@agimon-ai/po-core 0.0.0-alpha.2 → 0.0.0-alpha.21

package/dist/src/services/openSessionRegistry/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/openSessionRegistry/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nconst REGISTRY_FILE = 'open-sessions.json';\nconst DIRECTORY_MODE = 0o700;\nconst FILE_MODE = 0o600;\n/** The id becomes a journal filename, so it is constrained exactly as SQLite storage constrains it. */\nconst SESSION_ID_PATTERN = /^[A-Za-z0-9_-]+$/u;\n\n/** One cockpit session the server had open, enough to reopen its journal by id. */\nexport interface OpenSessionRecord {\n  sessionId: string;\n  workspaceId: string;\n  cwd: string;\n  /** Child checkout root, distinct from the parent grouping root for worktrees. */\n  repoRoot?: string;\n  /** Parent workspace path used only to restore the workspace identity. */\n  groupingRoot?: string;\n  name: string;\n  createdAt: string;\n  parentSessionId?: string;\n  sessionProvenance?: string;\n}\n\nexport interface OpenSessionRegistry {\n  list(): readonly OpenSessionRecord[];\n  /** True only after the record is durably published. */\n  add(record: OpenSessionRecord): boolean;\n  remove(sessionId: string): void;\n}\n\nexport interface OpenSessionRegistryOptions {\n  /** Directory holding the `sessions` journal folder, so the registry sits beside what it points at. */\n  directory: string;\n  onNotice?: (message: string) => void;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction optionalText(value: unknown): string | undefined {\n  return typeof value === 'string' && value !== '' ? value : undefined;\n}\n\n/**\n * Reads one entry, or nothing.\n *\n * The file is editable by hand and its session id is joined into a journal\n * path, so it is a trust boundary rather than trusted state this process wrote.\n * A bad entry is dropped instead of narrowing the whole file to nothing. A legacy\n * `artifact` (the worktree's pinned sync generation) is ignored: sessions compose live.\n */\nfunction parseRecord(value: unknown): OpenSessionRecord | undefined {\n  if (!isRecord(value)) return undefined;\n  const { sessionId, workspaceId, cwd, name, createdAt } = value;\n  if (typeof sessionId !== 'string' || !SESSION_ID_PATTERN.test(sessionId)) return undefined;\n  if (typeof workspaceId !== 'string' || workspaceId === '') return undefined;\n  if (typeof cwd !== 'string' || !path.isAbsolute(cwd)) return undefined;\n  if (typeof name !== 'string' || typeof createdAt !== 'string') return undefined;\n  const parentSessionId = optionalText(value.parentSessionId);\n  const sessionProvenance = optionalText(value.sessionProvenance);\n  const repoRoot = optionalText(value.repoRoot);\n  const groupingRoot = optionalText(value.groupingRoot);\n  if (value.repoRoot !== undefined && (!repoRoot || !path.isAbsolute(repoRoot))) return undefined;\n  if (value.groupingRoot !== undefined && (!groupingRoot || !path.isAbsolute(groupingRoot))) return undefined;\n  return {\n    sessionId,\n    workspaceId,\n    cwd,\n    ...(repoRoot === undefined ? {} : { repoRoot }),\n    ...(groupingRoot === undefined ? {} : { groupingRoot }),\n    name,\n    createdAt,\n    ...(parentSessionId === undefined ? {} : { parentSessionId }),\n    ...(sessionProvenance === undefined ? {} : { sessionProvenance }),\n  };\n}\n\n/**\n * The sessions the cockpit had open, so a server restart can offer them back.\n *\n * Journals already survive a restart; what does not is the knowledge of which\n * of them were open rather than merely finished. Without that, a restart either\n * loses every session or revives every thread ever recorded.\n */\nexport function createOpenSessionRegistry(options: OpenSessionRegistryOptions): OpenSessionRegistry {\n  const notice = options.onNotice ?? ((): void => {});\n  const filePath = path.join(options.directory, REGISTRY_FILE);\n\n  const load = (): OpenSessionRecord[] => {\n    let raw: string;\n    try {\n      raw = fs.readFileSync(filePath, 'utf8');\n    } catch {\n      // No file is the normal first run, so this is not worth a notice.\n      return [];\n    }\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(raw);\n    } catch {\n      // Left in place rather than rewritten: a file somebody hand-edited is\n      // worth more as evidence than as something this process silently repairs.\n      notice(`open sessions at ${filePath} are not valid JSON; none will be restored`);\n      return [];\n    }\n    if (!Array.isArray(parsed)) {\n      notice(`open sessions at ${filePath} are not a list; none will be restored`);\n      return [];\n    }\n    const records: OpenSessionRecord[] = [];\n    for (const entry of parsed) {\n      const record = parseRecord(entry);\n      if (record === undefined) notice(`open sessions at ${filePath} contain an unusable entry; skipping it`);\n      else records.push(record);\n    }\n    return records;\n  };\n\n  let current = load();\n\n  const persist = (next: OpenSessionRecord[]): boolean => {\n    const temporary = `${filePath}.${String(process.pid)}.tmp`;\n    try {\n      fs.mkdirSync(options.directory, { recursive: true, mode: DIRECTORY_MODE });\n      const descriptor = fs.openSync(temporary, 'w', FILE_MODE);\n      try {\n        fs.writeFileSync(descriptor, `${JSON.stringify(next, undefined, 2)}\\n`);\n        fs.fsyncSync(descriptor);\n      } finally {\n        fs.closeSync(descriptor);\n      }\n      // Rename rather than write in place, so a crash mid-write leaves the\n      // previous contents rather than a truncated file.\n      fs.renameSync(temporary, filePath);\n      current = next;\n      return true;\n    } catch (error) {\n      notice(`${filePath} could not be saved: ${error instanceof Error ? error.message : String(error)}`);\n      try {\n        fs.rmSync(temporary, { force: true });\n      } catch {\n        // Nothing further to do; the temp file is inert either way.\n      }\n      return false;\n    }\n  };\n\n  return {\n    list: () => current,\n    add(record) {\n      if (!SESSION_ID_PATTERN.test(record.sessionId)) throw new Error(`Invalid session id '${record.sessionId}'.`);\n      for (const directory of [record.cwd, record.repoRoot, record.groupingRoot]) {\n        if (directory !== undefined && !path.isAbsolute(directory))\n          throw new Error('Session directories must be absolute.');\n      }\n      return persist([...current.filter((held) => held.sessionId !== record.sessionId), record]);\n    },\n    remove(sessionId) {\n      const next = current.filter((held) => held.sessionId !== sessionId);\n      if (next.length === current.length) return;\n      persist(next);\n    },\n  };\n}\n"],"mappings":";;;AAGA,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;AACvB,MAAM,YAAY;;AAElB,MAAM,qBAAqB;AA8B3B,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,aAAa,OAAoC;CACxD,OAAO,OAAO,UAAU,YAAY,UAAU,KAAK,QAAQ,KAAA;AAC7D;;;;;;;;;AAUA,SAAS,YAAY,OAA+C;CAClE,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,EAAE,WAAW,aAAa,KAAK,MAAM,cAAc;CACzD,IAAI,OAAO,cAAc,YAAY,CAAC,mBAAmB,KAAK,SAAS,GAAG,OAAO,KAAA;CACjF,IAAI,OAAO,gBAAgB,YAAY,gBAAgB,IAAI,OAAO,KAAA;CAClE,IAAI,OAAO,QAAQ,YAAY,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO,KAAA;CAC7D,IAAI,OAAO,SAAS,YAAY,OAAO,cAAc,UAAU,OAAO,KAAA;CACtE,MAAM,kBAAkB,aAAa,MAAM,eAAe;CAC1D,MAAM,oBAAoB,aAAa,MAAM,iBAAiB;CAC9D,MAAM,WAAW,aAAa,MAAM,QAAQ;CAC5C,MAAM,eAAe,aAAa,MAAM,YAAY;CACpD,IAAI,MAAM,aAAa,KAAA,MAAc,CAAC,YAAY,CAAC,KAAK,WAAW,QAAQ,IAAI,OAAO,KAAA;CACtF,IAAI,MAAM,iBAAiB,KAAA,MAAc,CAAC,gBAAgB,CAAC,KAAK,WAAW,YAAY,IAAI,OAAO,KAAA;CAClG,OAAO;EACL;EACA;EACA;EACA,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC7C,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;EACrD;EACA;EACA,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;EAC3D,GAAI,sBAAsB,KAAA,IAAY,CAAC,IAAI,EAAE,kBAAkB;CACjE;AACF;;;;;;;;AASA,SAAgB,0BAA0B,SAA0D;CAClG,MAAM,SAAS,QAAQ,mBAAyB,CAAC;CACjD,MAAM,WAAW,KAAK,KAAK,QAAQ,WAAW,aAAa;CAE3D,MAAM,aAAkC;EACtC,IAAI;EACJ,IAAI;GACF,MAAM,GAAG,aAAa,UAAU,MAAM;EACxC,QAAQ;GAEN,OAAO,CAAC;EACV;EACA,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,GAAG;EACzB,QAAQ;GAGN,OAAO,oBAAoB,SAAS,2CAA2C;GAC/E,OAAO,CAAC;EACV;EACA,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;GAC1B,OAAO,oBAAoB,SAAS,uCAAuC;GAC3E,OAAO,CAAC;EACV;EACA,MAAM,UAA+B,CAAC;EACtC,KAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,SAAS,YAAY,KAAK;GAChC,IAAI,WAAW,KAAA,GAAW,OAAO,oBAAoB,SAAS,wCAAwC;QACjG,QAAQ,KAAK,MAAM;EAC1B;EACA,OAAO;CACT;CAEA,IAAI,UAAU,KAAK;CAEnB,MAAM,WAAW,SAAuC;EACtD,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,QAAQ,GAAG,EAAE;EACrD,IAAI;GACF,GAAG,UAAU,QAAQ,WAAW;IAAE,WAAW;IAAM,MAAM;GAAe,CAAC;GACzE,MAAM,aAAa,GAAG,SAAS,WAAW,KAAK,SAAS;GACxD,IAAI;IACF,GAAG,cAAc,YAAY,GAAG,KAAK,UAAU,MAAM,KAAA,GAAW,CAAC,EAAE,GAAG;IACtE,GAAG,UAAU,UAAU;GACzB,UAAU;IACR,GAAG,UAAU,UAAU;GACzB;GAGA,GAAG,WAAW,WAAW,QAAQ;GACjC,UAAU;GACV,OAAO;EACT,SAAS,OAAO;GACd,OAAO,GAAG,SAAS,uBAAuB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;GAClG,IAAI;IACF,GAAG,OAAO,WAAW,EAAE,OAAO,KAAK,CAAC;GACtC,QAAQ,CAER;GACA,OAAO;EACT;CACF;CAEA,OAAO;EACL,YAAY;EACZ,IAAI,QAAQ;GACV,IAAI,CAAC,mBAAmB,KAAK,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,uBAAuB,OAAO,UAAU,GAAG;GAC3G,KAAK,MAAM,aAAa;IAAC,OAAO;IAAK,OAAO;IAAU,OAAO;GAAY,GACvE,IAAI,cAAc,KAAA,KAAa,CAAC,KAAK,WAAW,SAAS,GACvD,MAAM,IAAI,MAAM,uCAAuC;GAE3D,OAAO,QAAQ,CAAC,GAAG,QAAQ,QAAQ,SAAS,KAAK,cAAc,OAAO,SAAS,GAAG,MAAM,CAAC;EAC3F;EACA,OAAO,WAAW;GAChB,MAAM,OAAO,QAAQ,QAAQ,SAAS,KAAK,cAAc,SAAS;GAClE,IAAI,KAAK,WAAW,QAAQ,QAAQ;GACpC,QAAQ,IAAI;EACd;CACF;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/openSessionRegistry/index.ts"],"sourcesContent":["import path from 'node:path';\n\nimport type { Context } from '@earendil-works/chord';\nimport { getOrThrow, type FileSystem } from '@earendil-works/pi-durable/env';\n\nimport { nodeHost } from '../nodeHost';\nimport { writeFileAtomic } from '../platformFiles';\nimport { createSerialRunner } from '../serialRunner';\nimport {\n  assertOpenSessionRecord,\n  DIRECTORY_MODE,\n  FILE_MODE,\n  parseOpenSessionRecords,\n  REGISTRY_FILE,\n  serializeOpenSessionRecords,\n  type OpenSessionRecord,\n  type OpenSessionRegistryOptions,\n} from './openSessionRecords';\n\nexport type { OpenSessionRecord, OpenSessionRegistry, OpenSessionRegistryOptions } from './openSessionRecords';\nexport { createOpenSessionRegistry } from './sync';\n\n/** One queue per registry file, so concurrent writes in this process never interleave. */\nconst registryWrites = createSerialRunner();\n\nexport interface OpenSessionRegistryAsync {\n  list(): readonly OpenSessionRecord[];\n  /** True only after the record is durably published. */\n  add(record: OpenSessionRecord): Promise<boolean>;\n  remove(sessionId: string): Promise<void>;\n}\n\n/**\n * The sessions the cockpit had open, so a server restart can offer them back.\n *\n * Journals already survive a restart; what does not is the knowledge of which\n * of them were open rather than merely finished. Without that, a restart either\n * loses every session or revives every thread ever recorded. Writes serialise per\n * registry file and publish through a uniquely named temporary file and a rename.\n */\nexport async function createOpenSessionRegistryAsync(\n  fs: FileSystem,\n  options: OpenSessionRegistryOptions,\n  context: Context,\n): Promise<OpenSessionRegistryAsync> {\n  const notice = options.onNotice ?? ((): void => {});\n  const filePath = path.join(options.directory, REGISTRY_FILE);\n  const serial = registryWrites.forKey(filePath);\n\n  // No file, or one this process cannot read, is the normal first run, so it is not worth a notice.\n  const raw = await fs.readTextFile(filePath, context);\n  let current = raw.ok ? parseOpenSessionRecords(raw.value, filePath, notice) : [];\n\n  const persist = async (next: OpenSessionRecord[]): Promise<boolean> => {\n    try {\n      if (!getOrThrow(await fs.exists(options.directory, context))) {\n        getOrThrow(await fs.createDir(options.directory, { recursive: true }, context));\n        await nodeHost.setMode(options.directory, DIRECTORY_MODE);\n      }\n      await writeFileAtomic(fs, filePath, serializeOpenSessionRecords(next), context);\n      await nodeHost.setMode(filePath, FILE_MODE);\n      current = next;\n      return true;\n    } catch (error) {\n      notice(`${filePath} could not be saved: ${error instanceof Error ? error.message : String(error)}`);\n      return false;\n    }\n  };\n\n  return {\n    list: () => current,\n    add: async (record) => {\n      assertOpenSessionRecord(record);\n      return await serial(() => persist([...current.filter((held) => held.sessionId !== record.sessionId), record]));\n    },\n    remove: (sessionId) =>\n      serial(async () => {\n        const next = current.filter((held) => held.sessionId !== sessionId);\n        if (next.length !== current.length) await persist(next);\n      }),\n  };\n}\n"],"mappings":";;;;;;AAuBuB,mBAAmB"}

