    }),
+    merge_conflict_detected: v.looseObject({
+        task_id: v.optional(v.string()),
+        files: v.optional(v.array(v.string())),
+    }),
+    merge_conflict_failed: v.looseObject({
+        task_id: v.optional(v.string()),
+        error: v.optional(v.string()),
+    }),
+    file_injection_received: v.looseObject({
+        task_id: v.optional(v.string()),
+        from_task: v.optional(v.string()),
+        name: v.optional(v.string()),
+    }),
+    artifact_limit_reached: v.looseObject({
+        task_id: v.optional(v.string()),
+        limit: v.optional(v.number()),
+        current: v.optional(v.number()),
+    }),
+    agent_identity_captured: v.looseObject({
+        agent: v.optional(v.string()),
+        task_id: v.optional(v.string()),
+    }),
+    agent_identity_rejected: v.looseObject({
+        agent: v.optional(v.string()),
+        task_id: v.optional(v.string()),
+        reason: v.optional(v.string()),
+    }),
+    weak_area_skipped: v.looseObject({
+        agent: v.optional(v.string()),
+        weak_areas: v.optional(v.array(v.string())),
+        task_files: v.optional(v.array(v.string())),
+    }),
+    swarm_concurrency_update: v.looseObject({
+        new_concurrency: v.optional(v.number()),
+        reason: v.optional(v.string()),
+    }),
+    post_convoy_hook_failed: v.looseObject({
+        hook: v.optional(v.string()),
+        error: v.optional(v.string()),
+    }),
+    session: v.looseObject({
+        agent: v.optional(v.string()),
+        model: v.optional(v.string()),
+        task: v.optional(v.string()),
+        outcome: v.optional(v.string()),
+        duration_min: v.optional(v.number()),
+    }),
+    delegation: v.looseObject({
+        agent: v.optional(v.string()),
+        model: v.optional(v.string()),
+        tier: v.optional(v.string()),
+        mechanism: v.optional(v.string()),
+        outcome: v.optional(v.string()),
+    }),
+    secret_leak_prevented: v.looseObject({
+        original_type: v.optional(v.string()),
+        patterns: v.optional(v.array(v.string())),
+        task_id: v.optional(v.string()),
+        findings_count: v.optional(v.number()),
+        context: v.optional(v.string()),
+    }),
+    ndjson_write_failed: v.looseObject({ original_type: v.optional(v.string()) }),
+    built_in_gate_result: v.looseObject({
+        gate: v.string(),
+        passed: v.boolean(),
+        output: v.optional(v.string()),
+        level: v.optional(v.string()),
+    }),
+    watch_started: v.looseObject({
+        trigger_type: v.optional(v.string()),
+        pid: v.optional(v.number()),
+    }),
+    watch_cycle_start: v.looseObject({
+        cycle_number: v.optional(v.number()),
+        triggered_by: v.optional(v.string()),
+    }),
+    watch_cycle_end: v.looseObject({
+        cycle_number: v.optional(v.number()),
+        status: v.optional(v.string()),
+    }),
+    watch_stopped: v.looseObject({ reason: v.optional(v.string()) }),
+    worker_killed: v.looseObject({
+        reason: v.optional(v.string()),
+        worker_id: v.optional(v.string()),
+        task_id: v.optional(v.string()),
+    }),
+    discovered_issue: v.looseObject({
+        task_id: v.optional(v.string()),
+        title: v.optional(v.string()),
+        file: v.optional(v.string()),
+        description: v.optional(v.string()),
+        severity: v.optional(v.string()),
+    }),
+};
+export function validateEventData(type, data) {
+    const schema = EVENT_DATA_SCHEMAS[type];
+    if (schema === undefined)
+        return { valid: true };
+    if (data === undefined || data === null)
+        return { valid: true };
+    const result = v.safeParse(schema, data);
+    if (result.success)
+        return { valid: true };
+    return {
+        valid: false,
+        issues: result.issues.map((i) => i.message),
+    };
+}
+//# sourceMappingURL=event-schemas.js.map

