@jetcrab/pi-desk 1.1.18-dev → 1.1.21

package/src/common/l4_foundation/locale/l4-locale-messages.ts

@@ -40,6 +40,14 @@ export const L4_LOCALE_MESSAGES = {
       authenticationRequired: 'Please sign in',
       authUnavailable: 'Sign-in service is not ready',
       shuttingDown: 'The service is shutting down',
+      markdownPending: 'Not completed',
+      markdownCompleted: 'Completed',
+      markdownProgress: 'In progress',
+      markdownNote: 'Note',
+      markdownTip: 'Tip',
+      markdownImportant: 'Important',
+      markdownWarning: 'Warning',
+      markdownCaution: 'Caution',
       codeReadOnly: 'Read-only code file',
       codeLoading: 'Loading code viewer…',
       codeFailed: 'Could not load code viewer. Reopen the file.',
@@ -118,6 +126,14 @@ export const L4_LOCALE_MESSAGES = {
       authenticationRequired: '请先登录',
       authUnavailable: '登录认证尚未就绪',
       shuttingDown: '服务正在关闭',
+      markdownPending: '未完成',
+      markdownCompleted: '已完成',
+      markdownProgress: '进行中',
+      markdownNote: '说明',
+      markdownTip: '提示',
+      markdownImportant: '重要',
+      markdownWarning: '警告',
+      markdownCaution: '注意',
       codeReadOnly: '只读代码文件',
       codeLoading: '正在加载代码查看器…',
       codeFailed: '代码查看器加载失败，请重新打开文件。',

package/src/instrumentation.ts

@@ -33,7 +33,6 @@ export async function register(): Promise<void> {
   })
   const manage = getL2WorkSessionManage()
   initializeL2PluginManagement({
-    refreshPluginMessages: () => manage.refreshPluginMessages(),
     runPluginRestart: (operation) => manage.runPluginRestart(operation)
   })
   registerL1WebAuthRuntime(getL1WebAuthRuntime())
@@ -70,7 +69,6 @@ export async function register(): Promise<void> {
   setTimeout(() => {
     void pluginRuntime.initialize().then(
       () => {
-        manage.refreshPluginMessages()
         console.info('[Pi Desk][Instrumentation] 插件加载尝试完成，基础聊天不依赖插件就绪')
       },
       (error: unknown) => {

package/src/server/l1_entry/api/l1-project-read-routes.ts

@@ -2,9 +2,9 @@ import 'server-only'
 import * as contracts from '@common/l3_modules/project-files/l3-project-files-contract'
 import {
   getL4WorkSessionProjectFile,
-  listL4WorkSessionProjectFiles,
-  searchL4WorkSessionProjectFiles
+  listL4WorkSessionProjectFiles
 } from '@server/l4_foundation/file/l4-work-session-project-file'
+import { searchL4ProjectFiles } from '@server/l4_foundation/file/l4-project-search'
 import {
   getL4WorkSessionGitHeads,
   getL4WorkSessionGitSnapshot
@@ -20,8 +20,10 @@ import { createL1ProjectRoute } from './l1-project-route'
 export const projectFileList = createL1ProjectRoute(contracts.L3ProjectFileList, (input) =>
   listL4WorkSessionProjectFiles(input.cwd, input.path)
 )
-export const projectFileSearch = createL1ProjectRoute(contracts.L3ProjectFileSearch, (input) =>
-  searchL4WorkSessionProjectFiles(input.cwd, input.query)
+export const projectFileSearch = createL1ProjectRoute(
+  contracts.L3ProjectFileSearch,
+  ({ cwd, query, scope, caseSensitive, wholeWord, regex }, signal) =>
+    searchL4ProjectFiles(cwd, { query, scope, caseSensitive, wholeWord, regex }, signal)
 )
 export const projectFileGet = createL1ProjectRoute(contracts.L3ProjectFileGet, (input) =>
   getL4WorkSessionProjectFile(input.cwd, input.path, input.imagePreviewMode)

package/src/server/l1_entry/api/l1-project-route.ts

@@ -13,7 +13,7 @@ import { createL1WorkSessionGitErrorResponse } from './l1-work-session-git-error
 
