specrails-desktop 2.64.2 → 2.65.0

package/server/dist/modules/agents/runtime/agent-store.js

@@ -1,22 +1,40 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MISSION_SEARCH_MAX_LIMIT = exports.MISSION_SEARCH_DEFAULT_LIMIT = void 0;
+exports.MISSION_SEARCH_MAX_LIMIT = exports.MISSION_SEARCH_DEFAULT_LIMIT = exports.AGENT_TRASH_RETENTION_MS = exports.foldSearchText = void 0;
+exports.isIntentStatusFor = isIntentStatusFor;
+exports.isAgentMessageIntentKind = isAgentMessageIntentKind;
 exports.setAgentMessageIntent = setAgentMessageIntent;
 exports.createAgentConversation = createAgentConversation;
 exports.getAgentConversation = getAgentConversation;
 exports.listAgentConversations = listAgentConversations;
 exports.updateAgentConversation = updateAgentConversation;
 exports.deleteAgentConversation = deleteAgentConversation;
+exports.softDeleteAgentConversation = softDeleteAgentConversation;
+exports.restoreAgentConversation = restoreAgentConversation;
+exports.listDeletedAgentConversations = listDeletedAgentConversations;
+exports.listExpiredAgentConversationIds = listExpiredAgentConversationIds;
 exports.addAgentMessage = addAgentMessage;
 exports.listAgentMessages = listAgentMessages;
 exports.findAgentSystemMessages = findAgentSystemMessages;
 exports.findAgentSystemMessage = findAgentSystemMessage;
 exports.deleteAgentMessagesByIds = deleteAgentMessagesByIds;
 exports.updateAgentMessageContent = updateAgentMessageContent;
-exports.foldSearchText = foldSearchText;
 exports.searchAgentConversations = searchAgentConversations;
 const crypto_1 = require("crypto");
 const agent_tier_1 = require("../../missions/runtime/agent-tier");
+const search_snippet_1 = require("../../../util/search-snippet");
+Object.defineProperty(exports, "foldSearchText", { enumerable: true, get: function () { return search_snippet_1.foldSearchText; } });
+const INTENT_KINDS = new Set(['rail-launch', 'flow-offer', 'flow-hand-off']);
+const INTENT_STATUSES = new Set(['launched', 'dismissed', 'accepted']);
+/** Legal statuses per card kind (an offer is accepted, a launch is launched). */
+function isIntentStatusFor(kind, status) {
+    if (kind === 'flow-offer')
+        return status === 'accepted' || status === 'dismissed';
+    return status === 'launched' || status === 'dismissed';
+}
+function isAgentMessageIntentKind(kind) {
+    return typeof kind === 'string' && INTENT_KINDS.has(kind);
+}
 function parseJsonArray(raw, predicate) {
     if (!raw)
         return [];
@@ -56,7 +74,7 @@ function isIntent(v) {
     if (!v || typeof v !== 'object')
         return false;
     const o = v;
-    return o.kind === 'rail-launch' && typeof o.proposalIndex === 'number' && (o.status === 'launched' || o.status === 'dismissed');
+    return isAgentMessageIntentKind(o.kind) && typeof o.proposalIndex === 'number' && typeof o.status === 'string' && INTENT_STATUSES.has(o.status);
 }
 /** The column holds a JSON ARRAY (one decision per proposal index); a legacy
  *  single-object value from the first cut is read as a one-element array. */
@@ -75,7 +93,7 @@ function parseIntents(raw) {
 }
 /**
  * Persist a card decision on a message (mission-rail-cards). APPENDS to the
- * message's decisions; refuses a second decision for the SAME proposal index (a decision is
+ * message's decisions; refuses a second decision for the SAME kind and proposal index (a decision is
  * final) — returns `{ ok: false, reason: 'already_decided' }` so the router
  * answers 409. Does NOT bump conversation activity.
