unfairly 0.8.2 → 0.8.4

package/dist/pace/managed-config.d.ts

@@ -18,4 +18,3 @@ export declare function writeManagedConfigs(input: {
     includeFileNames?: boolean;
 }): Promise<string[]>;
 export {};
-//# sourceMappingURL=managed-config.d.ts.map

package/dist/pace/managed-config.js

@@ -1,102 +1,8 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-export function renderEvidencePolicy(input) {
-    return {
-        version: 1,
-        include_file_names: input.includeFileNames ?? false,
-        scan_interval_seconds: 60,
-        max_files_per_root: 5000,
-        roots: (input.evidenceRoots ?? []).map((root, index) => ({
-            path: root,
-            label: `approved-output-${index + 1}`,
-            kind: "output",
-        })),
-    };
-}
-const EVENTS = {
-    sessionStart: { codex: "SessionStart", claude: "SessionStart", gemini: "SessionStart" },
-    toolCompleted: { codex: "PostToolUse", claude: "PostToolUse", gemini: "AfterTool" },
-    toolFailed: { codex: "PostToolUseFailure", claude: "PostToolUseFailure", gemini: "Notification" },
-    sessionEnd: { codex: "SessionEnd", claude: "SessionEnd", gemini: "SessionEnd" },
-};
-function hookCommand(command, source, event) {
-    return `${command} pace capture --source ${source} --event ${event}`;
-}
-function jsonHook(command, source, event, name) {
-    return [{
-            matcher: "*",
-            hooks: [{
-                    name: `ai-pace-${name}`,
-                    type: "command",
-                    command: hookCommand(command, source, event),
-                }],
-        }];
-}
-export function renderCodexRequirements(options) {
-    const lines = [
-        "# Generated by `unfairly pace config`. Deploy with MDM; do not add secrets.",
-        "allow_managed_hooks_only = true",
-        "",
-        "[features]",
-        "hooks = true",
-        "",
-        "[hooks]",
-        `managed_dir = ${JSON.stringify(options.managedDir)}`,
-        `windows_managed_dir = ${JSON.stringify(options.managedDir)}`,
-        "",
-    ];
-    for (const [name, event] of Object.entries(EVENTS)) {
-        lines.push(`[[hooks.${event.codex}]]`, 'matcher = ".*"', "", `[[hooks.${event.codex}.hooks]]`, 'type = "command"', `command = ${JSON.stringify(hookCommand(options.command, "codex", event.codex))}`, "timeout = 10", `statusMessage = ${JSON.stringify(`Recording ${name} evidence`)}`, "");
-    }
-    return `${lines.join("\n").trim()}\n`;
-}
-export function renderClaudeSettings(command) {
-    return {
-        hooks: Object.fromEntries(Object.entries(EVENTS).map(([name, event]) => [
-            event.claude,
-            jsonHook(command, "claude_code", event.claude, name),
-        ])),
-    };
-}
-export function renderGeminiSettings(command) {
-    return {
-        hooksConfig: { enabled: true, notifications: false },
-        hooks: Object.fromEntries(Object.entries(EVENTS).map(([name, event]) => [
-            event.gemini,
-            jsonHook(command, "gemini_cli", event.gemini, name),
-        ])),
-    };
-}
-export function renderCursorSettings(command) {
-    const events = {
-        sessionStart: "sessionStart",
-        postToolUse: "postToolUse",
-        postToolUseFailure: "postToolUseFailure",
-        sessionEnd: "sessionEnd",
-    };
-    return {
-        version: 1,
-        hooks: Object.fromEntries(Object.entries(events).map(([name, event]) => [
-            event,
-            [{
-                    command: hookCommand(command, "cursor", event),
-                    timeout: 10,
-                    ...(name.includes("Tool") ? { matcher: ".*" } : {}),
-                }],
-        ])),
-    };
-}
-export async function writeManagedConfigs(input) {
-    await fs.mkdir(input.outputDir, { recursive: true });
-    const files = {
-        "codex-requirements.toml": renderCodexRequirements(input),
-        "claude-settings.json": `${JSON.stringify(renderClaudeSettings(input.command), null, 2)}\n`,
-        "cursor-hooks.json": `${JSON.stringify(renderCursorSettings(input.command), null, 2)}\n`,
-        "gemini-settings.json": `${JSON.stringify(renderGeminiSettings(input.command), null, 2)}\n`,
-        "evidence-policy.json": `${JSON.stringify(renderEvidencePolicy(input), null, 2)}\n`,
