@adrive/cli 0.3.0 → 1.1.0

package/dist/lib/sync.js

@@ -0,0 +1,433 @@
+import { execFile } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import { homedir } from 'node:os';
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { projectKeyFor, scopeProjectKey } from '@adrive/mcp-server/project';
+import { renderSession, sessionPath, sessionRunId } from '@adrive/mcp-server/session';
+import { CliApiClient } from './api-client.js';
+import { configDir as defaultConfigDir, readConfig } from './config.js';
+import { encryptContentAsync } from './crypto.js';
+import { DEFAULT_DENY, compileRules, loadRules, shouldIgnore } from './ignore.js';
+import { redact, summarizeHits } from './redactor.js';
+import { readSessionCwds } from './session-cwd.js';
+import { claudeSource } from './transcripts/claude.js';
+import { codexSource } from './transcripts/codex.js';
+import { cursorSource } from './transcripts/cursor.js';
+import { geminiSource } from './transcripts/gemini.js';
+import { opencodeSource } from './transcripts/opencode.js';
+import { mtimeOf } from './transcripts/util.js';
+export const HARNESSES = ['claude-code', 'codex', 'opencode', 'gemini-cli', 'cursor'];
+const SOURCES = {
+    'claude-code': claudeSource,
+    codex: codexSource,
+    opencode: opencodeSource,
+    'gemini-cli': geminiSource,
+    cursor: cursorSource,
+};
+const DEBOUNCE_MS = 120_000;
+const FIRST_SWEEP_MS = 14 * 24 * 60 * 60_000;
+const SWEEP_CAP = 50;
+const LOCK_STALE_MS = 10 * 60_000;
+// Hook events fire in bursts; a detached sync waits its turn instead of dropping.
+const LOCK_WAIT_MS = 30_000;
+const LOCK_POLL_MS = 300;
+const LOG_CAP_BYTES = 1024 * 1024;
+const MAX_FILE_BYTES = 1024 * 1024;
+const BINARY_SNIFF_BYTES = 8192;
+const MAX_PATHS_TOUCHED = 200;
+// A swept session untouched this long is treated as finished.
+const IDLE_MS = 30 * 60_000;
+function sha256(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+function toPosix(p) {
+    return p.split(sep).join('/');
+}
+function isInside(root, p) {
+    const rel = relative(root, p);
+    return rel !== '' && !rel.startsWith('..') && !isAbsolute(rel);
+}
+const MAX_REMOTE_CHARS = 500;
+// Worker paths allow only [A-Za-z0-9._-/] with no '..' or '//'. When cleaning
+// or truncating changes `rel`, a hash of the original keeps distinct files apart.
+export function safeRemote(prefix, rel) {
+    const clean = rel
+        .split('/')
+        .filter(Boolean)
+        .map((s) => s.replace(/[^A-Za-z0-9._-]/g, '-').replace(/\.{2,}/g, '.'))
+        .join('/');
+    const full = `${prefix}/${clean}`;
+    if (clean === rel && full.length <= MAX_REMOTE_CHARS)
+        return full;
+    const tag = `-${sha256(rel).slice(0, 8)}`;
+    const cut = full.slice(0, MAX_REMOTE_CHARS - tag.length);
+    const dot = cut.lastIndexOf('.');
+    const at = dot > cut.lastIndexOf('/') + 1 ? dot : cut.length;
+    return `${cut.slice(0, at)}${tag}${cut.slice(at)}`;
+}
+async function realpathSafe(p) {
+    try {
+        return await fs.realpath(p);
+    }
+    catch {
+        return null;
+    }
+}
+// Only untracked, non-ignored files (or files outside any repo) may upload:
+// tracked files are already in git, and gitignored ones are where secrets live.
+// Fails closed: git also exits 128 for "dubious ownership" (WSL, bind mounts),
+// so only an explicit "not a git repository" counts as outside a repo.