  */
@@ -84,7 +102,7 @@ function setAgentMessageIntent(db, messageId, intent) {
     if (!row)
         return { ok: false, reason: 'not_found' };
     const current = parseIntents(row.intent);
-    if (current.some((i) => i.proposalIndex === intent.proposalIndex))
+    if (current.some((i) => i.kind === intent.kind && i.proposalIndex === intent.proposalIndex))
         return { ok: false, reason: 'already_decided' };
     db.prepare('UPDATE agent_messages SET intent = ? WHERE id = ?').run(JSON.stringify([...current, intent]), messageId);
     const updated = db.prepare('SELECT * FROM agent_messages WHERE id = ?').get(messageId);
@@ -106,7 +124,7 @@ function getAgentConversation(db, id) {
 }
 function listAgentConversations(db, limit = 100) {
     return db
-        .prepare('SELECT * FROM agent_conversations ORDER BY updated_at DESC LIMIT ?')
+        .prepare('SELECT * FROM agent_conversations WHERE deleted_at IS NULL ORDER BY updated_at DESC LIMIT ?')
         .all(limit).map((r) => mapConversation(r));
 }
 /** Patch a conversation. Only the provided fields change; `updated_at` always bumps. */
@@ -123,9 +141,36 @@ function updateAgentConversation(db, id, patch) {
     }
     return getAgentConversation(db, id);
 }
+/** Hard delete: the permanent step (purge / "Delete permanently"). Prefer {@link softDeleteAgentConversation}. */
 function deleteAgentConversation(db, id) {
     db.prepare('DELETE FROM agent_conversations WHERE id = ?').run(id);
 }
+/** 30 days: how long a deleted mission stays restorable. */
+exports.AGENT_TRASH_RETENTION_MS = 30 * 24 * 60 * 60 * 1000;
+/** Hide a mission and start its restore window. Idempotent: a repeat keeps the first stamp. */
+function softDeleteAgentConversation(db, id, now = new Date()) {
+    const result = db
+        .prepare('UPDATE agent_conversations SET deleted_at = COALESCE(deleted_at, ?) WHERE id = ?')
+        .run(now.toISOString(), id);
+    return result.changes > 0;
+}
+/** Undo a soft delete. Idempotent; returns the live row, or undefined when it no longer exists. */
+function restoreAgentConversation(db, id) {
+    db.prepare('UPDATE agent_conversations SET deleted_at = NULL WHERE id = ?').run(id);
+    return getAgentConversation(db, id);
+}
+/** Soft-deleted missions (newest deletion first), optionally of one pinned project. */
+function listDeletedAgentConversations(db, pinnedProjectId) {
+    const rows = pinnedProjectId === undefined
+        ? db.prepare('SELECT * FROM agent_conversations WHERE deleted_at IS NOT NULL ORDER BY deleted_at DESC').all()
+        : db.prepare('SELECT * FROM agent_conversations WHERE deleted_at IS NOT NULL AND pinned_project_id = ? ORDER BY deleted_at DESC').all(pinnedProjectId);
+    return rows.map((r) => mapConversation(r));
+}
+/** Ids of missions deleted longer ago than the retention window. */
+function listExpiredAgentConversationIds(db, now = new Date(), retentionMs = exports.AGENT_TRASH_RETENTION_MS) {
+    const cutoff = new Date(now.getTime() - retentionMs).toISOString();
+    return db.prepare('SELECT id FROM agent_conversations WHERE deleted_at IS NOT NULL AND deleted_at <= ?').all(cutoff).map((r) => r.id);
+}
 function addAgentMessage(db, input) {
     const id = (0, crypto_1.randomUUID)();
     const attachmentIds = input.attachmentIds && input.attachmentIds.length ? JSON.stringify(input.attachmentIds) : null;
@@ -178,64 +223,6 @@ function updateAgentMessageContent(db, messageId, content) {
 }
 exports.MISSION_SEARCH_DEFAULT_LIMIT = 20;
 exports.MISSION_SEARCH_MAX_LIMIT = 50;
-/** The trigram tokenizer matches nothing below three characters; shorter
- *  queries take the bounded substring scan instead. */
-const TRIGRAM_MIN_CHARS = 3;
-/** Rows the substring fallback inspects at most (newest first). */
-const FALLBACK_SCAN_ROWS = 400;
-/** Characters kept on each side of the first match in a snippet window. */
-const FALLBACK_CONTEXT = 60;
-const MARK_START = '\u0001';
-const MARK_END = '\u0002';
-/** Lowercase + strip combining diacritics, mirroring the index tokenizer so a
- *  title compare and a content compare agree on what "matches". */
-function foldSearchText(value) {
-    return value.normalize('NFD').replace(/[\u0300-\u036f]/g, '').toLowerCase();
-}
-/** Quote a raw user query as one FTS5 phrase so operators/punctuation in it
- *  never become syntax; a trigram phrase is a plain substring match. */
-function ftsPhrase(query) {
-    return `"${query.replace(/"/g, '""')}"`;
-}
-/**
- * Cut a marked full-content string (`highlight()` output, or the substring
- * fallback's own marking) down to a window of ~${FALLBACK_CONTEXT} characters on
- * each side of the FIRST match, with ellipses where text was dropped and
- * whitespace collapsed. Markers outside the window are simply cut away;
- * `parseMarkedSnippet` tolerates a dangling one.
