@evident-ai/cli 3.2.1-dev.a241839 → 3.2.1-dev.cf740cc

package/README.md

@@ -111,7 +111,10 @@ Options:
   `7d`, `24h`). Setting this (or `--session-cleanup-max-count`) is what enables
   cleanup — there is no separate on/off flag. An invalid value is warned about
   and ignored, which can leave cleanup off if it was the only rule set. Env:
-  `EVIDENT_SESSION_CLEANUP_MAX_AGE`.
+  `EVIDENT_SESSION_CLEANUP_MAX_AGE`. With cleanup off, a runner whose local
+  session store has grown large warns once at startup, on the runner's page,
+  naming this flag — pruning stops the store growing, but it does not shrink
+  what has already grown.
 - `--session-cleanup-max-count <n>` — Keep only the newest N OpenCode sessions
   by last activity, deleting the rest. Also enables cleanup; combines with
   `--session-cleanup-max-age` as OR. A session with a turn actively in progress

package/dist/index.js

@@ -212,6 +212,7 @@ var api = {
 
 // src/lib/keychain.ts
 var SERVICE_NAME = "evident-cli";
+var keytarWarned = false;
 async function getKeytar() {
   try {
     const keytar = await import("keytar");
@@ -219,7 +220,13 @@ async function getKeytar() {
       return null;
     }
     return keytar;
-  } catch {
+  } catch (err) {
+    if (!keytarWarned) {
+      keytarWarned = true;
+      console.warn(
+        `System keychain unavailable, falling back to file-based credential storage: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
     return null;
   }
 }
@@ -368,8 +375,9 @@ async function deviceFlowLogin(options) {
     await waitForEnter("Press Enter to open the browser...");
     try {
       await open(verification_uri);
-    } catch {
-      console.log(chalk2.dim("Could not open browser. Please visit the URL manually."));
+    } catch (error2) {
+      const message = error2 instanceof Error ? error2.message : String(error2);
+      console.log(chalk2.dim(`Could not open browser (${message}). Please visit the URL manually.`));
     }
   }
   const spinner = ora("Waiting for authentication...").start();
@@ -909,14 +917,25 @@ function readClaudeCliCredentials() {
         { encoding: "utf-8", timeout: 2e3, stdio: ["pipe", "pipe", "ignore"] }
       );
       return parseClaudeCliCredentials(raw);
-    } catch {
+    } catch (err) {
+      if (err.status !== 44) {
+        console.warn(
+          `readClaudeCliCredentials: security find-generic-password failed: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
       return null;
     }
   }
   try {
     const raw = readFileSync(join(homedir(), ".claude", ".credentials.json"), "utf-8");
     return parseClaudeCliCredentials(raw);
-  } catch {
+  } catch (err) {
+    const code = err.code;
+    if (code !== "ENOENT" && code !== "ENOTDIR") {
+      console.warn(
+        `readClaudeCliCredentials: reading .claude/.credentials.json failed: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
     return null;
   }
 }
@@ -1004,7 +1023,7 @@ async function claudeUsage() {
 
 // src/commands/run.ts
 import { homedir as homedir3 } from "os";
-import { isAbsolute as isAbsolute2, join as join3, parse, resolve as resolvePath } from "path";
+import { isAbsolute as isAbsolute2, join as join4, parse, resolve as resolvePath } from "path";
 import chalk6 from "chalk";
 
 // ../../packages/types/src/agents/index.ts
@@ -1414,7 +1433,10 @@ function findOpenCodeProcesses() {
               }
             }
           }
-        } catch {
+        } catch (err) {
+          console.warn(
+            `findOpenCodeProcesses: ps fallback failed: ${err instanceof Error ? err.message : String(err)}`
+          );
         }
       }
       for (const pid of pids) {
@@ -1437,7 +1459,10 @@ function findOpenCodeProcesses() {
         }
       }
     }
-  } catch {
+  } catch (err) {
+    console.warn(
+      `findOpenCodeProcesses: process detection failed: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
   return instances;
 }
@@ -1511,7 +1536,12 @@ function stopOpenCode(opencodeProcess) {
     } else {
       process.kill(-opencodeProcess.pid, "SIGTERM");
     }
-  } catch {
+  } catch (err) {
+    if (err.code !== "ESRCH") {
+      console.warn(
+        `stopOpenCode: kill failed: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
   }
 }
 
@@ -2292,6 +2322,31 @@ function resolveSessionCleanupConfig(flags, env = process.env) {
   return { enabled, maxAgeMs, maxCount, intervalMs, warnings };
 }
 