-        "repository-policy.json": `${JSON.stringify({ version: 1, mappings: [] }, null, 2)}\n`,
-    };
-    await Promise.all(Object.entries(files).map(([name, contents]) => fs.writeFile(path.join(input.outputDir, name), contents, { encoding: "utf8", mode: 0o644 })));
-    return Object.keys(files).map((name) => path.join(input.outputDir, name));
-}
-//# sourceMappingURL=managed-config.js.map
+import r from"node:fs/promises";import a from"node:path";function d(e){return{version:1,include_file_names:e.includeFileNames??!1,scan_interval_seconds:60,max_files_per_root:5e3,roots:(e.evidenceRoots??[]).map((n,o)=>({path:n,label:`approved-output-${o+1}`,kind:"output"}))}}const t={sessionStart:{codex:"SessionStart",claude:"SessionStart",gemini:"SessionStart"},toolCompleted:{codex:"PostToolUse",claude:"PostToolUse",gemini:"AfterTool"},toolFailed:{codex:"PostToolUseFailure",claude:"PostToolUseFailure",gemini:"Notification"},sessionEnd:{codex:"SessionEnd",claude:"SessionEnd",gemini:"SessionEnd"}};function i(e,n,o){return`${e} pace capture --source ${n} --event ${o}`}function c(e,n,o,s){return[{matcher:"*",hooks:[{name:`ai-pace-${s}`,type:"command",command:i(e,n,o)}]}]}function m(e){const n=["# Generated by `unfairly pace config`. Deploy with MDM; do not add secrets.","allow_managed_hooks_only = true","","[features]","hooks = true","","[hooks]",`managed_dir = ${JSON.stringify(e.managedDir)}`,`windows_managed_dir = ${JSON.stringify(e.managedDir)}`,""];for(const[o,s]of Object.entries(t))n.push(`[[hooks.${s.codex}]]`,'matcher = ".*"',"",`[[hooks.${s.codex}.hooks]]`,'type = "command"',`command = ${JSON.stringify(i(e.command,"codex",s.codex))}`,"timeout = 10",`statusMessage = ${JSON.stringify(`Recording ${o} evidence`)}`,"");return`${n.join(`
+`).trim()}
+`}function l(e){return{hooks:Object.fromEntries(Object.entries(t).map(([n,o])=>[o.claude,c(e,"claude_code",o.claude,n)]))}}function u(e){return{hooksConfig:{enabled:!0,notifications:!1},hooks:Object.fromEntries(Object.entries(t).map(([n,o])=>[o.gemini,c(e,"gemini_cli",o.gemini,n)]))}}function f(e){return{version:1,hooks:Object.fromEntries(Object.entries({sessionStart:"sessionStart",postToolUse:"postToolUse",postToolUseFailure:"postToolUseFailure",sessionEnd:"sessionEnd"}).map(([o,s])=>[s,[{command:i(e,"cursor",s),timeout:10,...o.includes("Tool")?{matcher:".*"}:{}}]]))}}async function S(e){await r.mkdir(e.outputDir,{recursive:!0});const n={"codex-requirements.toml":m(e),"claude-settings.json":`${JSON.stringify(l(e.command),null,2)}
+`,"cursor-hooks.json":`${JSON.stringify(f(e.command),null,2)}
+`,"gemini-settings.json":`${JSON.stringify(u(e.command),null,2)}
+`,"evidence-policy.json":`${JSON.stringify(d(e),null,2)}
+`,"repository-policy.json":`${JSON.stringify({version:1,mappings:[]},null,2)}
+`};return await Promise.all(Object.entries(n).map(([o,s])=>r.writeFile(a.join(e.outputDir,o),s,{encoding:"utf8",mode:420}))),Object.keys(n).map(o=>a.join(e.outputDir,o))}export{l as renderClaudeSettings,m as renderCodexRequirements,f as renderCursorSettings,d as renderEvidencePolicy,u as renderGeminiSettings,S as writeManagedConfigs};

package/dist/pace/normalize.d.ts

@@ -7,4 +7,3 @@ export declare function normalizeHookEvent(input: {
     now?: Date;
 }): PaceEvent;
 export declare function migrateLegacyEvent(event: PaceLegacyEvent): PaceEvent;
-//# sourceMappingURL=normalize.d.ts.map

package/dist/pace/normalize.js

@@ -1,293 +1 @@
-import { randomUUID } from "node:crypto";
-import { PaceEventSchema, PaceSourceSchema, } from "./schema.js";
-import { deterministicWorkflowId } from "./identity.js";
-import { resolveApprovedRepository } from "./repository.js";
-const EVENT_TYPES = {
-    SessionStart: "session.started",
-    SessionEnd: "session.ended",
-    BeforeAgent: "session.started",
-    AfterAgent: "session.ended",
-    Stop: "workflow.stopped",
-    PostToolUse: "tool.completed",
-    AfterTool: "tool.completed",
-    PostToolUseFailure: "tool.failed",
-    AfterModel: "model.completed",
-    sessionStart: "session.started",
-    sessionEnd: "session.ended",
-    postToolUse: "tool.completed",
-    postToolUseFailure: "tool.failed",
-    stop: "workflow.stopped",
-};
-const CLIENT_EVENTS = {
-    SessionStart: "session_start",
-    SessionEnd: "session_end",
-    BeforeAgent: "before_agent",
-    AfterAgent: "after_agent",
