worktrust 0.8.4 → 0.8.5

package/README.md

@@ -170,6 +170,7 @@ nothing it does not:
 | `oversight`, `planning`, `changes` | how often you refused an action or a plan the agent proposed, and how often a guard (the client's safety layer) refused one; how often the agent wrote its to-do list, the most items, and of the last list how many were done (never what they say); how many files the stretch's commits changed and how many of them tests (never a path) (0.8.1) |
 | `supplements` | a supplement line: when a newer CLI measures more of a stretch already archived, the new fields go into a line of their own that names that stretch; nothing earlier is rewritten, and the chain and the day's root cover it (0.8.2) |
 | `evidence` (sent) | the same derived record now also travels with each stretch to WorkTrust, kinds and counts only, and `npx worktrust status` shows what this computer measured in the last thirty days (0.8.3) |
+| `unconfirmed` | checks the stretch ran whose outcome no reader could see (Codex's code mode prints no exit code; a background terminal), per kind: counted, never as a pass (0.8.5) |
 | `collector_version` | the CLI version that measured it |
 | `seq`, `prev`, `hash` | the line's place, the hash of the line before it, and its own hash |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "worktrust",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Couple this computer to WorkTrust: approve a code in your browser, and every AI app here reports what you built. Metadata only, no dependencies.",
   "type": "module",
   "bin": {

package/preserve-lines.mjs

@@ -54,6 +54,11 @@ export function archiveLine(entry, behaviour = null, { ids = {}, collector } = {
     const kept = Object.entries(entry.verification).filter(([kind, tally]) => CHECK_KINDS.includes(kind) && Array.isArray(tally) && tally.length === 2 && tally.every(whole) && tally[1] <= tally[0] && tally[0] > 0).sort();
     if (kept.length > 0) line.verification = Object.fromEntries(kept);
   }
+  // UNCONFIRMED (0.8.5): checks run whose outcome no reader could see, per kind, whole counts.
+  if (entry.unconfirmed && typeof entry.unconfirmed === "object") {
+    const kept = Object.entries(entry.unconfirmed).filter(([kind, count]) => CHECK_KINDS.includes(kind) && whole(count) && count > 0).sort();
+    if (kept.length > 0) line.unconfirmed = Object.fromEntries(kept);
+  }
   if (entry.delivery && typeof entry.delivery === "object") {
     const kept = Object.entries(entry.delivery).filter(([kind, count]) => DELIVERY_KINDS.includes(kind) && whole(count) && count > 0).sort();
     if (kept.length > 0) line.delivery = { ...Object.fromEntries(kept), verified_first: entry.delivery.verified_first === true };
@@ -138,7 +143,7 @@ export function archiveEntries(dir, ownKey) {
  * a line of their own that names the stretch it adds to (`supplements`) and carries only what no earlier line of that
  * stretch carries, in the same chain, under the same day's root. Null when there is nothing new.
  */
-export const DERIVED_KEYS = ["signals", "analyzer_version", "verification", "delivery", "recovery", "delegation", "context", "routing", "steering", "tools", "complexity", "oversight", "planning", "changes", "interrupts", "steers", "utc_offset"];
+export const DERIVED_KEYS = ["signals", "analyzer_version", "verification", "unconfirmed", "delivery", "recovery", "delegation", "context", "routing", "steering", "tools", "complexity", "oversight", "planning", "changes", "interrupts", "steers", "utc_offset"];
 export function supplementFor(line, earlier) {
   const missing = DERIVED_KEYS.filter((key) => line[key] !== undefined && !earlier.some((old) => old[key] !== undefined));
   if (missing.length === 0) return null;

package/session-databases.mjs

@@ -12,7 +12,7 @@ import { readFileSync, readdirSync, statSync } from "node:fs";
 import * as zlib from "node:zlib"; // zstd since Node 22.15; older Node reads OpenClaw's uncompressed rows only
 import { homedir, platform } from "node:os";
 import { join } from "node:path";
-import { cleanModel } from "./transcript-readers.mjs";
+import { cleanModel, cursorCall, copilotCall } from "./transcript-readers.mjs";
 