package/dist/src/services/openSessionRegistry/openSessionRecords.cjs

@@ -0,0 +1,87 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+//#region src/services/openSessionRegistry/openSessionRecords.ts
+const REGISTRY_FILE = "open-sessions.json";
+/** The id becomes a journal filename, so it is constrained exactly as SQLite storage constrains it. */
+const SESSION_ID_PATTERN = /^[A-Za-z0-9_-]+$/u;
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function optionalText(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+/**
+* Reads one entry, or nothing.
+*
+* The file is editable by hand and its session id is joined into a journal
+* path, so it is a trust boundary rather than trusted state this process wrote.
+* A bad entry is dropped instead of narrowing the whole file to nothing. A legacy
+* `artifact` (the worktree's pinned sync generation) is ignored: sessions compose live.
+*/
+function parseRecord(value) {
+	if (!isRecord(value)) return void 0;
+	const { sessionId, workspaceId, cwd, name, createdAt } = value;
+	if (typeof sessionId !== "string" || !SESSION_ID_PATTERN.test(sessionId)) return void 0;
+	if (typeof workspaceId !== "string" || workspaceId === "") return void 0;
+	if (typeof cwd !== "string" || !node_path.default.isAbsolute(cwd)) return void 0;
+	if (typeof name !== "string" || typeof createdAt !== "string") return void 0;
+	const parentSessionId = optionalText(value.parentSessionId);
+	const sessionProvenance = optionalText(value.sessionProvenance);
+	const repoRoot = optionalText(value.repoRoot);
+	const groupingRoot = optionalText(value.groupingRoot);
+	if (value.repoRoot !== void 0 && (!repoRoot || !node_path.default.isAbsolute(repoRoot))) return void 0;
+	if (value.groupingRoot !== void 0 && (!groupingRoot || !node_path.default.isAbsolute(groupingRoot))) return void 0;
+	return {
+		sessionId,
+		workspaceId,
+		cwd,
+		...repoRoot === void 0 ? {} : { repoRoot },
+		...groupingRoot === void 0 ? {} : { groupingRoot },
+		name,
+		createdAt,
+		...parentSessionId === void 0 ? {} : { parentSessionId },
+		...sessionProvenance === void 0 ? {} : { sessionProvenance },
+		...Array.isArray(value.groups) ? { groups: value.groups.filter((group) => typeof group === "string") } : {}
+	};
+}
+/** Parses registry file text; unusable content is reported and dropped. */
+function parseOpenSessionRecords(raw, filePath, notice) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		notice(`open sessions at ${filePath} are not valid JSON; none will be restored`);
+		return [];
+	}
+	if (!Array.isArray(parsed)) {
+		notice(`open sessions at ${filePath} are not a list; none will be restored`);
+		return [];
+	}
+	const records = [];
+	for (const entry of parsed) {
+		const record = parseRecord(entry);
+		if (record === void 0) notice(`open sessions at ${filePath} contain an unusable entry; skipping it`);
+		else records.push(record);
+	}
+	return records;
+}
+function serializeOpenSessionRecords(records) {
+	return `${JSON.stringify(records, void 0, 2)}\n`;
+}
+function assertOpenSessionRecord(record) {
+	if (!SESSION_ID_PATTERN.test(record.sessionId)) throw new Error(`Invalid session id '${record.sessionId}'.`);
+	for (const directory of [
+		record.cwd,
+		record.repoRoot,
+		record.groupingRoot
+	]) if (directory !== void 0 && !node_path.default.isAbsolute(directory)) throw new Error("Session directories must be absolute.");
+}
+//#endregion
+exports.REGISTRY_FILE = REGISTRY_FILE;
+exports.SESSION_ID_PATTERN = SESSION_ID_PATTERN;
+exports.assertOpenSessionRecord = assertOpenSessionRecord;
+exports.parseOpenSessionRecords = parseOpenSessionRecords;
+exports.serializeOpenSessionRecords = serializeOpenSessionRecords;
+
+//# sourceMappingURL=openSessionRecords.cjs.map

