waterplane 0.0.1 → 0.1.6

package/packages/host/dist/ctxlog.js

@@ -0,0 +1,57 @@
+/**
+ * How full the context window has been — asked of the CLI's own log, which is
+ * DATED.
+ *
+ * `context.ts` reads a percentage off the terminal. That is the right thing for
+ * a badge and it is the wrong thing for a graph, for the same reason
+ * `limitlog.ts` exists: a screen carries no clock. The scraped meter is one
+ * number, overwritten in place, with no record of what it was ten minutes ago
+ * and nothing at all to say about the moment it dropped from 4% to 96%. A
+ * series accumulated from it host-side would start empty on every restart, hold
+ * only what one daemon lifetime saw, and — because the indicator is not always
+ * on screen — be full of holes it could not describe.
+ *
+ * The CLI already writes every one of these facts down, timestamped, in the
+ * conversation jsonl:
+ *
+ *  - every assistant turn carries `message.usage`, and
+ *    `input_tokens + cache_read_input_tokens + cache_creation_input_tokens` is
+ *    what that request actually sent — the context the model saw. Output is
+ *    excluded on purpose: it is not context until the turn after.
+ *  - a compaction writes `{"type":"system","subtype":"compact_boundary",
+ *    "compactMetadata":{"trigger":"auto"|"manual","preTokens":…,"postTokens":…}}`
+ *    — which is both WHEN the drop happened and how far it fell.
+ *  - a usage-limit rejection writes the `quotaLimits` row `limitlog.ts` already
+ *    reads, so the walls land on the same time axis at no extra cost.
+ *
+ * Read-only and best-effort, like `transcript.ts`: an unparseable line is
+ * skipped, and a missing file yields null. Every log is read WHOLE, forward in
+ * `MAX_READ` chunks — a tail read printed a total that started in the middle
+ * as if it were complete. `truncated` now means only that the chart's raw
+ * samples passed `RAW_CAP`.
+ *
+ * **What the session SPENT is a second question, and it is answered here too.**
+ * The series is the input side of THIS conversation — the right number for "what
+ * does the next turn re-read" and the wrong one for "what has this cost me". So
+ * `usageTok` adds each turn's output, and `agentUsage()` reads the Task tool's
+ * own logs beside it (`<conversation>/subagents/agent-*.jsonl`), which is where
+ * a fan-out session's tokens actually went: a 30k window over eight agents is
+ * millions. Both are FLOORS and both are absent rather than approximate.
+ *
+ * **The window SIZE is not in the log.** Nothing here guesses it. `totalTok` is
+ * whatever the TUI was seen to print and null otherwise, and the separate
+ * `autoCompactTok` is a measurement — the tokens an auto-compact was last
+ * observed to fire at — never relabelled as a window.
+ *
+ * The code is cut by subject into `ctxlog/` (this file is the barrel every
+ * importer keeps using): `ctxcursor.ts` (the cursor and its accumulators),
+ * `ctxupdate.ts` (the incremental pass), `ctxproject.ts` (the wire document and
+ * the row miniature) and `ctxagents.ts` (what the subagents spent).
+ */
+// The cap and `downsample` are shared with every store reader a plugin
+// contributes (`shared/transcriptfold.ts`); re-exported so callers here are unchanged.
+export { MAX_SAMPLES, downsample } from "@waterplane/shared";
+export { updateContextLog } from "./ctxlog/ctxupdate.js";
+export { SPARK_MARKS, SPARK_POINTS, projectContextLog, readContextLog, sparkOf } from "./ctxlog/ctxproject.js";
+export { agentCumOf, agentEnvelope, agentSpendAt, agentUsage, liveAgentOf, thinMax, withAgentRuns } from "./ctxlog/ctxagents.js";
+//# sourceMappingURL=ctxlog.js.map

package/packages/host/dist/ctxlog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ctxlog.js","sourceRoot":"","sources":["../src/ctxlog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,uEAAuE;AACvE,uFAAuF;AACvF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAE/G,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC"}

