prismalens 0.0.1

package/dist/src/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/config/schema.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CACnD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,qEAAqE;IACrE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,gEAAgE;IAChE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,+EAA+E;IAC/E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAClD;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,4DAA4D;IAC5D,WAAW,EAAE,oBAAoB,CAAC,sBAAsB,CAAC;IACzD;;;;;;OAMG;IACH,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9C;;;OAGG;IACH,MAAM,EAAE,oBAAoB,CAAC,uBAAuB,CAAC;IACrD;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;CAC7C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,yDAAyD;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,2DAA2D;IAC3D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1B,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAC9C,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/C,aAAa,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,SAAS,oBAAoB,CAAuC,MAAS;IAC5E,OAAO,CAAC;SACN,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SAC3C,SAAS,CAAC,CAAC,GAAG,EAAe,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,mFAAmF;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC;SACN,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC;SACpC,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,EAAE,CAAC;SACT,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC;SACvC,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IAC/B,wDAAwD;IACxD,IAAI,EAAE,oBAAoB,CAAC,qBAAqB,CAAC;IACjD,KAAK,EAAE,oBAAoB,CAAC,iBAAiB,CAAC;IAC9C,SAAS,EAAE,oBAAoB,CAAC,qBAAqB,CAAC;IACtD,SAAS,EAAE,oBAAoB,CAAC,qBAAqB,CAAC;IACtD,aAAa,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,SAAS,CAC1D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAClB;IACD,sEAAsE;IACtE,SAAS,EAAE,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC;SAC7C,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;CAC/B,CAAC,CAAC"}

package/dist/src/core/detect-repo.d.ts

@@ -0,0 +1,4 @@
+/** Session repo label: an explicit config `repo` (owner/name) wins; else git
+ * auto-detect from cwd; else none. */
+export declare function resolveRepoSlug(configRepo: string | undefined, cwd?: string): Promise<string | undefined>;
+//# sourceMappingURL=detect-repo.d.ts.map

package/dist/src/core/detect-repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-repo.d.ts","sourceRoot":"","sources":["../../../src/core/detect-repo.ts"],"names":[],"mappings":"AA+BA;sCACsC;AACtC,wBAAsB,eAAe,CACpC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,GAAG,GAAE,MAAsB,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE7B"}

package/dist/src/core/detect-repo.js

@@ -0,0 +1,28 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Sumit Patel
+/**
+ * Resolve the repository label under investigation. Precedence: an explicit
+ * config `repo` value (owner/name) wins; else git origin auto-detect from the
+ * working directory; else `undefined`.
+ *
+ * Uses node:child_process directly (no tinyexec dependency).
+ */
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+const REPO_PATTERN = /(?:github\.com|gitlab\.com|bitbucket\.org)[/:](.+?)(?:\.git)?$/;
+async function detectRepo(cwd) {
+    try {
+        const { stdout } = await execFileAsync("git", ["remote", "get-url", "origin"], { cwd });
+        return stdout.trim().match(REPO_PATTERN)?.[1];
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Session repo label: an explicit config `repo` (owner/name) wins; else git
+ * auto-detect from cwd; else none. */
+export async function resolveRepoSlug(configRepo, cwd = process.cwd()) {
+    return configRepo ?? (await detectRepo(cwd));
+}
+//# sourceMappingURL=detect-repo.js.map

package/dist/src/core/detect-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-repo.js","sourceRoot":"","sources":["../../../src/core/detect-repo.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,YAAY,GACjB,gEAAgE,CAAC;AAElE,KAAK,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACrC,KAAK,EACL,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC/B,EAAE,GAAG,EAAE,CACP,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED;sCACsC;AACtC,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,UAA8B,EAC9B,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,OAAO,UAAU,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/src/core/file-session-store.d.ts

