opensquid 0.5.395

package/dist/functions/active_task.js

@@ -0,0 +1,203 @@
+/**
+ * AP.4 — read-side primitives for the workflow gate.
+ *
+ *   - `has_active_task` — is there an active task this session, and what is it?
+ *     Used by the workflow gate (rule #8) AND the scope→task Gate A (AP.5).
+ *   - `workflow_phases_complete` — are all 7 REQUIRED phases logged for the
+ *     CURRENTLY-active task? Computed at read time against the live active task
+ *     (so a new task never inherits a prior task's completion — see
+ *     workflow_phases.ts).
+ *
+ * Both are read-only, no args, never throw. GF.4 (F6): a read failure returns the
+ * conservative `ok` verdict ("no active task" / "not complete" / "not generated"),
+ * NEVER an `err` — an `err` rule result is silently skipped by the dispatcher
+ * (dispatch.ts:462), which would let a blocking gate fall through to ALLOW (fail-open).
+ * Returning a conservative `ok` makes the gate fail CLOSED. `memoizable: false` is
+ * load-bearing: the active task + phase ledger change within a session, so a memoized
+ * result would be stale.
+ *
+ * Imports from: zod, ../runtime/result.js, ../runtime/session_state.js,
+ *   ../runtime/workflow_phases.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { stat } from 'node:fs/promises';
+import { dirname, isAbsolute, resolve } from 'node:path';
+import { z } from 'zod';
+import { readHarnessTasks } from '../runtime/hooks/active_task_mirror.js';
+import { ok } from '../runtime/result.js';
+import { readActiveTask } from '../runtime/session_state.js';
+import { isComplete, readPhaseState } from '../runtime/workflow_phases.js';
+const NoArgs = z.object({}).strict();
+export const HasActiveTask = {
+    name: 'has_active_task',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 2,
+    execute: async (_args, ctx) => {
+        try {
+            const active = await readActiveTask(ctx.sessionId);
+            if (active === null)
+                return ok({ present: false, id: '', task_id: '' });
+            return ok({ present: true, id: active.id, task_id: active.taskId ?? '' });
+        }
+        catch {
+            // GF.4 (F6): fail CLOSED — a thrown read becomes the conservative verdict (no
+            // active task), NEVER an `err` the dispatcher silently skips (dispatch.ts:462),
+            // which would let a blocking gate fall through to ALLOW.
+            return ok({ present: false, id: '', task_id: '' });
+        }
+    },
+};
+export const WorkflowPhasesComplete = {
+    name: 'workflow_phases_complete',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 3,
+    execute: async (_args, ctx) => {
+        try {
+            const active = await readActiveTask(ctx.sessionId);
+            if (active === null)
+                return ok({ active: false, complete: false });
+            const state = await readPhaseState(ctx.sessionId);
+            return ok({ active: true, complete: isComplete(state, active.id) });
+        }
+        catch {
+            // GF.4 (F6): fail CLOSED — not complete on any read failure.
+            return ok({ active: false, complete: false });
+        }
+    },
+};
+async function pathExistsAbs(p) {
+    try {
+        await stat(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Does the active task have GENERATOR PROVENANCE — a `docs/tasks` 11-field spec
+ * the scope→task pipeline produced? Backs scope→task Gate A (AP.5): a code-write
+ * whose active task has no generated spec is blocked.
+ *
+ * Provenance = `active-task.json.spec` (copied by the AP.1 mirror from the
+ * harness `metadata.spec`) resolving to a real file. H7: the spec lives in the
+ * umbrella's PLANNING repo while the code-write may run in a member SUB-repo,
+ * so an ABSOLUTE `spec` is checked directly and a RELATIVE one is resolved
+ * against the event cwd AND each of its ancestors (the planning repo is an
+ * ancestor in every real layout; T-FIX-TASKSTART-GUARD-MIRROR — the old
+ * cwd-only resolution dangled from sub-repo cwds and false-fired the FU.11
+ * task_unscoped reset mid-flow). No active task OR no spec OR a path found
+ * nowhere → not generated (the conservative verdict — Gate A blocks).
+ */
+export const HasGeneratedSpec = {
+    name: 'has_generated_spec',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 4,
+    execute: async (_args, ctx) => {
+        try {
+            const active = await readActiveTask(ctx.sessionId);
+            if (active === null)