 export function createL1ProjectRoute<I extends contracts.L3ProjectReadContext, O>(
   contract: { path: string; request: z.ZodType<I>; response: z.ZodType<O> },
-  execute: (input: I) => Promise<O>
+  execute: (input: I, signal: AbortSignal) => Promise<O>
 ): (request: Request) => Promise<Response> {
   return async (request: Request): Promise<Response> => {
     let payload: unknown
@@ -49,19 +49,20 @@ export function createL1ProjectRoute<I extends contracts.L3ProjectReadContext, O
         input.cwd = context.cwd
         isCurrent = context.isCurrent
       }
-      const result = await execute(input)
+      const result = await execute(input, request.signal)
       if (isCurrent && !isCurrent())
         return createL4ApiErrorResponse(409, '工作会话项目已变化', {
           key: 'errors:projectChanged'
         })
       return createL4ApiSuccessResponse(contract.response.parse(result))
     } catch (error) {
-      console.warn('[Pi Desk][Project] 项目请求失败', {
-        path: contract.path,
-        cwd: input.cwd,
-        workId: input.workId,
-        error: error instanceof Error ? error.message : String(error)
-      })
+      if (!request.signal.aborted)
+        console.warn('[Pi Desk][Project] 项目请求失败', {
+          path: contract.path,
+          cwd: input.cwd,
+          workId: input.workId,
+          error: error instanceof Error ? error.message : String(error)
+        })
       if (getL4WorkSessionGitErrorKind(error) === 'read-failed') {
         return createL4ApiErrorResponse(
           500,

package/src/server/l1_entry/api/l1-work-session-file-error.ts

@@ -1,6 +1,7 @@
 import 'server-only'
 
 import { getL4WorkSessionProjectFileErrorKind } from '@server/l4_foundation/file/l4-work-session-project-file'
+import { L4ProjectSearchError } from '@server/l4_foundation/file/l4-project-search'
 import { createL4ApiErrorResponse } from '@server/l4_foundation/http/l4-api-response'
 
 export function createL1WorkSessionFileErrorResponse(error: unknown): Response | null {
@@ -11,6 +12,28 @@ export function createL1WorkSessionFileErrorResponse(error: unknown): Response |
     return createL4ApiErrorResponse(409, '工作会话项目已变化', { key: 'errors:projectChanged' })
   }
 
+  if (error instanceof Error && error.name === 'AbortError') {
+    return createL4ApiErrorResponse(499, '项目搜索已取消', { key: 'errors:projectSearchCancelled' })
+  }
+  if (error instanceof L4ProjectSearchError) {
+    switch (error.kind) {
+      case 'invalid-pattern':
+        return createL4ApiErrorResponse(400, error.message, {
+          key: 'errors:projectSearchPatternInvalid'
+        })
+      case 'unavailable':
+        return createL4ApiErrorResponse(503, error.message, {
+          key: 'errors:projectSearchUnavailable'
+        })
+      case 'timeout':
+        return createL4ApiErrorResponse(504, error.message, { key: 'errors:projectSearchTimeout' })
+      case 'read-failed':
+        return createL4ApiErrorResponse(500, error.message, {
+          key: 'errors:projectSearchReadFailed'
+        })
+    }
+  }
+
   switch (getL4WorkSessionProjectFileErrorKind(error)) {
     case 'not-found':
       return createL4ApiErrorResponse(404, '文件或目录不存在', { key: 'errors:fileMissing' })

package/src/server/l1_entry/node/l1-server.ts

@@ -1,6 +1,7 @@
 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http'
 import type { Duplex } from 'node:stream'
 import { URL } from 'node:url'
+import { L2BuildLoginHref, L2ResolveAuthReturnTo } from '@common/l2_biz/auth/l2-auth-return-to'
 import {
   L4_APP_WEBSOCKET_ENDPOINT,
   L4_APP_WEBSOCKET_PROTOCOL,
@@ -97,15 +98,16 @@ function allowHttpRequest(
   response: ServerResponse,
   hostname: string
 ): boolean {
-  let pathname: string
+  let requestUrl: URL
   try {
-    pathname = new URL(request.url ?? '/', `http://${request.headers.host ?? hostname}`).pathname
+    requestUrl = new URL(request.url ?? '/', `http://${request.headers.host ?? hostname}`)
   } catch {
     response.statusCode = 400
     response.end('Bad Request')
     return false
   }
 
