@cjhyy/code-shell-core 0.8.9 → 0.8.11

package/dist/profile/catalog-store.js

@@ -8,7 +8,7 @@
  *   ~/.code-shell/human-repos.json        —— 注册表（owner/repo 列表）
  *   ~/.code-shell/human-repos/<key>/      —— 各仓库的浅克隆
  */
-import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { closeSync, constants, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { basename, dirname, join } from "node:path";
 import { codeShellHome } from "../session/session-manager.js";
@@ -19,6 +19,7 @@ import { acquireLockOnPath, mutateJsonFile } from "../utils/file-mutex.js";
 import { gitClone, githubRepoToCloneUrl } from "../plugins/gitOps.js";
 import { CATALOG_REPO_RE, readCatalogFromDir, sourceToRepoKey, } from "./catalog.js";
 const MAX_REPOS = 32;
+const MAX_REPO_REGISTRY_BYTES = 256 * 1024;
 export function humanReposRoot() {
     return join(codeShellHome(), "human-repos");
 }
@@ -29,13 +30,32 @@ export function humanRepoDir(repo) {
     return join(humanReposRoot(), sourceToRepoKey(repo));
 }
 export function listHumanRepos() {
+    let descriptor;
     try {
         // Missing or corrupt registry reads as "no repos" — never fatal.
-        return parseRegistry(readFileSync(registryPath(), "utf-8"));
+        const path = registryPath();
+        const metadata = lstatSync(path);
+        if (metadata.isSymbolicLink() ||
+            !metadata.isFile() ||
+            metadata.size > MAX_REPO_REGISTRY_BYTES) {
+            throw new Error("invalid digital-human repo registry");
+        }
+        descriptor = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+        const opened = fstatSync(descriptor);
+        if (!opened.isFile() || opened.size > MAX_REPO_REGISTRY_BYTES) {
+            throw new Error("invalid digital-human repo registry");
+        }
+        return parseRegistry(readFileSync(descriptor, "utf-8"));
     }
-    catch {
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
         return [];
     }
+    finally {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+    }
 }
 function parseRegistry(raw) {
     if (raw === undefined)
@@ -44,12 +64,26 @@ function parseRegistry(raw) {
         const parsed = JSON.parse(raw);
         if (!Array.isArray(parsed.repos))
             return [];
+        const seen = new Set();
         return parsed.repos
+            .slice(0, MAX_REPOS)
             .filter((r) => !!r &&
             typeof r === "object" &&
             typeof r.repo === "string" &&
             CATALOG_REPO_RE.test(r.repo))
-            .map((r) => ({ repo: r.repo, addedAt: Number(r.addedAt) || 0 }));
+            .filter((r) => {
+            const normalized = r.repo.toLowerCase();
+            if (seen.has(normalized))
+                return false;
+            seen.add(normalized);
+            return true;
+        })
+            .map((r) => ({
+            repo: r.repo,
+            addedAt: typeof r.addedAt === "number" && Number.isSafeInteger(r.addedAt) && r.addedAt >= 0
+                ? r.addedAt
+                : 0,
+        }));
     }
     catch {
         return [];
@@ -101,6 +135,7 @@ function updateRegistry(change) {
         serialize: (repos) => `${JSON.stringify({ repos }, null, 2)}\n`,
         mutation: (current) => ({ value: change(current) }),
         mode: 0o600,
+        maxBytes: MAX_REPO_REGISTRY_BYTES,
     });
 }
 /**