+                return ok({ present: false, generated: false });
+            const spec = active.spec;
+            if (spec === undefined || spec === '')
+                return ok({ present: true, generated: false });
+            const cwd = ctx.event.kind === 'tool_call' ? (ctx.event.cwd ?? process.cwd()) : process.cwd();
+            if (isAbsolute(spec)) {
+                return ok({ present: true, generated: await pathExistsAbs(spec) });
+            }
+            // Relative: cwd first, then ancestors (bounded walk, same 64-hop bound
+            // as resolveProjectScopeRoot). Found nowhere → conservative false.
+            let dir = resolve(cwd);
+            for (let i = 0; i < 64; i++) {
+                if (await pathExistsAbs(resolve(dir, spec))) {
+                    return ok({ present: true, generated: true });
+                }
+                const parent = dirname(dir);
+                if (parent === dir)
+                    break;
+                dir = parent;
+            }
+            return ok({ present: true, generated: false });
+        }
+        catch {
+            // GF.4 (F6): fail CLOSED — not generated on any read failure.
+            return ok({ present: false, generated: false });
+        }
+    },
+};
+/**
+ * Gate B (AP.5) read-side: does the ENTIRE open task list have generator
+ * provenance? Walks the harness store (via AP.1's isolated reader) and flags any
+ * pending/in_progress task lacking `metadata.taskId` — the stamp scope→task
+ * generation applies (H6). Closes Gate A's loophole: a task smuggled into the
+ * list manually (no spec, no pre-research) would otherwise let code through once
+ * loaded. Completed/deleted tasks are ignored (only open work must be generated).
+ */
+export const TaskListGenerated = {
+    name: 'task_list_generated',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 5,
+    execute: async (_args, ctx) => {
+        try {
+            // ATM.2: THIS CC version keeps the task list in the session transcript,
+            // not ~/.claude/tasks/. The UPS hook (which has transcript_path; this
+            // function layer does not) derives the open-task list onto
+            // `event.openTasks` for the prompt_submit Gate B fires on. Prefer it;
+            // fall back to the harness-store read for older CC / non-UPS events.
+            const ev = ctx.event;
+            const open = ev.kind === 'prompt_submit' && ev.openTasks !== undefined
+                ? ev.openTasks
+                : (await readHarnessTasks(ctx.sessionId)).map((t) => ({
+                    id: t.id,
+                    status: t.status,
+                    taskId: t.metadata?.taskId,
+                }));
+            const ungenerated = open
+                .filter((t) => t.status === 'pending' || t.status === 'in_progress')
+                .filter((t) => t.taskId === undefined || t.taskId === '')
+                .map((t) => t.id);
+            return ok({ all_generated: ungenerated.length === 0, ungenerated });
+        }
+        catch {
+            // GF.4 (F6): fail CLOSED — treat an unreadable task store as "not all generated"
+            // (Gate B blocks), never an `err` the dispatcher skips.
+            return ok({ all_generated: false, ungenerated: [] });
+        }
+    },
+};
+/**
+ * AF.6 — the number of OPEN (pending|in_progress) tasks. The pause-gates derive whether a
+ * workflow RUN is still active from this + the FSM state (run-active = FSM≠idle AND
+ * (count>0 OR FSM≠phases_complete)); the run auto-OFFs when the backlog is depleted.
+ * Prefers `event.openTasks` (prompt_submit, transcript-derived by the UPS hook); falls
+ * back to the harness store for older CC / non-UPS events. Never throws → count 0.
+ */
+export const OpenTaskCount = {
+    name: 'open_task_count',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 2,
+    execute: async (_args, ctx) => {
+        try {
+            const ev = ctx.event;
+            const open = ev.kind === 'prompt_submit' && ev.openTasks !== undefined
+                ? ev.openTasks
+                : (await readHarnessTasks(ctx.sessionId)).map((t) => ({ id: t.id, status: t.status }));
+            const count = open.filter((t) => t.status === 'pending' || t.status === 'in_progress').length;
+            return ok({ count });
+        }
+        catch {
+            return ok({ count: 0 });
+        }
+    },
+};
+//# sourceMappingURL=active_task.js.map