package/dist/cli/convoy/event-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-schemas.js","sourceRoot":"","sources":["../../../src/cli/convoy/event-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAI5B,MAAM,CAAC,MAAM,kBAAkB,GAA8B;IAC3D,cAAc,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/D,eAAe,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACpF,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;IAExE,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAClE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAClC,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnD,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5D,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC;QAChC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC;IAEF,cAAc,EAAE,CAAC,CAAC,WAAW,CAAC;QAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,WAAW,CAAC;QAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACvC,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACxC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACzC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,WAAW,CAAC;QAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC;IACF,iBAAiB,EAAE,CAAC,CAAC,WAAW,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IAEF,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC;QAChC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAChC,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,WAAW,CAAC;QAC5B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KACvC,CAAC;IAEF,uBAAuB,EAAE,CAAC,CAAC,WAAW,CAAC;QACrC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACrC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAClC,CAAC;IACF,wBAAwB,EAAE,CAAC,CAAC,WAAW,CAAC;QACtC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACtC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;IACF,uBAAuB,EAAE,CAAC,CAAC,WAAW,CAAC;QACrC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;IAEF,uBAAuB,EAAE,CAAC,CAAC,WAAW,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KACvC,CAAC;IACF,qBAAqB,EAAE,CAAC,CAAC,WAAW,CAAC;QACnC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B,CAAC;IAEF,uBAAuB,EAAE,CAAC,CAAC,WAAW,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,sBAAsB,EAAE,CAAC,CAAC,WAAW,CAAC;QACpC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;IAEF,uBAAuB,EAAE,CAAC,CAAC,WAAW,CAAC;QACrC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;IACF,uBAAuB,EAAE,CAAC,CAAC,WAAW,CAAC;QACrC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC;IAEF,iBAAiB,EAAE,CAAC,CAAC,WAAW,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KAC5C,CAAC;IACF,wBAAwB,EAAE,CAAC,CAAC,WAAW,CAAC;QACtC,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC;IACF,uBAAuB,EAAE,CAAC,CAAC,WAAW,CAAC;QACrC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;IACF,qBAAqB,EAAE,CAAC,CAAC,WAAW,CAAC;QACnC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACrC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;IACF,mBAAmB,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAC7E,oBAAoB,EAAE,CAAC,CAAC,WAAW,CAAC;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC;QAC3B,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC5B,CAAC;IACF,iBAAiB,EAAE,CAAC,CAAC,WAAW,CAAC;QAC/B,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACrC,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,WAAW,CAAC;QAC7B,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC/B,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAChE,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC;QAC3B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,WAAW,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACnC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAA;AACD,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,IAAa;IAEb,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACxC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC1C,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;KAC5C,CAAA;AACH,CAAC"}

package/dist/cli/convoy/events.d.ts

@@ -1,4 +1,6 @@
 import type { ConvoyStore } from './store.js';
+export declare function validateEventType(type: string): boolean;
+export declare function ndjsonPathForConvoy(convoyId: string, basePath?: string): string;
 export interface ConvoyEventEmitter {
     emit(type: string, data?: Record<string, unknown>, ids?: {
         convoy_id?: string;
@@ -10,4 +12,10 @@ export interface ConvoyEventEmitter {
 export declare function createEventEmitter(store: ConvoyStore, options?: {
     ndjsonPath?: string;
 }): ConvoyEventEmitter;
+/**
+ * Truncate any trailing partial line in the NDJSON file, then replay any SQLite
+ * events for the given convoy that are missing from the file.
+ * Exported for unit testing.