@@ -0,0 +1,10 @@
+import type { InvestigationStore } from "@prismalens/engine";
+import type { CreateSessionInput, SessionManager } from "./session.js";
+export interface FileSessionStore {
+    store: InvestigationStore;
+    /** The created session's workspace dir. Throws if read before `create()` resolves. */
+    workspacePath(): string;
+}
+/** Build a `conductRun`-ready store over `sessions`, scoped to one run's `meta`. */
+export declare function createFileSessionStore(sessions: SessionManager, meta: CreateSessionInput): FileSessionStore;
+//# sourceMappingURL=file-session-store.d.ts.map

package/dist/src/core/file-session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-session-store.d.ts","sourceRoot":"","sources":["../../../src/core/file-session-store.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EACX,kBAAkB,EAClB,cAAc,EAEd,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,sFAAsF;IACtF,aAAa,IAAI,MAAM,CAAC;CACxB;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,kBAAkB,GACtB,gBAAgB,CAiClB"}

package/dist/src/core/file-session-store.js

@@ -0,0 +1,34 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Sumit Patel
+/** Build a `conductRun`-ready store over `sessions`, scoped to one run's `meta`. */
+export function createFileSessionStore(sessions, meta) {
+    let session;
+    const store = {
+        async create() {
+            session = await sessions.create(meta);
+        },
+        async append(event) {
+            await sessions.appendEvent(meta.runId, event);
+        },
+        async finish(report) {
+            await sessions.writeReport(meta.runId, report);
+            await sessions.update(meta.runId, {
+                status: "done",
+                completedAt: new Date().toISOString(),
+            });
+        },
+        async fail() {
+            await sessions.update(meta.runId, { status: "errored" });
+        },
+    };
+    return {
+        store,
+        workspacePath() {
+            if (!session) {
+                throw new Error("workspacePath() called before store.create() resolved");
+            }
+            return session.workspacePath;
+        },
+    };
+}
+//# sourceMappingURL=file-session-store.js.map

package/dist/src/core/file-session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-session-store.js","sourceRoot":"","sources":["../../../src/core/file-session-store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AA4B7B,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CACrC,QAAwB,EACxB,IAAwB;IAExB,IAAI,OAAkC,CAAC;IAEvC,MAAM,KAAK,GAAuB;QACjC,KAAK,CAAC,MAAM;YACX,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAqB;YACjC,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAA2B;YACvC,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;gBACjC,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI;YACT,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,CAAC;KACD,CAAC;IAEF,OAAO;QACN,KAAK;QACL,aAAa;YACZ,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CACd,uDAAuD,CACvD,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC,aAAa,CAAC;QAC9B,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/src/core/parse-stdin.d.ts

@@ -0,0 +1,2 @@
+export declare function parseStdin(): Promise<Record<string, unknown> | undefined>;
+//# sourceMappingURL=parse-stdin.d.ts.map

package/dist/src/core/parse-stdin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-stdin.d.ts","sourceRoot":"","sources":["../../../src/core/parse-stdin.ts"],"names":[],"mappings":"AAaA,wBAAsB,UAAU,IAAI,OAAO,CAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CACnC,CAiBA"}

package/dist/src/core/parse-stdin.js

@@ -0,0 +1,30 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Sumit Patel
+/**
+ * Read JSON from piped stdin (salvaged from the retired pl orchestrator). Used to
+ * accept a webhook-shaped alert payload piped into `prismalens investigate`.
+ *
+ * Returns `undefined` if:
+ *  - stdin is a TTY (interactive terminal, no pipe), or
+ *  - the piped data is empty or not valid JSON.
+ */
+import consola from "consola";
+export async function parseStdin() {
+    if (process.stdin.isTTY)
+        return undefined;
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(chunk);
+    }
+    const raw = Buffer.concat(chunks).toString("utf-8").trim();
+    if (!raw)
+        return undefined;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        consola.warn("Invalid JSON on stdin, ignoring");
+        return undefined;
+    }
+}
+//# sourceMappingURL=parse-stdin.js.map

package/dist/src/core/parse-stdin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-stdin.js","sourceRoot":"","sources":["../../../src/core/parse-stdin.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;;GAOG;AACH,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,MAAM,CAAC,KAAK,UAAU,UAAU;IAG/B,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC"}

