zam-core 0.3.13 → 0.4.1

package/dist/index.js

@@ -690,6 +690,66 @@ function isRemoteDatabasePath(dbPath) {
 function isDatabaseProvider(value) {
   return value === "local" || value === "native" || value === "remote";
 }
+function cwdRequiresTursoCredentials() {
+  try {
+    const configPath = join2(process.cwd(), ".zam", "config.yaml");
+    if (existsSync2(configPath)) {
+      const configText = readFileSync2(configPath, "utf-8");
+      return /[\s\S]*turso:[\s\S]*url:/m.test(configText);
+    }
+  } catch (_e) {
+  }
+  return false;
+}
+function resolveDatabaseTarget(options = {}) {
+  const configuredCloud = options.useConfiguredCloud !== false && !options.dbPath && !options.syncUrl ? getTursoCredentials() : null;
+  if (cwdRequiresTursoCredentials() && !configuredCloud && options.useConfiguredCloud !== false && !options.dbPath && !options.syncUrl) {
+    throw new Error(
+      "Turso cloud database is configured in .zam/config.yaml but missing local credentials. Run: zam connector setup turso"
+    );
+  }
+  const dbPath = configuredCloud?.url ?? options.dbPath ?? DEFAULT_DB_PATH;
+  const isRemote = isRemoteDatabasePath(dbPath);
+  const isEmbeddedReplica = Boolean(options.syncUrl);
+  const provider = resolveProvider(options, configuredCloud?.mode, isRemote);
+  return {
+    dbPath,
+    provider,
+    isRemote,
+    isEmbeddedReplica,
+    configuredCloud
+  };
+}
+function getDatabaseTargetInfo(options = {}) {
+  const target = resolveDatabaseTarget(options);
+  if (target.isEmbeddedReplica) {
+    return {
+      kind: "turso-replica",
+      provider: target.provider,
+      location: target.dbPath,
+      syncUrl: options.syncUrl
+    };
+  }
+  if (target.provider === "remote" && target.isRemote) {
+    return {
+      kind: "turso-remote",
+      provider: target.provider,
+      location: target.dbPath
+    };
+  }
+  if (target.isRemote) {
+    return {
+      kind: "turso-native",
+      provider: target.provider,
+      location: target.dbPath
+    };
+  }
+  return {
+    kind: "local",
+    provider: target.provider,
+    location: target.dbPath
+  };
+}
 function openLocalSqlite(dbPath) {
   const mod = require2("better-sqlite3");
   const BetterSqlite3 = "default" in mod ? mod.default : mod;
@@ -707,27 +767,7 @@ function loadLibsql() {
   }
 }
 async function openDatabase(options = {}) {
-  const configuredCloud = options.useConfiguredCloud !== false && !options.dbPath && !options.syncUrl ? getTursoCredentials() : null;
-  let requiresTurso = false;
-  try {
-    const configPath = join2(process.cwd(), ".zam", "config.yaml");
-    if (existsSync2(configPath)) {
-      const configText = readFileSync2(configPath, "utf-8");
-      if (/[\s\S]*turso:[\s\S]*url:/m.test(configText)) {
-        requiresTurso = true;
-      }
-    }
-  } catch (_e) {
-  }
-  if (requiresTurso && !configuredCloud && options.useConfiguredCloud !== false && !options.dbPath && !options.syncUrl) {
-    throw new Error(
-      "Turso cloud database is configured in .zam/config.yaml but missing local credentials. Run: zam connector setup turso"
-    );
-  }
-  const dbPath = configuredCloud?.url ?? options.dbPath ?? DEFAULT_DB_PATH;
-  const isRemote = isRemoteDatabasePath(dbPath);
-  const isEmbeddedReplica = Boolean(options.syncUrl);
-  const provider = resolveProvider(options, configuredCloud?.mode, isRemote);
+  const { dbPath, provider, isRemote, isEmbeddedReplica, configuredCloud } = resolveDatabaseTarget(options);
   const shouldInitialize = options.initialize === true || !isRemote && !isEmbeddedReplica && !existsSync2(dbPath);
   if (provider === "remote") {
     const url = isRemote ? dbPath : options.syncUrl;
@@ -2130,6 +2170,415 @@ function getMonitorLogStats(sessionId) {
   return { exists: true, sizeBytes: stat.size, lineCount };