-    Stop: "stop",
-    PostToolUse: "tool_success",
-    AfterTool: "tool_success",
-    PostToolUseFailure: "tool_failure",
-    AfterModel: "model_complete",
-    sessionStart: "session_start",
-    sessionEnd: "session_end",
-    postToolUse: "tool_success",
-    postToolUseFailure: "tool_failure",
-    stop: "stop",
-};
-function shortString(value) {
-    if (typeof value !== "string")
-        return undefined;
-    const trimmed = value.trim();
-    return trimmed ? trimmed.slice(0, 512) : undefined;
-}
-function firstString(payload, keys) {
-    for (const key of keys) {
-        const value = shortString(payload[key]);
-        if (value)
-            return value;
-    }
-    return undefined;
-}
-function opaqueId(value) {
-    const candidate = shortString(value);
-    return candidate && /^[A-Za-z0-9_-]{1,128}$/.test(candidate) ? candidate : undefined;
-}
-function number(payload, keys) {
-    for (const key of keys) {
-        const value = payload[key];
-        if (typeof value === "number" && Number.isFinite(value) && value >= 0)
-            return value;
-    }
-    return undefined;
-}
-function boolean(payload, keys) {
-    for (const key of keys)
-        if (typeof payload[key] === "boolean")
-            return payload[key];
-    return undefined;
-}
-function modelFamily(value) {
-    const model = value?.toLowerCase();
-    if (!model)
-        return undefined;
-    if (/gpt|o[1-9]|codex/.test(model))
-        return "openai_gpt";
-    if (/claude/.test(model))
-        return "anthropic_claude";
-    if (/gemini|gemma/.test(model))
-        return "google_gemini";
-    if (/llama/.test(model))
-        return "meta_llama";
-    if (/mistral|mixtral|codestral/.test(model))
-        return "mistral";
-    return "other";
-}
-function toolCategory(value) {
-    const tool = value?.toLowerCase();
-    if (!tool)
-        return undefined;
-    if (/skill/.test(tool))
-        return "skill";
-    if (/read|view|open_file/.test(tool))
-        return "file_read";
-    if (/write|edit|patch|notebook/.test(tool))
-        return "file_write";
-    if (/grep|glob|search|find/.test(tool))
-        return "code_search";
-    if (/git|github|pull_request|commit/.test(tool))
-        return "version_control";
-    if (/bash|shell|terminal|exec|command/.test(tool))
-        return "shell";
-    if (/web|browser|fetch|http/.test(tool))
-        return "web";
-    if (/mcp|connector|slack|notion|drive|linear/.test(tool))
-        return "connector";
-    if (/agent|task|delegate/.test(tool))
-        return "agent";
-    return "other";
-}
-function blockerCategory(input) {
-    const failed = ["PostToolUseFailure", "postToolUseFailure", "Stop", "stop"].includes(input.hookEvent) || input.payload.success === false;
-    if (!failed)
-        return undefined;
-    const signal = [
-        firstString(input.payload, ["error_type", "errorType"]),
-        firstString(input.payload, ["stop_reason", "stopReason"]),
-        firstString(input.payload, ["status"]),
-    ].filter(Boolean).join(" ").toLowerCase();
-    if (/authenticat|login|credential|token expired/.test(signal))
-        return "authentication";
-    if (/authoriz|permission|forbidden|denied|access/.test(signal))
-        return "authorization_permission";
-    if (/approval|confirm|consent/.test(signal))
-        return "approval_required";
-    if (/missing|not found|dependency|executable|command not found/.test(signal))
-        return "missing_dependency_tool";
-    if (/config|setting|environment|invalid option/.test(signal))
-        return "configuration";
-    if (/rate.?limit|quota|too many requests/.test(signal))
-        return "rate_limit_quota";
-    if (/provider|model unavailable|overloaded|capacity/.test(signal))
-        return "model_provider_unavailable";
-    if (input.hookEvent === "Stop" || input.hookEvent === "stop")
-        return "workflow_stopped";
-    if (input.hookEvent === "PostToolUseFailure" || input.hookEvent === "postToolUseFailure")
-        return signal ? "tool_failure" : "unknown";
-    return "unknown";
-}
-function approvalMode(value) {
-    const mode = value?.toLowerCase();
-    if (!mode)
-        return undefined;
-    if (/none|never|disabled/.test(mode))
-        return "none";
