@inixiative/agent-session 0.6.0 → 0.6.1

package/README.md

@@ -2,7 +2,7 @@
 
 Drive coding-agent CLIs as **persistent, streaming, event-captured sessions** —
 one interface, any agent, over interchangeable **transports**. Claude Code
-(CLI or Agent SDK) and Codex (MCP or app-server) today; Gemini and Grok planned.
+(CLI or Agent SDK) and Codex (app-server) today; Gemini and Grok planned.
 Also: warm **primed decision sessions**, **subscription pools** with
 deterministic routing, **limit polling** and **session continuity**.
 
@@ -64,20 +64,23 @@ arrive as `rate_limit` events.
 ```ts
 import { createSession, TRANSPORTS } from "@inixiative/agent-session";
 
-const kind = "codex-app-server";            // or claude-cli, claude-agent-sdk, codex-mcp
+const kind = "codex-app-server";            // or claude-cli, claude-agent-sdk
 if (TRANSPORTS[kind].capabilities.interrupt === "acknowledged") { /* … */ }
 const session = createSession(kind, { cwd, model: "gpt-6-luna", env: { CODEX_HOME: profile } });
 ```
 
-| | claude-cli | codex-mcp | codex-app-server | claude-agent-sdk | acp | api |
-|---|---|---|---|---|---|---|
-| Status | ✅ live | ✅ live | ✅ live | ✅ live | stub | stub |
-| Resume / fork | native / native | loaded-only / same-thread | native / – | native / native | – | – |
-| Interrupt | acknowledged | local-only | acknowledged | acknowledged | – | – |
-| Push | – | – | steer | – | – | – |
-| Approvals | callback | mode | callback | callback | – | – |
-| Limits stream / poll | ✅ / ✅ | – / – | ✅ / ✅ | ✅ / – | – | – |
-| Primed reset | fork | – | fork | – | – | – |
+| | claude-cli | codex-app-server | claude-agent-sdk | acp | api |
+|---|---|---|---|---|---|
+| Status | ✅ live | ✅ live | ✅ live | stub | stub |
+| Resume / fork | native / native | native / – | native / native | – | – |
+| Interrupt | acknowledged | acknowledged | acknowledged | – | – |
+| Push | – | steer | – | – | – |
+| Approvals | callback | callback | callback | – | – |
+| Limits stream / poll | ✅ / ✅ | ✅ / ✅ | ✅ / – | – | – |
+| Primed reset | fork | fork | – | – | – |
+
+Codex runs only over `codex app-server --listen stdio://` (`CodexAppServerSession`);
+Codex CLI 0.155 has no `mcp-server` subcommand.
 
 Full matrix, notes and what is stubbed: [docs/transports-pools-routing.md](docs/transports-pools-routing.md).
 
@@ -174,7 +177,6 @@ snapshots in the artifact but do not fabricate a completed-turn total.
 | Runtime | Status |
 |---|---|
 | Claude Code | ✅ shipped |
-| Codex CLI (`codex mcp-server`, JSON-RPC) | ✅ shipped (`CodexSession`) |
 | Codex app-server | ✅ shipped (`CodexAppServerSession`, `CodexPrimedSessions`) |
 | Claude Agent SDK | ✅ shipped (`ClaudeAgentSdkSession`; caller supplies `query`) |
 | ACP agents / direct API | typed stubs |
@@ -188,7 +190,7 @@ Opaque runtimes degrade gracefully — fewer event types, never a hard failure.
 ## Provenance
 
 Extracted from [`inixiative/foundry`](https://github.com/inixiative/foundry),
-where this drives the Artificer session. Consumed by foundry, foundry-oracle,
+where this drives the Artificer session. Consumed by foundry, oracle,
 and the inixiative bench.
 
