@jmfederico/pi-web 1.202607.2 → 1.202608.0

package/dist/server/sessions/sessionFileHeader.js

@@ -0,0 +1,117 @@
+import { open } from "node:fs/promises";
+/** Chunk size for streaming a session file's header region. */
+const HEADER_READ_CHUNK_BYTES = 8192;
+/**
+ * How far to look for the first parseable line. Headers are single-line and
+ * written at creation; the bound keeps a pathological file with a huge
+ * non-header prefix from dragging the listing and open paths.
+ */
+const HEADER_READ_CAP_BYTES = 262144;
+const NEWLINE = 0x0a; // `\n`
+const CARRIAGE_RETURN = 0x0d; // `\r`
+/**
+ * Read a Pi session file's header without loading the whole transcript.
+ *
+ * Streams the file in chunks and stops at the first parseable line, mirroring
+ * the SDK rule the summary scanner follows: unparseable lines are skipped
+ * until one parses, and a parseable non-session entry disqualifies the file.
+ * The search is bounded to the header region; if no parseable line completes
+ * within the bound, the file is treated as headerless.
+ *
+ * Returns undefined for any unreadable file or file without a usable session
+ * header: callers use this to verify links between sessions, so an unusable
+ * header must behave the same as a missing one rather than throwing.
+ */
+export async function readSessionHeaderSummary(sessionFile) {
+    let file;
+    try {
+        file = await open(sessionFile, "r");
+        return await streamHeaderSummary(file);
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        await file?.close().catch(() => undefined);
+    }
+}
+async function streamHeaderSummary(file) {
+    let pending = Buffer.alloc(0); // bytes of the current line, not yet newline-terminated
+    let position = 0;
+    for (;;) {
+        const chunk = Buffer.alloc(HEADER_READ_CHUNK_BYTES);
+        const { bytesRead } = await file.read(chunk, 0, chunk.length, position);
+        if (bytesRead === 0) {
+            // End of file: an unterminated tail is the final line (readline parity).
+            const outcome = classifyHeaderLine(pending);
+            return outcome === "skip" ? undefined : outcome;
+        }
+        position += bytesRead;
+        let chunkStart = 0;
+        for (;;) {
+            const newlineAt = chunk.indexOf(NEWLINE, chunkStart);
+            if (newlineAt === -1) {
+                pending = Buffer.concat([pending, chunk.subarray(chunkStart, bytesRead)]);
+                break;
+            }
+            const line = Buffer.concat([pending, chunk.subarray(chunkStart, newlineAt)]);
+            const outcome = classifyHeaderLine(line);
+            if (outcome !== "skip")
+                return outcome;
+            pending = Buffer.alloc(0);
+            chunkStart = newlineAt + 1;
+        }
+        // Bounded search: once the cap is consumed, leave the unterminated tail
+        // unclassified and report no header rather than reading without limit.
+        if (position >= HEADER_READ_CAP_BYTES)
+            return undefined;
+    }
+}
+/**
+ * Classify one candidate line, mirroring the SDK's first-parseable-entry rule
+ * that the summary scanner applies: unparseable lines are skipped until one
+ * parses, and the first parseable line decides the file's fate. Returns
+ * "skip" to keep looking, undefined to reject, or the parsed header.
+ */
+function classifyHeaderLine(lineBytes) {
+    // Readline parity: a CRLF file yields lines without their trailing `\r`.
+    let end = lineBytes.length;
+    if (end > 0 && lineBytes[end - 1] === CARRIAGE_RETURN)
+        end -= 1;
+    const entry = tryParseEntry(lineBytes.toString("utf8", 0, end));
+    if (entry === undefined)
+        return "skip";
+    if (entry["type"] !== "session")
+        return undefined;
+    const id = entry["id"];
+    // The scanner skips headers without a usable id; the reader must agree so a
+    // link verified here can never point at an unusable session.
