@hyperdrive.bot/paseo-server 0.2.8 → 0.3.1

package/dist/server/server/search/session-search-service.js

@@ -0,0 +1,171 @@
+// MARRA CUSTOMIZATION — the daemon-side session search service.
+//
+// Owns the FTS5 index and the background indexing loop, and exposes a single
+// `search()` the three transports share (HTTP `GET /sessions/search`, the WS
+// `search_sessions_request` handler, and `watch.sessionSearch`).
+//
+// WHY THIS EXISTS — the recall CLI it replaces failed structurally:
+//   • a subprocess spawn per keystroke,
+//   • a full Tantivy re-index inside every spawn,
+//   • a global writer lock serialising those spawns against each other.
+// On a loaded host (39-agent fleet) every cmd+K keystroke hit the subprocess
+// timeout, so search was disabled by default in 73ae98f3.
+//
+// Here indexing and querying are decoupled: writes happen only on a timer in
+// the background, queries are pure reads against a warm SQLite file. Measured
+// on the real 4.6 GB / 8,117-file corpus:
+//   • steady-state pass: 8,117 files stat'd, ~0 bytes read, 0.9 s
+//   • query p95: 0.5 ms – 32.7 ms (vs recall's 30 s timeout)
+//
+// The indexing loop is intentionally NOT a worker_thread. Measured cost of a
+// steady-state pass is ~0.9 s of mostly-async stat() calls; the parse work
+// that would justify a thread only happens on first build or after a large
+// append. Spawning a thread would add ~30 MB RSS and a serialisation boundary
+// around the SQLite handle to save single-digit milliseconds of event-loop
+// time per minute. If a future corpus makes passes expensive, `runIndexPass`
+// is already a pure function of (store, adapters) and can move to a worker
+// with no change to callers.
+import { SessionIndexStore } from "./index-store.js";
+import { defaultAdapters, defaultIndexPath, runIndexPass } from "./indexer.js";
+import { createCwdResolver } from "./resolve-cwd.js";
+/**
+ * Under a test runner, never auto-start indexing.
+ *
+ * Every current call site injects a fake, so the real service is not
+ * constructed in the suite today. But a future test that calls
+ * `runSessionsSearch` without a dep would otherwise construct the singleton
+ * and immediately begin walking the DEVELOPER'S real ~/.claude/projects —
+ * gigabytes of disk I/O in the middle of a unit test, competing with the
+ * timing-sensitive pty tests that share the pool. Cheap guard, removes a whole
+ * class of "why is the suite flaky on my machine" before it can start.
+ */
+function isTestRunner() {
+    return process.env.VITEST === "true" || process.env.NODE_ENV === "test";
+}
+const DEFAULT_INTERVAL_MS = 60000;
+export class SessionSearchService {
+    constructor(options = {}) {
+        this.timer = null;
+        this.abort = new AbortController();
+        this.passInFlight = null;
+        /** False until the first pass finishes, so callers can be honest about warm-up. */
+        this.warm = false;
+        this.store = new SessionIndexStore(options.indexPath ?? defaultIndexPath());
+        this.adapters = options.adapters ?? defaultAdapters();
+        this.logger = options.logger;
+        this.intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;
+        if (!options.manual && !isTestRunner())
+            this.start();
+    }
+    start() {
+        // Kick a pass immediately so a fresh daemon warms without waiting a full
+        // interval, then settle into the timer.
+        void this.runPass();
+        this.timer = setInterval(() => void this.runPass(), this.intervalMs);
+        // Never hold the process open for an index refresh.
+        this.timer.unref?.();
+    }
+    /** One indexing pass. Overlapping calls join the in-flight pass. */
+    async runPass() {
+        if (this.passInFlight) {
+            await this.passInFlight;
+            return;
+        }
+        const pending = runIndexPass(this.store, {
+            adapters: this.adapters,
+            ...(this.logger ? { logger: this.logger } : {}),
+            signal: this.abort.signal,
+        })
+            .then(() => {
+            this.warm = true;
+            return undefined;
+        })
+            .catch((err) => {
+            // A failed pass must never take the daemon down or break querying —
+            // the previous index stays queryable and the next pass retries.
+            this.logger?.warn({ err }, "session-search: index pass failed");
+        })
+            .finally(() => {
+            this.passInFlight = null;
+        });
+        this.passInFlight = pending;
+        await pending;
+    }
+    /** True once at least one indexing pass has completed. */
+    isWarm() {
+        return this.warm;
+    }
+    stats() {
+        return this.store.stats();
+    }
+    /**
+     * Query the index and return hits in the transport's existing shape.
+     *
+     * Every hit's cwd is resolved to a directory that exists on THIS machine
+     * before it is returned, because the palette resumes a session into its cwd
+     * — a hit pointing at another machine's path is a result you cannot click.