package/dist/src/services/openSessionRegistry/openSessionRecords.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"openSessionRecords.cjs","names":["path"],"sources":["../../../../src/services/openSessionRegistry/openSessionRecords.ts"],"sourcesContent":["import path from 'node:path';\n\nexport const REGISTRY_FILE = 'open-sessions.json';\nexport const DIRECTORY_MODE = 0o700;\nexport const FILE_MODE = 0o600;\n/** The id becomes a journal filename, so it is constrained exactly as SQLite storage constrains it. */\nexport const SESSION_ID_PATTERN = /^[A-Za-z0-9_-]+$/u;\n\n/** One cockpit session the server had open, enough to reopen its journal by id. */\nexport interface OpenSessionRecord {\n  sessionId: string;\n  workspaceId: string;\n  cwd: string;\n  /** Child checkout root, distinct from the parent grouping root for worktrees. */\n  repoRoot?: string;\n  /** Parent workspace path used only to restore the workspace identity. */\n  groupingRoot?: string;\n  name: string;\n  createdAt: string;\n  parentSessionId?: string;\n  sessionProvenance?: string;\n  /** Mirrors the journal's groups so the rail can show them while the session is dormant. */\n  groups?: readonly string[];\n}\n\nexport interface OpenSessionRegistry {\n  list(): readonly OpenSessionRecord[];\n  /** True only after the record is durably published. */\n  add(record: OpenSessionRecord): boolean;\n  remove(sessionId: string): void;\n}\n\nexport interface OpenSessionRegistryOptions {\n  /** Directory holding the `sessions` journal folder, so the registry sits beside what it points at. */\n  directory: string;\n  onNotice?: (message: string) => void;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction optionalText(value: unknown): string | undefined {\n  return typeof value === 'string' && value !== '' ? value : undefined;\n}\n\n/**\n * Reads one entry, or nothing.\n *\n * The file is editable by hand and its session id is joined into a journal\n * path, so it is a trust boundary rather than trusted state this process wrote.\n * A bad entry is dropped instead of narrowing the whole file to nothing. A legacy\n * `artifact` (the worktree's pinned sync generation) is ignored: sessions compose live.\n */\nfunction parseRecord(value: unknown): OpenSessionRecord | undefined {\n  if (!isRecord(value)) return undefined;\n  const { sessionId, workspaceId, cwd, name, createdAt } = value;\n  if (typeof sessionId !== 'string' || !SESSION_ID_PATTERN.test(sessionId)) return undefined;\n  if (typeof workspaceId !== 'string' || workspaceId === '') return undefined;\n  if (typeof cwd !== 'string' || !path.isAbsolute(cwd)) return undefined;\n  if (typeof name !== 'string' || typeof createdAt !== 'string') return undefined;\n  const parentSessionId = optionalText(value.parentSessionId);\n  const sessionProvenance = optionalText(value.sessionProvenance);\n  const repoRoot = optionalText(value.repoRoot);\n  const groupingRoot = optionalText(value.groupingRoot);\n  if (value.repoRoot !== undefined && (!repoRoot || !path.isAbsolute(repoRoot))) return undefined;\n  if (value.groupingRoot !== undefined && (!groupingRoot || !path.isAbsolute(groupingRoot))) return undefined;\n  return {\n    sessionId,\n    workspaceId,\n    cwd,\n    ...(repoRoot === undefined ? {} : { repoRoot }),\n    ...(groupingRoot === undefined ? {} : { groupingRoot }),\n    name,\n    createdAt,\n    ...(parentSessionId === undefined ? {} : { parentSessionId }),\n    ...(sessionProvenance === undefined ? {} : { sessionProvenance }),\n    ...(Array.isArray(value.groups)\n      ? { groups: value.groups.filter((group): group is string => typeof group === 'string') }\n      : {}),\n  };\n}\n\n/** Parses registry file text; unusable content is reported and dropped. */\nexport function parseOpenSessionRecords(\n  raw: string,\n  filePath: string,\n  notice: (message: string) => void,\n): OpenSessionRecord[] {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    // Left in place rather than rewritten: a file somebody hand-edited is\n    // worth more as evidence than as something this process silently repairs.\n    notice(`open sessions at ${filePath} are not valid JSON; none will be restored`);\n    return [];\n  }\n  if (!Array.isArray(parsed)) {\n    notice(`open sessions at ${filePath} are not a list; none will be restored`);\n    return [];\n  }\n  const records: OpenSessionRecord[] = [];\n  for (const entry of parsed) {\n    const record = parseRecord(entry);\n    if (record === undefined) notice(`open sessions at ${filePath} contain an unusable entry; skipping it`);\n    else records.push(record);\n  }\n  return records;\n}\n\nexport function serializeOpenSessionRecords(records: readonly OpenSessionRecord[]): string {\n  return `${JSON.stringify(records, undefined, 2)}\\n`;\n}\n\nexport function assertOpenSessionRecord(record: OpenSessionRecord): void {\n  if (!SESSION_ID_PATTERN.test(record.sessionId)) throw new Error(`Invalid session id '${record.sessionId}'.`);\n  for (const directory of [record.cwd, record.repoRoot, record.groupingRoot]) {\n    if (directory !== undefined && !path.isAbsolute(directory))\n      throw new Error('Session directories must be absolute.');\n  }\n}\n"],"mappings":";;;;AAEA,MAAa,gBAAgB;;AAI7B,MAAa,qBAAqB;AAgClC,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,aAAa,OAAoC;CACxD,OAAO,OAAO,UAAU,YAAY,UAAU,KAAK,QAAQ,KAAA;AAC7D;;;;;;;;;AAUA,SAAS,YAAY,OAA+C;CAClE,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,EAAE,WAAW,aAAa,KAAK,MAAM,cAAc;CACzD,IAAI,OAAO,cAAc,YAAY,CAAC,mBAAmB,KAAK,SAAS,GAAG,OAAO,KAAA;CACjF,IAAI,OAAO,gBAAgB,YAAY,gBAAgB,IAAI,OAAO,KAAA;CAClE,IAAI,OAAO,QAAQ,YAAY,CAACA,UAAAA,QAAK,WAAW,GAAG,GAAG,OAAO,KAAA;CAC7D,IAAI,OAAO,SAAS,YAAY,OAAO,cAAc,UAAU,OAAO,KAAA;CACtE,MAAM,kBAAkB,aAAa,MAAM,eAAe;CAC1D,MAAM,oBAAoB,aAAa,MAAM,iBAAiB;CAC9D,MAAM,WAAW,aAAa,MAAM,QAAQ;CAC5C,MAAM,eAAe,aAAa,MAAM,YAAY;CACpD,IAAI,MAAM,aAAa,KAAA,MAAc,CAAC,YAAY,CAACA,UAAAA,QAAK,WAAW,QAAQ,IAAI,OAAO,KAAA;CACtF,IAAI,MAAM,iBAAiB,KAAA,MAAc,CAAC,gBAAgB,CAACA,UAAAA,QAAK,WAAW,YAAY,IAAI,OAAO,KAAA;CAClG,OAAO;EACL;EACA;EACA;EACA,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC7C,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;EACrD;EACA;EACA,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;EAC3D,GAAI,sBAAsB,KAAA,IAAY,CAAC,IAAI,EAAE,kBAAkB;EAC/D,GAAI,MAAM,QAAQ,MAAM,MAAM,IAC1B,EAAE,QAAQ,MAAM,OAAO,QAAQ,UAA2B,OAAO,UAAU,QAAQ,EAAE,IACrF,CAAC;CACP;AACF;;AAGA,SAAgB,wBACd,KACA,UACA,QACqB;CACrB,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,QAAQ;EAGN,OAAO,oBAAoB,SAAS,2CAA2C;EAC/E,OAAO,CAAC;CACV;CACA,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;EAC1B,OAAO,oBAAoB,SAAS,uCAAuC;EAC3E,OAAO,CAAC;CACV;CACA,MAAM,UAA+B,CAAC;CACtC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,SAAS,YAAY,KAAK;EAChC,IAAI,WAAW,KAAA,GAAW,OAAO,oBAAoB,SAAS,wCAAwC;OACjG,QAAQ,KAAK,MAAM;CAC1B;CACA,OAAO;AACT;AAEA,SAAgB,4BAA4B,SAA+C;CACzF,OAAO,GAAG,KAAK,UAAU,SAAS,KAAA,GAAW,CAAC,EAAE;AAClD;AAEA,SAAgB,wBAAwB,QAAiC;CACvE,IAAI,CAAC,mBAAmB,KAAK,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,uBAAuB,OAAO,UAAU,GAAG;CAC3G,KAAK,MAAM,aAAa;EAAC,OAAO;EAAK,OAAO;EAAU,OAAO;CAAY,GACvE,IAAI,cAAc,KAAA,KAAa,CAACA,UAAAA,QAAK,WAAW,SAAS,GACvD,MAAM,IAAI,MAAM,uCAAuC;AAE7D"}

package/dist/src/services/openSessionRegistry/openSessionRecords.d.mts

@@ -0,0 +1,30 @@
+//#region src/services/openSessionRegistry/openSessionRecords.d.ts
+/** One cockpit session the server had open, enough to reopen its journal by id. */
+export interface OpenSessionRecord {
+  sessionId: string;
+  workspaceId: string;
+  cwd: string;
+  /** Child checkout root, distinct from the parent grouping root for worktrees. */
+  repoRoot?: string;
+  /** Parent workspace path used only to restore the workspace identity. */
+  groupingRoot?: string;
+  name: string;
+  createdAt: string;
+  parentSessionId?: string;
+  sessionProvenance?: string;
+  /** Mirrors the journal's groups so the rail can show them while the session is dormant. */
+  groups?: readonly string[];
+}
+export interface OpenSessionRegistry {
+  list(): readonly OpenSessionRecord[];
+  /** True only after the record is durably published. */
+  add(record: OpenSessionRecord): boolean;
+  remove(sessionId: string): void;
+}
+export interface OpenSessionRegistryOptions {
+  /** Directory holding the `sessions` journal folder, so the registry sits beside what it points at. */
+  directory: string;
+  onNotice?: (message: string) => void;
+}
+//#endregion
+//# sourceMappingURL=openSessionRecords.d.mts.map

package/dist/src/services/openSessionRegistry/openSessionRecords.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openSessionRecords.d.mts","names":[],"sources":["../../../../src/services/openSessionRegistry/openSessionRecords.ts"],"mappings":";;iBASiB;EACf;EACA;EACA;;EAEA;;EAEA;EACA;EACA;EACA;EACA;;EAEA;;iBAGe;EACf,iBAAiB;;EAEjB,IAAI,QAAQ;EACZ,OAAO;;iBAGQ;;EAEf;EACA,YAAY"}

package/dist/src/services/openSessionRegistry/openSessionRecords.mjs

@@ -0,0 +1,81 @@
+import path from "node:path";
+//#region src/services/openSessionRegistry/openSessionRecords.ts
+const REGISTRY_FILE = "open-sessions.json";
+/** The id becomes a journal filename, so it is constrained exactly as SQLite storage constrains it. */
+const SESSION_ID_PATTERN = /^[A-Za-z0-9_-]+$/u;
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function optionalText(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+/**
+* Reads one entry, or nothing.
+*
+* The file is editable by hand and its session id is joined into a journal
+* path, so it is a trust boundary rather than trusted state this process wrote.
+* A bad entry is dropped instead of narrowing the whole file to nothing. A legacy
+* `artifact` (the worktree's pinned sync generation) is ignored: sessions compose live.
+*/
+function parseRecord(value) {
+	if (!isRecord(value)) return void 0;
+	const { sessionId, workspaceId, cwd, name, createdAt } = value;
+	if (typeof sessionId !== "string" || !SESSION_ID_PATTERN.test(sessionId)) return void 0;
+	if (typeof workspaceId !== "string" || workspaceId === "") return void 0;
+	if (typeof cwd !== "string" || !path.isAbsolute(cwd)) return void 0;
+	if (typeof name !== "string" || typeof createdAt !== "string") return void 0;
+	const parentSessionId = optionalText(value.parentSessionId);
+	const sessionProvenance = optionalText(value.sessionProvenance);
+	const repoRoot = optionalText(value.repoRoot);
+	const groupingRoot = optionalText(value.groupingRoot);
+	if (value.repoRoot !== void 0 && (!repoRoot || !path.isAbsolute(repoRoot))) return void 0;
+	if (value.groupingRoot !== void 0 && (!groupingRoot || !path.isAbsolute(groupingRoot))) return void 0;
+	return {
+		sessionId,
+		workspaceId,
+		cwd,
+		...repoRoot === void 0 ? {} : { repoRoot },
+		...groupingRoot === void 0 ? {} : { groupingRoot },
+		name,
+		createdAt,
+		...parentSessionId === void 0 ? {} : { parentSessionId },
+		...sessionProvenance === void 0 ? {} : { sessionProvenance },
+		...Array.isArray(value.groups) ? { groups: value.groups.filter((group) => typeof group === "string") } : {}
+	};
+}
+/** Parses registry file text; unusable content is reported and dropped. */
+function parseOpenSessionRecords(raw, filePath, notice) {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		notice(`open sessions at ${filePath} are not valid JSON; none will be restored`);
+		return [];
+	}
+	if (!Array.isArray(parsed)) {
+		notice(`open sessions at ${filePath} are not a list; none will be restored`);
+		return [];
+	}
+	const records = [];
+	for (const entry of parsed) {
+		const record = parseRecord(entry);
+		if (record === void 0) notice(`open sessions at ${filePath} contain an unusable entry; skipping it`);
+		else records.push(record);
+	}
+	return records;
+}
+function serializeOpenSessionRecords(records) {
+	return `${JSON.stringify(records, void 0, 2)}\n`;
+}
+function assertOpenSessionRecord(record) {
+	if (!SESSION_ID_PATTERN.test(record.sessionId)) throw new Error(`Invalid session id '${record.sessionId}'.`);
+	for (const directory of [
+		record.cwd,
+		record.repoRoot,
+		record.groupingRoot
+	]) if (directory !== void 0 && !path.isAbsolute(directory)) throw new Error("Session directories must be absolute.");
+}
+//#endregion
+export { REGISTRY_FILE, SESSION_ID_PATTERN, assertOpenSessionRecord, parseOpenSessionRecords, serializeOpenSessionRecords };
+
+//# sourceMappingURL=openSessionRecords.mjs.map

