patchwork-os 0.2.0-alpha.0

package/dist/fp/automationProgram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automationProgram.js","sourceRoot":"","sources":["../../src/fp/automationProgram.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiIH,iFAAiF;AAEjF,MAAM,UAAU,IAAI,CAAC,MAA8B;IACjD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAsC;IAC7D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAsC;IAC7D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,UAAkB,EAClB,OAA0B;IAE1B,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,GAAW,EACX,UAAkB,EAClB,OAA0B;IAE1B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAkB,EAClB,OAA0B;IAE1B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,GAAW,EACX,UAAkB,EAClB,YAAoB,EACpB,OAA0B;IAE1B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACvE,CAAC"}

package/dist/fp/automationState.d.ts

@@ -0,0 +1,135 @@
+/**
+ * Pure value type + transition functions for AutomationHooks state.
+ *
+ * The mutable fields of AutomationHooks that govern cooldowns, active-task
+ * tracking, and per-runner test outcomes are extracted here as an immutable
+ * record.  AutomationHooks holds a single `private state: AutomationState`
+ * and delegates the pure logic to these functions.
+ *
+ * All functions are pure (no side-effects, no I/O, no mutation of the input
+ * state).  They return new AutomationState values.
+ */
+export interface AutomationState {
+    /** Last trigger time (ms since epoch) per trigger key. */
+    readonly lastTrigger: ReadonlyMap<string, number>;
+    /**
+     * Active task IDs per hook key.
+     * Key: a hook-specific string (e.g. "diagnostics:/path/to/file",
+     * "gitCommit", "save:/path/to/file").
+     * Value: the Claude task ID that was spawned for this key.
+     */
+    readonly activeTasks: ReadonlyMap<string, string>;
+    /**
+     * Previous error counts per file (used by onDiagnosticsError /
+     * onDiagnosticsCleared to detect transitions).
+     */
+    readonly prevDiagnosticErrors: ReadonlyMap<string, number>;
+    /**
+     * Last test outcome per runner (used by onTestPassAfterFailure to detect
+     * fail→pass transitions).
+     */
+    readonly lastTestOutcomeByRunner: ReadonlyMap<string, "pass" | "fail">;
+    /**
+     * Rolling window of task enqueue timestamps (ms since epoch).
+     * Used for maxTasksPerHour rate-limiting.
+     */
+    readonly taskTimestamps: readonly number[];
+    /**
+     * Per-content-signature dedup timestamps (keyed: `dedup:${hookKey}:${sig}`).
+     * Bounded at 5_000 entries — same eviction as lastTrigger.
+     */
+    readonly deduplicationWindow: ReadonlyMap<string, number>;
+    /**
+     * Pending retry records for WithRetry nodes.
+     * Key = `${hookType}:${primaryValue}`.
+     */
+    readonly pendingRetries: ReadonlyMap<string, {
+        attempt: number;
+        nextRetryAt: number;
+        taskId: string;
+    }>;
+    /**
+     * Cached diagnostics per file for evaluateWhen condition checks.
+     */
+    readonly latestDiagnosticsByFile: ReadonlyMap<string, {
+        severity: number;
+        count: number;
+    }>;
+    /**
+     * Last known test runner outcome (pass/fail) for evaluateWhen checks.
+     */
+    readonly lastTestRunnerStatusByRunner: ReadonlyMap<string, "pass" | "fail">;
+}
+export declare const EMPTY_AUTOMATION_STATE: AutomationState;
+/**
+ * Returns true if `key` is still within its cooldown window.
+ * Pure — does not mutate `state`.
+ */
+export declare function isOnCooldown(state: AutomationState, key: string, now: number, cooldownMs: number): boolean;
+/**
+ * Return a new AutomationState where `key` has been marked as triggered at
+ * `now` and the associated `taskId` recorded as the active task for `key`.
+ *
+ * The `taskTimestamps` array is grown by one entry (capped at 10 000 entries
+ * matching the cap in AutomationHooks).
+ */
+export declare function recordTrigger(state: AutomationState, key: string, taskId: string, now: number): AutomationState;
+/**
+ * Returns true if there is currently an active task for `key`.
+ * Pure — does not mutate `state`.
+ */
+export declare function isTaskActive(state: AutomationState, key: string): boolean;
+/**
+ * Return a new AutomationState where the active task for `key` has been
+ * cleared (e.g. after the task completes or is cancelled).
+ */
+export declare function clearActiveTask(state: AutomationState, key: string): AutomationState;
+/**
+ * Return a new AutomationState with the previous error count for `file`
+ * updated to `count`.
+ */
+export declare function setPrevDiagnosticErrors(state: AutomationState, file: string, count: number): AutomationState;
+/**
+ * Return a new AutomationState with the last test outcome for `runner`
+ * updated to `outcome`.
+ */
+export declare function setLastTestOutcome(state: AutomationState, runner: string, outcome: "pass" | "fail"): AutomationState;
+/**
+ * Count tasks enqueued within the last hour.
+ * Pure — does not mutate `state`.
+ */
+export declare function tasksInLastHour(state: AutomationState, now: number): number;
+/**
+ * Record a dedup timestamp for `key` at `now`.
+ * Evicts oldest entry when size exceeds DEDUP_MAX_SIZE.
+ */
+export declare function recordDedup(state: AutomationState, key: string, now: number): AutomationState;
+/**
+ * Returns true if `key` was recorded within `cooldownMs` of `now`.
+ * Pure — does not mutate `state`.
+ */
+export declare function isDeduped(state: AutomationState, key: string, now: number, cooldownMs: number): boolean;
+/**
+ * Record or update a pending retry for `key`.
+ */
+export declare function recordPendingRetry(state: AutomationState, key: string, attempt: number, nextRetryAt: number, taskId: string): AutomationState;
+/**
+ * Remove the pending retry record for `key`.
+ */
+export declare function clearPendingRetry(state: AutomationState, key: string): AutomationState;
+/**
+ * Update the cached diagnostics for `file`.
+ * Bounded at 5000 files — FIFO eviction.
+ */
+export declare function setLatestDiagnostics(state: AutomationState, file: string, severity: number, count: number): AutomationState;
+/**
+ * Merge two AutomationStates produced by parallel branches that share the same
+ * initial state. For each map, keeps the max timestamp / last value per key.
+ * taskTimestamps are unioned. Used by the Parallel interpreter case so both
+ * branches' cooldown / trigger records are preserved.
+ */
+export declare function mergeAutomationStates(a: AutomationState, b: AutomationState): AutomationState;
+/**
+ * Update the last known test runner outcome for `runner`.
+ */
+export declare function setTestRunnerStatus(state: AutomationState, runner: string, outcome: "pass" | "fail"): AutomationState;