- */
-function windowMarked(marked) {
-    const at = marked.indexOf(MARK_START);
-    if (at < 0)
-        return marked.slice(0, FALLBACK_CONTEXT * 2).replace(/\s+/g, ' ');
-    const close = marked.indexOf(MARK_END, at);
-    const matchEnd = close < 0 ? marked.length : close + 1;
-    const start = Math.max(0, at - FALLBACK_CONTEXT);
-    const end = Math.min(marked.length, matchEnd + FALLBACK_CONTEXT);
-    const prefix = start > 0 ? '…' : '';
-    const suffix = end < marked.length ? '…' : '';
-    return prefix + marked.slice(start, end).replace(/\s+/g, ' ') + suffix;
-}
-/** Turn a marked window into plain text + `[start, end)` highlight ranges. */
-function parseMarkedSnippet(marked) {
-    let text = '';
-    const ranges = [];
-    let open = -1;
-    for (const ch of marked) {
-        if (ch === MARK_START) {
-            open = text.length;
-        }
-        else if (ch === MARK_END) {
-            if (open >= 0 && text.length > open)
-                ranges.push([open, text.length]);
-            open = -1;
-        }
-        else {
-            text += ch;
-        }
-    }
-    return { text, ranges };
-}
 function contentHitsFts(db, query, limit) {
     return db
         .prepare(`WITH hits AS (
@@ -254,7 +241,7 @@ function contentHitsFts(db, query, limit) {
        FROM ranked WHERE rn = 1
        ORDER BY rank, conversation_id
        LIMIT ?`)
-        .all(MARK_START, MARK_END, ftsPhrase(query), limit);
+        .all(search_snippet_1.MARK_START, search_snippet_1.MARK_END, (0, search_snippet_1.ftsPhrase)(query), limit);
 }
 function contentHitsSubstring(db, query, limit) {
     const escaped = query.replace(/[\\%_]/g, (c) => `\\${c}`);
@@ -264,7 +251,7 @@ function contentHitsSubstring(db, query, limit) {
        WHERE role IN ('user', 'assistant') AND content LIKE ? ESCAPE '\\'
        ORDER BY created_at DESC, rowid DESC
        LIMIT ?`)
-        .all(`%${escaped}%`, FALLBACK_SCAN_ROWS);
+        .all(`%${escaped}%`, search_snippet_1.FALLBACK_SCAN_ROWS);
     const seen = new Set();
     const hits = [];
     const needle = query.toLowerCase();
@@ -275,7 +262,7 @@ function contentHitsSubstring(db, query, limit) {
         const at = row.content.toLowerCase().indexOf(needle);
         const marked = at < 0
             ? row.content
-            : row.content.slice(0, at) + MARK_START + row.content.slice(at, at + needle.length) + MARK_END + row.content.slice(at + needle.length);
+            : row.content.slice(0, at) + search_snippet_1.MARK_START + row.content.slice(at, at + needle.length) + search_snippet_1.MARK_END + row.content.slice(at + needle.length);
         hits.push({ conversation_id: row.conversation_id, message_id: row.message_id, marked });
         if (hits.length >= limit)
             break;
@@ -293,11 +280,11 @@ function searchAgentConversations(db, rawQuery, limit = exports.MISSION_SEARCH_D
     if (!query)
         return [];
     const cap = Math.max(1, Math.min(exports.MISSION_SEARCH_MAX_LIMIT, Math.floor(limit)));
-    const conversations = db.prepare('SELECT * FROM agent_conversations ORDER BY updated_at DESC').all().map((r) => mapConversation(r));
