@getrift/rift 0.1.0-beta.18 → 0.1.0-beta.19

package/dist/src/capture/auto-repair.d.ts

@@ -0,0 +1,110 @@
+import { z } from "zod";
+import { type RecoverQuarantineDeps, type RecoveryReport } from "./recover-quarantine.js";
+/**
+ * How many times a single parked session (at one fingerprint) is auto-retried
+ * before Rift stops and asks the user to run the manual repair. Low on purpose:
+ * the daemon retries roughly once per capture tick (hourly), so three attempts
+ * spans a few hours before declaring "could not save automatically", and the
+ * manual `rift doctor repair` path is always available regardless of budget.
+ */
+export declare const MAX_AUTO_REPAIR_ATTEMPTS = 3;
+/**
+ * How long to stop attempting auto-repair after a pass fails ONLY because
+ * saving was down (Voyage revoked/outage — the save handler needs a valid
+ * Voyage key). This is an infrastructure backoff, distinct from the
+ * per-session retry budget: a save outage is not any one session's fault, so
+ * it must not exhaust a session (see `applyBudgetFromReport`), but it also
+ * shouldn't make the daemon re-summarize every parked session via Codex on
+ * every hourly tick for the whole outage. The cooldown bounds that cost to one
+ * pass per window; it is cleared early the moment a save succeeds. Sized to a
+ * few default capture ticks (interval default is 1h).
+ */
+export declare const SAVE_FAILURE_COOLDOWN_MS: number;
+declare const RepairBudgetSchema: z.ZodObject<{
+    sessions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        /** Failed auto-repair attempts for this session+fingerprint. */
+        attempts: z.ZodNumber;
+        last_attempt_at: z.ZodString;
+        last_error: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        attempts: number;
+        last_attempt_at: string;
+        last_error?: string | undefined;
+    }, {
+        attempts: number;
+        last_attempt_at: string;
+        last_error?: string | undefined;
+    }>>>;
+    /**
+     * ISO timestamp until which auto-repair backs off because saving recently
+     * failed (infrastructure, not a session fault). Absent when not cooling down.
+     */
+    save_blocked_until: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    sessions: Record<string, {
+        attempts: number;
+        last_attempt_at: string;
+        last_error?: string | undefined;
+    }>;
+    save_blocked_until?: string | undefined;
+}, {
+    sessions?: Record<string, {
+        attempts: number;
+        last_attempt_at: string;
+        last_error?: string | undefined;
+    }> | undefined;
+    save_blocked_until?: string | undefined;
+}>;
+export type RepairBudget = z.infer<typeof RepairBudgetSchema>;
+export declare function loadRepairBudget(dataDir: string): RepairBudget;
+export declare function saveRepairBudget(dataDir: string, budget: RepairBudget): Promise<void>;
+/**
+ * Clear the global save-infra cooldown. Call this whenever ANY daemon save
+ * succeeds — a normal capture save proves the Voyage/save path is healthy
+ * again, which `maybeRunAutoRepair` can't observe on its own (it returns early
+ * while cooled down, so it never reaches a save to learn saving works). Without
+ * this, recovery would idle for up to the full cooldown window after an outage
+ * clears. Cheap and best-effort: a no-op (no write) when no cooldown is set.
+ */
+export declare function clearSaveFailureCooldown(dataDir: string): Promise<void>;
+export interface ParkedClassification {
+    /** Total distinct parked sessions still un-recovered (state of the world). */
+    parked: number;
+    /** Parked sessions Rift is still auto-attempting (budget not exhausted). */
+    repairing: number;
+    /** Parked sessions whose retry budget is exhausted — need a manual save. */
+    failed: number;
+}
+/**
+ * Split the parked-oversized sessions into "Rift is still saving these" vs.
+ * "Rift gave up and the user must save these manually", using the retry
+ * budget. Drives the honest friend-facing status copy. Pure read — no IO
+ * beyond loading the quarantine records, recovery state, and budget.
+ */
+export declare function classifyParkedOversizedSessions(deps: Pick<RecoverQuarantineDeps, "dataDir" | "quarantineDir">, maxAttempts?: number): ParkedClassification;
+/** Test-only: whether a background repair is currently running. */
+export declare function isAutoRepairInFlight(): boolean;
+export interface MaybeRunAutoRepairDeps {
+    /**
+     * Everything `runRecoverQuarantine` needs EXCEPT `skipSession` (this module
+     * supplies the budget gate). Provide the real Codex summarizer + a daemon
+     * `saveFn`; `dryRun` is never set here (auto-repair always saves).
+     */
+    recover: Omit<RecoverQuarantineDeps, "skipSession" | "dryRun">;
+    /** Bounded retry ceiling; defaults to MAX_AUTO_REPAIR_ATTEMPTS. */
+    maxAttempts?: number;
+    /** Optional progress logger (daemon wires this to stderr). */
+    log?: (message: string) => void;
+}
+/**
+ * Run a background recovery pass over parked oversized sessions, if any are
+ * still within their retry budget and no repair is already running.
+ *
+ * Returns the recovery report, or null when nothing was attempted (already
+ * running, or no repairable sessions). Updates the retry budget from the
+ * report: a recovered session's budget entry is cleared, a failed session's
+ * attempt count is incremented (and exhausts after `maxAttempts`).
+ */
+export declare function maybeRunAutoRepair(deps: MaybeRunAutoRepairDeps): Promise<RecoveryReport | null>;
+export {};
+//# sourceMappingURL=auto-repair.d.ts.map