package/dist/functions/active_task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active_task.js","sourceRoot":"","sources":["../../src/functions/active_task.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAI3E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAUrC,MAAM,CAAC,MAAM,aAAa,GAA6D;IACrF,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,8EAA8E;YAC9E,gFAAgF;YAChF,yDAAyD;YACzD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;CACF,CAAC;AASF,MAAM,CAAC,MAAM,sBAAsB,GAG/B;IACF,IAAI,EAAE,0BAA0B;IAChC,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAClD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF,CAAC;AASF,KAAK,UAAU,aAAa,CAAC,CAAS;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAgE;IAC3F,IAAI,EAAE,oBAAoB;IAC1B,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC9F,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,uEAAuE;YACvE,mEAAmE;YACnE,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,IAAI,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC5C,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5B,IAAI,MAAM,KAAK,GAAG;oBAAE,MAAM;gBAC1B,GAAG,GAAG,MAAM,CAAC;YACf,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF,CAAC;AASF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAiE;IAC7F,IAAI,EAAE,qBAAqB;IAC3B,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,wEAAwE;YACxE,sEAAsE;YACtE,2DAA2D;YAC3D,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;YACrB,MAAM,IAAI,GACR,EAAE,CAAC,IAAI,KAAK,eAAe,IAAI,EAAE,CAAC,SAAS,KAAK,SAAS;gBACvD,CAAC,CAAC,EAAE,CAAC,SAAS;gBACd,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClD,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM;iBAC3B,CAAC,CAAC,CAAC;YACV,MAAM,WAAW,GAAG,IAAI;iBACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC;iBACnE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC;iBACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,iFAAiF;YACjF,wDAAwD;YACxD,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;CACF,CAAC;AAMF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAA6D;IACrF,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;YACrB,MAAM,IAAI,GACR,EAAE,CAAC,IAAI,KAAK,eAAe,IAAI,EAAE,CAAC,SAAS,KAAK,SAAS;gBACvD,CAAC,CAAC,EAAE,CAAC,SAAS;gBACd,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,MAAM,CAAC;YAC9F,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/functions/cached_audit.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `cached_audit` primitive — persistent, content-hash-keyed memoization of an
+ * adversarial LLM audit verdict.
+ *
+ * WHY (F0c spawn exhaustion): the coding-flow SCOPE/AUTHOR gates run their
+ * audit via `subagent_call` (llm.ts) on EVERY pre-research / spec write. Its
+ * `if` keys only on the file PATH, so re-editing the SAME artifact cold-spawns
+ * `claude -p` again. In a long session those spawns contend on one subscription
+ * bucket and start HANGING at the 170s timeout. This primitive caches the
+ * verdict keyed by the audit prompt's sha256 (the prompt embeds the artifact,
+ * so identical content → identical key) in SESSION STATE — which persists
+ * across turns / short-lived hook subprocesses, unlike the evaluator's per-run
+ * memo. A re-fire on UNCHANGED content returns the cached verdict with NO spawn.
+ *
+ * Cache discipline:
+ *   - Only a REAL verdict (output contains "VERDICT:") is cached. A timeout /
+ *     spawn error is returned as `err` and NEVER cached — so the skill's
+ *     `on_error: continue` still routes it to the AUDIT-UNAVAILABLE branch and
+ *     the NEXT turn retries the spawn (F0c fresh-session recovery preserved).
+ *   - Key = sha256(prompt). The prompt includes BOTH the audit instruction and
+ *     the artifact, so a changed artifact OR a changed instruction → cache miss
+ *     → fresh audit. No stale verdict can be reused.
+ *
+ * NOT `memoizable` (the evaluator memo is per-run; THIS cache is the explicit
+ * cross-turn one) and NOT `durable` (the state write IS its durability).
+ *
+ * Imports from: zod, ../models/load_config.js, ../models/dispatcher.js,
+ *   ../runtime/paths.js, ../runtime/durable/run_id.js, ../runtime/result.js.
+ * Imported by: src/functions/index.ts (registry wiring).
+ */
+import type { FunctionRegistry } from './registry.js';
+export declare function registerCachedAuditFunction(registry: FunctionRegistry): void;
+//# sourceMappingURL=cached_audit.d.ts.map