package/packages/host/dist/ctxwindow.d.ts

@@ -0,0 +1,17 @@
+export declare class ContextWindowStore {
+    private path;
+    private marks;
+    private timer;
+    constructor(root: string);
+    /** The high-water mark for a model, or null when nothing has been seen. */
+    get(model: string | null | undefined): number | null;
+    /**
+     * Offer an observation. Returns true when it MOVED the mark, so a caller can
+     * treat that as "the axis for this model just changed" — the one moment a
+     * chart's scale is allowed to shift under a reader.
+     */
+    note(model: string | null | undefined, tok: number): boolean;
+    private schedule;
+    /** Write now. Called on the debounce and on SIGTERM, beside the other flushes. */
+    flush(): void;
+}

package/packages/host/dist/ctxwindow.js

@@ -0,0 +1,106 @@
+/**
+ * The most context each model has ever been seen to hold, on this host.
+ *
+ * ── Why a measurement, and why it is persisted ──────────────────────────────
+ *
+ * `shared/ctxwindow.ts` has the argument in full: the CLI's conversation log
+ * records the model but not the window, and it records the BASE id even for a
+ * 1M conversation (`claude-opus-5` measured at 998,242 tokens here), so the id
+ * alone cannot answer "what is 100% on this chart". What can answer it is the
+ * conversation itself — a session that held 346k tokens was not in a 200k
+ * window — and `ctxlog.ts` already computes exactly that number on every turn.
+ *
+ * Persisting it is what makes the answer useful rather than merely correct in
+ * hindsight. A high-water mark learned from Monday's long session is what tells
+ * Tuesday's fresh one, at 40k, that it is 4% full and not 20%. Keyed by model
+ * rather than by session for the same reason: it is a fact about the model.
+ *
+ * ── What it will not do ─────────────────────────────────────────────────────
+ *
+ * Shrink. The mark only ever rises, because the evidence only ever accumulates:
+ * "no conversation has exceeded 200k lately" is not evidence of a 200k window,
+ * and letting a quiet week walk the axis back down would silently rescale every
+ * historical graph. It is also never used raw — `windowContaining` snaps it to
+ * a real window — so one long conversation cannot make the axis 346k.
+ *
+ * Small, boring, and best-effort in the same sense as the other stores here: a
+ * corrupt file yields an empty map and a failed write is dropped, because an
+ * axis label is not worth taking the daemon down for. Writes are DEBOUNCED —
+ * the mark is offered on every turn of every session and almost never moves.
+ */
+import { existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { isClaudeModel } from "@waterplane/shared";
+import { hostStateDir } from "./branddirs.js";
+import { readJsonGuarded, writeJsonAtomic } from "./jsonstore.js";
+/** How long a change waits before it reaches disk. */
+const FLUSH_MS = 3_000;
+/** Models remembered. Far more than anyone runs; the cap exists so a garbled
+ *  model field cannot grow the file without bound. */
+const MAX_MODELS = 64;
+export class ContextWindowStore {
+    path;
+    marks = new Map();
+    timer = null;
+    constructor(root) {
+        const dir = hostStateDir(root);
+        mkdirSync(dir, { recursive: true });
+        this.path = join(dir, "ctxwindow.json");
+        try {
+            if (existsSync(this.path)) {
+                const raw = readJsonGuarded(this.path, null);
+                for (const [k, v] of Object.entries(raw ?? {})) {
+                    if (isClaudeModel(k) && typeof v === "number" && Number.isFinite(v) && v > 0) {
+                        this.marks.set(k.toLowerCase(), Math.round(v));
+                    }
+                }
+            }
+        }
+        catch { /* corrupt or unreadable → no marks, never throw on boot */ }
+    }
+    /** The high-water mark for a model, or null when nothing has been seen. */
+    get(model) {
+        if (!model)
+            return null;
+        return this.marks.get(model.trim().toLowerCase()) ?? null;
+    }
+    /**
+     * Offer an observation. Returns true when it MOVED the mark, so a caller can
+     * treat that as "the axis for this model just changed" — the one moment a
+     * chart's scale is allowed to shift under a reader.
+     */
+    note(model, tok) {
+        if (!isClaudeModel(model) || !Number.isFinite(tok) || tok <= 0)
+            return false;
+        const key = model.trim().toLowerCase();
+        if ((this.marks.get(key) ?? 0) >= tok)
+            return false;
+        this.marks.set(key, Math.round(tok));
+        if (this.marks.size > MAX_MODELS) {
+            // Drop the smallest marks: the big ones are the ones that carry a window
+            // the id rule would have got wrong, which is the whole point of the file.
+            const keep = [...this.marks.entries()].sort((a, b) => b[1] - a[1]).slice(0, MAX_MODELS);
+            this.marks = new Map(keep);
+        }
+        this.schedule();
+        return true;
+    }
+    schedule() {
+        if (this.timer)
+            return;
+        this.timer = setTimeout(() => { this.timer = null; this.flush(); }, FLUSH_MS);
+        this.timer.unref?.();
+    }
+    /** Write now. Called on the debounce and on SIGTERM, beside the other flushes. */
+    flush() {
+        if (this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+        try {
+            writeJsonAtomic(this.path, Object.fromEntries(this.marks), { space: 2 });
+        }
+        catch { /* an axis label is not worth taking the daemon down for */ }
+    }
+}
+//# sourceMappingURL=ctxwindow.js.map