package/dist/src/services/openSessionRegistry/openSessionRecords.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"openSessionRecords.mjs","names":[],"sources":["../../../../src/services/openSessionRegistry/openSessionRecords.ts"],"sourcesContent":["import path from 'node:path';\n\nexport const REGISTRY_FILE = 'open-sessions.json';\nexport const DIRECTORY_MODE = 0o700;\nexport const FILE_MODE = 0o600;\n/** The id becomes a journal filename, so it is constrained exactly as SQLite storage constrains it. */\nexport const SESSION_ID_PATTERN = /^[A-Za-z0-9_-]+$/u;\n\n/** One cockpit session the server had open, enough to reopen its journal by id. */\nexport interface OpenSessionRecord {\n  sessionId: string;\n  workspaceId: string;\n  cwd: string;\n  /** Child checkout root, distinct from the parent grouping root for worktrees. */\n  repoRoot?: string;\n  /** Parent workspace path used only to restore the workspace identity. */\n  groupingRoot?: string;\n  name: string;\n  createdAt: string;\n  parentSessionId?: string;\n  sessionProvenance?: string;\n  /** Mirrors the journal's groups so the rail can show them while the session is dormant. */\n  groups?: readonly string[];\n}\n\nexport interface OpenSessionRegistry {\n  list(): readonly OpenSessionRecord[];\n  /** True only after the record is durably published. */\n  add(record: OpenSessionRecord): boolean;\n  remove(sessionId: string): void;\n}\n\nexport interface OpenSessionRegistryOptions {\n  /** Directory holding the `sessions` journal folder, so the registry sits beside what it points at. */\n  directory: string;\n  onNotice?: (message: string) => void;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction optionalText(value: unknown): string | undefined {\n  return typeof value === 'string' && value !== '' ? value : undefined;\n}\n\n/**\n * Reads one entry, or nothing.\n *\n * The file is editable by hand and its session id is joined into a journal\n * path, so it is a trust boundary rather than trusted state this process wrote.\n * A bad entry is dropped instead of narrowing the whole file to nothing. A legacy\n * `artifact` (the worktree's pinned sync generation) is ignored: sessions compose live.\n */\nfunction parseRecord(value: unknown): OpenSessionRecord | undefined {\n  if (!isRecord(value)) return undefined;\n  const { sessionId, workspaceId, cwd, name, createdAt } = value;\n  if (typeof sessionId !== 'string' || !SESSION_ID_PATTERN.test(sessionId)) return undefined;\n  if (typeof workspaceId !== 'string' || workspaceId === '') return undefined;\n  if (typeof cwd !== 'string' || !path.isAbsolute(cwd)) return undefined;\n  if (typeof name !== 'string' || typeof createdAt !== 'string') return undefined;\n  const parentSessionId = optionalText(value.parentSessionId);\n  const sessionProvenance = optionalText(value.sessionProvenance);\n  const repoRoot = optionalText(value.repoRoot);\n  const groupingRoot = optionalText(value.groupingRoot);\n  if (value.repoRoot !== undefined && (!repoRoot || !path.isAbsolute(repoRoot))) return undefined;\n  if (value.groupingRoot !== undefined && (!groupingRoot || !path.isAbsolute(groupingRoot))) return undefined;\n  return {\n    sessionId,\n    workspaceId,\n    cwd,\n    ...(repoRoot === undefined ? {} : { repoRoot }),\n    ...(groupingRoot === undefined ? {} : { groupingRoot }),\n    name,\n    createdAt,\n    ...(parentSessionId === undefined ? {} : { parentSessionId }),\n    ...(sessionProvenance === undefined ? {} : { sessionProvenance }),\n    ...(Array.isArray(value.groups)\n      ? { groups: value.groups.filter((group): group is string => typeof group === 'string') }\n      : {}),\n  };\n}\n\n/** Parses registry file text; unusable content is reported and dropped. */\nexport function parseOpenSessionRecords(\n  raw: string,\n  filePath: string,\n  notice: (message: string) => void,\n): OpenSessionRecord[] {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    // Left in place rather than rewritten: a file somebody hand-edited is\n    // worth more as evidence than as something this process silently repairs.\n    notice(`open sessions at ${filePath} are not valid JSON; none will be restored`);\n    return [];\n  }\n  if (!Array.isArray(parsed)) {\n    notice(`open sessions at ${filePath} are not a list; none will be restored`);\n    return [];\n  }\n  const records: OpenSessionRecord[] = [];\n  for (const entry of parsed) {\n    const record = parseRecord(entry);\n    if (record === undefined) notice(`open sessions at ${filePath} contain an unusable entry; skipping it`);\n    else records.push(record);\n  }\n  return records;\n}\n\nexport function serializeOpenSessionRecords(records: readonly OpenSessionRecord[]): string {\n  return `${JSON.stringify(records, undefined, 2)}\\n`;\n}\n\nexport function assertOpenSessionRecord(record: OpenSessionRecord): void {\n  if (!SESSION_ID_PATTERN.test(record.sessionId)) throw new Error(`Invalid session id '${record.sessionId}'.`);\n  for (const directory of [record.cwd, record.repoRoot, record.groupingRoot]) {\n    if (directory !== undefined && !path.isAbsolute(directory))\n      throw new Error('Session directories must be absolute.');\n  }\n}\n"],"mappings":";;AAEA,MAAa,gBAAgB;;AAI7B,MAAa,qBAAqB;AAgClC,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,aAAa,OAAoC;CACxD,OAAO,OAAO,UAAU,YAAY,UAAU,KAAK,QAAQ,KAAA;AAC7D;;;;;;;;;AAUA,SAAS,YAAY,OAA+C;CAClE,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,EAAE,WAAW,aAAa,KAAK,MAAM,cAAc;CACzD,IAAI,OAAO,cAAc,YAAY,CAAC,mBAAmB,KAAK,SAAS,GAAG,OAAO,KAAA;CACjF,IAAI,OAAO,gBAAgB,YAAY,gBAAgB,IAAI,OAAO,KAAA;CAClE,IAAI,OAAO,QAAQ,YAAY,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO,KAAA;CAC7D,IAAI,OAAO,SAAS,YAAY,OAAO,cAAc,UAAU,OAAO,KAAA;CACtE,MAAM,kBAAkB,aAAa,MAAM,eAAe;CAC1D,MAAM,oBAAoB,aAAa,MAAM,iBAAiB;CAC9D,MAAM,WAAW,aAAa,MAAM,QAAQ;CAC5C,MAAM,eAAe,aAAa,MAAM,YAAY;CACpD,IAAI,MAAM,aAAa,KAAA,MAAc,CAAC,YAAY,CAAC,KAAK,WAAW,QAAQ,IAAI,OAAO,KAAA;CACtF,IAAI,MAAM,iBAAiB,KAAA,MAAc,CAAC,gBAAgB,CAAC,KAAK,WAAW,YAAY,IAAI,OAAO,KAAA;CAClG,OAAO;EACL;EACA;EACA;EACA,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;EAC7C,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;EACrD;EACA;EACA,GAAI,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,gBAAgB;EAC3D,GAAI,sBAAsB,KAAA,IAAY,CAAC,IAAI,EAAE,kBAAkB;EAC/D,GAAI,MAAM,QAAQ,MAAM,MAAM,IAC1B,EAAE,QAAQ,MAAM,OAAO,QAAQ,UAA2B,OAAO,UAAU,QAAQ,EAAE,IACrF,CAAC;CACP;AACF;;AAGA,SAAgB,wBACd,KACA,UACA,QACqB;CACrB,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,QAAQ;EAGN,OAAO,oBAAoB,SAAS,2CAA2C;EAC/E,OAAO,CAAC;CACV;CACA,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;EAC1B,OAAO,oBAAoB,SAAS,uCAAuC;EAC3E,OAAO,CAAC;CACV;CACA,MAAM,UAA+B,CAAC;CACtC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,SAAS,YAAY,KAAK;EAChC,IAAI,WAAW,KAAA,GAAW,OAAO,oBAAoB,SAAS,wCAAwC;OACjG,QAAQ,KAAK,MAAM;CAC1B;CACA,OAAO;AACT;AAEA,SAAgB,4BAA4B,SAA+C;CACzF,OAAO,GAAG,KAAK,UAAU,SAAS,KAAA,GAAW,CAAC,EAAE;AAClD;AAEA,SAAgB,wBAAwB,QAAiC;CACvE,IAAI,CAAC,mBAAmB,KAAK,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,uBAAuB,OAAO,UAAU,GAAG;CAC3G,KAAK,MAAM,aAAa;EAAC,OAAO;EAAK,OAAO;EAAU,OAAO;CAAY,GACvE,IAAI,cAAc,KAAA,KAAa,CAAC,KAAK,WAAW,SAAS,GACvD,MAAM,IAAI,MAAM,uCAAuC;AAE7D"}