+function gitState(file) {
+    return new Promise((done) => {
+        execFile('git', ['-C', dirname(file), 'status', '--porcelain', '--ignored', '--untracked-files=all', '--', basename(file)], { timeout: 2000, env: { ...process.env, LC_ALL: 'C' } }, (err, stdout, stderr) => {
+            if (err)
+                return done(/not a git repository/i.test(String(stderr)) ? 'no-repo' : 'skip');
+            done(stdout.startsWith('??') ? 'untracked' : 'skip');
+        });
+    });
+}
+async function readManifest(path) {
+    try {
+        const parsed = JSON.parse(await fs.readFile(path, 'utf8'));
+        return { scope: parsed.scope, sessions: parsed.sessions ?? {}, files: parsed.files ?? {}, last_sweep_at: parsed.last_sweep_at };
+    }
+    catch {
+        return { sessions: {}, files: {} };
+    }
+}
+async function writeManifest(path, m) {
+    const tmp = `${path}.${process.pid}.tmp`;
+    await fs.writeFile(tmp, JSON.stringify(m), { encoding: 'utf8', mode: 0o600 });
+    await fs.rename(tmp, path);
+}
+async function acquireLock(path, waitMs) {
+    const deadline = Date.now() + waitMs;
+    for (;;) {
+        try {
+            const handle = await fs.open(path, 'wx', 0o600);
+            await handle.writeFile(String(process.pid));
+            await handle.close();
+            return true;
+        }
+        catch (err) {
+            if (err.code !== 'EEXIST')
+                throw err;
+            const st = await fs.stat(path).catch(() => null);
+            if (!st)
+                continue;
+            if (Date.now() - st.mtimeMs >= LOCK_STALE_MS) {
+                await fs.rm(path, { force: true });
+                continue;
+            }
+            if (Date.now() >= deadline)
+                return false;
+            await new Promise((r) => setTimeout(r, LOCK_POLL_MS));
+        }
+    }
+}
+function makeLogger(quiet, dir) {
+    if (!quiet)
+        return async (msg) => void process.stdout.write(`${msg}\n`);
+    const path = join(dir, 'sync.log');
+    return async (msg) => {
+        try {
+            const st = await fs.stat(path).catch(() => null);
+            const line = `${new Date().toISOString()} ${msg}\n`;
+            if (st && st.size > LOG_CAP_BYTES)
+                await fs.writeFile(path, line, { mode: 0o600 });
+            else
+                await fs.appendFile(path, line, { mode: 0o600 });
+        }
+        catch {
+            // Logging must never break a hook-spawned sync.
+        }
+    };
+}
+function defaultClient(cfg, harness) {
+    return new CliApiClient({ baseUrl: cfg.api_url, apiKey: cfg.api_key, agentPlatform: harness, agentRole: cfg.agent_role });
+}
+// shortcut: no trailing-edge debounce; the last turn of a session without an end hook syncs on the next sweep from any harness.
+export async function runSync(opts = {}) {
+    const result = { synced: [], unchanged: 0, debounced: 0, failed: 0, perHarness: {} };
+    const dir = opts.configDir ?? defaultConfigDir();
+    const home = opts.home ?? homedir();
+    const now = opts.now ?? Date.now();
+    const dryRun = !!opts.dryRun;
+    const log = makeLogger(!!opts.quiet, dir);
+    const sources = { ...SOURCES, ...opts.sources };
+    const cfg = await readConfig(join(dir, 'config.json'));
+    if (!dryRun && !cfg?.api_key) {
+        await log('sync skipped: not logged in');
+        return { ...result, skipped: 'not-logged-in' };
+    }
+    const captureTranscripts = dryRun || !!cfg?.preferences?.capture_transcripts;
+    const captureArtifacts = dryRun || !!cfg?.preferences?.capture_artifacts;
+    if (!captureTranscripts && !captureArtifacts)
+        return { ...result, skipped: 'capture-off' };
+    const lockPath = join(dir, 'sync.lock');
+    if (!dryRun)
+        await fs.mkdir(dir, { recursive: true, mode: 0o700 });
+    if (!dryRun && !(await acquireLock(lockPath, opts.lockWaitMs ?? LOCK_WAIT_MS))) {
+        await log('sync skipped: another sync holds the lock');
+        return { ...result, skipped: 'locked' };
+    }
+    const manifestPath = join(dir, 'sync.manifest.json');
+    let manifest = await readManifest(manifestPath);
+    try {
+        let workspaceId;
+        if (!dryRun) {
+            workspaceId = cfg.default_workspace;
+            if (!workspaceId) {
+                const list = await (opts.clientFor ?? defaultClient)(cfg, opts.harness ?? HARNESSES[0]).listWorkspaces();
+                if (list.length === 1)
+                    workspaceId = list[0].id;
+                else {
+                    await log(`sync skipped: ${list.length} workspaces and no default_workspace set`);
+                    return { ...result, skipped: 'no-workspace' };
+                }
+            }
+            // Synced state and file ids only hold for the account, workspace and
+            // privacy mode (which changes project keys) they were written under; any
+            // switch starts over like a first sweep.