package/dist/profile/catalog.js

@@ -9,13 +9,18 @@
  *
  * 本模块只做**读取与校验**，克隆/更新由 host 驱动（涉及网络与磁盘写入）。
  */
-import { existsSync, readFileSync } from "node:fs";
+import { closeSync, constants, existsSync, fstatSync, lstatSync, openSync, readFileSync, } from "node:fs";
 import { join } from "node:path";
 import { WorkspaceProfileSchema } from "./types.js";
 /** `owner/repo`，与 SKILL_REPO_RE 同源，供仓库地址复用。 */
 export const CATALOG_REPO_RE = /^[A-Za-z0-9][A-Za-z0-9-]{0,38}\/[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;
 /** 单个目录段的安全名，挡住 `..`、分隔符与 NUL。 */
 const SAFE_SEGMENT_RE = /^[a-z0-9][a-z0-9_-]{0,63}$/;
+const MAX_MANIFEST_BYTES = 1024 * 1024;
+const MAX_PROFILE_BYTES = 256 * 1024;
+const MAX_MANIFEST_HUMANS = 1_000;
+const MAX_MANIFEST_TEAMS = 500;
+const MAX_ENTRY_TAGS = 64;
 /**
  * `owner/repo` → 一个安全的目录段。小写化保证同一仓库不同大小写写法命中同一份
  * 缓存；斜杠换成 `-` 后仍需通过 SAFE_SEGMENT_RE，杜绝路径逃逸。
@@ -37,44 +42,63 @@ export function sourceToRepoKey(repo) {
 export function parseHumansManifest(raw) {
     const value = JSON.parse(raw);
     const rawHumans = Array.isArray(value.humans) ? value.humans : [];
+    if (rawHumans.length > MAX_MANIFEST_HUMANS)
+        throw new Error("too many humans in manifest");
     const humans = [];
     for (const item of rawHumans) {
         if (!item || typeof item !== "object" || Array.isArray(item))
             continue;
         const entry = item;
-        if (typeof entry.name !== "string" || !entry.name)
+        if (typeof entry.name !== "string" || !entry.name || entry.name.length > 64)
             continue;
         humans.push({
             name: entry.name,
-            ...(typeof entry.label === "string" ? { label: entry.label } : {}),
-            ...(typeof entry.description === "string" ? { description: entry.description } : {}),
-            ...(typeof entry.category === "string" ? { category: entry.category } : {}),
+            ...(typeof entry.label === "string" && entry.label.length <= 120
+                ? { label: entry.label }
+                : {}),
+            ...(typeof entry.description === "string" && entry.description.length <= 4_096
+                ? { description: entry.description }
+                : {}),
+            ...(typeof entry.category === "string" && entry.category.length <= 120
+                ? { category: entry.category }
+                : {}),
             tags: Array.isArray(entry.tags)
-                ? entry.tags.filter((t) => typeof t === "string")
+                ? entry.tags
+                    .slice(0, MAX_ENTRY_TAGS)
+                    .filter((t) => typeof t === "string" && t.length <= 120)
                 : [],
         });
     }
     const rawTeams = Array.isArray(value.teams) ? value.teams : [];
+    if (rawTeams.length > MAX_MANIFEST_TEAMS)
+        throw new Error("too many teams in manifest");
     const teams = [];
     for (const item of rawTeams) {
         if (!item || typeof item !== "object" || Array.isArray(item))
             continue;
         const entry = item;
-        if (typeof entry.id !== "string" || !entry.id)
+        if (typeof entry.id !== "string" || !entry.id || entry.id.length > 64)
             continue;
-        if (typeof entry.name !== "string" || !entry.name)
+        if (typeof entry.name !== "string" || !entry.name || entry.name.length > 120)
             continue;
         const rawMembers = Array.isArray(entry.members) ? entry.members : [];
-        const members = rawMembers.filter((m) => typeof m === "string" && m.length > 0);
-        if (members.length < 2)
+        const members = rawMembers.filter((m) => typeof m === "string" && SAFE_SEGMENT_RE.test(m));
+        if (members.length < 2 || members.length > 8 || new Set(members).size !== members.length) {
             continue;
+        }
         teams.push({
             id: entry.id,
             name: entry.name,
-            ...(typeof entry.description === "string" ? { description: entry.description } : {}),
+            ...(typeof entry.description === "string" && entry.description.length <= 1_000
+                ? { description: entry.description }
+                : {}),
             members,
-            ...(typeof entry.lead === "string" && entry.lead ? { lead: entry.lead } : {}),
-            ...(typeof entry.playbook === "string" && entry.playbook ? { playbook: entry.playbook } : {}),
+            ...(typeof entry.lead === "string" && SAFE_SEGMENT_RE.test(entry.lead)
+                ? { lead: entry.lead }
+                : {}),
+            ...(typeof entry.playbook === "string" && entry.playbook.length <= 4_000
+                ? { playbook: entry.playbook }
+                : {}),
         });
     }
     return {
@@ -84,6 +108,22 @@ export function parseHumansManifest(raw) {
         teams,
     };
 }
+function readBoundedRegularFile(path, maxBytes) {
+    const pathInfo = lstatSync(path);
+    if (pathInfo.isSymbolicLink() || !pathInfo.isFile() || pathInfo.size > maxBytes) {
+        throw new Error("not a bounded regular file");
+    }
+    const descriptor = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const opened = fstatSync(descriptor);
+        if (!opened.isFile() || opened.size > maxBytes)
+            throw new Error("not a bounded regular file");
+        return readFileSync(descriptor, "utf8");
+    }
+    finally {
+        closeSync(descriptor);
+    }
+}
 /** 读取一个已克隆的数字人仓库目录。 */
 export function readCatalogFromDir(dir, sourceRepo) {
     const manifestPath = join(dir, "humans.json");
@@ -92,7 +132,7 @@ export function readCatalogFromDir(dir, sourceRepo) {
     }
     let manifest;
     try {
-        manifest = parseHumansManifest(readFileSync(manifestPath, "utf-8"));
+        manifest = parseHumansManifest(readBoundedRegularFile(manifestPath, MAX_MANIFEST_BYTES));
     }
     catch (error) {
         return {
@@ -112,7 +152,7 @@ export function readCatalogFromDir(dir, sourceRepo) {
         }
         const profilePath = join(dir, "humans", item.name, "profile.json");
         try {
-            const profile = WorkspaceProfileSchema.parse(JSON.parse(readFileSync(profilePath, "utf-8")));
+            const profile = WorkspaceProfileSchema.parse(JSON.parse(readBoundedRegularFile(profilePath, MAX_PROFILE_BYTES)));
             entries.push({
                 profile,
                 sourceRepo,

