prismalens 0.3.0 → 0.4.0

package/dist/src/config/schema.js

@@ -1,219 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// Copyright 2026 Sumit Patel
-/**
- * prismalens.config.yaml schema (ADR-0010 engine-as-CLI), adapted from the retired
- * pl orchestrator's config to the two-tier engine (ADR-0008).
- *
- * What changed vs. the old pl config:
- *  - `agent.default` enum is the harness BACKEND the supervisor rents
- *    ("deepagents" | "claude-code" | "codex"), not the old "deepagents-cli" et al.
- *  - `agent.model` is now OPTIONAL — each harness has its own default (deepagents:
- *    "openai:gpt-oss:120b"; Claude Code: the CLI/subscription default).
- *  - ADDED `telemetry` — the engine's TelemetryEndpoints (read-only surfaces the
- *    rented harness queries).
- *  - DROPPED the gatherer/analyst/verifier role taxonomy: `harness.roles` +
- *    `harness.tool_access`, the `sub_agents` role section, `investigation`, and
- *    `convergence.confidence_threshold` (ADR-0002: no numeric confidence). In the
- *    two-tier engine decompose is N=1 (one alert → one rented branch → reduce), so
- *    the role machinery is gone.
- */
-import { HARNESS_IDS, PERMISSION_MODES } from "@prismalens/config/harness";
-import { llmProviderIdSchema } from "@prismalens/config/llm";
-import { SANDBOX_MODES } from "@prismalens/engine";
-import { z } from "zod";
-/**
- * The single posture dial (ADR-0017) — prismalens does not build a permission
- * policy engine; it exposes this one dial and translates it to each harness's
- * native config. Defaults to the safest posture, `read-only`.
- */
-export const PermissionConfigSchema = z.object({
-    mode: z.enum(PERMISSION_MODES).default("read-only"),
-});
-/**
- * Arbitrary harness-native passthrough (ADR-0017) — e.g. Agent SDK query options
- * for `claude-code`, or `args` (extra CLI args) for `deepagents`. Kept untyped
- * here (per-harness runners narrow it); prismalens does not validate the shape,
- * it defers to the harness.
- */
-export const HarnessNativeConfigSchema = z.object({
-    native: z.record(z.string(), z.unknown()).optional(),
-});
-/**
- * Best-effort resource caps for the sandboxed harness run (ADR-0020: "resource
- * limits are part of the contract"). All optional with NO defaults — an unset knob
- * means "no cap", never a value that would lie about being enforced. What actually
- * takes effect is provider-dependent (the `process` floor enforces only
- * `wall_clock_ms`; `srt` adds memory/cpu when `systemd-run` is present).
- */
-export const AgentLimitsConfigSchema = z.object({
-    /** Wall-clock deadline (ms) — enforced by every sandbox provider. */
-    wall_clock_ms: z.number().int().positive().optional(),
-    /** Memory ceiling (MB) — best-effort (srt+systemd-run only). */
-    memory_mb: z.number().int().positive().optional(),
-    /** CPU quota (whole/fractional cores) — best-effort (srt+systemd-run only). */
-    cpu_cores: z.number().positive().optional(),
-});
-/** Tier-2 harness backend the supervisor rents (ADR-0008). */
-export const AgentConfigSchema = z.object({
-    default: z.enum(HARNESS_IDS).default("claude-code"),
-    /**
-     * BARE model id (e.g. "gpt-oss:120b") for the Tier-2 HARNESS ONLY — the chosen
-     * harness applies its own provider prefix (ADR-0017: deepagents prepends
-     * "openai:"; Claude Code takes it bare). Omit to let the harness pick its own
-     * default. The Tier-1 reduce model is a SEPARATE knob — `synth.model` (ADR-0013/
-     * 0016): the two calls go to different providers, so one key must never feed both.
-     */
-    model: z.string().optional(),
-    /** The posture dial (ADR-0017). Defaults to `read-only`. */
-    permissions: optionalWithDefaults(PermissionConfigSchema),
-    /**
-     * The isolation boundary the harness runs in (ADR-0020): `process` (the always-on
-     * cooperative floor), `srt` (enforced OS boundary), or `auto` (srt WHEN its egress
-     * bridge is healthy — the self-check, B.1.1 — else the floor; the degrade is honest,
-     * never silent). Defaults to `auto`: honest precisely BECAUSE of the self-check, which
-     * is what makes it safe to prefer the enforced boundary by default.
-     */
-    sandbox: z.enum(SANDBOX_MODES).default("auto"),
-    /**
-     * Best-effort resource caps for the sandboxed harness (ADR-0020). Optional; an
-     * omitted section means "no caps" (the object defaults to `{}` after parse).
-     */
-    limits: optionalWithDefaults(AgentLimitsConfigSchema),
-    /**
-     * Per-alert fan-out cap (ADR-0016 decision 2): the max branches the supervisor
-     * runs when a context carries multiple alerts. Optional — omitted ⇒ the engine
-     * default (3). A single-alert run always uses one branch regardless.
-     */
-    max_branches: z.number().int().positive().optional(),
-    max_turns: z.number().int().positive().optional(),
-});
-export const WorkspaceConfigSchema = z.object({
-    dir: z.string().default("~/.prismalens"),
-});
-/**
- * Run-budget guardrails for `pl listen` (issue #62): non-dollar caps only.
- * `max_concurrent`/`max_per_hour` gate dispatch; `max_turns` is threaded into the
- * default harness as a per-run runaway guard (no default ⇒ the harness's own default).
- */
-export const ListenCapsConfigSchema = z.object({
-    /** Max investigations running at once. Default 2. */
-    max_concurrent: z.number().int().positive().default(2),
-    /** Max investigations started per trailing hour. Default 10. */
