@code-yeongyu/senpi 2026.9.26 → 2026.9.27-3

package/dist/core/moved-sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"moved-sessions.js","sourceRoot":"","sources":["../../src/core/moved-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAA2B,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACxH,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAoB,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAWrD,SAAS,OAAO,CAAC,OAAoB,EAAE,GAAW,EAAE,OAA2B;IAC9E,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9F,OAAO,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC;AACpF,CAAC;AAED,SAAS,WAAW,CAAC,CAAc,EAAE,CAAc;IAClD,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,SAA6B,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC7C,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACxG,OAAO,MAAM,CAAC,GAAG,CAAC;YACnB,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC5C,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,sGAAsG;AACtG,mEAAmE;AACnE,KAAK,UAAU,uBAAuB,CAAC,GAAW;IACjD,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,aAAa,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,SAAS;QACzC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC7D,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAAO,GAAwB,EAAE;IACrF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU;QACpC,CAAC,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9D,CAAC,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,UAAU;SACf,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;SAC/C,IAAI,CAAC,WAAW,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,QAAgC,EAChC,GAAW,EACX,OAAO,GAA8C,EAAE;IAEvD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAChD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,KAA6B,EAC7B,GAAW,EACX,OAAO,GAAwB,EAAE;IAEjC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { readdir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { getSessionsDir } from \"../config.ts\";\nimport { normalizePath, resolvePath } from \"../utils/paths.ts\";\nimport { compareRepositoryIdentities, type RepositoryIdentity, readRepositoryIdentity } from \"./repository-identity.ts\";\nimport { listSessionsFromDir } from \"./session-discovery.ts\";\nimport { getDefaultSessionDir, type SessionInfo } from \"./session-manager.ts\";\nimport { readFileLines } from \"./session-summary.ts\";\n\n// A session is \"moved\" when it belongs to the current repository (by its recorded identity) and was\n// recorded at a path that no longer exists: the repository moved away from it. A live second checkout\n// is not moved, and an unrecorded or different repository never matches.\n\nexport interface MovedSessionOptions {\n\treadonly sessionDir?: string;\n\treadonly readIdentity?: (dir: string) => Promise<RepositoryIdentity | undefined>;\n}\n\nfunction isMoved(session: SessionInfo, cwd: string, current: RepositoryIdentity): boolean {\n\tif (!session.cwd || resolvePath(session.cwd) === cwd || existsSync(session.cwd)) return false;\n\treturn compareRepositoryIdentities(session.repositoryIdentity, current) === \"same\";\n}\n\nfunction newestFirst(a: SessionInfo, b: SessionInfo): number {\n\treturn b.modified.getTime() - a.modified.getTime();\n}\n\nasync function recordedCwd(dir: string): Promise<string | undefined> {\n\tconst names = (await readdir(dir)).filter((name) => name.endsWith(\".jsonl\"));\n\tfor (const name of names) {\n\t\tlet firstLine: string | undefined;\n\t\ttry {\n\t\t\tawait readFileLines(join(dir, name), (line) => {\n\t\t\t\tfirstLine = line;\n\t\t\t\treturn false;\n\t\t\t});\n\t\t\tconst header: unknown = JSON.parse(firstLine ?? \"\");\n\t\t\tif (typeof header === \"object\" && header !== null && \"cwd\" in header && typeof header.cwd === \"string\") {\n\t\t\t\treturn header.cwd;\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tif (!(error instanceof Error)) throw error;\n\t\t}\n\t}\n\treturn undefined;\n}\n\n// Each project directory holds one cwd, so one header decides whether its sessions can be moved ones;\n// only directories whose recorded path is gone are listed in full.\nasync function sessionsAtVanishedPaths(cwd: string): Promise<SessionInfo[]> {\n\tconst root = getSessionsDir();\n\tif (!existsSync(root)) return [];\n\tconst own = normalizePath(getDefaultSessionDir(cwd));\n\tconst sessions: SessionInfo[] = [];\n\tfor (const entry of await readdir(root, { withFileTypes: true })) {\n\t\tif (!entry.isDirectory()) continue;\n\t\tconst dir = join(root, entry.name);\n\t\tif (normalizePath(dir) === own) continue;\n\t\tconst recorded = await recordedCwd(dir);\n\t\tif (recorded === undefined || existsSync(recorded)) continue;\n\t\tsessions.push(...(await listSessionsFromDir(dir)));\n\t}\n\treturn sessions;\n}\n\nexport async function listMovedSessions(cwd: string, options: MovedSessionOptions = {}): Promise<SessionInfo[]> {\n\tconst here = resolvePath(cwd);\n\tconst current = await (options.readIdentity ?? readRepositoryIdentity)(here);\n\tif (current === undefined) return [];\n\tconst candidates = options.sessionDir\n\t\t? await listSessionsFromDir(normalizePath(options.sessionDir))\n\t\t: await sessionsAtVanishedPaths(here);\n\treturn candidates\n\t\t.filter((session) => isMoved(session, here, current))\n\t\t.map((session) => ({ ...session, moved: true }))\n\t\t.sort(newestFirst);\n}\n\nexport async function markMovedSessions(\n\tsessions: readonly SessionInfo[],\n\tcwd: string,\n\toptions: Pick<MovedSessionOptions, \"readIdentity\"> = {},\n): Promise<SessionInfo[]> {\n\tconst here = resolvePath(cwd);\n\tconst current = await (options.readIdentity ?? readRepositoryIdentity)(here);\n\tif (current === undefined) return [...sessions];\n\treturn sessions.map((session) => (isMoved(session, here, current) ? { ...session, moved: true } : session));\n}\n\nexport async function withMovedSessions(\n\tlocal: Promise<SessionInfo[]>,\n\tcwd: string,\n\toptions: MovedSessionOptions = {},\n): Promise<SessionInfo[]> {\n\tconst [own, moved] = await Promise.all([local, listMovedSessions(cwd, options)]);\n\treturn [...own, ...moved].sort(newestFirst);\n}\n"]}

package/dist/core/process-crash-record.d.ts

@@ -0,0 +1,62 @@
+/** Crash records kept per agent dir. A crash loop rewrites the file down to this many. */
+export declare const PROCESS_CRASH_RECORD_LIMIT = 50;
+/** How often a live process refreshes its marker, which bounds the error of a recorded uptime. */
+export declare const PROCESS_MARKER_HEARTBEAT_MS = 60000;
+export interface ProcessCrashPaths {
+    readonly dir: string;
+    readonly liveDir: string;
+    readonly recordsFile: string;
+}
+export declare function processCrashPaths(agentDir: string): ProcessCrashPaths;
+/** What a live process says about itself; the crash record is derived from it. */
+export interface ProcessLifetimeMarker {
+    readonly kind: string;
+    readonly pid: number;
+    readonly startedAt: number;
+    readonly bunVersion?: string;
+    readonly senpiVersion: string;
+    /** The branded product's version (omo's), present only when a brand names one. */
+    readonly productVersion?: string;
+}
+export interface ProcessCrashRecord {
+    /** ISO-8601 instant of the last heartbeat before the death: the latest moment it was known alive. */
+    readonly at: string;
+    /** Which kind of process died: the app mode (`interactive`, `print`, `json`). */
+    readonly kind: string;
+    /** A marker left behind proves the death but not its signal. */
+    readonly detection: "unclean_exit";
+    /** Start to last heartbeat, in milliseconds; short by at most one heartbeat interval. */
+    readonly uptimeMs: number;
+    readonly bunVersion?: string;
+    readonly senpiVersion: string;
+    readonly productVersion?: string;
+}
+/** Runtime identity every record carries; the product version only when a brand sets one. */
+export declare function crashingRuntimeVersions(): {
+    bunVersion?: string;
+    senpiVersion: string;
+    productVersion?: string;
+};
+export interface RecordProcessLifetimeOptions {
+    readonly pid?: number;
+    readonly now?: () => number;
+    readonly isAlive?: (pid: number) => boolean;
+    readonly heartbeatMs?: number;
+}
+/**
+ * The launch seam: turn every dead peer's marker into a crash record, then, for a process no parent
+ * supervises, start this process's own marker. Returns the disposer of this process's marker.
+ */
+export declare function recordProcessLifetime(agentDir: string, kind: string, options: RecordProcessLifetimeOptions & {
+    readonly supervised: boolean;
+}): () => void;
+/** Write this process's marker, keep it fresh, and remove it on every observable exit. */
+export declare function installProcessLifetimeMarker(agentDir: string, kind: string, options?: RecordProcessLifetimeOptions): () => void;
+/**
+ * Record one crash per marker whose process is gone. A marker is CLAIMED by renaming it before it is
+ * recorded, so two processes starting at once cannot both record the same death.
+ */
+export declare function sweepDeadProcessMarkers(agentDir: string, options?: RecordProcessLifetimeOptions): number;
+/** Every record currently held, oldest first. Unparseable lines are skipped, never thrown on. */
+export declare function readProcessCrashRecords(agentDir: string): readonly ProcessCrashRecord[];
+//# sourceMappingURL=process-crash-record.d.ts.map

