@iaforged/context-code 1.0.63 → 1.0.67

package/dist/src/bridge/inboundAttachments.js

@@ -1,152 +0,0 @@
-/**
- * Resolve file_uuid attachments on inbound bridge user messages.
- *
- * Web composer uploads via cookie-authed /api/{org}/upload, sends file_uuid
- * alongside the message. Here we fetch each via GET /api/oauth/files/{uuid}/content
- * (oauth-authed, same store), write to ~/.claude/uploads/{sessionId}/, and
- * return @path refs to prepend. Claude's Read tool takes it from there.
- *
- * Best-effort: any failure (no token, network, non-2xx, disk) logs debug and
- * skips that attachment. The message still reaches Claude, just without @path.
- */
-import axios from 'axios';
-import { randomUUID } from 'crypto';
-import { mkdir, writeFile } from 'fs/promises';
-import { basename, join } from 'path';
-import { z } from 'zod/v4';
-import { getSessionId } from '../bootstrap/state.js';
-import { logForDebugging } from '../utils/debug.js';
-import { getClaudeConfigHomeDir } from '../utils/envUtils.js';
-import { lazySchema } from '../utils/lazySchema.js';
-import { getBridgeAccessToken, getBridgeBaseUrl } from './bridgeConfig.js';
-const DOWNLOAD_TIMEOUT_MS = 30_000;
-function debug(msg) {
-    logForDebugging(`[bridge:inbound-attach] ${msg}`);
-}
-const attachmentSchema = lazySchema(() => z.object({
-    file_uuid: z.string(),
-    file_name: z.string(),
-}));
-const attachmentsArraySchema = lazySchema(() => z.array(attachmentSchema()));
-/** Pull file_attachments off a loosely-typed inbound message. */
-export function extractInboundAttachments(msg) {
-    if (typeof msg !== 'object' || msg === null || !('file_attachments' in msg)) {
-        return [];
-    }
-    const parsed = attachmentsArraySchema().safeParse(msg.file_attachments);
-    return parsed.success ? parsed.data : [];
-}
-/**
- * Strip path components and keep only filename-safe chars. file_name comes
- * from the network (web composer), so treat it as untrusted even though the
- * composer controls it.
- */
-function sanitizeFileName(name) {
-    const base = basename(name).replace(/[^a-zA-Z0-9._-]/g, '_');
-    return base || 'attachment';
-}
-function uploadsDir() {
-    return join(getClaudeConfigHomeDir(), 'uploads', getSessionId());
-}
-/**
- * Fetch + write one attachment. Returns the absolute path on success,
- * undefined on any failure.
- */
-async function resolveOne(att) {
-    const token = getBridgeAccessToken();
-    if (!token) {
-        debug('skip: no oauth token');
-        return undefined;
-    }
-    let data;
-    try {
-        // getOauthConfig() (via getBridgeBaseUrl) throws on a non-allowlisted
-        // CLAUDE_CODE_CUSTOM_OAUTH_URL — keep it inside the try so a bad
-        // FedStart URL degrades to "no @path" instead of crashing print.ts's
-        // reader loop (which has no catch around the await).
-        const url = `${getBridgeBaseUrl()}/api/oauth/files/${encodeURIComponent(att.file_uuid)}/content`;
-        const response = await axios.get(url, {
-            headers: { Authorization: `Bearer ${token}` },
-            responseType: 'arraybuffer',
-            timeout: DOWNLOAD_TIMEOUT_MS,
-            validateStatus: () => true,
-        });
-        if (response.status !== 200) {
-            debug(`fetch ${att.file_uuid} failed: status=${response.status}`);
-            return undefined;
-        }
-        data = Buffer.from(response.data);
-    }
-    catch (e) {
-        debug(`fetch ${att.file_uuid} threw: ${e}`);
-        return undefined;
-    }
-    // uuid-prefix makes collisions impossible across messages and within one
-    // (same filename, different files). 8 chars is enough — this isn't security.