package/dist/src/core/run-investigation.d.ts

@@ -0,0 +1,42 @@
+import { type ResolvedInvestigation, type Sandbox } from "@prismalens/engine";
+import type { PlConfig } from "../config/schema.js";
+export type { ResolvedInvestigation };
+export interface ResolveInvestigationArgs {
+    /** Raw alert payload (piped JSON / RPC param) coerced into a FiringAlert. */
+    alert?: Record<string, unknown>;
+    /** Free-text fallback → a synthesized alert when no alert payload is supplied. */
+    query?: string;
+    /** Repository the harness investigates (its cwd). Defaults to `process.cwd()`. */
+    repo?: string;
+    /** Harness backend override; else `config.agent.default`. */
+    harness?: string;
+    /**
+     * Service name to select from `config.services` — overrides the alert's own
+     * service label. Covers `--query` runs that carry no labels (ADR-0015 §4).
+     */
+    service?: string;
+    /** The posture dial override (ADR-0017); else `config.agent.permissions.mode`. */
+    permissionMode?: string;
+    /**
+     * The resolved isolation boundary (ADR-0020), CALLER-OWNED — the command resolves
+     * it from `--sandbox`/`agent.sandbox` (`resolveSandbox`) and destroys it after the
+     * run. Forwarded to the engine so the harness spawns into it.
+     */
+    sandbox?: Sandbox;
+    /**
+     * What the CLI asked for (ADR-0020 honest fidelity, structured
+     * `fidelity.sandbox` field) — `selection.requested` from `resolveSandbox`,
+     * threaded alongside the resolved `sandbox` so a degrade (e.g. `auto` ->
+     * `process-floor`) is reported honestly in the run-metadata, not just the
+     * console warning.
+     */
+    requestedSandbox?: string;
+}
+/**
+ * Resolve a seed alert + merged `pl.config.yaml` into the inputs
+ * `investigateIncidentStream` wants: applies the shared host-local fallbacks, reads
+ * the BYO-key secrets from env, and delegates the actual build to the engine
+ * resolver. Throws (via the engine) on a hard input error.
+ */
+export declare function resolveInvestigation(args: ResolveInvestigationArgs, config: PlConfig): ResolvedInvestigation;
+//# sourceMappingURL=run-investigation.d.ts.map

package/dist/src/core/run-investigation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-investigation.d.ts","sourceRoot":"","sources":["../../../src/core/run-investigation.ts"],"names":[],"mappings":"AAmBA,OAAO,EAGN,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EAEZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,YAAY,EAAE,qBAAqB,EAAE,CAAC;AAEtC,MAAM,WAAW,wBAAwB;IACxC,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CACnC,IAAI,EAAE,wBAAwB,EAC9B,MAAM,EAAE,QAAQ,GACd,qBAAqB,CA4FvB"}