 }
 
+// src/kernel/observation/observer-sidecar-policy.ts
+import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync3 } from "fs";
+import { join as join6 } from "path";
+
+// src/kernel/observation/policy.ts
+var OBSERVER_POLICY_VERSION = 1;
+var DEFAULT_OBSERVER_POLICY = {
+  version: OBSERVER_POLICY_VERSION,
+  scope: "window",
+  allowlist: [],
+  denylist: [],
+  consent: "per-session",
+  retention: "none",
+  redactWindowTitles: true,
+  audioOptIn: false
+};
+var BUILT_IN_SENSITIVE_MATCHERS = [
+  // Password managers
+  "1password",
+  "bitwarden",
+  "keepass",
+  "lastpass",
+  "dashlane",
+  "nordpass",
+  "enpass",
+  "proton pass",
+  // Authentication / credential / UAC surfaces
+  "credentialuibroker",
+  "consentux",
+  "logonui",
+  "windowssecurity",
+  "authenticator",
+  // Conservative banking/title hints
+  "online banking",
+  "onlinebanking"
+];
+function parseList(raw) {
+  if (!raw) return [];
+  return raw.split(",").map((entry) => entry.trim().toLowerCase()).filter((entry) => entry.length > 0);
+}
+function parseObserverList(raw) {
+  return parseList(raw);
+}
+function parseScope(raw, defaultScope) {
+  if (raw === "off" || raw === "window" || raw === "fullscreen") {
+    return raw;
+  }
+  return defaultScope ?? DEFAULT_OBSERVER_POLICY.scope;
+}
+function parseConsent(raw, defaultConsent) {
+  if (raw === "per-capture" || raw === "per-session" || raw === "standing") {
+    return raw;
+  }
+  return defaultConsent ?? DEFAULT_OBSERVER_POLICY.consent;
+}
+function parseRetention(raw) {
+  return raw === "none" || raw === "session" || raw === "persist" ? raw : DEFAULT_OBSERVER_POLICY.retention;
+}
+function parseBool(raw, fallback) {
+  if (raw === void 0) return fallback;
+  return raw === "true";
+}
+function parseObserverPolicy(raw, defaults) {
+  return {
+    version: OBSERVER_POLICY_VERSION,
+    scope: parseScope(raw["observer.scope"], defaults?.scope),
+    allowlist: parseList(raw["observer.allowlist"]),
+    denylist: parseList(raw["observer.denylist"]),
+    consent: parseConsent(raw["observer.consent"], defaults?.consent),
+    retention: parseRetention(raw["observer.retention"]),
+    redactWindowTitles: parseBool(
+      raw["observer.redact_titles"],
+      DEFAULT_OBSERVER_POLICY.redactWindowTitles
+    ),
+    audioOptIn: parseBool(
+      raw["observer.audio"],
+      DEFAULT_OBSERVER_POLICY.audioOptIn
+    )
+  };
+}
+function getDefaultsForSymbiosisMode(mode) {
+  if (mode === "autonomy") {
+    return { scope: "fullscreen", consent: "standing" };
+  }
+  return { scope: "window", consent: "per-session" };
+}
+async function resolveActiveSymbiosisMode(db) {
+  const userId = await getSetting(db, "user.id") || "default";
+  const activeSession = await db.prepare(
+    "SELECT id FROM sessions WHERE user_id = ? AND completed_at IS NULL ORDER BY started_at DESC LIMIT 1"
+  ).get(userId);
+  if (activeSession) {
+    const stepToken = await db.prepare(
+      `SELECT t.symbiosis_mode, t.domain
+         FROM session_steps s
+         JOIN tokens t ON t.id = s.token_id
+         WHERE s.session_id = ?
+         ORDER BY s.created_at DESC, s.id DESC
+         LIMIT 1`
+    ).get(activeSession.id);
+    if (stepToken) {
+      if (stepToken.symbiosis_mode) {
+        return stepToken.symbiosis_mode;
+      }
+      if (stepToken.domain) {
+        const competence = await getDomainCompetence(db, userId);
+        const comp = competence.find((c) => c.domain === stepToken.domain);
+        if (comp) {
+          return comp.suggestedMode;
+        }
+      }
+    }
+  }
+  const lastReviewToken = await db.prepare(
+    `SELECT t.symbiosis_mode, t.domain
+       FROM review_logs r
+       JOIN tokens t ON t.id = r.token_id
+       WHERE r.user_id = ?
