@evandu/super-pi 0.1.145 → 0.1.147

package/dist/server/http-server.js

@@ -23,7 +23,9 @@ import { MAX_WEB_REQUEST_BYTES } from "./web.js";
 import { MAX_TOOL_BODY_BYTES } from "./tool-registry.js";
 import { packageUpdateArgs } from "./update.js";
 import { FileIndex } from "./file-index.js";
-import { ensureNameIndex } from "./file-name-index.js";
+import { ensureNameIndex, recordWorkspacePath } from "./file-name-index.js";
+import { resolveSessionCwd, sessionScopeKey, workspacePathFromSession } from "./session-cwd.js";
+import { verifyDirectChildScope, verifyListParentScope, verifyReportTargetScope, verifySpawnParentScope } from "./session-tree-scope.js";
 import { MAX_CONTENT_DEPTH, MAX_CONTENT_FILE_BYTES, MAX_CONTENT_RESULTS, searchByContent } from "./content-search.js";
 import { getAvailableSkills, readSkill } from "./skills.js";
 /**
@@ -34,11 +36,11 @@ import { getAvailableSkills, readSkill } from "./skills.js";
  * known so far rather than refused. The scan is the server's cost, not the user's - the old
  * implementation made the user pay it on every keystroke.
  */
-function nameIndexFor(context, workspaceId, root) {
+function nameIndexFor(context, workspaceId, root, cwd = "") {
     const indexes = context.nameIndexes ?? new Map();
     if (!context.nameIndexes)
         context.nameIndexes = indexes;
-    return ensureNameIndex(indexes, workspaceId, root);
+    return ensureNameIndex(indexes, workspaceId, root, cwd);
 }
 const MIME_TYPES = {
     ".css": "text/css; charset=utf-8",
@@ -312,7 +314,7 @@ export function createHttpServer(options) {
             // the endpoint that can spend it is exactly the one an agent's own turn can reach, and the
             // management half (`/api/feishu/config`) stays behind the ordinary token AND the local-address
             // predicate.
-            if (requestPath !== "/api/memory/tool" && requestPath !== "/api/knowledge/tool" && requestPath !== "/api/documents/tool" && requestPath !== "/api/web/tool" && requestPath !== "/api/feishu/tool" && requestPath !== "/api/todos" && requestPath !== "/api/scheduled-tasks" && requestPath !== "/api/question" && (requestPath !== "/api/tools" || request.method !== "POST") && !requestPath.startsWith("/tools/") && !isAuthorized(request, accessToken)) {
+            if (requestPath !== "/api/conversation/usage" && requestPath !== "/api/memory/tool" && requestPath !== "/api/knowledge/tool" && requestPath !== "/api/documents/tool" && requestPath !== "/api/web/tool" && requestPath !== "/api/feishu/tool" && requestPath !== "/api/todos" && requestPath !== "/api/scheduled-tasks" && requestPath !== "/api/question" && (requestPath !== "/api/tools" || request.method !== "POST") && !requestPath.startsWith("/tools/") && !isAuthorized(request, accessToken)) {
                 response.writeHead(401, { "www-authenticate": "Bearer" }).end("Authentication required");
                 return;
             }
@@ -1070,6 +1072,8 @@ export function createHttpServer(options) {
                         json(404, { error: `工作区 ${workspaceId ?? "(missing)"} 不存在`, code: "no_workspace" });
                         return;
                     }
+                    const sessionRoot = await resolveSessionCwd(workspace.path, url.searchParams.get("cwd"));
+                    const cwd = relative(resolve(workspace.path), sessionRoot).replaceAll("\\", "/");
                     const op = url.searchParams.get("op") ?? "status";
                     // Blame is a read with a GET shape: every other verb is refused HERE, before the POST branch
                     // could ever route the op into gitMutate and before any body is read.