+ */
+export declare function recoverNdjson(store: ConvoyStore, convoyId: string, ndjsonPath: string): void;
 //# sourceMappingURL=events.d.ts.map

package/dist/cli/convoy/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/cli/convoy/events.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAG7C,MAAM,WAAW,kBAAkB;IACjC,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACjE,IAAI,CAAA;IACP,KAAK,IAAI,IAAI,CAAA;CACd;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAChC,kBAAkB,CAgGpB"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/cli/convoy/events.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAO7C,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAG/E;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACjE,IAAI,CAAA;IACP,KAAK,IAAI,IAAI,CAAA;CACd;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAChC,kBAAkB,CAkHpB;AAUD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAmE5F"}

package/dist/cli/convoy/events.js

@@ -1,13 +1,35 @@
-import { appendFileSync, closeSync, fsyncSync, openSync } from 'node:fs';
+import { appendFileSync, closeSync, fsyncSync, mkdirSync, openSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { KNOWN_EVENT_TYPES } from './types.js';
+import { validateEventData } from './event-schemas.js';
+const RESERVED_KEYS = new Set(['_event_id', 'convoy_id', 'task_id', 'worker_id', 'timestamp', 'type']);
 import { scanForSecrets } from './gates.js';
+export function validateEventType(type) {
+    return KNOWN_EVENT_TYPES.has(type);
+}
+export function ndjsonPathForConvoy(convoyId, basePath) {
+    const base = basePath ?? process.cwd();
+    return join(base, '.opencastle', 'logs', 'convoys', `${convoyId}.ndjson`);
+}
 export function createEventEmitter(store, options) {
+    if (typeof options === 'string') {
+        throw new TypeError('createEventEmitter options must be an object, not a string');
+    }
     let fd = null;
     if (options?.ndjsonPath) {
+        mkdirSync(dirname(options.ndjsonPath), { recursive: true });
         fd = openSync(options.ndjsonPath, 'a');
     }
     // NDJSON writes are supplementary — SQLite is the primary store. Use async
     // retries to avoid blocking the Node.js event loop.
     async function writeNdjson(type, data, ids, now, eventId, currentFd) {
+        const safeData = {};
+        if (data) {
+            for (const [k, v] of Object.entries(data)) {
+                if (!RESERVED_KEYS.has(k))
+                    safeData[k] = v;
+            }
+        }
         const record = {
             _event_id: eventId,
             timestamp: now,
@@ -15,7 +37,7 @@ export function createEventEmitter(store, options) {
             convoy_id: ids?.convoy_id ?? null,
             task_id: ids?.task_id ?? null,
             worker_id: ids?.worker_id ?? null,
-            ...(data ?? {}),
+            ...safeData,
         };
         const jsonLine = JSON.stringify(record) + '\n';
         const scanResult = scanForSecrets(jsonLine, 'ndjson');
@@ -57,9 +79,16 @@ export function createEventEmitter(store, options) {
     }
     return {
         emit(type, data, ids) {
-            // Event data is NOT secret-scanned here because all user-generated content
-            // (task output, DLQ entries) is scanned at its source before reaching the
-            // event emitter. Re-scanning would be redundant. See MF-4 in panel report.
+            // SQLite insert is not scanned; NDJSON write is scanned via writeNdjson().
+            // User-generated content (task output, DLQ entries) is scanned at its source
+            // before reaching the event emitter. See MF-4 in panel report.
+            if (!validateEventType(type)) {
+                console.warn(`[convoy] Unknown event type: "${type}"`);
+            }
+            const dataValidation = validateEventData(type, data);
+            if (!dataValidation.valid) {
+                console.warn(`[convoy] Invalid data for event type "${type}": ${dataValidation.issues?.join(', ')}`);
+            }
             const now = new Date().toISOString();
             const eventId = store.insertEvent({
                 convoy_id: ids?.convoy_id ?? null,
@@ -85,4 +114,87 @@ export function createEventEmitter(store, options) {
         },
     };
 }
+function safeJsonParse(raw) {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Truncate any trailing partial line in the NDJSON file, then replay any SQLite
+ * events for the given convoy that are missing from the file.
+ * Exported for unit testing.
+ */
+export function recoverNdjson(store, convoyId, ndjsonPath) {
+    // 1. Read the NDJSON file (if it exists)
+    let fileContent;
+    try {
+        fileContent = readFileSync(ndjsonPath, 'utf8');
+    }
+    catch {
+        fileContent = '';
+    }
+    // 2. Truncate any partial trailing line (no \n terminator)
+    if (fileContent.length > 0 && !fileContent.endsWith('\n')) {
+        const lastNewline = fileContent.lastIndexOf('\n');
+        if (lastNewline === -1) {
+            writeFileSync(ndjsonPath, '');
+            fileContent = '';
+        }
+        else {
+            writeFileSync(ndjsonPath, fileContent.slice(0, lastNewline + 1));
+            fileContent = fileContent.slice(0, lastNewline + 1);
+        }
+    }
+    // 3. Count valid NDJSON event IDs for this convoy
+    const ndjsonIds = new Set();
+    for (const line of fileContent.split('\n')) {
+        if (!line.trim())
+            continue;
+        try {
+            const parsed = JSON.parse(line);
+            if (parsed.convoy_id === convoyId && parsed._event_id != null) {
+                ndjsonIds.add(parsed._event_id);
+            }
+        }
+        catch {
+            // Skip unparseable lines
+        }
+    }
+    // 4. Get all SQLite events for this convoy
+    const sqliteEvents = store.getEvents(convoyId);
+    // 5. Replay missing events (those in SQLite but not in NDJSON)
+    const missing = sqliteEvents.filter(e => e.id != null && !ndjsonIds.has(e.id));
+    if (missing.length > 0) {
+        const fd = openSync(ndjsonPath, 'a');
+        try {
+            for (const event of missing) {
+                const parsedData = event.data ? safeJsonParse(event.data) : {};
+                // Strip reserved keys from event.data to prevent attacker-controlled
+                // values from overriding canonical fields from the DB row.