package/dist/src/core/run-investigation.js

@@ -0,0 +1,144 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Sumit Patel
+/**
+ * CLI investigation input-resolution (ADR-0010/0011).
+ *
+ * The shared resolver — alert coercion, harness construction, `config → engine
+ * inputs` — lives in `@prismalens/engine` (env-clean, reused by the web worker).
+ * This module is the CLI's thin SHIM over it: it applies `pl.config.yaml` over the
+ * shared `INVESTIGATION_DEFAULTS` fallbacks and reads BYO-key secrets from the
+ * environment (ADR-0006), then calls the engine resolver. Keeping the
+ * `resolveInvestigation(args, config)` signature means `investigate` and the
+ * JSON-RPC `serve` path stay in lockstep, unchanged.
+ */
+import { resolve } from "node:path";
+import { INVESTIGATION_DEFAULTS } from "@prismalens/config/investigation";
+import { getDefaultModel } from "@prismalens/config/llm";
+import { resolveInvestigation as engineResolveInvestigation, } from "@prismalens/engine";
+/**
+ * Resolve a seed alert + merged `pl.config.yaml` into the inputs
+ * `investigateIncidentStream` wants: applies the shared host-local fallbacks, reads
+ * the BYO-key secrets from env, and delegates the actual build to the engine
+ * resolver. Throws (via the engine) on a hard input error.
+ */
+export function resolveInvestigation(args, config) {
+    // cwd = --repo (a local repo path) else the current directory.
+    const cwd = args.repo ? resolve(args.repo) : process.cwd();
+    // BYO-key (ADR-0006): the engine never reads env — the CLI injects it here.
+    const openaiBaseUrl = process.env.OLLAMA_BASE_URL ??
+        process.env.OPENAI_BASE_URL ??
+        INVESTIGATION_DEFAULTS.synth.baseURL;
+    const apiKey = process.env.OLLAMA_API_KEY ?? process.env.OPENAI_API_KEY ?? "";
+    // Tier-1 reduce model: explicit agent.model wins; else the provider default
+    // (ADR-0013). The CLI synth endpoint is OpenAI-compatible (ollama/openai base URL).
+    const synthModel = config.agent.model ?? getDefaultModel("ollama");
+    if (!synthModel) {
+        throw new Error("No synthesis model configured (set agent.model).");
+    }
+    // Context enrichment (ADR-0015) — a single-alert CLI run is NOT context-free: it
+    // still knows the service/repos/logs from `prismalens.config.yaml`.
+    const service = selectService(args, config);
+    const repos = config.repo
+        ? [config.repo]
+        : Object.keys(config.repos).length > 0
+            ? Object.keys(config.repos)
+            : undefined;
+    const logs = config.logs.url
+        ? {
+            ...(config.logs.kind ? { kind: config.logs.kind } : {}),
+            url: config.logs.url,
+        }
+        : undefined;
+    // The single posture dial (ADR-0017): --mode / RPC `mode` wins; else
+    // `agent.permissions.mode` (defaults to "read-only"). Native passthrough is
+    // per-harness config, keyed by the resolved harness name.
+    const harnessName = args.harness ?? config.agent.default;
+    const permissionMode = args.permissionMode ??
+        config.agent.permissions.mode;
+    const harnessNative = config.harnesses[harnessName]?.native;
+    // Best-effort resource caps (ADR-0020): map the snake_case config knobs to the
+    // engine's SandboxLimits shape, dropping unset ones so "no cap" stays no cap
+    // (never a lying default). Only present when at least one knob is set.
+    const limits = toSandboxLimits(config.agent.limits);
+    const request = {
+        alert: args.alert,
+        query: args.query,
+        ...(service ? { service } : {}),
+        ...(repos ? { repos } : {}),
+        ...(logs ? { logs } : {}),
+        harness: harnessName,
+        permissionMode,
+        ...(harnessNative ? { harnessNative } : {}),
+        ...(args.sandbox ? { sandbox: args.sandbox } : {}),
+        ...(args.requestedSandbox
+            ? { requestedSandbox: args.requestedSandbox }
+            : {}),
+        ...(limits ? { limits } : {}),
+        // Per-alert fan-out cap (ADR-0016 decision 2): wire `agent.max_branches` when
+        // set; unset leaves the engine default (mirrors the `limits` thread-through).
+        ...(config.agent.max_branches
+            ? { maxBranches: config.agent.max_branches }
+            : {}),
+        model: config.agent.model,
+        cwd,
+        telemetry: {
+            prometheusUrl: config.telemetry.prometheusUrl ??
+                INVESTIGATION_DEFAULTS.telemetry.prometheusUrl,
+            alertmanagerUrl: config.telemetry.alertmanagerUrl ??
+                INVESTIGATION_DEFAULTS.telemetry.alertmanagerUrl,
+            apiUrl: config.telemetry.apiUrl ?? INVESTIGATION_DEFAULTS.telemetry.apiUrl,
+        },
+        synth: {
+            providerId: "ollama",
+            model: synthModel,
+            apiKey,
+            baseURL: openaiBaseUrl,
+        },
+        harnessEnv: {
+            OPENAI_API_KEY: process.env.OLLAMA_API_KEY ?? process.env.OPENAI_API_KEY,
+            OPENAI_BASE_URL: openaiBaseUrl,
+        },
+        initTimeoutMs: INVESTIGATION_DEFAULTS.harnessInitTimeoutMs,
+    };
+    return engineResolveInvestigation(request);
+}
+/**
+ * Map the parsed `agent.limits` (snake_case, all optional) into the engine's
+ * {@link SandboxLimits} (camelCase), dropping unset knobs. Returns `undefined` when
+ * nothing is set so the request stays limit-free — an omitted cap is never coerced to
+ * a lying value (ADR-0020).
+ */
+function toSandboxLimits(limits) {
+    const out = {
+        ...(limits.wall_clock_ms ? { wallClockMs: limits.wall_clock_ms } : {}),
+        ...(limits.memory_mb ? { memoryMb: limits.memory_mb } : {}),
+        ...(limits.cpu_cores ? { cpuCores: limits.cpu_cores } : {}),
+    };
+    return Object.keys(out).length > 0 ? out : undefined;
+}
+/**
+ * Label-driven service selection (ADR-0015 §4): `--service` wins; else the alert's
+ * own service label; no match in the catalog → no service context (degrade to
+ * telemetry + cwd, today's behaviour — never an error).
+ */
+function selectService(args, config) {
+    const name = args.service ?? pickServiceLabel(args.alert);
+    if (!name)
+        return undefined;
+    const cfg = config.services[name];
+    if (!cfg)
+        return undefined;
+    return {
+        name,
+        ...(cfg.tier ? { tier: cfg.tier } : {}),
+        ...(cfg.repo ? { repo: cfg.repo } : {}),
+        ...(cfg.depends_on.length > 0 ? { dependsOn: cfg.depends_on } : {}),
+    };
+}
+/** The alert's service identity label — `service`, else `namespace`, else `job`. */
+function pickServiceLabel(alert) {
+    const labels = (alert?.labels ?? {});
+    const pick = labels.service ?? labels.namespace ?? labels.job;
+    return typeof pick === "string" && pick ? pick : undefined;
+}
+//# sourceMappingURL=run-investigation.js.map