+    const conversations = db.prepare('SELECT * FROM agent_conversations WHERE deleted_at IS NULL ORDER BY updated_at DESC').all().map((r) => mapConversation(r));
     const byId = new Map(conversations.map((c) => [c.id, c]));
-    const folded = foldSearchText(query);
-    const titleHits = conversations.filter((c) => c.title && foldSearchText(c.title).includes(folded));
-    const contentRows = [...query].length >= TRIGRAM_MIN_CHARS
+    const folded = (0, search_snippet_1.foldSearchText)(query);
+    const titleHits = conversations.filter((c) => c.title && (0, search_snippet_1.foldSearchText)(c.title).includes(folded));
+    const contentRows = [...query].length >= search_snippet_1.TRIGRAM_MIN_CHARS
         ? contentHitsFts(db, query, cap + titleHits.length)
         : contentHitsSubstring(db, query, cap + titleHits.length);
     const contentById = new Map(contentRows.map((r) => [r.conversation_id, r]));
@@ -308,7 +295,7 @@ function searchAgentConversations(db, rawQuery, limit = exports.MISSION_SEARCH_D
             conversation,
             match: 'title',
             messageId: content?.message_id ?? null,
-            snippet: content ? parseMarkedSnippet(windowMarked(content.marked)) : null,
+            snippet: content ? (0, search_snippet_1.parseMarkedSnippet)((0, search_snippet_1.windowMarked)(content.marked)) : null,
         });
         if (results.length >= cap)
             return results;
@@ -320,7 +307,7 @@ function searchAgentConversations(db, rawQuery, limit = exports.MISSION_SEARCH_D
         const conversation = byId.get(row.conversation_id);
         if (!conversation)
             continue;
-        results.push({ conversation, match: 'content', messageId: row.message_id, snippet: parseMarkedSnippet(windowMarked(row.marked)) });
+        results.push({ conversation, match: 'content', messageId: row.message_id, snippet: (0, search_snippet_1.parseMarkedSnippet)((0, search_snippet_1.windowMarked)(row.marked)) });
         if (results.length >= cap)
             break;
     }

package/server/dist/modules/audit/adapters/http.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAgentAuditHttp = registerAgentAuditHttp;
+const domain_1 = require("../domain");
+function send(res, exported, format, name) {
+    const safe = name.replace(/[^A-Za-z0-9._-]+/g, '_').slice(0, 120) || 'agent-actions';
+    res.setHeader('Content-Type', exported.contentType);
+    res.setHeader('Content-Disposition', `attachment; filename="${safe}.${format}"`);
+    res.setHeader('X-Agent-Actions-Rows', String(exported.rows));
+    res.send(exported.body);
+}
+function isoOrNull(value) {
+    if (value === undefined || value === '')
+        return undefined;
+    if (typeof value !== 'string')
+        return null;
+    const ms = Date.parse(value);
+    return Number.isNaN(ms) ? null : new Date(ms).toISOString();
+}
+/**
+ * Inbound adapter for the audit exports:
+ *  - `GET /:projectId/jobs/:runId/audit?format=jsonl|csv` — one run (job or loop run).
+ *  - `GET /:projectId/agent-actions?format=jsonl|csv&from=&to=` — project-wide window.
+ * Pending batched rows are flushed first so an export reflects every recorded action.