+                const safeData = {};
+                for (const [key, value] of Object.entries(parsedData)) {
+                    if (!RESERVED_KEYS.has(key))
+                        safeData[key] = value;
+                }
+                const record = {
+                    ...safeData,
+                    _event_id: event.id,
+                    timestamp: event.created_at,
+                    type: event.type,
+                    convoy_id: event.convoy_id,
+                    task_id: event.task_id,
+                    worker_id: event.worker_id,
+                };
+                appendFileSync(fd, JSON.stringify(record) + '\n');
+            }
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+}
 //# sourceMappingURL=events.js.map

package/dist/cli/convoy/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/cli/convoy/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAExE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAW3C,MAAM,UAAU,kBAAkB,CAChC,KAAkB,EAClB,OAAiC;IAEjC,IAAI,EAAE,GAAkB,IAAI,CAAA;IAC5B,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;QACxB,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IACxC,CAAC;IAED,2EAA2E;IAC3E,oDAAoD;IACpD,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,IAAyC,EACzC,GAA6E,EAC7E,GAAW,EACX,OAAe,EACf,SAAiB;QAEjB,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,GAAG;YACd,IAAI;YACJ,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;YACjC,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;YAC7B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;YACjC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SAChB,CAAA;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;QAE9C,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACrD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,mEAAmE;YACnE,KAAK,CAAC,WAAW,CAAC;gBAChB,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;gBACjC,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;gBAC7B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;gBACjC,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChG,UAAU,EAAE,GAAG;aAChB,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,CAAC;YACH,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;YACnC,SAAS,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;YACxC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;YAC5D,IAAI,CAAC;gBACH,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;gBACnC,SAAS,CAAC,SAAS,CAAC,CAAA;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;gBAC5E,KAAK,CAAC,WAAW,CAAC;oBAChB,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;oBACjC,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;oBAC7B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;oBACjC,IAAI,EAAE,qBAAqB;oBAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;oBAC7C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACrC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG;YAClB,2EAA2E;YAC3E,0EAA0E;YAC1E,2EAA2E;YAC3E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAEpC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC;gBAChC,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;gBACjC,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;gBAC7B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;gBACjC,IAAI;gBACJ,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACtD,UAAU,EAAE,GAAG;aAChB,CAAC,CAAA;YAEF,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBACxD,mFAAmF;gBACrF,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,KAAK;YACH,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,SAAS,CAAC,EAAE,CAAC,CAAA;gBACb,EAAE,GAAG,IAAI,CAAA;YACX,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/cli/convoy/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAChH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE3C,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,QAAiB;IACrE,MAAM,IAAI,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACtC,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,SAAS,CAAC,CAAA;AAC3E,CAAC;AAWD,MAAM,UAAU,kBAAkB,CAChC,KAAkB,EAClB,OAAiC;IAEjC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,4DAA4D,CAAC,CAAA;IACnF,CAAC;IAED,IAAI,EAAE,GAAkB,IAAI,CAAA;IAC5B,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3D,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IACxC,CAAC;IAED,2EAA2E;IAC3E,oDAAoD;IACpD,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,IAAyC,EACzC,GAA6E,EAC7E,GAAW,EACX,OAAe,EACf,SAAiB;QAEjB,MAAM,QAAQ,GAA4B,EAAE,CAAA;QAC5C,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,GAAG;YACd,IAAI;YACJ,