+     */
+    async search(params) {
+        const query = (params.query ?? "").trim();
+        const sources = params.sources
+            ? params.sources
+                .split(",")
+                .map((s) => s.trim())
+                .filter((s) => s.length > 0)
+            : undefined;
+        const hits = this.store.search({
+            query,
+            ...(params.limit !== undefined ? { limit: params.limit } : {}),
+            ...(sources ? { sources } : {}),
+        });
+        const resolveCwd = createCwdResolver();
+        const results = [];
+        for (const hit of hits) {
+            const resolved = await resolveCwd(hit.cwd);
+            results.push({
+                sid: hit.sid,
+                source: hit.source,
+                cwd: resolved.cwd,
+                timestamp: hit.timestamp,
+                snippet: hit.snippet,
+                resumeCommand: buildResumeCommand(hit.source, hit.sid),
+            });
+        }
+        return { query, results };
+    }
+    close() {
+        this.abort.abort();
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+        this.store.close();
+    }
+}
+function buildResumeCommand(source, sid) {
+    switch (source.toLowerCase()) {
+        case "claude":
+            return `claude --resume ${sid}`;
+        case "codex":
+            return `codex resume ${sid}`;
+        default:
+            return "";
+    }
+}
+// ---------------------------------------------------------------------------
+// Process-wide singleton
+// ---------------------------------------------------------------------------
+//
+// One index per daemon. The three transports resolve the same instance, so
+// there is exactly one writer and no lock contention — the failure that made
+// the recall implementation return "LockBusy" and look broken.
+let singleton = null;
+export function getSessionSearchService(options = {}) {
+    singleton ?? (singleton = new SessionSearchService(options));
+    return singleton;
+}
+/** Test seam: drop the singleton so a fixture instance can take its place. */
+export function resetSessionSearchServiceForTests() {
+    singleton?.close();
+    singleton = null;
+}
+//# sourceMappingURL=session-search-service.js.map

package/dist/server/server/session.js

@@ -3397,15 +3397,18 @@ export class Session {
         }
     }
     // COMPAT(sessionsListRpc): WS equivalent of HTTP `GET /sessions/search`.
-    // Spawns the recall CLI via the shared `runSessionsSearch` core (default
-    // `recall` on PATH, 8s timeout — same as the HTTP route). Errors are
-    // returned in the payload; the client turns a payload error into a thrown
-    // rejection so its useQuery falls back to an empty list.
+    // Queries the SQLite FTS5 session index via the shared `runSessionsSearch`
+    // core (same core as the HTTP route). This is the path the command palette
+    // actually uses — the relay forbids HTTP search — so it is the one that has
+    // to stay fast and never throw. Errors are returned in the payload; the
+    // client turns a payload error into a thrown rejection so its useQuery falls
+    // back to an empty list.
     async handleSearchSessionsRequest(msg) {
         const { requestId, query, limit, sources } = msg;
-        // COMPAT(recallSearch): recall disabled → never spawn the CLI (defends against a
-        // stale client that saw the capability before this daemon disabled it). Return an
-        // empty result set so the palette shows its default listAllSessions browse.
+        // Kill switch (PASEO_DISABLE_SESSION_SEARCH=1) → never touch the index.
+        // Also defends against a stale client that saw the capability before this
+        // daemon disabled it. Returns an empty result set so the palette falls back
+        // to its default listAllSessions browse.
         if (!recallSearchEnabled()) {
             this.emit({
                 type: "search_sessions_response",

package/dist/server/server/workspace/recall-search-feature.js

@@ -1,22 +1,31 @@
-// COMPAT(recallSearch): added in v0.1.X, remove gate after 2026-12-03.
+// Single source of truth for the session-search capability.
 //
-// Single source of truth for the `recallSearch` capability. The `server_info`
-// handshake flag (`buildServerInfoStatusPayload()` in websocket-server.ts) AND the
-// two daemon-side entry points that spawn the `recall` CLI (the
-// `search_sessions_request` and `watch.sessionSearch` handlers in session.ts) all
-// read this, so the advertised capability and the code that actually runs `recall`
-// can never drift.
+// The `server_info` handshake flag (`buildServerInfoStatusPayload()` in
+// websocket-server.ts) AND the daemon-side entry points that serve search (the
+// `search_sessions_request` and `watch.sessionSearch` handlers in session.ts)
+// all read this, so the advertised capability and the code that actually
+// answers a query can never drift.
 //
-// DISABLED BY DEFAULT (2026-07-28): `recall` re-indexes its Tantivy store on every
-// invocation and, under a loaded host, blows past its subprocess timeout — failing
-// cmd+K search and piling CPU load onto an already-busy daemon. With recall off, the
-// command palette falls back to Paseo's default title/metadata session browse
-// (`listAllSessions`) and the watch session-search serves recent sessions.
+// HISTORY — this was DISABLED BY DEFAULT on 2026-07-28 (73ae98f3) because the
+// engine was the `recall` CLI: it re-indexed its Tantivy store on every
+// invocation and, under a loaded host, blew past its subprocess timeout,
+// failing cmd+K and piling CPU onto an already-busy daemon.
 //
-// Re-enable at runtime with NO rebuild by exporting `PASEO_ENABLE_RECALL_SEARCH=1`
-// in the daemon's environment. Read at call time (not a module-load constant) so the
-// env var is honored without a process restart and can be toggled per-test.