+  const pathname = requestUrl.pathname
   if (isPublicHttpPath(pathname) && pathname !== LOGIN_PAGE_PATH) return true
 
   const authRuntime = getL1WebAuthRuntimeBridge()
@@ -119,9 +121,11 @@ function allowHttpRequest(
   }
   if (pathname === LOGIN_PAGE_PATH) {
     if (!authenticated) return true
+    const returnTo = L2ResolveAuthReturnTo(requestUrl.searchParams.get('returnTo'))
     response.statusCode = 302
     response.setHeader('Cache-Control', 'no-store')
-    response.setHeader('Location', '/')
+    // 保留已校验的原路径，避免将 /.//host 规范化为协议相对 Location。
+    response.setHeader('Location', encodeURI(returnTo).replace(/%25/g, '%'))
     response.end()
     return false
   }
@@ -146,7 +150,7 @@ function allowHttpRequest(
 
   response.statusCode = 302
   response.setHeader('Cache-Control', 'no-store')
-  response.setHeader('Location', LOGIN_PAGE_PATH)
+  response.setHeader('Location', L2BuildLoginHref(`${requestUrl.pathname}${requestUrl.search}`))
   response.end()
   return false
 }

package/src/server/l2_biz/plugin-management/l2-plugin-management.ts

@@ -112,7 +112,6 @@ interface L2PluginPreparedMutation {
 }
 
 export interface L2PluginManagementWorkSessions {
-  refreshPluginMessages: () => void
   runPluginRestart: <T>(operation: () => Promise<T>) => Promise<T>
 }
 
@@ -621,7 +620,6 @@ export class L2PluginManagement {
         if (change.current?.path) clearL4PiPluginNativeDiagnostics(change.current.path)
         if (change.previous?.path) clearL4PiPluginNativeDiagnostics(change.previous.path)
         this.capabilityCache = null
-        this.workSessions.refreshPluginMessages()
         this.operations.delete(change.source)
       } catch (error) {
         this.setOperation(change.source, 'failed', errorMessage(error))
@@ -981,7 +979,6 @@ export class L2PluginManagement {
         this.updates.clear(operationSource)
         this.updates.clear(source)
         this.capabilityCache = null
-        this.workSessions.refreshPluginMessages()
       },
       this.lifetime.signal,
       waiting

package/src/server/l2_biz/work-session/l2-work-session-chat-runtime.ts

@@ -108,7 +108,6 @@ interface L2WorkSessionChatRecord {
   source: L2ChatSource
   state: L2ChatSourceState
   sourceEventVersion: number
-  forceFullSync: boolean
   rawTemporaryMessages: Map<string, L4PiChatMessage>
   metadata: L2WorkSessionChatMetadata
   mainRunning: boolean
@@ -302,20 +301,6 @@ export class L2WorkSessionChatRuntime {
     return isCurrent() ? { cwd, isCurrent } : null
   }
 
-  refreshPluginMessages(): void {
-    for (const record of this.recordsByWorkId.values()) {
-      if (record.state.runtime.presentationMode === 'basic') continue
-      try {
-        this.reprojectRecord(record, record.state.runtime.presentationMode)
-      } catch (error) {
-        console.error('[Pi Desk][WorkSessionChatRuntime] 插件消息刷新失败，保留已有聊天', {
-          workId: record.source.workId,
-          message: error instanceof Error ? error.message : String(error)
-        })
-      }
-    }
-  }
-
   setPresentation(source: L2ChatSource, mode: L2ChatMode): Promise<void> {
     const record = this.currentRecord(source)
     return this.enqueueCommand(record, async () => {
@@ -363,7 +348,6 @@ export class L2WorkSessionChatRuntime {
       temporaryMessages,
       runtime: { ...record.state.runtime, presentationMode: mode }
     }
-    record.forceFullSync = true
     record.sourceEventVersion += 1
     this.publish({
       type: 'source_event',
@@ -380,16 +364,14 @@ export class L2WorkSessionChatRuntime {
 