-    if (/manual|ask|confirm|prompt/.test(mode))
-        return "manual";
-    if (/auto|always|pre.?approved/.test(mode))
-        return "automatic";
-    return "unknown";
-}
-function permissionMode(value) {
-    const mode = value?.toLowerCase();
-    if (!mode)
-        return undefined;
-    if (/read.?only|readonly/.test(mode))
-        return "read_only";
-    if (/workspace|project.?write|write/.test(mode))
-        return "workspace_write";
-    if (/elevated|escalat|admin|sudo/.test(mode))
-        return "elevated";
-    if (/unrestricted|danger|full.?access/.test(mode))
-        return "unrestricted";
-    return "unknown";
-}
-function durationBucket(durationMs) {
-    if (durationMs === undefined)
-        return undefined;
-    if (durationMs < 1_000)
-        return "under_1s";
-    if (durationMs < 10_000)
-        return "1s_to_10s";
-    if (durationMs < 60_000)
-        return "10s_to_60s";
-    if (durationMs < 300_000)
-        return "1m_to_5m";
-    return "over_5m";
-}
-function exitCodeBucket(exitCode) {
-    if (exitCode === undefined)
-        return undefined;
-    if (exitCode === 0)
-        return "success";
-    if (exitCode >= 128)
-        return "signal";
-    return "failure";
-}
-export function normalizeHookEvent(input) {
-    const source = PaceSourceSchema.catch("unknown").parse(input.source);
-    const payload = input.payload && typeof input.payload === "object" && !Array.isArray(input.payload)
-        ? input.payload
-        : {};
-    const sessionId = opaqueId(firstString(payload, ["session_id", "sessionId", "conversation_id"]));
-    const suppliedWorkflowId = firstString(payload, ["workflow_id", "workflowId"]);
-    const workflowId = suppliedWorkflowId && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(suppliedWorkflowId)
-        ? suppliedWorkflowId
-        : input.installationId && sessionId
-            ? deterministicWorkflowId({ installationId: input.installationId, source, sessionId })
-            : undefined;
-    const exitCode = number(payload, ["exit_code", "exitCode"]);
-    const durationMs = number(payload, ["duration_ms", "durationMs"]);
-    const repository = resolveApprovedRepository(firstString(payload, ["cwd", "workspace_path", "workspacePath"]));
-    return PaceEventSchema.parse({
-        schema_version: 3,
-        collection_policy_version: "metadata-v3",
-        event_id: randomUUID(),
-        installation_id: input.installationId,
-        workflow_id: workflowId,
-        initiative_id: opaqueId(firstString(payload, ["initiative_id", "initiativeId"])),
-        playbook_id: opaqueId(firstString(payload, ["playbook_id", "playbookId"])),
-        playbook_version: opaqueId(firstString(payload, ["playbook_version", "playbookVersion"])),
-        occurred_at: (input.now ?? new Date()).toISOString(),
-        source,
-        event_type: EVENT_TYPES[input.hookEvent] ?? "unknown.observed",
-        evidence_level: "exact",
-        session_id: sessionId,
-        repository_id: repository?.repository_id,
-        commit_sha: repository?.commit_sha,
-        model_family: modelFamily(firstString(payload, ["model", "model_name", "modelName"])),
-        tool_category: toolCategory(firstString(payload, ["tool_name", "toolName", "tool"])),
-        blocker_category: blockerCategory({ hookEvent: input.hookEvent, payload }),
-        attributes: {
-            client_event: CLIENT_EVENTS[input.hookEvent] ?? "unknown",
-            approval_mode: approvalMode(firstString(payload, ["approval_mode", "approvalMode"])),
-            permission_mode: permissionMode(firstString(payload, ["permission_mode", "permissionMode"])),
-            success: boolean(payload, ["success"]),
-            exit_code_bucket: exitCodeBucket(exitCode),
-            duration_bucket: durationBucket(durationMs),
-            input_tokens: number(payload, ["input_tokens", "inputTokens"]),
-            output_tokens: number(payload, ["output_tokens", "outputTokens"]),
-            cached_tokens: number(payload, ["cached_tokens", "cachedTokens"]),
-        },
-    });
-}
-export function migrateLegacyEvent(event) {
-    const attributes = event.attributes;
-    const hookEvent = attributes.hook_event;
-    const migrated = PaceEventSchema.parse({
-        schema_version: 3,