package/dist/src/core/run-investigation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-investigation.js","sourceRoot":"","sources":["../../../src/core/run-investigation.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;;;;;GAUG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EACN,oBAAoB,IAAI,0BAA0B,GAKlD,MAAM,oBAAoB,CAAC;AAqC5B;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CACnC,IAA8B,EAC9B,MAAgB;IAEhB,+DAA+D;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAE3D,4EAA4E;IAC5E,MAAM,aAAa,GAClB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;IAE9E,4EAA4E;IAC5E,oFAAoF;IACpF,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACrE,CAAC;IAED,iFAAiF;IACjF,oEAAoE;IACpE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;QACxB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YACrC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3B,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG;QAC3B,CAAC,CAAC;YACA,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;SACpB;QACF,CAAC,CAAC,SAAS,CAAC;IAEb,qEAAqE;IACrE,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IACzD,MAAM,cAAc,GAClB,IAAI,CAAC,cAA6C;QACnD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE5D,+EAA+E;IAC/E,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAyB;QACrC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,WAAW;QACpB,cAAc;QACd,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,gBAAgB;YACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,8EAA8E;QAC9E,8EAA8E;QAC9E,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY;YAC5B,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACN,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;QACzB,GAAG;QACH,SAAS,EAAE;YACV,aAAa,EACZ,MAAM,CAAC,SAAS,CAAC,aAAa;gBAC9B,sBAAsB,CAAC,SAAS,CAAC,aAAa;YAC/C,eAAe,EACd,MAAM,CAAC,SAAS,CAAC,eAAe;gBAChC,sBAAsB,CAAC,SAAS,CAAC,eAAe;YACjD,MAAM,EACL,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,sBAAsB,CAAC,SAAS,CAAC,MAAM;SACnE;QACD,KAAK,EAAE;YACN,UAAU,EAAE,QAAQ;YACpB,KAAK,EAAE,UAAU;YACjB,MAAM;YACN,OAAO,EAAE,aAAa;SACtB;QACD,UAAU,EAAE;YACX,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YACxE,eAAe,EAAE,aAAa;SAC9B;QACD,aAAa,EAAE,sBAAsB,CAAC,oBAAoB;KAC1D,CAAC;IAEF,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACvB,MAAmC;IAEnC,MAAM,GAAG,GAAkB;QAC1B,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACrB,IAA8B,EAC9B,MAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO;QACN,IAAI;QACJ,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,gBAAgB,CACxB,KAA0C;IAE1C,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAA4B,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC;IAC9D,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC"}

