@calliopelabs/cli 3.1.0 → 3.2.1

package/dist/sessions/format.js

@@ -0,0 +1,116 @@
+import * as fs from 'node:fs';
+import { dirname } from 'node:path';
+import { createHash } from 'node:crypto';
+export const MAX_SNAPSHOT_BYTES = 16 * 1024 * 1024;
+export const MAX_SNAPSHOT_MESSAGES = 10000;
+export class SessionRecoveryError extends Error {
+    code;
+    constructor(code, message) {
+        super(`Session recovery: ${message}`);
+        this.code = code;
+        this.name = 'SessionRecoveryError';
+    }
+}
+export const invalid = () => new SessionRecoveryError('invalid', 'invalid or damaged snapshot; preserve the file and start /new or restore a known backup.');
+export const hash = (text) => createHash('sha256').update(text).digest('hex');
+export const object = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+export const statuses = ['active', 'completed', 'cancelled', 'interrupted', 'waiting_for_user'];
+/** Keep protocol-owned JSON opaque, while rejecting lossy or unbounded values. */
+export function validateMessages(value) {
+    if (!Array.isArray(value) || value.length > MAX_SNAPSHOT_MESSAGES)
+        throw invalid();
+    const pending = [{ value, depth: 0 }];
+    let nodes = 0, bytes = 0;
+    while (pending.length) {
+        const item = pending.pop();
+        if (++nodes > 1000000 || item.depth > 64)
+            throw invalid();
+        const v = item.value;
+        if (typeof v === 'string') {
+            bytes += Buffer.byteLength(v);
+            if (bytes > MAX_SNAPSHOT_BYTES)
+                throw new SessionRecoveryError('invalid', 'snapshot exceeds 16 MiB; compact the conversation or start /new.');
+            continue;
+        }
+        if (v === null || v === undefined || typeof v === 'boolean')
+            continue;
+        if (typeof v === 'number' && Number.isFinite(v))
+            continue;
+        if (typeof v !== 'object' || !Array.isArray(v) && Object.getPrototypeOf(v) !== Object.prototype)
+            throw invalid();
+        for (const child of Object.values(v))
+            pending.push({ value: child, depth: item.depth + 1 });
+    }
+    let calls = new Set(), results = new Set();
+    for (const m of value) {
+        if (!object(m) || !['user', 'assistant', 'system', 'tool'].includes(String(m.role)))
+            throw invalid();
+        if (typeof m.content !== 'string' && !(Array.isArray(m.content) && m.content.every(part => object(part) &&
+            (part.type === 'text' && typeof part.text === 'string' || part.type === 'image' && typeof part.data === 'string' &&
+                ['image/jpeg', 'image/png', 'image/gif', 'image/webp'].includes(String(part.mediaType))))))
+            throw invalid();
+        if (m.role === 'tool' && (typeof m.toolCallId !== 'string' || !m.toolCallId))
+            throw invalid();
+        if (m.providerMetadata !== undefined && !object(m.providerMetadata))
+            throw invalid();
+        if (m.toolCalls !== undefined && (m.role !== 'assistant' || !Array.isArray(m.toolCalls) || !m.toolCalls.every(call => object(call) && typeof call.id === 'string' && !!call.id && typeof call.name === 'string' && !!call.name && object(call.arguments))))
+            throw invalid();
+        if (Array.isArray(m.toolCalls) && new Set(m.toolCalls.map(call => call.id)).size !== m.toolCalls.length)
+            throw invalid();
+        if (m.role === 'tool') {
+            if (!calls.has(m.toolCallId) || results.has(m.toolCallId))
+                throw invalid();
+            results.add(m.toolCallId);
+        }
+        else {
+            calls = new Set(m.toolCalls?.map(call => call.id));
+            results = new Set();
+        }
+    }
+}
+/** The count is a soft boundary: retain the initial system message and whole tool groups. */
+export function retainMessages(messages, cap) {
+    if (!Number.isSafeInteger(cap) || cap < 1 || cap > MAX_SNAPSHOT_MESSAGES)
+        throw invalid();
+    if (messages.length <= cap)
+        return messages;
+    const system = messages[0]?.role === 'system';
+    let start = Math.max(system ? 1 : 0, messages.length - Math.max(1, cap - (system ? 1 : 0)));
+    while (start > 0 && messages[start]?.role === 'tool')
+        start--;
+    return system && start > 0 ? [messages[0], ...messages.slice(start)] : messages.slice(start);
+}
+export function readPrivateSessionFile(file, limit = MAX_SNAPSHOT_BYTES) {
+    let fd;
+    try {
+        fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return null;
+        throw invalid();
+    }
+    try {
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.size > limit)
+            throw invalid();
+        const buffer = Buffer.alloc(stat.size + 1);
+        let size = 0, n = 0;
+        while (size < buffer.length && (n = fs.readSync(fd, buffer, size, buffer.length - size, null)) > 0)
+            size += n;
+        if (size !== stat.size)
+            throw invalid();
+        return buffer.subarray(0, size).toString('utf8');
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+/** A session directory must be a real, immediate child of the configured store. */
+export function assertSessionDirectory(dir) {
+    const root = fs.realpathSync(dirname(dir));
+    const stat = fs.lstatSync(dir);
+    if (!stat.isDirectory() || stat.isSymbolicLink() || dirname(fs.realpathSync(dir)) !== root)
+        throw invalid();
+}
+//# sourceMappingURL=format.js.map