package/dist/functions/cached_audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cached_audit.d.ts","sourceRoot":"","sources":["../../src/functions/cached_audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAcH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAgFtD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAwD5E"}

package/dist/functions/cached_audit.js

@@ -0,0 +1,143 @@
+/**
+ * `cached_audit` primitive — persistent, content-hash-keyed memoization of an
+ * adversarial LLM audit verdict.
+ *
+ * WHY (F0c spawn exhaustion): the coding-flow SCOPE/AUTHOR gates run their
+ * audit via `subagent_call` (llm.ts) on EVERY pre-research / spec write. Its
+ * `if` keys only on the file PATH, so re-editing the SAME artifact cold-spawns
+ * `claude -p` again. In a long session those spawns contend on one subscription
+ * bucket and start HANGING at the 170s timeout. This primitive caches the
+ * verdict keyed by the audit prompt's sha256 (the prompt embeds the artifact,
+ * so identical content → identical key) in SESSION STATE — which persists
+ * across turns / short-lived hook subprocesses, unlike the evaluator's per-run
+ * memo. A re-fire on UNCHANGED content returns the cached verdict with NO spawn.
+ *
+ * Cache discipline:
+ *   - Only a REAL verdict (output contains "VERDICT:") is cached. A timeout /
+ *     spawn error is returned as `err` and NEVER cached — so the skill's
+ *     `on_error: continue` still routes it to the AUDIT-UNAVAILABLE branch and
+ *     the NEXT turn retries the spawn (F0c fresh-session recovery preserved).
+ *   - Key = sha256(prompt). The prompt includes BOTH the audit instruction and
+ *     the artifact, so a changed artifact OR a changed instruction → cache miss
+ *     → fresh audit. No stale verdict can be reused.
+ *
+ * NOT `memoizable` (the evaluator memo is per-run; THIS cache is the explicit
+ * cross-turn one) and NOT `durable` (the state write IS its durability).
+ *
+ * Imports from: zod, ../models/load_config.js, ../models/dispatcher.js,
+ *   ../runtime/paths.js, ../runtime/durable/run_id.js, ../runtime/result.js.
+ * Imported by: src/functions/index.ts (registry wiring).
+ */
+import { appendFile, mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { z } from 'zod';
+import { resolveStrategy } from '../models/dispatcher.js';
+import { loadModelsConfig } from '../models/load_config.js';
+import { CliTimeoutError } from '../models/strategies/subscription_cli.js';
+import { sha256Hex } from '../runtime/durable/run_id.js';
+import { sessionLogFile, sessionStateFile } from '../runtime/paths.js';
+import { err, ok } from '../runtime/result.js';
+const CachedAuditArgs = z
+    .object({
+    cache_key: z.string().min(1),
+    model: z.string().min(1),
+    prompt: z.string().min(1),
+    timeout_ms: z.number().int().min(1).max(600_000).optional(),
+})
+    .strict();
+function isCacheEntry(v) {
+    return (v !== null &&
+        typeof v === 'object' &&
+        typeof v.hash === 'string' &&
+        typeof v.verdict === 'string');
+}
+/** The cached verdict IFF a valid entry exists AND its hash matches; else null. */
+async function readCachedVerdict(sessionId, key, hash) {
+    try {
+        const parsed = JSON.parse(await readFile(sessionStateFile(sessionId, key), 'utf8'));
+        if (isCacheEntry(parsed) && parsed.hash === hash)
+            return parsed.verdict;
+        return null;
+    }
+    catch {
+        return null; // ENOENT / malformed → treat as a miss
+    }
+}
