@aexol/spectral 0.9.243 → 0.9.244

package/dist/relay/rest.d.ts

@@ -2,7 +2,7 @@
  * Relay REST request handler (CLI side).
  *
  * Translates an inbound `RestRequestFrame` into a `dispatchRoute` call and
- * maps handler errors to status codes (400/404/500). Errors thrown by
+ * maps handler errors to status codes (400/404/409/500). Errors thrown by
  * handlers are returned in the body, never re-thrown — the backend has a
  * 30 s pending-request timeout and we want every request to terminate with
  * a wire response so the browser doesn't sit on a stale spinner.
@@ -22,6 +22,7 @@ import { type RestRequestDeps } from "./routing.js";
  *  - 400: `BadRequestError` thrown by handler, OR malformed body for a
  *         route that requires one, OR unknown route
  *  - 404: `NotFoundError` thrown by handler
+ *  - 409: `ConflictError` thrown by handler (e.g. mkdir on an existing path)
  *  - 405: route matches but method doesn't (returned as 404 since we don't
  *         distinguish — the matcher treats it as "no route", consistent
  *         with the original Hono router which also 404'd)

package/dist/relay/rest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../src/relay/rest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAA6B,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/E;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,iBAAiB,CAAC,CAoE5B"}
+{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../src/relay/rest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EAA6B,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/E;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,iBAAiB,CAAC,CA+E5B"}

package/dist/relay/rest.js

@@ -2,7 +2,7 @@
  * Relay REST request handler (CLI side).
  *
  * Translates an inbound `RestRequestFrame` into a `dispatchRoute` call and
- * maps handler errors to status codes (400/404/500). Errors thrown by
+ * maps handler errors to status codes (400/404/409/500). Errors thrown by
  * handlers are returned in the body, never re-thrown — the backend has a
  * 30 s pending-request timeout and we want every request to terminate with
  * a wire response so the browser doesn't sit on a stale spinner.
@@ -10,7 +10,7 @@
  * Extracted from `relay/dispatcher.ts` — the dispatcher re-exports
  * `handleRestRequest` so existing imports keep working.
  */
-import { BadRequestError, NotFoundError } from "../server/handlers/errors.js";
+import { BadRequestError, ConflictError, NotFoundError, } from "../server/handlers/errors.js";
 import { dispatchRoute, matchRoute } from "./routing.js";
 /**
  * Dispatch a `rest_request` frame. Always resolves with a
@@ -22,6 +22,7 @@ import { dispatchRoute, matchRoute } from "./routing.js";
  *  - 400: `BadRequestError` thrown by handler, OR malformed body for a
  *         route that requires one, OR unknown route
  *  - 404: `NotFoundError` thrown by handler
+ *  - 409: `ConflictError` thrown by handler (e.g. mkdir on an existing path)
  *  - 405: route matches but method doesn't (returned as 404 since we don't
  *         distinguish — the matcher treats it as "no route", consistent
  *         with the original Hono router which also 404'd)
@@ -71,6 +72,15 @@ export async function handleRestRequest(frame, deps) {
                 body: { error: err.message, code: err.code },
             };
         }
+        if (err instanceof ConflictError) {
+            logger.info?.(`[rest] finish machineId=${frame.machineId} method=${method} path=${path} reqId=${reqId} status=409 durationMs=${Math.round(performance.now() - startedAt)}`);
+            return {
+                kind: "rest_response",
+                reqId,
+                status: 409,
+                body: { error: err.message, code: err.code },
+            };
+        }
         // Unexpected — log locally so operators can correlate, but only
         // return a sanitized message to the caller.
         logger.error?.(`[dispatcher] unexpected error in ${method} ${path}:`, err);