+    if (typeof id !== "string" || id === "")
+        return undefined;
+    const cwd = nonEmptyStringField(entry, "cwd");
+    const parentSession = nonEmptyStringField(entry, "parentSession");
+    return {
+        id,
+        ...(cwd === undefined ? {} : { cwd }),
+        ...(parentSession === undefined ? {} : { parentSession }),
+    };
+}
+function tryParseEntry(line) {
+    if (line.trim() === "")
+        return undefined;
+    try {
+        const parsed = JSON.parse(line);
+        return isRecord(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function nonEmptyStringField(header, key) {
+    const value = header[key];
+    return typeof value === "string" && value !== "" ? value : undefined;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+//# sourceMappingURL=sessionFileHeader.js.map

package/dist/server/sessions/sessionFileHeader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionFileHeader.js","sourceRoot":"","sources":["../../../src/server/sessions/sessionFileHeader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AAEzD,+DAA+D;AAC/D,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO;AAC7B,MAAM,eAAe,GAAG,IAAI,CAAC,CAAC,OAAO;AAkBrC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,WAAmB;IAChE,IAAI,IAA4B,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACpC,OAAO,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAgB;IACjD,IAAI,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,wDAAwD;IACvF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACpD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxE,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,yEAAyE;YACzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC5C,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAClD,CAAC;QACD,QAAQ,IAAI,SAAS,CAAC;QACtB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,SAAS,CAAC;YACR,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC1E,MAAM;YACR,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,MAAM;gBAAE,OAAO,OAAO,CAAC;YACvC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,UAAU,GAAG,SAAS,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,IAAI,QAAQ,IAAI,qBAAqB;YAAE,OAAO,SAAS,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,yEAAyE;IACzE,IAAI,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;IAC3B,IAAI,GAAG,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,eAAe;QAAE,GAAG,IAAI,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,4EAA4E;IAC5E,6DAA6D;IAC7D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAClE,OAAO;QACL,EAAE;QACF,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QACrC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA+B,EAAE,GAAW;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/dist/server/sessions/sessionRoutes.js

@@ -1,4 +1,4 @@
-import { SESSION_TREE_CUSTOM_INSTRUCTIONS_MAX_LENGTH, SESSION_UNREAD_CATALOG_ID_MAX_LENGTH, SESSION_UNREAD_CWD_MAX_LENGTH, SESSION_UNREAD_SESSION_ID_MAX_LENGTH } from "../../shared/apiTypes.js";
+import { ASK_USER_ID_MAX_LENGTH, ASK_USER_OPTION_LIMIT, ASK_USER_OTHER_TEXT_MAX_LENGTH, ASK_USER_QUESTION_LIMIT, EXTENSION_DIALOG_ID_MAX_LENGTH, EXTENSION_DIALOG_INPUT_MAX_LENGTH, SESSION_TREE_CUSTOM_INSTRUCTIONS_MAX_LENGTH, SESSION_UNREAD_CATALOG_ID_MAX_LENGTH, SESSION_UNREAD_CWD_MAX_LENGTH, SESSION_UNREAD_SESSION_ID_MAX_LENGTH } from "../../shared/apiTypes.js";
 import { projectBrowserMessageResponse } from "../browserMessageProjection.js";
 import { normalizeRequestCwd } from "../workingDirectory.js";
 import { normalizeSessionCleanupRequest } from "./sessionCleanup.js";
@@ -20,7 +20,11 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     app.post(`${prefix}/sessions`, async (request, reply) => {
         try {
             const body = requireRecord(request.body);
-            return await sessions.start(normalizeRequestCwd(requireString(body, "cwd")));
+            // An opaque label the caller uses to recognise its own construction's
+            // startup reports. Optional: only a browser row waiting for a session id
+            // has anything to correlate.
+            const startupToken = body["startupToken"] === undefined ? undefined : requireNonEmptyString(body, "startupToken");
+            return await sessions.start(normalizeRequestCwd(requireString(body, "cwd")), optionalField("startupToken", startupToken));
         }
         catch (error) {
             return reply.code(400).send({ error: errorMessage(error) });
@@ -132,9 +136,12 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
         }
     });
     app.get(`${prefix}/sessions/:sessionId/messages`, async (request, reply) => {
+        const ref = sessionRefFromQueryOr400(request.params.sessionId, request.query, reply);
+        if (ref === undefined)
+            return reply;
         try {
             const page = { ...optionalField("before", optionalNumber(request.query.before)), ...optionalField("limit", optionalNumber(request.query.limit)) };
-            const messages = await sessions.messages(sessionLookupFromQuery(request.params.sessionId, request.query), page);
+            const messages = await sessions.messages(ref, page);
             return projectBrowserMessageResponse(messages);
         }
         catch (error) {
@@ -142,24 +149,33 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
         }
     });
     app.get(`${prefix}/sessions/:sessionId/status`, async (request, reply) => {
+        const ref = sessionRefFromQueryOr400(request.params.sessionId, request.query, reply);
+        if (ref === undefined)
+            return reply;
         try {
-            return await sessions.status(sessionLookupFromQuery(request.params.sessionId, request.query));
+            return await sessions.status(ref);
         }
         catch (error) {
             return reply.code(404).send({ error: errorMessage(error) });
         }
     });
     app.get(`${prefix}/sessions/:sessionId/stream-snapshot`, async (request, reply) => {
+        const ref = sessionRefFromQueryOr400(request.params.sessionId, request.query, reply);
+        if (ref === undefined)
+            return reply;
         try {