package/dist/core/process-crash-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-crash-record.d.ts","sourceRoot":"","sources":["../../src/core/process-crash-record.ts"],"names":[],"mappings":"AAmCA,0FAA0F;AAC1F,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C,kGAAkG;AAClG,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAMlD,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAGrE;AAED,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IAClC,qGAAqG;IACrG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,6FAA6F;AAC7F,wBAAgB,uBAAuB,IAAI;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAMhH;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACpC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,4BAA4B,GAAG;IAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GACtE,MAAM,IAAI,CAGZ;AAED,0FAA0F;AAC1F,wBAAgB,4BAA4B,CAC3C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,4BAAiC,GACxC,MAAM,IAAI,CA4CZ;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,4BAAiC,GAAG,MAAM,CAkC5G;AAED,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,kBAAkB,EAAE,CAkBvF"}

package/dist/core/process-crash-record.js

@@ -0,0 +1,216 @@
+/**
+ * Durable evidence that a senpi process nobody supervises DIED rather than exited.
+ *
+ * The shared RPC host has a supervisor that sees its child's exit signal and writes
+ * `rpc-host-daemon/<endpoint>/crashes.jsonl` (`modes/rpc/host-crash-record.ts`). An interactive or
+ * print process has no such parent: the omo launcher `execve`s into it on POSIX, so a native crash
+ * (a JSC heap corruption, a Bun panic) leaves nothing behind but an OS crash report.
+ *
+ * Such a process can still leave evidence of its own death by what it FAILS to do. At boot it writes
+ * a lifetime marker, `process-crashes/live/<pid>.json`, keeps the marker's mtime fresh as a
+ * heartbeat, and removes it on every exit JavaScript can observe - `process.exit`, a natural end, a
+ * handled or default-fatal signal (a plain `exit` listener plus `signal-exit`, which every senpi
+ * process already loads for `proper-lockfile`, so no new signal behaviour is installed). A native crash or SIGKILL runs none of
+ * that. The next senpi start finds the marker of a dead pid and turns it into one crash record in
+ * `process-crashes/crashes.jsonl`. The signal is unknowable from outside, so the record says
+ * `detection: "unclean_exit"` instead of guessing one.
+ *
+ * Every step is best-effort and never throws: crash evidence must not be able to delay or break the
+ * launch it only annotates.
+ */
+import { appendFileSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, utimesSync, writeFileSync, } from "node:fs";
+import { join } from "node:path";
+import onExit from "signal-exit";
+import { DISPLAY_VERSION, VERSION } from "../config.js";
+/** Crash records kept per agent dir. A crash loop rewrites the file down to this many. */
+export const PROCESS_CRASH_RECORD_LIMIT = 50;
+/** How often a live process refreshes its marker, which bounds the error of a recorded uptime. */
+export const PROCESS_MARKER_HEARTBEAT_MS = 60_000;
+const FILE_MODE = 0o600;
+const DIR_MODE = 0o700;
+const MARKER_SUFFIX = ".json";
+export function processCrashPaths(agentDir) {
+    const dir = join(agentDir, "process-crashes");
+    return { dir, liveDir: join(dir, "live"), recordsFile: join(dir, "crashes.jsonl") };
+}
+/** Runtime identity every record carries; the product version only when a brand sets one. */
+export function crashingRuntimeVersions() {
+    return {
+        ...(process.versions.bun === undefined ? {} : { bunVersion: process.versions.bun }),
+        senpiVersion: VERSION,
+        ...(DISPLAY_VERSION === VERSION ? {} : { productVersion: DISPLAY_VERSION }),
+    };
+}
+/**
+ * The launch seam: turn every dead peer's marker into a crash record, then, for a process no parent
+ * supervises, start this process's own marker. Returns the disposer of this process's marker.
+ */
+export function recordProcessLifetime(agentDir, kind, options) {
+    sweepDeadProcessMarkers(agentDir, options);
+    return options.supervised ? () => { } : installProcessLifetimeMarker(agentDir, kind, options);
+}
+/** Write this process's marker, keep it fresh, and remove it on every observable exit. */
+export function installProcessLifetimeMarker(agentDir, kind, options = {}) {
+    const pid = options.pid ?? process.pid;
+    const now = options.now ?? Date.now;
+    const file = join(processCrashPaths(agentDir).liveDir, `${pid}${MARKER_SUFFIX}`);
+    const marker = {
+        kind,
+        pid,
+        startedAt: now(),
+        ...crashingRuntimeVersions(),
+    };
+    try {
+        mkdirSync(processCrashPaths(agentDir).liveDir, { recursive: true, mode: DIR_MODE });
+        writeFileSync(file, `${JSON.stringify(marker)}\n`, { mode: FILE_MODE });
+    }
+    catch {
+        return () => { };
+    }
+    const heartbeat = setInterval(() => {
+        try {
+            const at = new Date(now());
+            utimesSync(file, at, at);
+        }
+        catch {
+            // A missing or unwritable marker only costs the uptime precision of a later crash.
+        }
+    }, options.heartbeatMs ?? PROCESS_MARKER_HEARTBEAT_MS);
+    heartbeat.unref();
+    let disposed = false;
+    const dispose = () => {
+        if (disposed)
+            return;
+        disposed = true;
+        clearInterval(heartbeat);
+        process.off("exit", onProcessExit);
+        removeSignalHook();
+        rmSync(file, { force: true });
+    };
+    const onProcessExit = () => {
+        try {
+            dispose();
+        }
+        catch { }
+    };
+    // Bun emits a natural exit's `exit` event without the `process.emit` that signal-exit patches, so
+    // the plain listener covers every exit and signal-exit only covers the default-fatal signals.
+    process.on("exit", onProcessExit);
+    const removeSignalHook = onExit(onProcessExit);
+    return dispose;
+}
+/**
+ * Record one crash per marker whose process is gone. A marker is CLAIMED by renaming it before it is
+ * recorded, so two processes starting at once cannot both record the same death.
+ */
+export function sweepDeadProcessMarkers(agentDir, options = {}) {
+    const paths = processCrashPaths(agentDir);
+    const selfPid = options.pid ?? process.pid;
+    const isAlive = options.isAlive ?? isProcessAlive;
+    let names;
+    try {
+        names = readdirSync(paths.liveDir);
+    }
+    catch {
+        return 0;
+    }
+    let recorded = 0;
+    for (const name of names) {
+        if (!name.endsWith(MARKER_SUFFIX))
+            continue;
+        const pid = Number(name.slice(0, -MARKER_SUFFIX.length));
+        if (!Number.isSafeInteger(pid) || pid <= 0 || pid === selfPid || isAlive(pid))
+            continue;
+        const claimed = join(paths.liveDir, `${name}.${selfPid}.sweep`);
+        try {
+            renameSync(join(paths.liveDir, name), claimed);
+        }
+        catch {
+            continue; // Another process claimed it first, or it was removed by its own exit.
+        }
+        try {
+            const record = crashRecordFromMarker(readFileSync(claimed, "utf8"), statSync(claimed).mtimeMs);
+            if (record !== undefined) {
+                appendProcessCrashRecord(paths, record);
+                recorded += 1;
+            }
+        }
+        catch {
+            // An unreadable marker is not evidence of anything; it is discarded below.
+        }
+        finally {
+            rmSync(claimed, { force: true });
+        }
+    }
+    return recorded;
+}
+/** Every record currently held, oldest first. Unparseable lines are skipped, never thrown on. */
+export function readProcessCrashRecords(agentDir) {
+    let raw;
+    try {
+        raw = readFileSync(processCrashPaths(agentDir).recordsFile, "utf8");
+    }
+    catch {
+        return [];
+    }
+    const records = [];
+    for (const line of raw.split("\n")) {
+        if (line.trim() === "")
+            continue;
+        try {
+            const value = JSON.parse(line);
+            if (typeof value === "object" && value !== null && typeof Reflect.get(value, "at") === "string") {
+                records.push(value);
+            }
+        }
+        catch { }
+    }
+    return records;
+}
+/** Signal 0 probes existence; EPERM means the pid exists under another user, so it is alive. */
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+function crashRecordFromMarker(raw, lastHeartbeatMs) {
+    const value = JSON.parse(raw);
+    if (typeof value !== "object" || value === null)
+        return undefined;
+    const kind = Reflect.get(value, "kind");
+    const startedAt = Reflect.get(value, "startedAt");
+    const senpiVersion = Reflect.get(value, "senpiVersion");
+    const bunVersion = Reflect.get(value, "bunVersion");
+    const productVersion = Reflect.get(value, "productVersion");
+    if (typeof kind !== "string" || typeof startedAt !== "number" || typeof senpiVersion !== "string")
+        return undefined;
+    return {
+        at: new Date(lastHeartbeatMs).toISOString(),
+        kind,
+        detection: "unclean_exit",
+        uptimeMs: Math.max(0, Math.round(lastHeartbeatMs - startedAt)),
+        ...(typeof bunVersion === "string" ? { bunVersion } : {}),
+        senpiVersion,
+        ...(typeof productVersion === "string" ? { productVersion } : {}),
+    };
+}
+function appendProcessCrashRecord(paths, record) {
+    mkdirSync(paths.dir, { recursive: true, mode: DIR_MODE });
+    appendFileSync(paths.recordsFile, `${JSON.stringify(record)}\n`, { mode: FILE_MODE });
+    const records = readProcessCrashRecordsFrom(paths.recordsFile);
+    if (records.length <= PROCESS_CRASH_RECORD_LIMIT)
+        return;
+    const kept = records.slice(records.length - PROCESS_CRASH_RECORD_LIMIT);
+    writeFileSync(paths.recordsFile, `${kept.join("\n")}\n`, { mode: FILE_MODE });
+}
+/** Raw non-empty lines, so pruning keeps each surviving record byte-identical. */
+function readProcessCrashRecordsFrom(file) {
+    return readFileSync(file, "utf8")
+        .split("\n")
+        .filter((line) => line.trim() !== "");
+}
+//# sourceMappingURL=process-crash-record.js.map