package/dist/sessions/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/sessions/format.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAgB3C,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACjB,IAAI;IAAhC,YAA4B,IAA8C,EAAE,OAAe;QACzF,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;oBADZ,IAAI;QACS,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IAC5E,CAAC;CACF;AACD,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,oBAAoB,CAAC,SAAS,EAAE,0FAA0F,CAAC,CAAC;AAC7J,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACtH,MAAM,CAAC,MAAM,QAAQ,GAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;AAElH,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB;QAAE,MAAM,OAAO,EAAE,CAAC;IACnF,MAAM,OAAO,GAAwC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC5B,IAAI,EAAE,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE;YAAE,MAAM,OAAO,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,KAAK,GAAG,kBAAkB;gBAAE,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,kEAAkE,CAAC,CAAC;YAC9I,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,SAAS;QACtE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS;YAAE,MAAM,OAAO,EAAE,CAAC;QACjH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,KAAK,GAAG,IAAI,GAAG,EAAU,EAAE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACrG,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;YACrG,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC9G,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QAChH,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QAC9F,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACrF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACnH,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACxJ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM;YAAE,MAAM,OAAO,EAAE,CAAC;QACzH,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,UAAoB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,UAAoB,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC/F,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,UAAoB,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,IAAI,GAAG,CAAE,CAAC,CAAC,SAAkC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QACpG,CAAC;IACH,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,QAAmB,EAAE,GAAW;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,qBAAqB;QAAE,MAAM,OAAO,EAAE,CAAC;IAC1F,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC;IAC9C,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,KAAK,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,MAAM;QAAE,KAAK,EAAE,CAAC;IAC9D,OAAO,MAAM,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,KAAK,GAAG,kBAAkB;IAC7E,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QAAC,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAC1G,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC;IACvG,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK;YAAE,MAAM,OAAO,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,IAAI,IAAI,CAAC,CAAC;QAC9G,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,OAAO,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACjC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;QAAE,MAAM,OAAO,EAAE,CAAC;AAC9G,CAAC"}

package/dist/sessions/history.d.ts

@@ -0,0 +1,37 @@
+import { type ConversationState, type ConversationSnapshot, type RecoveryStatus } from './format.js';
+import type { Message } from '../types.js';
+export interface EventLink {
+    id: string;
+    hash: string;
+    sessionId: string;
+}
+export interface SessionEvent extends EventLink {
+    version: 1;
+    at: string;
+    parent: EventLink | null;
+    change: {
+        keep: number;
+        append: Message[];
+        status: RecoveryStatus;
+        droppedMessages: number;
+    };
+    stateHash: string;
+}
+export declare const MAX_HISTORY_EVENTS = 10000;
+export declare const MAX_HISTORY_BYTES: number;
+export declare const stateHash: (state: Pick<ConversationState, 'messages' | 'status' | 'droppedMessages'>) => string;
+export declare const eventLink: (event: SessionEvent) => EventLink;
+export declare function validateEvent(value: unknown, sessionId: string): SessionEvent;
+export declare function makeEvent(sessionId: string, previous: ConversationState | null, next: ConversationState, parent: EventLink | null, id?: `${string}-${string}-${string}-${string}-${string}`, at?: string): SessionEvent;
+export declare function readSessionEvent(dir: string, sessionId: string | undefined, id: string): SessionEvent;
+/** Caller holds messages.lock. Orphans count toward the budget and are never erased. */
+export declare function appendSessionEvents(dir: string, events: SessionEvent[], signal?: AbortSignal): void;
+export declare function applyEvent(previous: ConversationState | null, event: SessionEvent): ConversationSnapshot;
+export interface HistoryReplay {
+    snapshot: ConversationSnapshot;
+    events: SessionEvent[];
+}
+/** Pure deterministic projection; yields so cancellation can interrupt large histories. */
+export declare function replayEvents(events: SessionEvent[], head: EventLink, sessionId: string, signal?: AbortSignal): Promise<HistoryReplay>;
+export declare function replaySessionHistory(dir: string, sessionId: string, head: EventLink, signal?: AbortSignal): Promise<HistoryReplay>;
+//# sourceMappingURL=history.d.ts.map