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;YACjC,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;YAC7B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;YACjC,GAAG,QAAQ;SACZ,CAAA;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;QAE9C,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACrD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,mEAAmE;YACnE,KAAK,CAAC,WAAW,CAAC;gBAChB,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;gBACjC,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;gBAC7B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;gBACjC,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChG,UAAU,EAAE,GAAG;aAChB,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,CAAC;YACH,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;YACnC,SAAS,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;YACxC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;YAC5D,IAAI,CAAC;gBACH,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;gBACnC,SAAS,CAAC,SAAS,CAAC,CAAA;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;gBAC5E,KAAK,CAAC,WAAW,CAAC;oBAChB,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;oBACjC,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;oBAC7B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;oBACjC,IAAI,EAAE,qBAAqB;oBAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;oBAC7C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACrC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG;YAClB,2EAA2E;YAC3E,6EAA6E;YAC7E,+DAA+D;YAC/D,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,iCAAiC,IAAI,GAAG,CAAC,CAAA;YACxD,CAAC;YACD,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACpD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,yCAAyC,IAAI,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACtG,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAEpC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC;gBAChC,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;gBACjC,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;gBAC7B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;gBACjC,IAAI;gBACJ,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACtD,UAAU,EAAE,GAAG;aAChB,CAAC,CAAA;YAEF,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBACxD,mFAAmF;gBACrF,CAAC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,KAAK;YACH,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,SAAS,CAAC,EAAE,CAAC,CAAA;gBACb,EAAE,GAAG,IAAI,CAAA;YACX,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAkB,EAAE,QAAgB,EAAE,UAAkB;IACpF,yCAAyC;IACzC,IAAI,WAAmB,CAAA;IACvB,IAAI,CAAC;QACH,WAAW,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,EAAE,CAAA;IAClB,CAAC;IAED,2DAA2D;IAC3D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;QACjD,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;YAC7B,WAAW,GAAG,EAAE,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC,CAAA;YAChE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAQ;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAA;YAC1D,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gBAC9D,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAmB,CAAC,CAAA;YAC3C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IAE9C,+DAA+D;IAC/D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAG,CAAC,CAAC,CAAA;IAC/E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;gBAC9D,qEAAqE;gBACrE,2DAA2D;gBAC3D,MAAM,QAAQ,GAA4B,EAAE,CAAA;gBAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACtD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBACpD,CAAC;gBACD,MAAM,MAAM,GAAG;oBACb,GAAG,QAAQ;oBACX,SAAS,EAAE,KAAK,CAAC,EAAE;oBACnB,SAAS,EAAE,KAAK,CAAC,UAAU;oBAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAA;gBACD,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAA;YACnD,CAAC;YACD,SAAS,CAAC,EAAE,CAAC,CAAA;QACf,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAA;QACf,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/convoy/events.test.js

@@ -2,10 +2,10 @@ import { mkdtempSync, readFileSync, writeFileSync, rmSync, existsSync } from 'no
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { realpathSync } from 'node:fs';
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
 import { createConvoyStore } from './store.js';
-import { createEventEmitter } from './events.js';
-import { recoverNdjson } from './engine.js';
+import { createEventEmitter, ndjsonPathForConvoy, recoverNdjson, validateEventType } from './events.js';
+import { KNOWN_EVENT_TYPES } from './types.js';
 let tmpDir;
 let store;
 let ndjsonPath;
@@ -28,6 +28,10 @@ afterEach(() => {