@@ -1095,7 +1099,8 @@ export function createHttpServer(options) {
                         }
                         const raw = asked.text;
                         const body = raw ? JSON.parse(raw) : {};
-                        json(200, await gitMutate(workspace.path, op, body.path, body.message));
+                        const path = body.path ? await workspacePathFromSession(workspace.path, sessionRoot, body.path) : undefined;
+                        json(200, await gitMutate(workspace.path, op, path, body.message, cwd));
                         return;
                     }
                     if (request.method !== "GET") {
@@ -1103,16 +1108,16 @@ export function createHttpServer(options) {
                         return;
                     }
                     if (op === "status")
-                        json(200, await gitStatus(workspace.path));
+                        json(200, await gitStatus(workspace.path, cwd));
                     else if (op === "log")
-                        json(200, await gitLog(workspace.path, Number(url.searchParams.get("limit") ?? 20)));
+                        json(200, await gitLog(workspace.path, Number(url.searchParams.get("limit") ?? 20), cwd));
                     else if (op === "diff") {
                         const path = url.searchParams.get("path");
                         if (!path) {
                             json(400, { error: "diff 需要 path", code: "bad_path" });
                             return;
                         }
-                        json(200, await gitDiff(workspace.path, path, url.searchParams.get("staged") === "1"));
+                        json(200, await gitDiff(workspace.path, await workspacePathFromSession(workspace.path, sessionRoot, path), url.searchParams.get("staged") === "1"));
                     }
                     else if (op === "blame") {
                         const path = url.searchParams.get("path");
@@ -1122,7 +1127,7 @@ export function createHttpServer(options) {
                         }
                         const startLine = url.searchParams.get("startLine");
                         const endLine = url.searchParams.get("endLine");
-                        json(200, await gitBlame(workspace.path, path, {
+                        json(200, await gitBlame(workspace.path, await workspacePathFromSession(workspace.path, sessionRoot, path), {
                             revision: url.searchParams.get("revision") ?? undefined,
                             startLine: startLine === null ? undefined : Number(startLine),
                             endLine: endLine === null ? undefined : Number(endLine),
@@ -1136,7 +1141,7 @@ export function createHttpServer(options) {
                     const code = error?.code;
                     if (code === 128 || code === "not_a_repo" || /not a git repository/i.test(message))
                         json(404, { error: "此工作区不是 git 仓库", code: "not_a_repo" });
-                    else if (code === "path")
+                    else if (code === "path" || code === "outside_workspace")
                         json(400, { error: message, code: "bad_path" });
                     else if (code === "not_found")
                         json(404, { error: message, code: "not_found" });
@@ -1480,27 +1485,86 @@ export function createHttpServer(options) {
                     }
                     const action = (body.action || "").trim();
                     if (action === "spawn") {
+                        // Capability auth above proves who is calling. The target workspace is a separate, explicit
+                        // choice: a parentConversationId records a tree edge and never selects that target.
+                        const requestedWorkspaceId = body.workspaceId?.trim();
+                        if (!requestedWorkspaceId) {
+                            json(400, { error: "创建会话必须显式指定 workspaceId；父会话只记录树形关系，不能代替目标工作区。" });
+                            return;
+                        }
+                        const store = context.store;
+                        const callerWorkspaceId = store && callerConversationId
+                            ? store.conversation(callerConversationId)?.workspaceId
+                            : undefined;
+                        if (requestedWorkspaceId !== callerWorkspaceId) {
+                            json(403, {
+                                error: `调用方会话 ${callerConversationId} 所在工作区为 ${callerWorkspaceId ?? "未知"}，请求的目标工作区 ${requestedWorkspaceId} 不属于调用方，拒绝在该工作区创建会话。请传入调用方自己的工作区。`,
+                            });
+                            return;
+                        }
+                        // THE PARENT EDGE IS NOT THE CALLER'S TO CHOOSE. `parentConversationId` is written onto the
+                        // new conversation at birth, and the child's result callback follows that edge home. A
+                        // caller that named somebody ELSE as the parent would rewrite that session's reporting
+                        // line - the victim's result would land in the caller's inbox - so the parent must be the
+                        // caller. An empty parent means a top-level session, which is what the user's own "+"
+                        // creates and what a session with no owner legitimately is.