+       ORDER BY r.reviewed_at DESC, r.id DESC
+       LIMIT 1`
+  ).get(userId);
+  if (lastReviewToken) {
+    if (lastReviewToken.symbiosis_mode) {
+      return lastReviewToken.symbiosis_mode;
+    }
+    if (lastReviewToken.domain) {
+      const competence = await getDomainCompetence(db, userId);
+      const comp = competence.find((c) => c.domain === lastReviewToken.domain);
+      if (comp) {
+        return comp.suggestedMode;
+      }
+    }
+  }
+  return "shadowing";
+}
+async function resolveObserverPolicy(db) {
+  const [scope, allowlist, denylist, consent, retention, redactTitles, audio] = await Promise.all([
+    getSetting(db, "observer.scope"),
+    getSetting(db, "observer.allowlist"),
+    getSetting(db, "observer.denylist"),
+    getSetting(db, "observer.consent"),
+    getSetting(db, "observer.retention"),
+    getSetting(db, "observer.redact_titles"),
+    getSetting(db, "observer.audio")
+  ]);
+  const mode = await resolveActiveSymbiosisMode(db);
+  const defaults = getDefaultsForSymbiosisMode(mode);
+  return parseObserverPolicy(
+    {
+      "observer.scope": scope,
+      "observer.allowlist": allowlist,
+      "observer.denylist": denylist,
+      "observer.consent": consent,
+      "observer.retention": retention,
+      "observer.redact_titles": redactTitles,
+      "observer.audio": audio
+    },
+    defaults
+  );
+}
+function haystacks(...values) {
+  return values.filter((v) => typeof v === "string" && v.length > 0).map((v) => v.toLowerCase());
+}
+function deny(reason, denialReason) {
+  return { allowed: false, reason, denialReason };
+}
+function matchBuiltInSensitive(processName, windowTitle) {
+  const fields = haystacks(processName, windowTitle);
+  for (const matcher of BUILT_IN_SENSITIVE_MATCHERS) {
+    if (fields.some((field) => field.includes(matcher))) return matcher;
+  }
+  return null;
+}
+function matchDenylist(policy, processName, windowTitle) {
+  const fields = haystacks(processName, windowTitle);
+  for (const matcher of policy.denylist) {
+    if (fields.some((field) => field.includes(matcher))) return matcher;
+  }
+  return null;
+}
+function inAllowlist(policy, processName) {
+  if (policy.allowlist.length === 0) return true;
+  if (!processName) return false;
+  const name = processName.toLowerCase();
+  return policy.allowlist.some((entry) => name.includes(entry));
+}
+function decidePreCapture(policy, request) {
+  if (policy.scope === "off") {
+    return deny("observer is disabled (observer.scope=off)", "scope-off");
+  }
+  if (policy.scope === "window" && !request.hasExplicitTarget) {
+    return deny(
+      "window scope requires a target: pass --process-name or --hwnd, or set observer.scope=fullscreen",
+      "scope-requires-target"
+    );
+  }
+  const requested = request.requestedProcessName;
+  if (requested) {
+    const sensitive = matchBuiltInSensitive(requested, null);
+    if (sensitive) {
+      return deny(`refusing sensitive surface (${sensitive})`, "sensitive");
+    }
+    const denied = matchDenylist(policy, requested, null);
+    if (denied) {
+      return deny(`process is denylisted (${denied})`, "denylisted");
+    }
+    if (policy.scope === "window" && !inAllowlist(policy, requested)) {
+      return deny(
+        `process not in observer.allowlist (${requested.toLowerCase()})`,
+        "not-allowlisted"
+      );
+    }
+  }
+  return { allowed: true };
+}
+function decidePostCapture(policy, target) {
+  const isFullscreen = target.method.toLowerCase().includes("fullscreen");
+  if (policy.scope === "window" && isFullscreen) {
+    return deny(
+      "window scope but capture fell back to fullscreen (target window not resolved)",
+      "scope-requires-target"
+    );
+  }
+  const sensitive = matchBuiltInSensitive(
+    target.processName,
+    target.windowTitle
+  );
+  if (sensitive) {
+    return deny(`refusing sensitive surface (${sensitive})`, "sensitive");
+  }
+  const denied = matchDenylist(policy, target.processName, target.windowTitle);
+  if (denied) {
+    return deny(`captured window is denylisted (${denied})`, "denylisted");
+  }
+  if (policy.scope === "window" && !inAllowlist(policy, target.processName)) {
+    return deny(
+      `captured window not in observer.allowlist (${target.processName ?? "unknown"})`,
+      "not-allowlisted"
+    );
+  }
+  return { allowed: true };
+}
+async function isObserverPolicyConfigured(db) {
+  const settings = await getAllSettings(db);
+  return Object.keys(settings).some((key) => key.startsWith("observer."));