-    max_per_hour: z.number().int().positive().default(10),
-    /** Per-run turn ceiling for the default harness. Unset ⇒ the harness default. */
-    max_turns: z.number().int().positive().optional(),
-});
-/**
- * `pl listen` webhook intake (issue #58, Phase 1 R1). `token` is REQUIRED to
- * start listening but optional here so every other command parses a config
- * without it; set it via env interpolation (`token: "${PRISMALENS_LISTEN_TOKEN}"`)
- * rather than a literal. The grouping_window_ms configures the debounce window.
- */
-export const ListenConfigSchema = z.object({
-    /** Local intake host. Default 127.0.0.1. */
-    host: z.string().default("127.0.0.1"),
-    /** Local intake port (4181: clear of 9090/9093/3000/8080 defaults). 0 = ephemeral. */
-    port: z.number().int().min(0).max(65535).default(4181),
-    /** Shared bearer token Alertmanager presents; unset ⇒ `pl listen` refuses to start. */
-    token: z.string().optional(),
-    /** Max alerts waiting or running at once; default 8. */
-    max_pending: z.number().int().positive().default(8),
-    /** Grouping window in milliseconds to debounce alerts into one investigation. */
-    grouping_window_ms: z.number().int().min(1000).max(120000).default(60000),
-    /**
-     * Slack incoming-webhook URL for report delivery (issue #61). Optional — unset ⇒
-     * delivery disabled. Set via env interpolation (slack_webhook_url:
-     * "${PRISMALENS_SLACK_WEBHOOK_URL}") so the secret stays in env (ADR-0006).
-     */
-    slack_webhook_url: z.string().url().optional(),
-    /** Run-budget guardrails (issue #62). Always present with defaults after parse. */
-    caps: optionalWithDefaults(ListenCapsConfigSchema),
-});
-/**
- * Read-only telemetry + app endpoints the harness may query. Keys are snake_case
- * (the config-file convention — every other key in this schema is snake_case); the
- * CLI maps them to the engine's camelCase `TelemetryEndpoints` at the boundary
- * (`run-investigation`). All optional here — resolved/overridden per run.
- */
-export const TelemetryConfigSchema = z.object({
-    prometheus_url: z.string().optional(),
-    alertmanager_url: z.string().optional(),
-    api_url: z.string().optional(),
-});
-/**
- * A service in the catalog (ADR-0015). The CLI maps the matched entry into the
- * investigation context's `service` field so a single-alert run carries the affected
- * service's repo/tier/deps, not just the bare alert.
- */
-export const ServiceConfigSchema = z.object({
-    tier: z.string().optional(),
-    /** owner/name slug or a local path the harness reads. */
-    repo: z.string().optional(),
-    /** Direct dependency service names (blast-radius seed). */
-    depends_on: z.array(z.string()).default([]),
-});
-/** A read-only log-query system the harness may curl (Loki/Elasticsearch/…). */
-export const LogSourceConfigSchema = z.object({
-    kind: z.string().optional(),
-    url: z.string().optional(),
-});
-/** Free-form `{ source: { key: value } }` connection hints for alert ingestion. */
-export const AlertSourceConfigSchema = z.record(z.string(), z.record(z.string(), z.string()));
-export const RepoConfigSchema = z.object({
-    repo: z.string(),
-    local_path: z.string().nullable().default(null),
-    alert_sources: AlertSourceConfigSchema.optional(),
-});
-/**
- * Make a sub-section optional in YAML but always present (with defaults) after
- * parse. The transform's return is annotated `z.output<T>` so the resolved
- * `PlConfig` keeps each sub-object's precise field types (e.g. `agent.default` is
- * the harness-id union, not `any`) instead of collapsing to `any`.
- */
-function optionalWithDefaults(schema) {
-    return z
-        .optional(z.record(z.string(), z.unknown()))
-        .transform((val, ctx) => {
-        const res = schema.safeParse(val ?? {});
-        if (!res.success) {
-            for (const issue of res.error.issues) {
-                ctx.addIssue(issue);
-            }
-            return z.NEVER;
-        }
-        return res.data;
-    });
-}
-export const SynthConfigSchema = z.object({
-    provider: llmProviderIdSchema.optional(),
-    model: z.string().optional(),
-    base_url: z.string().url().optional(),
-});
-export const PlConfigSchema = z.object({
-    $schema: z.string().optional(),
-    /** Convenience single-repo default (owner/name); `repos` is the multi-repo map. */
-    repo: z.string().optional(),
-    repos: z
-        .record(z.string(), RepoConfigSchema)
-        .optional()
-        .transform((val) => val ?? {}),
-    /** Service catalog (ADR-0015) — keyed by service name; maps into the context. */
-    services: z
-        .record(z.string(), ServiceConfigSchema)
-        .optional()
-        .transform((val) => val ?? {}),
-    /** Read-only log-query system the harness may query. */
-    logs: optionalWithDefaults(LogSourceConfigSchema),
-    agent: optionalWithDefaults(AgentConfigSchema),
-    synth: optionalWithDefaults(SynthConfigSchema),
-    workspace: optionalWithDefaults(WorkspaceConfigSchema),
-    listen: optionalWithDefaults(ListenConfigSchema),
-    telemetry: optionalWithDefaults(TelemetryConfigSchema),
-    alert_sources: AlertSourceConfigSchema.optional().transform((val) => val ?? {}),
-    /** Per-harness native passthrough (ADR-0017), keyed by harness id. */
-    harnesses: z
-        .record(z.string(), HarnessNativeConfigSchema)
-        .optional()
-        .transform((val) => val ?? {}),
-});
-//# sourceMappingURL=schema.js.map