   private async syncRecordRuntime(record: L2WorkSessionChatRecord): Promise<void> {
     const source = record.source
-    const runtime = L2ChatRuntimeSchema.parse({
-      ...(await getL4PiWorkSessionRuntime(source.sessionId).readChatRuntime()),
+    const runtime = await getL4PiWorkSessionRuntime(source.sessionId).readChatRuntime()
+    const nextRuntime = L2ChatRuntimeSchema.parse({
+      ...runtime,
       presentationMode: record.state.runtime.presentationMode
     })
     if (!this.isCurrentSource(source)) return
-    if (!sameRuntime(record.state.runtime, runtime))
-      this.applySourceEvent(source, { type: 'runtime_update', runtime })
-    if (runtime.extensionMode === 'basic' && record.state.runtime.presentationMode !== 'basic') {
-      this.reprojectRecord(record, 'basic')
-    }
+    if (!sameRuntime(record.state.runtime, nextRuntime))
+      this.applySourceEvent(source, { type: 'runtime_update', runtime: nextRuntime })
   }
 
   createSync(sourceInput: L2ChatSource, cursor: L2ChatCursor): L2PreparedChatSourceSync {
@@ -413,24 +395,23 @@ export class L2WorkSessionChatRuntime {
       })
     }
 
-    const event: L2ChatSessionSyncEvent =
-      cursor !== null && cursorMatches && !record.forceFullSync
-        ? {
-            type: 'session_sync',
-            mode: 'incremental',
-            baseCursor: cursor,
-            messages: messages.slice(cursor.index + 1).map(withoutL3ConversationMessageDetail),
-            temporaryMessages,
-            runtime
-          }
-        : {
-            type: 'session_sync',
-            mode: 'full',
-            baseCursor: null,
-            messages: messages.map(withoutL3ConversationMessageDetail),
-            temporaryMessages,
-            runtime
-          }
+    const event: L2ChatSessionSyncEvent = cursorMatches
+      ? {
+          type: 'session_sync',
+          mode: 'incremental',
+          baseCursor: cursor,
+          messages: messages.slice(cursor.index + 1).map(withoutL3ConversationMessageDetail),
+          temporaryMessages,
+          runtime
+        }
+      : {
+          type: 'session_sync',
+          mode: 'full',
+          baseCursor: null,
+          messages: messages.map(withoutL3ConversationMessageDetail),
+          temporaryMessages,
+          runtime
+        }
 
     return { event, watermark: record.sourceEventVersion }
   }
@@ -548,12 +529,6 @@ export class L2WorkSessionChatRuntime {
       } finally {
         if (this.recordsByWorkId.get(source.workId) === record) {
           await this.syncRecordRuntime(record)
-          if (
-            record.state.runtime.extensionMode === 'basic' &&
-            record.state.runtime.presentationMode !== 'basic'
-          ) {
-            this.reprojectRecord(record, 'basic')
-          }
         }
       }
     })
@@ -685,7 +660,6 @@ export class L2WorkSessionChatRuntime {
       source,
       state,
       sourceEventVersion: 0,
-      forceFullSync: isL4PiDeskSafeMode(),
       rawTemporaryMessages: new Map(),
       metadata: {
         sessionTitle: snapshot.sessionName ?? firstUserTitle,
@@ -714,6 +688,9 @@ export class L2WorkSessionChatRuntime {
     if (this.recordsByWorkId.get(record.source.workId) !== record) return
     const previousMetadata = record.metadata
     const previousStatus = this.statusForRecord(record)
+    const basic =
+      record.state.runtime.extensionMode === 'basic' ||
+      record.state.runtime.presentationMode === 'basic'
 