package/packages/host/dist/ctxwindow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ctxwindow.js","sourceRoot":"","sources":["../src/ctxwindow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAElE,sDAAsD;AACtD,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB;sDACsD;AACtD,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,MAAM,OAAO,kBAAkB;IACrB,IAAI,CAAS;IACb,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClC,KAAK,GAA0B,IAAI,CAAC;IAE5C,YAAY,IAAY;QACtB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,eAAe,CAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAA4B,CAAC;gBAC7E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC/C,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;IACzE,CAAC;IAED,2EAA2E;IAC3E,GAAG,CAAC,KAAgC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;IAC5D,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,KAAgC,EAAE,GAAW;QAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7E,MAAM,GAAG,GAAG,KAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,UAAU,EAAE,CAAC;YACjC,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACxF,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,kFAAkF;IAClF,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QAChE,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;IACzE,CAAC;CACF"}

package/packages/host/dist/decisionlog.d.ts

@@ -0,0 +1,29 @@
+import type { DecisionLogEntry } from "@waterplane/shared";
+/**
+ * Fold `.waterplane/oracle-log.json` into `rows` and rename it `.migrated`. Returns
+ * the merged rows (newest first, capped) or null when there was nothing to do.
+ * An unreadable old file is left where it is and said so, never deleted.
+ */
+export declare function migrateOracleLog(stateDir: string, rows: DecisionLogEntry[]): DecisionLogEntry[] | null;
+export declare class DecisionLog {
+    private readonly onChange;
+    private path;
+    private entries;
+    /** `onChange` runs after every add/archive/delete — the host broadcasts `decisions.log`. */
+    constructor(root: string, onChange?: () => void);
+    /** Append an entry (newest kept at index 0) and persist. */
+    add(e: DecisionLogEntry): void;
+    /**
+     * Entries newest-first, filtered to `sessionId` when given. Archived entries
+     * are kept on disk but excluded unless `includeArchived`.
+     */
+    list(sessionId?: string, includeArchived?: boolean): DecisionLogEntry[];
+    /** Archive (hide) or un-archive one entry. Returns true if it existed. */
+    setArchived(id: string, archived: boolean): boolean;
+    /** Permanently delete one entry. Returns true if it existed. */
+    remove(id: string): boolean;
+    /** Archive every currently-visible (non-archived) entry. Returns the count. */
+    archiveAll(): number;
+    private persist;
+    private write;
+}