package/dist/sessions/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../src/sessions/history.ts"],"names":[],"mappings":"AAKA,OAAO,EACwD,KAAK,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3J,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,SAAS;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC1E,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,OAAO,EAAE,CAAC,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAAC,MAAM,EAAE,cAAc,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7F,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AACxC,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAIlD,eAAO,MAAM,SAAS,UAAW,IAAI,CAAC,iBAAiB,EAAE,UAAU,GAAG,QAAQ,GAAG,iBAAiB,CAAC,KAAG,MACY,CAAC;AACnH,eAAO,MAAM,SAAS,UAAW,YAAY,KAAG,SAA6E,CAAC;AAE9H,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,CAiB7E;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI,EAAE,IAAI,EAAE,iBAAiB,EACtG,MAAM,EAAE,SAAS,GAAG,IAAI,EAAE,EAAE,sDAAe,EAAE,EAAE,SAA2B,GAAG,YAAY,CAQ1F;AAUD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAWrG;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAyBnG;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,oBAAoB,CAQxG;AAED,MAAM,WAAW,aAAa;IAAG,QAAQ,EAAE,oBAAoB,CAAC;IAAC,MAAM,EAAE,YAAY,EAAE,CAAA;CAAE;AACzF,2FAA2F;AAC3F,wBAAsB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAiC3I;AAED,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAYxI"}