package/dist/src/services/openSessionRegistry/sync.cjs

@@ -0,0 +1,71 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+const require_openSessionRecords = require("./openSessionRecords.cjs");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+//#region src/services/openSessionRegistry/sync.ts
+/**
+* The sessions the cockpit had open, so a server restart can offer them back.
+*
+* Journals already survive a restart; what does not is the knowledge of which
+* of them were open rather than merely finished. Without that, a restart either
+* loses every session or revives every thread ever recorded.
+*
+* @deprecated Node-only sync shim; use createOpenSessionRegistryAsync. Removed in M2.
+*/
+function createOpenSessionRegistry(options) {
+	const notice = options.onNotice ?? (() => {});
+	const filePath = node_path.default.join(options.directory, require_openSessionRecords.REGISTRY_FILE);
+	const load = () => {
+		let raw;
+		try {
+			raw = node_fs.default.readFileSync(filePath, "utf8");
+		} catch {
+			return [];
+		}
+		return require_openSessionRecords.parseOpenSessionRecords(raw, filePath, notice);
+	};
+	let current = load();
+	const persist = (next) => {
+		const temporary = `${filePath}.${String(process.pid)}.tmp`;
+		try {
+			node_fs.default.mkdirSync(options.directory, {
+				recursive: true,
+				mode: 448
+			});
+			const descriptor = node_fs.default.openSync(temporary, "w", 384);
+			try {
+				node_fs.default.writeFileSync(descriptor, require_openSessionRecords.serializeOpenSessionRecords(next));
+				node_fs.default.fsyncSync(descriptor);
+			} finally {
+				node_fs.default.closeSync(descriptor);
+			}
+			node_fs.default.renameSync(temporary, filePath);
+			current = next;
+			return true;
+		} catch (error) {
+			notice(`${filePath} could not be saved: ${error instanceof Error ? error.message : String(error)}`);
+			try {
+				node_fs.default.rmSync(temporary, { force: true });
+			} catch {}
+			return false;
+		}
+	};
+	return {
+		list: () => current,
+		add(record) {
+			require_openSessionRecords.assertOpenSessionRecord(record);
+			return persist([...current.filter((held) => held.sessionId !== record.sessionId), record]);
+		},
+		remove(sessionId) {
+			const next = current.filter((held) => held.sessionId !== sessionId);
+			if (next.length === current.length) return;
+			persist(next);
+		}
+	};
+}
+//#endregion
+exports.createOpenSessionRegistry = createOpenSessionRegistry;
+
+//# sourceMappingURL=sync.cjs.map

package/dist/src/services/openSessionRegistry/sync.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.cjs","names":["path","REGISTRY_FILE","fs","parseOpenSessionRecords","serializeOpenSessionRecords"],"sources":["../../../../src/services/openSessionRegistry/sync.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport {\n  assertOpenSessionRecord,\n  DIRECTORY_MODE,\n  FILE_MODE,\n  parseOpenSessionRecords,\n  REGISTRY_FILE,\n  serializeOpenSessionRecords,\n  type OpenSessionRecord,\n  type OpenSessionRegistry,\n  type OpenSessionRegistryOptions,\n} from './openSessionRecords';\n\n/**\n * The sessions the cockpit had open, so a server restart can offer them back.\n *\n * Journals already survive a restart; what does not is the knowledge of which\n * of them were open rather than merely finished. Without that, a restart either\n * loses every session or revives every thread ever recorded.\n *\n * @deprecated Node-only sync shim; use createOpenSessionRegistryAsync. Removed in M2.\n */\nexport function createOpenSessionRegistry(options: OpenSessionRegistryOptions): OpenSessionRegistry {\n  const notice = options.onNotice ?? ((): void => {});\n  const filePath = path.join(options.directory, REGISTRY_FILE);\n\n  const load = (): OpenSessionRecord[] => {\n    let raw: string;\n    try {\n      raw = fs.readFileSync(filePath, 'utf8');\n    } catch {\n      // No file is the normal first run, so this is not worth a notice.\n      return [];\n    }\n    return parseOpenSessionRecords(raw, filePath, notice);\n  };\n\n  let current = load();\n\n  const persist = (next: OpenSessionRecord[]): boolean => {\n    const temporary = `${filePath}.${String(process.pid)}.tmp`;\n    try {\n      fs.mkdirSync(options.directory, { recursive: true, mode: DIRECTORY_MODE });\n      const descriptor = fs.openSync(temporary, 'w', FILE_MODE);\n      try {\n        fs.writeFileSync(descriptor, serializeOpenSessionRecords(next));\n        fs.fsyncSync(descriptor);\n      } finally {\n        fs.closeSync(descriptor);\n      }\n      // Rename rather than write in place, so a crash mid-write leaves the\n      // previous contents rather than a truncated file.\n      fs.renameSync(temporary, filePath);\n      current = next;\n      return true;\n    } catch (error) {\n      notice(`${filePath} could not be saved: ${error instanceof Error ? error.message : String(error)}`);\n      try {\n        fs.rmSync(temporary, { force: true });\n      } catch {\n        // Nothing further to do; the temp file is inert either way.\n      }\n      return false;\n    }\n  };\n\n  return {\n    list: () => current,\n    add(record) {\n      assertOpenSessionRecord(record);\n      return persist([...current.filter((held) => held.sessionId !== record.sessionId), record]);\n    },\n    remove(sessionId) {\n      const next = current.filter((held) => held.sessionId !== sessionId);\n      if (next.length === current.length) return;\n      persist(next);\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAwBA,SAAgB,0BAA0B,SAA0D;CAClG,MAAM,SAAS,QAAQ,mBAAyB,CAAC;CACjD,MAAM,WAAWA,UAAAA,QAAK,KAAK,QAAQ,WAAWC,2BAAAA,aAAa;CAE3D,MAAM,aAAkC;EACtC,IAAI;EACJ,IAAI;GACF,MAAMC,QAAAA,QAAG,aAAa,UAAU,MAAM;EACxC,QAAQ;GAEN,OAAO,CAAC;EACV;EACA,OAAOC,2BAAAA,wBAAwB,KAAK,UAAU,MAAM;CACtD;CAEA,IAAI,UAAU,KAAK;CAEnB,MAAM,WAAW,SAAuC;EACtD,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,QAAQ,GAAG,EAAE;EACrD,IAAI;GACF,QAAA,QAAG,UAAU,QAAQ,WAAW;IAAE,WAAW;IAAM,MAAA;GAAqB,CAAC;GACzE,MAAM,aAAaD,QAAAA,QAAG,SAAS,WAAW,KAAA,GAAc;GACxD,IAAI;IACF,QAAA,QAAG,cAAc,YAAYE,2BAAAA,4BAA4B,IAAI,CAAC;IAC9D,QAAA,QAAG,UAAU,UAAU;GACzB,UAAU;IACR,QAAA,QAAG,UAAU,UAAU;GACzB;GAGA,QAAA,QAAG,WAAW,WAAW,QAAQ;GACjC,UAAU;GACV,OAAO;EACT,SAAS,OAAO;GACd,OAAO,GAAG,SAAS,uBAAuB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;GAClG,IAAI;IACF,QAAA,QAAG,OAAO,WAAW,EAAE,OAAO,KAAK,CAAC;GACtC,QAAQ,CAER;GACA,OAAO;EACT;CACF;CAEA,OAAO;EACL,YAAY;EACZ,IAAI,QAAQ;GACV,2BAAA,wBAAwB,MAAM;GAC9B,OAAO,QAAQ,CAAC,GAAG,QAAQ,QAAQ,SAAS,KAAK,cAAc,OAAO,SAAS,GAAG,MAAM,CAAC;EAC3F;EACA,OAAO,WAAW;GAChB,MAAM,OAAO,QAAQ,QAAQ,SAAS,KAAK,cAAc,SAAS;GAClE,IAAI,KAAK,WAAW,QAAQ,QAAQ;GACpC,QAAQ,IAAI;EACd;CACF;AACF"}

package/dist/src/services/openSessionRegistry/sync.d.mts

@@ -0,0 +1,14 @@
+import { OpenSessionRegistry, OpenSessionRegistryOptions } from "./openSessionRecords.mjs";
+//#region src/services/openSessionRegistry/sync.d.ts
+/**
+ * The sessions the cockpit had open, so a server restart can offer them back.
+ *
+ * Journals already survive a restart; what does not is the knowledge of which
+ * of them were open rather than merely finished. Without that, a restart either
+ * loses every session or revives every thread ever recorded.
+ *
+ * @deprecated Node-only sync shim; use createOpenSessionRegistryAsync. Removed in M2.
+ */
+export declare function createOpenSessionRegistry(options: OpenSessionRegistryOptions): OpenSessionRegistry;
+//#endregion
+//# sourceMappingURL=sync.d.mts.map

package/dist/src/services/openSessionRegistry/sync.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.mts","names":[],"sources":["../../../../src/services/openSessionRegistry/sync.ts"],"mappings":";;;;;;;;;;;wBAwBgB,0BAA0B,SAAS,6BAA6B"}

package/dist/src/services/openSessionRegistry/sync.mjs

@@ -0,0 +1,68 @@
+import { REGISTRY_FILE, assertOpenSessionRecord, parseOpenSessionRecords, serializeOpenSessionRecords } from "./openSessionRecords.mjs";
+import fs from "node:fs";
+import path from "node:path";
+//#region src/services/openSessionRegistry/sync.ts
+/**
+* The sessions the cockpit had open, so a server restart can offer them back.
+*
+* Journals already survive a restart; what does not is the knowledge of which
+* of them were open rather than merely finished. Without that, a restart either
+* loses every session or revives every thread ever recorded.
+*
+* @deprecated Node-only sync shim; use createOpenSessionRegistryAsync. Removed in M2.
+*/
+function createOpenSessionRegistry(options) {
+	const notice = options.onNotice ?? (() => {});
+	const filePath = path.join(options.directory, REGISTRY_FILE);
+	const load = () => {
+		let raw;
+		try {
+			raw = fs.readFileSync(filePath, "utf8");
+		} catch {
+			return [];
+		}
+		return parseOpenSessionRecords(raw, filePath, notice);
+	};
+	let current = load();
+	const persist = (next) => {
+		const temporary = `${filePath}.${String(process.pid)}.tmp`;
+		try {
+			fs.mkdirSync(options.directory, {
+				recursive: true,
+				mode: 448
+			});
+			const descriptor = fs.openSync(temporary, "w", 384);
+			try {
+				fs.writeFileSync(descriptor, serializeOpenSessionRecords(next));
+				fs.fsyncSync(descriptor);
+			} finally {
+				fs.closeSync(descriptor);
+			}
+			fs.renameSync(temporary, filePath);
+			current = next;
+			return true;
+		} catch (error) {
+			notice(`${filePath} could not be saved: ${error instanceof Error ? error.message : String(error)}`);
+			try {
+				fs.rmSync(temporary, { force: true });
+			} catch {}
+			return false;
+		}
+	};
+	return {
+		list: () => current,
+		add(record) {
+			assertOpenSessionRecord(record);
+			return persist([...current.filter((held) => held.sessionId !== record.sessionId), record]);
+		},
+		remove(sessionId) {
+			const next = current.filter((held) => held.sessionId !== sessionId);
+			if (next.length === current.length) return;
+			persist(next);
+		}
+	};
+}
+//#endregion
+export { createOpenSessionRegistry };
+
+//# sourceMappingURL=sync.mjs.map