+async function appendLedger(sessionId, entry) {
+    try {
+        const path = sessionLogFile(sessionId, 'audit-spawn-ledger');
+        await mkdir(dirname(path), { recursive: true });
+        await appendFile(path, `${JSON.stringify(entry)}\n`, 'utf8');
+    }
+    catch {
+        /* best-effort: counting must never break the gate */
+    }
+}
+async function writeCache(sessionId, key, entry) {
+    const path = sessionStateFile(sessionId, key);
+    try {
+        await mkdir(dirname(path), { recursive: true });
+        const tmp = `${path}.tmp`;
+        await writeFile(tmp, JSON.stringify(entry, null, 2), 'utf8');
+        await rename(tmp, path);
+    }
+    catch {
+        /* best-effort: a cache-write failure must NEVER break the audit gate */
+    }
+}
+export function registerCachedAuditFunction(registry) {
+    registry.register({
+        name: 'cached_audit',
+        argSchema: CachedAuditArgs,
+        durable: false,
+        memoizable: false,
+        costEstimateMs: 30_000,
+        execute: async ({ cache_key, model, prompt, timeout_ms }, ctx) => {
+            const hash = sha256Hex(prompt);
+            const hash8 = hash.slice(0, 8);
+            const stamp = (outcome, duration_ms) => appendLedger(ctx.sessionId, {
+                at: new Date().toISOString(),
+                cache_key,
+                model,
+                hash8,
+                outcome,
+                duration_ms,
+            });
+            const hit = await readCachedVerdict(ctx.sessionId, cache_key, hash);
+            if (hit !== null) {
+                await stamp('hit', 0);
+                return ok(hit); // HIT — identical prompt → reuse, no spawn
+            }
+            // MISS — dispatch the model (same path as subagent_call).
+            const cfg = await loadModelsConfig(ctx.packModels);
+            const aliasCfg = cfg[model];
+            if (!aliasCfg) {
+                return err({ kind: 'arg_invalid', message: `Unknown model alias "${model}"` });
+            }
+            // duration_ms measures from just before strategy resolution (a sync
+            // registry lookup, microseconds) through the spawn — the spawn dominates.
+            const t0 = Date.now();
+            try {
+                const strategy = resolveStrategy(model, aliasCfg);
+                const out = timeout_ms === undefined
+                    ? await strategy.call(prompt)
+                    : await strategy.call(prompt, { timeoutMs: timeout_ms });
+                // Cache ONLY a real verdict — never a timeout/error/empty string, so an
+                // AUDIT-UNAVAILABLE result is retried next turn instead of being pinned.
+                const hasVerdict = out.includes('VERDICT:');
+                if (hasVerdict) {
+                    await writeCache(ctx.sessionId, cache_key, { hash, verdict: out });
+                }
+                await stamp(hasVerdict ? 'verdict' : 'no_verdict', Date.now() - t0);
+                return ok(out);
+            }
+            catch (e) {
+                await stamp(e instanceof CliTimeoutError ? 'timeout' : 'error', Date.now() - t0);
+                // UNCHANGED retry semantics: the err is returned exactly as before, so
+                // on_error routes to AUDIT-UNAVAILABLE and the next re-fire retries.
+                return err({ kind: 'runtime', message: `cached_audit(${model}): ${String(e)}`, cause: e });
+            }
+        },
+    });
+}
+//# sourceMappingURL=cached_audit.js.map