package/dist/src/capture/auto-repair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-repair.d.ts","sourceRoot":"","sources":["../../../src/capture/auto-repair.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,QAAqB,CAAC;AAW3D,QAAA,MAAM,kBAAkB;;QANtB,gEAAgE;;;;;;;;;;;;;IAQhE;;;OAGG;;;;;;;;;;;;;;;;EAEH,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAO9D,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAW9D;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS7E;AAED,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,eAAe,CAAC,EAC9D,WAAW,GAAE,MAAiC,GAC7C,oBAAoB,CActB;AAUD,mEAAmE;AACnE,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,aAAa,GAAG,QAAQ,CAAC,CAAC;IAC/D,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CA8DhC"}

package/dist/src/capture/auto-repair.js

@@ -0,0 +1,269 @@
+/**
+ * Background self-repair for oversized Codex CLI sessions.
+ *
+ * Auto-capture parks sessions larger than `capture.codex_cli.max_session_bytes`
+ * in `data/quarantine/` rather than failing (see `auto-capture.ts`). Recovery
+ * — chunked summarize + one `/save` per session — already exists in
+ * `recover-quarantine.ts` and is reachable manually via
+ * `rift doctor repair capture-large-sessions`.
+ *
+ * This module makes that recovery happen ON ITS OWN so a friend never has to
+ * run the repair command. The daemon calls `maybeRunAutoRepair` after each
+ * capture run; it:
+ *
+ *   1. Reuses `runRecoverQuarantine` verbatim (no second recovery path), so
+ *      idempotency and regrown-session replacement are preserved.
+ *   2. Bounds work with a per-session retry budget persisted to
+ *      `data/quarantine-repair-budget.json`. A session that fails
+ *      `MAX_AUTO_REPAIR_ATTEMPTS` times is no longer auto-attempted — it is
+ *      surfaced to the user as a manual-fallback warning instead of being
+ *      retried forever. The budget is keyed by `<sessionId>:<fingerprint>`,
+ *      so a session that grows (new fingerprint) gets a fresh budget, exactly
+ *      as recovery treats it as new work.
+ *   3. Never runs two repairs at once (a module-level in-flight guard), so an
+ *      overlapping capture tick cannot launch a duplicate concurrent repair.
+ *
+ * The recovery itself is long (one Codex CLI call per chunk per session), so
+ * the daemon fires this without awaiting it — status/doctor reads stay fast.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { z } from "zod";
+import { atomicWrite } from "../storage/atomic.js";
+import { listParkedOversizedSessions, runRecoverQuarantine, } from "./recover-quarantine.js";
+/**
+ * How many times a single parked session (at one fingerprint) is auto-retried
+ * before Rift stops and asks the user to run the manual repair. Low on purpose:
+ * the daemon retries roughly once per capture tick (hourly), so three attempts
+ * spans a few hours before declaring "could not save automatically", and the
+ * manual `rift doctor repair` path is always available regardless of budget.
+ */
+export const MAX_AUTO_REPAIR_ATTEMPTS = 3;
+/**
+ * How long to stop attempting auto-repair after a pass fails ONLY because
+ * saving was down (Voyage revoked/outage — the save handler needs a valid
+ * Voyage key). This is an infrastructure backoff, distinct from the
+ * per-session retry budget: a save outage is not any one session's fault, so
+ * it must not exhaust a session (see `applyBudgetFromReport`), but it also
+ * shouldn't make the daemon re-summarize every parked session via Codex on
+ * every hourly tick for the whole outage. The cooldown bounds that cost to one
+ * pass per window; it is cleared early the moment a save succeeds. Sized to a
+ * few default capture ticks (interval default is 1h).
+ */
+export const SAVE_FAILURE_COOLDOWN_MS = 6 * 60 * 60 * 1000;
+const REPAIR_BUDGET_FILE = "quarantine-repair-budget.json";
+const RepairBudgetEntrySchema = z.object({
+    /** Failed auto-repair attempts for this session+fingerprint. */
+    attempts: z.number().int().nonnegative(),
+    last_attempt_at: z.string(),
+    last_error: z.string().optional(),
+});
+const RepairBudgetSchema = z.object({
+    sessions: z.record(z.string(), RepairBudgetEntrySchema).default({}),
+    /**
+     * ISO timestamp until which auto-repair backs off because saving recently
+     * failed (infrastructure, not a session fault). Absent when not cooling down.
+     */
+    save_blocked_until: z.string().optional(),
+});
+/** Budget key — fingerprint-scoped so a regrown session retries fresh. */
+function budgetKey(sessionId, fingerprint) {
+    return `${sessionId}:${fingerprint}`;
+}