+ */
+function registerAgentAuditHttp(router, serviceForRequest) {
+    router.get('/:projectId/jobs/:runId/audit', (req, res) => {
+        const format = (0, domain_1.parseAgentAuditFormat)(req.query.format);
+        if (!format) {
+            res.status(400).json({ error: 'Invalid format. Must be jsonl or csv' });
+            return;
+        }
+        try {
+            const runId = String(req.params.runId);
+            send(res, serviceForRequest(req).exportRun(runId, format), format, `agent-actions-${runId}`);
+        }
+        catch (error) {
+            console.error('[agent-audit] run export failed:', error);
+            res.status(500).json({ error: 'Failed to export agent actions' });
+        }
+    });
+    router.get('/:projectId/agent-actions', (req, res) => {
+        const format = (0, domain_1.parseAgentAuditFormat)(req.query.format);
+        if (!format) {
+            res.status(400).json({ error: 'Invalid format. Must be jsonl or csv' });
+            return;
+        }
+        const from = isoOrNull(req.query.from);
+        const to = isoOrNull(req.query.to);
+        if (from === null || to === null) {
+            res.status(400).json({ error: 'from and to must be ISO timestamps' });
+            return;
+        }
+        if (from && to && from > to) {
+            res.status(400).json({ error: 'from must not be after to' });
+            return;
+        }
+        try {
+            send(res, serviceForRequest(req).exportWindow({ ...(from ? { from } : {}), ...(to ? { to } : {}) }, format), format, 'agent-actions');
+        }
+        catch (error) {
+            console.error('[agent-audit] project export failed:', error);
+            res.status(500).json({ error: 'Failed to export agent actions' });
+        }
+    });
+}

package/server/dist/modules/audit/adapters/runtime.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_AUDIT_RETENTION_INTERVAL_MS = void 0;
+exports.sha256 = sha256;
+exports.createProjectAgentAudit = createProjectAgentAudit;
+const node_crypto_1 = require("node:crypto");
+const application_1 = require("../application");
+const domain_1 = require("../domain");
+const sqlite_1 = require("./sqlite");
+exports.AGENT_AUDIT_RETENTION_INTERVAL_MS = 24 * 60 * 60 * 1000;
+function sha256(content) {
+    return (0, node_crypto_1.createHash)('sha256').update(content).digest('hex');
+}
+/**
+ * Compose the audit runtime for a single project connection. Retention runs
+ * shortly after startup and then daily, reading the project setting each time
+ * so a change applies without a restart. Timers are unref'd.
+ */
+function createProjectAgentAudit(db, options) {
+    const store = (0, sqlite_1.createSqliteAgentActionStore)(db);
+    const recorder = (0, application_1.createAgentAuditRecorder)({ store, hash: sha256 });
+    const service = (0, application_1.createAgentAuditService)({ store, recorder });
+    const label = options.label ? ` for ${options.label}` : '';
+    const pruneNow = () => {
+        try {
+            const days = options.retentionDays() ?? domain_1.DEFAULT_AGENT_AUDIT_RETENTION_DAYS;
+            const removed = service.prune(days);
+            if (removed > 0)
+                console.log(`[agent-audit] retention removed ${removed} action(s)${label} (older than ${days} day(s))`);
+            return removed;
+        }
+        catch (error) {
+            console.warn(`[agent-audit] retention failed${label}: ${error instanceof Error ? error.message : String(error)}`);
+            return 0;
+        }
+    };
+    const timers = [];
+    let interval = null;
+    if (options.autoStartRetention !== false) {
+        const startup = setTimeout(pruneNow, options.startupDelayMs ?? 5_000);
+        startup.unref?.();
+        timers.push(startup);
+        interval = setInterval(pruneNow, options.intervalMs ?? exports.AGENT_AUDIT_RETENTION_INTERVAL_MS);
+        interval.unref?.();
+    }
+    return {
+        recorder,
+        service,
+        pruneNow,
+        dispose() {
+            for (const timer of timers.splice(0))
+                clearTimeout(timer);
+            if (interval) {
+                clearInterval(interval);
+                interval = null;
+            }
+            recorder.dispose();
+        },
+    };
+}

package/server/dist/modules/audit/adapters/sqlite.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSqliteAgentActionStore = createSqliteAgentActionStore;
+const domain_1 = require("../domain");
+function toRecord(row) {
+    return {
+        id: row.id,
+        runId: row.run_id,
+        jobId: row.job_id,
+        role: row.role,
+        kind: (0, domain_1.isAgentActionKind)(row.kind) ? row.kind : 'read',
+        target: row.target,
+        hash: row.hash,
+        ts: row.ts,
+        source: row.source,
+    };
+}
+const COLUMNS = 'id, run_id, job_id, role, kind, target, hash, ts, source';
+/** SQLite store bound to ONE project connection. Batches are one transaction
+ * (one WAL commit per flush, not one per action). */
+function createSqliteAgentActionStore(db) {
+    const insertMany = db.transaction((rows) => {
+        const insert = db.prepare('INSERT INTO agent_actions (run_id, job_id, role, kind, target, hash, ts, source) VALUES (?, ?, ?, ?, ?, ?, ?, ?)');
+        for (const row of rows)
+            insert.run(row.runId, row.jobId, row.role, row.kind, row.target, row.hash, row.ts, row.source);
+    });
+    return {
+        insertMany(rows) {
+            if (rows.length > 0)
+                insertMany(rows);
+        },
+        listByRun(runId, limit) {
+            return db.prepare(`
+        SELECT ${COLUMNS} FROM agent_actions
+         WHERE run_id = ? OR job_id = ?