     switch (event.type) {
       case 'message_start':
@@ -726,7 +703,7 @@ export class L2WorkSessionChatRuntime {
             record.source,
             false,
             'temporary',
-            record.state.runtime.presentationMode === 'basic'
+            basic
           )
         })
         return
@@ -744,7 +721,7 @@ export class L2WorkSessionChatRuntime {
             record.source,
             false,
             'update',
-            record.state.runtime.presentationMode === 'basic'
+            basic
           )
         )
         if (update) this.applySourceEvent(record.source, update)
@@ -761,7 +738,7 @@ export class L2WorkSessionChatRuntime {
           record.source,
           false,
           'final',
-          record.state.runtime.presentationMode === 'basic'
+          basic
         )
         const update = buildL3ConversationMessageUpdate(current, publicFinal)
         if (update) this.applySourceEvent(record.source, update)
@@ -801,12 +778,6 @@ export class L2WorkSessionChatRuntime {
         if (!sameRuntime(record.state.runtime, runtime)) {
           this.applySourceEvent(record.source, { type: 'runtime_update', runtime })
         }
-        if (
-          runtime.extensionMode === 'basic' &&
-          record.state.runtime.presentationMode !== 'basic'
-        ) {
-          this.reprojectRecord(record, 'basic')
-        }
         return
       }
       case 'agent_started':
@@ -861,7 +832,8 @@ export class L2WorkSessionChatRuntime {
       record.source,
       true,
       'final',
-      record.state.runtime.presentationMode === 'basic'
+      record.state.runtime.extensionMode === 'basic' ||
+        record.state.runtime.presentationMode === 'basic'
     )
     record.state = { ...record.state, temporaryMessages }
   }

package/src/server/l2_biz/work-session/l2-work-session-manage.ts

@@ -250,10 +250,6 @@ export class WorkSessionManage {
     })
   }
 
-  refreshPluginMessages(): void {
-    this.chat.refreshPluginMessages()
-  }
-
   runPluginRestart<T>(operation: () => Promise<T>): Promise<T> {
     return this.runExclusive(async () => {
       await this.ensureHydrated()