+export function loadRepairBudget(dataDir) {
+    const file = path.join(dataDir, REPAIR_BUDGET_FILE);
+    if (!fs.existsSync(file))
+        return { sessions: {} };
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(file, "utf-8"));
+    }
+    catch {
+        return { sessions: {} };
+    }
+    const parsed = RepairBudgetSchema.safeParse(raw);
+    return parsed.success ? parsed.data : { sessions: {} };
+}
+export async function saveRepairBudget(dataDir, budget) {
+    const file = path.join(dataDir, REPAIR_BUDGET_FILE);
+    await atomicWrite(file, JSON.stringify(budget, null, 2));
+}
+/**
+ * Clear the global save-infra cooldown. Call this whenever ANY daemon save
+ * succeeds — a normal capture save proves the Voyage/save path is healthy
+ * again, which `maybeRunAutoRepair` can't observe on its own (it returns early
+ * while cooled down, so it never reaches a save to learn saving works). Without
+ * this, recovery would idle for up to the full cooldown window after an outage
+ * clears. Cheap and best-effort: a no-op (no write) when no cooldown is set.
+ */
+export async function clearSaveFailureCooldown(dataDir) {
+    const budget = loadRepairBudget(dataDir);
+    if (budget.save_blocked_until === undefined)
+        return;
+    delete budget.save_blocked_until;
+    try {
+        await saveRepairBudget(dataDir, budget);
+    }
+    catch {
+        // best-effort
+    }
+}
+/**
+ * Split the parked-oversized sessions into "Rift is still saving these" vs.
+ * "Rift gave up and the user must save these manually", using the retry
+ * budget. Drives the honest friend-facing status copy. Pure read — no IO
+ * beyond loading the quarantine records, recovery state, and budget.
+ */
+export function classifyParkedOversizedSessions(deps, maxAttempts = MAX_AUTO_REPAIR_ATTEMPTS) {
+    const parkedRecords = listParkedOversizedSessions(deps);
+    if (parkedRecords.length === 0) {
+        return { parked: 0, repairing: 0, failed: 0 };
+    }
+    const budget = loadRepairBudget(deps.dataDir);
+    let repairing = 0;
+    let failed = 0;
+    for (const record of parkedRecords) {
+        const entry = budget.sessions[budgetKey(record.session_id, record.fingerprint)];
+        if (entry && entry.attempts >= maxAttempts)
+            failed += 1;
+        else
+            repairing += 1;
+    }
+    return { parked: parkedRecords.length, repairing, failed };
+}
+/**
+ * Module-level in-flight guard. A daemon is a single process, so a boolean
+ * flag is enough to ensure a long-running repair started by one capture tick
+ * is never duplicated by the next tick (or by the startup run overlapping the
+ * first interval). Reset in `finally` so a thrown repair doesn't wedge it.
+ */
+let repairInFlight = false;
+/** Test-only: whether a background repair is currently running. */
+export function isAutoRepairInFlight() {
+    return repairInFlight;
+}
+/**
+ * Run a background recovery pass over parked oversized sessions, if any are
+ * still within their retry budget and no repair is already running.
+ *
+ * Returns the recovery report, or null when nothing was attempted (already
+ * running, or no repairable sessions). Updates the retry budget from the
+ * report: a recovered session's budget entry is cleared, a failed session's
+ * attempt count is incremented (and exhausts after `maxAttempts`).
+ */
+export async function maybeRunAutoRepair(deps) {
+    const log = deps.log ?? (() => { });
+    const maxAttempts = deps.maxAttempts ?? MAX_AUTO_REPAIR_ATTEMPTS;
+    const dataDir = deps.recover.dataDir;
+    if (repairInFlight) {
+        log("auto-repair: a repair is already running — skipping this tick");
+        return null;
+    }
+    const budget = loadRepairBudget(dataDir);
+    // Infrastructure backoff: a recent pass failed only because saving was down
+    // (Voyage). Don't re-summarize via Codex until the cooldown expires — a save
+    // outage that re-runs every tick is pure wasted cost. Cleared early when a
+    // save succeeds (see applyBudgetFromReport).
+    const nowMs = (deps.recover.now ? deps.recover.now() : new Date()).getTime();
+    const blockedUntilMs = budget.save_blocked_until
+        ? Date.parse(budget.save_blocked_until)
+        : NaN;
+    if (!Number.isNaN(blockedUntilMs) && nowMs < blockedUntilMs) {
+        log(`auto-repair: saving recently failed — backing off until ${budget.save_blocked_until}`);
+        return null;
+    }
+    // Only attempt sessions still within budget. Exhausted ones are surfaced as
+    // a manual-fallback warning, not retried. Pass `deps.recover` so a caller