package/dist/fp/automationState.js

@@ -0,0 +1,206 @@
+/**
+ * Pure value type + transition functions for AutomationHooks state.
+ *
+ * The mutable fields of AutomationHooks that govern cooldowns, active-task
+ * tracking, and per-runner test outcomes are extracted here as an immutable
+ * record.  AutomationHooks holds a single `private state: AutomationState`
+ * and delegates the pure logic to these functions.
+ *
+ * All functions are pure (no side-effects, no I/O, no mutation of the input
+ * state).  They return new AutomationState values.
+ */
+export const EMPTY_AUTOMATION_STATE = {
+    lastTrigger: new Map(),
+    activeTasks: new Map(),
+    prevDiagnosticErrors: new Map(),
+    lastTestOutcomeByRunner: new Map(),
+    taskTimestamps: [],
+    deduplicationWindow: new Map(),
+    pendingRetries: new Map(),
+    latestDiagnosticsByFile: new Map(),
+    lastTestRunnerStatusByRunner: new Map(),
+};
+// ── Cooldown helpers ──────────────────────────────────────────────────────────
+/**
+ * Returns true if `key` is still within its cooldown window.
+ * Pure — does not mutate `state`.
+ */
+export function isOnCooldown(state, key, now, cooldownMs) {
+    const last = state.lastTrigger.get(key);
+    if (last === undefined)
+        return false;
+    return now - last < cooldownMs;
+}
+// ── Trigger recording ─────────────────────────────────────────────────────────
+/**
+ * Return a new AutomationState where `key` has been marked as triggered at
+ * `now` and the associated `taskId` recorded as the active task for `key`.
+ *
+ * The `taskTimestamps` array is grown by one entry (capped at 10 000 entries
+ * matching the cap in AutomationHooks).
+ */
+export function recordTrigger(state, key, taskId, now) {
+    const MAX_TASK_TIMESTAMPS = 10_000;
+    const newLastTrigger = new Map(state.lastTrigger);
+    newLastTrigger.set(key, now);
+    const newActiveTasks = new Map(state.activeTasks);
+    newActiveTasks.set(key, taskId);
+    const rawTimestamps = [...state.taskTimestamps, now];
+    const newTaskTimestamps = rawTimestamps.length > MAX_TASK_TIMESTAMPS
+        ? rawTimestamps.slice(rawTimestamps.length - MAX_TASK_TIMESTAMPS)
+        : rawTimestamps;
+    return {
+        ...state,
+        lastTrigger: newLastTrigger,
+        activeTasks: newActiveTasks,
+        taskTimestamps: newTaskTimestamps,
+    };
+}
+// ── Active-task helpers ───────────────────────────────────────────────────────
+/**
+ * Returns true if there is currently an active task for `key`.
+ * Pure — does not mutate `state`.
+ */
+export function isTaskActive(state, key) {
+    return state.activeTasks.has(key);
+}
+/**
+ * Return a new AutomationState where the active task for `key` has been
+ * cleared (e.g. after the task completes or is cancelled).
+ */
+export function clearActiveTask(state, key) {
+    const newActiveTasks = new Map(state.activeTasks);
+    newActiveTasks.delete(key);
+    return { ...state, activeTasks: newActiveTasks };
+}
+// ── Diagnostic error count helpers ────────────────────────────────────────────
+/**
+ * Return a new AutomationState with the previous error count for `file`
+ * updated to `count`.
+ */
+export function setPrevDiagnosticErrors(state, file, count) {
+    const newMap = new Map(state.prevDiagnosticErrors);
+    newMap.set(file, count);
+    return { ...state, prevDiagnosticErrors: newMap };
+}
+// ── Test-outcome helpers ──────────────────────────────────────────────────────
+/**
+ * Return a new AutomationState with the last test outcome for `runner`
+ * updated to `outcome`.
+ */
+export function setLastTestOutcome(state, runner, outcome) {
+    const newMap = new Map(state.lastTestOutcomeByRunner);
+    newMap.set(runner, outcome);
+    return { ...state, lastTestOutcomeByRunner: newMap };
+}
+// ── Rate-limit helper ─────────────────────────────────────────────────────────
+/**
+ * Count tasks enqueued within the last hour.
+ * Pure — does not mutate `state`.
+ */
+export function tasksInLastHour(state, now) {
+    const cutoff = now - 3_600_000;
+    return state.taskTimestamps.filter((t) => t > cutoff).length;
+}
+// ── Deduplication helpers ─────────────────────────────────────────────────────