+}
+var OBSERVER_POLICY_UNSET_HINT = "Observer policy is at defaults (scope=window: only a targeted window is captured). Configure with `zam observer status|grant|revoke` or `zam settings set observer.scope <off|window|fullscreen>`.";
+
+// src/kernel/observation/ui-observer-io.ts
+import { appendFileSync as appendFileSync2, existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join5 } from "path";
+
+// src/kernel/observation/ui-observer.ts
+var UI_OBSERVATION_PROTOCOL_VERSION = 1;
+var OBSERVATION_KINDS = /* @__PURE__ */ new Set([
+  "progress",
+  "step-completed",
+  "error",
+  "help-seeking",
+  "uncertain",
+  "privacy-pause",
+  "heartbeat"
+]);
+var ACTION_TYPES = /* @__PURE__ */ new Set([
+  "click",
+  "shortcut",
+  "typing",
+  "scroll",
+  "window-change"
+]);
+var EVIDENCE_TYPES = /* @__PURE__ */ new Set([
+  "uia",
+  "keyframe",
+  "clip",
+  "window"
+]);
+function isUiObservationReport(value) {
+  if (!isRecord(value)) return false;
+  if (value.version !== UI_OBSERVATION_PROTOCOL_VERSION) return false;
+  if (!isNonEmptyString(value.sessionId)) return false;
+  if (!isNonNegativeInteger(value.sequence)) return false;
+  if (!isNonEmptyString(value.observedFrom)) return false;
+  if (!isNonEmptyString(value.observedTo)) return false;
+  if (typeof value.kind !== "string" || !OBSERVATION_KINDS.has(value.kind)) {
+    return false;
+  }
+  if (!isApplication(value.application)) return false;
+  if (!isNonEmptyString(value.summary)) return false;
+  if (!Array.isArray(value.actions) || !value.actions.every(isObservedAction)) {
+    return false;
+  }
+  if (!Array.isArray(value.evidence) || !value.evidence.every(isEvidenceRef)) {
+    return false;
+  }
+  if (!Array.isArray(value.candidateTokens) || !value.candidateTokens.every(isCandidateToken)) {
+    return false;
+  }
+  return isConfidence(value.confidence);
+}
+function parseUiObservationLog(jsonl) {
+  const reports = [];
+  for (const line of jsonl.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    try {
+      const value = JSON.parse(trimmed);
+      if (isUiObservationReport(value)) {
+        reports.push(value);
+      }
+    } catch {
+    }
+  }
+  return reports.sort((left, right) => left.sequence - right.sequence);
+}
+function isApplication(value) {
+  if (!isRecord(value) || !isNonEmptyString(value.processName)) return false;
+  if (value.processId !== void 0 && !isNonNegativeInteger(value.processId)) {
+    return false;
+  }
+  return value.windowTitle === void 0 || typeof value.windowTitle === "string";
+}
+function isObservedAction(value) {
+  if (!isRecord(value) || typeof value.type !== "string") return false;
+  if (!ACTION_TYPES.has(value.type)) return false;
+  if (value.target !== void 0 && typeof value.target !== "string") {
+    return false;
+  }
+  return value.result === void 0 || typeof value.result === "string";
+}
+function isEvidenceRef(value) {
+  if (!isRecord(value) || typeof value.type !== "string") return false;
+  return EVIDENCE_TYPES.has(value.type) && isNonEmptyString(value.ref) && typeof value.redacted === "boolean";
+}
+function isCandidateToken(value) {
+  return isRecord(value) && isNonEmptyString(value.slug) && isConfidence(value.confidence) && isNonEmptyString(value.rationale);
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.trim().length > 0;
+}
+function isNonNegativeInteger(value) {
+  return Number.isInteger(value) && Number(value) >= 0;
+}
+function isConfidence(value) {
+  return typeof value === "number" && value >= 0 && value <= 1;
+}
+
+// src/kernel/observation/ui-observer-io.ts
+var DEFAULT_UI_OBSERVER_DIR = join5(homedir4(), ".zam", "observer");
+function getUiObserverDir() {
+  return process.env.ZAM_OBSERVER_DIR || DEFAULT_UI_OBSERVER_DIR;
+}
+function getUiObservationPath(sessionId) {
+  if (!/^[A-Za-z0-9_-]+$/.test(sessionId)) {
+    throw new Error(`Invalid observer session ID: ${sessionId}`);
+  }
+  return join5(getUiObserverDir(), `${sessionId}.reports.jsonl`);
+}
+function ensureUiObserverDir() {
+  const dir = getUiObserverDir();
+  if (!existsSync5(dir)) {
+    mkdirSync4(dir, { recursive: true, mode: 448 });
+  }
+}
+function uiObservationLogExists(sessionId) {
+  return existsSync5(getUiObservationPath(sessionId));
+}
+function readUiObservationLog(sessionId) {
+  const path = getUiObservationPath(sessionId);
+  if (!existsSync5(path)) return [];
+  return parseUiObservationLog(readFileSync5(path, "utf8"));
+}
+function appendUiObservationReport(report) {
+  if (!isUiObservationReport(report)) {