package/dist/relay/routing.d.ts

@@ -20,7 +20,7 @@ import { type WizardLoginResult } from "./wizard-login.js";
  * `id` is populated when the route had an `:id` placeholder.
  */
 interface RouteMatch {
-    route: "list_projects" | "create_project" | "update_project" | "delete_project" | "bind_studio" | "unbind_studio" | "get_project_observations" | "list_project_sessions" | "cleanup_project_sessions" | "cleanup_all_sessions" | "create_session" | "get_session" | "get_session_active_agent" | "update_session_active_agent" | "get_session_messages" | "update_session" | "delete_session" | "get_session_memory" | "get_session_memory_details" | "compact_session" | "remember_and_delete_session" | "fork_session" | "list_path_autocomplete" | "list_directory" | "get_home_directory" | "search_project_files" | "enqueue_prompt" | "get_prompt_queue" | "remove_prompt" | "clear_prompt_queue" | "list_mcp_status" | "reload_mcp_config" | "refresh_native_extensions" | "refresh_cloud_agents" | "get_settings" | "put_settings" | "get_agent_settings" | "put_agent_settings" | "get_prompt_mutation_settings" | "put_prompt_mutation_settings" | "wizard_login" | "list_agents" | "list_dev_processes" | "start_dev_process" | "kill_dev_process" | "restart_dev_process" | "scan_dev_servers" | "kill_dev_server";
+    route: "list_projects" | "create_project" | "update_project" | "delete_project" | "bind_studio" | "unbind_studio" | "get_project_observations" | "list_project_sessions" | "cleanup_project_sessions" | "cleanup_all_sessions" | "create_session" | "get_session" | "get_session_active_agent" | "update_session_active_agent" | "get_session_messages" | "update_session" | "delete_session" | "get_session_memory" | "get_session_memory_details" | "compact_session" | "remember_and_delete_session" | "fork_session" | "list_path_autocomplete" | "list_directory" | "get_home_directory" | "create_directory" | "search_project_files" | "enqueue_prompt" | "get_prompt_queue" | "remove_prompt" | "clear_prompt_queue" | "list_mcp_status" | "reload_mcp_config" | "refresh_native_extensions" | "refresh_cloud_agents" | "get_settings" | "put_settings" | "get_agent_settings" | "put_agent_settings" | "get_prompt_mutation_settings" | "put_prompt_mutation_settings" | "wizard_login" | "list_agents" | "list_dev_processes" | "start_dev_process" | "kill_dev_process" | "restart_dev_process" | "scan_dev_servers" | "kill_dev_server";
     id?: string;
     /** Parsed query params, if the path carried a `?...` suffix. */
     query?: URLSearchParams;

package/dist/relay/routing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/relay/routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAKvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAkDzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AASzD,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAM7E;;;GAGG;AACH,UAAU,UAAU;IAClB,KAAK,EACD,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,0BAA0B,GAC1B,uBAAuB,GACvB,0BAA0B,GAC1B,sBAAsB,GACtB,gBAAgB,GAChB,aAAa,GACb,0BAA0B,GAC1B,6BAA6B,GAC7B,sBAAsB,GACtB,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,4BAA4B,GAC5B,iBAAiB,GACjB,6BAA6B,GAC7B,cAAc,GACd,wBAAwB,GACxB,gBAAgB,GAChB,oBAAoB,GACpB,sBAAsB,GACtB,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,GACnB,2BAA2B,GAC3B,sBAAsB,GACtB,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,8BAA8B,GAC9B,8BAA8B,GAC9B,cAAc,GACd,aAAa,GACb,oBAAoB,GACpB,mBAAmB,GACnB,kBAAkB,GAClB,qBAAqB,GACrB,kBAAkB,GAClB,iBAAiB,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,UAAU,GAAG,IAAI,CAuPnB;AAMD;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,6FAA6F;IAC7F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uGAAuG;IACvG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;KACrC,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,OAAO,CAAC,CA6YlB"}
+{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/relay/routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAKvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAmDzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AASzD,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAM7E;;;GAGG;AACH,UAAU,UAAU;IAClB,KAAK,EACD,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,0BAA0B,GAC1B,uBAAuB,GACvB,0BAA0B,GAC1B,sBAAsB,GACtB,gBAAgB,GAChB,aAAa,GACb,0BAA0B,GAC1B,6BAA6B,GAC7B,sBAAsB,GACtB,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,4BAA4B,GAC5B,iBAAiB,GACjB,6BAA6B,GAC7B,cAAc,GACd,wBAAwB,GACxB,gBAAgB,GAChB,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,GACnB,2BAA2B,GAC3B,sBAAsB,GACtB,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,8BAA8B,GAC9B,8BAA8B,GAC9B,cAAc,GACd,aAAa,GACb,oBAAoB,GACpB,mBAAmB,GACnB,kBAAkB,GAClB,qBAAqB,GACrB,kBAAkB,GAClB,iBAAiB,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,UAAU,GAAG,IAAI,CA6PnB;AAMD;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,6FAA6F;IAC7F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uGAAuG;IACvG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;KACrC,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,OAAO,CAAC,CAgZlB"}