+            const scope = sha256(`${cfg.api_url}\n${cfg.api_key}\n${workspaceId}\n${!!cfg.preferences?.private_workspace}`);
+            if (manifest.scope !== scope)
+                manifest = { scope, sessions: {}, files: {} };
+        }
+        const candidates = [];
+        const named = !!opts.harness && !!(opts.session || opts.transcript);
+        if (named) {
+            const entry = await locate(sources[opts.harness], opts, home, dir);
+            if (entry)
+                candidates.push({ harness: opts.harness, entry, explicit: true });
+            else
+                await log(`${opts.harness} session ${opts.session ?? opts.transcript} not found`);
+        }
+        const sweep = !named || !!opts.all || !!opts.start || !!opts.force || !manifest.last_sweep_at || now - manifest.last_sweep_at > DEBOUNCE_MS;
+        let deferredMin;
+        const defer = (e) => {
+            deferredMin = Math.min(deferredMin ?? Infinity, e.mtime.getTime());
+        };
+        if (sweep) {
+            const since = opts.all ? undefined : new Date(manifest.last_sweep_at ?? now - FIRST_SWEEP_MS);
+            const found = [];
+            for (const harness of opts.harness && !named ? [opts.harness] : HARNESSES) {
+                let entries;
+                try {
+                    entries = await sources[harness].enumerate({ home, since, configDir: dir, cwd: opts.cwd ?? process.cwd() });
+                }
+                catch (err) {
+                    await log(`${harness} enumerate failed: ${err instanceof Error ? err.message : String(err)}`);
+                    continue;
+                }
+                for (const entry of entries) {
+                    if (candidates.some((c) => c.harness === harness && c.entry.sessionId === entry.sessionId))
+                        continue;
+                    const prev = manifest.sessions[sessionRunId(harness, entry.sessionId)];
+                    if (prev && prev.synced_at >= entry.mtime.getTime())
+                        continue;
+                    found.push({ harness, entry, explicit: false });
+                }
+            }
+            // Sessions with no end event (OpenCode always, or a killed agent) never
+            // change again, so a stale in_progress entry is revisited to finalize it.
+            for (const [runId, rec] of Object.entries(manifest.sessions)) {
+                if (rec.status !== 'in_progress' || !rec.harness || !rec.path || now - rec.synced_at < DEBOUNCE_MS)
+                    continue;
+                if (opts.harness && !named && rec.harness !== opts.harness)
+                    continue;
+                const sessionId = runId.slice(rec.harness.length + 1);
+                const seen = (c) => c.harness === rec.harness && c.entry.sessionId === sessionId;
+                if (candidates.some(seen) || found.some(seen))
+                    continue;
+                const mtime = (await mtimeOf(rec.path)) ?? (rec.mtime ? new Date(rec.mtime) : null);
+                if (!mtime || now - mtime.getTime() <= IDLE_MS)
+                    continue;
+                found.push({ harness: rec.harness, entry: { sessionId, path: rec.path, mtime, cwd: rec.cwd }, explicit: false });
+            }
+            found.sort((a, b) => a.entry.mtime.getTime() - b.entry.mtime.getTime());
+            for (const c of found.slice(SWEEP_CAP))
+                defer(c.entry);
+            candidates.push(...found.slice(0, SWEEP_CAP));
+        }
+        const ctx = {
+            opts,
+            cfg: cfg,
+            manifest,
+            sources,
+            workspaceId,
+            now,
+            dryRun,
+            captureTranscripts,
+            captureArtifacts,
+            realHome: (await realpathSafe(home)) ?? home,
+            cwdRules: new Map(),
+            sessionCwds: await readSessionCwds(dir),
+            log,
+        };
+        for (const c of candidates) {
+            try {
+                const outcome = await syncSession(ctx, c, result);
+                if (outcome === 'debounced') {
