@herbertgao/pi-extensions 2026.9.20 → 2026.10.0

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/adapters/claude-code/contract.d.ts

@@ -1,5 +1,5 @@
-import type { AdapterRole, AgentAdapter, AgentCapabilities, AgentRuntime, Bytes, LandingLevel, PendingFile, ProvenanceSupport, SelectionLevel, SerializedSession, StoredSessionFacts, SwitchOutcome, ValidationDefect } from "../contract.js";
-export type { AdapterRole, AgentAdapter, AgentCapabilities, AgentRuntime, Bytes, LandingLevel, PendingFile, ProvenanceSupport, SelectionLevel, SerializedSession, StoredSessionFacts, SwitchOutcome, ValidationDefect, };
+import type { AdapterRole, AgentAdapter, AgentCapabilities, AgentRuntime, Bytes, LandingLevel, PendingFile, ProvenanceSupport, SelectionLevel, SerializationContext, SerializedSession, StoredSessionFacts, SwitchOutcome, ValidationDefect } from "../contract.js";
+export type { AdapterRole, AgentAdapter, AgentCapabilities, AgentRuntime, Bytes, LandingLevel, PendingFile, ProvenanceSupport, SelectionLevel, SerializationContext, SerializedSession, StoredSessionFacts, SwitchOutcome, ValidationDefect, };
 import type { AgentId, CanonicalSession, CanonicalTurn, HomePath, ProvenanceMarker, RepoSnapshot, SessionDescriptor, SessionId, SessionRef, SourceProvenance, TargetProfile, ToolCallRecord, ToolEffect, TurnKind, TurnRole } from "../../session/contract.js";
 export type { AgentId, CanonicalSession, CanonicalTurn, HomePath, ProvenanceMarker, RepoSnapshot, SessionDescriptor, SessionId, SessionRef, SourceProvenance, TargetProfile, ToolCallRecord, ToolEffect, TurnKind, TurnRole, };
 /** Builds the Claude Code adapter. The only export of this module (FR-57). */

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/adapters/claude-code/reader.d.ts

@@ -24,6 +24,9 @@ export interface SessionReadResult {
     startedAt: string | null;
     updatedAt: string | null;
     repoPath: string | null;
+    repoPaths: string[];
+    /** First non-sidechain absolute `cwd` of the whole file, not only the active chain (issue #5). */
+    startDirectory: string | null;
     branch: string | null;
     changedPaths: string[];
 }

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/adapters/claude-code/reader.js