+const DEDUP_MAX_SIZE = 5_000;
+/**
+ * Record a dedup timestamp for `key` at `now`.
+ * Evicts oldest entry when size exceeds DEDUP_MAX_SIZE.
+ */
+export function recordDedup(state, key, now) {
+    const newMap = new Map(state.deduplicationWindow);
+    newMap.set(key, now);
+    if (newMap.size > DEDUP_MAX_SIZE) {
+        // Evict oldest by insertion order (Map preserves insertion order)
+        const firstKey = newMap.keys().next().value;
+        newMap.delete(firstKey);
+    }
+    return { ...state, deduplicationWindow: newMap };
+}
+/**
+ * Returns true if `key` was recorded within `cooldownMs` of `now`.
+ * Pure — does not mutate `state`.
+ */
+export function isDeduped(state, key, now, cooldownMs) {
+    const last = state.deduplicationWindow.get(key);
+    if (last === undefined)
+        return false;
+    return now - last < cooldownMs;
+}
+// ── Pending retry helpers ─────────────────────────────────────────────────────
+/**
+ * Record or update a pending retry for `key`.
+ */
+export function recordPendingRetry(state, key, attempt, nextRetryAt, taskId) {
+    const newMap = new Map(state.pendingRetries);
+    newMap.set(key, { attempt, nextRetryAt, taskId });
+    return { ...state, pendingRetries: newMap };
+}
+/**
+ * Remove the pending retry record for `key`.
+ */
+export function clearPendingRetry(state, key) {
+    const newMap = new Map(state.pendingRetries);
+    newMap.delete(key);
+    return { ...state, pendingRetries: newMap };
+}
+// ── Diagnostics-by-file helpers ───────────────────────────────────────────────
+const DIAGNOSTICS_FILE_MAX_SIZE = 5_000;
+/**
+ * Update the cached diagnostics for `file`.
+ * Bounded at 5000 files — FIFO eviction.
+ */
+export function setLatestDiagnostics(state, file, severity, count) {
+    const newMap = new Map(state.latestDiagnosticsByFile);
+    newMap.set(file, { severity, count });
+    if (newMap.size > DIAGNOSTICS_FILE_MAX_SIZE) {
+        const firstKey = newMap.keys().next().value;
+        newMap.delete(firstKey);
+    }
+    return { ...state, latestDiagnosticsByFile: newMap };
+}
+// ── Merge helper (for Parallel node) ──────────────────────────────────────────
+/**
+ * Merge two AutomationStates produced by parallel branches that share the same
+ * initial state. For each map, keeps the max timestamp / last value per key.
+ * taskTimestamps are unioned. Used by the Parallel interpreter case so both
+ * branches' cooldown / trigger records are preserved.
+ */
+export function mergeAutomationStates(a, b) {
+    const maxNumMap = (x, y) => {
+        const out = new Map(x);
+        for (const [k, v] of y) {
+            const prev = out.get(k);
+            out.set(k, prev === undefined ? v : Math.max(prev, v));
+        }
+        return out;
+    };
+    const unionMap = (x, y) => {
+        const out = new Map(x);
+        for (const [k, v] of y)
+            out.set(k, v);
+        return out;
+    };
+    return {
+        lastTrigger: maxNumMap(a.lastTrigger, b.lastTrigger),
+        activeTasks: unionMap(a.activeTasks, b.activeTasks),
+        prevDiagnosticErrors: unionMap(a.prevDiagnosticErrors, b.prevDiagnosticErrors),
+        lastTestOutcomeByRunner: unionMap(a.lastTestOutcomeByRunner, b.lastTestOutcomeByRunner),
+        taskTimestamps: [...a.taskTimestamps, ...b.taskTimestamps].slice(-10_000),
+        deduplicationWindow: maxNumMap(a.deduplicationWindow, b.deduplicationWindow),
+        pendingRetries: unionMap(a.pendingRetries, b.pendingRetries),
+        latestDiagnosticsByFile: unionMap(a.latestDiagnosticsByFile, b.latestDiagnosticsByFile),
+        lastTestRunnerStatusByRunner: unionMap(a.lastTestRunnerStatusByRunner, b.lastTestRunnerStatusByRunner),
+    };
+}
+// ── Test runner status helpers ────────────────────────────────────────────────
+/**
+ * Update the last known test runner outcome for `runner`.
+ */
+export function setTestRunnerStatus(state, runner, outcome) {
+    const newMap = new Map(state.lastTestRunnerStatusByRunner);
+    newMap.set(runner, outcome);
+    return { ...state, lastTestRunnerStatusByRunner: newMap };
+}
+//# sourceMappingURL=automationState.js.map