 ## License

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inixiative/agent-session",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Drive coding-agent CLIs as persistent, streaming, event-captured sessions over interchangeable transports, with primed decision sessions, subscription pools, routing, limit polling and continuity.",
   "type": "module",
   "main": "src/index.ts",
@@ -36,11 +36,11 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@inixiative/json-rules": "^3.5.1"
+    "@inixiative/json-rules": "^3.5.4"
   },
   "devDependencies": {
     "@biomejs/biome": "2.5.2",
-    "@inixiative/config": "^0.5.67",
+    "@inixiative/config": "^0.5.78",
     "@types/bun": "1.4.2",
     "lefthook": "2.1.9",
     "typescript": "6.0.3"

package/src/claude-agent-sdk-session.ts

@@ -1,3 +1,4 @@
+import { readFileSync } from 'node:fs';
 // ---------------------------------------------------------------------------
 // ClaudeAgentSdkSession — Claude through @anthropic-ai/claude-agent-sdk
 // ---------------------------------------------------------------------------
@@ -90,6 +91,13 @@ export function sdkOptionsFromArgv(argv: readonly string[]): Record<string, unkn
       case '--append-system-prompt':
         options.systemPrompt = { type: 'preset', preset: 'claude_code', append: value() };
         break;
+      case '--append-system-prompt-file':
+        options.systemPrompt = {
+          type: 'preset',
+          preset: 'claude_code',
+          append: readFileSync(value(), 'utf8'),
+        };
+        break;
       case '--no-session-persistence':
         options.persistSession = false;
         break;

package/src/claude-code-session.ts

@@ -1,3 +1,6 @@
+import { mkdtempSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
 import {
   claudeRateLimitSnapshot,
   claudeUsageSnapshot,
@@ -92,7 +95,8 @@ export interface ClaudeCodeSessionConfig {
   /**
    * Base context to pre-load at session startup.
    *
-   * Injected via --append-system-prompt on process spawn. Persists for the
+   * Injected via --append-system-prompt-file on process spawn (a private 0600 file, removed when the
+   * process ends), so a base past Linux's 128 KiB per-argument limit still starts. Persists for the
    * entire session lifetime. Include all stable context here (system,
    * conventions, memory, architecture) so per-message delta is minimal.
    */
@@ -258,6 +262,8 @@ export class ClaudeCodeSession implements HarnessSession {
   private _permissionMode: string;
   private _defaultTimeout: number;
   private _baseContext?: string;
+  /** The private directory holding the base context file while a process runs. */
+  private _baseContextDir?: string;
   private _forking = false;
   private _awaitingForkIdentity = false;
   private _spawn?: ClaudeCodeSessionConfig['spawn'];
@@ -448,16 +454,21 @@ export class ClaudeCodeSession implements HarnessSession {
     delete env.ANTHROPIC_AUTH_TOKEN;
     for (const key of Object.keys(env)) if (env[key] === undefined) delete env[key];
 
-    if (this._spawn) {
-      this._proc = this._spawn([this._bin, ...args], { cwd: this._cwd, env });
-    } else {
-      this._proc = Bun.spawn([this._bin, ...args], {
-        cwd: this._cwd,
-        stdin: 'pipe',
-        stdout: 'pipe',
-        stderr: 'pipe',
-        env,
-      }) as unknown as PipedSubprocess;
+    try {
+      if (this._spawn) {
+        this._proc = this._spawn([this._bin, ...args], { cwd: this._cwd, env });
+      } else {
+        this._proc = Bun.spawn([this._bin, ...args], {
+          cwd: this._cwd,
+          stdin: 'pipe',
+          stdout: 'pipe',
+          stderr: 'pipe',
+          env,
+        }) as unknown as PipedSubprocess;
+      }
+    } catch (error) {
+      this._removeBaseContext();
+      throw error;
     }
 
     this._alive = true;
@@ -470,7 +481,10 @@ export class ClaudeCodeSession implements HarnessSession {
     this._readStderr();
 
     // Monitor process exit for cleanup
+    // The process read its base context file at startup; it goes when the process does.
+    const baseDir = this._baseContextDir;
     proc.exited.then(async (code) => {
+      this._removeBaseContext(baseDir);
       if (this._proc !== proc || !this._alive) return;
       this._alive = false;
       await stdoutDone; // Drain buffered terminal evidence before interpreting process exit.
@@ -734,6 +748,7 @@ export class ClaudeCodeSession implements HarnessSession {
       /* already dead */
     }
     this._proc = null;
+    this._removeBaseContext();
 
     this._emit({ kind: 'session_end', timestamp: Date.now() });
   }
@@ -1328,12 +1343,32 @@ export class ClaudeCodeSession implements HarnessSession {
 