package/dist/relay/routing.js

@@ -16,6 +16,7 @@ import { handleReloadMcpConfig } from "../server/handlers/mcp-reload.js";
 import { handlePathAutocomplete } from "../server/handlers/paths-autocomplete.js";
 import { handleGetHomeDirectory } from "../server/handlers/paths-home.js";
 import { handleListDirectory } from "../server/handlers/paths-list.js";
+import { handleCreateDirectory } from "../server/handlers/paths-mkdir.js";
 import { handleSearchProjectFiles } from "../server/handlers/files-search.js";
 import { handleBindStudioProject, handleUnbindStudioProject, handleCleanupProjectSessions, handleCreateProject, handleDeleteProject, handleGetProjectObservations, handleListProjectsAsync, handleListSessionsByProjectAsync, handleUpdateProject, } from "../server/handlers/projects.js";
 import { handleCompactSession, handleCleanupAllSessions, handleCreateSession, handleDeleteSession, handleForkSession, handleRememberAndDeleteSession, handleGetSessionDetailAsync, handleGetSessionMessagesAsync, handleGetSessionMemoryDetails, handleGetSessionMemoryStatus, handleUpdateSession, handleGetSessionActiveAgentAsync, handleUpdateSessionActiveAgentAsync, } from "../server/handlers/sessions.js";
@@ -110,6 +111,12 @@ export function matchRoute(method, path) {
             return { route: "get_home_directory" };
         return null;
     }
+    // /api/paths/mkdir
+    if (cleanPath === "/api/paths/mkdir") {
+        if (method === "POST")
+            return { route: "create_directory" };
+        return null;
+    }
     // /api/projects
     if (cleanPath === "/api/projects") {
         if (method === "GET")
@@ -553,6 +560,8 @@ export async function dispatchRoute(match, body, deps) {
             return await handleListDirectory(asObject(body));
         case "get_home_directory":
             return handleGetHomeDirectory();
+        case "create_directory":
+            return await handleCreateDirectory(asObject(body));
         case "search_project_files": {
             const searchQuery = match.query?.get("query") ?? "";
             return handleSearchProjectFiles(store, id, searchQuery);