package/dist/core/process-crash-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-crash-record.js","sourceRoot":"","sources":["../../src/core/process-crash-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EACN,cAAc,EACd,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,UAAU,EACV,aAAa,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAExD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,kGAAkG;AAClG,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAElD,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,aAAa,GAAG,OAAO,CAAC;AAQ9B,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC9C,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC;AACrF,CAAC;AA2BD,6FAA6F;AAC7F,MAAM,UAAU,uBAAuB;IACtC,OAAO;QACN,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACnF,YAAY,EAAE,OAAO;QACrB,GAAG,CAAC,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;KAC3E,CAAC;AACH,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACpC,QAAgB,EAChB,IAAY,EACZ,OAAwE;IAExE,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,4BAA4B,CAC3C,QAAgB,EAChB,IAAY,EACZ,OAAO,GAAiC,EAAE;IAE1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,aAAa,EAAE,CAAC,CAAC;IACjF,MAAM,MAAM,GAA0B;QACrC,IAAI;QACJ,GAAG;QACH,SAAS,EAAE,GAAG,EAAE;QAChB,GAAG,uBAAuB,EAAE;KAC5B,CAAC;IACF,IAAI,CAAC;QACJ,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,IAAI,CAAC;YACJ,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3B,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACR,mFAAmF;QACpF,CAAC;IACF,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,2BAA2B,CAAC,CAAC;IACvD,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,GAAS,EAAE;QAC1B,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACnC,gBAAgB,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,GAAS,EAAE;QAChC,IAAI,CAAC;YACJ,OAAO,EAAE,CAAC;QACX,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACX,CAAC,CAAC;IACF,kGAAkG;IAClG,8FAA8F;IAC9F,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAClC,MAAM,gBAAgB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,OAAO,GAAiC,EAAE;IACnG,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;IAClD,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACJ,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,SAAS;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;YAAE,SAAS;QACxF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,OAAO,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC;YACJ,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACR,SAAS,CAAC,uEAAuE;QAClF,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,qBAAqB,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1B,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACxC,QAAQ,IAAI,CAAC,CAAC;YACf,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,2EAA2E;QAC5E,CAAC;gBAAS,CAAC;YACV,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACvD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,IAAI,CAAC;YACJ,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjG,OAAO,CAAC,IAAI,CAAC,KAA2B,CAAC,CAAC;YAC3C,CAAC;QACF,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACX,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,gGAAgG;AAChG,SAAS,cAAc,CAAC,GAAW;IAClC,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW,EAAE,eAAuB;IAClE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,IAAI,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,SAAS,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjE,MAAM,UAAU,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACrE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpH,OAAO;QACN,EAAE,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE;QAC3C,IAAI;QACJ,SAAS,EAAE,cAAc;QACzB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;QAC9D,GAAG,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,YAAY;QACZ,GAAG,CAAC,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAwB,EAAE,MAA0B;IACrF,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,MAAM,IAAI,0BAA0B;QAAE,OAAO;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,0BAA0B,CAAC,CAAC;IACxE,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,kFAAkF;AAClF,SAAS,2BAA2B,CAAC,IAAY;IAChD,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;SAC/B,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxC,CAAC","sourcesContent":["/**\n * Durable evidence that a senpi process nobody supervises DIED rather than exited.\n *\n * The shared RPC host has a supervisor that sees its child's exit signal and writes\n * `rpc-host-daemon/<endpoint>/crashes.jsonl` (`modes/rpc/host-crash-record.ts`). An interactive or\n * print process has no such parent: the omo launcher `execve`s into it on POSIX, so a native crash\n * (a JSC heap corruption, a Bun panic) leaves nothing behind but an OS crash report.\n *\n * Such a process can still leave evidence of its own death by what it FAILS to do. At boot it writes\n * a lifetime marker, `process-crashes/live/<pid>.json`, keeps the marker's mtime fresh as a\n * heartbeat, and removes it on every exit JavaScript can observe - `process.exit`, a natural end, a\n * handled or default-fatal signal (a plain `exit` listener plus `signal-exit`, which every senpi\n * process already loads for `proper-lockfile`, so no new signal behaviour is installed). A native crash or SIGKILL runs none of\n * that. The next senpi start finds the marker of a dead pid and turns it into one crash record in\n * `process-crashes/crashes.jsonl`. The signal is unknowable from outside, so the record says\n * `detection: \"unclean_exit\"` instead of guessing one.\n *\n * Every step is best-effort and never throws: crash evidence must not be able to delay or break the\n * launch it only annotates.\n */\nimport {\n\tappendFileSync,\n\tmkdirSync,\n\treaddirSync,\n\treadFileSync,\n\trenameSync,\n\trmSync,\n\tstatSync,\n\tutimesSync,\n\twriteFileSync,\n} from \"node:fs\";\nimport { join } from \"node:path\";\nimport onExit from \"signal-exit\";\nimport { DISPLAY_VERSION, VERSION } from \"../config.ts\";\n\n/** Crash records kept per agent dir. A crash loop rewrites the file down to this many. */\nexport const PROCESS_CRASH_RECORD_LIMIT = 50;\n\n/** How often a live process refreshes its marker, which bounds the error of a recorded uptime. */\nexport const PROCESS_MARKER_HEARTBEAT_MS = 60_000;\n\nconst FILE_MODE = 0o600;\nconst DIR_MODE = 0o700;\nconst MARKER_SUFFIX = \".json\";\n\nexport interface ProcessCrashPaths {\n\treadonly dir: string;\n\treadonly liveDir: string;\n\treadonly recordsFile: string;\n}\n\nexport function processCrashPaths(agentDir: string): ProcessCrashPaths {\n\tconst dir = join(agentDir, \"process-crashes\");\n\treturn { dir, liveDir: join(dir, \"live\"), recordsFile: join(dir, \"crashes.jsonl\") };\n}\n\n/** What a live process says about itself; the crash record is derived from it. */\nexport interface ProcessLifetimeMarker {\n\treadonly kind: string;\n\treadonly pid: number;\n\treadonly startedAt: number;\n\treadonly bunVersion?: string;\n\treadonly senpiVersion: string;\n\t/** The branded product's version (omo's), present only when a brand names one. */\n\treadonly productVersion?: string;\n}\n\nexport interface ProcessCrashRecord {\n\t/** ISO-8601 instant of the last heartbeat before the death: the latest moment it was known alive. */\n\treadonly at: string;\n\t/** Which kind of process died: the app mode (`interactive`, `print`, `json`). */\n\treadonly kind: string;\n\t/** A marker left behind proves the death but not its signal. */\n\treadonly detection: \"unclean_exit\";\n\t/** Start to last heartbeat, in milliseconds; short by at most one heartbeat interval. */\n\treadonly uptimeMs: number;\n\treadonly bunVersion?: string;\n\treadonly senpiVersion: string;\n\treadonly productVersion?: string;\n}\n\n/** Runtime identity every record carries; the product version only when a brand sets one. */\nexport function crashingRuntimeVersions(): { bunVersion?: string; senpiVersion: string; productVersion?: string } {\n\treturn {\n\t\t...