package/dist/profile/store.js

@@ -4,11 +4,13 @@
  * core 不内置任何领域 profile；样例见 docs/examples/workspace-profile-sample.md。
  */
 import { randomUUID } from "node:crypto";
-import { lstatSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, opendirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { isAbsolute, join, relative, sep } from "node:path";
 import { logger } from "../logging/logger.js";
 import { codeShellHome } from "../session/session-manager.js";
 import { WORKSPACE_PROFILE_NAME_RE, WorkspaceProfileSchema, } from "./types.js";
+const MAX_PROFILE_FILE_BYTES = 256 * 1024;
+const MAX_PROFILE_LIBRARY_ENTRIES = 10_000;
 export function workspaceProfilesRoot() {
     return join(codeShellHome(), "profiles");
 }
@@ -72,7 +74,7 @@ function checkedProfileFile(name) {
     const info = lstatIfPresent(path);
     if (!info)
         return undefined;
-    if (info.isSymbolicLink() || !info.isFile()) {
+    if (info.isSymbolicLink() || !info.isFile() || info.size > MAX_PROFILE_FILE_BYTES) {
         throw new Error(`Invalid workspace profile file: ${path}`);
     }
     return path;
@@ -81,45 +83,69 @@ export function readWorkspaceProfile(name) {
     if (!WORKSPACE_PROFILE_NAME_RE.test(name))
         return undefined;
     const path = join(workspaceProfileDir(name), "profile.json");
+    let descriptor;
     try {
         const checkedPath = checkedProfileFile(name);
         if (!checkedPath)
             return undefined;
-        return WorkspaceProfileSchema.parse(JSON.parse(readFileSync(checkedPath, "utf-8")));
+        descriptor = openSync(checkedPath, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+        const opened = fstatSync(descriptor);
+        if (!opened.isFile() || opened.size > MAX_PROFILE_FILE_BYTES) {
+            throw new Error("workspace profile file is too large");
+        }
+        return WorkspaceProfileSchema.parse(JSON.parse(readFileSync(descriptor, "utf-8")));
     }
     catch (error) {
         throw new Error(`Invalid workspace profile "${name}" at ${path}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
     }
+    finally {
+        if (descriptor !== undefined)
+            closeSync(descriptor);
+    }
 }
 export function listWorkspaceProfiles() {
     const root = checkedProfilesRoot();
     if (!root)
         return [];
     const out = [];
-    for (const entry of readdirSync(root, { withFileTypes: true })) {
-        if (!entry.isDirectory()) {
-            if (entry.isSymbolicLink()) {
+    const directory = opendirSync(root);
+    let seen = 0;
+    try {
+        for (;;) {
+            const entry = directory.readSync();
+            if (!entry)
+                break;
+            seen += 1;
+            if (seen > MAX_PROFILE_LIBRARY_ENTRIES) {
+                throw new Error("Workspace profile library contains too many entries");
+            }
+            if (!entry.isDirectory()) {
+                if (entry.isSymbolicLink()) {
+                    logger.warn("profile.library_entry_invalid", {
+                        cat: "profile",
+                        name: entry.name,
+                        error: "symbolic links are not allowed",
+                    });
+                }
+                continue;
+            }
+            try {
+                const profile = readWorkspaceProfile(entry.name);
+                if (profile)
+                    out.push(profile);
+            }
+            catch (error) {
                 logger.warn("profile.library_entry_invalid", {
                     cat: "profile",
                     name: entry.name,
-                    error: "symbolic links are not allowed",
+                    error: error instanceof Error ? error.message : String(error),
                 });
             }
-            continue;
-        }
-        try {
-            const profile = readWorkspaceProfile(entry.name);
-            if (profile)
-                out.push(profile);
-        }
-        catch (error) {
-            logger.warn("profile.library_entry_invalid", {
-                cat: "profile",
-                name: entry.name,
-                error: error instanceof Error ? error.message : String(error),
-            });
         }
     }
+    finally {
+        directory.closeSync();
+    }
     return out.sort((a, b) => a.name.localeCompare(b.name));
 }
 /**
@@ -144,7 +170,11 @@ export function saveWorkspaceProfile(profile) {
     }
     const tmp = `${path}.${process.pid}.${randomUUID()}.tmp`;
     try {
-        writeFileSync(tmp, `${JSON.stringify(parsed, null, 2)}\n`, {
+        const serialized = `${JSON.stringify(parsed, null, 2)}\n`;
+        if (Buffer.byteLength(serialized, "utf8") > MAX_PROFILE_FILE_BYTES) {
+            throw new Error("workspace profile file is too large");
+        }
+        writeFileSync(tmp, serialized, {
             encoding: "utf-8",
             mode: 0o600,
             flag: "wx",