package/dist/server/handlers/errors.d.ts

@@ -1,18 +1,18 @@
 /**
  * Typed errors thrown by REST handlers.
  *
- * Each error carries a stable `code` that the relay envelope dispatcher
- * (Batch 3) maps to a wire-level status. Until then, the handlers throw
- * and the relay loop just acks — Batch 3 will catch and translate.
+ * Each error carries a stable `code` that the relay REST loop
+ * (`cli-node/src/relay/rest.ts`) catches and maps to a wire-level status
+ * (400/404/409/500) in the `rest_response` envelope.
  *
  * Why typed errors instead of returning `{ ok: false, code }` discriminated
  * unions? Two reasons:
  *  - The handlers are also called directly from unit tests; `throw` lets
  *    tests use `expect(...).rejects.toThrow(NotFoundError)` ergonomically.
- *  - The Batch 3 dispatcher needs a single `try/catch` boundary; a sum
- *    type per handler would force every handler to return its own variant.
+ *  - The relay REST loop needs a single `try/catch` boundary; a sum type
+ *    per handler would force every handler to return its own variant.
  */
-export type HandlerErrorCode = "BAD_REQUEST" | "NOT_FOUND";
+export type HandlerErrorCode = "BAD_REQUEST" | "NOT_FOUND" | "CONFLICT";
 export declare class HandlerError extends Error {
     readonly code: HandlerErrorCode;
     constructor(code: HandlerErrorCode, message: string);
@@ -23,4 +23,7 @@ export declare class BadRequestError extends HandlerError {
 export declare class NotFoundError extends HandlerError {
     constructor(message: string);
 }
+export declare class ConflictError extends HandlerError {
+    constructor(message: string);
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/server/handlers/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,WAAW,CAAC;AAE3D,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;gBACpB,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM;CAKpD;AAED,qBAAa,eAAgB,SAAQ,YAAY;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,aAAc,SAAQ,YAAY;gBACjC,OAAO,EAAE,MAAM;CAI5B"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;AAExE,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;gBACpB,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM;CAKpD;AAED,qBAAa,eAAgB,SAAQ,YAAY;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,aAAc,SAAQ,YAAY;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,aAAc,SAAQ,YAAY;gBACjC,OAAO,EAAE,MAAM;CAI5B"}

package/dist/server/handlers/errors.js

@@ -1,16 +1,16 @@
 /**
  * Typed errors thrown by REST handlers.
  *
- * Each error carries a stable `code` that the relay envelope dispatcher
- * (Batch 3) maps to a wire-level status. Until then, the handlers throw
- * and the relay loop just acks — Batch 3 will catch and translate.
+ * Each error carries a stable `code` that the relay REST loop
+ * (`cli-node/src/relay/rest.ts`) catches and maps to a wire-level status
+ * (400/404/409/500) in the `rest_response` envelope.
  *
  * Why typed errors instead of returning `{ ok: false, code }` discriminated
  * unions? Two reasons:
  *  - The handlers are also called directly from unit tests; `throw` lets
  *    tests use `expect(...).rejects.toThrow(NotFoundError)` ergonomically.
- *  - The Batch 3 dispatcher needs a single `try/catch` boundary; a sum
- *    type per handler would force every handler to return its own variant.
+ *  - The relay REST loop needs a single `try/catch` boundary; a sum type
+ *    per handler would force every handler to return its own variant.
  */
 export class HandlerError extends Error {
     code;
@@ -32,3 +32,9 @@ export class NotFoundError extends HandlerError {
         this.name = "NotFoundError";
     }
 }
+export class ConflictError extends HandlerError {
+    constructor(message) {
+        super("CONFLICT", message);
+        this.name = "ConflictError";
+    }
+}

package/dist/server/handlers/paths-autocomplete.d.ts

@@ -16,8 +16,13 @@
  *      starts-with match so the user can filter siblings while typing.
  *
  * Dotfiles are excluded — they are rarely intentional project roots.
- * Symlinks to directories ARE included (readdirSync with withFileTypes
- * returns true for both real dirs and symlink dirs).
+ * Symlinks to directories are NOT included: `readdir(..., { withFileTypes })`
+ * reports `Dirent.isDirectory() === false` for symlinks (even when the
+ * symlink target is a directory), and the filter in collectSuggestions keeps
+ * only real directories. Note that strategy 1's `stat(expanded)` does follow
+ * symlinks, so a typed prefix that is itself a symlink to a directory still
+ * drills into it — but its symlinked children are filtered out of the
+ * suggestions.
  *
  * Thread-safety: called from the relay-dispatcher hot path, so filesystem
  * enumeration uses `node:fs/promises` and yields to the event loop rather

package/dist/server/handlers/paths-autocomplete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths-autocomplete.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/paths-autocomplete.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CA+BjC"}
+{"version":3,"file":"paths-autocomplete.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/paths-autocomplete.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAMH,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CA+BjC"}