+                        const parentScope = verifySpawnParentScope({
+                            store: context.store,
+                            callerConversationId,
+                            requestedParentId: body.parentConversationId,
+                        });
+                        if (!parentScope.ok) {
+                            json(parentScope.status, { error: parentScope.error });
+                            return;
+                        }
                         if (!body.task)
                             throw new Error("spawn requires task");
                         const result = await service.spawn({
                             task: body.task,
-                            parentConversationId: body.parentConversationId,
-                            workspaceId: body.workspaceId,
+                            parentConversationId: body.parentConversationId?.trim() || undefined,
+                            workspaceId: requestedWorkspaceId,
                             title: body.title,
                             agentId: body.agentId,
                             model: body.model,
                             thinkingLevel: body.thinkingLevel,
                             initialPrompt: body.initialPrompt,
                             wait: body.wait,
+                            cwd: body.cwd,
+                            watchdogTimeoutSeconds: body.watchdogTimeoutSeconds ?? body.watchdog_timeout_seconds ?? body.watchdogSeconds,
                         });
                         json(200, { ok: true, ...result });
                         return;
                     }
+                    // THE SCOPE RULE, IN ONE PLACE, FOR EVERY ACTION THAT TOUCHES ANOTHER SESSION.
+                    //
+                    // A session may only manage its DIRECT children: the target's `parentConversationId` must be
+                    // the caller itself. Not a grandchild (that is a level away), not a peer (that is somebody
+                    // else's branch), not an ancestor (that is above), not a session in another workspace (that
+                    // is another department). A workspace is not an organisation chart.
+                    //
+                    // WHY IT IS ONE LINE. The tree edge lives on the conversation itself, so "is this my child?"
+                    // is a comparison, not a walk. The walk up the chain exists only to write a refusal that says
+                    // WHY - it never decides anything.
+                    //
+                    // WHY IT MATTERS. The result callback of a dispatched session goes back to the session that
+                    // owns it, so "who gave the order is who gets the report" holds by construction instead of by
+                    // a second mechanism that could drift.
+                    const verifyTargetScope = (targetConversationId, verb) => verifyDirectChildScope({
+                        store: context.store,
+                        callerConversationId,
+                        targetConversationId,
+                        verb,
+                    });
                     if (action === "dispatch") {
                         if (!body.conversationId)
                             throw new Error("dispatch requires conversationId");
                         if (!body.content)
                             throw new Error("dispatch requires content");
+                        const scope = verifyTargetScope(body.conversationId, "调度");
+                        if (!scope.ok) {
+                            json(scope.status, { error: scope.error });
+                            return;
+                        }
                         const result = await service.dispatch(body.conversationId, body.content, { wait: body.wait });
                         json(200, { ok: true, ...result });
                         return;
@@ -1508,18 +1572,44 @@ export function createHttpServer(options) {
                     if (action === "status") {
                         if (!body.conversationId)
                             throw new Error("status requires conversationId");
+                        const scope = verifyTargetScope(body.conversationId, "读取");
+                        if (!scope.ok) {
+                            json(scope.status, { error: scope.error });
+                            return;
+                        }
                         const summary = await service.status(body.conversationId, { includeOutput: body.includeOutput });
                         json(200, { ok: true, summary });
                         return;
                     }
                     if (action === "list") {
-                        const sessions = await service.list(body.parentConversationId);
-                        json(200, { ok: true, sessions });
+                        // LISTING IS SCOPED TOO. The parent whose children are listed must be the caller itself,
+                        // so the only sessions on the list are the caller's own direct children. Listing the
+                        // children of the caller's own child would be listing grandchildren - the same cross-level
+                        // reach every other action refuses.