package/dist/protocol/chat-session-manager.d.ts

@@ -95,6 +95,15 @@ export declare class ChatSessionManager {
      * the values so a callback that closes a session can't perturb the walk.
      */
     forEachSession(fn: (s: ChatSession) => void): void;
+    /** First live Engine for legacy fallbacks that genuinely accept any owner. */
+    getAnyLiveEngine(): Engine | undefined;
+    /**
+     * Build a detached Engine for global model/provider/settings queries. Keeping
+     * this seam on the manager avoids protocol code reaching into its private
+     * factory and, importantly, avoids borrowing project-local state from an
+     * arbitrary live session.
+     */
+    createDetachedEngine(slice?: Partial<EngineConfigSlice>): Engine;
     /** Snapshot-safe, read-only source shared by query("sessions") and Pet projection. */
     getLiveSessionSnapshot(): LiveChatSessionSnapshot;
     close(sessionId: string): Promise<void>;

package/dist/protocol/chat-session-manager.js

@@ -164,6 +164,19 @@ export class ChatSessionManager {
         for (const s of [...this.sessions.values()])
             fn(s);
     }
+    /** First live Engine for legacy fallbacks that genuinely accept any owner. */
+    getAnyLiveEngine() {
+        return this.sessions.values().next().value?.engine;
+    }
+    /**
+     * Build a detached Engine for global model/provider/settings queries. Keeping
+     * this seam on the manager avoids protocol code reaching into its private
+     * factory and, importantly, avoids borrowing project-local state from an
+     * arbitrary live session.
+     */
+    createDetachedEngine(slice = {}) {
+        return this.factory(slice);
+    }
     /** Snapshot-safe, read-only source shared by query("sessions") and Pet projection. */
     getLiveSessionSnapshot() {
         const sessions = [];

package/dist/protocol/chat-session.d.ts

@@ -33,6 +33,11 @@ export interface TurnOpts {
     injected?: boolean;
     /** Stable id for this user-intent; forwarded to Engine.run for idempotency. */
     clientMessageId?: string;
+    /** Archive history before this turn at the engine's pre-model safe point. */
+    archiveBeforeCurrentTurn?: {
+        fromClientMessageId?: string;
+        segmentId?: string;
+    };
     /** Structured input attachments for this turn. */
     attachments?: InputAttachmentMeta[];
     /** Permission mode snapshot for this queued turn only. */

package/dist/protocol/chat-session.js

@@ -290,6 +290,7 @@ export class ChatSession {
                 goal: next.opts.goal,
                 injected: next.opts.injected,
                 clientMessageId: next.opts.clientMessageId,
+                archiveBeforeCurrentTurn: next.opts.archiveBeforeCurrentTurn,
                 attachments: next.opts.attachments,
                 permissionMode: next.opts.permissionMode,
                 planMode: next.opts.planMode,

package/dist/protocol/server.d.ts

@@ -375,6 +375,8 @@ export declare class AgentServer {
      * selector) can query models/providers without requiring a chat session first.
      */
     private anyEngine;
+    /** Neutral engine for truly global queries; never inherits a live project's cwd or policy. */
+    private detachedQueryEngine;
     close(): void;
     /** Release only this transport's approval ownership. Safe on socket close
      * even when the ChatSessionManager is shared by other TCP connections. */