     // Stable base context injected once at process startup
     if (this._baseContext) {
-      args.push('--append-system-prompt', this._baseContext);
+      args.push('--append-system-prompt-file', this._writeBaseContext(this._baseContext));
     }
 
     return args;
   }
 
+  /** The base context as a private file: argv carries its path, never its text. */
+  private _writeBaseContext(text: string): string {
+    this._removeBaseContext();
+    if (!swept) {
+      swept = true;
+      sweepOrphanedBaseContexts();
+    }
+    this._baseContextDir = mkdtempSync(join(tmpdir(), `${BASE_CONTEXT_PREFIX}${process.pid}-`));
+    const file = join(this._baseContextDir, 'append-system-prompt.md');
+    writeFileSync(file, text, { mode: 0o600 });
+    return file;
+  }
+
+  /** Remove a spawn's base context directory: the current one by default. */
+  private _removeBaseContext(dir = this._baseContextDir): void {
+    if (!dir) return;
+    rmSync(dir, { recursive: true, force: true });
+    if (dir === this._baseContextDir) this._baseContextDir = undefined;
+  }
+
   // ---------------------------------------------------------------------------
   // Private — event classification
   // ---------------------------------------------------------------------------
@@ -1491,3 +1526,35 @@ export class ClaudeCodeSession implements HarnessSession {
     }
   }
 }
+
+const BASE_CONTEXT_PREFIX = 'agent-session-base-';
+let swept = false;
+
+/**
+ * Remove base context files a crashed or killed process left behind (each holds a whole composed
+ * context). Runs once per process; a directory belongs to the pid in its name and goes only when
+ * that process is gone.
+ */
+export function sweepOrphanedBaseContexts(dir = tmpdir()): void {
+  let entries: string[];
+  try {
+    entries = readdirSync(dir);
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    const pid = Number(new RegExp(`^${BASE_CONTEXT_PREFIX}(\\d+)-`).exec(entry)?.[1]);
+    if (!pid || pid === process.pid || processAlive(pid)) continue;
+    rmSync(join(dir, entry), { recursive: true, force: true });
+  }
+}
+
+function processAlive(pid: number): boolean {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    // EPERM: it exists under another user.
+    return (error as NodeJS.ErrnoException).code === 'EPERM';
+  }
+}

package/src/claude-primed.ts

@@ -13,6 +13,12 @@
 //           decision pays no process start. Forks send the primed prefix
 //           byte-for-byte, so it is read from the prompt cache.
 //
+// A key's decisions run concurrently, like Codex forks: priming is
+// single-flight per key, the first decision takes the spare, and an
+// overlapping one starts its own fork (process start, no re-prime). One key
+// therefore serves every phase of a role without one phase queueing behind
+// another, and still holds a single idle spare.
+//
 // Verified live with claude 2.1.281: forks read the full primed prefix from
 // cache (cache_read equal to the primer's cache write) and write nothing to
 // history.
@@ -87,7 +93,10 @@ interface Primed {
   cleanup?: Promise<void>;
   model?: string;
   lastUsed: number;
-  busy: boolean;
+  /** Decisions currently forked from this session. */
+  inUse: number;
+  /** Replaced or evicted while in use: its transcript is deleted when the last decision finishes. */
+  stale?: 'idle' | 'capacity' | 'reprime' | 'requested' | 'close';
 }
 
 export class ClaudePrimedSessions implements PrimedSessions {
@@ -104,6 +113,8 @@ export class ClaudePrimedSessions implements PrimedSessions {
   private _idleTimer?: ReturnType<typeof setInterval>;
   /** Branches and primers with a live process, so close() can stop them. */
   private _live = new Set<Owned>();
+  /** Sessions dropped while decisions still fork from them: retired by the last one, or by close(). */
+  private _stale = new Set<Primed>();
   private _swept = false;
   private _lastPoll = 0;
 
@@ -168,14 +179,14 @@ export class ClaudePrimedSessions implements PrimedSessions {
       Math.min(this._config.idleMs, 60_000),
     );
     (this._idleTimer as { unref?: () => void }).unref?.();
-    return this._queue.run(spec.key, async () => {
+    return (async () => {
       const release = await this._slots.acquire(deadline, request.signal);
       try {
         return await this._decide(spec, request, started, deadline);
       } finally {
         release();
       }
-    });
+    })();
   }
 
   async evict(key: string): Promise<void> {
@@ -195,6 +206,8 @@ export class ClaudePrimedSessions implements PrimedSessions {
     // In-flight branches and primers are stopped, not awaited to completion.
     await Promise.all([...this._live].map((owned) => this._dispose(owned)));
     await Promise.all([...this._sessions.values()].map((s) => this._drop(s, 'close')));
+    // Their forks are stopped, so no decision still reads a stale transcript.
+    for (const session of [...this._stale]) this._retire(session, session.stale ?? 'close');
   }
 