-        collection_policy_version: "metadata-v3",
-        event_id: event.event_id,
-        installation_id: event.installation_id,
-        occurred_at: event.occurred_at,
-        source: event.source,
-        event_type: event.event_type,
-        evidence_level: event.evidence_level,
-        session_id: opaqueId(event.session_id),
-        workflow_id: event.schema_version === 2 ? event.workflow_id : undefined,
-        initiative_id: event.schema_version === 2 ? opaqueId(event.initiative_id) : undefined,
-        playbook_id: event.schema_version === 2 ? opaqueId(event.playbook_id) : undefined,
-        playbook_version: event.schema_version === 2 ? opaqueId(event.playbook_version) : undefined,
-        model_family: modelFamily(event.model),
-        tool_category: toolCategory(event.tool ?? event.skill),
-        blocker_category: blockerCategory({
-            hookEvent,
-            payload: {
-                success: attributes.success,
-                error_type: attributes.error_type,
-                stop_reason: attributes.stop_reason,
-                status: attributes.status,
-            },
-        }),
-        artifact_type: event.artifact_type,
-        attributes: {
-            client_event: event.source === "local_filesystem"
-                ? "local_output"
-                : event.event_type === "desktop.activity"
-                    ? "local_activity"
-                    : CLIENT_EVENTS[hookEvent] ?? "unknown",
-            approval_mode: approvalMode(attributes.approval_mode),
-            permission_mode: permissionMode(attributes.permission_mode),
-            success: attributes.success,
-            exit_code_bucket: exitCodeBucket(attributes.exit_code),
-            duration_bucket: durationBucket(attributes.duration_ms),
-            input_tokens: attributes.input_tokens,
-            output_tokens: attributes.output_tokens,
-            cached_tokens: attributes.cached_tokens,
-            files_changed_bucket: filesChangedBucket(attributes.files_changed),
-            local_signal: attributes.local_signal,
-        },
-    });
-    return migrated;
-}
-function filesChangedBucket(value) {
-    if (value === undefined)
-        return undefined;
-    if (value <= 1)
-        return "one";
-    if (value <= 5)
-        return "two_to_five";
-    if (value <= 20)
-        return "six_to_twenty";
-    return "over_twenty";
-}
-//# sourceMappingURL=normalize.js.map
+import{randomUUID as b}from"node:crypto";import{PaceEventSchema as l,PaceSourceSchema as E}from"./schema.js";import{deterministicWorkflowId as T}from"./identity.js";import{resolveApprovedRepository as S}from"./repository.js";const I={SessionStart:"session.started",SessionEnd:"session.ended",BeforeAgent:"session.started",AfterAgent:"session.ended",Stop:"workflow.stopped",PostToolUse:"tool.completed",AfterTool:"tool.completed",PostToolUseFailure:"tool.failed",AfterModel:"model.completed",sessionStart:"session.started",sessionEnd:"session.ended",postToolUse:"tool.completed",postToolUseFailure:"tool.failed",stop:"workflow.stopped"},c={SessionStart:"session_start",SessionEnd:"session_end",BeforeAgent:"before_agent",AfterAgent:"after_agent",Stop:"stop",PostToolUse:"tool_success",AfterTool:"tool_success",PostToolUseFailure:"tool_failure",AfterModel:"model_complete",sessionStart:"session_start",sessionEnd:"session_end",postToolUse:"tool_success",postToolUseFailure:"tool_failure",stop:"stop"};function u(e){if(typeof e!="string")return;const o=e.trim();return o?o.slice(0,512):void 0}function n(e,o){for(const t of o){const r=u(e[t]);if(r)return r}}function s(e){const o=u(e);return o&&/^[A-Za-z0-9_-]{1,128}$/.test(o)?o:void 0}function i(e,o){for(const t of o){const r=e[t];if(typeof r=="number"&&Number.isFinite(r)&&r>=0)return r}}function x(e,o){for(const t of o)if(typeof e[t]=="boolean")return e[t]}function _(e){const o=e?.toLowerCase();if(o)return/gpt|o[1-9]|codex/.test(o)?"openai_gpt":/claude/.test(o)?"anthropic_claude":/gemini|gemma/.test(o)?"google_gemini":/llama/.test(o)?"meta_llama":/mistral|mixtral|codestral/.test(o)?"mistral":"other"}function f(e){const o=e?.toLowerCase();if(o)return/skill/.test(o)?"skill":/read|view|open_file/.test(o)?"file_read":/write|edit|patch|notebook/.test(o)?"file_write":/grep|glob|search|find/.test(o)?"code_search":/git|github|pull_request|commit/.test(o)?"version_control":/bash|shell|terminal|exec|command/.test(o)?"shell":/web|browser|fetch|http/.test(o)?"web":/mcp|connector|slack|notion|drive|linear/.test(o)?"connector":/agent|task|delegate/.test(o)?"agent":"other"}function p(e){if(!