package/dist/fp/automationState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automationState.js","sourceRoot":"","sources":["../../src/fp/automationState.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAqDH,MAAM,CAAC,MAAM,sBAAsB,GAAoB;IACrD,WAAW,EAAE,IAAI,GAAG,EAAE;IACtB,WAAW,EAAE,IAAI,GAAG,EAAE;IACtB,oBAAoB,EAAE,IAAI,GAAG,EAAE;IAC/B,uBAAuB,EAAE,IAAI,GAAG,EAAE;IAClC,cAAc,EAAE,EAAE;IAClB,mBAAmB,EAAE,IAAI,GAAG,EAAE;IAC9B,cAAc,EAAE,IAAI,GAAG,EAAE;IACzB,uBAAuB,EAAE,IAAI,GAAG,EAAE;IAClC,4BAA4B,EAAE,IAAI,GAAG,EAAE;CACxC,CAAC;AAEF,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAsB,EACtB,GAAW,EACX,GAAW,EACX,UAAkB;IAElB,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,GAAG,UAAU,CAAC;AACjC,CAAC;AAED,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAsB,EACtB,GAAW,EACX,MAAc,EACd,GAAW;IAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC;IACnC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE7B,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEhC,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,iBAAiB,GACrB,aAAa,CAAC,MAAM,GAAG,mBAAmB;QACxC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,mBAAmB,CAAC;QACjE,CAAC,CAAC,aAAa,CAAC;IAEpB,OAAO;QACL,GAAG,KAAK;QACR,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,iBAAiB;KAClC,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAsB,EAAE,GAAW;IAC9D,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAsB,EACtB,GAAW;IAEX,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;AACnD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAsB,EACtB,IAAY,EACZ,KAAa;IAEb,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,EAAE,GAAG,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,MAAc,EACd,OAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAsB,EAAE,GAAW;IACjE,MAAM,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IAC/B,OAAO,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC;AAED,iFAAiF;AAEjF,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,KAAsB,EACtB,GAAW,EACX,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QACjC,kEAAkE;QAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CACvB,KAAsB,EACtB,GAAW,EACX,GAAW,EACX,UAAkB;IAElB,MAAM,IAAI,GAAG,KAAK,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,GAAG,UAAU,CAAC;AACjC,CAAC;AAED,iFAAiF;AAEjF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,GAAW,EACX,OAAe,EACf,WAAmB,EACnB,MAAc;IAEd,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAsB,EACtB,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,iFAAiF;AAEjF,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAsB,EACtB,IAAY,EACZ,QAAgB,EAChB,KAAa;IAEb,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,CAAkB,EAClB,CAAkB;IAElB,MAAM,SAAS,GAAG,CAChB,CAA8B,EAC9B,CAA8B,EACT,EAAE;QACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CACf,CAAyB,EACzB,CAAyB,EACT,EAAE;QAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,OAAO;QACL,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;QACpD,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;QACnD,oBAAoB,EAAE,QAAQ,CAC5B,CAAC,CAAC,oBAAoB,EACtB,CAAC,CAAC,oBAAoB,CACvB;QACD,uBAAuB,EAAE,QAAQ,CAC/B,CAAC,CAAC,uBAAuB,EACzB,CAAC,CAAC,uBAAuB,CAC1B;QACD,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACzE,mBAAmB,EAAE,SAAS,CAC5B,CAAC,CAAC,mBAAmB,EACrB,CAAC,CAAC,mBAAmB,CACtB;QACD,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC;QAC5D,uBAAuB,EAAE,QAAQ,CAC/B,CAAC,CAAC,uBAAuB,EACzB,CAAC,CAAC,uBAAuB,CAC1B;QACD,4BAA4B,EAAE,QAAQ,CACpC,CAAC,CAAC,4BAA4B,EAC9B,CAAC,CAAC,4BAA4B,CAC/B;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,MAAc,EACd,OAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC;AAC5D,CAAC"}