package/dist/src/core/session.d.ts

@@ -0,0 +1,42 @@
+import type { CanonicalEvent, InvestigationReport } from "@prismalens/contracts";
+export type SessionStatus = "running" | "done" | "errored";
+export interface SessionRecord {
+    runId: string;
+    status: SessionStatus;
+    alertname?: string;
+    /** Harness backend driving the run (agent.default). */
+    agent?: string;
+    /** Repository under investigation (owner/name). */
+    repo?: string;
+    /** Absolute path to this run's workspace dir. */
+    workspacePath: string;
+    createdAt: string;
+    updatedAt: string;
+    completedAt?: string;
+}
+export interface CreateSessionInput {
+    runId: string;
+    alertname?: string;
+    agent?: string;
+    repo?: string;
+}
+export interface SessionManager {
+    /** Resolved workspace base dir. */
+    readonly baseDir: string;
+    /** Absolute path to a run's workspace dir. */
+    workspaceDir(runId: string): string;
+    create(input: CreateSessionInput): Promise<SessionRecord>;
+    get(runId: string): Promise<SessionRecord | null>;
+    update(runId: string, updates: Partial<Omit<SessionRecord, "runId">>): Promise<SessionRecord>;
+    list(filter?: {
+        status?: SessionStatus[];
+    }): Promise<SessionRecord[]>;
+    /** Append one canonical event to the run's events.jsonl. */
+    appendEvent(runId: string, event: CanonicalEvent): Promise<void>;
+    readEvents(runId: string): Promise<CanonicalEvent[]>;
+    writeReport(runId: string, report: InvestigationReport): Promise<void>;
+    readReport(runId: string): Promise<InvestigationReport | null>;
+}
+export declare function resolveBaseDir(baseDir?: string): string;
+export declare function createSessionManager(baseDir?: string): SessionManager;
+//# sourceMappingURL=session.d.ts.map

package/dist/src/core/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/core/session.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EACX,cAAc,EACd,mBAAmB,EACnB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC9B,mCAAmC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAClD,MAAM,CACL,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,GAC5C,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACtE,4DAA4D;IAC5D,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACrD,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;CAC/D;AAUD,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAKvD;AAQD,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc,CAiJrE"}