+// RE-ENABLED BY DEFAULT on 2026-07-29: the engine is now an in-process SQLite
+// FTS5 index maintained incrementally in the background (`../search/`). The
+// three causes of the original failure are structurally gone — no subprocess,
+// no re-index on read, no writer lock on the query path. Measured on the real
+// 8,117-file / 4.6 GB corpus: query p95 0.5–32.7 ms against a 150 ms debounce,
+// and a steady-state index pass reads ~0 bytes in 0.9 s.
+//
+// Escape hatch, read at call time so it needs no rebuild or restart: export
+// `PASEO_DISABLE_SESSION_SEARCH=1` to turn search off, and the palette falls
+// back to the title/metadata browse (`listAllSessions`).
+//
+// `PASEO_ENABLE_RECALL_SEARCH` is intentionally no longer consulted: it is
+// redundant now that search is on by default, and keeping it would mean a
+// host that never set it stays broken for no reason.
 export function recallSearchEnabled() {
-    return process.env.PASEO_ENABLE_RECALL_SEARCH === "1";
+    return process.env.PASEO_DISABLE_SESSION_SEARCH !== "1";
 }
 //# sourceMappingURL=recall-search-feature.js.map

package/dist/server/server/workspace/sessions-search-route.d.ts

@@ -1,27 +1,21 @@
 import type express from "express";
 import type pino from "pino";
-export interface SearchResultEntry {
-    sid: string;
-    source: string;
-    cwd: string;
-    timestamp: string;
-    snippet: string;
-    resumeCommand: string;
-}
-export interface SearchResultsResponse {
+import { type SearchResultEntry, type SearchResultsResponse } from "../search/session-search-service.js";
+export type { SearchResultEntry, SearchResultsResponse };
+export interface RunSessionsSearchParams {
     query: string;
-    results: SearchResultEntry[];
+    /** Max results. Clamped to [1, 100]; defaults to 20. */
+    limit?: number;
+    /** Comma-separated source list (e.g. "paseo,claude"). Defaults to all. */
+    sources?: string;
+}
+export interface RunSessionsSearchDeps {
+    /** Override the search implementation (tests inject a fixture). */
+    runSearch?: (params: RunSessionsSearchParams) => Promise<SearchResultsResponse>;
 }
 export interface SessionsSearchRouteOptions {
-    /** Override the recall binary path. Defaults to `recall` on PATH. Tests inject a fixture. */
-    recallBinaryPath?: string;
-    /** Override the spawn factory for tests. Returns stdout JSON synchronously. */
-    spawnRecall?: (args: string[]) => Promise<string>;
-    /** Subprocess timeout in ms. Defaults to 30s (recall re-indexes on every
-     * invocation; a large corpus can push cold reads past 8s). */
-    timeoutMs?: number;
-    /** Override the openable check (tests inject a fixture). Defaults to on-disk existence. */
-    isOpenable?: (entry: SearchResultEntry) => Promise<boolean>;
+    /** Override the search implementation (tests inject a fixture). */
+    runSearch?: (params: RunSessionsSearchParams) => Promise<SearchResultsResponse>;
 }
 export declare class RecallNotInstalledError extends Error {
     constructor();
@@ -30,38 +24,16 @@ export declare class RecallTimedOutError extends Error {
     readonly waitedMs: number;
     constructor(waitedMs: number);
 }
-/** Thrown when the recall subprocess emits stdout that isn't valid JSON. */
 export declare class RecallParseError extends Error {
     constructor();
 }
-export interface RunSessionsSearchParams {
-    query: string;
-    /** Max results. Clamped to [1, 100]; defaults to 20. */
-    limit?: number;
-    /** Comma-separated source list (e.g. "paseo,claude"). Defaults to "paseo,claude". */
-    sources?: string;
-}
-export interface RunSessionsSearchDeps {
-    /** Override the spawn factory (tests inject a fixture). */
-    runRecall?: (args: string[]) => Promise<string>;
-    recallBinaryPath?: string;
-    timeoutMs?: number;
-    /**
-     * Override the openable check (tests inject a fixture). Defaults to verifying
-     * the hit's transcript/agent record still exists on disk — recall's index
-     * goes stale and returns deleted sessions.
-     */
-    isOpenable?: (entry: SearchResultEntry) => Promise<boolean>;
-}
 /**
- * Core recall FTS — spawns the `recall` CLI and returns parsed results. Shared
- * by the HTTP `GET /sessions/search` route AND the `search_sessions_request`
- * WS handler (so the command palette works over the relay).
+ * Core session FTS, shared by every transport.
  *
- * Sub-`MIN_QUERY_LEN` queries return `{ results: [] }` WITHOUT spawning.
- * Throws `RecallNotInstalledError` / `RecallTimedOutError` / `RecallParseError`
- * (or a generic Error) on failure — callers map these to transport-specific
- * error codes.
+ * Sub-`MIN_QUERY_LEN` queries return `{ results: [] }` without touching the
+ * index. Hits reference a file that existed when it was indexed, and every
+ * returned `cwd` is resolved to a directory that exists on THIS machine — a
+ * hit you cannot resume is not a useful hit.