package/src/server/l4_foundation/file/l4-project-file-index.ts

@@ -0,0 +1,276 @@
+import 'server-only'
+
+import { execFile } from 'node:child_process'
+import { readdir, realpath } from 'node:fs/promises'
+import { basename, relative, resolve, sep } from 'node:path'
+import { promisify } from 'node:util'
+import { listL4WorkSessionGitRepositoryRoots } from '@server/l4_foundation/git/l4-work-session-git'
+import { getL4FileSystemKey as fileSystemKey } from './l4-file-path'
+
+const execFileAsync = promisify(execFile)
+const SEARCH_CACHE_TTL_MS = 30_000
+const SEARCH_CACHE_MAX_CWDS = 20
+const SEARCH_INDEX_MAX_FILES = 50_000
+
+export const IGNORED_NAMES = new Set([
+  '.git',
+  'node_modules',
+  '.next',
+  'dist',
+  'build',
+  'coverage',
+  '.turbo'
+])
+
+interface SearchIndexCacheEntry {
+  files: string[]
+  truncated: boolean
+  expiresAt: number
+}
+
+const searchIndexCache = new Map<string, SearchIndexCacheEntry>()
+const pendingSearchIndexes = new Map<string, Promise<SearchIndexCacheEntry>>()
+
+function joinProtocolPath(parent: string, name: string): string {
+  return parent ? `${parent}/${name}` : name
+}
+
+export function isSupportedProtocolName(name: string): boolean {
+  return name.length > 0 && !name.includes('/') && !name.includes('\\') && !name.includes('\0')
+}
+
+function pathContainsIgnoredSegment(path: string): boolean {
+  return path.split('/').some((segment) => IGNORED_NAMES.has(segment))
+}
+
+export function invalidateSearchIndex(root: string): void {
+  const key = fileSystemKey(root)
+  searchIndexCache.delete(key)
+  pendingSearchIndexes.delete(key)
+}
+
+const GIT_SEARCH_OPTIONS = {
+  timeout: 10_000,
+  maxBuffer: 64 * 1024 * 1024,
+  env: { ...process.env, LC_ALL: 'C', GIT_OPTIONAL_LOCKS: '0' }
+}
+
+async function listFilesWithContainingGit(
+  root: string
+): Promise<{ files: string[]; truncated: boolean } | null> {
+  try {
+    const { stdout: topLevelOutput } = await execFileAsync(
+      'git',
+      ['-C', root, 'rev-parse', '--show-toplevel'],
+      GIT_SEARCH_OPTIONS
+    )
+    const topLevel = await realpath(topLevelOutput.trim())
+    const prefix = relative(topLevel, root).split(sep).join('/')
+    const { stdout } = await execFileAsync(
+      'git',
+      [
+        '-C',
+        topLevel,
+        'ls-files',
+        '--full-name',
+        '--cached',
+        '--others',
+        '--exclude-standard',
+        '-z',
+        '--',
+        prefix || '.'
+      ],
+      GIT_SEARCH_OPTIONS
+    )
+    const prefixWithSlash = prefix ? `${prefix}/` : ''
+    const all = stdout
+      .split('\0')
+      .flatMap((path) => {
+        if (!path) return []
+        const projectPath = prefixWithSlash
+          ? path.startsWith(prefixWithSlash)
+            ? path.slice(prefixWithSlash.length)
+            : ''
+          : path
+        return projectPath ? [projectPath] : []
+      })
+      .filter(
+        (path) =>
+          isSupportedProtocolName(basename(path)) &&
+          !path.includes('\\') &&
+          !pathContainsIgnoredSegment(path)
+      )
+    return {
+      files: all.slice(0, SEARCH_INDEX_MAX_FILES),
+      truncated: all.length > SEARCH_INDEX_MAX_FILES
+    }
+  } catch {
+    return null
+  }
+}
+
+function isPathInsideRepository(path: string, repositoryRoot: string): boolean {
+  return path === repositoryRoot || path.startsWith(`${repositoryRoot}/`)
+}
+
+async function listFilesInRepository(
+  projectRoot: string,
+  repositoryRoot: string,
+  nestedRepositoryRoots: readonly string[]
+): Promise<{ files: string[]; truncated: boolean } | null> {
+  const absoluteRoot = repositoryRoot
+    ? resolve(projectRoot, ...repositoryRoot.split('/'))
+    : projectRoot
+  try {
+    const { stdout } = await execFileAsync(
+      'git',
+      [
+        '-C',
+        absoluteRoot,
+        'ls-files',
+        '--full-name',
+        '--cached',
+        '--others',
+        '--exclude-standard',
+        '-z'
+      ],
+      GIT_SEARCH_OPTIONS
+    )
+    const files = stdout.split('\0').flatMap((path) => {
+      if (!path || path.includes('\\') || pathContainsIgnoredSegment(path)) return []
+      const projectPath = joinProtocolPath(repositoryRoot, path)
+      if (
+        nestedRepositoryRoots.some((nestedRoot) => isPathInsideRepository(projectPath, nestedRoot))
+      ) {
+        return []
+      }
+      return isSupportedProtocolName(basename(projectPath)) ? [projectPath] : []
+    })
+    return {