@@ -6,6 +6,7 @@
  * what this file builds, not by what a caller does with it.
  */
 import { readFile, stat } from "node:fs/promises";
+import { isAbsolute } from "node:path";
 import { asArray, asObject, asString, ENTRY_TYPE_ASSISTANT, ENTRY_TYPE_SUMMARY, ENTRY_TYPE_USER, parseJsonl, resolveActiveEntryPath, toIsoUtc, } from "./entries.js";
 import { listSessionFiles, sessionIdOf } from "./layout.js";
 import { redactSensitiveStructure, redactSensitiveText } from "./redaction.js";
@@ -189,19 +190,8 @@ export function readSessionText(text) {
     const turns = [];
     const changedPaths = [];
     let skipped = parsed.entries.length - active.entries.length;
-    let repoPath = null;
+    const repoPaths = new Set();
     let branch = null;
-    if (unreadable === null) {
-        // Repository ownership is session metadata, not active-branch metadata. Claude can reset the
-        // active chain after changing cwd, but the session still belongs to the directory it started in.
-        for (const entry of parsed.entries) {
-            if (entry.isSidechain === true)
-                continue;
-            repoPath = asString(entry.cwd);
-            if (repoPath !== null)
-                break;
-        }
-    }
     const push = (turn) => {
         // FR-28, security: credentials pasted as message text must not cross to a different vendor.
         // Tool-call turns carry text: "" so the condition is a no-op there (no double-redaction).
@@ -209,13 +199,16 @@ export function readSessionText(text) {
         turns.push({ ...turn, text, index: turns.length });
     };
     for (const entry of active.entries) {
-        if (branch === null)
-            branch = asString(entry.gitBranch);
         // A sidechain is a separate sub-conversation, not a turn of this session.
         if (entry.isSidechain === true) {
             skipped++;
             continue;
         }
+        const cwd = asString(entry.cwd);
+        if (cwd !== null && isAbsolute(cwd))
+            repoPaths.add(cwd);
+        if (branch === null)
+            branch = asString(entry.gitBranch);
         const timestamp = toIsoUtc(entry.timestamp);
         if (entry.type === ENTRY_TYPE_USER && entry.isCompactSummary === true) {
             const summary = messageText(asObject(entry.message)?.content);
@@ -352,11 +345,28 @@ export function readSessionText(text) {
         title: firstUser === undefined ? "" : firstLine(firstUser.text, MAX_TITLE_CHARS),
         startedAt: stamps[0] ?? null,
         updatedAt: stamps[stamps.length - 1] ?? null,
-        repoPath,
+        repoPath: [...repoPaths][0] ?? null,
+        repoPaths: [...repoPaths],
+        startDirectory: startDirectoryOf(parsed.entries),
         branch,
         changedPaths,
     };
 }
+/**
+ * The directory the session started in, from the whole file rather than the active chain (issue #5).
+ * A session resumed in another directory keeps this one, and Claude's own project directory is
+ * derived from it, so the session stays listed beside the sessions that started there.
+ */
+function startDirectoryOf(entries) {
+    for (const entry of entries) {
+        if (entry.isSidechain === true)
+            continue;
+        const cwd = asString(entry.cwd);
+        if (cwd !== null && isAbsolute(cwd))
+            return cwd;
+    }
+    return null;
+}
 /** One row per session file of the home, newest first (FR-11, FR-14). */
 export async function listSessions(home) {
     const descriptors = [];
@@ -383,6 +393,8 @@ export async function listSessions(home) {
             updatedAt: broken ? modified : (read.updatedAt ?? modified),
             turnCount: broken ? 0 : read.turns.length,
             repoPath: read.repoPath,
+            repoPaths: read.repoPaths,
+            startDirectory: read.startDirectory,
             filePath: file,
         });
     }

package/node_modules/{@herbertgao/resume-from/dist/adapters/pi → resume-from/dist/adapters/claude-code}/redaction.js

