unfairly 0.8.3 → 0.8.4

package/dist/pace/normalize.js

@@ -1,293 +1 @@
-import { randomUUID } from "node:crypto";
-import { PaceEventSchema, PaceSourceSchema, } from "./schema.js";
-import { deterministicWorkflowId } from "./identity.js";
-import { resolveApprovedRepository } from "./repository.js";
-const EVENT_TYPES = {
-    SessionStart: "session.started",
-    SessionEnd: "session.ended",
-    BeforeAgent: "session.started",
-    AfterAgent: "session.ended",
-    Stop: "workflow.stopped",
-    PostToolUse: "tool.completed",
-    AfterTool: "tool.completed",
-    PostToolUseFailure: "tool.failed",
-    AfterModel: "model.completed",
-    sessionStart: "session.started",
-    sessionEnd: "session.ended",
-    postToolUse: "tool.completed",
-    postToolUseFailure: "tool.failed",
-    stop: "workflow.stopped",
-};
-const CLIENT_EVENTS = {
-    SessionStart: "session_start",
-    SessionEnd: "session_end",
-    BeforeAgent: "before_agent",
-    AfterAgent: "after_agent",
-    Stop: "stop",
-    PostToolUse: "tool_success",
-    AfterTool: "tool_success",
-    PostToolUseFailure: "tool_failure",
-    AfterModel: "model_complete",
-    sessionStart: "session_start",
-    sessionEnd: "session_end",
-    postToolUse: "tool_success",
-    postToolUseFailure: "tool_failure",
-    stop: "stop",
-};
-function shortString(value) {
-    if (typeof value !== "string")
-        return undefined;
-    const trimmed = value.trim();
-    return trimmed ? trimmed.slice(0, 512) : undefined;
-}
-function firstString(payload, keys) {
-    for (const key of keys) {
-        const value = shortString(payload[key]);
-        if (value)
-            return value;
-    }
-    return undefined;
-}
-function opaqueId(value) {
-    const candidate = shortString(value);
-    return candidate && /^[A-Za-z0-9_-]{1,128}$/.test(candidate) ? candidate : undefined;
-}
-function number(payload, keys) {
-    for (const key of keys) {
-        const value = payload[key];
-        if (typeof value === "number" && Number.isFinite(value) && value >= 0)
-            return value;
-    }
-    return undefined;
-}
-function boolean(payload, keys) {
-    for (const key of keys)
-        if (typeof payload[key] === "boolean")
-            return payload[key];
-    return undefined;
-}
-function modelFamily(value) {
-    const model = value?.toLowerCase();
-    if (!model)
-        return undefined;
-    if (/gpt|o[1-9]|codex/.test(model))
-        return "openai_gpt";
-    if (/claude/.test(model))
-        return "anthropic_claude";
-    if (/gemini|gemma/.test(model))
-        return "google_gemini";
-    if (/llama/.test(model))
-        return "meta_llama";
-    if (/mistral|mixtral|codestral/.test(model))
-        return "mistral";
-    return "other";
-}
-function toolCategory(value) {
-    const tool = value?.toLowerCase();
-    if (!tool)
-        return undefined;
-    if (/skill/.test(tool))
-        return "skill";
-    if (/read|view|open_file/.test(tool))
-        return "file_read";
-    if (/write|edit|patch|notebook/.test(tool))
-        return "file_write";
-    if (/grep|glob|search|find/.test(tool))
-        return "code_search";
-    if (/git|github|pull_request|commit/.test(tool))
-        return "version_control";
-    if (/bash|shell|terminal|exec|command/.test(tool))
-        return "shell";
-    if (/web|browser|fetch|http/.test(tool))
-        return "web";
-    if (/mcp|connector|slack|notion|drive|linear/.test(tool))
-        return "connector";
-    if (/agent|task|delegate/.test(tool))
-        return "agent";
-    return "other";
-}
-function blockerCategory(input) {
-    const failed = ["PostToolUseFailure", "postToolUseFailure", "Stop", "stop"].includes(input.hookEvent) || input.payload.success === false;
-    if (!failed)
-        return undefined;
-    const signal = [
-        firstString(input.payload, ["error_type", "errorType"]),
-        firstString(input.payload, ["stop_reason", "stopReason"]),
-        firstString(input.payload, ["status"]),
-    ].filter(Boolean).join(" ").toLowerCase();
-    if (/authenticat|login|credential|token expired/.test(signal))
-        return "authentication";
-    if (/authoriz|permission|forbidden|denied|access/.test(signal))
-        return "authorization_permission";
-    if (/approval|confirm|consent/.test(signal))
-        return "approval_required";
-    if (/missing|not found|dependency|executable|command not found/.test(signal))
-        return "missing_dependency_tool";
-    if (/config|setting|environment|invalid option/.test(signal))
-        return "configuration";
-    if (/rate.?limit|quota|too many requests/.test(signal))
-        return "rate_limit_quota";
-    if (/provider|model unavailable|overloaded|capacity/.test(signal))
-        return "model_provider_unavailable";
-    if (input.hookEvent === "Stop" || input.hookEvent === "stop")
-        return "workflow_stopped";
-    if (input.hookEvent === "PostToolUseFailure" || input.hookEvent === "postToolUseFailure")