package/dist/protocol/server.js

@@ -62,6 +62,27 @@ function runInputError(params) {
         (typeof params.quickChatClaimId !== "string" || params.quickChatClaimId.length === 0)) {
         return "quickChatClaimId must be a non-empty string";
     }
+    if (params.archiveBeforeCurrentTurn !== undefined) {
+        const archive = params.archiveBeforeCurrentTurn;
+        if (!archive || typeof archive !== "object" || Array.isArray(archive)) {
+            return "archiveBeforeCurrentTurn must be an object";
+        }
+        if (typeof params.clientMessageId !== "string" || params.clientMessageId.length === 0) {
+            return "archiveBeforeCurrentTurn requires clientMessageId";
+        }
+        for (const [field, value] of [
+            ["fromClientMessageId", archive.fromClientMessageId],
+            ["segmentId", archive.segmentId],
+        ]) {
+            if (value !== undefined &&
+                (typeof value !== "string" ||
+                    value.length === 0 ||
+                    value.length > 256 ||
+                    /[\r\n]/.test(value))) {
+                return `archiveBeforeCurrentTurn.${field} must be a bounded non-empty string`;
+            }
+        }
+    }
     if (params.behaviorMode !== undefined &&
         (typeof params.behaviorMode !== "string" || params.behaviorMode.length === 0)) {
         return `invalid behavior mode: ${String(params.behaviorMode)}`;
@@ -104,6 +125,20 @@ function runInputError(params) {
     // extension-owned param shapes) lives in ExtensionModule.validateRunParams.
     return null;
 }
+function goalExtensionInputError(params) {
+    const fields = ["addTurns", "addTokenBudget", "addTimeBudgetMs", "addStopBlocks"];
+    let supplied = false;
+    for (const field of fields) {
+        const value = params[field];
+        if (value === undefined)
+            continue;
+        supplied = true;
+        if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0) {
+            return `${field} must be a positive safe integer`;
+        }
+    }
+    return supplied ? null : "at least one goal extension is required";
+}
 const COMPACT_STREAM_STRATEGIES = new Set([
     "micro",
     "summary",
@@ -1191,6 +1226,7 @@ export class AgentServer {
                     this.notify(Methods.StreamEvent, { sessionId: sid, event });
                 },
                 clientMessageId: typeof params.clientMessageId === "string" ? params.clientMessageId : undefined,
+                archiveBeforeCurrentTurn: params.archiveBeforeCurrentTurn,
                 permissionMode: params.permissionMode,
                 planMode: params.planMode,
                 behaviorMode: params.behaviorMode,
@@ -1472,7 +1508,17 @@ export class AgentServer {
      * limits, or an error if no session / no active run.
      */
     handleGoalExtend(req) {
-        const params = (req.params ?? {});
+        const rawParams = req.params;
+        if (!rawParams || typeof rawParams !== "object" || Array.isArray(rawParams)) {
+            this.transport.send(createErrorResponse(req.id, ErrorCodes.InvalidParams, "goal extension params are required"));
+            return;
+        }
+        const inputError = goalExtensionInputError(rawParams);
+        if (inputError) {
+            this.transport.send(createErrorResponse(req.id, ErrorCodes.InvalidParams, inputError));
+            return;
+        }
+        const params = rawParams;
         const ext = {
             addTurns: params.addTurns,
             addTokenBudget: params.addTokenBudget,
@@ -2136,7 +2182,7 @@ export class AgentServer {
                 resolved = session.engine;
             }
             else {
-                resolved = this.anyEngine();
+                resolved ??= this.anyEngine();
             }
         }
         if (!resolved) {
@@ -2147,16 +2193,16 @@ export class AgentServer {
     }
     async handleQuery(req) {
         const params = (req.params ?? {});
-        // For query operations we prefer the legacyEngine; if absent borrow any
-        // session engine from the manager (model pool, settings are shared).
-        const engine = this.legacyEngine ?? this.anyEngine();
+        // Global queries use a detached manager-owned engine. Session-scoped cases
+        // below resolve the exact owner from params.sessionId instead of borrowing
+        // whichever live project's engine happens to be first in a Map.
+        const engine = this.legacyEngine ?? this.detachedQueryEngine();
         switch (params.type) {
             case "tools": {
-                if (!engine) {
-                    this.transport.send(createErrorResponse(req.id, ErrorCodes.InternalError, "No engine available for tools query"));
+                const toolsEngine = await this.resolveEngineForSessionQuery(req, params.sessionId, engine, "tools");
+                if (!toolsEngine)
                     return;
-                }
-                const registry = engine.getToolRegistry();