  */
 export declare function runSessionsSearch(params: RunSessionsSearchParams, logger: pino.Logger, deps?: RunSessionsSearchDeps): Promise<SearchResultsResponse>;
 export declare function registerSessionsSearchRoute(app: express.Express, logger: pino.Logger, options?: SessionsSearchRouteOptions): void;

package/dist/server/server/workspace/sessions-search-route.js

@@ -1,11 +1,10 @@
-import { spawn } from "node:child_process";
-import { isSessionOpenable } from "./session-openable.js";
-import { recallSearchEnabled } from "./recall-search-feature.js";
-const DEFAULT_TIMEOUT_MS = 30000;
-const MAX_LIMIT = 100;
-const DEFAULT_LIMIT = 20;
+import { getSessionSearchService, } from "../search/session-search-service.js";
 const MIN_QUERY_LEN = 2;
-const DEFAULT_SOURCES = "paseo,claude";
+// COMPAT: these error types were thrown by the recall subprocess engine and
+// are still imported by session.ts. The FTS engine cannot produce them —
+// there is no subprocess to be missing, to time out, or to emit unparseable
+// stdout — but they stay exported so existing catch-sites keep compiling.
+// Remove once session.ts drops the imports.
 export class RecallNotInstalledError extends Error {
     constructor() {
         super("recall binary not found on PATH");
@@ -19,192 +18,57 @@ export class RecallTimedOutError extends Error {
         this.name = "RecallTimedOutError";
     }
 }
-/** Thrown when the recall subprocess emits stdout that isn't valid JSON. */
 export class RecallParseError extends Error {
     constructor() {
         super("recall_parse_failed");
         this.name = "RecallParseError";
     }
 }
-function spawnRecallDefault(binaryPath, args, timeoutMs) {
-    return new Promise((resolve, reject) => {
-        const child = spawn(binaryPath, args, { stdio: ["ignore", "pipe", "pipe"] });
-        let stdout = "";
-        let stderr = "";
-        const timer = setTimeout(() => {
-            child.kill("SIGTERM");
-            reject(new RecallTimedOutError(timeoutMs));
-        }, timeoutMs);
-        child.stdout.on("data", (chunk) => {
-            stdout += chunk.toString("utf-8");
-        });
-        child.stderr.on("data", (chunk) => {
-            stderr += chunk.toString("utf-8");
-        });
-        child.on("error", (err) => {
-            clearTimeout(timer);
-            if (err.code === "ENOENT") {
-                reject(new RecallNotInstalledError());
-            }
-            else {
-                reject(err);
-            }
-        });
-        child.on("close", (code) => {
-            clearTimeout(timer);
-            if (code === 0) {
-                resolve(stdout);
-            }
-            else {
-                reject(new Error(`recall exited with code ${code}: ${stderr.trim()}`));
-            }
-        });
-    });
-}
-// recall (re)builds its Tantivy index on each invocation and takes a writer
-// lock. The command palette debounce fires a search per keystroke, so without
-// serialization concurrent recall processes collide on the lock:
-//   "Failed to acquire Lockfile: LockBusy — Failed to acquire index lock"
-// → the search returns nothing and the palette looks broken. Serialize all
-// recall spawns within this daemon process to one-at-a-time, and retry once on
-// a lock-busy error (covers a stale lock from a killed process too).
-const serializeRecall = (() => {
-    let chain = Promise.resolve();
-    return (fn) => {
-        const run = chain.then(fn, fn);
-        chain = run.then(() => undefined, () => undefined);
-        return run;
-    };
-})();
-function isRecallLockBusy(error) {
-    const message = error instanceof Error ? error.message : String(error);
-    return (message.includes("LockBusy") ||
-        message.includes("acquire index lock") ||
-        message.includes("Failed to acquire"));
-}
-function spawnRecallSerialized(binaryPath, args, timeoutMs) {
-    return serializeRecall(async () => {
-        try {
-            return await spawnRecallDefault(binaryPath, args, timeoutMs);
-        }
-        catch (error) {
-            if (isRecallLockBusy(error)) {
-                await new Promise((resolve) => setTimeout(resolve, 200));
-                return await spawnRecallDefault(binaryPath, args, timeoutMs);
-            }
-            throw error;
-        }
-    });
-}
-function buildSnippet(messages) {
-    const first = messages[0];
-    if (!first)
-        return "";
-    const collapsed = first.content.replace(/\s+/g, " ").trim();
-    return collapsed.length > 220 ? `${collapsed.slice(0, 220)}…` : collapsed;
-}
-function toEntry(raw) {
-    return {
-        sid: raw.session_id,
-        source: raw.source,
-        cwd: raw.cwd,
-        timestamp: raw.timestamp,
-        snippet: buildSnippet(raw.relevant_messages ?? []),
-        resumeCommand: raw.resume_command,
-    };
-}
 /**
- * Core recall FTS — spawns the `recall` CLI and returns parsed results. Shared
- * by the HTTP `GET /sessions/search` route AND the `search_sessions_request`
- * WS handler (so the command palette works over the relay).
+ * Core session FTS, shared by every transport.
  *
- * Sub-`MIN_QUERY_LEN` queries return `{ results: [] }` WITHOUT spawning.