-        return signal ? "tool_failure" : "unknown";
-    return "unknown";
-}
-function approvalMode(value) {
-    const mode = value?.toLowerCase();
-    if (!mode)
-        return undefined;
-    if (/none|never|disabled/.test(mode))
-        return "none";
-    if (/manual|ask|confirm|prompt/.test(mode))
-        return "manual";
-    if (/auto|always|pre.?approved/.test(mode))
-        return "automatic";
-    return "unknown";
-}
-function permissionMode(value) {
-    const mode = value?.toLowerCase();
-    if (!mode)
-        return undefined;
-    if (/read.?only|readonly/.test(mode))
-        return "read_only";
-    if (/workspace|project.?write|write/.test(mode))
-        return "workspace_write";
-    if (/elevated|escalat|admin|sudo/.test(mode))
-        return "elevated";
-    if (/unrestricted|danger|full.?access/.test(mode))
-        return "unrestricted";
-    return "unknown";
-}
-function durationBucket(durationMs) {
-    if (durationMs === undefined)
-        return undefined;
-    if (durationMs < 1_000)
-        return "under_1s";
-    if (durationMs < 10_000)
-        return "1s_to_10s";
-    if (durationMs < 60_000)
-        return "10s_to_60s";
-    if (durationMs < 300_000)
-        return "1m_to_5m";
-    return "over_5m";
-}
-function exitCodeBucket(exitCode) {
-    if (exitCode === undefined)
-        return undefined;
-    if (exitCode === 0)
-        return "success";
-    if (exitCode >= 128)
-        return "signal";
-    return "failure";
-}
-export function normalizeHookEvent(input) {
-    const source = PaceSourceSchema.catch("unknown").parse(input.source);
-    const payload = input.payload && typeof input.payload === "object" && !Array.isArray(input.payload)
-        ? input.payload
-        : {};
-    const sessionId = opaqueId(firstString(payload, ["session_id", "sessionId", "conversation_id"]));
-    const suppliedWorkflowId = firstString(payload, ["workflow_id", "workflowId"]);
-    const workflowId = suppliedWorkflowId && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(suppliedWorkflowId)
-        ? suppliedWorkflowId
-        : input.installationId && sessionId
-            ? deterministicWorkflowId({ installationId: input.installationId, source, sessionId })
-            : undefined;
-    const exitCode = number(payload, ["exit_code", "exitCode"]);
-    const durationMs = number(payload, ["duration_ms", "durationMs"]);
-    const repository = resolveApprovedRepository(firstString(payload, ["cwd", "workspace_path", "workspacePath"]));
-    return PaceEventSchema.parse({
-        schema_version: 3,
-        collection_policy_version: "metadata-v3",
-        event_id: randomUUID(),
-        installation_id: input.installationId,
-        workflow_id: workflowId,
-        initiative_id: opaqueId(firstString(payload, ["initiative_id", "initiativeId"])),
-        playbook_id: opaqueId(firstString(payload, ["playbook_id", "playbookId"])),
-        playbook_version: opaqueId(firstString(payload, ["playbook_version", "playbookVersion"])),
-        occurred_at: (input.now ?? new Date()).toISOString(),
-        source,
-        event_type: EVENT_TYPES[input.hookEvent] ?? "unknown.observed",
-        evidence_level: "exact",
-        session_id: sessionId,
-        repository_id: repository?.repository_id,
-        commit_sha: repository?.commit_sha,
-        model_family: modelFamily(firstString(payload, ["model", "model_name", "modelName"])),
-        tool_category: toolCategory(firstString(payload, ["tool_name", "toolName", "tool"])),
-        blocker_category: blockerCategory({ hookEvent: input.hookEvent, payload }),
-        attributes: {
-            client_event: CLIENT_EVENTS[input.hookEvent] ?? "unknown",
-            approval_mode: approvalMode(firstString(payload, ["approval_mode", "approvalMode"])),
-            permission_mode: permissionMode(firstString(payload, ["permission_mode", "permissionMode"])),
-            success: boolean(payload, ["success"]),
-            exit_code_bucket: exitCodeBucket(exitCode),
-            duration_bucket: durationBucket(durationMs),
-            input_tokens: number(payload, ["input_tokens", "inputTokens"]),
-            output_tokens: number(payload, ["output_tokens", "outputTokens"]),
-            cached_tokens: number(payload, ["cached_tokens", "cachedTokens"]),
-        },
-    });
-}
-export function migrateLegacyEvent(event) {
-    const attributes = event.attributes;
-    const hookEvent = attributes.hook_event;
-    const migrated = PaceEventSchema.parse({
-        schema_version: 3,
-        collection_policy_version: "metadata-v3",
-        event_id: event.event_id,
-        installation_id: event.installation_id,
-        occurred_at: event.occurred_at,
-        source: event.source,
-        event_type: event.event_type,
-        evidence_level: event.evidence_level,
-        session_id: opaqueId(event.session_id),
-        workflow_id: event.schema_version === 2 ? event.workflow_id : undefined,