package/dist/src/config/schema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/config/schema.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CACnD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,qEAAqE;IACrE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,gEAAgE;IAChE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,+EAA+E;IAC/E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACnD;;;;;;OAMG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,4DAA4D;IAC5D,WAAW,EAAE,oBAAoB,CAAC,sBAAsB,CAAC;IACzD;;;;;;OAMG;IACH,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9C;;;OAGG;IACH,MAAM,EAAE,oBAAoB,CAAC,uBAAuB,CAAC;IACrD;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;CACxC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,qDAAqD;IACrD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,gEAAgE;IAChE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,iFAAiF;IACjF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,4CAA4C;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACrC,sFAAsF;IACtF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACtD,uFAAuF;IACvF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,wDAAwD;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,iFAAiF;IACjF,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzE;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9C,mFAAmF;IACnF,IAAI,EAAE,oBAAoB,CAAC,sBAAsB,CAAC;CAClD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,yDAAyD;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,2DAA2D;IAC3D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1B,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAC9C,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/C,aAAa,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,SAAS,oBAAoB,CAAuC,MAAS;IAC5E,OAAO,CAAC;SACN,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SAC3C,SAAS,CAAC,CAAC,GAAG,EAAE,GAAG,EAAe,EAAE;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,OAAO,CAAC,CAAC,KAAoB,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,mFAAmF;IACnF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC;SACN,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC;SACpC,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,EAAE,CAAC;SACT,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC;SACvC,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IAC/B,wDAAwD;IACxD,IAAI,EAAE,oBAAoB,CAAC,qBAAqB,CAAC;IACjD,KAAK,EAAE,oBAAoB,CAAC,iBAAiB,CAAC;IAC9C,KAAK,EAAE,oBAAoB,CAAC,iBAAiB,CAAC;IAC9C,SAAS,EAAE,oBAAoB,CAAC,qBAAqB,CAAC;IACtD,MAAM,EAAE,oBAAoB,CAAC,kBAAkB,CAAC;IAChD,SAAS,EAAE,oBAAoB,CAAC,qBAAqB,CAAC;IACtD,aAAa,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,SAAS,CAC1D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAClB;IACD,sEAAsE;IACtE,SAAS,EAAE,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC;SAC7C,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;CAC/B,CAAC,CAAC"}