+                        const listScope = verifyListParentScope({
+                            store: context.store,
+                            callerConversationId,
+                            requestedParentId: body.parentConversationId,
+                        });
+                        if (!listScope.ok) {
+                            json(listScope.status, { error: listScope.error });
+                            return;
+                        }
+                        const effectiveParentId = body.parentConversationId?.trim() || callerConversationId;
+                        const sessions = await service.list(effectiveParentId);
+                        const callerWorkspaceId = context.store.conversation(callerConversationId)?.workspaceId;
+                        const allowedSessions = sessions.filter((s) => !s.workspaceId || s.workspaceId === callerWorkspaceId);
+                        json(200, { ok: true, sessions: allowedSessions });
                         return;
                     }
                     if (action === "stop") {
                         if (!body.conversationId)
                             throw new Error("stop requires conversationId");
+                        const scope = verifyTargetScope(body.conversationId, "停止");
+                        if (!scope.ok) {
+                            json(scope.status, { error: scope.error });
+                            return;
+                        }
                         const result = await service.stop(body.conversationId, { mode: body.mode, messageId: body.messageId });
                         json(200, { ok: true, ...result });
                         return;
@@ -1527,10 +1617,73 @@ export function createHttpServer(options) {
                     if (action === "resume") {
                         if (!body.conversationId)
                             throw new Error("resume requires conversationId");
+                        const scope = verifyTargetScope(body.conversationId, "恢复");
+                        if (!scope.ok) {
+                            json(scope.status, { error: scope.error });
+                            return;
+                        }
                         const result = await service.resume(body.conversationId, body.prompt, { wait: body.wait });
                         json(200, { ok: true, ...result });
                         return;
                     }
+                    if (action === "report") {
+                        if (!callerConversationId) {
+                            json(400, { error: "汇报操作缺少调用方会话标识" });
+                            return;
+                        }
+                        const callerConv = context.store.conversation(callerConversationId);
+                        if (!callerConv) {
+                            json(400, { error: `找不到会话：${callerConversationId}` });
+                            return;
+                        }
+                        if (!callerConv.parentConversationId) {
+                            json(400, { error: `会话 ${callerConversationId} 没有直属父会话，无法汇报` });
+                            return;
+                        }
+                        const targetId = body.targetConversationId ?? callerConv.parentConversationId;
+                        const scope = verifyReportTargetScope({
+                            store: context.store,
+                            callerConversationId,
+                            targetConversationId: targetId,
+                        });
+                        if (!scope.ok) {
+                            json(scope.status, { error: scope.error });
+                            return;
+                        }
+                        if (body.content === undefined || body.content === null) {
+                            json(400, { error: "report requires content" });
+                            return;
+                        }
+                        const result = await service.report(callerConversationId, {
+                            content: String(body.content),
+                            status: body.status,
+                        });
+                        json(200, { ok: true, ...result });
+                        return;
+                    }
+                    if (action === "watchdog") {
+                        if (!body.conversationId)
+                            throw new Error("watchdog requires conversationId");
+                        const scope = verifyTargetScope(body.conversationId, "看护");
+                        if (!scope.ok) {
+                            json(scope.status, { error: scope.error });
+                            return;
+                        }
+                        const subaction = body.subaction ?? "arm";
+                        if (subaction === "cancel") {
+                            const result = await service.cancelWatchdog(body.conversationId);
+                            json(200, { ...result, ok: true });
+                            return;
+                        }
+                        const timeoutSeconds = Number(body.timeoutSeconds ?? body.timeout_seconds ?? 300);
+                        const result = await service.setWatchdog({
+                            childConversationId: body.conversationId,
+                            parentConversationId: callerConversationId,
+                            timeoutSeconds,
+                        });
+                        json(200, { ...result, ok: true });
+                        return;
+                    }
                     json(400, { error: `不支持的编排操作：${action}` });
                 }
                 catch (error) {
@@ -1538,6 +1691,36 @@ export function createHttpServer(options) {
                 }
                 return;
             }
+            if (url.pathname === "/api/conversation/usage") {
+                const json = (status, payload) => {
+                    response.writeHead(status, { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" }).end(JSON.stringify(payload));
+                };
+                if (request.method !== "GET" || !isLocalOrPrivateAddress(remote)) {
+                    json(403, { error: "Usage readout requires a local/private GET request." });
+                    return;
+                }
+                const callerConversationId = url.searchParams.get("callerConversationId") ?? "";
+                const capability = request.headers["x-super-pi-capability"] ?? url.searchParams.get("capability");
+                const verdict = runService.verifyPrimaryCapability(callerConversationId, capability);
+                if (!verdict.ok) {
+                    json(403, { error: verdict.message });
+                    return;
+                }
+                const target = url.searchParams.get("conversationId") ?? callerConversationId;
+                if (target !== callerConversationId) {
+                    json(403, { error: "Only the caller's own conversation usage may be read." });
+                    return;
+                }
+                const conversation = store.conversation(callerConversationId);
+                if (!conversation) {
+                    json(403, { error: "Caller conversation is unavailable." });
+                    return;
+                }
+                json(200, { ok: true, conversationId: callerConversationId, usage: conversation.usage ?? null,
+                    usageCostKnown: conversation.usageCostKnown ?? null, contextUsage: conversation.contextUsage ?? null,
+                    usageUpdatedAt: conversation.usageUpdatedAt ?? null });
+                return;
+            }
             if (url.pathname === "/api/orchestrator/status" && request.method === "GET") {
                 if (!isLocalOrPrivateAddress(remote)) {
                     response.writeHead(403).end();
@@ -1559,6 +1742,18 @@ export function createHttpServer(options) {
                     response.writeHead(400, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify({ error: "缺少 conversationId" }));
                     return;
                 }
+                const store = context.store;
+                // THE SAME SCOPE RULE AS THE POST ACTION: the target must be the caller's DIRECT child.