-        initiative_id: event.schema_version === 2 ? opaqueId(event.initiative_id) : undefined,
-        playbook_id: event.schema_version === 2 ? opaqueId(event.playbook_id) : undefined,
-        playbook_version: event.schema_version === 2 ? opaqueId(event.playbook_version) : undefined,
-        model_family: modelFamily(event.model),
-        tool_category: toolCategory(event.tool ?? event.skill),
-        blocker_category: blockerCategory({
-            hookEvent,
-            payload: {
-                success: attributes.success,
-                error_type: attributes.error_type,
-                stop_reason: attributes.stop_reason,
-                status: attributes.status,
-            },
-        }),
-        artifact_type: event.artifact_type,
-        attributes: {
-            client_event: event.source === "local_filesystem"
-                ? "local_output"
-                : event.event_type === "desktop.activity"
-                    ? "local_activity"
-                    : CLIENT_EVENTS[hookEvent] ?? "unknown",
-            approval_mode: approvalMode(attributes.approval_mode),
-            permission_mode: permissionMode(attributes.permission_mode),
-            success: attributes.success,
-            exit_code_bucket: exitCodeBucket(attributes.exit_code),
-            duration_bucket: durationBucket(attributes.duration_ms),
-            input_tokens: attributes.input_tokens,
-            output_tokens: attributes.output_tokens,
-            cached_tokens: attributes.cached_tokens,
-            files_changed_bucket: filesChangedBucket(attributes.files_changed),
-            local_signal: attributes.local_signal,
-        },
-    });
-    return migrated;
-}
-function filesChangedBucket(value) {
-    if (value === undefined)
-        return undefined;
-    if (value <= 1)
-        return "one";
-    if (value <= 5)
-        return "two_to_five";
-    if (value <= 20)
-        return "six_to_twenty";
-    return "over_twenty";
-}
-//# sourceMappingURL=normalize.js.map
+import{randomUUID as b}from"node:crypto";import{PaceEventSchema as l,PaceSourceSchema as E}from"./schema.js";import{deterministicWorkflowId as T}from"./identity.js";import{resolveApprovedRepository as S}from"./repository.js";const I={SessionStart:"session.started",SessionEnd:"session.ended",BeforeAgent:"session.started",AfterAgent:"session.ended",Stop:"workflow.stopped",PostToolUse:"tool.completed",AfterTool:"tool.completed",PostToolUseFailure:"tool.failed",AfterModel:"model.completed",sessionStart:"session.started",sessionEnd:"session.ended",postToolUse:"tool.completed",postToolUseFailure:"tool.failed",stop:"workflow.stopped"},c={SessionStart:"session_start",SessionEnd:"session_end",BeforeAgent:"before_agent",AfterAgent:"after_agent",Stop:"stop",PostToolUse:"tool_success",AfterTool:"tool_success",PostToolUseFailure:"tool_failure",AfterModel:"model_complete",sessionStart:"session_start",sessionEnd:"session_end",postToolUse:"tool_success",postToolUseFailure:"tool_failure",stop:"stop"};function u(e){if(typeof e!="string")return;const o=e.trim();return o?o.slice(0,512):void 0}function n(e,o){for(const t of o){const r=u(e[t]);if(r)return r}}function s(e){const o=u(e);return o&&/^[A-Za-z0-9_-]{1,128}$/.test(o)?o:void 0}function i(e,o){for(const t of o){const r=e[t];if(typeof r=="number"&&Number.isFinite(r)&&r>=0)return r}}function x(e,o){for(const t of o)if(typeof e[t]=="boolean")return e[t]}function _(e){const o=e?.toLowerCase();if(o)return/gpt|o[1-9]|codex/.test(o)?"openai_gpt":/claude/.test(o)?"anthropic_claude":/gemini|gemma/.test(o)?"google_gemini":/llama/.test(o)?"meta_llama":/mistral|mixtral|codestral/.test(o)?"mistral":"other"}function f(e){const o=e?.toLowerCase();if(o)return/skill/.test(o)?"skill":/read|view|open_file/.test(o)?"file_read":/write|edit|patch|notebook/.test(o)?"file_write":/grep|glob|search|find/.test(o)?"code_search":/git|github|pull_request|commit/.test(o)?"version_control":/bash|shell|terminal|exec|command/.test(o)?"shell":/web|browser|fetch|http/.test(o)?"web":/mcp|connector|slack|notion|drive|linear/.test(o)?"connector":/agent|task|delegate/.test(o)?"agent":"other"}function p(e){if(!(["PostToolUseFailure","postToolUseFailure","Stop","stop"].includes(e.hookEvent)||e.payload.success===!1))return;const t=[n(e.payload,["error_type","errorType"]),n(e.payload,["stop_reason","stopReason"]),n(e.payload,["status"])].filter(Boolean).join(" ").toLowerCase();return/authenticat|login|credential|token expired/.test(t)?"authentication":/authoriz|permission|forbidden|denied|access/.test(t)?"authorization_permission":/approval|confirm|consent/.test(t)?"approval_required":/missing|not found|dependency|executable|command not found/.test(t)?"missing_dependency_tool":/config|setting|environment|invalid option/.test(t)?"configuration":/rate.?limit|quota|too many requests/.test(t)?"rate_limit_quota":/provider|model unavailable|overloaded|capacity/.test(t)?"model_provider_unavailable":e.hookEvent==="Stop"||e.hookEvent==="stop"?"workflow_stopped":(e.hookEvent==="PostToolUseFailure"||e.hookEvent==="postToolUseFailure")&&t?"tool_failure":"unknown"}function m(e){const o=e?.toLowerCase();if(o)return/none|never|disabled/.test(o)?"none":/manual|ask|confirm|prompt/.test(o)?"manual":/auto|always|pre.?approved/.test(o)?"automatic":"unknown"}function k(e){const o=e?.toLowerCase();if(o)return/read.?only|readonly/.test(o)?"read_only":/workspace|project.?write|write/.test(o)?"workspace_write":/elevated|escalat|admin|sudo/.test(o)?"elevated":/unrestricted|danger|full.?access/.test(o)?"unrestricted":"unknown"}function y(e){if(e!