+    throw new Error("Invalid UI observation report");
+  }
+  ensureUiObserverDir();
+  appendFileSync2(
+    getUiObservationPath(report.sessionId),
+    `${JSON.stringify(report)}
+`,
+    { encoding: "utf8", mode: 384 }
+  );
+}
+
+// src/kernel/observation/observer-sidecar-policy.ts
+var SIDECAR_POLICY_FILE = "policy.json";
+function toSidecarPrivacyPolicy(policy) {
+  return {
+    allowProcesses: [...policy.allowlist],
+    denyProcesses: [...policy.denylist],
+    denyTitleMarkers: [...policy.denylist]
+  };
+}
+async function syncObserverSidecarPolicy(db, dir = getUiObserverDir()) {
+  const policy = toSidecarPrivacyPolicy(await resolveObserverPolicy(db));
+  mkdirSync5(dir, { recursive: true, mode: 448 });
+  const path = join6(dir, SIDECAR_POLICY_FILE);
+  writeFileSync3(path, `${JSON.stringify(policy, null, 2)}
+`, {
+    encoding: "utf8",
+    mode: 384
+  });
+  return { path, policy };
+}
+
 // src/kernel/observation/session-synthesis.ts
 import { ulid as ulid7 } from "ulid";
 
@@ -2400,146 +2849,6 @@ async function unblockReady(db, userId) {
   return { unblocked };
 }
 
-// src/kernel/observation/ui-observer-io.ts
-import { appendFileSync as appendFileSync2, existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join5 } from "path";
-
-// src/kernel/observation/ui-observer.ts
-var UI_OBSERVATION_PROTOCOL_VERSION = 1;
-var OBSERVATION_KINDS = /* @__PURE__ */ new Set([
-  "progress",
-  "step-completed",
-  "error",
-  "help-seeking",
-  "uncertain",
-  "privacy-pause",
-  "heartbeat"
-]);
-var ACTION_TYPES = /* @__PURE__ */ new Set([
-  "click",
-  "shortcut",
-  "typing",
-  "scroll",
-  "window-change"
-]);
-var EVIDENCE_TYPES = /* @__PURE__ */ new Set([
-  "uia",
-  "keyframe",
-  "clip",
-  "window"
-]);
-function isUiObservationReport(value) {
-  if (!isRecord(value)) return false;
-  if (value.version !== UI_OBSERVATION_PROTOCOL_VERSION) return false;
-  if (!isNonEmptyString(value.sessionId)) return false;
-  if (!isNonNegativeInteger(value.sequence)) return false;
-  if (!isNonEmptyString(value.observedFrom)) return false;
-  if (!isNonEmptyString(value.observedTo)) return false;
-  if (typeof value.kind !== "string" || !OBSERVATION_KINDS.has(value.kind)) {
-    return false;
-  }
-  if (!isApplication(value.application)) return false;
-  if (!isNonEmptyString(value.summary)) return false;
-  if (!Array.isArray(value.actions) || !value.actions.every(isObservedAction)) {
-    return false;
-  }
-  if (!Array.isArray(value.evidence) || !value.evidence.every(isEvidenceRef)) {
-    return false;
-  }
-  if (!Array.isArray(value.candidateTokens) || !value.candidateTokens.every(isCandidateToken)) {
-    return false;
-  }
-  return isConfidence(value.confidence);
-}
-function parseUiObservationLog(jsonl) {
-  const reports = [];
-  for (const line of jsonl.split("\n")) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-    try {
-      const value = JSON.parse(trimmed);
-      if (isUiObservationReport(value)) {
-        reports.push(value);
-      }
-    } catch {
-    }
-  }
-  return reports.sort((left, right) => left.sequence - right.sequence);
-}
-function isApplication(value) {
-  if (!isRecord(value) || !isNonEmptyString(value.processName)) return false;
-  if (value.processId !== void 0 && !isNonNegativeInteger(value.processId)) {
-    return false;
-  }
-  return value.windowTitle === void 0 || typeof value.windowTitle === "string";
-}
-function isObservedAction(value) {
-  if (!isRecord(value) || typeof value.type !== "string") return false;
-  if (!ACTION_TYPES.has(value.type)) return false;
-  if (value.target !== void 0 && typeof value.target !== "string") {
-    return false;
-  }
-  return value.result === void 0 || typeof value.result === "string";
-}
-function isEvidenceRef(value) {
-  if (!isRecord(value) || typeof value.type !== "string") return false;
-  return EVIDENCE_TYPES.has(value.type) && isNonEmptyString(value.ref) && typeof value.redacted === "boolean";
-}
-function isCandidateToken(value) {
-  return isRecord(value) && isNonEmptyString(value.slug) && isConfidence(value.confidence) && isNonEmptyString(value.rationale);
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isNonEmptyString(value) {
-  return typeof value === "string" && value.trim().length > 0;
-}
-function isNonNegativeInteger(value) {
-  return Number.isInteger(value) && Number(value) >= 0;
-}
-function isConfidence(value) {
-  return typeof value === "number" && value >= 0 && value <= 1;
-}
-
-// src/kernel/observation/ui-observer-io.ts