package/dist/server/handlers/paths-autocomplete.js

@@ -16,8 +16,13 @@
  *      starts-with match so the user can filter siblings while typing.
  *
  * Dotfiles are excluded — they are rarely intentional project roots.
- * Symlinks to directories ARE included (readdirSync with withFileTypes
- * returns true for both real dirs and symlink dirs).
+ * Symlinks to directories are NOT included: `readdir(..., { withFileTypes })`
+ * reports `Dirent.isDirectory() === false` for symlinks (even when the
+ * symlink target is a directory), and the filter in collectSuggestions keeps
+ * only real directories. Note that strategy 1's `stat(expanded)` does follow
+ * symlinks, so a typed prefix that is itself a symlink to a directory still
+ * drills into it — but its symlinked children are filtered out of the
+ * suggestions.
  *
  * Thread-safety: called from the relay-dispatcher hot path, so filesystem
  * enumeration uses `node:fs/promises` and yields to the event loop rather

package/dist/server/handlers/paths-mkdir.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Create a directory inside an existing parent directory.
+ *
+ * Used by the directory picker in the browser/desktop wrapper so users can
+ * scaffold a project folder without leaving the "Select local folder" dialog.
+ * Mirrors `paths-list.ts`: same path resolution (`join` over the trimmed
+ * parent), same error mapping, and no path whitelist — auth lives on the
+ * backend WS relay + team ACL, not on the CLI transport.
+ */
+import type { DirectoryEntry } from "./paths-list.js";
+export interface CreateDirectoryResult {
+    entry: DirectoryEntry;
+}
+/**
+ * Validate a new directory name against the cross-platform rules shared
+ * with the picker UI. Returns a human-readable error message, or `null`
+ * when the name is valid.
+ */
+export declare function validateNewDirectoryName(name: string): string | null;
+/**
+ * Create `parent/name` and return its entry. The parent must already exist
+ * and be a directory; the target must not exist (`EEXIST` surfaces as a
+ * distinguishable "already exists" conflict).
+ */
+export declare function handleCreateDirectory(input: Record<string, unknown>): Promise<CreateDirectoryResult>;
+//# sourceMappingURL=paths-mkdir.d.ts.map

package/dist/server/handlers/paths-mkdir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths-mkdir.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/paths-mkdir.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,cAAc,CAAC;CACvB;AAgCD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA6BpE;AAQD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,qBAAqB,CAAC,CA0DhC"}