     rmSync(tmpDir, { recursive: true, force: true });
 });
 describe('createEventEmitter', () => {
+    it('throws TypeError when options is a string', () => {
+        expect(() => createEventEmitter(store, 'bad')).toThrow(TypeError);
+        expect(() => createEventEmitter(store, 'bad')).toThrow('createEventEmitter options must be an object, not a string');
+    });
     it('inserts the event into SQLite', () => {
         const emitter = createEventEmitter(store);
         emitter.emit('task_started', { msg: 'started' }, { convoy_id: 'c1' });
@@ -112,6 +116,28 @@ describe('createEventEmitter', () => {
         emitter.close();
         expect(() => emitter.close()).not.toThrow();
     });
+    it('sanitizes reserved keys from caller data before NDJSON write', () => {
+        const emitter = createEventEmitter(store, { ndjsonPath });
+        emitter.emit('task_started', {
+            convoy_id: 'attacker',
+            timestamp: 'fake',
+            _event_id: 999,
+            type: 'evil',
+            task_id: 'injected',
+            worker_id: 'hacker',
+            custom_field: 'ok',
+        }, { convoy_id: 'c1', task_id: 't1', worker_id: 'w1' });
+        emitter.close();
+        const content = readFileSync(ndjsonPath, 'utf8');
+        const line = JSON.parse(content.trim());
+        expect(line.convoy_id).toBe('c1');
+        expect(line.task_id).toBe('t1');
+        expect(line.worker_id).toBe('w1');
+        expect(line.type).toBe('task_started');
+        expect(line._event_id).not.toBe(999);
+        expect(line.timestamp).not.toBe('fake');
+        expect(line.custom_field).toBe('ok');
+    });
 });
 describe('crash resilience', () => {
     it('1. mid-write crash: SQLite has events, recovery writes NDJSON', () => {
@@ -217,5 +243,149 @@ describe('crash resilience', () => {
         const linesAfter = readFileSync(ndjsonPath, 'utf8').split('\n').filter(l => l.trim());
         expect(linesAfter).toHaveLength(count);
     });
+    it('6. canonical-field protection: event.data cannot override DB row fields', () => {
+        // Insert an event whose data contains attacker-controlled reserved keys
+        store.insertEvent({
+            convoy_id: 'c1',
+            task_id: 'legit-task',
+            worker_id: 'legit-worker',
+            type: 'task_done',
+            data: JSON.stringify({
+                convoy_id: 'attacker',
+                timestamp: 'fake',
+                _event_id: 9999,
+                type: 'evil',
+                task_id: 'injected',
+                worker_id: 'hacker',
+                safe_field: 'this-is-fine',
+            }),
+            created_at: new Date().toISOString(),
+        });
+        recoverNdjson(store, 'c1', ndjsonPath);
+        const lines = readFileSync(ndjsonPath, 'utf8').split('\n').filter(l => l.trim());
+        expect(lines).toHaveLength(1);
+        const record = JSON.parse(lines[0]);
+        // Canonical fields must come from the DB row, not from data
+        expect(record.convoy_id).toBe('c1');
+        expect(record.task_id).toBe('legit-task');
+        expect(record.worker_id).toBe('legit-worker');
+        expect(record.type).toBe('task_done');
+        expect(record._event_id).not.toBe(9999);
+        expect(record.timestamp).not.toBe('fake');
+        // Attacker values must not appear
+        expect(record.convoy_id).not.toBe('attacker');
+        expect(record.type).not.toBe('evil');
+        expect(record.task_id).not.toBe('injected');
+        expect(record.worker_id).not.toBe('hacker');
+        // Safe non-reserved fields are preserved
+        expect(record.safe_field).toBe('this-is-fine');
+    });
+});
+describe('KNOWN_EVENT_TYPES', () => {
+    it('contains all canonical event types', () => {
+        const canonical = [
+            'convoy_started', 'convoy_finished', 'convoy_failed', 'convoy_guard',
+            'task_started', 'task_done', 'task_failed', 'task_skipped', 'task_retried', 'task_waiting_input',
+            'review_started', 'review_verdict', 'dispute_opened', 'dlq_entry_created',
+            'drift_check_result', 'drift_detected',
+            'circuit_breaker_tripped', 'circuit_breaker_fallback', 'circuit_breaker_blocked',
+            'merge_conflict_detected', 'merge_conflict_failed',
+            'file_injection_received', 'artifact_limit_reached',
+            'agent_identity_captured', 'agent_identity_rejected',
+            'weak_area_skipped', 'swarm_concurrency_update', 'post_convoy_hook_failed',
+            'session', 'delegation',