 // ── hermes session reader ──
 /**
@@ -344,18 +344,34 @@ export function cursorLines(pseudo) {
     const chat = db.prepare("select json_extract(value, '$.modelConfig.modelName') as model from cursorDiskKV where key = ?").get(`composerData:${id}`);
     const bubbles = db.prepare(`select json_extract(value, '$.type') as type, json_extract(value, '$.createdAt') as at,
         json_extract(value, '$.tokenCount.inputTokens') as input, json_extract(value, '$.tokenCount.outputTokens') as output,
-        json_extract(value, '$.toolFormerData') is not null as tool
+        json_extract(value, '$.toolFormerData') is not null as tool,
+        json_extract(value, '$.toolFormerData.name') as toolName, json_extract(value, '$.toolFormerData.toolCallId') as callId,
+        json_extract(value, '$.toolFormerData.status') as status, json_extract(value, '$.toolFormerData.userDecision') as decision,
+        json_extract(value, '$.toolFormerData.additionalData.status') as outcome,
+        json_extract(json_extract(value, '$.toolFormerData.params'), '$.command') as command,
+        json_extract(json_extract(value, '$.toolFormerData.result'), '$.exitCode') as exitCode,
+        json_extract(json_extract(value, '$.toolFormerData.result'), '$.rejected') as rejected,
+        json_extract(json_extract(value, '$.toolFormerData.result'), '$.backgroundShellId') is not null as background,
+        json_type(json_extract(value, '$.toolFormerData.result'), '$.output') = 'text' as hasOutput,
+        (select json_group_array(json_extract(todo.value, '$.status')) from json_each(json_extract(cursorDiskKV.value, '$.toolFormerData.result'), '$.finalTodos') as todo) as todoStatuses
       from cursorDiskKV where key > ? and key < ? and json_extract(value, '$.createdAt') is not null`).all(`bubbleId:${id}:`, `bubbleId:${id};`);
     const model = cleanModel(chat?.model);
     const lines = [];
+    let pending = null;
     for (const bubble of bubbles.sort((a, b) => String(a.at).localeCompare(String(b.at)))) {
       const timestamp = isoOf(bubble.at); if (!timestamp) continue;
+      if (pending) { lines.push({ ...pending, timestamp }); pending = null; }
       if (Number(bubble.type) === 1) lines.push({ type: "user", timestamp, message: { content: [{ type: "text" }] } });
       else if (Number(bubble.type) === 2) {
         const usage = Number(bubble.input) || Number(bubble.output) ? { usage: { input_tokens: Number(bubble.input) || 0, output_tokens: Number(bubble.output) || 0 } } : {};
-        lines.push({ type: "assistant", timestamp, message: { model, ...usage, content: bubble.tool ? [{ type: "tool_use", name: "tool", input: {} }] : [] } });
+        const call = bubble.tool ? cursorCall(bubble) : null;
+        lines.push({ type: "assistant", timestamp, message: { model, ...usage, content: call ? [call.use] : [] } });
+        // THE CALL'S RESULT (0.8.5) lands at the NEXT bubble's moment: the gap after a call stays tool time and no gap is
+        // added, so the stretch's seconds and layers are exactly as before; a call that ends the session closes on its own moment.
+        if (call) pending = { type: "user", timestamp, message: { content: [call.result] } };
       }
     }
+    if (pending) lines.push(pending);
     return lines;
   } catch { return null; } finally { db.close(); }
 }
@@ -421,6 +437,13 @@ export function copilotLines(pseudo) {
     const meta = request?.result?.metadata ?? {};
     const usage = Number(meta.promptTokens) || Number(meta.outputTokens) ? { usage: { input_tokens: Number(meta.promptTokens) || 0, output_tokens: Number(meta.outputTokens) || 0 } } : {};
     // `agentic` (owner, 2026-10-06): the request's own run, asked → completed, is the agent's time; the hook files that gap as tool time, uncapped.
+    // THE REQUEST'S TOOL CALLS (0.8.5), all at the moment it was asked: no gap is added, so its seconds and layers are as before.
+    for (const part of Array.isArray(request?.response) ? request.response : []) {
+      const call = part && part.kind === "toolInvocationSerialized" ? copilotCall(part) : null;
+      if (!call) continue;
+      lines.push({ type: "assistant", timestamp: new Date(asked).toISOString(), message: { content: [call.use] } });
+      lines.push({ type: "user", timestamp: new Date(asked).toISOString(), message: { content: [call.result] } });
+    }
     lines.push({ type: "assistant", timestamp: new Date(done).toISOString(), agentic: true, message: { model: cleanModel(String(meta.resolvedModel ?? request?.modelId ?? "").replace(/^copilot\//, "")), ...usage, content: [] } });
   }
   return lines;

