@chatcode/chatcode-cli-test 1.0.41 → 1.0.43

package/bin/cli.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { spawnSync } from 'node:child_process'
 import { existsSync, readFileSync } from 'node:fs'
 import { createRequire } from 'node:module'
 import { dirname, join } from 'node:path'
 import { fileURLToPath } from 'node:url'
+import { runSupervised } from './generation-supervisor.js'
 
 const require = createRequire(import.meta.url)
 const here = dirname(fileURLToPath(import.meta.url))
@@ -16,8 +16,17 @@ const mainPackage = JSON.parse(
 )
 const mainPackageName = mainPackage.name
 
+function shouldUseNativeBinary() {
+  if (process.env.CHATCODE_CLI_FORCE_NODE === '1') return false
+  return (
+    process.env.CHATCODE_CLI_USE_NATIVE === '1' ||
+    process.env.CHATCODE_CLI_FORCE_NATIVE === '1'
+  )
+}
+
 function resolveOptionalBinary() {
   if (process.env.CHATCODE_CLI_FORCE_NODE === '1') return null
+  if (!shouldUseNativeBinary()) return null
 
   try {
     const packageName = `${mainPackageName}-${platformKey}`
@@ -43,16 +52,14 @@ function resolveOptionalBinary() {
 
 function resolveLocalBinary() {
   if (process.env.CHATCODE_CLI_FORCE_NODE === '1') return null
+  if (!shouldUseNativeBinary()) return null
 
   const localBinary = join(root, 'dist', 'native', platformKey, executableName)
   return existsSync(localBinary) ? localBinary : null
 }
 
 function run(command, commandArgs) {
-  const result = spawnSync(command, commandArgs, {
-    stdio: 'inherit',
-    windowsHide: false,
-  })
+  const result = runSupervised(command, commandArgs)
 
   if (result.error) return result.error
   if (result.signal) {
@@ -82,6 +89,10 @@ if (!existsSync(fallbackCli)) {
 const error = run(process.execPath, [
   '--max-old-space-size=4096',
   '--stack_size=4096',
+  // The REPL only calls global.gc() after an idle rebuildable-cache release. This
+  // lets V8 reclaim the now-unreachable graph promptly instead of waiting for
+  // a future allocation to discover it.
+  '--expose-gc',
   fallbackCli,
   ...args,
 ])

package/bin/generation-supervisor.js

@@ -0,0 +1,131 @@
+import { spawnSync } from 'node:child_process'
+import { randomUUID } from 'node:crypto'
+import {
+  existsSync,
+  readFileSync,
+  statSync,
+  unlinkSync,
+} from 'node:fs'
+import { tmpdir } from 'node:os'
+import { isAbsolute, join, resolve } from 'node:path'
+
+export const PROCESS_GENERATION_ROTATE_EXIT_CODE = 75
+export const GENERATION_CONTROL_FILE_ENV =
+  'CHATCODE_CLI_GENERATION_CONTROL_FILE'
+export const GENERATION_CONTROL_TOKEN_ENV =
+  'CHATCODE_CLI_GENERATION_CONTROL_TOKEN'
+export const INTERNAL_RESUME_SESSION_ENV =
+  'CHATCODE_CLI_INTERNAL_RESUME_SESSION_ID'
+export const PROCESS_GENERATION_INDEX_ENV =
+  'CHATCODE_CLI_PROCESS_GENERATION_INDEX'
+export const GENERATION_SUPERVISOR_PID_ENV =
+  'CHATCODE_CLI_GENERATION_SUPERVISOR_PID'
+
+const UUID_PATTERN =
+  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i
+const MAX_CONTROL_FILE_BYTES = 8 * 1024
+
+function removeControlFile(controlFile) {
+  try {
+    if (existsSync(controlFile)) unlinkSync(controlFile)
+  } catch {
+    // The file is private, contains no conversation content, and lives only
+    // for this supervisor lifetime. Failure to remove it must not hide the
+    // child process's real exit status.
+  }
+}
+
+function readRotationRequest(controlFile, token) {
+  try {
+    const stat = statSync(controlFile)
+    if (!stat.isFile() || stat.size <= 0 || stat.size > MAX_CONTROL_FILE_BYTES) {
+      return null
+    }
+
+    const request = JSON.parse(readFileSync(controlFile, 'utf8'))
+    if (
+      request?.version !== 1 ||
+      request.token !== token ||
+      typeof request.sessionId !== 'string' ||
+      !UUID_PATTERN.test(request.sessionId) ||
+      typeof request.cwd !== 'string' ||
+      request.cwd.length === 0
+    ) {
+      return null
+    }
+
+    const cwd = isAbsolute(request.cwd)
+      ? resolve(request.cwd)
+      : resolve(process.cwd(), request.cwd)
+    if (!statSync(cwd).isDirectory()) return null
+
+    return { sessionId: request.sessionId, cwd }
+  } catch {
+    return null
+  }
+}
+
+/**
+ * Run a ChatCode worker and replace it only after an authenticated, explicit
+ * generation-rotation request. The supervisor itself holds no transcript or
+ * UI graph, so replacing the worker returns JSC/V8, Yoga/WASM and native
+ * allocator high-water pages to the operating system.
+ */
+export function runSupervised(command, commandArgs) {
+  const token = randomUUID()
+  const controlFile = join(
+    tmpdir(),
+    `chatcode-cli-generation-${process.pid}-${randomUUID()}.json`,
+  )
+  let cwd = process.cwd()
+  let resumeSessionId
+  let generation = 0
+
+  try {
+    while (true) {
+      removeControlFile(controlFile)
+      const env = {
+        ...process.env,
+        [GENERATION_CONTROL_FILE_ENV]: controlFile,
+        [GENERATION_CONTROL_TOKEN_ENV]: token,
+        [PROCESS_GENERATION_INDEX_ENV]: String(generation),
+        [GENERATION_SUPERVISOR_PID_ENV]: String(process.pid),
+      }
+      // Never trust an inherited internal-resume value. Only a request whose
+      // one-time control token was validated above can populate this channel.
+      delete env[INTERNAL_RESUME_SESSION_ENV]
+      if (resumeSessionId) {
+        env[INTERNAL_RESUME_SESSION_ENV] = resumeSessionId
+      }
+
+      const result = spawnSync(command, commandArgs, {
+        cwd,
+        env,
+        stdio: 'inherit',
+        windowsHide: false,
+      })
+
+      if (
+        result.error ||
+        result.signal ||
+        result.status !== PROCESS_GENERATION_ROTATE_EXIT_CODE
+      ) {
+        return result
+      }
+
+      const request = readRotationRequest(controlFile, token)
+      if (!request) {
+        console.error(
+          'ChatCode CLI rejected an invalid process-generation rotation request.',
+        )
+        return result
+      }
+
+      resumeSessionId = request.sessionId
+      cwd = request.cwd
+      generation += 1
+    }
+  } finally {
+    removeControlFile(controlFile)
+  }
+}