+    // that overrides `quarantineDir` is honored here too (not just inside
+    // `runRecoverQuarantine`), keeping the precheck and the recovery in sync.
+    const repairable = listParkedOversizedSessions(deps.recover).filter((record) => (budget.sessions[budgetKey(record.session_id, record.fingerprint)]?.attempts ?? 0) <
+        maxAttempts);
+    if (repairable.length === 0)
+        return null;
+    const repairableKeys = new Set(repairable.map((record) => budgetKey(record.session_id, record.fingerprint)));
+    repairInFlight = true;
+    log(`auto-repair: recovering ${repairable.length} parked Codex session${repairable.length === 1 ? "" : "s"} in the background`);
+    try {
+        const report = await runRecoverQuarantine({
+            ...deps.recover,
+            skipSession: (record) => !repairableKeys.has(budgetKey(record.session_id, record.fingerprint)),
+        });
+        await applyBudgetFromReport(dataDir, report, deps.recover.now);
+        log(`auto-repair: ${report.recovered} recovered, ${report.failed + report.missing_source} could not be saved`);
+        return report;
+    }
+    finally {
+        repairInFlight = false;
+    }
+}
+/**
+ * Fold a recovery report into the retry budget: clear successes, increment
+ * failures. Re-reads the budget under the in-flight guard so it overlays the
+ * freshest on-disk value. Best-effort persistence — a budget write failure
+ * just means a session may get one extra attempt next tick, never a crash.
+ */
+async function applyBudgetFromReport(dataDir, report, now) {
+    const budget = loadRepairBudget(dataDir);
+    const nowDate = now ? now() : new Date();
+    const nowIso = nowDate.toISOString();
+    let changed = false;
+    for (const result of report.results) {
+        const key = budgetKey(result.session_id, result.fingerprint);
+        if (result.outcome === "recovered") {
+            if (budget.sessions[key]) {
+                delete budget.sessions[key];
+                changed = true;
+            }
+            continue;
+        }
+        // Only SESSION-LOCAL failures count against the budget: a chunk that won't
+        // summarize, or a session that parses to nothing. These are intrinsic to
+        // this session — retrying forever won't help, so cap them.
+        //
+        // A `save_failed` is deliberately NOT budgeted: the save path needs Voyage
+        // (the queue's save handler throws "save requires VOYAGE_API_KEY"), so a
+        // missing/revoked key or a Voyage outage makes EVERY session's save fail —
+        // an infrastructure problem, not the session's fault. Budgeting it would
+        // exhaust a session during the outage and then refuse to self-repair once
+        // the key is fixed, breaking the whole point of background recovery. Left
+        // un-budgeted, the session stays "repairing" and is retried on the next
+        // tick, so it self-heals the moment saving works again. (`missing_source`
+        // never reaches here — `listParkedOversizedSessions` already excludes a
+        // session whose jsonl is gone, so it's neither attempted nor classified.)
+        if (result.outcome === "failed" &&
+            (result.reason === "summarize_failed" || result.reason === "empty_session")) {
+            const prior = budget.sessions[key];
+            budget.sessions[key] = {
+                attempts: (prior?.attempts ?? 0) + 1,
+                last_attempt_at: nowIso,
+                ...(result.error ? { last_error: result.error } : {}),
+            };
+            changed = true;
+        }
+    }
+    // Global save-infra cooldown. A save success proves the path works → clear
+    // any cooldown immediately. Otherwise, if this pass failed only because
+    // saving was down, start (or refresh) the backoff so we don't re-summarize
+    // every tick during a Voyage outage.
+    const anyRecovered = report.results.some((r) => r.outcome === "recovered");
+    const anySaveFailed = report.results.some((r) => r.outcome === "failed" && r.reason === "save_failed");
+    if (anyRecovered) {
+        if (budget.save_blocked_until !== undefined) {
+            delete budget.save_blocked_until;
+            changed = true;
+        }
+    }
+    else if (anySaveFailed) {
+        budget.save_blocked_until = new Date(nowDate.getTime() + SAVE_FAILURE_COOLDOWN_MS).toISOString();
+        changed = true;
+    }
+    if (changed) {
+        try {
+            await saveRepairBudget(dataDir, budget);
+        }
+        catch {
+            // best-effort
+        }
+    }
+}
+//# sourceMappingURL=auto-repair.js.map