+         ORDER BY ts ASC, id ASC LIMIT ?
+      `).all(runId, runId, limit).map(toRecord);
+        },
+        listWindow({ from, to, limit }) {
+            const conditions = [];
+            const params = [];
+            if (from) {
+                conditions.push('ts >= ?');
+                params.push(from);
+            }
+            if (to) {
+                conditions.push('ts <= ?');
+                params.push(to);
+            }
+            const where = conditions.length ? `WHERE ${conditions.join(' AND ')}` : '';
+            return db.prepare(`SELECT ${COLUMNS} FROM agent_actions ${where} ORDER BY ts ASC, id ASC LIMIT ?`).all(...params, limit).map(toRecord);
+        },
+        countByKind(runIds) {
+            const counts = (0, domain_1.emptyAgentActionCounts)();
+            const ids = [...new Set(runIds.filter(id => typeof id === 'string' && id.length > 0))];
+            if (ids.length === 0)
+                return counts;
+            const placeholders = ids.map(() => '?').join(', ');
+            const rows = db.prepare(`
+        SELECT kind, COUNT(*) AS n FROM agent_actions
+         WHERE run_id IN (${placeholders}) OR job_id IN (${placeholders})
+         GROUP BY kind
+      `).all(...ids, ...ids);
+            for (const row of rows)
+                if ((0, domain_1.isAgentActionKind)(row.kind))
+                    counts[row.kind] = row.n;
+            return counts;
+        },
+        deleteBefore(cutoffIso) {
+            return Number(db.prepare('DELETE FROM agent_actions WHERE ts < ?').run(cutoffIso).changes);
+        },
+    };
+}

package/server/dist/modules/audit/application.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_AGENT_AUDIT_EXPORT_ROWS = void 0;
+exports.createAgentAuditRecorder = createAgentAuditRecorder;
+exports.createStreamAuditTap = createStreamAuditTap;
+exports.recordToolCall = recordToolCall;
+exports.createAgentAuditService = createAgentAuditService;
+const domain_1 = require("./domain");
+function defaultSchedule(callback, ms) {
+    const handle = setTimeout(callback, ms);
+    handle.unref?.();
+    return { cancel: () => clearTimeout(handle) };
+}
+function createAgentAuditRecorder(deps) {
+    const flushIntervalMs = deps.flushIntervalMs ?? 250;
+    const maxBatch = Math.max(1, deps.maxBatch ?? 200);
+    const maxPending = Math.max(maxBatch, deps.maxPending ?? 20_000);
+    const now = deps.now ?? Date.now;
+    const schedule = deps.schedule ?? defaultSchedule;
+    const log = deps.log ?? ((message) => console.warn(message));
+    const pending = [];
+    const stats = { recorded: 0, written: 0, failed: 0, dropped: 0 };
+    let timer = null;
+    let disposed = false;
+    let lastLogAt = 0;
+    const warn = (message) => {
+        const at = now();
+        // At most one line per 10 s: a broken disk must not flood the server log.