package/dist/functions/cached_audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cached_audit.js","sourceRoot":"","sources":["../../src/functions/cached_audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAI/C,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAOZ,SAAS,YAAY,CAAC,CAAU;IAC9B,OAAO,CACL,CAAC,KAAK,IAAI;QACV,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAQ,CAAgB,CAAC,IAAI,KAAK,QAAQ;QAC1C,OAAQ,CAAgB,CAAC,OAAO,KAAK,QAAQ,CAC9C,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,GAAW,EACX,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAY,CAAC;QAC/F,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,uCAAuC;IACtD,CAAC;AACH,CAAC;AAoBD,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAkB;IAC/D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC7D,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,GAAW,EAAE,KAAiB;IACzE,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;QAC1B,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,QAA0B;IACpE,QAAQ,CAAC,QAAQ,CAAC;QAChB,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,eAAe;QAC1B,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,MAAM;QACtB,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE;YAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,CAAC,OAAsB,EAAE,WAAmB,EAAiB,EAAE,CAC3E,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE;gBAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,SAAS;gBACT,KAAK;gBACL,KAAK;gBACL,OAAO;gBACP,WAAW;aACZ,CAAC,CAAC;YAEL,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACpE,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACtB,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,2CAA2C;YAC7D,CAAC;YACD,0DAA0D;YAC1D,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,wBAAwB,KAAK,GAAG,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,oEAAoE;YACpE,0EAA0E;YAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAClD,MAAM,GAAG,GACP,UAAU,KAAK,SAAS;oBACtB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC7B,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC7D,wEAAwE;gBACxE,yEAAyE;gBACzE,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC5C,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,KAAK,CAAC,CAAC,YAAY,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjF,uEAAuE;gBACvE,qEAAqE;gBACrE,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,KAAK,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/functions/chain_state.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `read_chain_state` primitive (T-ASC, ASC.5).
+ *
+ * Exposes the persisted T-ASC chain-state (or an idle-default shape) to
+ * skill YAML `process:` chains. Used by ASC.5's reframed scope-decomposer
+ * chain-handoff rules to read enrichment fields (`pre_research_path`,
+ * `spec_path`, `task_ids`) when shaping the structured `directive`
+ * verdict's `next_action.args`.
+ *
+ * Returns a stable shape: a non-null object that always has `stage`
+ * (defaulting to `'idle'`) and `history` (defaulting to `[]`), plus
+ * optional enrichment fields. The `if:` grammar's field access is
+ * dot-notation; a stable shape means rule expressions like
+ * `chain.pre_research_path` never trigger an undefined-access on the
+ * absent-file path.
+ *
+ * Side-effect-free, no-throw — the underlying `readChainState` returns
+ * null on absent/malformed; this primitive coalesces to the idle-default
+ * shape. `memoizable: false` because the chain state changes between
+ * turns (writers fire on UserPromptSubmit, PreToolUse, log_phase) — a
+ * memoized stage would mask the very transitions we're reading.
+ *
+ * `durable: false` (pure read, cheap stat+readFile). `costEstimateMs: 1`.
+ *
+ * Imports from: zod, ../runtime/chain_state.js, ../runtime/result.js,
+ *   ./registry.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import { type ChainStage } from '../runtime/chain_state.js';
+import type { FunctionDef } from './registry.js';
+declare const NoArgs: z.ZodObject<{}, "strict", z.ZodTypeAny, {}, {}>;
+type NoArgs = z.input<typeof NoArgs>;
+/**
+ * The primitive's output shape. `stage` is always present (defaults to
+ * 'idle' when no chain file exists). Enrichment fields are optional and
+ * appear when their writers populated them.
+ */
+export interface ReadChainStateOutput {
+    stage: ChainStage;
+    history: {
+        stage: ChainStage;
+        at: string;
+    }[];
+    pre_research_path?: string;
+    spec_path?: string;
+    task_ids?: string[];
+}
+export declare const ReadChainState: FunctionDef<NoArgs, ReadChainStateOutput>;
+export {};
+//# sourceMappingURL=chain_state.d.ts.map