==void 0)return e<1e3?"under_1s":e<1e4?"1s_to_10s":e<6e4?"10s_to_60s":e<3e5?"1m_to_5m":"over_5m"}function v(e){if(e!==void 0)return e===0?"success":e>=128?"signal":"failure"}function L(e){const o=E.catch("unknown").parse(e.source),t=e.payload&&typeof e.payload=="object"&&!Array.isArray(e.payload)?e.payload:{},r=s(n(t,["session_id","sessionId","conversation_id"])),a=n(t,["workflow_id","workflowId"]),w=a&&/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(a)?a:e.installationId&&r?T({installationId:e.installationId,source:o,sessionId:r}):void 0,h=i(t,["exit_code","exitCode"]),g=i(t,["duration_ms","durationMs"]),d=S(n(t,["cwd","workspace_path","workspacePath"]));return l.parse({schema_version:3,collection_policy_version:"metadata-v3",event_id:b(),installation_id:e.installationId,workflow_id:w,initiative_id:s(n(t,["initiative_id","initiativeId"])),playbook_id:s(n(t,["playbook_id","playbookId"])),playbook_version:s(n(t,["playbook_version","playbookVersion"])),occurred_at:(e.now??new Date).toISOString(),source:o,event_type:I[e.hookEvent]??"unknown.observed",evidence_level:"exact",session_id:r,repository_id:d?.repository_id,commit_sha:d?.commit_sha,model_family:_(n(t,["model","model_name","modelName"])),tool_category:f(n(t,["tool_name","toolName","tool"])),blocker_category:p({hookEvent:e.hookEvent,payload:t}),attributes:{client_event:c[e.hookEvent]??"unknown",approval_mode:m(n(t,["approval_mode","approvalMode"])),permission_mode:k(n(t,["permission_mode","permissionMode"])),success:x(t,["success"]),exit_code_bucket:v(h),duration_bucket:y(g),input_tokens:i(t,["input_tokens","inputTokens"]),output_tokens:i(t,["output_tokens","outputTokens"]),cached_tokens:i(t,["cached_tokens","cachedTokens"])}})}function q(e){const o=e.attributes,t=o.hook_event;return l.parse({schema_version:3,collection_policy_version:"metadata-v3",event_id:e.event_id,installation_id:e.installation_id,occurred_at:e.occurred_at,source:e.source,event_type:e.event_type,evidence_level:e.evidence_level,session_id:s(e.session_id),workflow_id:e.schema_version===2?e.workflow_id:void 0,initiative_id:e.schema_version===2?s(e.initiative_id):void 0,playbook_id:e.schema_version===2?s(e.playbook_id):void 0,playbook_version:e.schema_version===2?s(e.playbook_version):void 0,model_family:_(e.model),tool_category:f(e.tool??e.skill),blocker_category:p({hookEvent:t,payload:{success:o.success,error_type:o.error_type,stop_reason:o.stop_reason,status:o.status}}),artifact_type:e.artifact_type,attributes:{client_event:e.source==="local_filesystem"?"local_output":e.event_type==="desktop.activity"?"local_activity":c[t]??"unknown",approval_mode:m(o.approval_mode),permission_mode:k(o.permission_mode),success:o.success,exit_code_bucket:v(o.exit_code),duration_bucket:y(o.duration_ms),input_tokens:o.input_tokens,output_tokens:o.output_tokens,cached_tokens:o.cached_tokens,files_changed_bucket:A(o.files_changed),local_signal:o.local_signal}})}function A(e){if(e!==void 0)return e<=1?"one":e<=5?"two_to_five":e<=20?"six_to_twenty":"over_twenty"}export{q as migrateLegacyEvent,L as normalizeHookEvent};

package/dist/pace/repository.d.ts

@@ -69,4 +69,3 @@ export declare function resolveApprovedRepository(cwd: string | undefined): {
     commit_sha: string;
 } | undefined;
 export {};
-//# sourceMappingURL=repository.d.ts.map

package/dist/pace/repository.js

@@ -1,120 +1,2 @@
-import { createHash } from "node:crypto";
-import { execFileSync } from "node:child_process";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { z } from "zod";
-const policySchema = z.object({
-    version: z.literal(1),
-    mappings: z.array(z.object({
-        remote_fingerprint: z.string().regex(/^[a-f0-9]{64}$/),
-        repository_id: z.string().uuid(),
-    }).strict()).max(500),
-    /** Skills and playbooks the organization has published. Only these, plus published plugin skills, are reported by name. */
-    skills: z.array(z.string().regex(/^[a-z0-9][a-z0-9:_.-]{0,119}$/)).max(2000).optional(),
-}).strict();
-export function repositoryPolicyPath() {
-    return process.env.UNFAIRLY_PACE_REPOSITORY_POLICY ?? path.join(os.homedir(), ".unfairly", "pace", "repository-policy.json");
-}
-/**
- * `git@github.com:Org/Repo.git`, `https://github.com/org/repo` and
- * `ssh://git@github.com/Org/Repo.git` all canonicalize to `github.com/org/repo`.
- * The server fingerprints GitHub repositories the same way (src/lib/ai-pace/github.ts).