package/dist/src/capture/auto-repair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-repair.js","sourceRoot":"","sources":["../../../src/capture/auto-repair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,GAGrB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3D,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAE3D,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnE;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAIH,0EAA0E;AAC1E,SAAS,SAAS,CAAC,SAAiB,EAAE,WAAmB;IACvD,OAAO,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,MAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACpD,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAe;IAC5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;QAAE,OAAO;IACpD,OAAO,MAAM,CAAC,kBAAkB,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAA8D,EAC9D,cAAsB,wBAAwB;IAE9C,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAChF,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,IAAI,WAAW;YAAE,MAAM,IAAI,CAAC,CAAC;;YACnD,SAAS,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,mEAAmE;AACnE,MAAM,UAAU,oBAAoB;IAClC,OAAO,cAAc,CAAC;AACxB,CAAC;AAeD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,wBAAwB,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAErC,IAAI,cAAc,EAAE,CAAC;QACnB,GAAG,CAAC,+DAA+D,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEzC,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7E,MAAM,cAAc,GAAG,MAAM,CAAC,kBAAkB;QAC9C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACvC,CAAC,CAAC,GAAG,CAAC;IACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;QAC5D,GAAG,CACD,2DAA2D,MAAM,CAAC,kBAAkB,EAAE,CACvF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,sEAAsE;IACtE,0EAA0E;IAC1E,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CACjE,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;QAClF,WAAW,CACd,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAC7E,CAAC;IAEF,cAAc,GAAG,IAAI,CAAC;IACtB,GAAG,CACD,2BAA2B,UAAU,CAAC,MAAM,wBAC1C,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACjC,oBAAoB,CACrB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;YACxC,GAAG,IAAI,CAAC,OAAO;YACf,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CACtB,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;SACxE,CAAC,CAAC;QACH,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/D,GAAG,CACD,gBAAgB,MAAM,CAAC,SAAS,eAAe,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,qBAAqB,CAC1G,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB,CAClC,OAAe,EACf,MAAsB,EACtB,GAAiC;IAEjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC5B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,2DAA2D;QAC3D,EAAE;QACF,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,IACE,MAAM,CAAC,OAAO,KAAK,QAAQ;YAC3B,CAAC,MAAM,CAAC,MAAM,KAAK,kBAAkB,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,EAC3E,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG;gBACrB,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;gBACpC,eAAe,EAAE,MAAM;gBACvB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC;YACF,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,2EAA2E;IAC3E,qCAAqC;IACrC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,CAC5D,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,kBAAkB,CAAC;YACjC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;SAAM,IAAI,aAAa,EAAE,CAAC;QACzB,MAAM,CAAC,kBAAkB,GAAG,IAAI,IAAI,CAClC,OAAO,CAAC,OAAO,EAAE,GAAG,wBAAwB,CAC7C,CAAC,WAAW,EAAE,CAAC;QAChB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/capture/codex-cli-triage-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-cli-triage-provider.d.ts","sourceRoot":"","sources":["../../../src/capture/codex-cli-triage-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAK9B,OAAO,KAAK,EACV,2BAA2B,EAC3B,UAAU,EACX,MAAM,mBAAmB,CAAC;AAkD3B,qBAAa,sBAAuB,YAAW,2BAA2B;IAEtE,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE;QACxB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;KACf;IAGR,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM;IAIzC,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAKjD,cAAc,CAClB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC;YA+BxC,SAAS;CAmCxB"}
+{"version":3,"file":"codex-cli-triage-provider.d.ts","sourceRoot":"","sources":["../../../src/capture/codex-cli-triage-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAK9B,OAAO,KAAK,EACV,2BAA2B,EAC3B,UAAU,EACX,MAAM,mBAAmB,CAAC;AAiD3B,qBAAa,sBAAuB,YAAW,2BAA2B;IAEtE,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE;QACxB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;KACf;IAGR,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM;IAIzC,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAKjD,cAAc,CAClB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC;YA+BxC,SAAS;CAoCxB"}