package/dist/src/core/session.js

@@ -0,0 +1,168 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Sumit Patel
+/**
+ * Workspace + session manager for engine runs (ADR-0010), simplified from the
+ * retired pl orchestrator's session-manager.
+ *
+ * Layout under `<workspace.base_dir>` (default ~/.prismalens):
+ *   sessions.json                      — the run index (runId -> SessionRecord)
+ *   runs/<runId>/session.json          — per-run metadata mirror
+ *   runs/<runId>/events.jsonl          — the canonical event stream (one JSON/line)
+ *   runs/<runId>/report.json           — the synthesized InvestigationReport
+ *
+ * The index is the source of truth for create/get/update/list; each run dir also
+ * mirrors its metadata so a run is self-describing on disk.
+ */
+import { appendFile, mkdir, readFile, rename, writeFile, } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { getAppDataDir } from "@prismalens/config/investigation";
+const RUN_ID_RE = /^[a-zA-Z0-9_-]{1,128}$/;
+function expandHome(p) {
+    if (p === "~")
+        return homedir();
+    if (p.startsWith("~/"))
+        return join(homedir(), p.slice(2));
+    return p;
+}
+export function resolveBaseDir(baseDir) {
+    // Honor PRISMALENS_USER_FOLDER for the default workspace (via getAppDataDir);
+    // an explicit `workspace.base_dir` override still wins.
+    if (!baseDir || baseDir === "~/.prismalens")
+        return getAppDataDir();
+    return resolve(expandHome(baseDir));
+}
+async function writeJsonAtomic(path, data) {
+    const tmp = `${path}.tmp`;
+    await writeFile(tmp, JSON.stringify(data, null, 2), "utf-8");
+    await rename(tmp, path);
+}
+export function createSessionManager(baseDir) {
+    const base = resolveBaseDir(baseDir);
+    const runsRoot = join(base, "runs");
+    const indexPath = join(base, "sessions.json");
+    function assertRunId(runId) {
+        if (!RUN_ID_RE.test(runId))
+            throw new Error(`Invalid runId: "${runId}"`);
+    }
+    function workspaceDir(runId) {
+        assertRunId(runId);
+        return join(runsRoot, runId);
+    }
+    function metaPath(runId) {
+        return join(workspaceDir(runId), "session.json");
+    }
+    async function readIndex() {
+        try {
+            const raw = await readFile(indexPath, "utf-8");
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return {};
+            throw err;
+        }
+    }
+    async function upsertIndex(record) {
+        const index = await readIndex();
+        index[record.runId] = record;
+        await mkdir(base, { recursive: true });
+        await writeJsonAtomic(indexPath, index);
+    }
+    const manager = {
+        baseDir: base,
+        workspaceDir,
+        async create(input) {
+            assertRunId(input.runId);
+            const dir = workspaceDir(input.runId);
+            await mkdir(dir, { recursive: true });
+            const now = new Date().toISOString();
+            const record = {
+                runId: input.runId,
+                status: "running",
+                ...(input.alertname !== undefined
+                    ? { alertname: input.alertname }
+                    : {}),
+                ...(input.agent !== undefined ? { agent: input.agent } : {}),
+                ...(input.repo !== undefined ? { repo: input.repo } : {}),
+                workspacePath: dir,
+                createdAt: now,
+                updatedAt: now,
+            };
+            await writeJsonAtomic(metaPath(input.runId), record);
+            await upsertIndex(record);
+            return record;
+        },
+        async get(runId) {
+            assertRunId(runId);
+            const index = await readIndex();
+            const fromIndex = index[runId];
+            if (fromIndex)
+                return fromIndex;
+            try {
+                return JSON.parse(await readFile(metaPath(runId), "utf-8"));
+            }
+            catch {
+                return null;
+            }
+        },
+        async update(runId, updates) {
+            const existing = await manager.get(runId);
+            if (!existing)
+                throw new Error(`Session "${runId}" not found`);
+            const merged = {
+                ...existing,
+                ...updates,
+                runId,
+                updatedAt: new Date().toISOString(),
+            };
+            await writeJsonAtomic(metaPath(runId), merged);
+            await upsertIndex(merged);
+            return merged;
+        },
+        async list(filter) {
+            const index = await readIndex();
+            let records = Object.values(index);
+            if (filter?.status) {
+                const wanted = filter.status;
+                records = records.filter((r) => wanted.includes(r.status));
+            }
+            return records.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+        },
+        async appendEvent(runId, event) {
+            const dir = workspaceDir(runId);
+            await mkdir(dir, { recursive: true });
+            await appendFile(join(dir, "events.jsonl"), `${JSON.stringify(event)}\n`, "utf-8");
+        },
+        async readEvents(runId) {
+            try {
+                const raw = await readFile(join(workspaceDir(runId), "events.jsonl"), "utf-8");
+                return raw
+                    .split("\n")
+                    .filter((line) => line.trim().length > 0)
+                    .map((line) => JSON.parse(line));
+            }
+            catch (err) {
+                if (err.code === "ENOENT")
+                    return [];
+                throw err;
+            }
+        },
+        async writeReport(runId, report) {
+            const dir = workspaceDir(runId);
+            await mkdir(dir, { recursive: true });
+            await writeJsonAtomic(join(dir, "report.json"), report);
+        },
+        async readReport(runId) {
+            try {
+                const raw = await readFile(join(workspaceDir(runId), "report.json"), "utf-8");
+                return JSON.parse(raw);
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+    return manager;
+}
+//# sourceMappingURL=session.js.map