+                    result.debounced++;
+                    defer(c.entry);
+                }
+                else if (outcome === 'unchanged') {
+                    result.unchanged++;
+                }
+            }
+            catch (err) {
+                result.failed++;
+                defer(c.entry);
+                await log(`${c.harness} ${c.entry.sessionId} failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        if (sweep && !dryRun)
+            manifest.last_sweep_at = deferredMin === undefined ? now : Math.min(now, deferredMin - 1);
+        return result;
+    }
+    finally {
+        if (!dryRun) {
+            await writeManifest(manifestPath, manifest).catch(() => undefined);
+            await fs.rm(lockPath, { force: true });
+        }
+    }
+}
+async function locate(source, opts, home, dir) {
+    if (opts.transcript) {
+        const mtime = await mtimeOf(opts.transcript);
+        if (!mtime)
+            return null;
+        const sessionId = opts.session ?? basename(opts.transcript).replace(/\.jsonl?(\.zst)?$/, '');
+        return { sessionId, path: opts.transcript, mtime, cwd: opts.cwd };
+    }
+    const entries = await source.enumerate({ home, configDir: dir, cwd: opts.cwd });
+    const hit = entries.find((e) => e.sessionId === opts.session);
+    return hit ? { ...hit, cwd: hit.cwd ?? opts.cwd } : null;
+}
+const homeRules = compileRules(DEFAULT_DENY);
+async function syncSession(ctx, c, result) {
+    const { opts, manifest, now } = ctx;
+    if (!opts.force && now - (manifest.sessions[sessionRunId(c.harness, c.entry.sessionId)]?.synced_at ?? 0) < DEBOUNCE_MS) {
+        return 'debounced';
+    }
+    const doc = await ctx.sources[c.harness].parseSession(c.entry);
+    if (!doc)
+        return 'empty';
+    const stats = (result.perHarness[c.harness] ??= { parsed: 0, files: 0 });
+    stats.parsed++;
+    const sessionId = doc.entry.sessionId;
+    const runId = sessionRunId(c.harness, sessionId);
+    const prev = manifest.sessions[runId];
+    const cwd = doc.cwd ?? prev?.cwd ?? ctx.sessionCwds[runId];
+    const privateWorkspace = !!ctx.cfg?.preferences?.private_workspace;
+    const project = cwd ? scopeProjectKey(projectKeyFor(cwd), privateWorkspace) : prev?.project ?? scopeProjectKey('local__unknown', privateWorkspace);
+    const status = c.explicit
+        ? opts.force ? 'success' : 'in_progress'
+        : now - doc.entry.mtime.getTime() > IDLE_MS ? 'success' : 'in_progress';
+    const absPaths = [...new Set(doc.filesTouched.map((p) => (isAbsolute(p) ? p : cwd ? resolve(cwd, p) : null)).filter((p) => !!p))];
+    const display = (abs) => (cwd && isInside(cwd, abs) ? toPosix(relative(cwd, abs)) : abs);
+    const pathsTouched = absPaths.map(display);
+    const updatedAt = [...doc.turns].reverse().find((t) => t.ts)?.ts ?? doc.entry.mtime.toISOString();
+    const lastTurnAt = Date.parse(updatedAt);
+    const lastActivityAt = Number.isFinite(lastTurnAt) ? lastTurnAt : doc.entry.mtime.getTime();
+    const markdown = renderSession({
+        harness: c.harness,
+        sessionId,
+        project,
+        cwd,
+        title: doc.title,
+        updatedAt,
+        turns: doc.turns,
+        filesTouched: pathsTouched,
+    });
+    const hash = sha256(markdown);
+    if (prev && prev.hash === hash && prev.status === status)
+        return 'unchanged';
+    const encrypt = !ctx.dryRun && privateWorkspace;
+    const seal = async (text) => {
+        const { redacted, hits } = redact(text);
+        return { body: encrypt ? await encryptContentAsync(ctx.cfg.api_key, redacted) : redacted, tag: summarizeHits(hits) };
+    };
+    const client = ctx.dryRun ? null : (opts.clientFor ?? defaultClient)(ctx.cfg, c.harness);
+    let transcriptPath;
+    if (ctx.captureTranscripts) {
+        transcriptPath = sessionPath(project, c.harness, sessionId);
+        if (client && prev?.hash !== hash) {
+            const { body, tag } = await seal(markdown);
+            await client.writeFile(ctx.workspaceId, transcriptPath, body, `session sync (${tag})`);
+        }