package/dist/functions/chain_state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain_state.d.ts","sourceRoot":"","sources":["../../src/functions/chain_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAG5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,QAAA,MAAM,MAAM,iDAAwB,CAAC;AACrC,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAErC;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAyBpE,CAAC"}

package/dist/functions/chain_state.js

@@ -0,0 +1,59 @@
+/**
+ * `read_chain_state` primitive (T-ASC, ASC.5).
+ *
+ * Exposes the persisted T-ASC chain-state (or an idle-default shape) to
+ * skill YAML `process:` chains. Used by ASC.5's reframed scope-decomposer
+ * chain-handoff rules to read enrichment fields (`pre_research_path`,
+ * `spec_path`, `task_ids`) when shaping the structured `directive`
+ * verdict's `next_action.args`.
+ *
+ * Returns a stable shape: a non-null object that always has `stage`
+ * (defaulting to `'idle'`) and `history` (defaulting to `[]`), plus
+ * optional enrichment fields. The `if:` grammar's field access is
+ * dot-notation; a stable shape means rule expressions like
+ * `chain.pre_research_path` never trigger an undefined-access on the
+ * absent-file path.
+ *
+ * Side-effect-free, no-throw — the underlying `readChainState` returns
+ * null on absent/malformed; this primitive coalesces to the idle-default
+ * shape. `memoizable: false` because the chain state changes between
+ * turns (writers fire on UserPromptSubmit, PreToolUse, log_phase) — a
+ * memoized stage would mask the very transitions we're reading.
+ *
+ * `durable: false` (pure read, cheap stat+readFile). `costEstimateMs: 1`.
+ *
+ * Imports from: zod, ../runtime/chain_state.js, ../runtime/result.js,
+ *   ./registry.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import { readChainState } from '../runtime/chain_state.js';
+import { ok } from '../runtime/result.js';
+const NoArgs = z.object({}).strict();
+export const ReadChainState = {
+    name: 'read_chain_state',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 1,
+    execute: async (_args, ctx) => {
+        const state = await readChainState(ctx.sessionId);
+        if (state === null) {
+            // Idle-default shape: callers can always access `chain.stage` and
+            // `chain.history` without an undefined check. Enrichment fields
+            // remain absent (not undefined — the field simply isn't on the
+            // object), so the `if:` grammar's existence checks work correctly.
+            return ok({ stage: 'idle', history: [] });
+        }
+        return ok({
+            stage: state.stage,
+            history: state.history,
+            ...(state.pre_research_path !== undefined
+                ? { pre_research_path: state.pre_research_path }
+                : {}),
+            ...(state.spec_path !== undefined ? { spec_path: state.spec_path } : {}),
+            ...(state.task_ids !== undefined ? { task_ids: state.task_ids } : {}),
+        });
+    },
+};
+//# sourceMappingURL=chain_state.js.map

package/dist/functions/chain_state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain_state.js","sourceRoot":"","sources":["../../src/functions/chain_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAmB,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAI1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAgBrC,MAAM,CAAC,MAAM,cAAc,GAA8C;IACvE,IAAI,EAAE,kBAAkB;IACxB,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,kEAAkE;YAClE,gEAAgE;YAChE,+DAA+D;YAC/D,mEAAmE;YACnE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAe,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,CAAC;YACR,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/functions/chat_watcher_autostart.d.ts

@@ -0,0 +1,33 @@
+/**
+ * chat_watcher_autostart (T-CHAT-REALTIME) — make SessionStart actually SET UP
+ * chat, instead of only claiming the lease.
+ *
+ * The gap: SessionStart's only chat action was `claimUmbrellaLeaseForSession`.
+ * It never started the inbound watcher, so a fresh/restarted session received
+ * Telegram messages ONLY at a turn boundary (the Stop-hook drive) — an idle
+ * session never got them, and a restart "did nothing" for chat. This primitive,
+ * dispatched on `session_start`, returns an `inject_context` directive telling
+ * the agent to start the real-time inbound watcher (`opensquid chat watch` under
+ * the `Monitor` tool) IF the umbrella has a chat channel configured. The watcher
+ * streams each inbound message to the agent the instant it lands (OS file-events,
+ * push — not a busy-poll), so an idle session wakes and replies in real time,
+ * with NO `--channels` dev flag.
+ *
+ * Only the AGENT can call `Monitor`, so a hook can only DIRECT it — this is that
+ * directive. Gated on a resolvable umbrella + a configured telegram channel so it
+ * is silent for sessions with no chat. Fail-open: any error → null (a health
+ * primitive must never block a session begin).
+ *
+ * Imports from: zod, ../runtime/result.js, ../channels/routing.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import type { FunctionDef } from './registry.js';
+declare const NoArgs: z.ZodObject<{}, "strict", z.ZodTypeAny, {}, {}>;
+interface AutostartResult {
+    kind: 'inject_context';
+    content: string;
+}
+export declare const ChatWatcherAutostart: FunctionDef<z.input<typeof NoArgs>, AutostartResult | null>;
+export {};
+//# sourceMappingURL=chat_watcher_autostart.d.ts.map

package/dist/functions/chat_watcher_autostart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat_watcher_autostart.d.ts","sourceRoot":"","sources":["../../src/functions/chat_watcher_autostart.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,QAAA,MAAM,MAAM,iDAAwB,CAAC;AAErC,UAAU,eAAe;IACvB,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,eAAe,GAAG,IAAI,CA6B5F,CAAC"}