- * Throws `RecallNotInstalledError` / `RecallTimedOutError` / `RecallParseError`
- * (or a generic Error) on failure — callers map these to transport-specific
- * error codes.
+ * Sub-`MIN_QUERY_LEN` queries return `{ results: [] }` without touching the
+ * index. Hits reference a file that existed when it was indexed, and every
+ * returned `cwd` is resolved to a directory that exists on THIS machine — a
+ * hit you cannot resume is not a useful hit.
  */
 export async function runSessionsSearch(params, logger, deps = {}) {
     const query = (params.query ?? "").trim();
     if (query.length < MIN_QUERY_LEN) {
         return { query, results: [] };
     }
-    const rawLimit = params.limit;
-    const limit = typeof rawLimit === "number" && Number.isFinite(rawLimit) && rawLimit > 0
-        ? Math.min(rawLimit, MAX_LIMIT)
-        : DEFAULT_LIMIT;
-    const sources = params.sources && params.sources.length > 0 ? params.sources : DEFAULT_SOURCES;
-    const binaryPath = deps.recallBinaryPath ?? "recall";
-    const timeoutMs = deps.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const runRecall = deps.runRecall ?? ((args) => spawnRecallSerialized(binaryPath, args, timeoutMs));
-    const args = ["search", query, "--source", sources, "--limit", String(limit)];
-    const stdout = await runRecall(args);
-    let parsed;
-    try {
-        parsed = JSON.parse(stdout);
-    }
-    catch (err) {
-        logger.error({ err, stdout: stdout.slice(0, 200) }, "failed to parse recall stdout");
-        throw new RecallParseError();
-    }
-    const mapped = Array.isArray(parsed.results)
-        ? parsed.results.map(toEntry)
-        : [];
-    // Drop hits whose underlying source no longer exists on disk (recall's index
-    // goes stale). Without this the palette offers sessions that fail to open.
-    const isOpenable = deps.isOpenable ?? ((entry) => isSessionOpenable(entry));
-    const openableFlags = await Promise.all(mapped.map((entry) => isOpenable(entry)));
-    const results = mapped.filter((_, index) => openableFlags[index]);
-    const dropped = mapped.length - results.length;
-    if (dropped > 0) {
-        logger.debug({ dropped, kept: results.length }, "filtered unopenable recall hits");
-    }
-    return { query: parsed.query ?? query, results };
+    if (deps.runSearch)
+        return deps.runSearch({ ...params, query });
+    const service = getSessionSearchService({ logger });
+    return service.search({
+        query,
+        ...(params.limit !== undefined ? { limit: params.limit } : {}),
+        ...(params.sources !== undefined ? { sources: params.sources } : {}),
+    });
 }
 export function registerSessionsSearchRoute(app, logger, options = {}) {
     const routeLogger = logger.child({ component: "sessions-search-route" });
-    const binaryPath = options.recallBinaryPath ?? "recall";
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const runRecall = options.spawnRecall ?? ((args) => spawnRecallSerialized(binaryPath, args, timeoutMs));
     app.get("/sessions/search", (req, res) => {
         void (async () => {
             const query = typeof req.query.q === "string" ? req.query.q.trim() : "";
-            // COMPAT(recallSearch): recall disabled → never spawn the CLI; return empty so
-            // a direct (desktop/web) palette falls back to its default listAllSessions browse.
-            if (!recallSearchEnabled()) {
-                res.status(200).json({ query, results: [] });
-                return;
-            }
             const rawLimit = typeof req.query.limit === "string" ? Number.parseInt(req.query.limit, 10) : undefined;
             const sources = typeof req.query.source === "string" && req.query.source.length > 0
                 ? req.query.source
                 : undefined;
             try {
-                const out = await runSessionsSearch({ query, limit: rawLimit, sources }, routeLogger, {
-                    runRecall,
-                    ...(options.isOpenable ? { isOpenable: options.isOpenable } : {}),
-                });
+                const out = await runSessionsSearch({
+                    query,
+                    ...(rawLimit !== undefined && Number.isFinite(rawLimit) ? { limit: rawLimit } : {}),
+                    ...(sources !== undefined ? { sources } : {}),
+                }, routeLogger, options.runSearch ? { runSearch: options.runSearch } : {});
                 res.status(200).json(out);