- */
-export function canonicalRemote(remote) {
-    const match = /^(?:[a-z+]+:\/\/)?(?:[^@/\s]+@)?([^/:\s]+)(?::\d+)?[:/](.+?)(?:\.git)?\/?$/i.exec(remote.trim());
-    return match ? `${match[1].toLowerCase()}/${match[2].toLowerCase()}` : null;
-}
-export function repositoryRemoteFingerprint(remote) {
-    return createHash("sha256").update(canonicalRemote(remote) ?? remote.trim().toLowerCase()).digest("hex");
-}
-function git(cwd, args) {
-    try {
-        return execFileSync("git", ["-C", cwd, ...args], {
-            encoding: "utf8",
-            stdio: ["ignore", "pipe", "ignore"],
-            timeout: 750,
-        }).trim() || undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-export function parseRepositoryPolicy(value) {
-    return policySchema.parse(value);
-}
-export function readRepositoryPolicy() {
-    return readPolicy();
-}
-function readPolicy() {
-    try {
-        return policySchema.parse(JSON.parse(fs.readFileSync(repositoryPolicyPath(), "utf8")));
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * The checkout to inspect for a session: its working directory, or, when that
- * worktree has since been removed, the nearest surviving ancestor directory.
- */
-export function surviving(cwd) {
-    let current = cwd ? path.resolve(cwd) : undefined;
-    while (current && !fs.existsSync(current)) {
-        const parent = path.dirname(current);
-        if (parent === current)
-            return undefined;
-        current = parent;
-    }
-    return current && git(current, ["rev-parse", "--is-inside-work-tree"]) === "true" ? current : undefined;
-}
-/** The approved repository a working directory belongs to, or undefined when it is not approved. */
-export function approvedRepositoryId(cwd, policy = readPolicy()) {
-    const checkout = surviving(cwd);
-    if (!checkout || !policy?.mappings.length)
-        return undefined;
-    const remote = git(checkout, ["config", "--get", "remote.origin.url"]);
-    if (!remote)
-        return undefined;
-    return policy.mappings.find((candidate) => candidate.remote_fingerprint === repositoryRemoteFingerprint(remote))?.repository_id;
-}
-/**
- * Commits the session's author made during the session window on the session's
- * line of history: its branch when that ref still exists (local or origin),
- * otherwise the surviving checkout's HEAD. Only full SHAs leave the machine;
- * the branch name is used locally and never uploaded.
- */
-export function sessionCommitShas(cwd, window) {
-    const checkout = surviving(cwd);
-    if (!checkout)
-        return [];
-    const author = git(checkout, ["config", "--get", "user.email"]);
-    if (!author)
-        return [];
-    const worktreeAlive = path.resolve(cwd) === checkout;
-    let ref = worktreeAlive ? "HEAD" : undefined;
-    if (window.branch && /^[\w./-]{1,200}$/.test(window.branch) && !window.branch.startsWith("-")) {
-        for (const candidate of [`refs/heads/${window.branch}`, `refs/remotes/origin/${window.branch}`]) {
-            if (git(checkout, ["rev-parse", "--verify", "--quiet", candidate])) {
-                ref = candidate;
-                break;
-            }
-        }
-    }
-    if (!ref)
-        return [];
-    const until = new Date(Date.parse(window.endedAt) + 5 * 60_000).toISOString();
-    const output = git(checkout, ["log", ref, "--fixed-strings", `--author=${author}`, `--since=${window.startedAt}`, `--until=${until}`, "--format=%H", "-n", "50"]);
-    return (output ?? "").split("\n").filter((sha) => /^[a-f0-9]{40}$/i.test(sha));
-}
-export function resolveApprovedRepository(cwd) {
-    const repositoryId = approvedRepositoryId(cwd);
-    if (!cwd || !repositoryId)
-        return undefined;
-    const mapping = { repository_id: repositoryId };
-    const commit = git(cwd, ["rev-parse", "HEAD"]);
-    if (!commit || !/^[a-f0-9]{40}$/i.test(commit))
-        return undefined;
-    return { repository_id: mapping.repository_id, commit_sha: commit };
-}
-//# sourceMappingURL=repository.js.map