package/packages/host/dist/decisionlog.js

@@ -0,0 +1,167 @@
+/**
+ * The decision log: every automatic thing done or proposed on a session's
+ * behalf — a usage-limit auto-continue (`source: "limit"`) or a plugin's
+ * suggestion/answer (`source: "plugin"`). Newest-first, ring-buffered to
+ * LOG_LIMIT, on disk at `<STATE_DIR>/decision-log.json`.
+ *
+ * It was the Gemini oracle's log (`.waterplane/oracle-log.json`). On first boot that
+ * file is migrated in — oracle rows become `source: "plugin", plugin: "oracle"`,
+ * limit rows `source: "limit"` — and renamed `oracle-log.json.migrated`, never
+ * deleted: a conversion nobody can check is one nobody can trust.
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync } from "node:fs";
+import { join } from "node:path";
+import { logTag } from "@waterplane/shared";
+import { hostStateDir } from "./branddirs.js";
+import { readJsonGuarded, writeJsonAtomic } from "./jsonstore.js";
+const LOG_LIMIT = 500;
+/** One row of the retired oracle log, as it may sit on disk. */
+function fromOracleRow(r) {
+    if (!r || typeof r !== "object" || typeof r.id !== "string" || typeof r.ts !== "number")
+        return null;
+    const limit = r.kind === "limit";
+    const e = {
+        id: r.id, ts: r.ts, sessionId: String(r.sessionId ?? ""), sessionTitle: String(r.sessionTitle ?? ""),
+        source: limit ? "limit" : "plugin",
+        ...(limit ? {} : { plugin: "oracle" }),
+        ...(r.phase ? { phase: r.phase } : {}),
+        question: String(r.question ?? ""),
+        options: Array.isArray(r.options) ? r.options : [],
+        outcome: String(r.outcome ?? (limit ? "limit" : "")),
+        choice: typeof r.choice === "number" ? r.choice : null,
+        rationale: String(r.rationale ?? ""),
+    };
+    if (r.answer)
+        e.answer = String(r.answer);
+    if (!limit) {
+        if (typeof r.confidence === "number")
+            e.confidence = r.confidence;
+        if (r.model)
+            e.model = String(r.model);
+        if (r.contextSent)
+            e.contextSent = String(r.contextSent);
+        if (typeof r.images === "number")
+            e.images = r.images;
+        if (typeof r.inTok === "number")
+            e.inTok = r.inTok;
+        if (typeof r.outTok === "number")
+            e.outTok = r.outTok;
+    }
+    if (r.error)
+        e.error = String(r.error);
+    if (r.archived)
+        e.archived = true;
+    return e;
+}
+/**
+ * Fold `.waterplane/oracle-log.json` into `rows` and rename it `.migrated`. Returns
+ * the merged rows (newest first, capped) or null when there was nothing to do.
+ * An unreadable old file is left where it is and said so, never deleted.
+ */
+export function migrateOracleLog(stateDir, rows) {
+    const old = join(stateDir, "oracle-log.json");
+    if (!existsSync(old))
+        return null;
+    let parsed;
+    // The legacy file is left in place, never moved aside: a plain parse, not readJsonGuarded.
+    try {
+        parsed = JSON.parse(readFileSync(old, "utf8"));
+    }
+    catch {
+        console.warn(`${logTag} ${old} is not readable JSON — left in place, not migrated`);
+        return null;
+    }
+    const have = new Set(rows.map((r) => r.id));