+                const scope = verifyDirectChildScope({
+                    store,
+                    callerConversationId,
+                    targetConversationId: conversationId,
+                    verb: "读取",
+                });
+                if (!scope.ok) {
+                    response.writeHead(scope.status, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify({ error: scope.error }));
+                    return;
+                }
                 try {
                     const summary = await service.status(conversationId, { includeOutput: url.searchParams.get("includeOutput") === "true" });
                     response.writeHead(200, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify({ ok: true, summary }));
@@ -1585,9 +1780,24 @@ export function createHttpServer(options) {
                     response.writeHead(403, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify({ error: verdict.message }));
                     return;
                 }
+                const store = context.store;
+                // THE SAME SCOPE RULE AS THE POST ACTION: the parent whose children are listed must be the
+                // caller itself, so only the caller's own direct children can come back.
+                const listScope = verifyListParentScope({
+                    store,
+                    callerConversationId,
+                    requestedParentId: parentId,
+                });
+                if (!listScope.ok) {
+                    response.writeHead(listScope.status, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify({ error: listScope.error }));
+                    return;
+                }
+                const callerWorkspaceId = store.conversation(callerConversationId)?.workspaceId;
                 try {
-                    const sessions = await service.list(parentId);
-                    response.writeHead(200, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify({ ok: true, sessions }));
+                    const effectiveParentId = parentId || callerConversationId;
+                    const sessions = await service.list(effectiveParentId);
+                    const allowedSessions = sessions.filter((s) => !s.workspaceId || s.workspaceId === callerWorkspaceId);
+                    response.writeHead(200, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify({ ok: true, sessions: allowedSessions }));
                 }
                 catch (error) {
                     response.writeHead(400, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify({ error: error instanceof Error ? error.message : "list failed" }));
@@ -1644,16 +1854,20 @@ export function createHttpServer(options) {
                         json(400, { error: "需要 path 参数", code: "bad_request" });
                         return;
                     }
+                    const root = await resolveSessionCwd(workspace.path, url.searchParams.get("cwd"));
+                    const workspaceRelativePath = await workspacePathFromSession(workspace.path, root, path);
                     const requested = url.searchParams.get("base")?.trim();
                     const preferred = requested === "git" || requested === "agent" ? requested : "auto";
                     // The baseline is chosen by the server, but the client can name one - and when it names one, that
                     // is the one it gets. A silent fall-back would show the user a comparison they did not ask for.