package/dist/server/handlers/paths-mkdir.js

@@ -0,0 +1,138 @@
+/**
+ * Create a directory inside an existing parent directory.
+ *
+ * Used by the directory picker in the browser/desktop wrapper so users can
+ * scaffold a project folder without leaving the "Select local folder" dialog.
+ * Mirrors `paths-list.ts`: same path resolution (`join` over the trimmed
+ * parent), same error mapping, and no path whitelist — auth lives on the
+ * backend WS relay + team ACL, not on the CLI transport.
+ */
+import { mkdir, stat } from "node:fs/promises";
+import { join } from "node:path";
+import { BadRequestError, ConflictError } from "./errors.js";
+/**
+ * Windows-reserved device names (matched case-insensitively). Creating a
+ * file with one of these names fails on Windows, so we reject up front to
+ * keep the picker's error surfaced where the user can fix it.
+ */
+const WINDOWS_RESERVED_NAMES = new Set([
+    "CON",
+    "PRN",
+    "AUX",
+    "NUL",
+    "COM1",
+    "COM2",
+    "COM3",
+    "COM4",
+    "COM5",
+    "COM6",
+    "COM7",
+    "COM8",
+    "COM9",
+    "LPT1",
+    "LPT2",
+    "LPT3",
+    "LPT4",
+    "LPT5",
+    "LPT6",
+    "LPT7",
+    "LPT8",
+    "LPT9",
+]);
+/**
+ * Validate a new directory name against the cross-platform rules shared
+ * with the picker UI. Returns a human-readable error message, or `null`
+ * when the name is valid.
+ */
+export function validateNewDirectoryName(name) {
+    if (name === "") {
+        return "name (string) is required";
+    }
+    if (name.includes("/") || name.includes("\\")) {
+        return "name must not contain path separators";
+    }
+    if (name === "." || name === "..") {
+        return `name must not be "${name}"`;
+    }
+    // Dotfiles are filtered from the picker's listings, so a folder whose
+    // name starts with "." would be created invisible — rejected to keep
+    // the contract explicit (mirrors the picker UI validator).
+    if (name.startsWith(".")) {
+        return "name must not start with a '.'";
+    }
+    if (/[<>:"|?*]/.test(name)) {
+        return "name must not contain any of the characters <>:\"|?*";
+    }
+    if (WINDOWS_RESERVED_NAMES.has(name.toUpperCase())) {
+        return `name is reserved on Windows: ${name}`;
+    }
+    if (/[. ]$/.test(name)) {
+        return "name must not end with a '.' or space";
+    }
+    if (Buffer.byteLength(name, "utf8") > 255) {
+        return "name must be at most 255 bytes";
+    }
+    return null;
+}
+function errCode(err) {
+    return err !== null && typeof err === "object" && "code" in err
+        ? err.code
+        : undefined;
+}
+/**
+ * Create `parent/name` and return its entry. The parent must already exist
+ * and be a directory; the target must not exist (`EEXIST` surfaces as a
+ * distinguishable "already exists" conflict).
+ */
+export async function handleCreateDirectory(input) {
+    const rawParent = input.parent;
+    if (typeof rawParent !== "string" || rawParent.trim() === "") {
+        throw new BadRequestError("parent (string) is required");
+    }
+    const parent = rawParent.trim();
+    const rawName = input.name;
+    if (typeof rawName !== "string") {
+        throw new BadRequestError("name (string) is required");
+    }
+    const nameError = validateNewDirectoryName(rawName);
+    if (nameError !== null) {
+        throw new BadRequestError(nameError);
+    }
+    // The parent must exist and be a directory (stat).
+    let parentStats;
+    try {
+        parentStats = await stat(parent);
+    }
+    catch (err) {
+        const code = errCode(err);
+        if (code === "ENOENT") {
+            throw new BadRequestError(`Parent directory does not exist: ${parent}`);
+        }
+        if (code === "EACCES" || code === "EPERM") {
+            throw new BadRequestError(`Permission denied: ${parent}`);
+        }
+        throw new BadRequestError(`Could not access parent directory: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!parentStats.isDirectory()) {
+        throw new BadRequestError(`Parent is not a directory: ${parent}`);
+    }
+    // Path resolved exactly like paths-list: `join` over the trimmed parent.
+    const targetPath = join(parent, rawName);
+    try {
+        await mkdir(targetPath);
+    }
+    catch (err) {
+        const code = errCode(err);
+        if (code === "EEXIST") {
+            throw new ConflictError(`Directory already exists: ${targetPath}`);
+        }
+        if (code === "ENOENT") {
+            throw new BadRequestError(`Parent directory does not exist: ${parent}`);
+        }
+        if (code === "EACCES" || code === "EPERM") {
+            throw new BadRequestError(`Permission denied: ${targetPath}`);
+        }
+        throw new BadRequestError(`Could not create directory: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    return { entry: { name: rawName, path: targetPath, isDirectory: true } };
+}

package/dist/server/handlers/sessions.d.ts

@@ -16,6 +16,7 @@ export type CompactSessionMode = "dcp-lite";
 export interface CreateSessionInputRaw {
     projectId?: unknown;
     title?: unknown;
+    history?: unknown;
 }
 export interface UpdateSessionInputRaw {
     title?: unknown;
@@ -39,6 +40,24 @@ export interface GetSessionMessagesInputRaw {
 export interface CompactSessionInputRaw {
     mode?: unknown;
 }
+export interface SessionHistoryMessage {
+    role: "user" | "assistant";
+    content: string;
+}
+/**
+ * Parse and validate the optional `history` body field.
+ *
+ * Contract:
+ *  - omitted/null → empty array (behavior unchanged)
+ *  - non-array → BadRequestError
+ *  - non-object items or non-string role/content → BadRequestError with a
+ *    per-field message (`history[i].role must be a string`)
+ *  - only "user"/"assistant" roles are kept; others are dropped
+ *  - image/attachment fields are stripped by construction — only role and
+ *    content are carried over
+ *  - clamped to 200 items / 20k chars per content / 150k chars total
+ */
+export declare function parseSessionHistory(history: unknown): SessionHistoryMessage[];
 export declare function parseCompactSessionMode(body: unknown): CompactSessionMode;
 export declare function handleCreateSession(store: SessionStore, body: CreateSessionInputRaw): WireSessionSummary;
 export declare function handleGetSessionDetail(store: SessionStore, id: string): WireSessionDetail;