package/dist/src/services/openSessionRegistry/sync.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.mjs","names":[],"sources":["../../../../src/services/openSessionRegistry/sync.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport {\n  assertOpenSessionRecord,\n  DIRECTORY_MODE,\n  FILE_MODE,\n  parseOpenSessionRecords,\n  REGISTRY_FILE,\n  serializeOpenSessionRecords,\n  type OpenSessionRecord,\n  type OpenSessionRegistry,\n  type OpenSessionRegistryOptions,\n} from './openSessionRecords';\n\n/**\n * The sessions the cockpit had open, so a server restart can offer them back.\n *\n * Journals already survive a restart; what does not is the knowledge of which\n * of them were open rather than merely finished. Without that, a restart either\n * loses every session or revives every thread ever recorded.\n *\n * @deprecated Node-only sync shim; use createOpenSessionRegistryAsync. Removed in M2.\n */\nexport function createOpenSessionRegistry(options: OpenSessionRegistryOptions): OpenSessionRegistry {\n  const notice = options.onNotice ?? ((): void => {});\n  const filePath = path.join(options.directory, REGISTRY_FILE);\n\n  const load = (): OpenSessionRecord[] => {\n    let raw: string;\n    try {\n      raw = fs.readFileSync(filePath, 'utf8');\n    } catch {\n      // No file is the normal first run, so this is not worth a notice.\n      return [];\n    }\n    return parseOpenSessionRecords(raw, filePath, notice);\n  };\n\n  let current = load();\n\n  const persist = (next: OpenSessionRecord[]): boolean => {\n    const temporary = `${filePath}.${String(process.pid)}.tmp`;\n    try {\n      fs.mkdirSync(options.directory, { recursive: true, mode: DIRECTORY_MODE });\n      const descriptor = fs.openSync(temporary, 'w', FILE_MODE);\n      try {\n        fs.writeFileSync(descriptor, serializeOpenSessionRecords(next));\n        fs.fsyncSync(descriptor);\n      } finally {\n        fs.closeSync(descriptor);\n      }\n      // Rename rather than write in place, so a crash mid-write leaves the\n      // previous contents rather than a truncated file.\n      fs.renameSync(temporary, filePath);\n      current = next;\n      return true;\n    } catch (error) {\n      notice(`${filePath} could not be saved: ${error instanceof Error ? error.message : String(error)}`);\n      try {\n        fs.rmSync(temporary, { force: true });\n      } catch {\n        // Nothing further to do; the temp file is inert either way.\n      }\n      return false;\n    }\n  };\n\n  return {\n    list: () => current,\n    add(record) {\n      assertOpenSessionRecord(record);\n      return persist([...current.filter((held) => held.sessionId !== record.sessionId), record]);\n    },\n    remove(sessionId) {\n      const next = current.filter((held) => held.sessionId !== sessionId);\n      if (next.length === current.length) return;\n      persist(next);\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;AAwBA,SAAgB,0BAA0B,SAA0D;CAClG,MAAM,SAAS,QAAQ,mBAAyB,CAAC;CACjD,MAAM,WAAW,KAAK,KAAK,QAAQ,WAAW,aAAa;CAE3D,MAAM,aAAkC;EACtC,IAAI;EACJ,IAAI;GACF,MAAM,GAAG,aAAa,UAAU,MAAM;EACxC,QAAQ;GAEN,OAAO,CAAC;EACV;EACA,OAAO,wBAAwB,KAAK,UAAU,MAAM;CACtD;CAEA,IAAI,UAAU,KAAK;CAEnB,MAAM,WAAW,SAAuC;EACtD,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,QAAQ,GAAG,EAAE;EACrD,IAAI;GACF,GAAG,UAAU,QAAQ,WAAW;IAAE,WAAW;IAAM,MAAA;GAAqB,CAAC;GACzE,MAAM,aAAa,GAAG,SAAS,WAAW,KAAA,GAAc;GACxD,IAAI;IACF,GAAG,cAAc,YAAY,4BAA4B,IAAI,CAAC;IAC9D,GAAG,UAAU,UAAU;GACzB,UAAU;IACR,GAAG,UAAU,UAAU;GACzB;GAGA,GAAG,WAAW,WAAW,QAAQ;GACjC,UAAU;GACV,OAAO;EACT,SAAS,OAAO;GACd,OAAO,GAAG,SAAS,uBAAuB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;GAClG,IAAI;IACF,GAAG,OAAO,WAAW,EAAE,OAAO,KAAK,CAAC;GACtC,QAAQ,CAER;GACA,OAAO;EACT;CACF;CAEA,OAAO;EACL,YAAY;EACZ,IAAI,QAAQ;GACV,wBAAwB,MAAM;GAC9B,OAAO,QAAQ,CAAC,GAAG,QAAQ,QAAQ,SAAS,KAAK,cAAc,OAAO,SAAS,GAAG,MAAM,CAAC;EAC3F;EACA,OAAO,WAAW;GAChB,MAAM,OAAO,QAAQ,QAAQ,SAAS,KAAK,cAAc,SAAS;GAClE,IAAI,KAAK,WAAW,QAAQ,QAAQ;GACpC,QAAQ,IAAI;EACd;CACF;AACF"}

package/dist/src/services/packageApiHarness/index.cjs

@@ -7,7 +7,7 @@ const ORIGIN = "http://host";
 function mountPackageApi(api, options = {}) {
 	const scope = options.scope ?? DEFAULT_SCOPE;
 	const notices = [];
-	const mountPath = `${require_packageApi.DOOM_API_ROUTE_PREFIX}/${api.basePath}`;
+	const mountPath = `${require_packageApi.PO_API_ROUTE_PREFIX}/${api.basePath}`;
 	const context = {
 		scope,
 		...scope === "session" ? {