(["PostToolUseFailure","postToolUseFailure","Stop","stop"].includes(e.hookEvent)||e.payload.success===!1))return;const t=[n(e.payload,["error_type","errorType"]),n(e.payload,["stop_reason","stopReason"]),n(e.payload,["status"])].filter(Boolean).join(" ").toLowerCase();return/authenticat|login|credential|token expired/.test(t)?"authentication":/authoriz|permission|forbidden|denied|access/.test(t)?"authorization_permission":/approval|confirm|consent/.test(t)?"approval_required":/missing|not found|dependency|executable|command not found/.test(t)?"missing_dependency_tool":/config|setting|environment|invalid option/.test(t)?"configuration":/rate.?limit|quota|too many requests/.test(t)?"rate_limit_quota":/provider|model unavailable|overloaded|capacity/.test(t)?"model_provider_unavailable":e.hookEvent==="Stop"||e.hookEvent==="stop"?"workflow_stopped":(e.hookEvent==="PostToolUseFailure"||e.hookEvent==="postToolUseFailure")&&t?"tool_failure":"unknown"}function m(e){const o=e?.toLowerCase();if(o)return/none|never|disabled/.test(o)?"none":/manual|ask|confirm|prompt/.test(o)?"manual":/auto|always|pre.?approved/.test(o)?"automatic":"unknown"}function k(e){const o=e?.toLowerCase();if(o)return/read.?only|readonly/.test(o)?"read_only":/workspace|project.?write|write/.test(o)?"workspace_write":/elevated|escalat|admin|sudo/.test(o)?"elevated":/unrestricted|danger|full.?access/.test(o)?"unrestricted":"unknown"}function y(e){if(e!==void 0)return e<1e3?"under_1s":e<1e4?"1s_to_10s":e<6e4?"10s_to_60s":e<3e5?"1m_to_5m":"over_5m"}function v(e){if(e!==void 0)return e===0?"success":e>=128?"signal":"failure"}function L(e){const o=E.catch("unknown").parse(e.source),t=e.payload&&typeof e.payload=="object"&&!Array.isArray(e.payload)?e.payload:{},r=s(n(t,["session_id","sessionId","conversation_id"])),a=n(t,["workflow_id","workflowId"]),w=a&&/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(a)?a:e.installationId&&r?T({installationId:e.installationId,source:o,sessionId:r}):void 0,h=i(t,["exit_code","exitCode"]),g=i(t,["duration_ms","durationMs"]),d=S(n(t,["cwd","workspace_path","workspacePath"]));return l.parse({schema_version:3,collection_policy_version:"metadata-v3",event_id:b(),installation_id:e.installationId,workflow_id:w,initiative_id:s(n(t,["initiative_id","initiativeId"])),playbook_id:s(n(t,["playbook_id","playbookId"])),playbook_version:s(n(t,["playbook_version","playbookVersion"])),occurred_at:(e.now??new Date).toISOString(),source:o,event_type:I[e.hookEvent]??"unknown.observed",evidence_level:"exact",session_id:r,repository_id:d?.repository_id,commit_sha:d?.commit_sha,model_family:_(n(t,["model","model_name","modelName"])),tool_category:f(n(t,["tool_name","toolName","tool"])),blocker_category:p({hookEvent:e.hookEvent,payload:t}),attributes:{client_event:c[e.hookEvent]??"unknown",approval_mode:m(n(t,["approval_mode","approvalMode"])),permission_mode:k(n(t,["permission_mode","permissionMode"])),success:x(t,["success"]),exit_code_bucket:v(h),duration_bucket:y(g),input_tokens:i(t,["input_tokens","inputTokens"]),output_tokens:i(t,["output_tokens","outputTokens"]),cached_tokens:i(t,["cached_tokens","cachedTokens"])}})}function q(e){const o=e.attributes,t=o.hook_event;return l.parse({schema_version:3,collection_policy_version:"metadata-v3",event_id:e.event_id,installation_id:e.installation_id,occurred_at:e.occurred_at,source:e.source,event_type:e.event_type,evidence_level:e.evidence_level,session_id:s(e.session_id),workflow_id:e.schema_version===2?e.workflow_id:void 0,initiative_id:e.schema_version===2?s(e.initiative_id):void 0,playbook_id:e.schema_version===2?s(e.playbook_id):void 0,playbook_version:e.schema_version===2?s(e.playbook_version):void 0,model_family:_(e.model),tool_category:f(e.tool??e.skill),blocker_category:p({hookEvent:t,payload:{success:o.success,error_type:o.error_type,stop_reason:o.stop_reason,status:o.status}}),artifact_type:e.artifact_type,attributes:{client_event:e.source==="local_filesystem"?"local_output":e.event_type==="desktop.activity"?"local_activity":c[t]??"unknown",approval_mode:m(o.approval_mode),permission_mode:k(o.permission_mode),success:o.success,exit_code_bucket:v(o.exit_code),duration_bucket:y(o.duration_ms),input_tokens:o.input_tokens,output_tokens:o.output_tokens,cached_tokens:o.cached_tokens,files_changed_bucket:A(o.files_changed),local_signal:o.local_signal}})}function A(e){if(e!==void 0)return e<=1?"one":e<=5?"two_to_five":e<=20?"six_to_twenty":"over_twenty"}export{q as migrateLegacyEvent,L as normalizeHookEvent};