package/dist/server/handlers/sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAK3H,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAE5C,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AACD,MAAM,WAAW,0BAA0B;IACzC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AACD,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAqBD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,GAAG,kBAAkB,CASzE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,qBAAqB,GAC1B,kBAAkB,CAQpB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,GACT,iBAAiB,CAWnB;AACD,+DAA+D;AAC/D,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AACD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,0BAA0B,GAChC,iBAAiB,CA0CnB;AAED,iEAAiE;AACjE,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,iBAAiB,CAAC,CA0C5B;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,kBAAkB,CAYpB;AACD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB;IAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAShC;AACD,oEAAoE;AACpE,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CASzC;AACD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,0BAA0B,EAChC,OAAO,CAAC,EAAE,oBAAoB,EAC9B,GAAG,CAAC,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB;IAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAkBhC;AAED,uEAAuE;AACvE,wBAAsB,mCAAmC,CACvD,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,0BAA0B,EAChC,OAAO,CAAC,EAAE,oBAAoB,EAC9B,GAAG,CAAC,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAezC;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAGzE;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,oFAAoF;IACpF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,0BAA0B,GAC/B,wBAAwB,CAY1B;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,oBAAoB,EAC7B,EAAE,EAAE,MAAM,GACT,uBAAuB,CAIzB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,oBAAoB,EAC7B,EAAE,EAAE,MAAM,GACT,wBAAwB,CAI1B;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,oBAAoB,EAC7B,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE,OAAO,GACb,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAevB;AAED;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,oBAAoB,EAC7B,EAAE,EAAE,MAAM,GACT,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAavB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACxB,kBAAkB,CAKpB"}
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAK3H,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAE5C,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AACD,MAAM,WAAW,0BAA0B;IACzC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AACD,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAeD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,qBAAqB,EAAE,CAkC7E;AAqBD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,GAAG,kBAAkB,CASzE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,qBAAqB,GAC1B,kBAAkB,CAiBpB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,GACT,iBAAiB,CAWnB;AACD,+DAA+D;AAC/D,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AACD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,0BAA0B,GAChC,iBAAiB,CA0CnB;AAED,iEAAiE;AACjE,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,iBAAiB,CAAC,CA0C5B;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,kBAAkB,CAYpB;AACD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB;IAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAShC;AACD,oEAAoE;AACpE,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,GAAG,CAAC,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CASzC;AACD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,0BAA0B,EAChC,OAAO,CAAC,EAAE,oBAAoB,EAC9B,GAAG,CAAC,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB;IAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAkBhC;AAED,uEAAuE;AACvE,wBAAsB,mCAAmC,CACvD,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,0BAA0B,EAChC,OAAO,CAAC,EAAE,oBAAoB,EAC9B,GAAG,CAAC,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAezC;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAGzE;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,oFAAoF;IACpF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,0BAA0B,GAC/B,wBAAwB,CAY1B;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,oBAAoB,EAC7B,EAAE,EAAE,MAAM,GACT,uBAAuB,CAIzB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,oBAAoB,EAC7B,EAAE,EAAE,MAAM,GACT,wBAAwB,CAI1B;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,oBAAoB,EAC7B,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE,OAAO,GACb,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAevB;AAED;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,oBAAoB,EAC7B,EAAE,EAAE,MAAM,GACT,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAavB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACxB,kBAAkB,CAKpB"}