+    }
+    const artifactIds = [];
+    let wouldUpload = 0;
+    if (ctx.captureArtifacts) {
+        const realCwd = cwd ? await realpathSafe(cwd) : null;
+        for (const abs of absPaths) {
+            const real = await realpathSafe(abs);
+            if (!real || shouldIgnore(ctx.realHome, real, homeRules))
+                continue;
+            const inCwd = !!realCwd && isInside(realCwd, real);
+            if (inCwd) {
+                let rules = ctx.cwdRules.get(realCwd);
+                if (!rules)
+                    ctx.cwdRules.set(realCwd, (rules = await loadRules(realCwd, ['.adriveignore'])));
+                if (shouldIgnore(realCwd, real, rules))
+                    continue;
+            }
+            const st = await fs.stat(real);
+            if (!st.isFile() || st.size > MAX_FILE_BYTES)
+                continue;
+            if ((await gitState(real)) === 'skip')
+                continue;
+            const buf = await fs.readFile(real);
+            if (buf.subarray(0, BINARY_SNIFF_BYTES).includes(0))
+                continue;
+            const fileHash = sha256(buf);
+            const known = manifest.files[real];
+            if (known?.hash === fileHash) {
+                artifactIds.push(known.id);
+                continue;
+            }
+            const rel = inCwd ? toPosix(relative(realCwd, real)) : `_external/${sha256(real).slice(0, 8)}-${basename(real)}`;
+            // Content is sealed in a private workspace, but a path would still name the file.
+            const remote = privateWorkspace ? `sessions/${project}/files/${sha256(rel).slice(0, 16)}` : safeRemote(`sessions/${project}/files`, rel);
+            if (!client) {
+                wouldUpload++;
+                continue;
+            }
+            const { body, tag } = await seal(buf.toString('utf8'));
+            const res = await client.writeFile(ctx.workspaceId, remote, body, `session artifact from ${c.harness} (${tag})`);
+            manifest.files[real] = { hash: fileHash, id: res.id };
+            artifactIds.push(res.id);
+        }
+    }
+    stats.files += client ? artifactIds.length : wouldUpload;
+    if (client) {
+        // Run metadata is plaintext, so a private workspace keeps the title, cwd and
+        // paths out of it entirely; otherwise the title is redacted before it leaves.
+        const title = doc.title && !encrypt ? redact(doc.title).redacted : undefined;
+        await client.logRun({
+            run_id: runId,
+            task: title || (encrypt ? 'Private session' : 'Untitled session'),
+            status,
+            workspace_id: ctx.workspaceId,
+            artifacts_produced: artifactIds,
+            metadata: {
+                project,
+                cwd: encrypt ? undefined : cwd,
+                title,
+                transcript_path: transcriptPath,
+                files_uploaded: artifactIds.length,
+                paths_touched: encrypt ? [] : pathsTouched.slice(0, MAX_PATHS_TOUCHED),
+                turns: doc.turns.length,
+                harness_session_id: sessionId,
+                last_activity_at: lastActivityAt,
+            },
+        });
+        manifest.sessions[runId] = { hash, status, synced_at: now, project, cwd, harness: c.harness, path: doc.entry.path, mtime: doc.entry.mtime.getTime() };
+    }
+    result.synced.push(runId);
+    await ctx.log(`${ctx.dryRun ? '[dry] ' : ''}${runId}: ${doc.turns.length} turns, ${pathsTouched.length} paths touched, ` +
+        `${client ? artifactIds.length : wouldUpload} files ${client ? 'linked' : 'would upload'} -> ${project}`);
+    return 'synced';
+}

package/dist/lib/transcripts/claude.js

@@ -0,0 +1,86 @@
+import { promises as fs } from 'node:fs';
+import { join } from 'node:path';
+import { DocBuilder, asObj, asStr, jsonLines, mtimeOf, readText, toolSummary } from './util.js';
+// Claude Code: ~/.claude/projects/<encoded-cwd>/<session-id>.jsonl. Lines of
+// type user|assistant carry `message.content` (string or parts: text,
+// tool_use, tool_result) plus `cwd` and `timestamp`.