package/dist/src/services/packageApiHarness/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["DOOM_API_ROUTE_PREFIX"],"sources":["../../../../src/services/packageApiHarness/index.ts"],"sourcesContent":["import type { DoomDirectEventBus } from '../../schemas/hubChannel';\nimport {\n  type DoomApi,\n  type DoomApiContext,\n  type DoomApiHandler,\n  DOOM_API_ROUTE_PREFIX,\n  type DoomApiScope,\n} from '../../schemas/packageApi';\n\n/**\n * A package's HTTP surface, mounted the way a host mounts it.\n *\n * A package tests its routes by calling its Hono app directly, which proves the\n * routes but not the mount: the host serves them under\n * `/api/plugins/<basePath>` and strips that prefix before the app sees the\n * request. A package whose routes are written absolute passes its own suite and\n * answers nothing in a running cockpit.\n *\n * This mounts the declared `DoomApi` the same way, so a test asks for the URL a\n * browser would ask for. Plain `Request` and `Response`; no HTTP framework and\n * no server.\n */\n\nexport interface MountPackageApiOptions {\n  scope?: DoomApiScope;\n  sessionId?: string;\n  cwd?: string;\n  directEvents?: DoomDirectEventBus;\n}\n\nexport interface MountedPackageApi {\n  /** Where the host mounted it, for building a URL the way a client does. */\n  readonly mountPath: string;\n  /** What the API reported to its host; a package that notices nothing leaves this empty. */\n  readonly notices: readonly string[];\n  /**\n   * Fetches one path.\n   *\n   * The path is host-absolute, so it carries the mount the client would send:\n   * `/api/plugins/workflow/runs/repo/blog-4`. A path outside the mount is a 404\n   * from this, exactly as it is from the host.\n   */\n  fetch(path: string, init?: RequestInit): Promise<Response>;\n  close(): void;\n}\n\nconst DEFAULT_SCOPE: DoomApiScope = 'global';\nconst DEFAULT_CWD = '/repo';\n/** Any origin will do: the host routes on path, and a Request needs an absolute URL. */\nconst ORIGIN = 'http://host';\n\nexport function mountPackageApi(api: DoomApi, options: MountPackageApiOptions = {}): MountedPackageApi {\n  const scope = options.scope ?? DEFAULT_SCOPE;\n  const notices: string[] = [];\n  const mountPath = `${DOOM_API_ROUTE_PREFIX}/${api.basePath}`;\n  const context: DoomApiContext = {\n    scope,\n    // A session-scoped host knows both; a hub-scoped one knows neither, and an\n    // API that reads them anyway should see the same undefined it would there.\n    ...(scope === 'session' ? { sessionId: options.sessionId ?? 'test-session', cwd: options.cwd ?? DEFAULT_CWD } : {}),\n    ...(options.directEvents ? { directEvents: options.directEvents } : {}),\n    onNotice: (message) => notices.push(message),\n  };\n  const handler: DoomApiHandler = api.start(context);\n\n  return {\n    mountPath,\n    notices,\n    async fetch(path, init) {\n      const url = new URL(path, ORIGIN);\n      if (url.pathname !== mountPath && !url.pathname.startsWith(`${mountPath}/`)) {\n        return new Response(`No package API is mounted at ${url.pathname}.`, { status: 404 });\n      }\n      // The host strips its own mount, so a package declares '/runs/:id' and\n      // never repeats where it was mounted.\n      url.pathname = url.pathname.slice(mountPath.length) || '/';\n      return handler.fetch(new Request(url, init));\n    },\n    close: () => handler.close(),\n  };\n}\n"],"mappings":";;AA8CA,MAAM,gBAA8B;AACpC,MAAM,cAAc;;AAEpB,MAAM,SAAS;AAEf,SAAgB,gBAAgB,KAAc,UAAkC,CAAC,GAAsB;CACrG,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,UAAoB,CAAC;CAC3B,MAAM,YAAY,GAAGA,mBAAAA,sBAAsB,GAAG,IAAI;CAClD,MAAM,UAA0B;EAC9B;EAGA,GAAI,UAAU,YAAY;GAAE,WAAW,QAAQ,aAAa;GAAgB,KAAK,QAAQ,OAAO;EAAY,IAAI,CAAC;EACjH,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACrE,WAAW,YAAY,QAAQ,KAAK,OAAO;CAC7C;CACA,MAAM,UAA0B,IAAI,MAAM,OAAO;CAEjD,OAAO;EACL;EACA;EACA,MAAM,MAAM,MAAM,MAAM;GACtB,MAAM,MAAM,IAAI,IAAI,MAAM,MAAM;GAChC,IAAI,IAAI,aAAa,aAAa,CAAC,IAAI,SAAS,WAAW,GAAG,UAAU,EAAE,GACxE,OAAO,IAAI,SAAS,gCAAgC,IAAI,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;GAItF,IAAI,WAAW,IAAI,SAAS,MAAM,UAAU,MAAM,KAAK;GACvD,OAAO,QAAQ,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC;EAC7C;EACA,aAAa,QAAQ,MAAM;CAC7B;AACF"}
+{"version":3,"file":"index.cjs","names":["PO_API_ROUTE_PREFIX"],"sources":["../../../../src/services/packageApiHarness/index.ts"],"sourcesContent":["import type { PoDirectEventBus } from '../../schemas/hubChannel';\nimport {\n  type PoApi,\n  type PoApiContext,\n  type PoApiHandler,\n  PO_API_ROUTE_PREFIX,\n  type PoApiScope,\n} from '../../schemas/packageApi';\n\n/**\n * A package's HTTP surface, mounted the way a host mounts it.\n *\n * A package tests its routes by calling its Hono app directly, which proves the\n * routes but not the mount: the host serves them under\n * `/api/plugins/<basePath>` and strips that prefix before the app sees the\n * request. A package whose routes are written absolute passes its own suite and\n * answers nothing in a running cockpit.\n *\n * This mounts the declared `PoApi` the same way, so a test asks for the URL a\n * browser would ask for. Plain `Request` and `Response`; no HTTP framework and\n * no server.\n */\n\nexport interface MountPackageApiOptions {\n  scope?: PoApiScope;\n  sessionId?: string;\n  cwd?: string;\n  directEvents?: PoDirectEventBus;\n}\n\nexport interface MountedPackageApi {\n  /** Where the host mounted it, for building a URL the way a client does. */\n  readonly mountPath: string;\n  /** What the API reported to its host; a package that notices nothing leaves this empty. */\n  readonly notices: readonly string[];\n  /**\n   * Fetches one path.\n   *\n   * The path is host-absolute, so it carries the mount the client would send:\n   * `/api/plugins/workflow/runs/repo/blog-4`. A path outside the mount is a 404\n   * from this, exactly as it is from the host.\n   */\n  fetch(path: string, init?: RequestInit): Promise<Response>;\n  close(): void;\n}\n\nconst DEFAULT_SCOPE: PoApiScope = 'global';\nconst DEFAULT_CWD = '/repo';\n/** Any origin will do: the host routes on path, and a Request needs an absolute URL. */\nconst ORIGIN = 'http://host';\n\nexport function mountPackageApi(api: PoApi, options: MountPackageApiOptions = {}): MountedPackageApi {\n  const scope = options.scope ?? DEFAULT_SCOPE;\n  const notices: string[] = [];\n  const mountPath = `${PO_API_ROUTE_PREFIX}/${api.basePath}`;\n  const context: PoApiContext = {\n    scope,\n    // A session-scoped host knows both; a hub-scoped one knows neither, and an\n    // API that reads them anyway should see the same undefined it would there.\n    ...(scope === 'session' ? { sessionId: options.sessionId ?? 'test-session', cwd: options.cwd ?? DEFAULT_CWD } : {}),\n    ...(options.directEvents ? { directEvents: options.directEvents } : {}),\n    onNotice: (message) => notices.push(message),\n  };\n  const handler: PoApiHandler = api.start(context);\n\n  return {\n    mountPath,\n    notices,\n    async fetch(path, init) {\n      const url = new URL(path, ORIGIN);\n      if (url.pathname !== mountPath && !url.pathname.startsWith(`${mountPath}/`)) {\n        return new Response(`No package API is mounted at ${url.pathname}.`, { status: 404 });\n      }\n      // The host strips its own mount, so a package declares '/runs/:id' and\n      // never repeats where it was mounted.\n      url.pathname = url.pathname.slice(mountPath.length) || '/';\n      return handler.fetch(new Request(url, init));\n    },\n    close: () => handler.close(),\n  };\n}\n"],"mappings":";;AA8CA,MAAM,gBAA4B;AAClC,MAAM,cAAc;;AAEpB,MAAM,SAAS;AAEf,SAAgB,gBAAgB,KAAY,UAAkC,CAAC,GAAsB;CACnG,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,UAAoB,CAAC;CAC3B,MAAM,YAAY,GAAGA,mBAAAA,oBAAoB,GAAG,IAAI;CAChD,MAAM,UAAwB;EAC5B;EAGA,GAAI,UAAU,YAAY;GAAE,WAAW,QAAQ,aAAa;GAAgB,KAAK,QAAQ,OAAO;EAAY,IAAI,CAAC;EACjH,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACrE,WAAW,YAAY,QAAQ,KAAK,OAAO;CAC7C;CACA,MAAM,UAAwB,IAAI,MAAM,OAAO;CAE/C,OAAO;EACL;EACA;EACA,MAAM,MAAM,MAAM,MAAM;GACtB,MAAM,MAAM,IAAI,IAAI,MAAM,MAAM;GAChC,IAAI,IAAI,aAAa,aAAa,CAAC,IAAI,SAAS,WAAW,GAAG,UAAU,EAAE,GACxE,OAAO,IAAI,SAAS,gCAAgC,IAAI,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;GAItF,IAAI,WAAW,IAAI,SAAS,MAAM,UAAU,MAAM,KAAK;GACvD,OAAO,QAAQ,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC;EAC7C;EACA,aAAa,QAAQ,MAAM;CAC7B;AACF"}

package/dist/src/services/packageApiHarness/index.d.mts

@@ -1,5 +1,5 @@
-import { DoomDirectEventBus } from "../../schemas/hubChannel.mjs";
-import { DoomApi, DoomApiScope } from "../../schemas/packageApi.mjs";
+import { PoDirectEventBus } from "../../schemas/hubChannel.mjs";
+import { PoApi, PoApiScope } from "../../schemas/packageApi.mjs";
 //#region src/services/packageApiHarness/index.d.ts
 /**
  * A package's HTTP surface, mounted the way a host mounts it.
@@ -10,15 +10,15 @@ import { DoomApi, DoomApiScope } from "../../schemas/packageApi.mjs";
  * request. A package whose routes are written absolute passes its own suite and
  * answers nothing in a running cockpit.
  *
- * This mounts the declared `DoomApi` the same way, so a test asks for the URL a
+ * This mounts the declared `PoApi` the same way, so a test asks for the URL a
  * browser would ask for. Plain `Request` and `Response`; no HTTP framework and
  * no server.
  */
 export interface MountPackageApiOptions {
-  scope?: DoomApiScope;
+  scope?: PoApiScope;
   sessionId?: string;
   cwd?: string;
-  directEvents?: DoomDirectEventBus;
+  directEvents?: PoDirectEventBus;
 }
 export interface MountedPackageApi {
   /** Where the host mounted it, for building a URL the way a client does. */
@@ -35,6 +35,6 @@ export interface MountedPackageApi {
   fetch(path: string, init?: RequestInit): Promise<Response>;
   close(): void;
 }
-export declare function mountPackageApi(api: DoomApi, options?: MountPackageApiOptions): MountedPackageApi;
+export declare function mountPackageApi(api: PoApi, options?: MountPackageApiOptions): MountedPackageApi;
 //#endregion
 //# sourceMappingURL=index.d.mts.map

package/dist/src/services/packageApiHarness/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/packageApiHarness/index.ts"],"mappings":";;;;;;;;;;;;;;;;iBAuBiB;EACf,QAAQ;EACR;EACA;EACA,eAAe;;iBAGA;;WAEN;;WAEA;;;;;;;;EAQT,MAAM,cAAc,OAAO,cAAc,QAAQ;EACjD;;wBAQc,gBAAgB,KAAK,SAAS,UAAS,yBAA8B"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/packageApiHarness/index.ts"],"mappings":";;;;;;;;;;;;;;;;iBAuBiB;EACf,QAAQ;EACR;EACA;EACA,eAAe;;iBAGA;;WAEN;;WAEA;;;;;;;;EAQT,MAAM,cAAc,OAAO,cAAc,QAAQ;EACjD;;wBAQc,gBAAgB,KAAK,OAAO,UAAS,yBAA8B"}

package/dist/src/services/packageApiHarness/index.mjs

@@ -1,4 +1,4 @@
-import { DOOM_API_ROUTE_PREFIX } from "../../schemas/packageApi.mjs";
+import { PO_API_ROUTE_PREFIX } from "../../schemas/packageApi.mjs";
 //#region src/services/packageApiHarness/index.ts
 const DEFAULT_SCOPE = "global";
 const DEFAULT_CWD = "/repo";
@@ -7,7 +7,7 @@ const ORIGIN = "http://host";
 function mountPackageApi(api, options = {}) {
 	const scope = options.scope ?? DEFAULT_SCOPE;
 	const notices = [];
-	const mountPath = `${DOOM_API_ROUTE_PREFIX}/${api.basePath}`;
+	const mountPath = `${PO_API_ROUTE_PREFIX}/${api.basePath}`;
 	const context = {
 		scope,
 		...scope === "session" ? {