-var DEFAULT_UI_OBSERVER_DIR = join5(homedir4(), ".zam", "observer");
-function getUiObserverDir() {
-  return process.env.ZAM_OBSERVER_DIR || DEFAULT_UI_OBSERVER_DIR;
-}
-function getUiObservationPath(sessionId) {
-  if (!/^[A-Za-z0-9_-]+$/.test(sessionId)) {
-    throw new Error(`Invalid observer session ID: ${sessionId}`);
-  }
-  return join5(getUiObserverDir(), `${sessionId}.reports.jsonl`);
-}
-function ensureUiObserverDir() {
-  const dir = getUiObserverDir();
-  if (!existsSync5(dir)) {
-    mkdirSync4(dir, { recursive: true, mode: 448 });
-  }
-}
-function uiObservationLogExists(sessionId) {
-  return existsSync5(getUiObservationPath(sessionId));
-}
-function readUiObservationLog(sessionId) {
-  const path = getUiObservationPath(sessionId);
-  if (!existsSync5(path)) return [];
-  return parseUiObservationLog(readFileSync5(path, "utf8"));
-}
-function appendUiObservationReport(report) {
-  if (!isUiObservationReport(report)) {
-    throw new Error("Invalid UI observation report");
-  }
-  ensureUiObserverDir();
-  appendFileSync2(
-    getUiObservationPath(report.sessionId),
-    `${JSON.stringify(report)}
-`,
-    { encoding: "utf8", mode: 384 }
-  );
-}
-
 // src/kernel/observation/ui-observer-synthesis.ts
 var MIN_UI_CONFIDENCE = 0.6;
 function kindToRating(kind) {
@@ -3344,7 +3653,7 @@ function generatePrompt(input) {
 
 // src/kernel/recall/reference-resolver.ts
 import { existsSync as existsSync6, readFileSync as readFileSync6 } from "fs";
-import { dirname as dirname3, join as join6, resolve } from "path";
+import { dirname as dirname3, join as join7, resolve } from "path";
 var DEFAULT_REVIEW_CONTEXT_MAX_CHARS = 6e3;
 function htmlToText(html) {
   let content = html;
@@ -3405,8 +3714,8 @@ async function resolveReference(sourceLink) {
       const filePath = anchorIndex2 !== -1 ? fullPathWithAnchor.slice(0, anchorIndex2) : fullPathWithAnchor;
       const anchor2 = anchorIndex2 !== -1 ? fullPathWithAnchor.slice(anchorIndex2) : "";
       const parentDir = dirname3(process.cwd());
-      const localRepoPath = join6(parentDir, repo);
-      const localFilePath = join6(localRepoPath, filePath);
+      const localRepoPath = join7(parentDir, repo);
+      const localFilePath = join7(localRepoPath, filePath);
       if (existsSync6(localFilePath)) {
         try {
           let fileContent = readFileSync6(localFilePath, "utf-8");
@@ -3720,12 +4029,12 @@ import {
   appendFileSync as appendFileSync3,
   copyFileSync,
   existsSync as existsSync7,
-  mkdirSync as mkdirSync5,
+  mkdirSync as mkdirSync6,
   readFileSync as readFileSync7,
-  writeFileSync as writeFileSync3
+  writeFileSync as writeFileSync4
 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import { fileURLToPath } from "url";
 var HOME = homedir5();
 function getPackageSkillPath(agent = "default") {
@@ -3733,15 +4042,15 @@ function getPackageSkillPath(agent = "default") {
     fileURLToPath(new URL("../../..", import.meta.url)),
     fileURLToPath(new URL("../..", import.meta.url)),
     fileURLToPath(new URL("..", import.meta.url))
-  ].find((candidate) => existsSync7(join7(candidate, "package.json"))) ?? "";
+  ].find((candidate) => existsSync7(join8(candidate, "package.json"))) ?? "";
   if (!packageRoot) return "";
   if (agent === "codex") {
-    const codexPath = join7(packageRoot, ".agents", "skills", "zam", "SKILL.md");
+    const codexPath = join8(packageRoot, ".agents", "skills", "zam", "SKILL.md");
     if (existsSync7(codexPath)) return codexPath;
     return "";
   }
   if (agent === "claude") {
-    const claudePath = join7(
+    const claudePath = join8(
       packageRoot,
       ".claude",
       "skills",
@@ -3751,9 +4060,9 @@ function getPackageSkillPath(agent = "default") {
     if (existsSync7(claudePath)) return claudePath;
     return "";
   }
-  let path = join7(packageRoot, ".agent", "skills", "zam", "SKILL.md");
+  let path = join8(packageRoot, ".agent", "skills", "zam", "SKILL.md");
   if (existsSync7(path)) return path;
-  path = join7(packageRoot, ".claude", "skills", "zam", "SKILL.md");
+  path = join8(packageRoot, ".claude", "skills", "zam", "SKILL.md");
   if (existsSync7(path)) return path;
   return "";
 }
@@ -3766,16 +4075,16 @@ function distributeGlobalSkills(home = HOME) {
     console.warn("Could not find ZAM source SKILL.md in the package folder.");
     return results;
   }
-  const claudeSkillsDir = join7(home, ".claude", "skills", "zam");
+  const claudeSkillsDir = join8(home, ".claude", "skills", "zam");
   try {
     if (!claudeSourceSkill) {