-    const safeName = sanitizeFileName(att.file_name);
-    const prefix = (att.file_uuid.slice(0, 8) || randomUUID().slice(0, 8)).replace(/[^a-zA-Z0-9_-]/g, '_');
-    const dir = uploadsDir();
-    const outPath = join(dir, `${prefix}-${safeName}`);
-    try {
-        await mkdir(dir, { recursive: true });
-        await writeFile(outPath, data);
-    }
-    catch (e) {
-        debug(`write ${outPath} failed: ${e}`);
-        return undefined;
-    }
-    debug(`resolved ${att.file_uuid} → ${outPath} (${data.length} bytes)`);
-    return outPath;
-}
-/**
- * Resolve all attachments on an inbound message to a prefix string of
- * @path refs. Empty string if none resolved.
- */
-export async function resolveInboundAttachments(attachments) {
-    if (attachments.length === 0)
-        return '';
-    debug(`resolving ${attachments.length} attachment(s)`);
-    const paths = await Promise.all(attachments.map(resolveOne));
-    const ok = paths.filter((p) => p !== undefined);
-    if (ok.length === 0)
-        return '';
-    // Quoted form — extractAtMentionedFiles truncates unquoted @refs at the
-    // first space, which breaks any home dir with spaces (/Users/John Smith/).
-    return ok.map(p => `@"${p}"`).join(' ') + ' ';
-}
-/**
- * Prepend @path refs to content, whichever form it's in.
- * Targets the LAST text block — processUserInputBase reads inputString
- * from processedBlocks[processedBlocks.length - 1], so putting refs in
- * block[0] means they're silently ignored for [text, image] content.
- */
-export function prependPathRefs(content, prefix) {
-    if (!prefix)
-        return content;
-    if (typeof content === 'string')
-        return prefix + content;
-    const i = content.findLastIndex(b => b.type === 'text');
-    if (i !== -1) {
-        const b = content[i];
-        if (b.type === 'text') {
-            return [
-                ...content.slice(0, i),
-                { ...b, text: prefix + b.text },
-                ...content.slice(i + 1),
-            ];
-        }
-    }
-    // No text block — append one at the end so it's last.
-    return [...content, { type: 'text', text: prefix.trimEnd() }];
-}
-/**
- * Convenience: extract + resolve + prepend. No-op when the message has no
- * file_attachments field (fast path — no network, returns same reference).
- */
-export async function resolveAndPrepend(msg, content) {
-    const attachments = extractInboundAttachments(msg);
-    if (attachments.length === 0)
-        return content;
-    const prefix = await resolveInboundAttachments(attachments);
-    return prependPathRefs(content, prefix);
-}

package/dist/src/bridge/inboundMessages.js

@@ -1,63 +0,0 @@
-import { detectImageFormatFromBase64 } from '../utils/imageResizer.js';
-/**
- * Process an inbound user message from the bridge, extracting content
- * and UUID for enqueueing. Supports both string content and
- * ContentBlockParam[] (e.g. messages containing images).
- *
- * Normalizes image blocks from bridge clients that may use camelCase
- * `mediaType` instead of snake_case `media_type` (mobile-apps#5825).
- *
- * Returns the extracted fields, or undefined if the message should be
- * skipped (non-user type, missing/empty content).
- */
-export function extractInboundMessageFields(msg) {
-    if (msg.type !== 'user')
-        return undefined;
-    const content = msg.message?.content;
-    if (!content)
-        return undefined;
-    if (Array.isArray(content) && content.length === 0)
-        return undefined;
-    const uuid = 'uuid' in msg && typeof msg.uuid === 'string'
-        ? msg.uuid
-        : undefined;
-    return {
-        content: Array.isArray(content) ? normalizeImageBlocks(content) : content,
-        uuid,
-    };
-}
-/**
- * Normalize image content blocks from bridge clients. iOS/web clients may
- * send `mediaType` (camelCase) instead of `media_type` (snake_case), or
- * omit the field entirely. Without normalization, the bad block poisons
- * the session — every subsequent API call fails with
- * "media_type: Field required".
- *
- * Fast-path scan returns the original array reference when no
- * normalization is needed (zero allocation on the happy path).