package/dist/src/core/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/core/session.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;;;;;;;GAYG;AACH,OAAO,EACN,UAAU,EACV,KAAK,EACL,QAAQ,EACR,MAAM,EACN,SAAS,GACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAiDjE,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAE3C,SAAS,UAAU,CAAC,CAAS;IAC5B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACV,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC9C,8EAA8E;IAC9E,wDAAwD;IACxD,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,eAAe;QAAE,OAAO,aAAa,EAAE,CAAC;IACpE,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAa;IACzD,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAE9C,SAAS,WAAW,CAAC,KAAa;QACjC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,GAAG,CAAC,CAAC;IAC1E,CAAC;IAED,SAAS,YAAY,CAAC,KAAa;QAClC,WAAW,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS,QAAQ,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,UAAU,SAAS;QACvB,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAChE,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,MAAqB;QAC/C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;QAC7B,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GAAmB;QAC/B,OAAO,EAAE,IAAI;QACb,YAAY;QAEZ,KAAK,CAAC,MAAM,CAAC,KAAK;YACjB,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,MAAM,GAAkB;gBAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,SAAS;gBACjB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;oBAChC,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,aAAa,EAAE,GAAG;gBAClB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACd,CAAC;YACF,MAAM,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC;QACf,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAK;YACd,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAC;YAChC,IAAI,CAAC;gBACJ,OAAO,IAAI,CAAC,KAAK,CAChB,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CACvB,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO;YAC1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAkB;gBAC7B,GAAG,QAAQ;gBACX,GAAG,OAAO;gBACV,KAAK;gBACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACnC,CAAC;YACF,MAAM,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC;QACf,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAM;YAChB,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;YAChC,IAAI,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK;YAC7B,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,UAAU,CACf,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAC5B,OAAO,CACP,CAAC;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK;YACrB,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CACzB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,EACzC,OAAO,CACP,CAAC;gBACF,OAAO,GAAG;qBACR,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;qBACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC;gBAChE,MAAM,GAAG,CAAC;YACX,CAAC;QACF,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM;YAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK;YACrB,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CACzB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,EACxC,OAAO,CACP,CAAC;gBACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;KACD,CAAC;IAEF,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/src/jsonrpc/server.d.ts

@@ -0,0 +1,15 @@
+export interface JsonRpcServerOptions {
+    /** serverInfo.version reported by `initialize`. */
+    version: string;
+    /** Request stream (newline-delimited). Defaults to process.stdin. */
+    input?: NodeJS.ReadableStream;
+    /** Response/notification stream. Defaults to process.stdout. */
+    output?: NodeJS.WritableStream;
+}
+/**
+ * Run the JSON-RPC server until the input stream closes. Reads requests
+ * line-by-line, dispatches by method, and writes responses/notifications back as
+ * newline-delimited JSON. Resolves when stdin ends.
+ */
+export declare function runJsonRpcServer(options: JsonRpcServerOptions): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/src/jsonrpc/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/jsonrpc/server.ts"],"names":[],"mappings":"AAoDA,MAAM,WAAW,oBAAoB;IACpC,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;CAC/B;AAyDD;;;;GAIG;AACH,wBAAsB,gBAAgB,CACrC,OAAO,EAAE,oBAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAyLf"}