package/dist/src/core/caps.d.ts

@@ -1,36 +0,0 @@
-/**
- * The dispatch-time run-budget gate for `pl listen` (issue #62). Concurrency +
- * per-hour ONLY gate dispatch here; `max_turns` is threaded to the engine harness
- * (not a dispatch decision) and is deliberately absent from {@link DispatchCaps}.
- * Pure and clock-injected: state lives in the closure, the clock is a caller arg, so
- * the per-hour window is deterministically testable with a fake clock.
- */
-export interface DispatchCaps {
-    /** Max investigations running at once. Unset ⇒ concurrency unbounded. */
-    maxConcurrent?: number;
-    /** Max investigations STARTED in the trailing hour. Unset ⇒ rate unbounded. */
-    maxPerHour?: number;
-}
-export type CapReason = "concurrency" | "per_hour";
-export type CapDecision = {
-    allow: true;
-} | {
-    allow: false;
-    reason: CapReason;
-};
-export interface CapsGate {
-    /**
-     * Evaluate the caps and, on allow, ATOMICALLY record the start (active++ and push
-     * `nowMs` into the hourly window). The caller MUST invoke this with NO `await`
-     * between reading the caps and this call — the single-threaded event loop then
-     * makes check-and-commit atomic, so two window timers cannot both pass a
-     * concurrency=1 gate (the dispatch race the scout flagged).
-     */
-    tryDispatch(caps: DispatchCaps, nowMs: number): CapDecision;
-    /** Release one active slot when a dispatched run finishes. Call exactly once per `allow`. */
-    release(): void;
-    /** Live active count (inspection/tests). */
-    readonly activeCount: number;
-}
-export declare function createCapsGate(): CapsGate;
-//# sourceMappingURL=caps.d.ts.map

package/dist/src/core/caps.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"caps.d.ts","sourceRoot":"","sources":["../../../src/core/caps.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC5B,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,CAAC;AACnD,MAAM,MAAM,WAAW,GAAG;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAEhF,MAAM,WAAW,QAAQ;IACxB;;;;;;OAMG;IACH,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,CAAC;IAC5D,6FAA6F;IAC7F,OAAO,IAAI,IAAI,CAAC;IAChB,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAID,wBAAgB,cAAc,IAAI,QAAQ,CA+BzC"}

package/dist/src/core/caps.js

@@ -1,36 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// Copyright 2026 Sumit Patel
-const HOUR_MS = 3_600_000;
-export function createCapsGate() {
-    let active = 0;
-    // Rolling window of dispatched-run START times (ms). Per-hour is a rate on
-    // STARTS, so entries are pruned by age, never by release.
-    const startsMs = [];
-    return {
-        get activeCount() {
-            return active;
-        },
-        tryDispatch(caps, nowMs) {
-            // Concurrency FIRST (cheapest, trips most often), then per-hour. The FIRST
-            // cap that trips is the recorded reason.
-            if (caps.maxConcurrent !== undefined && active >= caps.maxConcurrent) {
-                return { allow: false, reason: "concurrency" };
-            }
-            const cutoff = nowMs - HOUR_MS;
-            while (startsMs.length > 0 && startsMs[0] <= cutoff) {
-                startsMs.shift();
-            }
-            if (caps.maxPerHour !== undefined && startsMs.length >= caps.maxPerHour) {
-                return { allow: false, reason: "per_hour" };
-            }
-            active++;
-            startsMs.push(nowMs);
-            return { allow: true };
-        },
-        release() {
-            if (active > 0)
-                active--;
-        },
-    };
-}
-//# sourceMappingURL=caps.js.map