package/dist/src/services/packageApiHarness/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/packageApiHarness/index.ts"],"sourcesContent":["import type { DoomDirectEventBus } from '../../schemas/hubChannel';\nimport {\n  type DoomApi,\n  type DoomApiContext,\n  type DoomApiHandler,\n  DOOM_API_ROUTE_PREFIX,\n  type DoomApiScope,\n} from '../../schemas/packageApi';\n\n/**\n * A package's HTTP surface, mounted the way a host mounts it.\n *\n * A package tests its routes by calling its Hono app directly, which proves the\n * routes but not the mount: the host serves them under\n * `/api/plugins/<basePath>` and strips that prefix before the app sees the\n * request. A package whose routes are written absolute passes its own suite and\n * answers nothing in a running cockpit.\n *\n * This mounts the declared `DoomApi` the same way, so a test asks for the URL a\n * browser would ask for. Plain `Request` and `Response`; no HTTP framework and\n * no server.\n */\n\nexport interface MountPackageApiOptions {\n  scope?: DoomApiScope;\n  sessionId?: string;\n  cwd?: string;\n  directEvents?: DoomDirectEventBus;\n}\n\nexport interface MountedPackageApi {\n  /** Where the host mounted it, for building a URL the way a client does. */\n  readonly mountPath: string;\n  /** What the API reported to its host; a package that notices nothing leaves this empty. */\n  readonly notices: readonly string[];\n  /**\n   * Fetches one path.\n   *\n   * The path is host-absolute, so it carries the mount the client would send:\n   * `/api/plugins/workflow/runs/repo/blog-4`. A path outside the mount is a 404\n   * from this, exactly as it is from the host.\n   */\n  fetch(path: string, init?: RequestInit): Promise<Response>;\n  close(): void;\n}\n\nconst DEFAULT_SCOPE: DoomApiScope = 'global';\nconst DEFAULT_CWD = '/repo';\n/** Any origin will do: the host routes on path, and a Request needs an absolute URL. */\nconst ORIGIN = 'http://host';\n\nexport function mountPackageApi(api: DoomApi, options: MountPackageApiOptions = {}): MountedPackageApi {\n  const scope = options.scope ?? DEFAULT_SCOPE;\n  const notices: string[] = [];\n  const mountPath = `${DOOM_API_ROUTE_PREFIX}/${api.basePath}`;\n  const context: DoomApiContext = {\n    scope,\n    // A session-scoped host knows both; a hub-scoped one knows neither, and an\n    // API that reads them anyway should see the same undefined it would there.\n    ...(scope === 'session' ? { sessionId: options.sessionId ?? 'test-session', cwd: options.cwd ?? DEFAULT_CWD } : {}),\n    ...(options.directEvents ? { directEvents: options.directEvents } : {}),\n    onNotice: (message) => notices.push(message),\n  };\n  const handler: DoomApiHandler = api.start(context);\n\n  return {\n    mountPath,\n    notices,\n    async fetch(path, init) {\n      const url = new URL(path, ORIGIN);\n      if (url.pathname !== mountPath && !url.pathname.startsWith(`${mountPath}/`)) {\n        return new Response(`No package API is mounted at ${url.pathname}.`, { status: 404 });\n      }\n      // The host strips its own mount, so a package declares '/runs/:id' and\n      // never repeats where it was mounted.\n      url.pathname = url.pathname.slice(mountPath.length) || '/';\n      return handler.fetch(new Request(url, init));\n    },\n    close: () => handler.close(),\n  };\n}\n"],"mappings":";;AA8CA,MAAM,gBAA8B;AACpC,MAAM,cAAc;;AAEpB,MAAM,SAAS;AAEf,SAAgB,gBAAgB,KAAc,UAAkC,CAAC,GAAsB;CACrG,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,UAAoB,CAAC;CAC3B,MAAM,YAAY,GAAG,sBAAsB,GAAG,IAAI;CAClD,MAAM,UAA0B;EAC9B;EAGA,GAAI,UAAU,YAAY;GAAE,WAAW,QAAQ,aAAa;GAAgB,KAAK,QAAQ,OAAO;EAAY,IAAI,CAAC;EACjH,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACrE,WAAW,YAAY,QAAQ,KAAK,OAAO;CAC7C;CACA,MAAM,UAA0B,IAAI,MAAM,OAAO;CAEjD,OAAO;EACL;EACA;EACA,MAAM,MAAM,MAAM,MAAM;GACtB,MAAM,MAAM,IAAI,IAAI,MAAM,MAAM;GAChC,IAAI,IAAI,aAAa,aAAa,CAAC,IAAI,SAAS,WAAW,GAAG,UAAU,EAAE,GACxE,OAAO,IAAI,SAAS,gCAAgC,IAAI,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;GAItF,IAAI,WAAW,IAAI,SAAS,MAAM,UAAU,MAAM,KAAK;GACvD,OAAO,QAAQ,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC;EAC7C;EACA,aAAa,QAAQ,MAAM;CAC7B;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/packageApiHarness/index.ts"],"sourcesContent":["import type { PoDirectEventBus } from '../../schemas/hubChannel';\nimport {\n  type PoApi,\n  type PoApiContext,\n  type PoApiHandler,\n  PO_API_ROUTE_PREFIX,\n  type PoApiScope,\n} from '../../schemas/packageApi';\n\n/**\n * A package's HTTP surface, mounted the way a host mounts it.\n *\n * A package tests its routes by calling its Hono app directly, which proves the\n * routes but not the mount: the host serves them under\n * `/api/plugins/<basePath>` and strips that prefix before the app sees the\n * request. A package whose routes are written absolute passes its own suite and\n * answers nothing in a running cockpit.\n *\n * This mounts the declared `PoApi` the same way, so a test asks for the URL a\n * browser would ask for. Plain `Request` and `Response`; no HTTP framework and\n * no server.\n */\n\nexport interface MountPackageApiOptions {\n  scope?: PoApiScope;\n  sessionId?: string;\n  cwd?: string;\n  directEvents?: PoDirectEventBus;\n}\n\nexport interface MountedPackageApi {\n  /** Where the host mounted it, for building a URL the way a client does. */\n  readonly mountPath: string;\n  /** What the API reported to its host; a package that notices nothing leaves this empty. */\n  readonly notices: readonly string[];\n  /**\n   * Fetches one path.\n   *\n   * The path is host-absolute, so it carries the mount the client would send:\n   * `/api/plugins/workflow/runs/repo/blog-4`. A path outside the mount is a 404\n   * from this, exactly as it is from the host.\n   */\n  fetch(path: string, init?: RequestInit): Promise<Response>;\n  close(): void;\n}\n\nconst DEFAULT_SCOPE: PoApiScope = 'global';\nconst DEFAULT_CWD = '/repo';\n/** Any origin will do: the host routes on path, and a Request needs an absolute URL. */\nconst ORIGIN = 'http://host';\n\nexport function mountPackageApi(api: PoApi, options: MountPackageApiOptions = {}): MountedPackageApi {\n  const scope = options.scope ?? DEFAULT_SCOPE;\n  const notices: string[] = [];\n  const mountPath = `${PO_API_ROUTE_PREFIX}/${api.basePath}`;\n  const context: PoApiContext = {\n    scope,\n    // A session-scoped host knows both; a hub-scoped one knows neither, and an\n    // API that reads them anyway should see the same undefined it would there.\n    ...(scope === 'session' ? { sessionId: options.sessionId ?? 'test-session', cwd: options.cwd ?? DEFAULT_CWD } : {}),\n    ...(options.directEvents ? { directEvents: options.directEvents } : {}),\n    onNotice: (message) => notices.push(message),\n  };\n  const handler: PoApiHandler = api.start(context);\n\n  return {\n    mountPath,\n    notices,\n    async fetch(path, init) {\n      const url = new URL(path, ORIGIN);\n      if (url.pathname !== mountPath && !url.pathname.startsWith(`${mountPath}/`)) {\n        return new Response(`No package API is mounted at ${url.pathname}.`, { status: 404 });\n      }\n      // The host strips its own mount, so a package declares '/runs/:id' and\n      // never repeats where it was mounted.\n      url.pathname = url.pathname.slice(mountPath.length) || '/';\n      return handler.fetch(new Request(url, init));\n    },\n    close: () => handler.close(),\n  };\n}\n"],"mappings":";;AA8CA,MAAM,gBAA4B;AAClC,MAAM,cAAc;;AAEpB,MAAM,SAAS;AAEf,SAAgB,gBAAgB,KAAY,UAAkC,CAAC,GAAsB;CACnG,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,UAAoB,CAAC;CAC3B,MAAM,YAAY,GAAG,oBAAoB,GAAG,IAAI;CAChD,MAAM,UAAwB;EAC5B;EAGA,GAAI,UAAU,YAAY;GAAE,WAAW,QAAQ,aAAa;GAAgB,KAAK,QAAQ,OAAO;EAAY,IAAI,CAAC;EACjH,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;EACrE,WAAW,YAAY,QAAQ,KAAK,OAAO;CAC7C;CACA,MAAM,UAAwB,IAAI,MAAM,OAAO;CAE/C,OAAO;EACL;EACA;EACA,MAAM,MAAM,MAAM,MAAM;GACtB,MAAM,MAAM,IAAI,IAAI,MAAM,MAAM;GAChC,IAAI,IAAI,aAAa,aAAa,CAAC,IAAI,SAAS,WAAW,GAAG,UAAU,EAAE,GACxE,OAAO,IAAI,SAAS,gCAAgC,IAAI,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;GAItF,IAAI,WAAW,IAAI,SAAS,MAAM,UAAU,MAAM,KAAK;GACvD,OAAO,QAAQ,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC;EAC7C;EACA,aAAa,QAAQ,MAAM;CAC7B;AACF"}

package/dist/src/services/piArgs/index.cjs

@@ -0,0 +1,53 @@
+let _earendil_works_pi_coding_agent = require("@earendil-works/pi-coding-agent");
+//#region src/services/piArgs/index.ts
+const unsupported = (parsed) => {
+	const match = [
+		["--help", parsed.help],
+		["--version", parsed.version],
+		["--mode", parsed.mode],
+		["--print", parsed.print],
+		["--export", parsed.export],
+		["--no-session", parsed.noSession],
+		["--session", parsed.session],
+		["--session-dir", parsed.sessionDir],
+		["--continue", parsed.continue],
+		["--resume", parsed.resume],
+		["--fork", parsed.fork],
+		["--list-models", parsed.listModels],
+		["--offline", parsed.offline],
+		["--tui-mode", parsed.tuiMode],
+		["--extensions", parsed.extensions],
+		["--no-extensions", parsed.noExtensions],
+		["--skills", parsed.skills],
+		["--no-skills", parsed.noSkills],
+		["--prompt-templates", parsed.promptTemplates],
+		["--no-prompt-templates", parsed.noPromptTemplates],
+		["--themes", parsed.themes],
+		["--no-themes", parsed.noThemes],
+		["--no-context-files", parsed.noContextFiles],
+		["--tools", parsed.tools],
+		["--exclude-tools", parsed.excludeTools],
+		["--no-tools", parsed.noTools],
+		["--no-builtin-tools", parsed.noBuiltinTools],
+		["--project-trust-override", parsed.projectTrustOverride],
+		["--verbose", parsed.verbose]
+	].find(([, value]) => value !== void 0 && value !== false);
+	if (match) return `Direct headless mode does not support ${match[0]}.`;
+	if (parsed.messages.length > 0 || parsed.fileArgs.length > 0) return "Direct headless mode does not support positional prompts or files.";
+	const unknown = parsed.unknownFlags.keys().next().value;
+	return typeof unknown === "string" ? `Direct headless mode does not support --${unknown}.` : void 0;
+};
+/** Validate the Pi flags that remain after Po's harness flags are removed. */
+function validateDirectHeadlessArgs(agentArgs) {
+	if (agentArgs.includes("--mode")) throw new Error("Direct headless mode does not support --mode.");
+	const parsed = (0, _earendil_works_pi_coding_agent.parseArgs)([...agentArgs]);
+	const diagnostics = parsed.diagnostics.filter((diagnostic) => diagnostic.type === "error");
+	if (diagnostics.length) throw new Error(diagnostics.map((diagnostic) => diagnostic.message).join("\n"));
+	const error = unsupported(parsed);
+	if (error) throw new Error(error);
+	return parsed;
+}
+//#endregion
+exports.validateDirectHeadlessArgs = validateDirectHeadlessArgs;
+
+//# sourceMappingURL=index.cjs.map