+import{createHash as g}from"node:crypto";import{execFileSync as y}from"node:child_process";import p from"node:fs";import h from"node:os";import a from"node:path";import{z as n}from"zod";const f=n.object({version:n.literal(1),mappings:n.array(n.object({remote_fingerprint:n.string().regex(/^[a-f0-9]{64}$/),repository_id:n.string().uuid()}).strict()).max(500),skills:n.array(n.string().regex(/^[a-z0-9][a-z0-9:_.-]{0,119}$/)).max(2e3).optional()}).strict();function x(){return process.env.UNFAIRLY_PACE_REPOSITORY_POLICY??a.join(h.homedir(),".unfairly","pace","repository-policy.json")}function v(r){const e=/^(?:[a-z+]+:\/\/)?(?:[^@/\s]+@)?([^/:\s]+)(?::\d+)?[:/](.+?)(?:\.git)?\/?$/i.exec(r.trim());return e?`${e[1].toLowerCase()}/${e[2].toLowerCase()}`:null}function _(r){return g("sha256").update(v(r)??r.trim().toLowerCase()).digest("hex")}function o(r,e){try{return y("git",["-C",r,...e],{encoding:"utf8",stdio:["ignore","pipe","ignore"],timeout:750}).trim()||void 0}catch{return}}function I(r){return f.parse(r)}function L(){return d()}function d(){try{return f.parse(JSON.parse(p.readFileSync(x(),"utf8")))}catch{return}}function m(r){let e=r?a.resolve(r):void 0;for(;e&&!p.existsSync(e);){const t=a.dirname(e);if(t===e)return;e=t}return e&&o(e,["rev-parse","--is-inside-work-tree"])==="true"?e:void 0}function $(r,e=d()){const t=m(r);if(!t||!e?.mappings.length)return;const i=o(t,["config","--get","remote.origin.url"]);if(i)return e.mappings.find(c=>c.remote_fingerprint===_(i))?.repository_id}function O(r,e){const t=m(r);if(!t)return[];const i=o(t,["config","--get","user.email"]);if(!i)return[];let u=a.resolve(r)===t?"HEAD":void 0;if(e.branch&&/^[\w./-]{1,200}$/.test(e.branch)&&!e.branch.startsWith("-")){for(const s of[`refs/heads/${e.branch}`,`refs/remotes/origin/${e.branch}`])if(o(t,["rev-parse","--verify","--quiet",s])){u=s;break}}if(!u)return[];const l=new Date(Date.parse(e.endedAt)+5*6e4).toISOString();return(o(t,["log",u,"--fixed-strings",`--author=${i}`,`--since=${e.startedAt}`,`--until=${l}`,"--format=%H","-n","50"])??"").split(`
+`).filter(s=>/^[a-f0-9]{40}$/i.test(s))}function j(r){const e=$(r);if(!r||!e)return;const t={repository_id:e},i=o(r,["rev-parse","HEAD"]);if(!(!i||!/^[a-f0-9]{40}$/i.test(i)))return{repository_id:t.repository_id,commit_sha:i}}export{$ as approvedRepositoryId,v as canonicalRemote,I as parseRepositoryPolicy,L as readRepositoryPolicy,x as repositoryPolicyPath,_ as repositoryRemoteFingerprint,j as resolveApprovedRepository,O as sessionCommitShas,m as surviving};

package/dist/pace/schema.d.ts

@@ -1322,4 +1322,3 @@ export declare const PaceBatchSchema: z.ZodObject<{
     }[];
 }>;
 export type PaceBatch = z.infer<typeof PaceBatchSchema>;
-//# sourceMappingURL=schema.d.ts.map

package/dist/pace/schema.js

@@ -1,134 +1 @@
-import { z } from "zod";
-export const PaceSourceSchema = z.enum([
-    "codex", "claude_code", "cursor", "gemini_cli", "openrouter", "chatgpt",
-    "claude_desktop", "claude_web", "gemini_web", "local_filesystem", "unknown",
-]);
-export const PaceEventTypeSchema = z.enum([
-    "session.started", "session.ended", "model.completed", "tool.completed",
-    "tool.failed", "workflow.stopped", "artifact.created", "artifact.modified",
-    "desktop.activity", "unknown.observed",
-]);
-export const PaceEvidenceLevelSchema = z.enum(["exact", "correlated", "inferred"]);
-export const PaceToolCategorySchema = z.enum([
-    "file_read", "file_write", "code_search", "shell", "version_control",
-    "web", "connector", "agent", "skill", "other", "unknown",
-]);
-export const PaceBlockerCategorySchema = z.enum([
-    "authentication", "authorization_permission", "approval_required",
-    "missing_dependency_tool", "configuration", "rate_limit_quota", "tool_failure",
-    "model_provider_unavailable", "workflow_stopped", "unknown",
-]);
-export const PaceModelFamilySchema = z.enum([
-    "openai_gpt", "anthropic_claude", "google_gemini", "meta_llama",
-    "mistral", "other", "unknown",
-]);
-export const PaceApprovalModeSchema = z.enum(["none", "manual", "automatic", "unknown"]);
-export const PacePermissionModeSchema = z.enum([
-    "read_only", "workspace_write", "elevated", "unrestricted", "unknown",
-]);
-export const PaceDurationBucketSchema = z.enum([
-    "under_1s", "1s_to_10s", "10s_to_60s", "1m_to_5m", "over_5m", "unknown",
-]);
-export const PaceExitCodeBucketSchema = z.enum(["success", "failure", "signal", "unknown"]);
-const OptionalOpaqueId = z.string().trim().regex(/^[A-Za-z0-9_-]{1,128}$/).optional();
-// Legacy schemas exist only so an old local spool can be sanitized in place.
-// New collection and network upload use v3 exclusively.