package/dist/src/core/caps.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"caps.js","sourceRoot":"","sources":["../../../src/core/caps.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAkC7B,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B,MAAM,UAAU,cAAc;IAC7B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,OAAO;QACN,IAAI,WAAW;YACd,OAAO,MAAM,CAAC;QACf,CAAC;QACD,WAAW,CAAC,IAAI,EAAE,KAAK;YACtB,2EAA2E;YAC3E,yCAAyC;YACzC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACtE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YAChD,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;YAC/B,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAK,QAAQ,CAAC,CAAC,CAAY,IAAI,MAAM,EAAE,CAAC;gBACjE,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClB,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACzE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC7C,CAAC;YACD,MAAM,EAAE,CAAC;YACT,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QACD,OAAO;YACN,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/src/core/db.d.ts

@@ -1,3 +0,0 @@
-import type { DatabaseSync as DatabaseSyncType } from "node:sqlite";
-export declare function openDatabase(baseDir: string): DatabaseSyncType;
-//# sourceMappingURL=db.d.ts.map

package/dist/src/core/db.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../../src/core/db.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAyEpE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAmC9D"}

package/dist/src/core/db.js

@@ -1,105 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// Copyright 2026 Sumit Patel
-import { existsSync, mkdirSync, renameSync } from "node:fs";
-import { join } from "node:path";
-let DatabaseSync;
-try {
-    const mod = await import("node:sqlite");
-    DatabaseSync = mod.DatabaseSync;
-}
-catch {
-    console.error("PrismaLens requires Node >= 22.13.");
-    process.exit(1);
-}
-const SCHEMA = `
-		PRAGMA journal_mode = WAL;
-		PRAGMA busy_timeout = 5000;
-		PRAGMA foreign_keys = ON;
-
-		CREATE TABLE IF NOT EXISTS groups (
-			id         TEXT PRIMARY KEY,
-			group_key  TEXT,
-			formed_by  TEXT NOT NULL DEFAULT 'window',
-			created_at TEXT NOT NULL
-		);
-
-		CREATE TABLE IF NOT EXISTS runs (
-			run_id         TEXT PRIMARY KEY,
-			group_id       TEXT REFERENCES groups(id),
-			status         TEXT NOT NULL CHECK (status IN ('running','done','errored','suppressed')),
-			alertname      TEXT,
-			agent          TEXT,
-			repo           TEXT,
-			workspace_path TEXT NOT NULL,
-			error          TEXT,
-			suppression_reason TEXT,
-			created_at     TEXT NOT NULL,
-			updated_at     TEXT NOT NULL,
-			completed_at   TEXT
-		);
-		CREATE INDEX IF NOT EXISTS idx_runs_created_at ON runs(created_at DESC);
-		CREATE INDEX IF NOT EXISTS idx_runs_status     ON runs(status);
-
-		CREATE TABLE IF NOT EXISTS events (
-			id      INTEGER PRIMARY KEY AUTOINCREMENT,
-			run_id  TEXT NOT NULL REFERENCES runs(run_id),
-			payload TEXT NOT NULL
-		);
-		CREATE INDEX IF NOT EXISTS idx_events_run ON events(run_id, id);
-
-		CREATE TABLE IF NOT EXISTS reports (
-			run_id  TEXT PRIMARY KEY REFERENCES runs(run_id),
-			payload TEXT NOT NULL
-		);
-
-		-- One row per alert attached to a group, in insertion order (rowid).
-		-- late = 0 for the alerts that formed the window, 1 for alerts that
-		-- attached while the group's run was already in flight.
-		CREATE TABLE IF NOT EXISTS group_alerts (
-			id       INTEGER PRIMARY KEY AUTOINCREMENT,
-			group_id TEXT NOT NULL REFERENCES groups(id),
-			late     INTEGER NOT NULL,
-			payload  TEXT NOT NULL
-		);
-		CREATE INDEX IF NOT EXISTS idx_group_alerts ON group_alerts(group_id, id);
-`;
-const SCHEMA_CHECK = `
-		SELECT id, group_key, formed_by, created_at FROM groups LIMIT 1;
-		SELECT run_id, group_id, status, alertname, agent, repo, workspace_path, error, suppression_reason, created_at, updated_at, completed_at FROM runs LIMIT 1;
-		SELECT id, run_id, payload FROM events LIMIT 1;
-		SELECT run_id, payload FROM reports LIMIT 1;
-		SELECT id, group_id, late, payload FROM group_alerts LIMIT 1;
-`;
-export function openDatabase(baseDir) {
-    mkdirSync(baseDir, { recursive: true });
-    const dbPath = join(baseDir, "prismalens.db");
-    let db = new DatabaseSync(dbPath);
-    try {
-        db.exec(SCHEMA);
-        db.exec(SCHEMA_CHECK);
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        if (!/no such column|no such table|has no column named/i.test(msg)) {
-            try {
-                db.close();
-            }
-            catch { }
-            throw err;
-        }
-        // Schema mismatch or corruption detected.
-        const backupPath = join(baseDir, `prismalens.db.bak-${Date.now()}`);
-        if (existsSync(`${dbPath}-wal`))
-            renameSync(`${dbPath}-wal`, `${backupPath}-wal`);
-        if (existsSync(`${dbPath}-shm`))
-            renameSync(`${dbPath}-shm`, `${backupPath}-shm`);
-        db.close();
-        renameSync(dbPath, backupPath);
-        console.warn(`[!] Workspace schema is incompatible. Backed up old database to ${backupPath} and recreated.`);
-        // Recreate a fresh database.
-        db = new DatabaseSync(dbPath);
-        db.exec(SCHEMA);
-    }
-    return db;
-}
-//# sourceMappingURL=db.js.map