+    const add = (Array.isArray(parsed) ? parsed : []).map(fromOracleRow).filter((e) => !!e && !have.has(e.id));
+    const merged = [...rows, ...add].sort((a, b) => b.ts - a.ts).slice(0, LOG_LIMIT);
+    try {
+        renameSync(old, old + ".migrated");
+    }
+    catch { /* the next boot tries again; ids dedupe */ }
+    console.log(`${logTag} decision log: migrated ${add.length} row${add.length === 1 ? "" : "s"} from oracle-log.json`);
+    return merged;
+}
+export class DecisionLog {
+    onChange;
+    path;
+    entries = [];
+    /** `onChange` runs after every add/archive/delete — the host broadcasts `decisions.log`. */
+    constructor(root, onChange = () => { }) {
+        this.onChange = onChange;
+        const dir = hostStateDir(root);
+        this.path = join(dir, "decision-log.json");
+        try {
+            if (existsSync(this.path))
+                this.entries = readJsonGuarded(this.path, this.entries, Array.isArray);
+        }
+        catch { /* fresh */ }
+        const merged = migrateOracleLog(dir, this.entries);
+        if (merged) {
+            this.entries = merged;
+            this.write();
+        }
+    }
+    /** Append an entry (newest kept at index 0) and persist. */
+    add(e) {
+        this.entries.unshift(e);
+        if (this.entries.length > LOG_LIMIT)
+            this.entries.length = LOG_LIMIT;
+        this.persist();
+    }
+    /**
+     * Entries newest-first, filtered to `sessionId` when given. Archived entries
+     * are kept on disk but excluded unless `includeArchived`.
+     */
+    list(sessionId, includeArchived = false) {
+        return this.entries
+            .filter((e) => (sessionId ? e.sessionId === sessionId : true))
+            .filter((e) => (includeArchived ? true : !e.archived))
+            .slice()
+            .sort((a, b) => b.ts - a.ts);
+    }
+    /** Archive (hide) or un-archive one entry. Returns true if it existed. */
+    setArchived(id, archived) {
+        const e = this.entries.find((x) => x.id === id);
+        if (!e)
+            return false;
+        e.archived = archived;
+        this.persist();
+        return true;
+    }
+    /** Permanently delete one entry. Returns true if it existed. */
+    remove(id) {
+        const before = this.entries.length;
+        this.entries = this.entries.filter((e) => e.id !== id);
+        if (this.entries.length === before)
+            return false;
+        this.persist();
+        return true;
+    }
+    /** Archive every currently-visible (non-archived) entry. Returns the count. */
+    archiveAll() {
+        let n = 0;
+        for (const e of this.entries)
+            if (!e.archived) {
+                e.archived = true;
+                n++;
+            }
+        if (n)
+            this.persist();
+        return n;
+    }
+    persist() {
+        this.write();
+        try {
+            this.onChange();
+        }
+        catch { /* a listener never breaks the log */ }
+    }
+    write() {
+        try {
+            mkdirSync(join(this.path, ".."), { recursive: true });
+            writeJsonAtomic(this.path, this.entries);
+        }
+        catch { /* non-fatal */ }
+    }
+}
+//# sourceMappingURL=decisionlog.js.map