       throw new Error("Claude skill source not found");
     }
-    mkdirSync5(claudeSkillsDir, { recursive: true });
-    copyFileSync(claudeSourceSkill, join7(claudeSkillsDir, "SKILL.md"));
+    mkdirSync6(claudeSkillsDir, { recursive: true });
+    copyFileSync(claudeSourceSkill, join8(claudeSkillsDir, "SKILL.md"));
     results.push({
       name: "Claude Code Global",
-      path: join7(claudeSkillsDir, "SKILL.md"),
+      path: join8(claudeSkillsDir, "SKILL.md"),
       success: true
     });
   } catch (_err) {
@@ -3785,13 +4094,13 @@ function distributeGlobalSkills(home = HOME) {
       success: false
     });
   }
-  const geminiSkillsDir = join7(home, ".gemini", "skills", "zam");
+  const geminiSkillsDir = join8(home, ".gemini", "skills", "zam");
   try {
-    mkdirSync5(geminiSkillsDir, { recursive: true });
-    copyFileSync(sourceSkill, join7(geminiSkillsDir, "SKILL.md"));
+    mkdirSync6(geminiSkillsDir, { recursive: true });
+    copyFileSync(sourceSkill, join8(geminiSkillsDir, "SKILL.md"));
     results.push({
       name: "Gemini CLI Global",
-      path: join7(geminiSkillsDir, "SKILL.md"),
+      path: join8(geminiSkillsDir, "SKILL.md"),
       success: true
     });
   } catch (_err) {
@@ -3801,16 +4110,16 @@ function distributeGlobalSkills(home = HOME) {
       success: false
     });
   }
-  const codexSkillsDir = join7(home, ".agents", "skills", "zam");
+  const codexSkillsDir = join8(home, ".agents", "skills", "zam");
   try {
     if (!codexSourceSkill) {
       throw new Error("Codex skill source not found");
     }
-    mkdirSync5(codexSkillsDir, { recursive: true });
-    copyFileSync(codexSourceSkill, join7(codexSkillsDir, "SKILL.md"));
+    mkdirSync6(codexSkillsDir, { recursive: true });
+    copyFileSync(codexSourceSkill, join8(codexSkillsDir, "SKILL.md"));
     results.push({
       name: "Codex Global",
-      path: join7(codexSkillsDir, "SKILL.md"),
+      path: join8(codexSkillsDir, "SKILL.md"),
       success: true
     });
   } catch (_err) {
@@ -3820,13 +4129,13 @@ function distributeGlobalSkills(home = HOME) {
       success: false
     });
   }
-  const gooseSkillsDir = join7(home, ".goose", "skills", "zam");
+  const gooseSkillsDir = join8(home, ".goose", "skills", "zam");
   try {
-    mkdirSync5(gooseSkillsDir, { recursive: true });
-    copyFileSync(sourceSkill, join7(gooseSkillsDir, "SKILL.md"));
+    mkdirSync6(gooseSkillsDir, { recursive: true });
+    copyFileSync(sourceSkill, join8(gooseSkillsDir, "SKILL.md"));
     results.push({
       name: "Goose Global",
-      path: join7(gooseSkillsDir, "SKILL.md"),
+      path: join8(gooseSkillsDir, "SKILL.md"),
       success: true
     });
   } catch (_err) {
@@ -3875,7 +4184,7 @@ function installHook(file, hook, oldHook) {
       return { success: true, alreadyHooked: true };
     }
     if (content.includes(oldHook.trim())) {
-      writeFileSync3(file, content.replace(oldHook.trim(), hook.trim()), "utf8");
+      writeFileSync4(file, content.replace(oldHook.trim(), hook.trim()), "utf8");
     } else {
       appendFileSync3(file, hook);
     }
@@ -3886,24 +4195,24 @@ function installHook(file, hook, oldHook) {
 }
 function injectShellHooks(home = HOME) {
   const results = [];
-  const zshrc = join7(home, ".zshrc");
+  const zshrc = join8(home, ".zshrc");
   if (existsSync7(zshrc)) {
     const status = installHook(zshrc, posixHook("zsh"), POSIX_OLD_HOOK);
     results.push({ shell: "zsh", file: zshrc, ...status });
   }
-  const bashrc = join7(home, ".bashrc");
+  const bashrc = join8(home, ".bashrc");
   if (existsSync7(bashrc)) {
     const status = installHook(bashrc, posixHook("bash"), POSIX_OLD_HOOK);
     results.push({ shell: "bash", file: bashrc, ...status });
   }
   const pwshDirs = [
-    join7(home, "Documents", "PowerShell"),
-    join7(home, "Documents", "WindowsPowerShell")
+    join8(home, "Documents", "PowerShell"),
+    join8(home, "Documents", "WindowsPowerShell")
   ];
   for (const dir of pwshDirs) {
-    const profileFile = join7(dir, "Microsoft.PowerShell_profile.ps1");
+    const profileFile = join8(dir, "Microsoft.PowerShell_profile.ps1");
     try {
-      mkdirSync5(dir, { recursive: true });
+      mkdirSync6(dir, { recursive: true });
       const status = installHook(
         profileFile,
         POWERSHELL_HOOK,
@@ -4135,10 +4444,10 @@ function t(locale, key, params = {}) {
 }
 
 // src/kernel/system/install-config.ts
-import { existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync8, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir6 } from "os";