             }
             catch (err) {
-                if (err instanceof RecallNotInstalledError) {
-                    routeLogger.warn({ binaryPath }, "recall binary not installed on PATH");
-                    res.status(503).json({ error: "recall_not_installed" });
-                    return;
-                }
-                if (err instanceof RecallTimedOutError) {
-                    routeLogger.warn({ waitedMs: err.waitedMs, query }, "recall subprocess timed out");
-                    res.status(504).json({ error: "recall_timeout" });
-                    return;
-                }
-                if (err instanceof RecallParseError) {
-                    res.status(500).json({ error: "recall_parse_failed" });
-                    return;
-                }
-                routeLogger.error({ err, query }, "recall subprocess failed");
-                res.status(500).json({ error: "recall_failed" });
+                routeLogger.error({ err, query }, "session search failed");
+                res.status(500).json({ error: "search_failed" });
             }
         })();
     });
-    routeLogger.info({ binaryPath, timeoutMs }, "Registered GET /sessions/search");
+    routeLogger.info("Registered GET /sessions/search (sqlite fts5)");
 }
 //# sourceMappingURL=sessions-search-route.js.map

package/dist/server/web-ui/_expo/static/js/web/{desktop-attachment-bridge-998e1be07f321f26e398086e261fbee3.js → desktop-attachment-bridge-dd96011e23063ea32a8d93c8e75c11b7.js}

@@ -1,5 +1,5 @@
-__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createDesktopAttachmentBridge=function(){const l=(0,s.createDesktopPreviewUrlResolver)({reader:(0,s.createDesktopFileReader)(),objectUrls:(0,s.createBrowserObjectUrlMinter)()});return{copyFile:t.copyDesktopAttachmentFile,writeBase64:t.writeDesktopAttachmentBase64,writeBytes:t.writeDesktopAttachmentBytes,deleteFile:t.deleteDesktopAttachmentFile,garbageCollect:t.garbageCollectDesktopAttachmentFiles,readFileBase64:s.readDesktopFileBase64,resolvePreviewUrl:t=>l.resolve(t),releasePreviewUrl:t=>l.release(t)}};var t=r(d[0]),s=r(d[1])},4775,[4780,4781]);
-__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.writeDesktopAttachmentBase64=async function(n){return await(0,t.invokeDesktopCommand)("write_attachment_base64",{attachmentId:n.attachmentId,base64:n.base64,extension:n.extension??null})},e.writeDesktopAttachmentBytes=async function(n){return await(0,t.invokeDesktopCommand)("write_attachment_bytes",{attachmentId:n.attachmentId,bytes:n.bytes,extension:n.extension??null})},e.copyDesktopAttachmentFile=async function(n){return await(0,t.invokeDesktopCommand)("copy_attachment_file",{attachmentId:n.attachmentId,sourcePath:n.sourcePath,extension:n.extension??null})},e.deleteDesktopAttachmentFile=async function(n){return await(0,t.invokeDesktopCommand)("delete_attachment_file",{path:n.path})},e.garbageCollectDesktopAttachmentFiles=async function(n){return await(0,t.invokeDesktopCommand)("garbage_collect_attachment_files",{referencedIds:[...n.referencedIds]})};var t=r(d[0])},4780,[3406]);
-__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.readDesktopFileBase64=s,e.createDesktopFileReader=function(){return{readFileBase64:s}},e.createBrowserObjectUrlMinter=function(){return{tryCreate({mimeType:t,base64:n}){if("undefined"==typeof URL||"function"!=typeof URL.createObjectURL)return null;const o=c(n),s=new ArrayBuffer(o.byteLength);new Uint8Array(s).set(o);const u=new Blob([s],{type:t});return URL.createObjectURL(u)},revoke(t){"undefined"!=typeof URL&&"function"==typeof URL.revokeObjectURL&&URL.revokeObjectURL(t)}}},e.createDesktopPreviewUrlResolver=function(t){const n=new Set;return{async resolve(o){const s=await t.reader.readFileBase64(o.storageKey),c=t.objectUrls.tryCreate({mimeType:o.mimeType,base64:s});return null===c?`data:${o.mimeType};base64,${s}`:(n.add(c),c)},async release({url:o}){n.has(o)&&(n.delete(o),t.objectUrls.revoke(o))}}};var t=r(d[0]),n=r(d[1]),o=r(d[2]);async function s(o){return await(0,n.invokeDesktopCommand)("read_file_base64",{path:(0,t.fileUriToPath)(o)})}function c(t){return new Uint8Array(o.Buffer.from(t,"base64"))}},4781,[4478,3406,52]);
-//# sourceMappingURL=/_expo/static/js/web/desktop-attachment-bridge-998e1be07f321f26e398086e261fbee3.js.map
-//# debugId=747c960c-b789-4565-8ddf-04a127947565