+        if (at - lastLogAt < 10_000)
+            return;
+        lastLogAt = at;
+        try {
+            log(message);
+        }
+        catch { /* logging is advisory */ }
+    };
+    const flush = () => {
+        if (timer) {
+            timer.cancel();
+            timer = null;
+        }
+        while (pending.length > 0) {
+            const batch = pending.splice(0, maxBatch);
+            try {
+                deps.store.insertMany(batch);
+                stats.written += batch.length;
+            }
+            catch (error) {
+                stats.failed += batch.length;
+                warn(`[agent-audit] could not write ${batch.length} action(s): ${error instanceof Error ? error.message : String(error)} (failed so far: ${stats.failed})`);
+            }
+        }
+    };
+    let timerMs = Number.POSITIVE_INFINITY;
+    const arm = (ms) => {
+        if (disposed || (timer && timerMs <= ms))
+            return;
+        if (timer)
+            timer.cancel();
+        try {
+            timer = schedule(() => { timer = null; flush(); }, ms);
+            timerMs = ms;
+        }
+        catch {
+            timer = null;
+        }
+    };
+    return {
+        record(actions) {
+            if (disposed)
+                return;
+            try {
+                const list = Array.isArray(actions) ? actions : [actions];
+                if (list.length === 0)
+                    return;
+                const nowIso = new Date(now()).toISOString();
+                for (const action of list) {
+                    let hash = action.hash ?? null;
+                    if (!hash && typeof action.hashSource === 'string' && deps.hash) {
+                        try {
+                            hash = deps.hash(action.hashSource);
+                        }
+                        catch {
+                            hash = null;
+                        }
+                    }
+                    const row = (0, domain_1.toAgentActionRow)(action, hash, nowIso);
+                    if (!row)
+                        continue;
+                    if (pending.length >= maxPending) {
+                        stats.dropped += 1;
+                        continue;
+                    }
+                    pending.push(row);
+                    stats.recorded += 1;
+                }
+                if (pending.length >= maxBatch)
+                    arm(0);
+                else if (pending.length > 0)
+                    arm(flushIntervalMs);
+            }
+            catch (error) {
+                warn(`[agent-audit] dropped malformed action: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        },
+        flush() {
+            try {
+                flush();
+            }
+            catch { /* flush already isolates store failures */ }
+        },
+        stats: () => ({ ...stats, pending: pending.length }),
+        dispose() {
+            if (disposed)
+                return;
+            try {
+                flush();
+            }
+            catch { /* best effort */ }
+            disposed = true;
+            if (timer) {
+                timer.cancel();
+                timer = null;
+            }
+        },
+    };
+}
+/**
+ * A stateful observer for one run's parsed stream events. Each call extracts
+ * actions and hands them to the recorder. It never throws — a classification
+ * bug cannot fail the run whose stream it observes.
+ */
+function createStreamAuditTap(recorder, context) {
+    const state = (0, domain_1.createStreamAuditState)();
+    return (event) => {
+        try {
+            const role = typeof context.role === 'function' ? context.role() : context.role ?? 'agent';
+            const drafts = (0, domain_1.extractStreamActions)(event, state, role);
+            if (drafts.length > 0)
+                recorder.record(drafts.map(draft => withRun(draft, context, role)));
+        }
+        catch { /* audit must never affect the run */ }
+    };
+}
+function withRun(draft, context, role) {
+    return { ...draft, role: draft.role ?? role, runId: context.runId, jobId: context.jobId ?? null };
+}
+/** Record one tool call already normalised by a provider adapter (name + input or preview). */
+function recordToolCall(recorder, context, name, input) {
+    try {
+        const role = typeof context.role === 'function' ? context.role() : context.role ?? 'agent';
+        const drafts = (0, domain_1.classifyToolCall)(name, input, context.source, role);
+        if (drafts.length > 0)
+            recorder.record(drafts.map(draft => withRun(draft, context, role)));
+    }
+    catch { /* audit must never affect the caller */ }
+}
+// ─── Queries and retention ───────────────────────────────────────────────────
+exports.MAX_AGENT_AUDIT_EXPORT_ROWS = 100_000;
+function render(records, format) {
+    return format === 'csv'
+        ? { body: (0, domain_1.toCsv)(records), contentType: 'text/csv; charset=utf-8', rows: records.length }
+        : { body: (0, domain_1.toJsonl)(records), contentType: 'application/x-ndjson; charset=utf-8', rows: records.length };
+}
+function createAgentAuditService(deps) {
+    const now = deps.now ?? Date.now;
+    const settle = () => { try {
+        deps.recorder?.flush();
+    }
+    catch { /* export reads what is durable */ } };
+    return {
+        exportRun(runId, format) {
+            settle();
+            return render(deps.store.listByRun(runId, exports.MAX_AGENT_AUDIT_EXPORT_ROWS), format);
+        },
+        exportWindow(window, format) {
+            settle();
+            return render(deps.store.listWindow({ ...window, limit: exports.MAX_AGENT_AUDIT_EXPORT_ROWS }), format);
+        },
+        countByKind(runIds) {
+            settle();
+            return deps.store.countByKind(runIds);
+        },
+        /** Delete rows older than the retention window. Returns the number removed. */
+        prune(retentionDays) {
+            settle();
+            return deps.store.deleteBefore((0, domain_1.retentionCutoff)(now(), retentionDays));
+        },
+    };
+}