package/dist/pace/repository.d.ts

@@ -69,4 +69,3 @@ export declare function resolveApprovedRepository(cwd: string | undefined): {
     commit_sha: string;
 } | undefined;
 export {};
-//# sourceMappingURL=repository.d.ts.map

package/dist/pace/repository.js

@@ -1,120 +1,2 @@
-import { createHash } from "node:crypto";
-import { execFileSync } from "node:child_process";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { z } from "zod";
-const policySchema = z.object({
-    version: z.literal(1),
-    mappings: z.array(z.object({
-        remote_fingerprint: z.string().regex(/^[a-f0-9]{64}$/),
-        repository_id: z.string().uuid(),
-    }).strict()).max(500),
-    /** Skills and playbooks the organization has published. Only these, plus published plugin skills, are reported by name. */
-    skills: z.array(z.string().regex(/^[a-z0-9][a-z0-9:_.-]{0,119}$/)).max(2000).optional(),
-}).strict();
-export function repositoryPolicyPath() {
-    return process.env.UNFAIRLY_PACE_REPOSITORY_POLICY ?? path.join(os.homedir(), ".unfairly", "pace", "repository-policy.json");
-}
-/**
- * `git@github.com:Org/Repo.git`, `https://github.com/org/repo` and
- * `ssh://git@github.com/Org/Repo.git` all canonicalize to `github.com/org/repo`.
- * The server fingerprints GitHub repositories the same way (src/lib/ai-pace/github.ts).
- */
-export function canonicalRemote(remote) {
-    const match = /^(?:[a-z+]+:\/\/)?(?:[^@/\s]+@)?([^/:\s]+)(?::\d+)?[:/](.+?)(?:\.git)?\/?$/i.exec(remote.trim());
-    return match ? `${match[1].toLowerCase()}/${match[2].toLowerCase()}` : null;
-}
-export function repositoryRemoteFingerprint(remote) {
-    return createHash("sha256").update(canonicalRemote(remote) ?? remote.trim().toLowerCase()).digest("hex");
-}
-function git(cwd, args) {
-    try {
-        return execFileSync("git", ["-C", cwd, ...args], {
-            encoding: "utf8",
-            stdio: ["ignore", "pipe", "ignore"],
-            timeout: 750,
-        }).trim() || undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-export function parseRepositoryPolicy(value) {
-    return policySchema.parse(value);
-}
-export function readRepositoryPolicy() {
-    return readPolicy();
-}
-function readPolicy() {
-    try {
-        return policySchema.parse(JSON.parse(fs.readFileSync(repositoryPolicyPath(), "utf8")));
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * The checkout to inspect for a session: its working directory, or, when that
- * worktree has since been removed, the nearest surviving ancestor directory.
- */
-export function surviving(cwd) {
-    let current = cwd ? path.resolve(cwd) : undefined;
-    while (current && !fs.existsSync(current)) {
-        const parent = path.dirname(current);
-        if (parent === current)
-            return undefined;
-        current = parent;
-    }
-    return current && git(current, ["rev-parse", "--is-inside-work-tree"]) === "true" ? current : undefined;
-}
-/** The approved repository a working directory belongs to, or undefined when it is not approved. */
-export function approvedRepositoryId(cwd, policy = readPolicy()) {
-    const checkout = surviving(cwd);
-    if (!checkout || !policy?.mappings.length)
-        return undefined;
-    const remote = git(checkout, ["config", "--get", "remote.origin.url"]);
-    if (!remote)
-        return undefined;
-    return policy.mappings.find((candidate) => candidate.remote_fingerprint === repositoryRemoteFingerprint(remote))?.repository_id;
-}
-/**
- * Commits the session's author made during the session window on the session's
- * line of history: its branch when that ref still exists (local or origin),
- * otherwise the surviving checkout's HEAD. Only full SHAs leave the machine;
- * the branch name is used locally and never uploaded.