package/stretch-evidence.mjs

@@ -42,6 +42,8 @@ const GUARD_REFUSED = /^\s*Permission for this (command|action) was denied by/i;
 export const resultOf = (block) => {
   const text = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((part) => (part && typeof part.text === "string" ? part.text : "")).join("") : "";
   const failed = block.is_error === true;
+  // 0.8.5: a reader that could not see the outcome (Codex's code mode, a background terminal) says so; unknown is never a pass.
+  if (!failed && block.outcome === "unknown") return { id: block.tool_use_id, failed: null, refusal: null };
   return { id: block.tool_use_id, failed, refusal: failed && PERSON_REFUSED.test(text) ? "person" : failed && GUARD_REFUSED.test(text) ? "guard" : null };
 };
 /** A to-do list the agent wrote (TodoWrite): how many items and how many done, never what they say. */
@@ -58,17 +60,20 @@ export const callOf = (block) => { const kinds = callKindsOf(block), plan = plan
 function verificationOf(messages, helpers) {
   const kinds = new Map();
   for (const message of messages) for (const call of message.calls ?? []) kinds.set(call.id, call.kinds);
-  const checks = {}, delivered = {};
+  const checks = {}, delivered = {}, unconfirmed = {};
   let deliveredAt = null, passedFirst = false;
   for (const message of messages) for (const result of message.results ?? []) {
     for (const kind of kinds.get(result.id) ?? []) {
+      // A check whose outcome nobody could see is counted as run and unconfirmed, apart from the known tallies (0.8.5).
+      if (CHECK_KINDS.includes(kind) && result.failed === null) { unconfirmed[kind] = (unconfirmed[kind] ?? 0) + 1; continue; }
+      if (DELIVERY_KINDS.includes(kind) && result.failed === null) continue;
       if (CHECK_KINDS.includes(kind)) { const tally = (checks[kind] ??= [0, 0]); tally[0] += 1; if (result.failed) tally[1] += 1; else if (deliveredAt === null) passedFirst = true; }
       else if (DELIVERY_KINDS.includes(kind) && !result.failed) { delivered[kind] = (delivered[kind] ?? 0) + 1; if (deliveredAt === null) deliveredAt = message.at; }
     }
   }
   const any = (record) => Object.keys(record).length > 0;
   const recovery = recoveryOf(messages), delegation = delegationOf(messages, helpers);
-  return { ...(any(checks) ? { verification: checks } : {}), ...(any(delivered) ? { delivery: { ...delivered, verified_first: passedFirst } } : {}), ...(recovery ? { recovery } : {}), ...(delegation ? { delegation } : {}) };
+  return { ...(any(checks) ? { verification: checks } : {}), ...(any(unconfirmed) ? { unconfirmed } : {}), ...(any(delivered) ? { delivery: { ...delivered, verified_first: passedFirst } } : {}), ...(recovery ? { recovery } : {}), ...(delegation ? { delegation } : {}) };
 }
 