package/dist/src/core/db.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../src/core/db.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,IAAI,YAAqC,CAAC;AAE1C,IAAI,CAAC;IACJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACxC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;AACjC,CAAC;AAAC,MAAM,CAAC;IACR,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDd,CAAC;AAEF,MAAM,YAAY,GAAG;;;;;;CAMpB,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,OAAe;IAC3C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9C,IAAI,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IAElC,IAAI,CAAC;QACJ,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,CAAC,mDAAmD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC;gBACJ,EAAE,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,MAAM,GAAG,CAAC;QACX,CAAC;QAED,0CAA0C;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,UAAU,CAAC,GAAG,MAAM,MAAM,CAAC;YAC9B,UAAU,CAAC,GAAG,MAAM,MAAM,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,GAAG,MAAM,MAAM,CAAC;YAC9B,UAAU,CAAC,GAAG,MAAM,MAAM,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;QAClD,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CACX,mEAAmE,UAAU,iBAAiB,CAC9F,CAAC;QAEF,6BAA6B;QAC7B,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9B,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,CAAC;AACX,CAAC"}

package/dist/src/core/detect-repo.d.ts

@@ -1,4 +0,0 @@
-/** Session repo label: an explicit config `repo` (owner/name) wins; else git
- * auto-detect from cwd; else none. */
-export declare function resolveRepoSlug(configRepo: string | undefined, cwd?: string): Promise<string | undefined>;
-//# sourceMappingURL=detect-repo.d.ts.map

package/dist/src/core/detect-repo.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"detect-repo.d.ts","sourceRoot":"","sources":["../../../src/core/detect-repo.ts"],"names":[],"mappings":"AA+BA;sCACsC;AACtC,wBAAsB,eAAe,CACpC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,GAAG,GAAE,MAAsB,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE7B"}

package/dist/src/core/detect-repo.js

@@ -1,28 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// Copyright 2026 Sumit Patel
-/**
- * Resolve the repository label under investigation. Precedence: an explicit
- * config `repo` value (owner/name) wins; else git origin auto-detect from the
- * working directory; else `undefined`.
- *
- * Uses node:child_process directly (no tinyexec dependency).
- */
-import { execFile } from "node:child_process";
-import { promisify } from "node:util";
-const execFileAsync = promisify(execFile);
-const REPO_PATTERN = /(?:github\.com|gitlab\.com|bitbucket\.org)[/:](.+?)(?:\.git)?$/;
-async function detectRepo(cwd) {
-    try {
-        const { stdout } = await execFileAsync("git", ["remote", "get-url", "origin"], { cwd });
-        return stdout.trim().match(REPO_PATTERN)?.[1];
-    }
-    catch {
-        return undefined;
-    }
-}
-/** Session repo label: an explicit config `repo` (owner/name) wins; else git
- * auto-detect from cwd; else none. */
-export async function resolveRepoSlug(configRepo, cwd = process.cwd()) {
-    return configRepo ?? (await detectRepo(cwd));
-}
-//# sourceMappingURL=detect-repo.js.map