package/packages/host/dist/decisionlog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionlog.js","sourceRoot":"","sources":["../src/decisionlog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,gEAAgE;AAChE,SAAS,aAAa,CAAC,CAAM;IAC3B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrG,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;IACjC,MAAM,CAAC,GAAqB;QAC1B,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC;QACpG,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;QAClC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACtC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAClD,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACtD,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;KACrC,CAAC;IACF,IAAI,CAAC,CAAC,MAAM;QAAE,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;YAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QAClE,IAAI,CAAC,CAAC,KAAK;YAAE,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,WAAW;YAAE,CAAC,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACtD,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QACnD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,CAAC,KAAK;QAAE,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,QAAQ;QAAE,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,IAAwB;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,MAAe,CAAC;IACpB,2FAA2F;IAC3F,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,GAAG,qDAAqD,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClI,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACjF,IAAI,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;IACjG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,2BAA2B,GAAG,CAAC,MAAM,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,uBAAuB,CAAC,CAAC;IACrH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,WAAW;IAKqB;IAJnC,IAAI,CAAS;IACb,OAAO,GAAuB,EAAE,CAAC;IAEzC,4FAA4F;IAC5F,YAAY,IAAY,EAAmB,WAAuB,GAAG,EAAE,GAAE,CAAC;QAA/B,aAAQ,GAAR,QAAQ,CAAuB;QACxE,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,OAAO,GAAG,eAAe,CAAqB,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxH,CAAC;QAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IACtD,CAAC;IAED,4DAA4D;IAC5D,GAAG,CAAC,CAAmB;QACrB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;QACrE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,SAAkB,EAAE,eAAe,GAAG,KAAK;QAC9C,OAAO,IAAI,CAAC,OAAO;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;aACrD,KAAK,EAAE;aACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,0EAA0E;IAC1E,WAAW,CAAC,EAAU,EAAE,QAAiB;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gEAAgE;IAChE,MAAM,CAAC,EAAU;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IAC/E,UAAU;QACR,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,CAAC,EAAE,CAAC;YAAC,CAAC;QAC1E,IAAI,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;IAC1E,CAAC;IAEO,KAAK;QACX,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/packages/host/dist/deliver/deliverknobs.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Every timing constant of the one delivery implementation (`deliver.ts`, cut
+ * into `deliver/` as a MOVE — docs/notes/host-architecture.md, "The deliver
+ * slices"). Values and their reasons exactly as they stood in `deliver.ts`.
+ */
+/**
+ * How long to keep re-reading the screen for the typed text before calling it
+ * `"unconfirmed"`. Generous on purpose: the cost of waiting is seconds, the
+ * cost of giving up early is a prompt reported as not delivered (and never
+ * auto-retried) that is actually sitting in the composer.
+ */
+export declare const ECHO_WAIT_MS = 4000;
+/**
+ * How long an echo found only by the no-box rule waits for the composer to
+ * draw it in a frame before it is believed (`deliverscreen.ts`'s