- */
-export function normalizeImageBlocks(blocks) {
-    if (!blocks.some(isMalformedBase64Image))
-        return blocks;
-    return blocks.map(block => {
-        if (!isMalformedBase64Image(block))
-            return block;
-        const src = block.source;
-        const mediaType = typeof src.mediaType === 'string' && src.mediaType
-            ? src.mediaType
-            : detectImageFormatFromBase64(block.source.data);
-        return {
-            ...block,
-            source: {
-                type: 'base64',
-                media_type: mediaType,
-                data: block.source.data,
-            },
-        };
-    });
-}
-function isMalformedBase64Image(block) {
-    if (block.type !== 'image' || block.source?.type !== 'base64')
-        return false;
-    return !block.source.media_type;
-}

package/dist/src/bridge/initReplBridge.js

@@ -1,428 +0,0 @@
-import { feature } from '../recovery/bunBundleShim.js';
-import { createRequire } from 'module';
-const require = createRequire(import.meta.url);
-/**
- * REPL-specific wrapper around initBridgeCore. Owns the parts that read
- * bootstrap state — gates, cwd, session ID, git context, OAuth, title
- * derivation — then delegates to the bootstrap-free core.
- *
- * Split out of replBridge.ts because the sessionStorage import
- * (getCurrentSessionTitle) transitively pulls in src/commands.ts → the
- * entire slash command + React component tree (~1300 modules). Keeping
- * initBridgeCore in a file that doesn't touch sessionStorage lets
- * daemonBridge.ts import the core without bloating the Agent SDK bundle.
- *
- * Called via dynamic import by useReplBridge (auto-start) and print.ts
- * (SDK -p mode via query.enableRemoteControl).
- */
-import { hostname } from 'os';
-import { getOriginalCwd, getSessionId } from '../bootstrap/state.js';
-import { getFeatureValue_CACHED_WITH_REFRESH } from '../services/analytics/growthbook.js';
-import { getOrganizationUUID } from '../services/oauth/client.js';
-import { isPolicyAllowed, waitForPolicyLimitsToLoad, } from '../services/policyLimits/index.js';
-import { checkAndRefreshOAuthTokenIfNeeded, getClaudeAIOAuthTokens, handleOAuth401Error, } from '../utils/auth.js';
-import { getGlobalConfig, saveGlobalConfig } from '../utils/config.js';
-import { logForDebugging } from '../utils/debug.js';
-import { stripDisplayTagsAllowEmpty } from '../utils/displayTags.js';
-import { errorMessage } from '../utils/errors.js';
-import { getBranch, getRemoteUrl } from '../utils/git.js';
-import { toSDKMessages } from '../utils/messages/mappers.js';
-import { getContentText, getMessagesAfterCompactBoundary, isSyntheticMessage, } from '../utils/messages.js';
-import { getCurrentSessionTitle } from '../utils/sessionStorage.js';
-import { extractConversationText, generateSessionTitle, } from '../utils/sessionTitle.js';
-import { generateShortWordSlug } from '../utils/words.js';
-import { getBridgeAccessToken, getBridgeBaseUrl, getBridgeTokenOverride, } from './bridgeConfig.js';
-import { checkBridgeMinVersion, isBridgeEnabledBlocking, isCseShimEnabled, isEnvLessBridgeEnabled, } from './bridgeEnabled.js';
-import { archiveBridgeSession, createBridgeSession, updateBridgeSessionTitle, } from './createSession.js';
-import { logBridgeSkip } from './debugUtils.js';
-import { checkEnvLessBridgeMinVersion } from './envLessBridgeConfig.js';
-import { getPollIntervalConfig } from './pollConfig.js';
-import { initBridgeCore } from './replBridge.js';
-import { setCseShimGate } from './sessionIdCompat.js';
-export async function initReplBridge(options) {
-    const { onInboundMessage, onPermissionResponse, onInterrupt, onSetModel, onSetMaxThinkingTokens, onSetPermissionMode, onStateChange, initialMessages, getMessages, previouslyFlushedUUIDs, initialName, perpetual, outboundOnly, tags, } = options ?? {};
-    // Wire the cse_ shim kill switch so toCompatSessionId respects the
-    // GrowthBook gate. Daemon/SDK paths skip this — shim defaults to active.