package/dist/src/core/detect-repo.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"detect-repo.js","sourceRoot":"","sources":["../../../src/core/detect-repo.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,YAAY,GACjB,gEAAgE,CAAC;AAElE,KAAK,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACrC,KAAK,EACL,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC/B,EAAE,GAAG,EAAE,CACP,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED;sCACsC;AACtC,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,UAA8B,EAC9B,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,OAAO,UAAU,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/src/core/file-session-store.d.ts

@@ -1,10 +0,0 @@
-import type { InvestigationStore } from "@prismalens/engine";
-import type { CreateSessionInput, SessionManager } from "./session.js";
-export interface FileSessionStore {
-    store: InvestigationStore;
-    /** The created session's workspace dir. Throws if read before `create()` resolves. */
-    workspacePath(): string;
-}
-/** Build a `conductRun`-ready store over `sessions`, scoped to one run's `meta`. */
-export declare function createFileSessionStore(sessions: SessionManager, meta: CreateSessionInput): FileSessionStore;
-//# sourceMappingURL=file-session-store.d.ts.map

package/dist/src/core/file-session-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-session-store.d.ts","sourceRoot":"","sources":["../../../src/core/file-session-store.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EACX,kBAAkB,EAClB,cAAc,EAEd,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,sFAAsF;IACtF,aAAa,IAAI,MAAM,CAAC;CACxB;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,kBAAkB,GACtB,gBAAgB,CAiClB"}

package/dist/src/core/file-session-store.js

@@ -1,34 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// Copyright 2026 Sumit Patel
-/** Build a `conductRun`-ready store over `sessions`, scoped to one run's `meta`. */
-export function createFileSessionStore(sessions, meta) {
-    let session;
-    const store = {
-        async create() {
-            session = await sessions.create(meta);
-        },
-        async append(event) {
-            await sessions.appendEvent(meta.runId, event);
-        },
-        async finish(report) {
-            await sessions.writeReport(meta.runId, report);
-            await sessions.update(meta.runId, {
-                status: "done",
-                completedAt: new Date().toISOString(),
-            });
-        },
-        async fail(error) {
-            await sessions.update(meta.runId, { status: "errored", error });
-        },
-    };
-    return {
-        store,
-        workspacePath() {
-            if (!session) {
-                throw new Error("workspacePath() called before store.create() resolved");
-            }
-            return session.workspacePath;
-        },
-    };
-}
-//# sourceMappingURL=file-session-store.js.map

package/dist/src/core/file-session-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-session-store.js","sourceRoot":"","sources":["../../../src/core/file-session-store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AA4B7B,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CACrC,QAAwB,EACxB,IAAwB;IAExB,IAAI,OAAkC,CAAC;IAEvC,MAAM,KAAK,GAAuB;QACjC,KAAK,CAAC,MAAM;YACX,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAqB;YACjC,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAA2B;YACvC,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;gBACjC,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAa;YACvB,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;KACD,CAAC;IAEF,OAAO;QACN,KAAK;QACL,aAAa;YACZ,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CACd,uDAAuD,CACvD,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC,aAAa,CAAC;QAC9B,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/src/core/parse-stdin.d.ts

@@ -1,2 +0,0 @@
-export declare function parseStdin(): Promise<Record<string, unknown> | undefined>;
-//# sourceMappingURL=parse-stdin.d.ts.map

package/dist/src/core/parse-stdin.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parse-stdin.d.ts","sourceRoot":"","sources":["../../../src/core/parse-stdin.ts"],"names":[],"mappings":"AAGA,wBAAsB,UAAU,IAAI,OAAO,CAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CACnC,CAiBA"}

package/dist/src/core/parse-stdin.js

@@ -1,21 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// Copyright 2026 Sumit Patel
-export async function parseStdin() {
-    if (process.stdin.isTTY)
-        return undefined;
-    const chunks = [];
-    for await (const chunk of process.stdin) {
-        chunks.push(chunk);
-    }
-    const raw = Buffer.concat(chunks).toString("utf-8").trim();
-    if (!raw)
-        return undefined;
-    try {
-        return JSON.parse(raw);
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        throw new Error(`invalid FiringAlert JSON on stdin: ${msg}`);
-    }
-}
-//# sourceMappingURL=parse-stdin.js.map