package/dist/src/capture/codex-cli-triage-provider.js

@@ -1,6 +1,6 @@
 import { TRIAGE_VERSION, } from "./triage-provider.js";
 import { scoreHistoricalTriage, } from "./triage-lane.js";
-import { CODEX_CLI_OVERRIDE_MODEL, CODEX_CLI_OVERRIDE_PROVIDER, } from "../providers/operator-overrides.js";
+import { CODEX_CLI_OVERRIDE_PROVIDER } from "../providers/operator-overrides.js";
 import { runCodexCliJson } from "../providers/codex-cli-runner.js";
 const TRIAGE_PROMPT = `You are a triage classifier for a personal knowledge base. Given a conversation between a user and an AI assistant, decide whether it should be saved to long-term memory.
 
@@ -67,7 +67,7 @@ export class CodexCliTriageProvider {
                 summary: parsed.summary,
                 topics: parsed.topics,
                 rationale: parsed.rationale,
-                model: CODEX_CLI_OVERRIDE_MODEL,
+                model: parsed.model,
                 provider: CODEX_CLI_OVERRIDE_PROVIDER,
                 version: TRIAGE_VERSION,
                 score_breakdown: scoring.debug.score_breakdown,
@@ -78,7 +78,7 @@ export class CodexCliTriageProvider {
     }
     async runPrompt(input) {
         const prompt = `${TRIAGE_PROMPT}${input.content}`;
-        const { output } = await runCodexCliJson({
+        const { output, model } = await runCodexCliJson({
             prompt,
             schema: TRIAGE_OUTPUT_SCHEMA,
             ...(this.options.cwd ? { cwd: this.options.cwd } : {}),
@@ -103,6 +103,7 @@ export class CodexCliTriageProvider {
             summary: String(output.summary ?? ""),
             topics: Array.isArray(output.topics) ? output.topics.map(String) : [],
             rationale: String(output.rationale ?? ""),
+            model,
         };
     }
 }

package/dist/src/capture/codex-cli-triage-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex-cli-triage-provider.js","sourceRoot":"","sources":["../../../src/capture/codex-cli-triage-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,GAGf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,GAEtB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAEnE,MAAM,aAAa,GAAG;;;;;;;;;;CAUrB,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC;IACtE,UAAU,EAAE;QACV,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;SACpC;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;SACX;QACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;QACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC9B;CACO,CAAC;AAUX,MAAM,OAAO,sBAAsB;IAEd;IADnB,YACmB,UAGb,EAAE;QAHW,YAAO,GAAP,OAAO,CAGlB;IACL,CAAC;IAEJ,kBAAkB,CAAC,MAAmB;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,qBAAqB,CAAC;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,wBAAwB;gBAC/B,QAAQ,EAAE,2BAA2B;gBACrC,OAAO,EAAE,cAAc;gBACvB,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe;gBAC9C,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB;YACD,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE;SACjB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAkB;QACxC,MAAM,MAAM,GAAG,GAAG,aAAa,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAoB;YAC1D,MAAM;YACN,MAAM,EAAE,oBAAoB;YAC5B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;gBACxB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,QAAQ,KAAK,MAAM;YAC1B,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC7B,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAC5B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IACE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;YAC/B,MAAM,CAAC,UAAU,GAAG,CAAC;YACrB,MAAM,CAAC,UAAU,GAAG,CAAC,EACrB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YACrC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;YACrE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"codex-cli-triage-provider.js","sourceRoot":"","sources":["../../../src/capture/codex-cli-triage-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,GAGf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,GAEtB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAEnE,MAAM,aAAa,GAAG;;;;;;;;;;CAUrB,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC;IACtE,UAAU,EAAE;QACV,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;SACpC;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;SACX;QACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;QACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC9B;CACO,CAAC;AAYX,MAAM,OAAO,sBAAsB;IAEd;IADnB,YACmB,UAGb,EAAE;QAHW,YAAO,GAAP,OAAO,CAGlB;IACL,CAAC;IAEJ,kBAAkB,CAAC,MAAmB;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,qBAAqB,CAAC;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,2BAA2B;gBACrC,OAAO,EAAE,cAAc;gBACvB,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe;gBAC9C,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB;YACD,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE;SACjB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAkB;QACxC,MAAM,MAAM,GAAG,GAAG,aAAa,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAoB;YACjE,MAAM;YACN,MAAM,EAAE,oBAAoB;YAC5B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;gBACxB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,QAAQ,KAAK,MAAM;YAC1B,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC7B,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAC5B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IACE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;YAC/B,MAAM,CAAC,UAAU,GAAG,CAAC;YACrB,MAAM,CAAC,UAAU,GAAG,CAAC,EACrB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YACrC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;YACrE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;YACzC,KAAK;SACN,CAAC;IACJ,CAAC;CACF"}