package/dist/server/handlers/sessions.js

@@ -12,6 +12,65 @@
 import { projectHistoryForReplay } from "../../relay/history-projection.js";
 import { BadRequestError, NotFoundError } from "./errors.js";
 import { loadAgentSettings, loadAgentSettingsAsync } from "./agent-settings.js";
+// ----------------------------------------------------------------------
+// History seeding (POST /api/sessions `history` field)
+//
+// "Send as new subject": the caller may seed the new session with the past
+// session's message history so the agent bridge loads it on first subscribe
+// (SessionStreamManager.attachOnce reads the full store history to rehydrate
+// the LLM bridge). Caps mirror the backend planSubjectSession resolver.
+// ----------------------------------------------------------------------
+const MAX_HISTORY_ITEMS = 200;
+const MAX_HISTORY_CONTENT = 20_000;
+const MAX_HISTORY_TOTAL = 150_000;
+/**
+ * Parse and validate the optional `history` body field.
+ *
+ * Contract:
+ *  - omitted/null → empty array (behavior unchanged)
+ *  - non-array → BadRequestError
+ *  - non-object items or non-string role/content → BadRequestError with a
+ *    per-field message (`history[i].role must be a string`)
+ *  - only "user"/"assistant" roles are kept; others are dropped
+ *  - image/attachment fields are stripped by construction — only role and
+ *    content are carried over
+ *  - clamped to 200 items / 20k chars per content / 150k chars total
+ */
+export function parseSessionHistory(history) {
+    if (history === undefined || history === null)
+        return [];
+    if (!Array.isArray(history)) {
+        throw new BadRequestError("history (array of {role, content}) is optional when provided");
+    }
+    const out = [];
+    let total = 0;
+    for (let i = 0; i < history.length; i++) {
+        const item = history[i];
+        if (typeof item !== "object" || item === null || Array.isArray(item)) {
+            throw new BadRequestError(`history[${i}] must be an object with role and content`);
+        }
+        const { role, content } = item;
+        if (typeof role !== "string") {
+            throw new BadRequestError(`history[${i}].role must be a string`);
+        }
+        if (typeof content !== "string") {
+            throw new BadRequestError(`history[${i}].content must be a string`);
+        }
+        if (role !== "user" && role !== "assistant")
+            continue;
+        if (out.length >= MAX_HISTORY_ITEMS)
+            break;
+        const remaining = MAX_HISTORY_TOTAL - total;
+        if (remaining <= 0)
+            break;
+        total += content.length > remaining ? remaining : content.length;
+        out.push({
+            role,
+            content: content.slice(0, Math.min(MAX_HISTORY_CONTENT, remaining)),
+        });
+    }
+    return out;
+}
 function effectiveActiveAgent(stored, cwd, agentDir) {
     return stored ??
         loadAgentSettings(cwd ?? process.cwd(), agentDir).activePrimaryAgent;
@@ -42,7 +101,16 @@ export function handleCreateSession(store, body) {
     if (!project)
         throw new BadRequestError("Unknown projectId");
     const title = typeof body.title === "string" ? body.title : undefined;
-    return store.createSession({ projectId: body.projectId, title });
+    // Validate the history BEFORE creating the session so an invalid payload
+    // never leaves an empty orphan row behind.
+    const history = parseSessionHistory(body.history);
+    const summary = store.createSession({ projectId: body.projectId, title });
+    // Append the seeded history in order — the bridge loads store messages at
+    // first subscribe, so these must be written at creation time.
+    for (const msg of history) {
+        store.appendMessage(summary.id, { role: msg.role, content: msg.content });
+    }
+    return history.length > 0 ? { ...summary, messageCount: history.length } : summary;
 }
 export function handleGetSessionDetail(store, id) {
     const meta = store.getSessionMeta(id);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aexol/spectral",
-  "version": "0.9.243",
+  "version": "0.9.244",
   "description": "AI coding agent for Aexol with relay-based browser access.",
   "type": "module",
   "private": false,