package/dist/src/core/parse-stdin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"parse-stdin.js","sourceRoot":"","sources":["../../../src/core/parse-stdin.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B,MAAM,CAAC,KAAK,UAAU,UAAU;IAG/B,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;AACF,CAAC"}

package/dist/src/core/run-investigation.d.ts

@@ -1,54 +0,0 @@
-import { type ResolvedInvestigation, type Sandbox } from "@prismalens/engine";
-import type { PlConfig } from "../config/schema.js";
-export type { ResolvedInvestigation };
-export interface ResolveInvestigationArgs {
-    /** Raw alert payload (piped JSON / RPC param) coerced into a FiringAlert. */
-    alert?: Record<string, unknown>;
-    /** Multiple raw alerts (storm grouping). When present, supersedes `alert`. */
-    alerts?: Record<string, unknown>[];
-    /** Free-text fallback → a synthesized alert when no alert payload is supplied. */
-    query?: string;
-    /** Repository the harness investigates (its cwd). Defaults to `process.cwd()`. */
-    repo?: string;
-    /** Harness backend override; else `config.agent.default`. */
-    harness?: string;
-    /**
-     * Service name to select from `config.services` — overrides the alert's own
-     * service label. Covers `--query` runs that carry no labels (ADR-0015 §4).
-     */
-    service?: string;
-    /** The posture dial override (ADR-0017); else `config.agent.permissions.mode`. */
-    permissionMode?: string;
-    /**
-     * The resolved isolation boundary (ADR-0020), CALLER-OWNED — the command resolves
-     * it from `--sandbox`/`agent.sandbox` (`resolveSandbox`) and destroys it after the
-     * run. Forwarded to the engine so the harness spawns into it.
-     */
-    sandbox?: Sandbox;
-    /**
-     * What the CLI asked for (ADR-0020 honest fidelity, structured
-     * `fidelity.sandbox` field) — `selection.requested` from `resolveSandbox`,
-     * threaded alongside the resolved `sandbox` so a degrade (e.g. `auto` ->
-     * `process-floor`) is reported honestly in the run-metadata, not just the
-     * console warning.
-     */
-    requestedSandbox?: string;
-    /** Per-run turn ceiling for the default harness (issue #62). Forwarded to the engine. */
-    maxTurns?: number;
-    /** If true, stops host settings/hooks/plugins/MCP servers from leaking into the rented harness. */
-    isolateSettings?: boolean;
-}
-/**
- * Resolve a seed alert + merged `pl.config.yaml` into the inputs
- * `investigateIncidentStream` wants: applies the shared host-local fallbacks, reads
- * the BYO-key secrets from env, and delegates the actual build to the engine
- * resolver. Throws (via the engine) on a hard input error.
- */
-export declare function isSynthConfigured(config: PlConfig): boolean;
-export declare function resolveInvestigation(args: ResolveInvestigationArgs, config: PlConfig): ResolvedInvestigation;
-/**
- * The alert's service identity label — `service`, else `namespace`, else `job`.
- * Exported for the `listen` path's per-payload repo resolution (issue #58 AC5).
- */
-export declare function pickServiceLabel(alert: Record<string, unknown> | undefined): string | undefined;
-//# sourceMappingURL=run-investigation.d.ts.map

package/dist/src/core/run-investigation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-investigation.d.ts","sourceRoot":"","sources":["../../../src/core/run-investigation.ts"],"names":[],"mappings":"AAyBA,OAAO,EAIN,KAAK,qBAAqB,EAC1B,KAAK,OAAO,EAEZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,YAAY,EAAE,qBAAqB,EAAE,CAAC;AAEtC,MAAM,WAAW,wBAAwB;IACxC,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACnC,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mGAAmG;IACnG,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAa3D;AAED,wBAAgB,oBAAoB,CACnC,IAAI,EAAE,wBAAwB,EAC9B,MAAM,EAAE,QAAQ,GACd,qBAAqB,CAyIvB;AAwCD;;;GAGG;AACH,wBAAgB,gBAAgB,CAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACxC,MAAM,GAAG,SAAS,CAIpB"}