package/dist/sessions/history.js

@@ -0,0 +1,197 @@
+/** Immutable delta records; messages.json commits the chosen history head. */
+import * as fs from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { throwIfCancelled } from '../cancellation.js';
+import { assertSessionDirectory, hash, invalid, object, readPrivateSessionFile, SessionRecoveryError, statuses, validateMessages, MAX_SNAPSHOT_BYTES, MAX_SNAPSHOT_MESSAGES } from './format.js';
+export const MAX_HISTORY_EVENTS = 10000;
+export const MAX_HISTORY_BYTES = 64 * 1024 * 1024;
+const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const digest = /^[0-9a-f]{64}$/;
+const fields = new Set(['version', 'id', 'hash', 'sessionId', 'at', 'parent', 'change', 'stateHash']);
+export const stateHash = (state) => hash(JSON.stringify({ messages: state.messages, status: state.status, droppedMessages: state.droppedMessages }));
+export const eventLink = (event) => ({ id: event.id, hash: event.hash, sessionId: event.sessionId });
+export function validateEvent(value, sessionId) {
+    if (!object(value))
+        throw invalid();
+    const event = value;
+    const link = (value) => object(value) && Object.keys(value).length === 3 && typeof value.sessionId === 'string' && /^[a-zA-Z0-9_-]{1,200}$/.test(value.sessionId) && typeof value.id === 'string' && uuid.test(value.id) && typeof value.hash === 'string' && digest.test(value.hash);
+    if (Object.keys(value).some(key => !fields.has(key)) || event.version !== 1 || event.sessionId !== sessionId || !/^[a-zA-Z0-9_-]{1,200}$/.test(event.sessionId) ||
+        typeof event.id !== 'string' || !uuid.test(event.id) || typeof event.at !== 'string' || !Number.isFinite(Date.parse(event.at)) ||
+        new Date(event.at).toISOString() !== event.at || event.parent !== null && !link(event.parent) ||
+        !object(event.change) || Object.keys(event.change).sort().join() !== 'append,droppedMessages,keep,status' ||
+        !Number.isSafeInteger(event.change.keep) || event.change.keep < 0 || event.change.keep > MAX_SNAPSHOT_MESSAGES ||
+        !Array.isArray(event.change.append) || event.change.append.length > MAX_SNAPSHOT_MESSAGES ||
+        !Number.isSafeInteger(event.change.droppedMessages) || event.change.droppedMessages < 0 ||
+        !statuses.includes(event.change.status) || !digest.test(event.stateHash) || !digest.test(event.hash))
+        throw invalid();
+    try {
+        const { hash: expected, ...body } = event;
+        if (hash(JSON.stringify(body)) !== expected)
+            throw invalid();
+    }
+    catch {
+        throw invalid();
+    }
+    return event;
+}
+export function makeEvent(sessionId, previous, next, parent, id = randomUUID(), at = new Date().toISOString()) {
+    validateMessages(next.messages);
+    let keep = 0;
+    if (previous && parent)
+        while (keep < Math.min(previous.messages.length, next.messages.length) &&
+            JSON.stringify(previous.messages[keep]) === JSON.stringify(next.messages[keep]))
+            keep++;
+    const body = { version: 1, id, sessionId, at, parent,
+        change: { keep, append: next.messages.slice(keep), status: next.status, droppedMessages: next.droppedMessages }, stateHash: stateHash(next) };
+    return validateEvent(JSON.parse(JSON.stringify({ ...body, hash: hash(JSON.stringify(body)) })), sessionId);
+}
+function historyDir(dir, create = false) {
+    assertSessionDirectory(dir);
+    const target = join(dir, 'events');
+    if (create && !fs.existsSync(target))
+        fs.mkdirSync(target, { mode: 0o700 });
+    if (!fs.lstatSync(target).isDirectory() || fs.lstatSync(target).isSymbolicLink())
+        throw invalid();
+    return target;
+}
+export function readSessionEvent(dir, sessionId, id) {
+    if (!uuid.test(id))
+        throw invalid();
+    const raw = readPrivateSessionFile(join(historyDir(dir), `${id}.json`), MAX_SNAPSHOT_BYTES + 4096);
+    if (raw === null)
+        throw invalid();
+    try {
+        const data = JSON.parse(raw);
+        if (!object(data) || typeof data.sessionId !== 'string')
+            throw invalid();
+        const event = validateEvent(data, sessionId ?? data.sessionId);
+        if (event.id !== id)
+            throw invalid();
+        return event;
+    }
+    catch {
+        throw invalid();
+    }
+}
+/** Caller holds messages.lock. Orphans count toward the budget and are never erased. */
+export function appendSessionEvents(dir, events, signal) {
+    throwIfCancelled(signal);
+    const target = historyDir(dir, true);
+    let bytes = 0, count = 0;
+    const entries = fs.opendirSync(target);
+    try {
+        let entry;
+        while ((entry = entries.readSync())) {
+            if (!entry.isFile())
+                throw invalid();
+            count++;
+            bytes += fs.lstatSync(join(target, entry.name)).size;
+            if (count > MAX_HISTORY_EVENTS || bytes > MAX_HISTORY_BYTES)
+                break;
+        }
+    }
+    finally {
+        entries.closeSync();
+    }
+    const records = events.map(event => JSON.stringify(validateEvent(event, event.sessionId)));
+    if (records.some(text => Buffer.byteLength(text) > MAX_SNAPSHOT_BYTES + 4096) || count + records.length > MAX_HISTORY_EVENTS ||
+        bytes + records.reduce((sum, text) => sum + Buffer.byteLength(text), 0) > MAX_HISTORY_BYTES)
+        throw new SessionRecoveryError('io', 'session history budget reached; create /branch or /new to continue while preserving existing history.');
+    for (let index = 0; index < events.length; index++) {
+        throwIfCancelled(signal);
+        const fd = fs.openSync(join(target, `${events[index].id}.json`), 'wx', 0o600);
+        try {
+            fs.writeFileSync(fd, records[index]);
+            fs.fsyncSync(fd);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    }
+    const fd = fs.openSync(target, 'r');
+    try {
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+export function applyEvent(previous, event) {
+    if ((!previous && event.change.keep !== 0) || event.change.keep > (previous?.messages.length ?? 0))
+        throw invalid();
+    const messages = [...(previous?.messages.slice(0, event.change.keep) ?? []), ...event.change.append];
+    validateMessages(messages);
+    const body = { version: 1, sessionId: event.sessionId, revision: event.id, updatedAt: event.at,
+        status: event.change.status, droppedMessages: event.change.droppedMessages, messages, history: eventLink(event) };
+    if (stateHash(body) !== event.stateHash)
+        throw invalid();
+    return { ...body, checksum: hash(JSON.stringify(body)) };
+}
+/** Pure deterministic projection; yields so cancellation can interrupt large histories. */
+export async function replayEvents(events, head, sessionId, signal) {
+    if (!events.length || events.length > MAX_HISTORY_EVENTS)
+        throw invalid();
+    const byId = new Map();
+    let bytes = 0;
+    for (const event of events) {
+        throwIfCancelled(signal);
+        if (!object(event))
+            throw invalid();
+        validateEvent(event, event.sessionId);
+        bytes += Buffer.byteLength(JSON.stringify(event));
+        if (byId.has(event.id) || bytes > MAX_HISTORY_BYTES)
+            throw invalid();
+        byId.set(event.id, event);
+        if (byId.size % 32 === 0)
+            await new Promise(resolve => setImmediate(resolve));
+    }
+    const chain = [], seen = new Set();
+    let current = head;
+    while (current) {
+        throwIfCancelled(signal);
+        const event = byId.get(current.id);
+        if (!event || event.sessionId !== current.sessionId || event.hash !== current.hash || seen.has(event.id))
+            throw invalid();
+        seen.add(event.id);
+        chain.push(event);
+        current = event.parent;
+    }
+    chain.reverse();
+    let snapshot = null;
+    for (let index = 0; index < chain.length; index++) {
+        throwIfCancelled(signal);
+        snapshot = applyEvent(snapshot, chain[index]);
+        if (index % 16 === 0)
+            await new Promise(resolve => setImmediate(resolve));
+    }
+    throwIfCancelled(signal);
+    if (snapshot.sessionId !== sessionId) {
+        const { checksum: _checksum, ...body } = snapshot;
+        body.sessionId = sessionId;
+        snapshot = { ...body, checksum: hash(JSON.stringify(body)) };
+    }
+    return { snapshot: snapshot, events: chain };
+}
+export async function replaySessionHistory(dir, sessionId, head, signal) {
+    const events = [], seen = new Set();
+    let current = head, bytes = 0;
+    while (current) {
+        throwIfCancelled(signal);
+        if (seen.has(current.id) || events.length >= MAX_HISTORY_EVENTS)
+            throw invalid();
+        const event = readSessionEvent(dir, current.sessionId, current.id);
+        if (event.hash !== current.hash)
+            throw invalid();
+        bytes += Buffer.byteLength(JSON.stringify(event));
+        if (bytes > MAX_HISTORY_BYTES)
+            throw invalid();
+        events.push(event);
+        seen.add(event.id);
+        current = event.parent;
+        if (events.length % 16 === 0)
+            await new Promise(resolve => setImmediate(resolve));
+    }
+    return replayEvents(events, head, sessionId, signal);
+}
+//# sourceMappingURL=history.js.map