 /**

package/transcript-readers.mjs

@@ -43,7 +43,7 @@ export const CODEX_ROLLOUT = /(^|[\\/])rollout-\d{4}-\d{2}-\d{2}T[\d-]+-[0-9a-f-
 /** A rollout's thread id: its file's name without .jsonl, split on either separator. */
 export const codexIdOf = (file) => String(file).split(/[\\/]/).at(-1).replace(/\.jsonl$/, "");
 export const CODEX_HARNESS_TURN = /^\s*<[a-z][a-z_]*[\s>]/i;
-export const codexToolName = (name) => (name === "exec" || name === "shell" || name === "container.exec" || name === "local_shell" ? "Bash" : name === "apply_patch" ? "Edit" : name === "spawn_agent" ? "Agent" : String(name ?? "tool"));
+export const codexToolName = (name) => (name === "exec" || name === "shell" || name === "container.exec" || name === "local_shell" ? "Bash" : name === "apply_patch" ? "Edit" : name === "spawn_agent" || name === "followup_task" ? "Agent" : name === "request_user_input" || name === "request_user_input_async" ? "AskUserQuestion" : String(name ?? "tool"));
 export const codexToolInput = (name, raw) => {
   const mapped = codexToolName(name);
   if (mapped === "Bash") {
@@ -91,7 +91,7 @@ export function* codexLines(records) {
     if (kind === "custom_tool_call_output" || kind === "function_call_output") {
       const text = codexOutputText(payload.output);
       const exit = /(?:failed with|exited with|exit code)[:\s]+(-?\d+)/i.exec(text.slice(-400));
-      yield { type: "user", timestamp, cwd, uuid: payload.id ? `codex-${payload.id}` : undefined, message: { content: [{ type: "tool_result", ...(payload.call_id ? { tool_use_id: String(payload.call_id) } : {}), content: text, is_error: exit ? exit[1] !== "0" : false }] } };
+      yield { type: "user", timestamp, cwd, uuid: payload.id ? `codex-${payload.id}` : undefined, message: { content: [{ type: "tool_result", ...(payload.call_id ? { tool_use_id: String(payload.call_id) } : {}), content: text, is_error: exit ? exit[1] !== "0" : false, ...(exit ? {} : { outcome: "unknown" }) }] } }; // 0.8.5: no exit code (Codex code mode never prints one) is an unknown outcome, never a pass
     }
   }
 }
@@ -220,3 +220,44 @@ export function rememberAntigravity(input) {
   return id;
 }
 // ── end antigravity transcript reader ──
+
+// ── the database clients' tool calls (0.8.5), read by session-databases.mjs ──
+/**
+ * A CURSOR TOOL CALL AS THE STRETCH READS IT (0.8.5): its name mapped to the common one (a terminal command is Bash,
+ * its to-do list is TodoWrite), the command for the CLI to name a KIND of (never kept), the to-do statuses (never their
+ * text), and the outcome Cursor recorded: an exit code only when the command failed, an error status, or the person's
+ * rejection; a background command, or a call with no outcome, is unknown, never a pass.
+ */
+const CURSOR_NAMES = { run_terminal_command_v2: "Bash", run_terminal_cmd: "Bash", todo_write: "TodoWrite", edit_file_v2: "Edit", edit_file: "Edit", read_file_v2: "Read", read_file: "Read", ripgrep_raw_search: "Grep", glob_file_search: "Glob", delete_file: "Edit" };
+const json = (text) => { if (typeof text !== "string") return null; try { return JSON.parse(text); } catch { return null; } };
+export function cursorCall(bubble) {
+  const id = typeof bubble.callId === "string" && bubble.callId ? bubble.callId : null;
+  if (!id) return null;
+  const raw = String(bubble.toolName ?? "tool"), name = CURSOR_NAMES[raw] ?? raw;
+  const todos = json(bubble.todoStatuses);