                     const diff = await computeFileDiff({
-                        root: workspace.path,
+                        root,
                         path,
                         preferred,
                         tracker: context.fileChanges,
                         workspaceId,
+                        gitRoot: workspace.path,
+                        trackerPath: workspaceRelativePath,
                     });
                     json(200, diff);
                 }
@@ -1677,7 +1891,9 @@ export function createHttpServer(options) {
                         json(404, { error: "找不到这个工作区——它可能已经被删除。", code: "no_workspace" });
                         return;
                     }
-                    await resolveInsideRoot(workspace.path, "");
+                    const root = await resolveSessionCwd(workspace.path, url.searchParams.get("cwd"));
+                    const cwd = relative(resolve(workspace.path), root).replaceAll("\\", "/");
+                    const indexKey = sessionScopeKey(workspaceId, cwd);
                     if (query.length > 256 || /[\r\n]/.test(query)) {
                         json(400, { error: "搜索词只能是一行，且不超过 256 个字符。", code: "bad_query" });
                         return;
@@ -1689,17 +1905,17 @@ export function createHttpServer(options) {
                     const indexes = context.fileIndexes ?? new Map();
                     if (!context.fileIndexes)
                         context.fileIndexes = indexes;
-                    let index = indexes.get(workspaceId);
+                    let index = indexes.get(indexKey);
                     if (!index) {
-                        index = new FileIndex(workspaceId, (event) => broadcaster.broadcast(event));
-                        indexes.set(workspaceId, index);
+                        index = new FileIndex(workspaceId, (event) => broadcaster.broadcast(event), cwd);
+                        indexes.set(indexKey, index);
                     }
-                    index.start(workspace.path);
+                    index.start(root);
                     const deadline = Date.now() + 4500;
                     while (!index.builtAt && Date.now() < deadline)
                         await new Promise((resolve) => setTimeout(resolve, 25));
                     const snapshot = index.snapshot();
-                    const result = await searchByContent(workspace.path, [...index.entries.values()], query, snapshot);
+                    const result = await searchByContent(root, [...index.entries.values()], query, snapshot);
                     json(200, { mode: "content", query, ...result, maxResults: MAX_CONTENT_RESULTS, maxFileBytes: MAX_CONTENT_FILE_BYTES, maxDepth: MAX_CONTENT_DEPTH });
                 }
                 catch (error) {
@@ -1738,18 +1954,21 @@ export function createHttpServer(options) {
                         json(404, { error: `找不到工作区「${workspaceId ?? "未指定"}」——它可能已经被删除。`, code: "no_workspace" });
                         return;
                     }
+                    const root = await resolveSessionCwd(workspace.path, url.searchParams.get("cwd"));
+                    const cwd = relative(resolve(workspace.path), root).replaceAll("\\", "/");
+                    const indexKey = sessionScopeKey(workspaceId, cwd);
                     const indexes = context.fileIndexes ?? new Map();
                     if (!context.fileIndexes)
                         context.fileIndexes = indexes;
-                    let index = indexes.get(workspaceId);
+                    let index = indexes.get(indexKey);
                     if (!index) {
-                        index = new FileIndex(workspaceId, (event) => broadcaster.broadcast(event));
-                        indexes.set(workspaceId, index);
+                        index = new FileIndex(workspaceId, (event) => broadcaster.broadcast(event), cwd);
+                        indexes.set(indexKey, index);
                     }
-                    index.start(workspace.path);
+                    index.start(root);
                     // Quick Open requests the full index on demand. Name search can share its background scan;
                     // merely selecting a session no longer starts a multi-MB download.
-                    nameIndexFor(context, workspaceId, workspace.path);
+                    nameIndexFor(context, workspaceId, root, cwd);
                     const sinceRaw = url.searchParams.get("since");
                     const since = sinceRaw === null ? undefined : Number(sinceRaw);
                     json(200, index.snapshot(Number.isSafeInteger(since) && since >= 0 ? since : undefined));
@@ -1771,7 +1990,9 @@ export function createHttpServer(options) {
                         json(404, { error: `找不到工作区「${workspaceId ?? "未指定"}」——它可能已经被删除。`, code: "no_workspace" });
                         return;
                     }
-                    const root = workspace.path;
+                    const root = await resolveSessionCwd(workspace.path, url.searchParams.get("cwd"));
+                    const cwd = relative(resolve(workspace.path), root).replaceAll("\\", "/");
+                    const indexKey = sessionScopeKey(workspaceId, cwd);
                     if (url.pathname === "/api/files") {
                         if (request.method !== "GET") {
                             json(405, { error: "目录列表需要 GET 请求。", code: "method" });
@@ -1787,7 +2008,7 @@ export function createHttpServer(options) {
                             // report a limit about. `truncated` and `skipped` stay in the response so the protocol
                             // shape does not change under the client, but they are now constants that say the
                             // opposite of what they used to.
-                            const index = nameIndexFor(context, workspaceId, root);
+                            const index = nameIndexFor(context, workspaceId, root, cwd);
                             // THE WORKSPACE MUST EXIST, AND THE INDEX IS WHAT KNOWS.