+      files: files.slice(0, SEARCH_INDEX_MAX_FILES),
+      truncated: files.length > SEARCH_INDEX_MAX_FILES
+    }
+  } catch {
+    return null
+  }
+}
+
+async function listFilesWithWalk(
+  root: string,
+  excludedRepositoryRoots: readonly string[] = []
+): Promise<{ files: string[]; truncated: boolean }> {
+  const files: string[] = []
+  const queue: Array<{ absolute: string; relative: string }> = [{ absolute: root, relative: '' }]
+  let queueIndex = 0
+
+  while (queueIndex < queue.length) {
+    const current = queue[queueIndex]!
+    queueIndex += 1
+    let dirents
+    try {
+      dirents = await readdir(current.absolute, { withFileTypes: true })
+    } catch {
+      continue
+    }
+
+    for (const entry of dirents) {
+      if (IGNORED_NAMES.has(entry.name) || !isSupportedProtocolName(entry.name)) continue
+      const childRelative = joinProtocolPath(current.relative, entry.name)
+      if (entry.isDirectory()) {
+        if (excludedRepositoryRoots.includes(childRelative)) continue
+        queue.push({ absolute: resolve(current.absolute, entry.name), relative: childRelative })
+        continue
+      }
+      if (!entry.isFile()) continue
+      files.push(childRelative)
+      if (files.length >= SEARCH_INDEX_MAX_FILES) return { files, truncated: true }
+    }
+  }
+
+  return { files, truncated: false }
+}
+
+async function listFilesWithRepositoryRoots(
+  projectRoot: string,
+  repositoryRoots: readonly string[]
+): Promise<{ files: string[]; truncated: boolean }> {
+  const files = new Set<string>()
+  let truncated = false
+  const hasProjectRootRepository = repositoryRoots.includes('')
+
+  if (!hasProjectRootRepository) {
+    const workspaceFiles = await listFilesWithWalk(projectRoot, repositoryRoots.filter(Boolean))
+    for (const path of workspaceFiles.files) files.add(path)
+    truncated ||= workspaceFiles.truncated
+  }
+
+  for (const repositoryRoot of repositoryRoots) {
+    const nestedRoots = repositoryRoots.filter(
+      (candidate) =>
+        candidate !== repositoryRoot &&
+        (repositoryRoot === '' || candidate.startsWith(`${repositoryRoot}/`))
+    )
+    let listing = await listFilesInRepository(projectRoot, repositoryRoot, nestedRoots)
+    if (!listing) {
+      const absoluteRoot = repositoryRoot
+        ? resolve(projectRoot, ...repositoryRoot.split('/'))
+        : projectRoot
+      const nestedRelativeRoots = nestedRoots.map((root) =>
+        repositoryRoot ? root.slice(repositoryRoot.length + 1) : root
+      )
+      const fallback = await listFilesWithWalk(absoluteRoot, nestedRelativeRoots)
+      listing = {
+        files: fallback.files.map((path) => joinProtocolPath(repositoryRoot, path)),
+        truncated: fallback.truncated
+      }
+    }
+    for (const path of listing.files) {
+      files.add(path)
+      if (files.size >= SEARCH_INDEX_MAX_FILES) {
+        return { files: [...files], truncated: true }
+      }
+    }
+    truncated ||= listing.truncated
+  }
+
+  return { files: [...files], truncated }
+}
+
+export async function getSearchIndex(root: string): Promise<SearchIndexCacheEntry> {
+  const key = fileSystemKey(root)
+  const now = Date.now()
+  const cached = searchIndexCache.get(key)
+  if (cached && cached.expiresAt > now) return cached
+
+  const active = pendingSearchIndexes.get(key)
+  if (active) return active
+
+  const load: Promise<SearchIndexCacheEntry> = Promise.resolve().then(async () => {
+    const repositoryRoots = await listL4WorkSessionGitRepositoryRoots(root)
+    const listing =
+      repositoryRoots.length > 0
+        ? await listFilesWithRepositoryRoots(root, repositoryRoots)
+        : ((await listFilesWithContainingGit(root)) ?? (await listFilesWithWalk(root)))
+    const next: SearchIndexCacheEntry = {
+      ...listing,
+      expiresAt: now + SEARCH_CACHE_TTL_MS
+    }
+    if (pendingSearchIndexes.get(key) === load) {
+      for (const [cacheKey, entry] of searchIndexCache) {
+        if (entry.expiresAt <= Date.now()) searchIndexCache.delete(cacheKey)
+      }
+      while (searchIndexCache.size >= SEARCH_CACHE_MAX_CWDS) {
+        const oldestKey = searchIndexCache.keys().next().value as string
+        searchIndexCache.delete(oldestKey)
+      }
+      searchIndexCache.set(key, next)
+    }
+    return next
+  })
+  pendingSearchIndexes.set(key, load)
+  try {
+    return await load
+  } finally {
+    if (pendingSearchIndexes.get(key) === load) pendingSearchIndexes.delete(key)
+  }
+}