   // -------------------------------------------------------------------------
@@ -358,7 +371,7 @@ export class ClaudePrimedSessions implements PrimedSessions {
         hash,
         instructions: spec.instructions,
         lastUsed: Date.now(),
-        busy: false,
+        inUse: 0,
       };
       this._sessions.set(spec.key, primed);
       this._emit({ type: 'primed', key: spec.key, hash, ms: 0 });
@@ -406,7 +419,7 @@ export class ClaudePrimedSessions implements PrimedSessions {
       base: base.session,
       model: observedModel(result),
       lastUsed: Date.now(),
-      busy: false,
+      inUse: 0,
     };
     this._sessions.set(spec.key, primed);
     this._emit({ type: 'primed', key: spec.key, hash, ms: Math.round(performance.now() - t0) });
@@ -422,14 +435,78 @@ export class ClaudePrimedSessions implements PrimedSessions {
     const spare = session.spare;
     session.spare = undefined;
     await this._dispose(spare);
+    // Decisions still forking from it keep its transcript until the last one finishes; on close
+    // their processes are already stopped.
+    if (session.inUse > 0 && reason !== 'close') {
+      session.stale ??= reason;
+      this._stale.add(session);
+    } else this._retire(session, reason);
+  }
+
+  private _retire(session: Primed, reason: NonNullable<Primed['stale']>): void {
+    this._stale.delete(session);
+    session.stale = undefined;
     this._deleteTranscript(session.base?.externalSessionId);
     this._emit({ type: 'evicted', key: session.key, reason });
   }
 
+  /** A decision's reference is returned; the last one out retires a stale session. */
+  private _release(session: Primed): void {
+    session.inUse--;
+    session.lastUsed = Date.now();
+    if (session.stale && !session.inUse) this._retire(session, session.stale);
+  }
+
+  /** Wait for `task` until the deadline or the signal; neither cancels it. Nothing is dispatched on expiry. */
+  private _bounded<T>(task: Promise<T>, deadline: number, signal?: AbortSignal): Promise<T> {
+    return new Promise<T>((resolve, reject) => {
+      const fail = (error: DecisionError) => {
+        clearTimeout(timer);
+        signal?.removeEventListener('abort', onAbort);
+        reject(error);
+      };
+      const onAbort = () =>
+        fail(
+          new DecisionError(
+            this._closed ? 'Primed sessions closed' : 'Decision aborted before dispatch',
+            this._closed ? 'closed' : 'aborted',
+            'not-dispatched',
+            true,
+          ),
+        );
+      const timer = setTimeout(
+        () =>
+          fail(
+            new DecisionError(
+              'Decision deadline passed waiting for its primed session',
+              'timeout',
+              'not-dispatched',
+              true,
+            ),
+          ),
+        Math.max(0, deadline - Date.now()),
+      );
+      if (signal?.aborted) return onAbort();
+      signal?.addEventListener('abort', onAbort, { once: true });
+      task.then(
+        (value) => {
+          clearTimeout(timer);
+          signal?.removeEventListener('abort', onAbort);
+          resolve(value);
+        },
+        (error) => {
+          clearTimeout(timer);
+          signal?.removeEventListener('abort', onAbort);
+          reject(error);
+        },
+      );
+    });
+  }
+
   private async _evictIdle(): Promise<void> {
     const cutoff = Date.now() - this._config.idleMs;
     for (const session of [...this._sessions.values()])
-      if (!session.busy && session.lastUsed < cutoff) await this._drop(session, 'idle');
+      if (!session.inUse && session.lastUsed < cutoff) await this._drop(session, 'idle');
   }
 