package/dist/src/capture/recover-quarantine.d.ts

@@ -186,6 +186,16 @@ export interface RecoverQuarantineDeps {
     dryRun?: boolean;
     /** Optional clock for deterministic tests. */
     now?: () => Date;
+    /**
+     * Optional per-session gate. When it returns true for a grouped record,
+     * that session is skipped entirely — not attempted, not summarized, not
+     * added to the report. The background auto-repair caller uses this to
+     * exclude sessions whose bounded retry budget is exhausted, so a
+     * permanently-failing session cannot be retried forever. The manual
+     * `rift doctor repair capture-large-sessions` path passes no gate, so its
+     * behavior (including regrown-session replacement) is unchanged.
+     */
+    skipSession?: (record: QuarantineRecord) => boolean;
 }
 /**
  * Read all Codex-CLI quarantine records under the configured directory.
@@ -222,6 +232,7 @@ export declare function saveRecoveryState(deps: Pick<RecoverQuarantineDeps, "dat
  * surface a "run recovery" advisory that can never clear — recovery cannot
  * recover a file that's gone.
  */
+export declare function listParkedOversizedSessions(deps: Pick<RecoverQuarantineDeps, "dataDir" | "quarantineDir">): QuarantineRecord[];
 export declare function countParkedOversizedSessions(deps: Pick<RecoverQuarantineDeps, "dataDir" | "quarantineDir">): number;
 /**
  * Split parser-emitted Codex content into byte-budgeted chunks at turn

package/dist/src/capture/recover-quarantine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recover-quarantine.d.ts","sourceRoot":"","sources":["../../../src/capture/recover-quarantine.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,QAAa,CAAC;AAEvD,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,QAAY,CAAC;AAElD,eAAO,MAAM,gBAAgB,mCAAmC,CAAC;AAEjE,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS1B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,GAAG;IACtE,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;EAOxB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEvB,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,MAAM,MAAM,UAAU,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,eAAe,GACf,kBAAkB,GAClB,aAAa,CAAC;AAElB,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC5C,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,IAAI,EAAE;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,CAAC;IAC5B;;;;;;OAMG;IACH,MAAM,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAWD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,eAAe,CAAC,GAC7D,gBAAgB,EAAE,CA6BpB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAY9E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC,GAC3C,aAAa,CAef;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC,EAC5C,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,eAAe,CAAC,GAC7D,MAAM,CAaR;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAwCxE;AAqDD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,cAAc,CAAC,CAuMzB;AAqBD,qBAAa,uBAAwB,YAAW,eAAe;IAE3D,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;IAG/D,SAAS,CAAC,IAAI,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,YAAY,CAAC;CAsB1B"}
+{"version":3,"file":"recover-quarantine.d.ts","sourceRoot":"","sources":["../../../src/capture/recover-quarantine.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,QAAa,CAAC;AAEvD,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,QAAY,CAAC;AAElD,eAAO,MAAM,gBAAgB,mCAAmC,CAAC;AAEjE,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS1B,CAAC;AAiBH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,GAAG;IACtE,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;EAOxB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEvB,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,MAAM,MAAM,UAAU,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,eAAe,GACf,kBAAkB,GAClB,aAAa,CAAC;AAElB,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC5C,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,IAAI,EAAE;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,CAAC;IAC5B;;;;;;OAMG;IACH,MAAM,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC;CACrD;AAWD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,eAAe,CAAC,GAC7D,gBAAgB,EAAE,CAgCpB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAY9E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC,GAC3C,aAAa,CAef;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC,EAC5C,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,eAAe,CAAC,GAC7D,gBAAgB,EAAE,CAapB;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,eAAe,CAAC,GAC7D,MAAM,CAER;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAwCxE;AAqDD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,cAAc,CAAC,CA4MzB;AAqBD,qBAAa,uBAAwB,YAAW,eAAe;IAE3D,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;IAG/D,SAAS,CAAC,IAAI,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,YAAY,CAAC;CAsB1B"}