- */
-export function sessionCommitShas(cwd, window) {
-    const checkout = surviving(cwd);
-    if (!checkout)
-        return [];
-    const author = git(checkout, ["config", "--get", "user.email"]);
-    if (!author)
-        return [];
-    const worktreeAlive = path.resolve(cwd) === checkout;
-    let ref = worktreeAlive ? "HEAD" : undefined;
-    if (window.branch && /^[\w./-]{1,200}$/.test(window.branch) && !window.branch.startsWith("-")) {
-        for (const candidate of [`refs/heads/${window.branch}`, `refs/remotes/origin/${window.branch}`]) {
-            if (git(checkout, ["rev-parse", "--verify", "--quiet", candidate])) {
-                ref = candidate;
-                break;
-            }
-        }
-    }
-    if (!ref)
-        return [];
-    const until = new Date(Date.parse(window.endedAt) + 5 * 60_000).toISOString();
-    const output = git(checkout, ["log", ref, "--fixed-strings", `--author=${author}`, `--since=${window.startedAt}`, `--until=${until}`, "--format=%H", "-n", "50"]);
-    return (output ?? "").split("\n").filter((sha) => /^[a-f0-9]{40}$/i.test(sha));
-}
-export function resolveApprovedRepository(cwd) {
-    const repositoryId = approvedRepositoryId(cwd);
-    if (!cwd || !repositoryId)
-        return undefined;
-    const mapping = { repository_id: repositoryId };
-    const commit = git(cwd, ["rev-parse", "HEAD"]);
-    if (!commit || !/^[a-f0-9]{40}$/i.test(commit))
-        return undefined;
-    return { repository_id: mapping.repository_id, commit_sha: commit };
-}
-//# sourceMappingURL=repository.js.map
+import{createHash as g}from"node:crypto";import{execFileSync as y}from"node:child_process";import p from"node:fs";import h from"node:os";import a from"node:path";import{z as n}from"zod";const f=n.object({version:n.literal(1),mappings:n.array(n.object({remote_fingerprint:n.string().regex(/^[a-f0-9]{64}$/),repository_id:n.string().uuid()}).strict()).max(500),skills:n.array(n.string().regex(/^[a-z0-9][a-z0-9:_.-]{0,119}$/)).max(2e3).optional()}).strict();function x(){return process.env.UNFAIRLY_PACE_REPOSITORY_POLICY??a.join(h.homedir(),".unfairly","pace","repository-policy.json")}function v(r){const e=/^(?:[a-z+]+:\/\/)?(?:[^@/\s]+@)?([^/:\s]+)(?::\d+)?[:/](.+?)(?:\.git)?\/?$/i.exec(r.trim());return e?`${e[1].toLowerCase()}/${e[2].toLowerCase()}`:null}function _(r){return g("sha256").update(v(r)??r.trim().toLowerCase()).digest("hex")}function o(r,e){try{return y("git",["-C",r,...e],{encoding:"utf8",stdio:["ignore","pipe","ignore"],timeout:750}).trim()||void 0}catch{return}}function I(r){return f.parse(r)}function L(){return d()}function d(){try{return f.parse(JSON.parse(p.readFileSync(x(),"utf8")))}catch{return}}function m(r){let e=r?a.resolve(r):void 0;for(;e&&!p.existsSync(e);){const t=a.dirname(e);if(t===e)return;e=t}return e&&o(e,["rev-parse","--is-inside-work-tree"])==="true"?e:void 0}function $(r,e=d()){const t=m(r);if(!t||!e?.mappings.length)return;const i=o(t,["config","--get","remote.origin.url"]);if(i)return e.mappings.find(c=>c.remote_fingerprint===_(i))?.repository_id}function O(r,e){const t=m(r);if(!t)return[];const i=o(t,["config","--get","user.email"]);if(!i)return[];let u=a.resolve(r)===t?"HEAD":void 0;if(e.branch&&/^[\w./-]{1,200}$/.test(e.branch)&&!e.branch.startsWith("-")){for(const s of[`refs/heads/${e.branch}`,`refs/remotes/origin/${e.branch}`])if(o(t,["rev-parse","--verify","--quiet",s])){u=s;break}}if(!u)return[];const l=new Date(Date.parse(e.endedAt)+5*6e4).toISOString();return(o(t,["log",u,"--fixed-strings",`--author=${i}`,`--since=${e.startedAt}`,`--until=${l}`,"--format=%H","-n","50"])??"").split(`
+`).filter(s=>/^[a-f0-9]{40}$/i.test(s))}function j(r){const e=$(r);if(!r||!e)return;const t={repository_id:e},i=o(r,["rev-parse","HEAD"]);if(!(!i||!/^[a-f0-9]{40}$/i.test(i)))return{repository_id:t.repository_id,commit_sha:i}}export{$ as approvedRepositoryId,v as canonicalRemote,I as parseRepositoryPolicy,L as readRepositoryPolicy,x as repositoryPolicyPath,_ as repositoryRemoteFingerprint,j as resolveApprovedRepository,O as sessionCommitShas,m as surviving};

package/dist/pace/schema.d.ts

@@ -1322,4 +1322,3 @@ export declare const PaceBatchSchema: z.ZodObject<{
     }[];
 }>;
 export type PaceBatch = z.infer<typeof PaceBatchSchema>;
-//# sourceMappingURL=schema.d.ts.map