+const FILE_TOOLS = {
+    Write: 'file_path',
+    Edit: 'file_path',
+    MultiEdit: 'file_path',
+    NotebookEdit: 'notebook_path',
+};
+export const claudeSource = {
+    platform: 'claude-code',
+    async enumerate({ home, since }) {
+        const projectsDir = join(home, '.claude', 'projects');
+        let projects;
+        try {
+            projects = await fs.readdir(projectsDir);
+        }
+        catch {
+            return [];
+        }
+        const out = [];
+        for (const p of projects) {
+            let files;
+            try {
+                files = await fs.readdir(join(projectsDir, p));
+            }
+            catch {
+                continue;
+            }
+            for (const f of files) {
+                if (!f.endsWith('.jsonl'))
+                    continue;
+                const path = join(projectsDir, p, f);
+                const mtime = await mtimeOf(path);
+                if (!mtime || (since && mtime <= since))
+                    continue;
+                out.push({ sessionId: f.slice(0, -'.jsonl'.length), path, mtime });
+            }
+        }
+        return out.sort((a, b) => b.mtime.getTime() - a.mtime.getTime());
+    },
+    async parseSession(entry) {
+        const raw = await readText(entry.path);
+        if (raw === null)
+            return null;
+        const doc = new DocBuilder();
+        let cwd;
+        for (const obj of jsonLines(raw)) {
+            cwd ??= asStr(obj.cwd);
+            if ((obj.type !== 'user' && obj.type !== 'assistant') || obj.isMeta)
+                continue;
+            const msg = asObj(obj.message);
+            if (!msg)
+                continue;
+            const role = asStr(msg.role) ?? String(obj.type);
+            let text = '';
+            const tools = [];
+            if (typeof msg.content === 'string') {
+                text = msg.content;
+            }
+            else if (Array.isArray(msg.content)) {
+                for (const part of msg.content) {
+                    const p = asObj(part);
+                    if (!p)
+                        continue;
+                    if (p.type === 'tool_use') {
+                        const name = asStr(p.name) ?? 'tool';
+                        const input = asObj(p.input);
+                        const pathKey = FILE_TOOLS[name];
+                        const path = pathKey ? asStr(input?.[pathKey]) : undefined;
+                        doc.touch(path);
+                        tools.push(path ? { name, path } : { name, summary: toolSummary(input) });
+                    }
+                    else if (typeof p.text === 'string' && p.type !== 'tool_result') {
+                        text += p.text;
+                    }
+                }
+            }
+            doc.addTurn(role, text, asStr(obj.timestamp), tools);
+        }
+        return doc.build(entry, cwd);
+    },
+};

package/dist/lib/transcripts/codex.js

@@ -0,0 +1,130 @@
+import { promises as fs } from 'node:fs';
+import { join } from 'node:path';
+import { DocBuilder, asObj, asStr, jsonLines, mtimeOf, patchPaths, readText, toolSummary } from './util.js';
+// Codex CLI: ~/.codex/sessions/YYYY/MM/DD/rollout-<ts>-<uuid>.jsonl, with
+// older rollouts zstd-compressed to .jsonl.zst. Lines are
+// `{ timestamp, type, payload }`: session_meta (id, cwd), response_item
+// (message | function_call | custom_tool_call), and event_msg
+// item_completed whose FileChange item is the 0.160 file-edit signal. The
+// format shifts between CLI versions, so unknown records are ignored.
+const ROLLOUT_RE = /^rollout-.+-([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl(?:\.zst)?$/i;
+// Codex injects environment/instruction dumps as user messages; a part that
+// is one whole <tag>...</tag> block is harness boilerplate, not the user.