                             //
                             // The background scan records a root it could not read rather than throwing it - a scan
@@ -1827,12 +2048,12 @@ export function createHttpServer(options) {
                             const resolved = await resolveInsideRoot(root, rel);
                             const meta = await fileMeta(resolved);
                             const path = toRelative(root, resolved);
-                            context.fileIndexes?.get(workspaceId)?.recordFile(path, meta);
+                            context.fileIndexes?.get(indexKey)?.recordFile(path, meta);
                             json(200, { path, ...meta });
                             return;
                         }
                         const file = await readWorkspaceFile(root, rel);
-                        context.fileIndexes?.get(workspaceId)?.recordFile(file.path, file.meta);
+                        context.fileIndexes?.get(indexKey)?.recordFile(file.path, file.meta);
                         json(200, { path: file.path, content: file.content, eol: file.eol, bom: file.bom, meta: file.meta, maxBytes: MAX_FILE_BYTES });
                         return;
                     }
@@ -1867,11 +2088,12 @@ export function createHttpServer(options) {
                             return;
                         }
                         const outcome = await writeWorkspaceFile(root, parsed.path, parsed.content, parsed.baseEtag);
-                        context.fileIndexes?.get(workspaceId)?.recordFile(outcome.path, outcome.meta);
+                        context.fileIndexes?.get(indexKey)?.recordFile(outcome.path, outcome.meta);
                         // The name index learns about the save too. A file the user just saved must be findable
                         // by name immediately, and the index is the thing the search reads - so this is where the
                         // index stays true without anybody re-scanning the tree.
-                        context.nameIndexes?.get(workspaceId)?.upsert(outcome.path);
+                        if (context.nameIndexes)
+                            recordWorkspacePath(context.nameIndexes, workspaceId, workspace.path, await workspacePathFromSession(workspace.path, root, outcome.path));
                         json(200, outcome);
                         return;
                     }

package/dist/server/index.js

@@ -291,6 +291,9 @@ runService.setExecService(execService);
 const scheduledTaskService = new ScheduledTaskService(store, runService, conversationService, broadcaster);
 const sessionLedger = new SessionLedger();
 const sessionOrchestratorService = new SessionOrchestratorService(store, conversationService, runService, sessionLedger, broadcaster);
+void sessionOrchestratorService.restoreWatchdogs().catch((error) => {
+    console.warn("Super Pi: restoring watchdogs failed:", error instanceof Error ? error.message : String(error));
+});
 const serverContext = {
     memory,
     knowledge,

package/dist/server/knowledge-vectors.d.ts

@@ -21,6 +21,8 @@ export declare const KNOWLEDGE_MODEL = "Xenova/bge-small-zh-v1.5";
  * is written in.
  */
 export declare const EMBED_PIECE_CHARS = 300;
+/** Per query. Cosine similarity of unit vectors; threshold raised to 0.35 to filter out semantic noise. */
+export declare const MIN_COSINE = 0.35;
 export type VectorRecord = {
     chunk: number;
     values: number[];
@@ -32,6 +34,8 @@ export type VectorStatus = {
     indexed: number;
     error?: string;
     bundled?: boolean;
+    health?: "ready" | "degraded" | "restarting" | "disabled";
+    available?: boolean;
 };
 /**
  * Splits a retrieval chunk into pieces small enough for the model's window.
@@ -64,6 +68,11 @@ export declare class VectorIndex {
     private workerReady;
     private workerPending;
     private failure?;
+    private consecutiveFailures;
+    private lastFailureTime;
+    private static readonly MAX_FAILURES;
+    private static readonly COOLDOWN_MS;
+    private static readonly EMBED_TIMEOUT_MS;
     private cache;
     private pending;
     private queue;
@@ -92,9 +101,15 @@ export declare class VectorIndex {
      * able to reach, on the first search, for every person who installed the package. Shipping the
      * weights turns a failure mode into a file, and makes the feature work on a machine that has never
      * been online since it was installed.
+     *
+     * RESILIENT WORKER LIFECYCLE:
+     * When the worker encounters an error, crash, or unexpected exit, it cleans up all pending requests
+     * without hanging and marks the instance for automatic, on-demand respawning on the next embed call.
+     * A bounded backoff / cooldown prevents runaway crash loops if the environment is broken.
      */
     private ensureWorker;
     private embed;
+    terminate(): Promise<void>;
     /** Vectors already stored for one workspace, keyed by document then chunk index. */
     private read;
     count(workspaceId: string): Promise<number>;