package/dist/fp/automationUtils.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Pure utility functions for automation hook prompt assembly.
+ * No side effects, no Date.now(), no process.*, no fs.*.
+ */
+/** Maximum byte length of an automation policy prompt (matches runClaudeTask cap) */
+export declare const MAX_POLICY_PROMPT_CHARS = 32768;
+/** Maximum length (chars) of a file path inserted into prompts */
+export declare const MAX_FILE_PATH_CHARS = 500;
+/**
+ * Wrap an untrusted user-controlled value in delimiters that include a
+ * per-trigger nonce so a crafted value cannot forge a closing delimiter.
+ * The nonce is stripped from the value itself before insertion.
+ */
+export declare function untrustedBlock(label: string, value: string, nonce: string): string;
+/**
+ * Truncate a final prompt to MAX_POLICY_PROMPT_CHARS bytes at the last newline
+ * before the limit and append a truncation notice.
+ *
+ * Uses Buffer byte-length rather than JS string .length (UTF-16 code units) so
+ * that multibyte characters (emoji, CJK, surrogate pairs) are never split at a
+ * code-unit boundary, which would produce malformed text.
+ */
+export declare function truncatePrompt(prompt: string): string;
+/**
+ * Build a trusted metadata prefix that is prepended to every automation hook
+ * prompt BEFORE any untrustedBlock() substitutions.
+ *
+ * `nowIso` is injected by caller (e.g. `new Date().toISOString()`) so this
+ * function remains deterministic in tests.
+ */
+export declare function buildHookMetadata(hookName: string, nowIso: string, file?: string): string;