(process.versions.bun === undefined ? {} : { bunVersion: process.versions.bun }),\n\t\tsenpiVersion: VERSION,\n\t\t...(DISPLAY_VERSION === VERSION ? {} : { productVersion: DISPLAY_VERSION }),\n\t};\n}\n\nexport interface RecordProcessLifetimeOptions {\n\treadonly pid?: number;\n\treadonly now?: () => number;\n\treadonly isAlive?: (pid: number) => boolean;\n\treadonly heartbeatMs?: number;\n}\n\n/**\n * The launch seam: turn every dead peer's marker into a crash record, then, for a process no parent\n * supervises, start this process's own marker. Returns the disposer of this process's marker.\n */\nexport function recordProcessLifetime(\n\tagentDir: string,\n\tkind: string,\n\toptions: RecordProcessLifetimeOptions & { readonly supervised: boolean },\n): () => void {\n\tsweepDeadProcessMarkers(agentDir, options);\n\treturn options.supervised ? () => {} : installProcessLifetimeMarker(agentDir, kind, options);\n}\n\n/** Write this process's marker, keep it fresh, and remove it on every observable exit. */\nexport function installProcessLifetimeMarker(\n\tagentDir: string,\n\tkind: string,\n\toptions: RecordProcessLifetimeOptions = {},\n): () => void {\n\tconst pid = options.pid ?? process.pid;\n\tconst now = options.now ?? Date.now;\n\tconst file = join(processCrashPaths(agentDir).liveDir, `${pid}${MARKER_SUFFIX}`);\n\tconst marker: ProcessLifetimeMarker = {\n\t\tkind,\n\t\tpid,\n\t\tstartedAt: now(),\n\t\t...crashingRuntimeVersions(),\n\t};\n\ttry {\n\t\tmkdirSync(processCrashPaths(agentDir).liveDir, { recursive: true, mode: DIR_MODE });\n\t\twriteFileSync(file, `${JSON.stringify(marker)}\\n`, { mode: FILE_MODE });\n\t} catch {\n\t\treturn () => {};\n\t}\n\tconst heartbeat = setInterval(() => {\n\t\ttry {\n\t\t\tconst at = new Date(now());\n\t\t\tutimesSync(file, at, at);\n\t\t} catch {\n\t\t\t// A missing or unwritable marker only costs the uptime precision of a later crash.\n\t\t}\n\t}, options.heartbeatMs ?? PROCESS_MARKER_HEARTBEAT_MS);\n\theartbeat.unref();\n\tlet disposed = false;\n\tconst dispose = (): void => {\n\t\tif (disposed) return;\n\t\tdisposed = true;\n\t\tclearInterval(heartbeat);\n\t\tprocess.off(\"exit\", onProcessExit);\n\t\tremoveSignalHook();\n\t\trmSync(file, { force: true });\n\t};\n\tconst onProcessExit = (): void => {\n\t\ttry {\n\t\t\tdispose();\n\t\t} catch {}\n\t};\n\t// Bun emits a natural exit's `exit` event without the `process.emit` that signal-exit patches, so\n\t// the plain listener covers every exit and signal-exit only covers the default-fatal signals.\n\tprocess.on(\"exit\", onProcessExit);\n\tconst removeSignalHook = onExit(onProcessExit);\n\treturn dispose;\n}\n\n/**\n * Record one crash per marker whose process is gone. A marker is CLAIMED by renaming it before it is\n * recorded, so two processes starting at once cannot both record the same death.\n */\nexport function sweepDeadProcessMarkers(agentDir: string, options: RecordProcessLifetimeOptions = {}): number {\n\tconst paths = processCrashPaths(agentDir);\n\tconst selfPid = options.pid ?? process.pid;\n\tconst isAlive = options.isAlive ?? isProcessAlive;\n\tlet names: string[];\n\ttry {\n\t\tnames = readdirSync(paths.liveDir);\n\t} catch {\n\t\treturn 0;\n\t}\n\tlet recorded = 0;\n\tfor (const name of names) {\n\t\tif (!name.endsWith(MARKER_SUFFIX)) continue;\n\t\tconst pid = Number(name.slice(0, -MARKER_SUFFIX.length));\n\t\tif (!Number.isSafeInteger(pid) || pid <= 0 || pid === selfPid || isAlive(pid)) continue;\n\t\tconst claimed = join(paths.liveDir, `${name}.${selfPid}.sweep`);\n\t\ttry {\n\t\t\trenameSync(join(paths.liveDir, name), claimed);\n\t\t} catch {\n\t\t\tcontinue; // Another process claimed it first, or it was removed by its own exit.\n\t\t}\n\t\ttry {\n\t\t\tconst record = crashRecordFromMarker(readFileSync(claimed, \"utf8\"), statSync(claimed).mtimeMs);\n\t\t\tif (record !== undefined) {\n\t\t\t\tappendProcessCrashRecord(paths, record);\n\t\t\t\trecorded += 1;\n\t\t\t}\n\t\t} catch {\n\t\t\t// An unreadable marker is not evidence of anything; it is discarded below.\n\t\t} finally {\n\t\t\trmSync(claimed, { force: true });\n\t\t}\n\t}\n\treturn recorded;\n}\n\n/** Every record currently held, oldest first. Unparseable lines are skipped, never thrown on. */\nexport function readProcessCrashRecords(agentDir: string): readonly ProcessCrashRecord[] {\n\tlet raw: string;\n\ttry {\n\t\traw = readFileSync(processCrashPaths(agentDir).recordsFile, \"utf8\");\n\t} catch {\n\t\treturn [];\n\t}\n\tconst records: ProcessCrashRecord[] = [];\n\tfor (const line of raw.split(\"\\n\")) {\n\t\tif (line.trim() === \"\") continue;\n\t\ttry {\n\t\t\tconst value: unknown = JSON.parse(line);\n\t\t\tif (typeof value === \"object\" && value !== null && typeof Reflect.get(value, \"at\") === \"string\") {\n\t\t\t\trecords.push(value as ProcessCrashRecord);\n\t\t\t}\n\t\t} catch {}\n\t}\n\treturn records;\n}\n\n/** Signal 0 probes existence; EPERM means the pid exists under another user, so it is alive. */\nfunction isProcessAlive(pid: number): boolean {\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (error) {\n\t\treturn (error as NodeJS.ErrnoException).code === \"EPERM\";\n\t}\n}\n\nfunction crashRecordFromMarker(raw: string, lastHeartbeatMs: number): ProcessCrashRecord | undefined {\n\tconst value: unknown = JSON.parse(raw);\n\tif (typeof value !== \"object\" || value === null) return undefined;\n\tconst kind: unknown = Reflect.get(value, \"kind\");\n\tconst startedAt: unknown = Reflect.get(value, \"startedAt\");\n\tconst senpiVersion: unknown = Reflect.get(value, \"senpiVersion\");\n\tconst bunVersion: unknown = Reflect.get(value, \"bunVersion\");\n\tconst productVersion: unknown = Reflect.get(value, \"productVersion\");\n\tif (typeof kind !== \"string\" || typeof startedAt !== \"number\" || typeof senpiVersion !== \"string\") return undefined;\n\treturn {\n\t\tat: new Date(lastHeartbeatMs).toISOString(),\n\t\tkind,\n\t\tdetection: \"unclean_exit\",\n\t\tuptimeMs: Math.max(0, Math.round(lastHeartbeatMs - startedAt)),\n\t\t...(typeof bunVersion === \"string\" ? { bunVersion } : {}),\n\t\tsenpiVersion,\n\t\t...(typeof productVersion === \"string\" ? { productVersion } : {}),\n\t};\n}\n\nfunction appendProcessCrashRecord(paths: ProcessCrashPaths, record: ProcessCrashRecord): void {\n\tmkdirSync(paths.dir, { recursive: true, mode: DIR_MODE });\n\tappendFileSync(paths.recordsFile, `${JSON.stringify(record)}\\n`, { mode: FILE_MODE });\n\tconst records = readProcessCrashRecordsFrom(paths.recordsFile);\n\tif (records.length <= PROCESS_CRASH_RECORD_LIMIT) return;\n\tconst kept = records.slice(records.length - PROCESS_CRASH_RECORD_LIMIT);\n\twriteFileSync(paths.recordsFile, `${kept.join(\"\\n\")}\\n`, { mode: FILE_MODE });\n}\n\n/** Raw non-empty lines, so pruning keeps each surviving record byte-identical. */\nfunction readProcessCrashRecordsFrom(file: string): string[] {\n\treturn readFileSync(file, \"utf8\")\n\t\t.split(\"\\n\")\n\t\t.filter((line) => line.trim() !== \"\");\n}\n"]}