package/dist/src/capture/recover-quarantine.js

@@ -55,6 +55,20 @@ const QuarantineRecordSchema = z.object({
     reason: z.string(),
     quarantined_at: z.string(),
 });
+// The save/ingest *failure* path quarantines into the SAME `data/quarantine/`
+// dir under the SAME `{source}_{timestamp}_{hash}.json` naming, so its records
+// land in our glob. They are valid records of a different kind (a save/parse
+// failure, shaped `{ payload | conversation_id, error, quarantined_at }`), not
+// oversized-session recovery records — the discriminator is the `error` field,
+// which oversized-session records never carry. We skip them SILENTLY (logging
+// them as "malformed" every recovery pass spams the daemon log). Genuinely
+// broken JSON / unknown shapes still log. A durable fix is to namespace the two
+// quarantine kinds into separate dirs/prefixes so they can't collide — tracked
+// as a follow-up; this is the low-risk loader-side guard.
+const ForeignFailureQuarantineSchema = z.object({
+    error: z.string(),
+    quarantined_at: z.string(),
+});
 const RecoveredEntrySchema = z.object({
     recovered_at: z.string(),
     fingerprint: z.string(),
@@ -101,6 +115,10 @@ export function loadQuarantineRecords(deps) {
         }
         const result = QuarantineRecordSchema.safeParse(parsed);
         if (!result.success) {
+            // A save/ingest failure record sharing this dir+naming is valid, just
+            // not ours — skip it without the per-pass "malformed" noise.
+            if (ForeignFailureQuarantineSchema.safeParse(parsed).success)
+                continue;
             process.stderr.write(`recover-quarantine: skipping malformed record ${entry.name}\n`);
             continue;
         }
@@ -168,12 +186,12 @@ export async function saveRecoveryState(deps, state) {
  * surface a "run recovery" advisory that can never clear — recovery cannot
  * recover a file that's gone.
  */
-export function countParkedOversizedSessions(deps) {
+export function listParkedOversizedSessions(deps) {
     const grouped = groupBySession(loadQuarantineRecords(deps));
     if (grouped.length === 0)
-        return 0;
+        return [];
     const state = loadRecoveryState(deps);
-    let parked = 0;
+    const parked = [];
     for (const record of grouped) {
         const prior = state.recovered[recoveryKey(record.session_id)];
         const covered = prior !== undefined && prior.fingerprint === record.fingerprint;
@@ -181,10 +199,13 @@ export function countParkedOversizedSessions(deps) {
             continue;
         if (!fs.existsSync(record.session_path))
             continue;
-        parked += 1;
+        parked.push(record);
     }
     return parked;
 }
+export function countParkedOversizedSessions(deps) {
+    return listParkedOversizedSessions(deps).length;
+}
 /**
  * Split parser-emitted Codex content into byte-budgeted chunks at turn
  * boundaries. The parser format is `User: …\n\nAssistant: …\n\n…`, so
@@ -282,6 +303,11 @@ export async function runRecoverQuarantine(deps) {
     };
     for (const record of grouped) {
         const key = recoveryKey(record.session_id);
+        // Caller-supplied gate (background auto-repair excludes budget-exhausted
+        // sessions). Skipped sessions are entirely invisible to the report so a
+        // gated-out session never inflates skipped/failed counts.
+        if (deps.skipSession?.(record))
+            continue;
         // Skip only when the stored fingerprint matches the latest grouped
         // fingerprint. A different fingerprint means the session has grown
         // (or otherwise mutated) since the last recovery, so we re-recover