-    setCseShimGate(isCseShimEnabled);
-    // 1. Runtime gate
-    if (!(await isBridgeEnabledBlocking())) {
-        logBridgeSkip('not_enabled', '[bridge:repl] Skipping: bridge not enabled');
-        return null;
-    }
-    // 1b. Minimum version check — deferred to after the v1/v2 branch below,
-    // since each implementation has its own floor (tengu_bridge_min_version
-    // for v1, tengu_bridge_repl_v2_config.min_version for v2).
-    // 2. Check OAuth — must be signed in with claude.ai. Runs before the
-    // policy check so console-auth users get the actionable "/login" hint
-    // instead of a misleading policy error from a stale/wrong-org cache.
-    if (!getBridgeAccessToken()) {
-        logBridgeSkip('no_oauth', '[bridge:repl] Skipping: no OAuth tokens');
-        onStateChange?.('failed', '/login');
-        return null;
-    }
-    // 3. Check organization policy — remote control may be disabled
-    await waitForPolicyLimitsToLoad();
-    if (!isPolicyAllowed('allow_remote_control')) {
-        logBridgeSkip('policy_denied', '[bridge:repl] Skipping: allow_remote_control policy not allowed');
-        onStateChange?.('failed', "disabled by your organization's policy");
-        return null;
-    }
-    // When CLAUDE_BRIDGE_OAUTH_TOKEN is set (ant-only local dev), the bridge
-    // uses that token directly via getBridgeAccessToken() — keychain state is
-    // irrelevant. Skip 2b/2c to preserve that decoupling: an expired keychain
-    // token shouldn't block a bridge connection that doesn't use it.
-    if (!getBridgeTokenOverride()) {
-        // 2a. Cross-process backoff. If N prior processes already saw this exact
-        // dead token (matched by expiresAt), skip silently — no event, no refresh
-        // attempt. The count threshold tolerates transient refresh failures (auth
-        // server 5xx, lockfile errors per auth.ts:1437/1444/1485): each process
-        // independently retries until 3 consecutive failures prove the token dead.
-        // Mirrors useReplBridge's MAX_CONSECUTIVE_INIT_FAILURES for in-process.
-        // The expiresAt key is content-addressed: /login → new token → new expiresAt
-        // → this stops matching without any explicit clear.
-        const cfg = getGlobalConfig();
-        if (cfg.bridgeOauthDeadExpiresAt != null &&
-            (cfg.bridgeOauthDeadFailCount ?? 0) >= 3 &&
-            getClaudeAIOAuthTokens()?.expiresAt === cfg.bridgeOauthDeadExpiresAt) {
-            logForDebugging(`[bridge:repl] Skipping: cross-process backoff (dead token seen ${cfg.bridgeOauthDeadFailCount} times)`);
-            return null;
-        }
-        // 2b. Proactively refresh if expired. Mirrors bridgeMain.ts:2096 — the REPL
-        // bridge fires at useEffect mount BEFORE any v1/messages call, making this
-        // usually the first OAuth request of the session. Without this, ~9% of
-        // registrations hit the server with a >8h-expired token → 401 → withOAuthRetry
-        // recovers, but the server logs a 401 we can avoid. VPN egress IPs observed
-        // at 30:1 401:200 when many unrelated users cluster at the 8h TTL boundary.
-        //
-        // Fresh-token cost: one memoized read + one Date.now() comparison (~µs).
-        // checkAndRefreshOAuthTokenIfNeeded clears its own cache in every path that
-        // touches the keychain (refresh success, lockfile race, throw), so no
-        // explicit clearOAuthTokenCache() here — that would force a blocking
-        // keychain spawn on the 91%+ fresh-token path.