-const LegacyAttributesSchema = z.object({
-    hook_event: z.string().max(128),
-    approval_mode: z.string().max(128).optional(),
-    permission_mode: z.string().max(128).optional(),
-    status: z.string().max(128).optional(),
-    success: z.boolean().optional(),
-    exit_code: z.number().int().optional(),
-    duration_ms: z.number().nonnegative().optional(),
-    input_tokens: z.number().int().nonnegative().optional(),
-    output_tokens: z.number().int().nonnegative().optional(),
-    cached_tokens: z.number().int().nonnegative().optional(),
-    error_type: z.string().max(128).optional(),
-    stop_reason: z.string().max(128).optional(),
-    root_label: z.string().max(128).optional(),
-    path_fingerprint: z.string().regex(/^[a-f0-9]{64}$/).optional(),
-    file_extension: z.string().max(32).optional(),
-    file_name: z.string().max(255).optional(),
-    size_bytes: z.number().int().nonnegative().optional(),
-    files_changed: z.number().int().nonnegative().optional(),
-    local_signal: z.enum(["approved_output", "app_state_change"]).optional(),
-    source_app: z.enum(["chatgpt", "claude_desktop", "other"]).optional(),
-}).strict();
-const LegacyEventBaseSchema = z.object({
-    event_id: z.string().uuid(),
-    installation_id: z.string().uuid().optional(),
-    occurred_at: z.string().datetime(),
-    source: PaceSourceSchema,
-    event_type: PaceEventTypeSchema,
-    evidence_level: PaceEvidenceLevelSchema,
-    session_id: z.string().trim().min(1).max(512).optional(),
-    model: z.string().trim().min(1).max(512).optional(),
-    tool: z.string().trim().min(1).max(512).optional(),
-    skill: z.string().trim().min(1).max(512).optional(),
-    cwd: z.string().trim().min(1).max(512).optional(),
-    repository: z.string().trim().min(1).max(512).optional(),
-    branch: z.string().trim().min(1).max(512).optional(),
-    commit_sha: z.string().regex(/^[a-f0-9]{7,64}$/i).optional(),
-    artifact_type: z.enum([
-        "code", "pull_request", "document", "deck", "spreadsheet", "analysis",
-        "workflow", "decision", "other",
-    ]).optional(),
-    attributes: LegacyAttributesSchema,
-});
-export const PaceEventV1Schema = LegacyEventBaseSchema.extend({ schema_version: z.literal(1) }).strict();
-export const PaceEventV2Schema = LegacyEventBaseSchema.extend({
-    schema_version: z.literal(2),
-    workflow_id: z.string().uuid().optional(),
-    initiative_id: z.string().trim().min(1).max(512).optional(),
-    playbook_id: z.string().trim().min(1).max(512).optional(),
-    playbook_version: z.string().trim().min(1).max(512).optional(),
-}).strict();
-export const PaceEventV3Schema = z.object({
-    schema_version: z.literal(3),
-    collection_policy_version: z.literal("metadata-v3"),
-    event_id: z.string().uuid(),
-    installation_id: z.string().uuid().optional(),
-    occurred_at: z.string().datetime(),
-    source: PaceSourceSchema,
-    event_type: PaceEventTypeSchema,
-    evidence_level: PaceEvidenceLevelSchema,
-    session_id: OptionalOpaqueId,
-    workflow_id: z.string().uuid().optional(),
-    initiative_id: OptionalOpaqueId,
-    playbook_id: OptionalOpaqueId,
-    playbook_version: OptionalOpaqueId,
-    repository_id: z.string().uuid().optional(),
-    commit_sha: z.string().regex(/^[a-f0-9]{40}$/i).optional(),
-    model_family: PaceModelFamilySchema.optional(),
-    tool_category: PaceToolCategorySchema.optional(),
-    blocker_category: PaceBlockerCategorySchema.optional(),
-    artifact_type: z.enum([
-        "code", "pull_request", "document", "deck", "spreadsheet", "analysis",
-        "workflow", "decision", "other",
-    ]).optional(),
-    attributes: z.object({
-        client_event: z.enum([
-            "session_start", "session_end", "before_agent", "after_agent", "stop",
-            "tool_success", "tool_failure", "model_complete", "local_output", "local_activity", "unknown",
-        ]),
-        approval_mode: PaceApprovalModeSchema.optional(),
-        permission_mode: PacePermissionModeSchema.optional(),
-        success: z.boolean().optional(),
-        exit_code_bucket: PaceExitCodeBucketSchema.optional(),
-        duration_bucket: PaceDurationBucketSchema.optional(),
-        input_tokens: z.number().int().nonnegative().optional(),
-        output_tokens: z.number().int().nonnegative().optional(),
-        cached_tokens: z.number().int().nonnegative().optional(),
-        files_changed_bucket: z.enum(["one", "two_to_five", "six_to_twenty", "over_twenty", "unknown"]).optional(),
-        local_signal: z.enum(["approved_output", "app_state_change"]).optional(),
-    }).strict(),
-}).strict().superRefine((event, context) => {
-    if (event.commit_sha && !event.repository_id) {
-        context.addIssue({ code: z.ZodIssueCode.custom, path: ["commit_sha"], message: "commit_sha requires an approved repository_id" });
-    }
-});
-export const PaceLegacyEventSchema = z.discriminatedUnion("schema_version", [PaceEventV1Schema, PaceEventV2Schema]);
-export const PaceEventSchema = PaceEventV3Schema;
-export const PaceBatchSchema = z.object({ events: z.array(PaceEventV3Schema).min(1).max(250) }).strict();
-//# sourceMappingURL=schema.js.map