package/dist/sessions/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/sessions/history.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,QAAQ,EAC5G,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAA0E,MAAM,aAAa,CAAC;AAW3J,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACxC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAClD,MAAM,IAAI,GAAG,2EAA2E,CAAC;AACzF,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAChC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AACtG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAyE,EAAU,EAAE,CAC7G,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;AACnH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAa,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;AAE9H,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,SAAiB;IAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/R,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7J,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9H,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7F,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,oCAAoC;QACzG,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,qBAAqB;QAC9G,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,qBAAqB;QACzF,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC;QACvF,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACxH,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAC1C,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,QAAQ;YAAE,MAAM,OAAO,EAAE,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,SAAiB,EAAE,QAAkC,EAAE,IAAuB,EACtG,MAAwB,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAC1E,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,IAAI,MAAM;QAAE,OAAO,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5F,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,EAAE,CAAC;IAC1F,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM;QAC3D,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAChJ,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAC7G,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,MAAM,GAAG,KAAK;IAC7C,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE;QAAE,MAAM,OAAO,EAAE,CAAC;IAClG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,SAA6B,EAAE,EAAU;IACrF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACnG,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAAE,MAAM,OAAO,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE;YAAE,MAAM,OAAO,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,MAAsB,EAAE,MAAoB;IAC3F,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,KAAuB,CAAC;QAC5B,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,MAAM,OAAO,EAAE,CAAC;YACrC,KAAK,EAAE,CAAC;YAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9D,IAAI,KAAK,GAAG,kBAAkB,IAAI,KAAK,GAAG,iBAAiB;gBAAE,MAAM;QACrE,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,OAAO,CAAC,SAAS,EAAE,CAAC;IAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,kBAAkB,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,kBAAkB;QAC1H,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,iBAAiB;QAC3F,MAAM,IAAI,oBAAoB,CAAC,IAAI,EAAE,uGAAuG,CAAC,CAAC;IAChJ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC;YAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAE,CAAC,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBACxD,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAC/B,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAkC,EAAE,KAAmB;IAChF,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACpH,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;QACrG,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACpH,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,SAAS;QAAE,MAAM,OAAO,EAAE,CAAC;IACzD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAGD,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAsB,EAAE,IAAe,EAAE,SAAiB,EAAE,MAAoB;IACjH,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB;QAAE,MAAM,OAAO,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACpC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACtC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,iBAAiB;YAAE,MAAM,OAAO,EAAE,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,GAAmB,EAAE,EAAE,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAAC,IAAI,OAAO,GAAqB,IAAI,CAAC;IACjG,OAAO,OAAO,EAAE,CAAC;QACf,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,KAAK,GAA6B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QAC1H,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;IAChE,CAAC;IACD,KAAK,CAAC,OAAO,EAAE,CAAC;IAChB,IAAI,QAAQ,GAAgC,IAAI,CAAC;IACjD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC;QAC/C,IAAI,KAAK,GAAG,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,QAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,QAAS,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,SAAiB,EAAE,IAAe,EAAE,MAAoB;IAC9G,MAAM,MAAM,GAAmB,EAAE,EAAE,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAAC,IAAI,OAAO,GAAqB,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;IAC7G,OAAO,OAAO,EAAE,CAAC;QACf,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB;YAAE,MAAM,OAAO,EAAE,CAAC;QACjF,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAAE,MAAM,OAAO,EAAE,CAAC;QACjD,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,IAAI,KAAK,GAAG,iBAAiB;YAAE,MAAM,OAAO,EAAE,CAAC;QAClG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/D,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC"}