-        await checkAndRefreshOAuthTokenIfNeeded();
-        // 2c. Skip if token is still expired post-refresh-attempt. Env-var / FD
-        // tokens (auth.ts:894-917) have expiresAt=null → never trip this. But a
-        // keychain token whose refresh token is dead (password change, org left,
-        // token GC'd) has expiresAt<now AND refresh just failed — the client would
-        // otherwise loop 401 forever: withOAuthRetry → handleOAuth401Error →
-        // refresh fails again → retry with same stale token → 401 again.
-        // Datadog 2026-03-08: single IPs generating 2,879 such 401s/day. Skip the
-        // guaranteed-fail API call; useReplBridge surfaces the failure.
-        //
-        // Intentionally NOT using isOAuthTokenExpired here — that has a 5-minute
-        // proactive-refresh buffer, which is the right heuristic for "should
-        // refresh soon" but wrong for "provably unusable". A token with 3min left
-        // + transient refresh endpoint blip (5xx/timeout/wifi-reconnect) would
-        // falsely trip a buffered check; the still-valid token would connect fine.
-        // Check actual expiry instead: past-expiry AND refresh-failed → truly dead.
-        const tokens = getClaudeAIOAuthTokens();
-        if (tokens && tokens.expiresAt !== null && tokens.expiresAt <= Date.now()) {
-            logBridgeSkip('oauth_expired_unrefreshable', '[bridge:repl] Skipping: OAuth token expired and refresh failed (re-login required)');
-            onStateChange?.('failed', '/login');
-            // Persist for the next process. Increments failCount when re-discovering
-            // the same dead token (matched by expiresAt); resets to 1 for a different
-            // token. Once count reaches 3, step 2a's early-return fires and this path
-            // is never reached again — writes are capped at 3 per dead token.
-            // Local const captures the narrowed type (closure loses !==null narrowing).
-            const deadExpiresAt = tokens.expiresAt;
-            saveGlobalConfig(c => ({
-                ...c,
-                bridgeOauthDeadExpiresAt: deadExpiresAt,
-                bridgeOauthDeadFailCount: c.bridgeOauthDeadExpiresAt === deadExpiresAt
-                    ? (c.bridgeOauthDeadFailCount ?? 0) + 1
-                    : 1,
-            }));
-            return null;
-        }
-    }
-    // 4. Compute baseUrl — needed by both v1 (env-based) and v2 (env-less)
-    // paths. Hoisted above the v2 gate so both can use it.
-    const baseUrl = getBridgeBaseUrl();
-    // 5. Derive session title. Precedence: explicit initialName → /rename
-    // (session storage) → last meaningful user message → generated slug.
-    // Cosmetic only (claude.ai session list); the model never sees it.
-    // Two flags: `hasExplicitTitle` (initialName or /rename — never auto-
-    // overwrite) vs. `hasTitle` (any title, including auto-derived — blocks
-    // the count-1 re-derivation but not count-3). The onUserMessage callback
-    // (wired to both v1 and v2 below) derives from the 1st prompt and again
-    // from the 3rd so mobile/web show a title that reflects more context.
-    // The slug fallback (e.g. "remote-control-graceful-unicorn") makes
-    // auto-started sessions distinguishable in the claude.ai list before the
-    // first prompt.
-    let title = `remote-control-${generateShortWordSlug()}`;
-    let hasTitle = false;
-    let hasExplicitTitle = false;
-    if (initialName) {
-        title = initialName;
-        hasTitle = true;
-        hasExplicitTitle = true;
-    }
-    else {
-        const sessionId = getSessionId();
-        const customTitle = sessionId
-            ? getCurrentSessionTitle(sessionId)
-            : undefined;
-        if (customTitle) {
-            title = customTitle;
-            hasTitle = true;
-            hasExplicitTitle = true;
-        }
-        else if (initialMessages && initialMessages.length > 0) {
-            // Find the last user message that has meaningful content. Skip meta
-            // (nudges), tool results, compact summaries ("This session is being
-            // continued…"), non-human origins (task notifications, channel pushes),
-            // and synthetic interrupts ([Request interrupted by user]) — none are
-            // human-authored. Same filter as extractTitleText + isSyntheticMessage.