+ * `waitForEcho`). The bare read is the CLI between frames as often as it is a
+ * redraw this host no longer recognises; 2.1.304 drew the frame 400 ms on.
+ */
+export declare const FALLBACK_HOLD_MS = 1000;
+/**
+ * How long the submitted-prompt hook is given to arrive after a Return.
+ *
+ * Longer than it usually needs (the pipe answers in milliseconds) because what
+ * it buys is the difference between `ok` and a verdict a person is asked to act
+ * on by hand, and it is only ever spent on a delivery that has already failed
+ * every cheaper proof. Measured on the live host: a first hook landed 677 ms
+ * into a loop of this shape, and a loaded desktop is slower than that.
+ */
+export declare const PROMPT_HOOK_WAIT_MS = 2500;
+/**
+ * How long one `sources.delivery.landed` subscription stays open.
+ *
+ * Not a wait — nothing here sleeps on it. It is armed ONCE, at the first
+ * Return, and has to outlive the longest submit ladder below (five presses of
+ * six 150 ms polls is 4.5 s) so a landing the hooked loop is polling for can
+ * still arrive; past it the source answers false and the flag simply stays
+ * down.
+ */
+export declare const SOURCE_LANDED_MS = 6000;
+/** How long a send waits for a side channel that is still CONNECTING (a fresh
+ *  opencode session: its server starting, the conversation being opened) before
+ *  it is held with the sentence. A channel that was up and dropped holds at once. */
+export declare const CHANNEL_CONNECT_WAIT_MS = 30000;
+/**
+ * How long a local command's Return is given to show its effect, and how many
+ * presses it gets at all.
+ *
+ * 10 polls (1.5 s) was too few: a view that had genuinely opened had not drawn
+ * yet, so the press was judged swallowed and repeated into the open view, which
+ * dismissed it. 33 polls is ~5 s — longer than this TUI has ever taken to paint
+ * one — and two presses rather than three, because a third has never rescued
+ * anything the second did not and every extra press is another chance to close
+ * what the last one opened.
+ */
+export declare const LOCAL_MOVE_POLLS = 33;
+export declare const LOCAL_SUBMIT_TRIES = 2;
+/** The submit budget for a command that announces nothing (`/compact`): the
+ *  screen-inferred turn is published a window after the CLI starts painting,
+ *  so 3 s per press, and two presses rather than five. */
+export declare const UNANNOUNCED_POLLS = 20;
+export declare const UNANNOUNCED_TRIES = 2;
+/**
+ * How long to give the CLI's own conversation log to prove the prompt ran,
+ * before answering an unconfirmable verdict.
+ *
+ * The echo window is a guess about a TUI that repaints on its own schedule, and
+ * it is wrong often enough that a phone ended up displaying 67 rows reading
+ * "typed into that session but never seen to run" — several of them prompts
+ * that were, at that moment, visibly running. The screen is a rendering; the
+ * conversation log is the CLI's own record of what it accepted, and it outranks
+ * anything scraped off a terminal.
+ *
+ * 2.5 s, polled: the record is written when the prompt is ACCEPTED, so in the
+ * ordinary case it is already on disk when this starts and the check costs one
+ * read. The budget is for a log file that appears a moment late or a write not
+ * yet flushed — the disorderly cases where one blind read is indistinguishable
+ * from "no log at all", which is exactly the mistake that would file a running
+ * prompt as a gravestone. It is spent only on a delivery that has ALREADY lost
+ * its four-second echo window, i.e. one that was about to be reported as a
+ * failure, so it lengthens nothing that was working.
+ */
+export declare const LOG_PROOF_MS = 2500;
+/** The `sleep` `runDelivery` declared as its first local. */
+export { sleep } from "../proc.js";