@@ -40,8 +40,14 @@ const USER_CREDENTIAL_PATTERN = /(^|[\s;&|])(-u|--user)(=|\s+)("[^"\r\n]*"|'[^'\
 const URI_USERINFO_PATTERN = /\b([a-z][a-z0-9+.-]*:\/\/)([^\s/:@]+):([^\s/@]+)@/gi;
 // Unquoted value requires a structural delimiter or line/string end following it, OR a digit
 // somewhere in the token (C-RED-1: "token: expired" is plain English and stays, while
-// "password: hunter2 # prod" carries a credential that must not cross even mid-line).
-const JSON_LIKE_PATTERN = /(["']?)([A-Za-z_][A-Za-z0-9_-]*)\1(\s*:\s*)("[^"\r\n]*"|'[^'\r\n]*'|[^\s,;}]+(?=[,;}]|[\r\n]|$)|[^\s,;}]*\d[^\s,;}]*)/g;
+// "password: hunter2 # prod" carries a credential that must not cross even mid-line). The value is
+// taken whole, however long it is, so a credential can never be left half-redacted (FR-28).
+// A quoted key is matched whole and an unquoted one up to 64 characters: an unbounded identifier run
+// makes the engine backtrack over the whole run at every start position, which is quadratic on a
+// long unbroken line (measured: 50 KB of one word took 11.8 s and 100 KB never finished). A longer
+// unquoted run still matches through its last 64 characters, and `isSensitiveKey` decides by the
+// name's tail as well as by its whole text, so nothing the unbounded name found is hidden.
+const JSON_LIKE_PATTERN = /(?:(?<quote>["'])(?<quoted>[A-Za-z_][A-Za-z0-9_-]*)\k<quote>|(?<bare>[A-Za-z_][A-Za-z0-9_-]{0,63}))(\s*:\s*)("[^"\r\n]*"|'[^'\r\n]*'|[^\s,;}]+(?=[,;}]|[\r\n]|$)|[^\s,;}]*\d[^\s,;}]*)/g;
 function normalizedKey(key) {
     return key.toLowerCase().replaceAll(/[^a-z0-9]/g, "");
 }
@@ -118,7 +124,14 @@ export function redactSensitiveText(text) {
         .replace(USER_CREDENTIAL_PATTERN, `$1$2$3${REDACTED_VALUE}`)
         .replace(URI_USERINFO_PATTERN, `$1$2:${REDACTED_VALUE}@`)
         .replace(ASSIGNMENT_PATTERN, (match, key, separator) => isSensitiveKey(key) ? `${key}${separator}${REDACTED_VALUE}` : match)
-        .replace(JSON_LIKE_PATTERN, (match, quote, key, separator) => isSensitiveKey(key) ? `${quote}${key}${quote}${separator}${REDACTED_VALUE}` : match)
+        .replace(JSON_LIKE_PATTERN, (match, quote, quoted, bare, separator) => {
+        const key = quoted ?? bare;
+        if (key === undefined || !isSensitiveKey(key))
+            return match;
+        // Only the value is replaced; the quoting and the separator stay as they were recorded.
+        const name = quote === undefined ? key : `${quote}${key}${quote}`;
+        return `${name}${separator}${REDACTED_VALUE}`;
+    })
         .replace(CREDENTIAL_PATTERN, REDACTED_VALUE);
 }
 /** Redact a source-recorded argument string, preserving valid JSON when it is JSON. */

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/adapters/claude-code/writer.d.ts

@@ -9,15 +9,13 @@
  * Nothing here touches the filesystem except to read. `serialize` returns bytes;
  * `src/import/landing/` creates the files (FR-49, FR-53).
  */
-import type { CanonicalSession, ProvenanceMarker, SerializedSession, TargetProfile, ValidationDefect } from "./contract.js";
+import type { CanonicalSession, ProvenanceMarker, SerializationContext, SerializedSession, TargetProfile, ValidationDefect } from "./contract.js";
 /** The version C-9 was measured against. Written so the target reads a version it knows. */
 export declare const CLAUDE_CODE_FORMAT_VERSION = "2.1.220";
 /** The model field of an imported turn. No model produced it, and none is claimed. */
 export declare const IMPORTED_MODEL = "imported";
 export declare const USER_TYPE = "external";
 /** Bytes only: the file is created by `src/import/landing/`, never here (FR-49, FR-53). */
-export declare function serialize(session: CanonicalSession, target: TargetProfile, marker: ProvenanceMarker, context: {
-    cwd: string;
-}): SerializedSession;
+export declare function serialize(session: CanonicalSession, target: TargetProfile, marker: ProvenanceMarker, context: SerializationContext): SerializedSession;
 /** Every structural defect, not the first (FR-50). Empty means the bytes may be placed. */
 export declare function validate(serialized: SerializedSession): ValidationDefect[];

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/adapters/claude-code/writer.js

@@ -159,7 +159,7 @@ function buildEntries(session, marker, ctx) {
 }
 /** Bytes only: the file is created by `src/import/landing/`, never here (FR-49, FR-53). */
 export function serialize(session, target, marker, context) {
-    const repoPath = path.resolve(context.cwd);
+    const repoPath = context.cwd;
     refuseUnrecognisedProjectRecord(target.home, repoPath);
     const sessionId = mintSessionId(target.home, repoPath);
     const entries = buildEntries(session, marker, {

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/adapters/codex/contract.d.ts