+            'secret_leak_prevented', 'ndjson_write_failed', 'built_in_gate_result',
+            'watch_started', 'watch_cycle_start', 'watch_cycle_end', 'watch_stopped',
+            'worker_killed', 'discovered_issue',
+        ];
+        for (const type of canonical) {
+            expect(KNOWN_EVENT_TYPES.has(type)).toBe(true);
+        }
+    });
+    it('has no duplicates (Set size matches array)', () => {
+        expect(KNOWN_EVENT_TYPES.size).toBeGreaterThanOrEqual(37);
+    });
+});
+describe('ndjsonPathForConvoy', () => {
+    it('returns correct per-convoy path with default basePath', () => {
+        const result = ndjsonPathForConvoy('abc-123');
+        expect(result).toBe(join(process.cwd(), '.opencastle', 'logs', 'convoys', 'abc-123.ndjson'));
+    });
+    it('returns correct per-convoy path with custom basePath', () => {
+        const result = ndjsonPathForConvoy('xyz-456', '/custom/base');
+        expect(result).toBe(join('/custom/base', '.opencastle', 'logs', 'convoys', 'xyz-456.ndjson'));
+    });
+});
+describe('createEventEmitter directory creation', () => {
+    it('creates parent directory when ndjsonPath is in a non-existent directory', () => {
+        const nestedPath = join(tmpDir, 'nested', 'dir', 'events.ndjson');
+        const emitter = createEventEmitter(store, { ndjsonPath: nestedPath });
+        emitter.emit('convoy_started', { name: 'test' }, { convoy_id: 'c1' });
+        emitter.close();
+        expect(existsSync(nestedPath)).toBe(true);
+        const content = readFileSync(nestedPath, 'utf8');
+        const line = JSON.parse(content.trim());
+        expect(line.type).toBe('convoy_started');
+    });
+});
+describe('validateEventType', () => {
+    it('returns true for known event types', () => {
+        expect(validateEventType('convoy_started')).toBe(true);
+        expect(validateEventType('task_done')).toBe(true);
+        expect(validateEventType('watch_stopped')).toBe(true);
+    });
+    it('returns false for unknown event types', () => {
+        expect(validateEventType('unknown_event')).toBe(false);
+        expect(validateEventType('')).toBe(false);
+        expect(validateEventType('convoy_start')).toBe(false);
+    });
+});
+describe('emit-time data validation', () => {
+    let warnSpy;
+    beforeEach(() => {
+        warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => { });
+    });
+    afterEach(() => {
+        warnSpy.mockRestore();
+    });
+    it('valid data passes without warning', () => {
+        const emitter = createEventEmitter(store);
+        emitter.emit('convoy_finished', { status: 'done' }, { convoy_id: 'c1' });
+        emitter.close();
+        expect(warnSpy).not.toHaveBeenCalled();
+    });
+    it('invalid data shape warns with correct message', () => {
+        const emitter = createEventEmitter(store);
+        emitter.emit('convoy_finished', { status: 123 }, { convoy_id: 'c1' });
+        emitter.close();
+        expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining('Invalid data for event type "convoy_finished"'));
+    });
+    it('missing required field warns', () => {
+        const emitter = createEventEmitter(store);
+        // task_failed requires reason: string — passing {} should fail
+        emitter.emit('task_failed', {}, { convoy_id: 'c1' });
+        emitter.close();
+        expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining('Invalid data for event type "task_failed"'));
+    });
+    it('extra fields are allowed (no warning)', () => {
+        const emitter = createEventEmitter(store);
+        emitter.emit('convoy_started', { name: 'test', extra: true }, { convoy_id: 'c1' });
+        emitter.close();
+        expect(warnSpy).not.toHaveBeenCalled();
+    });
+    it('undefined data is valid', () => {
+        const emitter = createEventEmitter(store);
+        emitter.emit('convoy_started', undefined, { convoy_id: 'c1' });
+        emitter.close();
+        expect(warnSpy).not.toHaveBeenCalled();
+    });
+    it('unknown event type bypasses data validation (only one warning)', () => {
+        const emitter = createEventEmitter(store);
+        emitter.emit('unknown_type_xyz', { any: 'data' }, { convoy_id: 'c1' });
+        emitter.close();
+        expect(warnSpy).toHaveBeenCalledTimes(1);
+        expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining('Unknown event type: "unknown_type_xyz"'));
+        expect(warnSpy).not.toHaveBeenCalledWith(expect.stringContaining('Invalid data'));
+    });
 });
 //# sourceMappingURL=events.test.js.map