-import { dirname as dirname4, join as join8 } from "path";
-var DEFAULT_CONFIG_PATH = join8(homedir6(), ".zam", "config.json");
+import { dirname as dirname4, join as join9 } from "path";
+var DEFAULT_CONFIG_PATH = join9(homedir6(), ".zam", "config.json");
 function loadInstallConfig(path = DEFAULT_CONFIG_PATH) {
   if (!existsSync8(path)) return {};
   try {
@@ -4149,8 +4458,8 @@ function loadInstallConfig(path = DEFAULT_CONFIG_PATH) {
 }
 function saveInstallConfig(config, path = DEFAULT_CONFIG_PATH) {
   const dir = dirname4(path);
-  if (!existsSync8(dir)) mkdirSync6(dir, { recursive: true });
-  writeFileSync4(path, `${JSON.stringify(config, null, 2)}
+  if (!existsSync8(dir)) mkdirSync7(dir, { recursive: true });
+  writeFileSync5(path, `${JSON.stringify(config, null, 2)}
 `, "utf-8");
 }
 function getInstallMode(path = DEFAULT_CONFIG_PATH) {
@@ -4188,7 +4497,7 @@ function detectSyncProvider(dir) {
 import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync9 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 function hasCommand(cmd) {
   try {
     const checkCmd = process.platform === "win32" ? `where ${cmd}` : `which ${cmd}`;
@@ -4233,7 +4542,7 @@ function installOllama() {
   const isMac = process.platform === "darwin";
   const isWin = process.platform === "win32";
   const hasOllama = hasCommand("ollama") || isMac && existsSync9("/Applications/Ollama.app") || isWin && existsSync9(
-    join9(homedir7(), "AppData", "Local", "Programs", "Ollama", "ollama.exe")
+    join10(homedir7(), "AppData", "Local", "Programs", "Ollama", "ollama.exe")
   );
   if (hasOllama) {
     return { success: true, message: "Ollama is already installed." };
@@ -4293,7 +4602,7 @@ function installOllama() {
 function resolveOllamaCommand() {
   if (hasCommand("ollama")) return "ollama";
   const candidates = process.platform === "win32" ? [
-    join9(
+    join10(
       homedir7(),
       "AppData",
       "Local",
@@ -4625,9 +4934,45 @@ function decideUpdate(input) {
       };
   }
 }
+function planUpdate(decision) {
+  if (!decision.updateAvailable) return [];
+  switch (decision.channel) {
+    case "developer":
+      return [
+        { kind: "git-pull", label: "Pull the latest source" },
+        { kind: "npm-install", label: "Install dependencies" },
+        { kind: "npm-build", label: "Rebuild the CLI" },
+        {
+          kind: "distribute-skills",
+          label: "Refresh skill files (zam setup --force)"
+        }
+      ];
+    case "winget":
+    case "homebrew":
+      return [
+        {
+          kind: "run-command",
+          label: `Update via ${decision.channel}`,
+          command: decision.command
+        }
+      ];
+    case "direct":
+      return [
+        {
+          kind: "self-update",
+          label: "Apply the signed update via the desktop app"
+        }
+      ];
+  }
+}
 export {
+  BUILT_IN_SENSITIVE_MATCHERS,
+  DEFAULT_OBSERVER_POLICY,
   DEFAULT_REVIEW_CONTEXT_MAX_CHARS,
   HOMEBREW_CASK,
+  OBSERVER_POLICY_UNSET_HINT,
+  OBSERVER_POLICY_VERSION,
+  SIDECAR_POLICY_FILE,
   SNAPSHOT_VERSION,
   UI_OBSERVATION_PROTOCOL_VERSION,
   WINGET_PACKAGE_ID,
@@ -4645,6 +4990,8 @@ export {
   createFSRS,
   createGoal,
   createToken,
+  decidePostCapture,
+  decidePreCapture,
   decideUpdate,
   deleteCardForUser,
   deleteSetting,
@@ -4681,6 +5028,7 @@ export {
   getCard,
   getCardById,
   getCardDeletionImpact,
+  getDatabaseTargetInfo,
   getDefaultDbPath,
   getDependents,
   getDomainCompetence,
@@ -4716,6 +5064,7 @@ export {
   installOllama,
   installOpenCode,
   interleave,
+  isObserverPolicyConfigured,
   isUiObservationReport,
   listAgentSkills,
   listGoals,
@@ -4725,6 +5074,8 @@ export {
   loadInstallConfig,
   logReview,
   logStep,
+  matchBuiltInSensitive,
+  matchDenylist,
   matchesFilePath,
   monitorLogExists,
   normalizeLocale,
@@ -4735,15 +5086,19 @@ export {
   pairCommands,
   parseGoalFile,
   parseMonitorLog,
+  parseObserverList,
+  parseObserverPolicy,
   parseSnapshot,
   parseUiObservationLog,
   planOpenCodeInstall,
+  planUpdate,
   prepareLocalModel,
   prepareSessionSynthesis,
   readMonitorLog,
   readUiObservationLog,
   resolveAllBeliefPaths,
   resolveAllGoalPaths,
+  resolveObserverPolicy,
   resolveReference,
   resolveRepoPath,
   resolveReviewContext,
@@ -4756,7 +5111,9 @@ export {
   setSetting,
   setTursoCredentials,
   startSession,
+  syncObserverSidecarPolicy,
   t,
+  toSidecarPrivacyPolicy,
   uiObservationLogExists,
   uiObservationTimeSpan,
   unblockReady,