package/dist/sessions/index.d.ts

@@ -0,0 +1,8 @@
+export * from './format.js';
+export * from './snapshot.js';
+export * from './context.js';
+export * from './history.js';
+export * from './tool-state.js';
+export * from './portable.js';
+export * from './output.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/sessions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sessions/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}

package/dist/sessions/index.js

@@ -0,0 +1,8 @@
+export * from './format.js';
+export * from './snapshot.js';
+export * from './context.js';
+export * from './history.js';
+export * from './tool-state.js';
+export * from './portable.js';
+export * from './output.js';
+//# sourceMappingURL=index.js.map

package/dist/sessions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sessions/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}

package/dist/sessions/output.d.ts

@@ -0,0 +1,31 @@
+export declare const MAX_TOOL_OUTPUT_CHARS = 65536;
+export declare const MAX_TOOL_OUTPUTS = 100;
+export declare const MAX_TOOL_OUTPUT_BYTES: number;
+export interface ToolOutputRecord {
+    version: 1;
+    id: string;
+    toolCallId: string;
+    tool: string;
+    channel: 'tool' | 'thinking';
+    content: string;
+    sourceChars: number;
+    truncated: boolean;
+    isError: boolean;
+    createdAt: string;
+    hash: string;
+}
+export interface CapturedToolOutput {
+    record: ToolOutputRecord;
+    saved: boolean;
+}
+export interface ToolOutputSnapshot {
+    version: 1;
+    dropped: number;
+    records: ToolOutputRecord[];
+    checksum: string;
+}
+export declare function makeToolOutput(toolCallId: string, tool: string, text: string, isError: boolean): ToolOutputRecord;
+export declare function validateToolOutputSnapshot(value: unknown): ToolOutputSnapshot;
+export declare function readToolOutputs(dir: string): ToolOutputSnapshot;
+export declare function saveToolOutput(dir: string, record: ToolOutputRecord, signal?: AbortSignal): void;
+//# sourceMappingURL=output.d.ts.map

package/dist/sessions/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/sessions/output.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAC3C,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,qBAAqB,QAAkB,CAAC;AACrD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IACvF,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAC7G;AACD,MAAM,WAAW,kBAAkB;IAAG,MAAM,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE;AAChF,MAAM,WAAW,kBAAkB;IAAG,OAAO,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAIlH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAOjH;AAID,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAgB7E;AAKD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAE/D;AACD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CA4BhG"}