+  const input = name === "Bash" ? { command: typeof bubble.command === "string" ? bubble.command : "" } : name === "TodoWrite" && Array.isArray(todos) && todos.length > 0 ? { todos: todos.map((status) => ({ status: status === "completed" ? "completed" : "pending" })) } : {};
+  const rejected = Number(bubble.rejected) === 1 || bubble.rejected === true || bubble.decision === "rejected";
+  const exit = bubble.exitCode === null || bubble.exitCode === undefined ? null : Number(bubble.exitCode);
+  const failed = rejected || (exit !== null && exit !== 0) || bubble.outcome === "error" || bubble.status === "error";
+  const known = failed || (name === "Bash" ? Number(bubble.hasOutput) === 1 && Number(bubble.background) !== 1 : bubble.status === "completed" || bubble.outcome === "success");
+  return {
+    use: { type: "tool_use", id, name, input },
+    result: { type: "tool_result", tool_use_id: id, is_error: failed, ...(known ? {} : { outcome: "unknown" }), content: rejected ? "User rejected the tool call." : "" },
+  };
+}
+/**
+ * A COPILOT TOOL CALL AS THE STRETCH READS IT (0.8.5): a terminal command is Bash (its command line for the CLI to name
+ * a kind of, never kept) with the exit code VS Code recorded; a missing exit code is unknown. Its to-do list is TodoWrite
+ * (statuses only), its subagents are Agent. What a confirmation type means is not documented, so no refusal is read.
+ */
+const COPILOT_NAMES = { run_in_terminal: "Bash", manage_todo_list: "TodoWrite", execution_subagent: "Agent", runSubagent: "Agent", copilot_replaceString: "Edit", copilot_createFile: "Write", copilot_readFile: "Read", copilot_findTextInFiles: "Grep", copilot_findFiles: "Glob" };
+export function copilotCall(part) {
+  const id = typeof part.toolCallId === "string" && part.toolCallId ? part.toolCallId : null;
+  if (!id) return null;
+  const raw = String(part.toolId ?? "tool"), name = COPILOT_NAMES[raw] ?? raw, data = part.toolSpecificData ?? {};
+  const line = data.commandLine && typeof data.commandLine === "object" ? data.commandLine.toolEdited ?? data.commandLine.original : null;
+  const input = name === "Bash" ? { command: typeof line === "string" ? line : "" } : name === "TodoWrite" && Array.isArray(data.todoList) ? { todos: data.todoList.map((todo) => ({ status: todo?.status === "completed" ? "completed" : "pending" })) } : {};
+  const exit = Number.isInteger(data.terminalCommandState?.exitCode) ? data.terminalCommandState.exitCode : null;
+  const known = name === "Bash" ? exit !== null : false;
+  return { use: { type: "tool_use", id, name, input }, result: { type: "tool_result", tool_use_id: id, is_error: exit !== null && exit !== 0, ...(known ? {} : { outcome: "unknown" }), content: "" } };
+}

package/worktrust.mjs

@@ -73,7 +73,7 @@ const command = args.find((arg, at) => !arg.startsWith("--") && !(at > 0 && VALU
 const flag = (name) => { const at = args.indexOf(`--${name}`); return at >= 0 ? args[at + 1] : undefined; };
 const has = (name) => args.includes(`--${name}`);
 /** This CLI's version, said to the door so the app can tell which computer runs an old one (check-cli-package holds it equal to package.json). */
-const CLI_VERSION = "0.8.4";
+const CLI_VERSION = "0.8.5";
 const ORIGIN = (flag("origin") ?? process.env.WORKTRUST_ORIGIN ?? "https://app.worktrust.io").replace(/\/$/, "");
 const MCP = flag("url") ?? process.env.WORKTRUST_MCP_URL ?? `${ORIGIN}/api/mcp`;
 const HOME_DIR = join(homedir(), ".worktrust");