-            for (let i = initialMessages.length - 1; i >= 0; i--) {
-                const msg = initialMessages[i];
-                if (msg.type !== 'user' ||
-                    msg.isMeta ||
-                    msg.toolUseResult ||
-                    msg.isCompactSummary ||
-                    (msg.origin && msg.origin.kind !== 'human') ||
-                    isSyntheticMessage(msg))
-                    continue;
-                const rawContent = getContentText(msg.message.content);
-                if (!rawContent)
-                    continue;
-                const derived = deriveTitle(rawContent);
-                if (!derived)
-                    continue;
-                title = derived;
-                hasTitle = true;
-                break;
-            }
-        }
-    }
-    // Shared by both v1 and v2 — fires on every title-worthy user message until
-    // it returns true. At count 1: deriveTitle placeholder immediately, then
-    // generateSessionTitle (Haiku, sentence-case) fire-and-forget upgrade. At
-    // count 3: re-generate over the full conversation. Skips entirely if the
-    // title is explicit (/remote-control <name> or /rename) — re-checks
-    // sessionStorage at call time so /rename between messages isn't clobbered.
-    // Skips count 1 if initialMessages already derived (that title is fresh);
-    // still refreshes at count 3. v2 passes cse_*; updateBridgeSessionTitle
-    // retags internally.
-    let userMessageCount = 0;
-    let lastBridgeSessionId;
-    let genSeq = 0;
-    const patch = (derived, bridgeSessionId, atCount) => {
-        hasTitle = true;
-        title = derived;
-        logForDebugging(`[bridge:repl] derived title from message ${atCount}: ${derived}`);
-        void updateBridgeSessionTitle(bridgeSessionId, derived, {
-            baseUrl,
-            getAccessToken: getBridgeAccessToken,
-        }).catch(() => { });
-    };
-    // Fire-and-forget Haiku generation with post-await guards. Re-checks /rename
-    // (sessionStorage), v1 env-lost (lastBridgeSessionId), and same-session
-    // out-of-order resolution (genSeq — count-1's Haiku resolving after count-3
-    // would clobber the richer title). generateSessionTitle never rejects.
-    const generateAndPatch = (input, bridgeSessionId) => {
-        const gen = ++genSeq;
-        const atCount = userMessageCount;
-        void generateSessionTitle(input, AbortSignal.timeout(15_000)).then(generated => {
-            if (generated &&
-                gen === genSeq &&
-                lastBridgeSessionId === bridgeSessionId &&
-                !getCurrentSessionTitle(getSessionId())) {
-                patch(generated, bridgeSessionId, atCount);
-            }
-        });
-    };
-    const onUserMessage = (text, bridgeSessionId) => {
-        if (hasExplicitTitle || getCurrentSessionTitle(getSessionId())) {
-            return true;
-        }
-        // v1 env-lost re-creates the session with a new ID. Reset the count so
-        // the new session gets its own count-3 derivation; hasTitle stays true
-        // (new session was created via getCurrentTitle(), which reads the count-1
-        // title from this closure), so count-1 of the fresh cycle correctly skips.
-        if (lastBridgeSessionId !== undefined &&
-            lastBridgeSessionId !== bridgeSessionId) {
-            userMessageCount = 0;
-        }
-        lastBridgeSessionId = bridgeSessionId;
-        userMessageCount++;
-        if (userMessageCount === 1 && !hasTitle) {
-            const placeholder = deriveTitle(text);
-            if (placeholder)
-                patch(placeholder, bridgeSessionId, userMessageCount);
-            generateAndPatch(text, bridgeSessionId);
-        }
-        else if (userMessageCount === 3) {
-            const msgs = getMessages?.();
-            const input = msgs
-                ? extractConversationText(getMessagesAfterCompactBoundary(msgs))
-                : text;
-            generateAndPatch(input, bridgeSessionId);
-        }
-        // Also re-latches if v1 env-lost resets the transport's done flag past 3.