   private async _decide(
@@ -455,36 +532,72 @@ export class ClaudePrimedSessions implements PrimedSessions {
     await this._checkLimits();
     this._sweepTranscripts();
     const hash = primeHash(spec);
-    let session = this._sessions.get(spec.key),
-      prime: 'warm' | 'cold' = 'warm',
+    let prime: 'warm' | 'cold' = 'warm',
       primeMs = 0;
-    if (session && session.hash !== hash) {
-      await this._drop(session, 'reprime');
-      session = undefined;
-    }
-    if (!session) {
-      while (this._sessions.size >= this._config.maxSessions) {
-        const idle = [...this._sessions.values()]
-          .filter((s) => !s.busy)
-          .sort((a, b) => a.lastUsed - b.lastUsed)[0];
-        if (!idle) break;
-        await this._drop(idle, 'capacity');
+    // Only finding or priming the key's session is serialized: priming is single-flight per key,
+    // and the decision itself runs beside any other decision on the key. The wait is bounded by
+    // this decision's deadline and signal; a prime it started runs on (host timeout) for the next.
+    let abandoned = false,
+      taken = false;
+    const lookup = this._queue.run(spec.key, async () => {
+      if (this._closed || abandoned) throw closed();
+      let found = this._sessions.get(spec.key);
+      if (found && found.hash !== hash) {
+        await this._drop(found, 'reprime');
+        found = undefined;
       }
-      if (this._closed || signal?.aborted) throw closed();
-      const t = performance.now();
-      session = await this._prime(spec, hash, deadline);
-      primeMs = Math.round(performance.now() - t);
-      prime = 'cold';
-    }
-    await session.cleanup;
-    if (this._closed || signal?.aborted) throw closed();
-    session.busy = true;
-    session.lastUsed = Date.now();
-    const t1 = performance.now();
-    let branch = session.spare;
-    session.spare = undefined;
+      if (!found) {
+        while (this._sessions.size >= this._config.maxSessions) {
+          const idle = [...this._sessions.values()]
+            .filter((s) => !s.inUse)
+            .sort((a, b) => a.lastUsed - b.lastUsed)[0];
+          if (!idle) break;
+          await this._drop(idle, 'capacity');
+        }
+        if (this._closed || abandoned) throw closed();
+        const t = performance.now();
+        found = await this._prime(spec, hash, Date.now() + this._config.timeoutMs);
+        primeMs = Math.round(performance.now() - t);
+        prime = 'cold';
+        // Closed while priming: the drop above has run, so this session is dropped here.
+        if (this._closed) {
+          await this._drop(found, 'close');
+          throw closed();
+        }
+      }
+      if (abandoned) return found;
+      found.inUse++;
+      taken = true;
+      return found;
+    });
+    lookup.catch(() => undefined);
+    const session = await this._bounded(lookup, deadline, signal).catch((error: unknown) => {
+      abandoned = true;
+      // Granted between the deadline firing and this handler: hand the reference back.
+      void lookup.then(
+        (found) => {
+          if (taken) this._release(found);
+        },
+        () => undefined,
+      );
+      throw error;
+    });
+    let branch: Owned | undefined;
     let admissionId: string | undefined;
+    const t1 = performance.now();
     try {
+      await this._bounded(session.cleanup ?? Promise.resolve(), deadline, signal);
+      if (this._closed || signal?.aborted) throw closed();
+      if (Date.now() >= deadline)
+        throw new DecisionError(
+          'Decision deadline passed before dispatch',
+          'timeout',
+          'not-dispatched',
+          true,
+        );
+      session.lastUsed = Date.now();
+      branch = session.spare;
+      session.spare = undefined;
       if (!branch?.session.alive) {
         await this._dispose(branch);
         branch = this._branch(session);
@@ -627,13 +740,18 @@ export class ClaudePrimedSessions implements PrimedSessions {
         timing: { waitMs, primeMs, branchMs, turnMs },
       };
     } finally {
-      session.busy = false;
-      session.lastUsed = Date.now();
+      this._release(session);
       // The decision settled on its native terminal; process exit and the next spare are off the caller's path.
       const done = branch;
       session.cleanup = (async () => {
         await this._dispose(done);
-        if (this._config.spare && !this._closed && this._sessions.get(spec.key) === session) {
+        // One spare per key: an overlapping decision that already refilled it wins.
+        if (
+          this._config.spare &&
+          !this._closed &&
+          !session.spare &&
+          this._sessions.get(spec.key) === session
+        ) {
           const spare = this._branch(session);
           session.spare = spare;
           await spare.session.start().catch(() => {