+                const registry = toolsEngine.getToolRegistry();
                 const tools = typeof registry.listToolsDetailed === "function"
                     ? registry
                         .listToolsDetailed()
@@ -2183,16 +2229,15 @@ export class AgentServer {
                 break;
             }
             case "config": {
-                if (!engine) {
-                    this.transport.send(createErrorResponse(req.id, ErrorCodes.InternalError, "No engine available for config query"));
+                const configEngine = await this.resolveEngineForSessionQuery(req, params.sessionId, engine, "config");
+                if (!configEngine)
                     return;
-                }
-                const config = engine.getConfig();
+                const config = configEngine.getConfig();
                 this.transport.send(createResponse(req.id, {
                     type: "config",
                     data: {
                         permissionMode: config.permissionMode ?? "default",
-                        planMode: engine.planMode ?? false,
+                        planMode: configEngine.planMode ?? false,
                         preset: config.preset,
                         model: config.llm.model,
                         cwd: config.cwd,
@@ -2202,21 +2247,20 @@ export class AgentServer {
                         llm: redactLlmConfig(config.llm),
                         // Resolved feature flags (defaults merged with settings overlay)
                         // so the /features command can list current state.
-                        featureFlags: engine.getFeatureFlags(),
+                        featureFlags: configEngine.getFeatureFlags(),
                         // Effective permission rules so /permissions can list them (TODO 5.1).
-                        permissionRules: engine.getPermissionRules(),
+                        permissionRules: configEngine.getPermissionRules(),
                     },
                 }));
                 break;
             }
             case "session_detail": {
-                if (!engine) {
-                    this.transport.send(createErrorResponse(req.id, ErrorCodes.InternalError, "No engine available for session_detail query"));
-                    return;
-                }
                 if (params.sessionId) {
+                    const detailEngine = await this.resolveEngineForSessionQuery(req, params.sessionId, engine, "session_detail");
+                    if (!detailEngine)
+                        return;
                     try {
-                        const bundle = engine.getSessionManager().resume(params.sessionId);
+                        const bundle = detailEngine.getSessionManager().resume(params.sessionId);
                         const data = {
                             state: bundle.state,
                             transcript: bundle.transcript.getEvents(),
@@ -3164,16 +3208,18 @@ export class AgentServer {
     anyEngine() {
         if (!this.chatManager)
             return null;
-        const sessions = this.chatManager.sessions;
-        const first = sessions.values().next().value;
-        if (first)
-            return first.engine;
+        const live = this.chatManager.getAnyLiveEngine();
+        if (live)
+            return live;
+        return this.detachedQueryEngine();
+    }
+    /** Neutral engine for truly global queries; never inherits a live project's cwd or policy. */
+    detachedQueryEngine() {
+        if (!this.chatManager)
+            return null;
         if (this.globalQueryEngine)
             return this.globalQueryEngine;
-        const factory = this.chatManager.factory;
-        if (typeof factory !== "function")
-            return null;
-        this.globalQueryEngine = factory({});
+        this.globalQueryEngine = this.chatManager.createDetachedEngine();
         return this.globalQueryEngine;
     }
     // ─── Lifecycle ──────────────────────────────────────────────────

package/dist/protocol/types.d.ts

@@ -80,6 +80,14 @@ export interface RunParams {
     attachments?: InputAttachmentMeta[];
     /** Stable id for the user's submit intent; duplicate ids are idempotent. */
     clientMessageId?: string;
+    /**
+     * Archive the preceding history after this message is durably appended and
+     * before its first model call. `clientMessageId` is the exclusive end anchor.
+     */
+    archiveBeforeCurrentTurn?: {
+        fromClientMessageId?: string;
+        segmentId?: string;
+    };
     /** Desktop host ownership generation for process-local Quick Chat runs. */
     quickChatClaimId?: string;
     /**

package/dist/run/FileRunStore.d.ts

@@ -18,6 +18,8 @@ export declare class FileRunStore implements RunStore {
     private ensureRunDir;
     private writeJson;
     private readJson;
+    private assertRealDirectory;
+    private assertSafeFileTarget;
     /** Serializes concurrent JSONL appends per file path. */
     private readonly appendLocks;
     private appendJsonl;