+// src/lib/opencode/session-db-size.ts
+import { statSync as statSync2 } from "fs";
+import { join as join2 } from "path";
+var LARGE_DB_THRESHOLD_BYTES = 268435456;
+function statSessionDbBytes(homeDir) {
+  const dbPath = join2(homeDir, ".local", "share", "opencode", "opencode.db");
+  try {
+    return statSync2(dbPath).size;
+  } catch (err) {
+    const isMissingFile = err instanceof Error && "code" in err && err.code === "ENOENT";
+    if (!isMissingFile) {
+      console.error(
+        `[statSessionDbBytes] could not stat ${dbPath}: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+    return null;
+  }
+}
+function buildSessionStoreSizeWarning(input) {
+  const { dbBytes, cleanupEnabled } = input;
+  if (dbBytes === null || dbBytes <= LARGE_DB_THRESHOLD_BYTES || cleanupEnabled) return null;
+  const mib = Math.round(dbBytes / 1024 / 1024);
+  return `Session store is large: opencode.db is ${mib} MiB and automatic session cleanup is off. Enable it with --session-cleanup-max-age 24h (env EVIDENT_SESSION_CLEANUP_MAX_AGE) to stop it growing \u2014 a store much larger than this can exceed a hosted runner's session-history restore budget on the next start, losing this runner's session history.`;
+}
+
 // src/lib/tunnel/connection.ts
 import WebSocket2 from "ws";
 
@@ -2727,7 +2782,7 @@ import { homedir as homedir2 } from "os";
 // src/lib/file-push.ts
 import { randomUUID } from "crypto";
 import { chmod, mkdir, open as open2, realpath, rename, unlink } from "fs/promises";
-import { basename, dirname as dirname2, isAbsolute, join as join2, relative, resolve as resolve2, sep } from "path";
+import { basename, dirname as dirname2, isAbsolute, join as join3, relative, resolve as resolve2, sep } from "path";
 var FILE_MODE = 384;
 var DIRECTORY_MODE = 448;
 async function writePushedFile(request) {
@@ -2760,7 +2815,7 @@ async function writePushedFile(request) {
     const { existingAncestor, missingSegments } = await resolveNearestExistingAncestor(
       dirname2(candidate)
     );
-    const realTarget = join2(existingAncestor, ...missingSegments, basename(candidate));
+    const realTarget = join3(existingAncestor, ...missingSegments, basename(candidate));
     const allowedDirectory = await findContainingAllowedDirectory(allowedDirectories, realTarget);
     if (allowedDirectory === null) {
       return refuse("path_not_allowed", "The runner does not allow writing to that location.", {
@@ -2796,7 +2851,7 @@ function expandAndValidate(requestedPath, homeDir) {
   if (requestedPath.trim() === "" || requestedPath.includes("\0")) {
     return null;
   }
-  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join2(homeDir, requestedPath.slice(2)) : requestedPath;
+  const expanded = requestedPath === "~" ? homeDir : requestedPath.startsWith("~/") ? join3(homeDir, requestedPath.slice(2)) : requestedPath;
   if (expanded.split(/[/\\]/).includes("..")) {
     return null;
   }
@@ -2869,13 +2924,13 @@ function contains(realDirectory, realTarget) {
 async function createMissingDirectories(existingAncestor, missingSegments) {
   let current = existingAncestor;
   for (const segment of missingSegments) {
-    current = join2(current, segment);
+    current = join3(current, segment);
     await mkdir(current, { recursive: true, mode: DIRECTORY_MODE });
     await chmod(current, DIRECTORY_MODE);
   }
 }
 async function writeAtomically(realTarget, content) {
-  const temporaryPath = join2(dirname2(realTarget), `.evident-push-${randomUUID()}.tmp`);
+  const temporaryPath = join3(dirname2(realTarget), `.evident-push-${randomUUID()}.tmp`);
   let handle;
   try {
     handle = await open2(temporaryPath, "wx", FILE_MODE);
@@ -6632,7 +6687,7 @@ function resolveFileSyncDirectories(raw, homeDir) {
     if (trimmed === "") {
       throw new Error("--enable-file-sync-to requires a directory path (got an empty value)");
     }
-    const expanded = trimmed === "~" ? homeDir : trimmed.startsWith("~/") ? join3(homeDir, trimmed.slice(2)) : trimmed;
+    const expanded = trimmed === "~" ? homeDir : trimmed.startsWith("~/") ? join4(homeDir, trimmed.slice(2)) : trimmed;
     if (!isAbsolute2(expanded)) {
       throw new Error(`--enable-file-sync-to requires an absolute directory path; got "${entry}"`);
     }
@@ -6826,7 +6881,9 @@ async function handleAuthError(state, error2) {
     );
     const newAuthHeader = getAuthHeader(credentials2);
     return { success: true, newAuthHeader };
-  } catch {
+  } catch (error3) {
+    const message = error3 instanceof Error ? error3.message : String(error3);
+    logActivity(state, { type: "error", error: `Re-authentication failed: ${message}` });
     return { success: false };
   }
 }
@@ -6993,6 +7050,13 @@ function scheduleSessionCleanup(state, driver, options) {
   for (const warning2 of config.warnings) {
     logActivity(state, { type: "info", level: "warn", message: `Session cleanup: ${warning2}` });
   }
+  const sizeWarning = buildSessionStoreSizeWarning({
+    dbBytes: statSessionDbBytes(homedir3()),
+    cleanupEnabled: config.enabled
+  });
+  if (sizeWarning !== null) {
+    logActivity(state, { type: "info", level: "warn", message: sizeWarning });
+  }
   if (!config.enabled) return;
   logActivity(state, {
     type: "info",