package/dist/core/provider-rejected-images.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Provider image rejections (senpi#2170). A provider that rejects an image
+ * rejects every later request that replays it, and `dropFailedAssistantTurns`
+ * removes the failed turn but not the image, so one bad image bricked the
+ * session. The failed assistant turn is persisted with its error, so the
+ * rejection is derived from history on every request (and after a restart):
+ * images no successful response had accepted before an image-rejection failure
+ * are replaced by a placeholder naming their source.
+ */
+interface TurnMessage {
+    role: string;
+}
+export declare function isProviderImageRejection(errorMessage: string | undefined): boolean;
+export declare function rejectedImagePlaceholder(source: string): string;
+export declare function rejectedImageSources(messages: readonly TurnMessage[], failedTurn: TurnMessage): string[];
+export declare function omitProviderRejectedImages<T extends TurnMessage>(messages: T[]): T[];
+export {};
+//# sourceMappingURL=provider-rejected-images.d.ts.map

package/dist/core/provider-rejected-images.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-rejected-images.d.ts","sourceRoot":"","sources":["../../src/core/provider-rejected-images.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH,UAAU,WAAW;IACpB,IAAI,EAAE,MAAM,CAAC;CACb;AAQD,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAElF;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE/D;AAiED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,EAAE,UAAU,EAAE,WAAW,GAAG,MAAM,EAAE,CAGxG;AAED,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAmBpF"}