package/dist/functions/chat_watcher_autostart.js

@@ -0,0 +1,59 @@
+/**
+ * chat_watcher_autostart (T-CHAT-REALTIME) — make SessionStart actually SET UP
+ * chat, instead of only claiming the lease.
+ *
+ * The gap: SessionStart's only chat action was `claimUmbrellaLeaseForSession`.
+ * It never started the inbound watcher, so a fresh/restarted session received
+ * Telegram messages ONLY at a turn boundary (the Stop-hook drive) — an idle
+ * session never got them, and a restart "did nothing" for chat. This primitive,
+ * dispatched on `session_start`, returns an `inject_context` directive telling
+ * the agent to start the real-time inbound watcher (`opensquid chat watch` under
+ * the `Monitor` tool) IF the umbrella has a chat channel configured. The watcher
+ * streams each inbound message to the agent the instant it lands (OS file-events,
+ * push — not a busy-poll), so an idle session wakes and replies in real time,
+ * with NO `--channels` dev flag.
+ *
+ * Only the AGENT can call `Monitor`, so a hook can only DIRECT it — this is that
+ * directive. Gated on a resolvable umbrella + a configured telegram channel so it
+ * is silent for sessions with no chat. Fail-open: any error → null (a health
+ * primitive must never block a session begin).
+ *
+ * Imports from: zod, ../runtime/result.js, ../channels/routing.js.
+ * Imported by: src/runtime/bootstrap.ts (registry wiring).
+ */
+import { z } from 'zod';
+import { loadChannelsConfig, resolveUmbrellaForCwd } from '../channels/routing.js';
+import { ok } from '../runtime/result.js';
+const NoArgs = z.object({}).strict();
+export const ChatWatcherAutostart = {
+    name: 'chat_watcher_autostart',
+    argSchema: NoArgs,
+    durable: false,
+    memoizable: false,
+    costEstimateMs: 3,
+    execute: async (_args, ctx) => {
+        try {
+            const cwd = ctx.event.kind === 'session_start' ? (ctx.event.cwd ?? process.cwd()) : process.cwd();
+            const cfg = await loadChannelsConfig().catch(() => null);
+            if (cfg === null)
+                return ok(null);
+            const umbrellaId = resolveUmbrellaForCwd(cfg, cwd);
+            if (umbrellaId === null || umbrellaId === '')
+                return ok(null);
+            const umb = cfg.umbrellas.find((u) => u.id === umbrellaId);
+            if (umb?.telegram === undefined)
+                return ok(null); // no chat channel → nothing to watch
+            const content = `📡 CHAT SETUP — start the inbound watcher now so this session receives Telegram ` +
+                `messages in REAL TIME (push, no turn-boundary wait). If a "chat watch" Monitor is not ` +
+                `already running for this session, call: ` +
+                `Monitor({ command: "opensquid chat watch", persistent: true, description: "live inbound telegram" }). ` +
+                `Each streamed line is an inbound message — reply on the channel via chat_send (it threads to ` +
+                `the right topic). This is the no-flag real-time path; do it once per session.`;
+            return ok({ kind: 'inject_context', content });
+        }
+        catch {
+            return ok(null);
+        }
+    },
+};
+//# sourceMappingURL=chat_watcher_autostart.js.map

package/dist/functions/chat_watcher_autostart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat_watcher_autostart.js","sourceRoot":"","sources":["../../src/functions/chat_watcher_autostart.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAI1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAOrC,MAAM,CAAC,MAAM,oBAAoB,GAAgE;IAC/F,IAAI,EAAE,wBAAwB;IAC9B,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GACP,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACxF,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACnD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,EAAE;gBAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;YAC3D,IAAI,GAAG,EAAE,QAAQ,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,qCAAqC;YAEvF,MAAM,OAAO,GACX,kFAAkF;gBAClF,wFAAwF;gBACxF,0CAA0C;gBAC1C,wGAAwG;gBACxG,+FAA+F;gBAC/F,+EAA+E,CAAC;YAClF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF,CAAC"}