package/dist/fp/automationUtils.js

@@ -0,0 +1,61 @@
+/**
+ * Pure utility functions for automation hook prompt assembly.
+ * No side effects, no Date.now(), no process.*, no fs.*.
+ */
+/** Maximum byte length of an automation policy prompt (matches runClaudeTask cap) */
+export const MAX_POLICY_PROMPT_CHARS = 32_768;
+/** Maximum length (chars) of a file path inserted into prompts */
+export const MAX_FILE_PATH_CHARS = 500;
+/**
+ * Wrap an untrusted user-controlled value in delimiters that include a
+ * per-trigger nonce so a crafted value cannot forge a closing delimiter.
+ * The nonce is stripped from the value itself before insertion.
+ */
+export function untrustedBlock(label, value, nonce) {
+    if (!/^[A-Z][A-Z0-9 ]*$/.test(label)) {
+        throw new Error(`untrustedBlock: label must be uppercase ASCII, got: ${JSON.stringify(label)}`);
+    }
+    // Use literal string replacement (not RegExp) — nonce is an opaque ID that
+    // may contain regex metacharacters (e.g. "[", "+", ".").  RegExp would throw
+    // SyntaxError for those inputs, enabling a DoS on every hook trigger.
+    const safe = value.split(nonce).join("");
+    return `\n--- BEGIN ${label} [${nonce}] (untrusted) ---\n${safe}\n--- END ${label} [${nonce}] ---\n`;
+}
+/**
+ * Truncate a final prompt to MAX_POLICY_PROMPT_CHARS bytes at the last newline
+ * before the limit and append a truncation notice.
+ *
+ * Uses Buffer byte-length rather than JS string .length (UTF-16 code units) so
+ * that multibyte characters (emoji, CJK, surrogate pairs) are never split at a
+ * code-unit boundary, which would produce malformed text.
+ */
+export function truncatePrompt(prompt) {
+    // Buffer.byteLength counts actual UTF-8 bytes, not UTF-16 code units.
+    if (Buffer.byteLength(prompt, "utf8") <= MAX_POLICY_PROMPT_CHARS)
+        return prompt;
+    // Slice to MAX_POLICY_PROMPT_CHARS bytes then decode — Node.js drops any
+    // incomplete multibyte sequence at the boundary automatically.
+    let truncated = Buffer.from(prompt, "utf8")
+        .subarray(0, MAX_POLICY_PROMPT_CHARS)
+        .toString("utf8");
+    // Prefer breaking at the last newline so we don't cut mid-sentence.
+    const lastNl = truncated.lastIndexOf("\n");
+    if (lastNl > 0) {
+        truncated = truncated.slice(0, lastNl);
+    }
+    return `${truncated}\n[... truncated to fit 32KB limit ...]`;
+}
+/**
+ * Build a trusted metadata prefix that is prepended to every automation hook
+ * prompt BEFORE any untrustedBlock() substitutions.
+ *
+ * `nowIso` is injected by caller (e.g. `new Date().toISOString()`) so this
+ * function remains deterministic in tests.
+ */
+export function buildHookMetadata(hookName, nowIso, file) {
+    const safeFile = file
+        ? file.slice(0, MAX_FILE_PATH_CHARS).replace(/[\x00-\x1F\x7F]/g, "")
+        : "N/A";
+    return `@@ HOOK: ${hookName} | file: ${safeFile} | ts: ${nowIso} @@\n`;
+}
+//# sourceMappingURL=automationUtils.js.map

package/dist/fp/automationUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automationUtils.js","sourceRoot":"","sources":["../../src/fp/automationUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,qFAAqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,KAAa,EACb,KAAa;IAEb,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,uDAAuD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,OAAO,eAAe,KAAK,KAAK,KAAK,sBAAsB,IAAI,aAAa,KAAK,KAAK,KAAK,SAAS,CAAC;AACvG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,sEAAsE;IACtE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,uBAAuB;QAC9D,OAAO,MAAM,CAAC;IAEhB,yEAAyE;IACzE,+DAA+D;IAC/D,IAAI,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;SACxC,QAAQ,CAAC,CAAC,EAAE,uBAAuB,CAAC;SACpC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEpB,oEAAoE;IACpE,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,GAAG,SAAS,yCAAyC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,MAAc,EACd,IAAa;IAEb,MAAM,QAAQ,GAAG,IAAI;QACnB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACpE,CAAC,CAAC,KAAK,CAAC;IACV,OAAO,YAAY,QAAQ,YAAY,QAAQ,UAAU,MAAM,OAAO,CAAC;AACzE,CAAC"}