package/packages/host/dist/deliver/deliverknobs.js

@@ -0,0 +1,85 @@
+/**
+ * Every timing constant of the one delivery implementation (`deliver.ts`, cut
+ * into `deliver/` as a MOVE — docs/notes/host-architecture.md, "The deliver
+ * slices"). Values and their reasons exactly as they stood in `deliver.ts`.
+ */
+/**
+ * How long to keep re-reading the screen for the typed text before calling it
+ * `"unconfirmed"`. Generous on purpose: the cost of waiting is seconds, the
+ * cost of giving up early is a prompt reported as not delivered (and never
+ * auto-retried) that is actually sitting in the composer.
+ */
+export const ECHO_WAIT_MS = 4000;
+/**
+ * How long an echo found only by the no-box rule waits for the composer to
+ * draw it in a frame before it is believed (`deliverscreen.ts`'s
+ * `waitForEcho`). The bare read is the CLI between frames as often as it is a
+ * redraw this host no longer recognises; 2.1.304 drew the frame 400 ms on.
+ */
+export const FALLBACK_HOLD_MS = 1000;
+/**
+ * How long the submitted-prompt hook is given to arrive after a Return.
+ *
+ * Longer than it usually needs (the pipe answers in milliseconds) because what
+ * it buys is the difference between `ok` and a verdict a person is asked to act
+ * on by hand, and it is only ever spent on a delivery that has already failed
+ * every cheaper proof. Measured on the live host: a first hook landed 677 ms
+ * into a loop of this shape, and a loaded desktop is slower than that.
+ */
+export const PROMPT_HOOK_WAIT_MS = 2500;
+/**
+ * How long one `sources.delivery.landed` subscription stays open.
+ *
+ * Not a wait — nothing here sleeps on it. It is armed ONCE, at the first
+ * Return, and has to outlive the longest submit ladder below (five presses of
+ * six 150 ms polls is 4.5 s) so a landing the hooked loop is polling for can
+ * still arrive; past it the source answers false and the flag simply stays
+ * down.
+ */
+export const SOURCE_LANDED_MS = 6000;
+/** How long a send waits for a side channel that is still CONNECTING (a fresh
+ *  opencode session: its server starting, the conversation being opened) before
+ *  it is held with the sentence. A channel that was up and dropped holds at once. */
+export const CHANNEL_CONNECT_WAIT_MS = 30_000;
+/**
+ * How long a local command's Return is given to show its effect, and how many
+ * presses it gets at all.
+ *
+ * 10 polls (1.5 s) was too few: a view that had genuinely opened had not drawn
+ * yet, so the press was judged swallowed and repeated into the open view, which
+ * dismissed it. 33 polls is ~5 s — longer than this TUI has ever taken to paint
+ * one — and two presses rather than three, because a third has never rescued
+ * anything the second did not and every extra press is another chance to close
+ * what the last one opened.
+ */
+export const LOCAL_MOVE_POLLS = 33;
+export const LOCAL_SUBMIT_TRIES = 2;
+/** The submit budget for a command that announces nothing (`/compact`): the
+ *  screen-inferred turn is published a window after the CLI starts painting,
+ *  so 3 s per press, and two presses rather than five. */
+export const UNANNOUNCED_POLLS = 20;
+export const UNANNOUNCED_TRIES = 2;
+/**
+ * How long to give the CLI's own conversation log to prove the prompt ran,
+ * before answering an unconfirmable verdict.
+ *
+ * The echo window is a guess about a TUI that repaints on its own schedule, and
+ * it is wrong often enough that a phone ended up displaying 67 rows reading
+ * "typed into that session but never seen to run" — several of them prompts
+ * that were, at that moment, visibly running. The screen is a rendering; the
+ * conversation log is the CLI's own record of what it accepted, and it outranks
+ * anything scraped off a terminal.
+ *
+ * 2.5 s, polled: the record is written when the prompt is ACCEPTED, so in the
+ * ordinary case it is already on disk when this starts and the check costs one
+ * read. The budget is for a log file that appears a moment late or a write not
+ * yet flushed — the disorderly cases where one blind read is indistinguishable
+ * from "no log at all", which is exactly the mistake that would file a running
+ * prompt as a gravestone. It is spent only on a delivery that has ALREADY lost
+ * its four-second echo window, i.e. one that was about to be reported as a
+ * failure, so it lengthens nothing that was working.
+ */
+export const LOG_PROOF_MS = 2500;
+/** The `sleep` `runDelivery` declared as its first local. */
+export { sleep } from "../proc.js";
+//# sourceMappingURL=deliverknobs.js.map

package/packages/host/dist/deliver/deliverknobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliverknobs.js","sourceRoot":"","sources":["../../src/deliver/deliverknobs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC;;qFAEqF;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAC9C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC;;0DAE0D;AAC1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AAEjC,6DAA6D;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC"}

package/packages/host/dist/deliver/deliverproof.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The evidence that is not a rendering — the CLI's log and the CLI naming the
+ * words it took — moved out of `deliver.ts`'s `runDelivery`
+ * (docs/notes/host-architecture.md, "The deliver slices").
+ */
+import type { SessionManager } from "../sessions.js";
+export declare function makeLogProof(sessions: SessionManager, sessionId: string, text: string, startedAt: number, key: string): () => Promise<boolean>;
+/**
+ * The hook / side-channel proof. Its mutable state stays these closure `let`s;
+ * the run reads it through the getters, at the moment it always did, and the
+ * re-read after the channel hold is `refreshSource()`.
+ */
+export declare function makeSubmitProof(sessions: SessionManager, sessionId: string, text: string, startedAt: number): {
+    readonly submitProven: boolean;
+    readonly sourceLanded: boolean;
+    readonly deliverySrc: {
+        src: import("@waterplane/shared").DeliverySource;
+        session: import("@waterplane/shared").SourceSession;
+    } | null;
+    refreshSource: () => void;
+    armSourceProof: () => void;
+    submitProof: () => boolean;
+    proofKind: () => "prompt-hook" | "source";
+    submitProofWithin: (ms: number) => Promise<boolean>;
+};