@@ -1,11 +1,9 @@
-import type { AdapterRole, AgentAdapter, AgentCapabilities, AgentRuntime, Bytes, LandingLevel, PendingFile, ProvenanceSupport, SelectionLevel, SerializedSession, StoredSessionFacts, SwitchOutcome, ValidationDefect } from "../contract.js";
-export type { AdapterRole, AgentAdapter, AgentCapabilities, AgentRuntime, Bytes, LandingLevel, PendingFile, ProvenanceSupport, SelectionLevel, SerializedSession, StoredSessionFacts, SwitchOutcome, ValidationDefect, };
+import type { AdapterRole, AgentAdapter, AgentCapabilities, AgentRuntime, Bytes, LandingLevel, PendingFile, ProvenanceSupport, SelectionLevel, SerializationContext, SerializedSession, StoredSessionFacts, SwitchOutcome, ValidationDefect } from "../contract.js";
+export type { AdapterRole, AgentAdapter, AgentCapabilities, AgentRuntime, Bytes, LandingLevel, PendingFile, ProvenanceSupport, SelectionLevel, SerializationContext, SerializedSession, StoredSessionFacts, SwitchOutcome, ValidationDefect, };
 import type { AgentId, CanonicalSession, CanonicalTurn, HomePath, ProvenanceMarker, RepoSnapshot, SessionDescriptor, SessionId, SessionRef, SourceProvenance, TargetProfile, ToolCallRecord, ToolEffect, TurnKind, TurnRole } from "../../session/contract.js";
 export type { AgentId, CanonicalSession, CanonicalTurn, HomePath, ProvenanceMarker, RepoSnapshot, SessionDescriptor, SessionId, SessionRef, SourceProvenance, TargetProfile, ToolCallRecord, ToolEffect, TurnKind, TurnRole, };
 /** The injectable seam that keeps serialize pure (no ambient process state). */
 export interface CodexSerializeDeps {
-    /** Where the user is when the import runs. `codex resume` filters the picker by cwd. */
-    cwd(): string;
     /** Produces the new thread's UUID. Injected so two calls with the same deps are byte-equal. */
     newSessionId(): string;
 }

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/adapters/codex/index.js

@@ -10,7 +10,6 @@ import { serializeCodex, validateCodex } from "./write.js";
 /** Codex's own default for the models it ships with. Configuration overrides it (FR-18). */
 const CODEX_WINDOW_TOKENS = 258_400;
 const DEFAULT_DEPS = {
-    cwd: () => process.cwd(),
     newSessionId: () => randomUUID(),
 };
 function codexCapabilities() {
@@ -35,7 +34,7 @@ export const codexAdapterFactory = {
             capabilities: codexCapabilities,
             listSessions: listCodexSessions,
             loadSession: loadCodexSession,
-            serialize: (session, target, marker) => serializeCodex(session, target, marker, deps),
+            serialize: (session, target, marker, context) => serializeCodex(session, target, marker, context, deps),
             validate: validateCodex,
             readBack: readBackCodex,
             switchTo: switchToCodex,

package/node_modules/{@herbertgao/resume-from → resume-from}/dist/adapters/codex/read.d.ts

@@ -24,5 +24,21 @@ export declare class CodexRolloutUnreadableError extends Error {
 export declare function scanRollout(filePath: string): Promise<CodexRollout>;
 /** Strict: FR-51's "unreadable" answer. */
 export declare function readRollout(filePath: string): Promise<CodexRollout>;
+/** What the selection list needs from one rollout file (FR-11, FR-14). */
+export interface RolloutSummary {
+    filePath: string;
+    meta: CodexSessionMeta | null;
+    title: string;
+    startedAt: string | null;
+    updatedAt: string | null;
+    turnCount: number;
+    truncated: boolean;
+}
+/**
+ * Sums up one rollout for the selection list in a single streamed pass (C-13): no turn is built,
+ * no argument is redacted, and neither the file nor its entries are held whole. Every field comes
+ * from the same classifier the loader uses, so a row cannot disagree with the session it opens.
+ */
+export declare function summarizeRollout(filePath: string): Promise<RolloutSummary>;
 export declare function listCodexSessions(home: string): Promise<SessionDescriptor[]>;
 export declare function loadCodexSession(descriptor: SessionDescriptor): Promise<CanonicalSession>;