+const BOILERPLATE_RE = /^\s*(?:<([a-z][\w-]*)[\s>][\s\S]*<\/\1>\s*$|# AGENTS\.md instructions)/i;
+async function readdirSafe(dir) {
+    try {
+        return await fs.readdir(dir);
+    }
+    catch {
+        return [];
+    }
+}
+async function walkRollouts(root) {
+    const acc = [];
+    for (const y of await readdirSafe(root)) {
+        for (const m of await readdirSafe(join(root, y))) {
+            for (const d of await readdirSafe(join(root, y, m))) {
+                const dir = join(root, y, m, d);
+                for (const f of await readdirSafe(dir)) {
+                    if (ROLLOUT_RE.test(f))
+                        acc.push(join(dir, f));
+                }
+            }
+        }
+    }
+    return acc;
+}
+function parseArgs(raw) {
+    if (typeof raw !== 'string')
+        return raw;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+}
+export const codexSource = {
+    platform: 'codex',
+    async enumerate({ home, since }) {
+        const byId = new Map();
+        for (const path of await walkRollouts(join(home, '.codex', 'sessions'))) {
+            const mtime = await mtimeOf(path);
+            if (!mtime || (since && mtime <= since))
+                continue;
+            const sessionId = ROLLOUT_RE.exec(path.split('/').pop())[1];
+            const prev = byId.get(sessionId);
+            if (!prev || prev.mtime < mtime)
+                byId.set(sessionId, { sessionId, path, mtime });
+        }
+        return [...byId.values()].sort((a, b) => b.mtime.getTime() - a.mtime.getTime());
+    },
+    async parseSession(entry) {
+        const raw = await readText(entry.path);
+        if (raw === null)
+            return null;
+        const doc = new DocBuilder();
+        let cwd;
+        let metaId;
+        for (const obj of jsonLines(raw)) {
+            const ts = asStr(obj.timestamp);
+            const payload = asObj(obj.payload) ?? {};
+            // Forked rollouts repeat their parents' session_meta after their own.
+            if (obj.type === 'session_meta') {
+                cwd ??= asStr(payload.cwd);
+                metaId ??= asStr(payload.id);
+                continue;
+            }
+            if (obj.type === 'event_msg' && payload.type === 'item_completed') {
+                const item = asObj(payload.item);
+                const changes = item?.type === 'FileChange' ? asObj(item.changes) : undefined;
+                if (changes) {
+                    const tools = Object.keys(changes).map((path) => {
+                        doc.touch(path);
+                        return { name: `file_${asStr(asObj(changes[path])?.type) ?? 'change'}`, path };
+                    });
+                    doc.addTurn('assistant', '', ts, tools);
+                }
+                continue;
+            }
+            if (obj.type !== 'response_item' && obj.type !== 'turn')
+                continue;
+            if (payload.type === 'function_call') {
+                doc.addTurn('assistant', '', ts, [{ name: asStr(payload.name) ?? 'tool', summary: toolSummary(parseArgs(payload.arguments)) }]);
+                continue;
+            }
+            if (payload.type === 'custom_tool_call') {
+                const name = asStr(payload.name) ?? 'tool';
+                const input = asStr(payload.input) ?? '';
+                if (name === 'apply_patch') {
+                    const paths = patchPaths(input);
+                    for (const p of paths)
+                        doc.touch(p);
+                    doc.addTurn('assistant', '', ts, paths.map((path) => ({ name, path })));
+                }
+                else {
+                    doc.addTurn('assistant', '', ts, [{ name, summary: toolSummary(input) }]);
+                }
+                continue;
+            }
+            const role = asStr(payload.role);
+            if (role !== 'user' && role !== 'assistant')
+                continue;
+            if (payload.type !== 'message' && obj.type !== 'turn')
+                continue;
+            let text = '';
+            if (typeof payload.content === 'string') {
+                text = BOILERPLATE_RE.test(payload.content) ? '' : payload.content;
+            }
+            else if (Array.isArray(payload.content)) {
+                for (const part of payload.content) {
+                    const t = asStr(asObj(part)?.text);
+                    if (t && !BOILERPLATE_RE.test(t))
+                        text += t;
+                }
+            }
+            doc.addTurn(role, text, ts);
+        }
+        return doc.build(metaId ? { ...entry, sessionId: metaId } : entry, cwd);
+    },
+};