-        return userMessageCount >= 3;
-    };
-    const initialHistoryCap = getFeatureValue_CACHED_WITH_REFRESH('tengu_bridge_initial_history_cap', 200, 5 * 60 * 1000);
-    // Fetch orgUUID before the v1/v2 branch — both paths need it. v1 for
-    // environment registration; v2 for archive (which lives at the compat
-    // /v1/sessions/{id}/archive, not /v1/code/sessions). Without it, v2
-    // archive 404s and sessions stay alive in CCR after /exit.
-    const orgUUID = await getOrganizationUUID();
-    if (!orgUUID) {
-        logBridgeSkip('no_org_uuid', '[bridge:repl] Skipping: no org UUID');
-        onStateChange?.('failed', '/login');
-        return null;
-    }
-    // ── GrowthBook gate: env-less bridge ──────────────────────────────────
-    // When enabled, skips the Environments API layer entirely (no register/
-    // poll/ack/heartbeat) and connects directly via POST /bridge → worker_jwt.
-    // See server PR #292605 (renamed in #293280). REPL-only — daemon/print stay
-    // on env-based.
-    //
-    // NAMING: "env-less" is distinct from "CCR v2" (the /worker/* transport).
-    // The env-based path below can ALSO use CCR v2 via CLAUDE_CODE_USE_CCR_V2.
-    // tengu_bridge_repl_v2 gates env-less (no poll loop), not transport version.
-    //
-    // perpetual (assistant-mode session continuity via bridge-pointer.json) is
-    // env-coupled and not yet implemented here — fall back to env-based when set
-    // so KAIROS users don't silently lose cross-restart continuity.
-    if (isEnvLessBridgeEnabled() && !perpetual) {
-        const versionError = await checkEnvLessBridgeMinVersion();
-        if (versionError) {
-            logBridgeSkip('version_too_old', `[bridge:repl] Skipping: ${versionError}`, true);
-            onStateChange?.('failed', 'run `claude update` to upgrade');
-            return null;
-        }
-        logForDebugging('[bridge:repl] Using env-less bridge path (tengu_bridge_repl_v2)');
-        const { initEnvLessBridgeCore } = await import('./remoteBridgeCore.js');
-        return initEnvLessBridgeCore({
-            baseUrl,
-            orgUUID,
-            title,
-            getAccessToken: getBridgeAccessToken,
-            onAuth401: handleOAuth401Error,
-            toSDKMessages,
-            initialHistoryCap,
-            initialMessages,
-            // v2 always creates a fresh server session (new cse_* id), so
-            // previouslyFlushedUUIDs is not passed — there's no cross-session
-            // UUID collision risk, and the ref persists across enable→disable→
-            // re-enable cycles which would cause the new session to receive zero
-            // history (all UUIDs already in the set from the prior enable).
-            // v1 handles this by calling previouslyFlushedUUIDs.clear() on fresh
-            // session creation (replBridge.ts:768); v2 skips the param entirely.
-            onInboundMessage,
-            onUserMessage,
-            onPermissionResponse,
-            onInterrupt,
-            onSetModel,
-            onSetMaxThinkingTokens,
-            onSetPermissionMode,
-            onStateChange,
-            outboundOnly,
-            tags,
-        });
-    }
-    // ── v1 path: env-based (register/poll/ack/heartbeat) ──────────────────
-    const versionError = checkBridgeMinVersion();
-    if (versionError) {
-        logBridgeSkip('version_too_old', `[bridge:repl] Skipping: ${versionError}`);
-        onStateChange?.('failed', 'run `claude update` to upgrade');
-        return null;
-    }
-    // Gather git context — this is the bootstrap-read boundary.
-    // Everything from here down is passed explicitly to bridgeCore.
-    const branch = await getBranch();
-    const gitRepoUrl = await getRemoteUrl();
-    const sessionIngressUrl = process.env.USER_TYPE === 'ant' &&
-        process.env.CLAUDE_BRIDGE_SESSION_INGRESS_URL
-        ? process.env.CLAUDE_BRIDGE_SESSION_INGRESS_URL
-        : baseUrl;
-    // Assistant-mode sessions advertise a distinct worker_type so the web UI
-    // can filter them into a dedicated picker. KAIROS guard keeps the
-    // assistant module out of external builds entirely.