package/dist/sessions/output.js

@@ -0,0 +1,115 @@
+/** Private, bounded inspection cache. Audit history retains references after eviction. */
+import * as fs from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { assertSessionDirectory, readPrivateSessionFile, object, hash } from './format.js';
+import { approvalDisplayText } from '../approvals/request.js';
+import { throwIfCancelled } from '../cancellation.js';
+export const MAX_TOOL_OUTPUT_CHARS = 65536;
+export const MAX_TOOL_OUTPUTS = 100;
+export const MAX_TOOL_OUTPUT_BYTES = 4 * 1024 * 1024;
+const uuid = (value) => typeof value === 'string' && /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(value);
+const bad = () => new Error('Tool output records are unavailable or damaged; preserve them and inspect session storage.');
+const clip = (value, limit) => value.slice(0, limit).replace(/[\uD800-\uDBFF]$/, '');
+export function makeToolOutput(toolCallId, tool, text, isError) {
+    if (!toolCallId || toolCallId.length > 256 || !/^[a-zA-Z0-9_.:-]{1,128}$/.test(tool) || typeof text !== 'string')
+        throw bad();
+    const visible = approvalDisplayText(clip(text, MAX_TOOL_OUTPUT_CHARS * 2));
+    const content = clip(visible, MAX_TOOL_OUTPUT_CHARS);
+    return { version: 1, id: randomUUID(), toolCallId, tool, channel: tool === 'think' ? 'thinking' : 'tool', content,
+        sourceChars: text.length, truncated: text.length > MAX_TOOL_OUTPUT_CHARS * 2 || visible.length > content.length,
+        isError, createdAt: new Date().toISOString(), hash: hash(content) };
+}
+const envelope = (records, dropped) => {
+    const data = { version: 1, dropped, records };
+    return { ...data, checksum: hash(JSON.stringify(data)) };
+};
+export function validateToolOutputSnapshot(value) {
+    if (!object(value) || Object.keys(value).sort().join() !== 'checksum,dropped,records,version' || value.version !== 1 ||
+        !Number.isSafeInteger(value.dropped) || Number(value.dropped) < 0 || !Array.isArray(value.records) || value.records.length > MAX_TOOL_OUTPUTS)
+        throw bad();
+    const ids = new Set();
+    for (const record of value.records) {
+        if (!object(record) || Object.keys(record).sort().join() !== 'channel,content,createdAt,hash,id,isError,sourceChars,tool,toolCallId,truncated,version' || record.version !== 1 ||
+            !uuid(record.id) || ids.has(String(record.id)) || typeof record.toolCallId !== 'string' || !record.toolCallId || record.toolCallId.length > 256 ||
+            typeof record.tool !== 'string' || !/^[a-zA-Z0-9_.:-]{1,128}$/.test(record.tool) || record.channel !== (record.tool === 'think' ? 'thinking' : 'tool') ||
+            typeof record.content !== 'string' || record.content.length > MAX_TOOL_OUTPUT_CHARS || record.hash !== hash(record.content) ||
+            !Number.isSafeInteger(record.sourceChars) || Number(record.sourceChars) < 0 || typeof record.truncated !== 'boolean' || typeof record.isError !== 'boolean' ||
+            typeof record.createdAt !== 'string' || record.createdAt.length > 40 || !Number.isFinite(Date.parse(record.createdAt)))
+            throw bad();
+        ids.add(record.id);
+    }
+    const checked = envelope(value.records, Number(value.dropped));
+    if (checked.checksum !== value.checksum || Buffer.byteLength(JSON.stringify(checked)) > MAX_TOOL_OUTPUT_BYTES)
+        throw bad();
+    return checked;
+}
+function parse(raw) {
+    if (raw === null)
+        return envelope([], 0);
+    try {
+        return validateToolOutputSnapshot(JSON.parse(raw));
+    }
+    catch {
+        throw bad();
+    }
+}
+export function readToolOutputs(dir) {
+    assertSessionDirectory(dir);
+    return parse(readPrivateSessionFile(join(dir, 'tool-output.json'), MAX_TOOL_OUTPUT_BYTES));
+}
+export function saveToolOutput(dir, record, signal) {
+    throwIfCancelled(signal);
+    assertSessionDirectory(dir);
+    validateToolOutputSnapshot(envelope([record], 0));
+    const identity = fs.statSync(dir), file = join(dir, 'tool-output.json'), lock = file + '.lock', temp = join(dir, `.output-${randomUUID()}.tmp`);
+    let fd;
+    try {
+        fd = fs.openSync(lock, 'wx', 0o600);
+    }
+    catch {
+        throw new Error('Tool output writer is busy; this result remains available in the current transcript.');
+    }
+    try {
+        fs.writeFileSync(fd, String(process.pid));
+        const raw = readPrivateSessionFile(file, MAX_TOOL_OUTPUT_BYTES), previous = parse(raw);
+        if (previous.records.some(item => item.id === record.id))
+            throw new Error('Tool output ID already exists; refusing to replace evidence.');
+        const records = [...previous.records, record];
+        let dropped = previous.dropped, next = envelope(records, dropped);
+        while (records.length > MAX_TOOL_OUTPUTS || Buffer.byteLength(JSON.stringify(next)) > MAX_TOOL_OUTPUT_BYTES) {
+            records.shift();
+            next = envelope(records, ++dropped);
+        }
+        validateToolOutputSnapshot(next);
+        const output = fs.openSync(temp, 'wx', 0o600);
+        try {
+            fs.writeFileSync(output, JSON.stringify(next));
+            fs.fsyncSync(output);
+        }
+        finally {
+            fs.closeSync(output);
+        }
+        throwIfCancelled(signal);
+        assertSessionDirectory(dir);
+        const current = fs.statSync(dir);
+        if (current.ino !== identity.ino || current.dev !== identity.dev || readPrivateSessionFile(file, MAX_TOOL_OUTPUT_BYTES) !== raw)
+            throw new Error('Tool output store changed during save; current transcript retains the result.');
+        fs.renameSync(temp, file);
+    }
+    finally {
+        fs.closeSync(fd);
+        try {
+            const current = fs.lstatSync(dir);
+            if (!current.isSymbolicLink() && current.ino === identity.ino && current.dev === identity.dev) {
+                try {
+                    fs.unlinkSync(temp);
+                }
+                catch { /* Already committed. */ }
+                fs.unlinkSync(lock);
+            }
+        }
+        catch { /* Never clean a replacement directory. */ }
+    }
+}
+//# sourceMappingURL=output.js.map