package/dist/core/provider-rejected-images.js

@@ -0,0 +1,107 @@
+/**
+ * Provider image rejections (senpi#2170). A provider that rejects an image
+ * rejects every later request that replays it, and `dropFailedAssistantTurns`
+ * removes the failed turn but not the image, so one bad image bricked the
+ * session. The failed assistant turn is persisted with its error, so the
+ * rejection is derived from history on every request (and after a restart):
+ * images no successful response had accepted before an image-rejection failure
+ * are replaced by a placeholder naming their source.
+ */
+const PROVIDER_IMAGE_REJECTION_PATTERN = /does not represent a valid image|image_parse_error|invalid_image|unsupported image|could not process image|unable to process input image|image_url'?\.?[^\n]*invalid base64|expected a base64-encoded data url|image was specified using the image\/[a-z]+ media type|unsupported media type for base64 image|invalid data url for image/i;
+export function isProviderImageRejection(errorMessage) {
+    return errorMessage !== undefined && PROVIDER_IMAGE_REJECTION_PATTERN.test(errorMessage);
+}
+export function rejectedImagePlaceholder(source) {
+    return `[Image omitted: the provider rejected this image (${source}) as invalid, so it is no longer sent with the conversation.]`;
+}
+function field(message, key) {
+    return key in message ? message[key] : undefined;
+}
+function contentBlocks(message) {
+    const content = field(message, "content");
+    return Array.isArray(content) ? content : [];
+}
+function toolCallSource(block) {
+    const args = block.arguments;
+    if (typeof args !== "object" || args === null)
+        return undefined;
+    const record = args;
+    for (const key of ["path", "file_path", "filePath"]) {
+        const value = record[key];
+        if (typeof value === "string" && value.trim().length > 0)
+            return value;
+    }
+    return undefined;
+}
+function imageSource(message, toolCallSources) {
+    if (message.role !== "toolResult")
+        return "an attached image";
+    const toolCallId = field(message, "toolCallId");
+    const known = typeof toolCallId === "string" ? toolCallSources.get(toolCallId) : undefined;
+    if (known)
+        return known;
+    const toolName = field(message, "toolName");
+    return typeof toolName === "string" ? `${toolName} tool result` : "a tool result";
+}
+/** Rejected images keyed by the index of the failed assistant turn that rejected them. */
+function scanRejectedImages(messages) {
+    const toolCallSources = new Map();
+    const rejections = new Map();
+    let unconfirmed = [];
+    messages.forEach((message, messageIndex) => {
+        if (message.role === "assistant") {
+            for (const block of contentBlocks(message)) {
+                const source = block.type === "toolCall" ? toolCallSource(block) : undefined;
+                if (source && typeof block.id === "string")
+                    toolCallSources.set(block.id, source);
+            }
+            const stopReason = field(message, "stopReason");
+            const errorMessage = field(message, "errorMessage");
+            if (stopReason === "error" &&
+                isProviderImageRejection(typeof errorMessage === "string" ? errorMessage : undefined)) {
+                if (unconfirmed.length > 0)
+                    rejections.set(messageIndex, unconfirmed);
+                unconfirmed = [];
+            }
+            else if (stopReason !== "error" && stopReason !== "aborted") {
+                unconfirmed = [];
+            }
+            return;
+        }
+        if (message.role !== "user" && message.role !== "toolResult")
+            return;
+        contentBlocks(message).forEach((block, blockIndex) => {
+            if (block.type === "image") {
+                unconfirmed.push({ messageIndex, blockIndex, source: imageSource(message, toolCallSources) });
+            }
+        });
+    });
+    return rejections;
+}
+export function rejectedImageSources(messages, failedTurn) {
+    const failedIndex = messages.lastIndexOf(failedTurn);
+    return (scanRejectedImages(messages).get(failedIndex) ?? []).map((image) => image.source);
+}
+export function omitProviderRejectedImages(messages) {
+    const rejected = new Map();
+    for (const images of scanRejectedImages(messages).values()) {
+        for (const image of images) {
+            const blocks = rejected.get(image.messageIndex) ?? new Map();
+            blocks.set(image.blockIndex, image.source);
+            rejected.set(image.messageIndex, blocks);
+        }
+    }
+    if (rejected.size === 0)
+        return messages;
+    return messages.map((message, messageIndex) => {
+        const blocks = rejected.get(messageIndex);
+        if (!blocks)
+            return message;
+        const content = contentBlocks(message).map((block, blockIndex) => {
+            const source = blocks.get(blockIndex);
+            return source === undefined ? block : { type: "text", text: rejectedImagePlaceholder(source) };
+        });
+        return { ...message, content };
+    });
+}
+//# sourceMappingURL=provider-rejected-images.js.map

package/dist/core/provider-rejected-images.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-rejected-images.js","sourceRoot":"","sources":["../../src/core/provider-rejected-images.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,gCAAgC,GACrC,2UAA2U,CAAC;AAkB7U,MAAM,UAAU,wBAAwB,CAAC,YAAgC;IACxE,OAAO,YAAY,KAAK,SAAS,IAAI,gCAAgC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACtD,OAAO,qDAAqD,MAAM,+DAA+D,CAAC;AACnI,CAAC;AAED,SAAS,KAAK,CAAC,OAAoB,EAAE,GAAW;IAC/C,OAAO,GAAG,IAAI,OAAO,CAAC,CAAC,CAAE,OAA8C,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC;AAED,SAAS,aAAa,CAAC,OAAoB;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC;IAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,OAAoB,EAAE,eAA4C;IACtF,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,mBAAmB,CAAC;IAC9D,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;AACnF,CAAC;AAED,0FAA0F;AAC1F,SAAS,kBAAkB,CAAC,QAAgC;IAC3D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,IAAI,WAAW,GAAoB,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE;QAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC7E,IAAI,MAAM,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;oBAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAChD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACpD,IACC,UAAU,KAAK,OAAO;gBACtB,wBAAwB,CAAC,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,EACpF,CAAC;gBACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;gBACtE,WAAW,GAAG,EAAE,CAAC;YAClB,CAAC;iBAAM,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC/D,WAAW,GAAG,EAAE,CAAC;YAClB,CAAC;YACD,OAAO;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO;QACrE,aAAa,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACpD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,WAAW,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;YAC/F,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgC,EAAE,UAAuB;IAC7F,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACrD,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAwB,QAAa;IAC9E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;YAC7E,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YAChE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChG,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAO,CAAC;IACrC,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Provider image rejections (senpi#2170). A provider that rejects an image\n * rejects every later request that replays it, and `dropFailedAssistantTurns`\n * removes the failed turn but not the image, so one bad image bricked the\n * session. The failed assistant turn is persisted with its error, so the\n * rejection is derived from history on every request (and after a restart):\n * images no successful response had accepted before an image-rejection failure\n * are replaced by a placeholder naming their source.\n */\n\nconst PROVIDER_IMAGE_REJECTION_PATTERN =\n\t/does not represent a valid image|image_parse_error|invalid_image|unsupported image|could not process image|unable to process input image|image_url'?\\.?[^\\n]*invalid base64|expected a base64-encoded data url|image was specified using the image\\/[a-z]+ media type|unsupported media type for base64 image|invalid data url for image/i;\n\ninterface TurnBlock {\n\ttype: string;\n\tid?: unknown;\n\targuments?: unknown;\n}\n\ninterface TurnMessage {\n\trole: string;\n}\n\ninterface RejectedImage {\n\tmessageIndex: number;\n\tblockIndex: number;\n\tsource: string;\n}\n\nexport function isProviderImageRejection(errorMessage: string | undefined): boolean {\n\treturn errorMessage !== undefined && PROVIDER_IMAGE_REJECTION_PATTERN.test(errorMessage);\n}\n\nexport function rejectedImagePlaceholder(source: string): string {\n\treturn `[Image omitted: the provider rejected this image (${source}) as invalid, so it is no longer sent with the conversation.]`;\n}\n\nfunction field(message: TurnMessage, key: string): unknown {\n\treturn key in message ? (message as unknown as Record<string, unknown>)[key] : undefined;\n}\n\nfunction contentBlocks(message: TurnMessage): readonly TurnBlock[] {\n\tconst content = field(message, \"content\");\n\treturn Array.isArray(content) ? (content as TurnBlock[]) : [];\n}\n\nfunction toolCallSource(block: TurnBlock): string | undefined {\n\tconst args = block.arguments;\n\tif (typeof args !== \"object\" || args === null) return undefined;\n\tconst record = args as Record<string, unknown>;\n\tfor (const key of [\"path\", \"file_path\", \"filePath\"]) {\n\t\tconst value = record[key];\n\t\tif (typeof value === \"string\" && value.trim().length > 0) return value;\n\t}\n\treturn undefined;\n}\n\nfunction imageSource(message: TurnMessage, toolCallSources: ReadonlyMap<string, string>): string {\n\tif (message.role !== \"toolResult\") return \"an attached image\";\n\tconst toolCallId = field(message, \"toolCallId\");\n\tconst known = typeof toolCallId === \"string\" ? toolCallSources.get(toolCallId) : undefined;\n\tif (known) return known;\n\tconst toolName = field(message, \"toolName\");\n\treturn typeof toolName === \"string\" ? `${toolName} tool result` : \"a tool result\";\n}\n\n/** Rejected images keyed by the index of the failed assistant turn that rejected them. */\nfunction scanRejectedImages(messages: readonly TurnMessage[]): Map<number, RejectedImage[]> {\n\tconst toolCallSources = new Map<string, string>();\n\tconst rejections = new Map<number, RejectedImage[]>();\n\tlet unconfirmed: RejectedImage[] = [];\n\tmessages.forEach((message, messageIndex) => {\n\t\tif (message.role === \"assistant\") {\n\t\t\tfor (const block of contentBlocks(message)) {\n\t\t\t\tconst source = block.type === \"toolCall\" ? toolCallSource(block) : undefined;\n\t\t\t\tif (source && typeof block.id === \"string\") toolCallSources.set(block.id, source);\n\t\t\t}\n\t\t\tconst stopReason = field(message, \"stopReason\");\n\t\t\tconst errorMessage = field(message, \"errorMessage\");\n\t\t\tif (\n\t\t\t\tstopReason === \"error\" &&\n\t\t\t\tisProviderImageRejection(typeof errorMessage === \"string\" ? errorMessage : undefined)\n\t\t\t) {\n\t\t\t\tif (unconfirmed.length > 0) rejections.set(messageIndex, unconfirmed);\n\t\t\t\tunconfirmed = [];\n\t\t\t} else if (stopReason !== \"error\" && stopReason !== \"aborted\") {\n\t\t\t\tunconfirmed = [];\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\t\tif (message.role !== \"user\" && message.role !== \"toolResult\") return;\n\t\tcontentBlocks(message).forEach((block, blockIndex) => {\n\t\t\tif (block.type === \"image\") {\n\t\t\t\tunconfirmed.push({ messageIndex, blockIndex, source: imageSource(message, toolCallSources) });\n\t\t\t}\n\t\t});\n\t});\n\treturn rejections;\n}\n\nexport function rejectedImageSources(messages: readonly TurnMessage[], failedTurn: TurnMessage): string[] {\n\tconst failedIndex = messages.lastIndexOf(failedTurn);\n\treturn (scanRejectedImages(messages).get(failedIndex) ?? []).map((image) => image.source);\n}\n\nexport function omitProviderRejectedImages<T extends TurnMessage>(messages: T[]): T[] {\n\tconst rejected = new Map<number, Map<number, string>>();\n\tfor (const images of scanRejectedImages(messages).values()) {\n\t\tfor (const image of images) {\n\t\t\tconst blocks = rejected.get(image.messageIndex) ?? new Map<number, string>();\n\t\t\tblocks.set(image.blockIndex, image.source);\n\t\t\trejected.set(image.messageIndex, blocks);\n\t\t}\n\t}\n\tif (rejected.size === 0) return messages;\n\treturn messages.map((message, messageIndex) => {\n\t\tconst blocks = rejected.get(messageIndex);\n\t\tif (!blocks) return message;\n\t\tconst content = contentBlocks(message).map((block, blockIndex) => {\n\t\t\tconst source = blocks.get(blockIndex);\n\t\t\treturn source === undefined ? block : { type: \"text\", text: rejectedImagePlaceholder(source) };\n\t\t});\n\t\treturn { ...message, content } as T;\n\t});\n}\n"]}