-    let workerType = 'claude_code';
-    if (feature('KAIROS')) {
-        /* eslint-disable @typescript-eslint/no-require-imports */
-        const { isAssistantMode } = require('../assistant/index.js');
-        /* eslint-enable @typescript-eslint/no-require-imports */
-        if (isAssistantMode()) {
-            workerType = 'claude_code_assistant';
-        }
-    }
-    // 6. Delegate. BridgeCoreHandle is a structural superset of
-    // ReplBridgeHandle (adds writeSdkMessages which REPL callers don't use),
-    // so no adapter needed — just the narrower type on the way out.
-    return initBridgeCore({
-        dir: getOriginalCwd(),
-        machineName: hostname(),
-        branch,
-        gitRepoUrl,
-        title,
-        baseUrl,
-        sessionIngressUrl,
-        workerType,
-        getAccessToken: getBridgeAccessToken,
-        createSession: opts => createBridgeSession({
-            ...opts,
-            events: [],
-            baseUrl,
-            getAccessToken: getBridgeAccessToken,
-        }),
-        archiveSession: sessionId => archiveBridgeSession(sessionId, {
-            baseUrl,
-            getAccessToken: getBridgeAccessToken,
-            // gracefulShutdown.ts:407 races runCleanupFunctions against 2s.
-            // Teardown also does stopWork (parallel) + deregister (sequential),
-            // so archive can't have the full budget. 1.5s matches v2's
-            // teardown_archive_timeout_ms default.
-            timeoutMs: 1500,
-        }).catch((err) => {
-            // archiveBridgeSession has no try/catch — 5xx/timeout/network throw
-            // straight through. Previously swallowed silently, making archive
-            // failures BQ-invisible and undiagnosable from debug logs.
-            logForDebugging(`[bridge:repl] archiveBridgeSession threw: ${errorMessage(err)}`, { level: 'error' });
-        }),
-        // getCurrentTitle is read on reconnect-after-env-lost to re-title the new
-        // session. /rename writes to session storage; onUserMessage mutates
-        // `title` directly — both paths are picked up here.
-        getCurrentTitle: () => getCurrentSessionTitle(getSessionId()) ?? title,
-        onUserMessage,
-        toSDKMessages,
-        onAuth401: handleOAuth401Error,
-        getPollIntervalConfig,
-        initialHistoryCap,
-        initialMessages,
-        previouslyFlushedUUIDs,
-        onInboundMessage,
-        onPermissionResponse,
-        onInterrupt,
-        onSetModel,
-        onSetMaxThinkingTokens,
-        onSetPermissionMode,
-        onStateChange,
-        perpetual,
-    });
-}
-const TITLE_MAX_LEN = 50;
-/**
- * Quick placeholder title: strip display tags, take the first sentence,
- * collapse whitespace, truncate to 50 chars. Returns undefined if the result
- * is empty (e.g. message was only <local-command-stdout>). Replaced by
- * generateSessionTitle once Haiku resolves (~1-15s).
- */
-function deriveTitle(raw) {
-    // Strip <ide_opened_file>, <session-start-hook>, etc. — these appear in
-    // user messages when IDE/hooks inject context. stripDisplayTagsAllowEmpty
-    // returns '' (not the original) so pure-tag messages are skipped.
-    const clean = stripDisplayTagsAllowEmpty(raw);
-    // First sentence is usually the intent; rest is often context/detail.
-    // Capture group instead of lookbehind — keeps YARR JIT happy.
-    const firstSentence = /^(.*?[.!?])\s/.exec(clean)?.[1] ?? clean;
-    // Collapse newlines/tabs — titles are single-line in the claude.ai list.
-    const flat = firstSentence.replace(/\s+/g, ' ').trim();
-    if (!flat)
-        return undefined;
-    return flat.length > TITLE_MAX_LEN
-        ? flat.slice(0, TITLE_MAX_LEN - 1) + '\u2026'
-        : flat;
-}