+import{z as e}from"zod";const n=e.enum(["codex","claude_code","cursor","gemini_cli","openrouter","chatgpt","claude_desktop","claude_web","gemini_web","local_filesystem","unknown"]),i=e.enum(["session.started","session.ended","model.completed","tool.completed","tool.failed","workflow.stopped","artifact.created","artifact.modified","desktop.activity","unknown.observed"]),a=e.enum(["exact","correlated","inferred"]),l=e.enum(["file_read","file_write","code_search","shell","version_control","web","connector","agent","skill","other","unknown"]),m=e.enum(["authentication","authorization_permission","approval_required","missing_dependency_tool","configuration","rate_limit_quota","tool_failure","model_provider_unavailable","workflow_stopped","unknown"]),p=e.enum(["openai_gpt","anthropic_claude","google_gemini","meta_llama","mistral","other","unknown"]),_=e.enum(["none","manual","automatic","unknown"]),u=e.enum(["read_only","workspace_write","elevated","unrestricted","unknown"]),d=e.enum(["under_1s","1s_to_10s","10s_to_60s","1m_to_5m","over_5m","unknown"]),g=e.enum(["success","failure","signal","unknown"]),o=e.string().trim().regex(/^[A-Za-z0-9_-]{1,128}$/).optional(),v=e.object({hook_event:e.string().max(128),approval_mode:e.string().max(128).optional(),permission_mode:e.string().max(128).optional(),status:e.string().max(128).optional(),success:e.boolean().optional(),exit_code:e.number().int().optional(),duration_ms:e.number().nonnegative().optional(),input_tokens:e.number().int().nonnegative().optional(),output_tokens:e.number().int().nonnegative().optional(),cached_tokens:e.number().int().nonnegative().optional(),error_type:e.string().max(128).optional(),stop_reason:e.string().max(128).optional(),root_label:e.string().max(128).optional(),path_fingerprint:e.string().regex(/^[a-f0-9]{64}$/).optional(),file_extension:e.string().max(32).optional(),file_name:e.string().max(255).optional(),size_bytes:e.number().int().nonnegative().optional(),files_changed:e.number().int().nonnegative().optional(),local_signal:e.enum(["approved_output","app_state_change"]).optional(),source_app:e.enum(["chatgpt","claude_desktop","other"]).optional()}).strict(),r=e.object({event_id:e.string().uuid(),installation_id:e.string().uuid().optional(),occurred_at:e.string().datetime(),source:n,event_type:i,evidence_level:a,session_id:e.string().trim().min(1).max(512).optional(),model:e.string().trim().min(1).max(512).optional(),tool:e.string().trim().min(1).max(512).optional(),skill:e.string().trim().min(1).max(512).optional(),cwd:e.string().trim().min(1).max(512).optional(),repository:e.string().trim().min(1).max(512).optional(),branch:e.string().trim().min(1).max(512).optional(),commit_sha:e.string().regex(/^[a-f0-9]{7,64}$/i).optional(),artifact_type:e.enum(["code","pull_request","document","deck","spreadsheet","analysis","workflow","decision","other"]).optional(),attributes:v}),h=r.extend({schema_version:e.literal(1)}).strict(),x=r.extend({schema_version:e.literal(2),workflow_id:e.string().uuid().optional(),initiative_id:e.string().trim().min(1).max(512).optional(),playbook_id:e.string().trim().min(1).max(512).optional(),playbook_version:e.string().trim().min(1).max(512).optional()}).strict(),s=e.object({schema_version:e.literal(3),collection_policy_version:e.literal("metadata-v3"),event_id:e.string().uuid(),installation_id:e.string().uuid().optional(),occurred_at:e.string().datetime(),source:n,event_type:i,evidence_level:a,session_id:o,workflow_id:e.string().uuid().optional(),initiative_id:o,playbook_id:o,playbook_version:o,repository_id:e.string().uuid().optional(),commit_sha:e.string().regex(/^[a-f0-9]{40}$/i).optional(),model_family:p.optional(),tool_category:l.optional(),blocker_category:m.optional(),artifact_type:e.enum(["code","pull_request","document","deck","spreadsheet","analysis","workflow","decision","other"]).optional(),attributes:e.object({client_event:e.enum(["session_start","session_end","before_agent","after_agent","stop","tool_success","tool_failure","model_complete","local_output","local_activity","unknown"]),approval_mode:_.optional(),permission_mode:u.optional(),success:e.boolean().optional(),exit_code_bucket:g.optional(),duration_bucket:d.optional(),input_tokens:e.number().int().nonnegative().optional(),output_tokens:e.number().int().nonnegative().optional(),cached_tokens:e.number().int().nonnegative().optional(),files_changed_bucket:e.enum(["one","two_to_five","six_to_twenty","over_twenty","unknown"]).optional(),local_signal:e.enum(["approved_output","app_state_change"]).optional()}).strict()}).strict().superRefine((t,c)=>{t.commit_sha&&!t.repository_id&&c.addIssue({code:e.ZodIssueCode.custom,path:["commit_sha"],message:"commit_sha requires an approved repository_id"})}),b=e.discriminatedUnion("schema_version",[h,x]),f=s,y=e.object({events:e.array(s).min(1).max(250)}).strict();export{_ as PaceApprovalModeSchema,y as PaceBatchSchema,m as PaceBlockerCategorySchema,d as PaceDurationBucketSchema,f as PaceEventSchema,i as PaceEventTypeSchema,h as PaceEventV1Schema,x as PaceEventV2Schema,s as PaceEventV3Schema,a as PaceEvidenceLevelSchema,g as PaceExitCodeBucketSchema,b as PaceLegacyEventSchema,p as PaceModelFamilySchema,u as PacePermissionModeSchema,n as PaceSourceSchema,l as PaceToolCategorySchema};

package/dist/pace/session-summary.d.ts

@@ -176,4 +176,3 @@ export declare function sweepLocalSessions(input: {
     queued: number;
 }>;
 export {};
-//# sourceMappingURL=session-summary.d.ts.map