package/dist/core/repository-identity.d.ts

@@ -0,0 +1,18 @@
+export declare const REPOSITORY_IDENTITY_ENTRY_TYPE = "repository-identity";
+export interface RepositoryIdentity {
+    readonly rootCommits: readonly string[];
+    readonly originUrl?: string;
+}
+export type RepositoryMatch = "same" | "different" | "unknown";
+export type GitRunner = (dir: string, args: readonly string[]) => Promise<string | undefined>;
+export declare function readRepositoryIdentity(dir: string, run?: GitRunner): Promise<RepositoryIdentity | undefined>;
+/** `git@host:owner/repo.git`, `ssh://git@host:22/owner/repo`, and `https://host/owner/repo` all become `host/owner/repo`. */
+export declare function normalizeRemoteUrl(url: string): string;
+/**
+ * Two checkouts are the same repository when their histories share a root commit. Without commits on
+ * either side the origin remote decides. Anything less is "unknown", never a guess.
+ */
+export declare function compareRepositoryIdentities(a: RepositoryIdentity | undefined, b: RepositoryIdentity | undefined): RepositoryMatch;
+export declare function parseRepositoryIdentity(value: unknown): RepositoryIdentity | undefined;
+export declare function sameRepositoryIdentity(a: RepositoryIdentity | undefined, b: RepositoryIdentity | undefined): boolean;
+//# sourceMappingURL=repository-identity.d.ts.map

package/dist/core/repository-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-identity.d.ts","sourceRoot":"","sources":["../../src/core/repository-identity.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,8BAA8B,wBAAwB,CAAC;AAOpE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;AAE/D,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAU9F,wBAAsB,sBAAsB,CAC3C,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,SAAkB,GACrB,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAYzC;AAED,6HAA6H;AAC7H,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAatD;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAC1C,CAAC,EAAE,kBAAkB,GAAG,SAAS,EACjC,CAAC,EAAE,kBAAkB,GAAG,SAAS,GAC/B,eAAe,CASjB;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,SAAS,CAQtF;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,kBAAkB,GAAG,SAAS,EAAE,CAAC,EAAE,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAGpH"}

package/dist/core/repository-identity.js

@@ -0,0 +1,75 @@
+import { execFile } from "node:child_process";
+export const REPOSITORY_IDENTITY_ENTRY_TYPE = "repository-identity";
+const GIT_TIMEOUT_MS = 5_000;
+const COMMIT_HASH = /^[0-9a-f]{40,64}$/;
+// An inherited repository location would make every directory report that one repository.
+const GIT_LOCATION_ENV = new Set(["GIT_DIR", "GIT_WORK_TREE", "GIT_COMMON_DIR", "GIT_INDEX_FILE"]);
+const runGit = (dir, args) => new Promise((resolve) => {
+    const env = Object.fromEntries(Object.entries(process.env).filter(([name]) => !GIT_LOCATION_ENV.has(name)));
+    execFile("git", ["-C", dir, ...args], { env, timeout: GIT_TIMEOUT_MS, windowsHide: true }, (error, stdout) => {
+        resolve(error ? undefined : stdout);
+    });
+});
+export async function readRepositoryIdentity(dir, run = runGit) {
+    const [roots, origin] = await Promise.all([
+        run(dir, ["rev-list", "--max-parents=0", "HEAD"]),
+        run(dir, ["config", "--get", "remote.origin.url"]),
+    ]);
+    const rootCommits = (roots ?? "")
+        .split(/\s+/)
+        .filter((line) => COMMIT_HASH.test(line))
+        .sort();
+    const originUrl = origin?.trim() ? normalizeRemoteUrl(origin) : undefined;
+    if (rootCommits.length === 0 && originUrl === undefined)
+        return undefined;
+    return originUrl === undefined ? { rootCommits } : { rootCommits, originUrl };
+}
+/** `git@host:owner/repo.git`, `ssh://git@host:22/owner/repo`, and `https://host/owner/repo` all become `host/owner/repo`. */
+export function normalizeRemoteUrl(url) {
+    const trimmed = url.trim();
+    const scpLike = /^(?:[^@/\s]+@)?([^:/\s]+):(?!\/)(.+)$/.exec(trimmed);
+    const withoutScheme = scpLike
+        ? `${scpLike[1]}/${scpLike[2]}`
+        : trimmed
+            .replace(/^[a-z][a-z0-9+.-]*:\/\//i, "")
+            .replace(/^[^@/]+@/, "")
+            .replace(/^([^/:]+):\d+\//, "$1/");
+    return withoutScheme
+        .replace(/\/+$/, "")
+        .replace(/\.git$/i, "")
+        .toLowerCase();
+}
+/**
+ * Two checkouts are the same repository when their histories share a root commit. Without commits on
+ * either side the origin remote decides. Anything less is "unknown", never a guess.
+ */
+export function compareRepositoryIdentities(a, b) {
+    if (a === undefined || b === undefined)
+        return "unknown";
+    if (a.rootCommits.length > 0 && b.rootCommits.length > 0) {
+        return a.rootCommits.some((commit) => b.rootCommits.includes(commit)) ? "same" : "different";
+    }
+    if (a.originUrl !== undefined && b.originUrl !== undefined) {
+        return a.originUrl === b.originUrl ? "same" : "different";
+    }
+    return "unknown";
+}
+export function parseRepositoryIdentity(value) {
+    if (typeof value !== "object" || value === null)
+        return undefined;
+    const { rootCommits, originUrl } = value;
+    if (!Array.isArray(rootCommits) || !rootCommits.every((commit) => typeof commit === "string"))
+        return undefined;
+    if (originUrl !== undefined && typeof originUrl !== "string")
+        return undefined;
+    const commits = rootCommits.filter((commit) => COMMIT_HASH.test(commit)).sort();
+    if (commits.length === 0 && originUrl === undefined)
+        return undefined;
+    return originUrl === undefined ? { rootCommits: commits } : { rootCommits: commits, originUrl };
+}
+export function sameRepositoryIdentity(a, b) {
+    if (a === undefined || b === undefined)
+        return a === b;
+    return a.originUrl === b.originUrl && a.rootCommits.join(",") === b.rootCommits.join(",");
+}
+//# sourceMappingURL=repository-identity.js.map