+__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createDesktopAttachmentBridge=function(){const l=(0,s.createDesktopPreviewUrlResolver)({reader:(0,s.createDesktopFileReader)(),objectUrls:(0,s.createBrowserObjectUrlMinter)()});return{copyFile:t.copyDesktopAttachmentFile,writeBase64:t.writeDesktopAttachmentBase64,writeBytes:t.writeDesktopAttachmentBytes,deleteFile:t.deleteDesktopAttachmentFile,garbageCollect:t.garbageCollectDesktopAttachmentFiles,readFileBase64:s.readDesktopFileBase64,resolvePreviewUrl:t=>l.resolve(t),releasePreviewUrl:t=>l.release(t)}};var t=r(d[0]),s=r(d[1])},4776,[4781,4782]);
+__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.writeDesktopAttachmentBase64=async function(n){return await(0,t.invokeDesktopCommand)("write_attachment_base64",{attachmentId:n.attachmentId,base64:n.base64,extension:n.extension??null})},e.writeDesktopAttachmentBytes=async function(n){return await(0,t.invokeDesktopCommand)("write_attachment_bytes",{attachmentId:n.attachmentId,bytes:n.bytes,extension:n.extension??null})},e.copyDesktopAttachmentFile=async function(n){return await(0,t.invokeDesktopCommand)("copy_attachment_file",{attachmentId:n.attachmentId,sourcePath:n.sourcePath,extension:n.extension??null})},e.deleteDesktopAttachmentFile=async function(n){return await(0,t.invokeDesktopCommand)("delete_attachment_file",{path:n.path})},e.garbageCollectDesktopAttachmentFiles=async function(n){return await(0,t.invokeDesktopCommand)("garbage_collect_attachment_files",{referencedIds:[...n.referencedIds]})};var t=r(d[0])},4781,[3406]);
+__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.readDesktopFileBase64=s,e.createDesktopFileReader=function(){return{readFileBase64:s}},e.createBrowserObjectUrlMinter=function(){return{tryCreate({mimeType:t,base64:n}){if("undefined"==typeof URL||"function"!=typeof URL.createObjectURL)return null;const o=c(n),s=new ArrayBuffer(o.byteLength);new Uint8Array(s).set(o);const u=new Blob([s],{type:t});return URL.createObjectURL(u)},revoke(t){"undefined"!=typeof URL&&"function"==typeof URL.revokeObjectURL&&URL.revokeObjectURL(t)}}},e.createDesktopPreviewUrlResolver=function(t){const n=new Set;return{async resolve(o){const s=await t.reader.readFileBase64(o.storageKey),c=t.objectUrls.tryCreate({mimeType:o.mimeType,base64:s});return null===c?`data:${o.mimeType};base64,${s}`:(n.add(c),c)},async release({url:o}){n.has(o)&&(n.delete(o),t.objectUrls.revoke(o))}}};var t=r(d[0]),n=r(d[1]),o=r(d[2]);async function s(o){return await(0,n.invokeDesktopCommand)("read_file_base64",{path:(0,t.fileUriToPath)(o)})}function c(t){return new Uint8Array(o.Buffer.from(t,"base64"))}},4782,[4478,3406,52]);
+//# sourceMappingURL=/_expo/static/js/web/desktop-attachment-bridge-dd96011e23063ea32a8d93c8e75c11b7.js.map
+//# debugId=9957cc72-3a9f-4def-9949-c3b1006a22a8

package/dist/server/web-ui/_expo/static/js/web/{desktop-attachment-store-7e067a0e3c8d6639d94a1ce72c9ec0d2.js → desktop-attachment-store-1526526b7e379374c85e4d816bbb7742.js}

@@ -1,3 +1,3 @@
-__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createDesktopAttachmentStore=function(n){return{storageType:"desktop-file",async save(s){const o=s.id??(0,t.generateAttachmentId)(),l=s.fileName??null;if("file_uri"===s.source.kind)return await c(n,{id:o,uri:s.source.uri,mimeType:s.mimeType,fileName:l});if("data_url"===s.source.kind){const c=(0,t.parseDataUrl)(s.source.dataUrl),p=(0,t.normalizeMimeType)(s.mimeType??c.mimeType);return await y(n,{id:o,base64:c.base64,mimeType:p,fileName:l})}if("bytes"===s.source.kind){const c=(0,t.normalizeMimeType)(s.mimeType);return await p(n,{id:o,bytes:s.source.bytes,mimeType:c,fileName:l})}const f=(0,t.normalizeMimeType)(s.mimeType??s.source.blob.type),u=await(0,t.blobToBase64)(s.source.blob);return await y(n,{id:o,base64:u,mimeType:f,fileName:l})},encodeBase64:async({attachment:t})=>(f(t),await n.readFileBase64(t.storageKey)),resolvePreviewUrl:async({attachment:t})=>(f(t),await n.resolvePreviewUrl(t)),async releasePreviewUrl({attachment:t,url:s}){f(t),await n.releasePreviewUrl({url:s})},async delete({attachment:t}){f(t),await n.deleteFile({path:t.storageKey})},async garbageCollect({referencedIds:t}){await n.garbageCollect({referencedIds:Array.from(t)})}}};var t=r(d[0]);const n={"image/png":".png","image/jpeg":".jpg","image/jpg":".jpg","image/gif":".gif","image/webp":".webp","image/avif":".avif","image/heic":".heic","image/heif":".heif","image/tiff":".tiff","image/bmp":".bmp","image/svg+xml":".svg"};function s(t){const n=t.replace(/\\/g,"/").split("/"),s=n[n.length-1];return s&&s.length>0?s:null}function