package/dist/sessions/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/sessions/output.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAOrD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1H,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;AAC1H,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;AACrG,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,IAAY,EAAE,IAAY,EAAE,OAAgB;IAC7F,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,GAAG,EAAE,CAAC;IAC9H,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACrD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO;QAC/G,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,qBAAqB,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;QAC/G,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AACxE,CAAC;AACD,MAAM,QAAQ,GAAG,CAAC,OAA2B,EAAE,OAAe,EAAsB,EAAE;IACpF,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAAC,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AACnH,CAAC,CAAC;AACF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,kCAAkC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAClH,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,gBAAgB;QAAE,MAAM,GAAG,EAAE,CAAC;IAC7J,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,yFAAyF,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAC5K,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;YAC/I,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;YACtJ,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,qBAAqB,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC3H,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;YAC3J,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAE,MAAM,GAAG,EAAE,CAAC;QACtI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAA6B,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,qBAAqB;QAAE,MAAM,GAAG,EAAE,CAAC;IAC3H,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,SAAS,KAAK,CAAC,GAAkB;IAC/B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC;QAAC,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,GAAG,EAAE,CAAC;IAAC,CAAC;AACpF,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAAC,OAAO,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAC1H,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,MAAwB,EAAE,MAAoB;IACxF,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,UAAU,EAAE,MAAM,CAAC,CAAC;IAChJ,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QAAC,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAAC,CAAC;IAC/J,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvF,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAC1I,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjH,OAAO,OAAO,CAAC,MAAM,GAAG,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,qBAAqB,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QACtK,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC;YAAC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAC/G,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,CAAC,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QAClO,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;gBAC9F,IAAI,CAAC;oBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;gBAC/D,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/dist/sessions/portable.d.ts

@@ -0,0 +1,26 @@
+import { type EventLink, type HistoryReplay, type SessionEvent } from './history.js';
+import { type ToolStateFile } from './tool-state.js';
+export declare const MAX_BUNDLE_BYTES: number;
+export interface SessionBundle {
+    version: 1;
+    kind: 'calliope-session';
+    createdAt: string;
+    source: {
+        sessionId: string;
+        revision: string;
+        stateHash: string;
+    };
+    head: EventLink;
+    events: SessionEvent[];
+    toolState: ToolStateFile[];
+    checksum: string;
+}
+export declare function makeBundle(replay: HistoryReplay, toolState: ToolStateFile[]): SessionBundle;
+/** Validate the complete projection before creating any destination files. */
+export declare function parseBundle(text: string, signal?: AbortSignal): Promise<{
+    bundle: SessionBundle;
+    replay: HistoryReplay;
+}>;
+/** Fresh inactive destinations only. messages.json is the final commit marker. */
+export declare function installBundle(dir: string, sessionId: string, text: string, signal?: AbortSignal): Promise<HistoryReplay>;
+//# sourceMappingURL=portable.d.ts.map

package/dist/sessions/portable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable.d.ts","sourceRoot":"","sources":["../../src/sessions/portable.ts"],"names":[],"mappings":"AAMA,OAAO,EAAwD,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAC3I,OAAO,EAA6D,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhH,eAAO,MAAM,gBAAgB,QAAyD,CAAC;AACvF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,aAAa,CAO3F;AAED,8EAA8E;AAC9E,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC,CAmB/H;AAED,kFAAkF;AAClF,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAmC9H"}