package/dist/core/repository-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-identity.js","sourceRoot":"","sources":["../../src/core/repository-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAC;AAEpE,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,0FAA0F;AAC1F,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAWnG,MAAM,MAAM,GAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CACvC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5G,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5G,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,GAAW,EACX,GAAG,GAAc,MAAM;IAEvB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACjD,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;SAC/B,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACxC,IAAI,EAAE,CAAC;IACT,MAAM,SAAS,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1E,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AAC/E,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,OAAO;QAC5B,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE;QAC/B,CAAC,CAAC,OAAO;aACN,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;aACvC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aACvB,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,aAAa;SAClB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,WAAW,EAAE,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAC1C,CAAiC,EACjC,CAAiC;IAEjC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;IAC3D,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAuD,CAAC;IAC3F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAChH,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/E,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,CAAiC,EAAE,CAAiC;IAC1G,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3F,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\n\nexport const REPOSITORY_IDENTITY_ENTRY_TYPE = \"repository-identity\";\n\nconst GIT_TIMEOUT_MS = 5_000;\nconst COMMIT_HASH = /^[0-9a-f]{40,64}$/;\n// An inherited repository location would make every directory report that one repository.\nconst GIT_LOCATION_ENV = new Set([\"GIT_DIR\", \"GIT_WORK_TREE\", \"GIT_COMMON_DIR\", \"GIT_INDEX_FILE\"]);\n\nexport interface RepositoryIdentity {\n\treadonly rootCommits: readonly string[];\n\treadonly originUrl?: string;\n}\n\nexport type RepositoryMatch = \"same\" | \"different\" | \"unknown\";\n\nexport type GitRunner = (dir: string, args: readonly string[]) => Promise<string | undefined>;\n\nconst runGit: GitRunner = (dir, args) =>\n\tnew Promise((resolve) => {\n\t\tconst env = Object.fromEntries(Object.entries(process.env).filter(([name]) => !GIT_LOCATION_ENV.has(name)));\n\t\texecFile(\"git\", [\"-C\", dir, ...args], { env, timeout: GIT_TIMEOUT_MS, windowsHide: true }, (error, stdout) => {\n\t\t\tresolve(error ? undefined : stdout);\n\t\t});\n\t});\n\nexport async function readRepositoryIdentity(\n\tdir: string,\n\trun: GitRunner = runGit,\n): Promise<RepositoryIdentity | undefined> {\n\tconst [roots, origin] = await Promise.all([\n\t\trun(dir, [\"rev-list\", \"--max-parents=0\", \"HEAD\"]),\n\t\trun(dir, [\"config\", \"--get\", \"remote.origin.url\"]),\n\t]);\n\tconst rootCommits = (roots ?? \"\")\n\t\t.split(/\\s+/)\n\t\t.filter((line) => COMMIT_HASH.test(line))\n\t\t.sort();\n\tconst originUrl = origin?.trim() ? normalizeRemoteUrl(origin) : undefined;\n\tif (rootCommits.length === 0 && originUrl === undefined) return undefined;\n\treturn originUrl === undefined ? { rootCommits } : { rootCommits, originUrl };\n}\n\n/** `git@host:owner/repo.git`, `ssh://git@host:22/owner/repo`, and `https://host/owner/repo` all become `host/owner/repo`. */\nexport function normalizeRemoteUrl(url: string): string {\n\tconst trimmed = url.trim();\n\tconst scpLike = /^(?:[^@/\\s]+@)?([^:/\\s]+):(?!\\/)(.+)$/.exec(trimmed);\n\tconst withoutScheme = scpLike\n\t\t? `${scpLike[1]}/${scpLike[2]}`\n\t\t: trimmed\n\t\t\t\t.replace(/^[a-z][a-z0-9+.-]*:\\/\\//i, \"\")\n\t\t\t\t.replace(/^[^@/]+@/, \"\")\n\t\t\t\t.replace(/^([^/:]+):\\d+\\//, \"$1/\");\n\treturn withoutScheme\n\t\t.replace(/\\/+$/, \"\")\n\t\t.replace(/\\.git$/i, \"\")\n\t\t.toLowerCase();\n}\n\n/**\n * Two checkouts are the same repository when their histories share a root commit. Without commits on\n * either side the origin remote decides. Anything less is \"unknown\", never a guess.\n */\nexport function compareRepositoryIdentities(\n\ta: RepositoryIdentity | undefined,\n\tb: RepositoryIdentity | undefined,\n): RepositoryMatch {\n\tif (a === undefined || b === undefined) return \"unknown\";\n\tif (a.rootCommits.length > 0 && b.rootCommits.length > 0) {\n\t\treturn a.rootCommits.some((commit) => b.rootCommits.includes(commit)) ? \"same\" : \"different\";\n\t}\n\tif (a.originUrl !== undefined && b.originUrl !== undefined) {\n\t\treturn a.originUrl === b.originUrl ? \"same\" : \"different\";\n\t}\n\treturn \"unknown\";\n}\n\nexport function parseRepositoryIdentity(value: unknown): RepositoryIdentity | undefined {\n\tif (typeof value !== \"object\" || value === null) return undefined;\n\tconst { rootCommits, originUrl } = value as { rootCommits?: unknown; originUrl?: unknown };\n\tif (!Array.isArray(rootCommits) || !rootCommits.every((commit) => typeof commit === \"string\")) return undefined;\n\tif (originUrl !== undefined && typeof originUrl !== \"string\") return undefined;\n\tconst commits = rootCommits.filter((commit) => COMMIT_HASH.test(commit)).sort();\n\tif (commits.length === 0 && originUrl === undefined) return undefined;\n\treturn originUrl === undefined ? { rootCommits: commits } : { rootCommits: commits, originUrl };\n}\n\nexport function sameRepositoryIdentity(a: RepositoryIdentity | undefined, b: RepositoryIdentity | undefined): boolean {\n\tif (a === undefined || b === undefined) return a === b;\n\treturn a.originUrl === b.originUrl && a.rootCommits.join(\",\") === b.rootCommits.join(\",\");\n}\n"]}