o(s){const o=(0,t.getFileExtensionFromName)(s.fileName);if(o)return o;const l=(0,t.getFileExtensionFromName)(s.sourcePath);return l||(n[s.mimeType]??".img")}function l(t){return{id:t.id,mimeType:t.mimeType,storageType:"desktop-file",storageKey:t.storagePath,fileName:t.fileName??null,byteSize:t.byteSize,createdAt:Date.now()}}async function c(n,c){const y=(0,t.fileUriToPath)(c.uri),p=c.fileName??s(y),f=(0,t.normalizeMimeType)(c.mimeType),u=o({fileName:p,sourcePath:y,mimeType:f}),T=await n.copyFile({attachmentId:c.id,sourcePath:y,extension:u});return l({id:c.id,mimeType:f,storagePath:T.path,byteSize:T.byteSize,fileName:p})}async function y(t,n){const s=o({fileName:n.fileName,mimeType:n.mimeType}),c=await t.writeBase64({attachmentId:n.id,base64:n.base64,extension:s});return l({id:n.id,mimeType:n.mimeType,storagePath:c.path,byteSize:c.byteSize,fileName:n.fileName})}async function p(t,n){const s=o({fileName:n.fileName,mimeType:n.mimeType}),c=await t.writeBytes({attachmentId:n.id,bytes:n.bytes,extension:s});return l({id:n.id,mimeType:n.mimeType,storagePath:c.path,byteSize:c.byteSize,fileName:n.fileName})}function f(t){if("desktop-file"!==t.storageType)throw new Error(`Unsupported desktop attachment storage type '${t.storageType}'.`)}},4774,[4478]);
-//# sourceMappingURL=/_expo/static/js/web/desktop-attachment-store-7e067a0e3c8d6639d94a1ce72c9ec0d2.js.map
-//# debugId=2a4fa395-43e2-4546-9402-21da8e005abc
+__d(function(g,r,i,a,m,e,d){"use strict";Object.defineProperty(e,'__esModule',{value:!0}),e.createDesktopAttachmentStore=function(n){return{storageType:"desktop-file",async save(s){const o=s.id??(0,t.generateAttachmentId)(),l=s.fileName??null;if("file_uri"===s.source.kind)return await c(n,{id:o,uri:s.source.uri,mimeType:s.mimeType,fileName:l});if("data_url"===s.source.kind){const c=(0,t.parseDataUrl)(s.source.dataUrl),p=(0,t.normalizeMimeType)(s.mimeType??c.mimeType);return await y(n,{id:o,base64:c.base64,mimeType:p,fileName:l})}if("bytes"===s.source.kind){const c=(0,t.normalizeMimeType)(s.mimeType);return await p(n,{id:o,bytes:s.source.bytes,mimeType:c,fileName:l})}const f=(0,t.normalizeMimeType)(s.mimeType??s.source.blob.type),u=await(0,t.blobToBase64)(s.source.blob);return await y(n,{id:o,base64:u,mimeType:f,fileName:l})},encodeBase64:async({attachment:t})=>(f(t),await n.readFileBase64(t.storageKey)),resolvePreviewUrl:async({attachment:t})=>(f(t),await n.resolvePreviewUrl(t)),async releasePreviewUrl({attachment:t,url:s}){f(t),await n.releasePreviewUrl({url:s})},async delete({attachment:t}){f(t),await n.deleteFile({path:t.storageKey})},async garbageCollect({referencedIds:t}){await n.garbageCollect({referencedIds:Array.from(t)})}}};var t=r(d[0]);const n={"image/png":".png","image/jpeg":".jpg","image/jpg":".jpg","image/gif":".gif","image/webp":".webp","image/avif":".avif","image/heic":".heic","image/heif":".heif","image/tiff":".tiff","image/bmp":".bmp","image/svg+xml":".svg"};function s(t){const n=t.replace(/\\/g,"/").split("/"),s=n[n.length-1];return s&&s.length>0?s:null}function o(s){const o=(0,t.getFileExtensionFromName)(s.fileName);if(o)return o;const l=(0,t.getFileExtensionFromName)(s.sourcePath);return l||(n[s.mimeType]??".img")}function l(t){return{id:t.id,mimeType:t.mimeType,storageType:"desktop-file",storageKey:t.storagePath,fileName:t.fileName??null,byteSize:t.byteSize,createdAt:Date.now()}}async function c(n,c){const y=(0,t.fileUriToPath)(c.uri),p=c.fileName??s(y),f=(0,t.normalizeMimeType)(c.mimeType),u=o({fileName:p,sourcePath:y,mimeType:f}),T=await n.copyFile({attachmentId:c.id,sourcePath:y,extension:u});return l({id:c.id,mimeType:f,storagePath:T.path,byteSize:T.byteSize,fileName:p})}async function y(t,n){const s=o({fileName:n.fileName,mimeType:n.mimeType}),c=await t.writeBase64({attachmentId:n.id,base64:n.base64,extension:s});return l({id:n.id,mimeType:n.mimeType,storagePath:c.path,byteSize:c.byteSize,fileName:n.fileName})}async function p(t,n){const s=o({fileName:n.fileName,mimeType:n.mimeType}),c=await t.writeBytes({attachmentId:n.id,bytes:n.bytes,extension:s});return l({id:n.id,mimeType:n.mimeType,storagePath:c.path,byteSize:c.byteSize,fileName:n.fileName})}function f(t){if("desktop-file"!==t.storageType)throw new Error(`Unsupported desktop attachment storage type '${t.storageType}'.`)}},4775,[4478]);
+//# sourceMappingURL=/_expo/static/js/web/desktop-attachment-store-1526526b7e379374c85e4d816bbb7742.js.map
+//# debugId=7c4e6bb3-27e3-443f-a7f2-85de05d44e99