package/dist/fp/brandedTypes.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Branded types for path safety.
+ *
+ * AbsPath — an absolute filesystem path (string brand)
+ * FileUri — a file:// URI derived from an AbsPath (string brand)
+ *
+ * Using branded types prevents accidental mixing of relative paths, URIs, and
+ * absolute paths at compile time.  At runtime the values are plain strings —
+ * no overhead.
+ */
+export type AbsPath = string & {
+    readonly _brand: "AbsPath";
+};
+export type FileUri = string & {
+    readonly _brand: "FileUri";
+};
+/**
+ * Assert that `p` is an absolute path and return it as `AbsPath`.
+ * Throws if `p` is relative.
+ */
+export declare function absPath(p: string): AbsPath;
+/**
+ * Convert an `AbsPath` to a `file://` URI.
+ * Uses `new URL()` for correct encoding (handles spaces, unicode, etc.).
+ */
+export declare function fileUri(p: AbsPath): FileUri;
+/**
+ * Strip the `file://` prefix from a `FileUri` and return an `AbsPath`.
+ * Handles both `file:///path` (URL-encoded) and plain `file:///path` forms.
+ * Uses `decodeURIComponent` to restore percent-encoded characters (spaces, etc.).
+ */
+export declare function uriToAbsPath(uri: FileUri): AbsPath;

package/dist/fp/brandedTypes.js

@@ -0,0 +1,41 @@
+/**
+ * Branded types for path safety.
+ *
+ * AbsPath — an absolute filesystem path (string brand)
+ * FileUri — a file:// URI derived from an AbsPath (string brand)
+ *
+ * Using branded types prevents accidental mixing of relative paths, URIs, and
+ * absolute paths at compile time.  At runtime the values are plain strings —
+ * no overhead.
+ */
+import * as path from "node:path";
+// ── Constructors ──────────────────────────────────────────────────────────────
+/**
+ * Assert that `p` is an absolute path and return it as `AbsPath`.
+ * Throws if `p` is relative.
+ */
+export function absPath(p) {
+    if (!path.isAbsolute(p)) {
+        throw new Error(`Expected absolute path, got: ${p}`);
+    }
+    return p;
+}
+/**
+ * Convert an `AbsPath` to a `file://` URI.
+ * Uses `new URL()` for correct encoding (handles spaces, unicode, etc.).
+ */
+export function fileUri(p) {
+    return new URL(`file://${p}`).href;
+}
+/**
+ * Strip the `file://` prefix from a `FileUri` and return an `AbsPath`.
+ * Handles both `file:///path` (URL-encoded) and plain `file:///path` forms.
+ * Uses `decodeURIComponent` to restore percent-encoded characters (spaces, etc.).
+ */
+export function uriToAbsPath(uri) {
+    // URL constructor decodes percent-encoding in pathname on most runtimes, but
+    // not all.  Use decodeURIComponent for a guaranteed round-trip.
+    const pathname = new URL(uri).pathname;
+    return decodeURIComponent(pathname);
+}
+//# sourceMappingURL=brandedTypes.js.map

package/dist/fp/brandedTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brandedTypes.js","sourceRoot":"","sources":["../../src/fp/brandedTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAOlC,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,CAAU;IAChC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAe,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACvC,OAAO,kBAAkB,CAAC,QAAQ,CAAY,CAAC;AACjD,CAAC"}

package/dist/fp/commandDescription.d.ts

@@ -0,0 +1,18 @@
+export interface CommandDescription {
+    readonly command: string;
+    readonly args: readonly string[];
+    readonly cwd: string;
+    readonly timeout: number;
+    readonly maxBuffer: number;
+}
+export interface CommandConfig {
+    commandAllowlist: string[];
+    commandTimeout: number;
+    maxResultSize: number;
+}
+/**
+ * Validate raw tool arguments and return an immutable command description.
+ * Throws on any security violation (allowlist, blocklist, path-traversal).
+ * All security checks are performed here — executeCommand receives a trusted descriptor.
+ */
+export declare function buildCommandDescription(rawArgs: Record<string, unknown>, config: CommandConfig, workspace: string): CommandDescription;