-            return await sessions.streamSnapshot(sessionLookupFromQuery(request.params.sessionId, request.query));
+            return await sessions.streamSnapshot(ref);
         }
         catch (error) {
             return reply.code(404).send({ error: errorMessage(error) });
         }
     });
     app.get(`${prefix}/sessions/:sessionId/models`, async (request, reply) => {
+        const ref = sessionRefFromQueryOr400(request.params.sessionId, request.query, reply);
+        if (ref === undefined)
+            return reply;
         try {
-            return { models: await sessions.availableModels(sessionLookupFromQuery(request.params.sessionId, request.query)) };
+            return { models: await sessions.availableModels(ref) };
         }
         catch (error) {
             return reply.code(404).send({ error: errorMessage(error) });
@@ -168,7 +184,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     app.post(`${prefix}/sessions/:sessionId/model`, async (request, reply) => {
         try {
             const body = optionalRecord(request.body);
-            return await sessions.setModel(sessionLookupFromBody(request.params.sessionId, body), requireString(body, "provider"), requireString(body, "modelId"));
+            return await sessions.setModel(sessionRefFromBody(request.params.sessionId, body), requireString(body, "provider"), requireString(body, "modelId"));
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
@@ -180,15 +196,18 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
             const direction = body["direction"];
             if (direction !== undefined && direction !== "forward" && direction !== "backward")
                 throw new Error("direction must be forward or backward");
-            return await sessions.cycleModel(sessionLookupFromBody(request.params.sessionId, body), direction ?? "forward");
+            return await sessions.cycleModel(sessionRefFromBody(request.params.sessionId, body), direction ?? "forward");
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
         }
     });
     app.get(`${prefix}/sessions/:sessionId/thinking-levels`, async (request, reply) => {
+        const ref = sessionRefFromQueryOr400(request.params.sessionId, request.query, reply);
+        if (ref === undefined)
+            return reply;
         try {
-            return { levels: await sessions.availableThinkingLevels(sessionLookupFromQuery(request.params.sessionId, request.query)) };
+            return { levels: await sessions.availableThinkingLevels(ref) };
         }
         catch (error) {
             return reply.code(404).send({ error: errorMessage(error) });
@@ -199,7 +218,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
             const body = optionalRecord(request.body);
             // The level string is validated against the session's live available levels
             // in the service, so it stays correct if pi changes the set.
-            return await sessions.setThinkingLevel(sessionLookupFromBody(request.params.sessionId, body), requireThinkingLevel(body["level"]));
+            return await sessions.setThinkingLevel(sessionRefFromBody(request.params.sessionId, body), requireThinkingLevel(body["level"]));
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
@@ -208,15 +227,18 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     app.post(`${prefix}/sessions/:sessionId/thinking-level/cycle`, async (request, reply) => {
         try {
             const body = optionalRecord(request.body);
-            return await sessions.cycleThinkingLevel(sessionLookupFromBody(request.params.sessionId, body));
+            return await sessions.cycleThinkingLevel(sessionRefFromBody(request.params.sessionId, body));
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
         }
     });
     app.get(`${prefix}/sessions/:sessionId/commands`, async (request, reply) => {
+        const ref = sessionRefFromQueryOr400(request.params.sessionId, request.query, reply);
+        if (ref === undefined)
+            return reply;
         try {
-            return await sessions.commands(sessionLookupFromQuery(request.params.sessionId, request.query));
+            return await sessions.commands(ref);
         }
         catch (error) {
             return reply.code(404).send({ error: errorMessage(error) });
@@ -225,7 +247,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     app.post(`${prefix}/sessions/:sessionId/prompt`, async (request, reply) => {
         try {
             const body = optionalRecord(request.body);
-            await sessions.prompt(sessionLookupFromBody(request.params.sessionId, body), body["text"], body["streamingBehavior"], body["attachments"]);
+            await sessions.prompt(sessionRefFromBody(request.params.sessionId, body), body["text"], body["streamingBehavior"], body["attachments"]);
             return { accepted: true };
         }
         catch (error) {
@@ -234,7 +256,46 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     });
     app.post(`${prefix}/sessions/:sessionId/queue/clear`, async (request, reply) => {
         try {
-            return await sessions.clearQueue(sessionLookupFromBody(request.params.sessionId, optionalRecord(request.body)));
+            return await sessions.clearQueue(sessionRefFromBody(request.params.sessionId, optionalRecord(request.body)));
+        }
+        catch (error) {
+            return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
+        }
+    });
+    app.post(`${prefix}/sessions/:sessionId/ask/submit`, async (request, reply) => {
+        try {
+            const body = requireRecord(request.body);
+            const askId = requireBoundedId(body["askId"], "askId");
+            return await sessions.submitAsk(sessionRefFromBody(request.params.sessionId, body), askId, askUserSubmissionFromBody(body));
+        }
+        catch (error) {
+            return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
+        }
+    });
+    app.post(`${prefix}/sessions/:sessionId/ask/cancel`, async (request, reply) => {
+        try {
+            const body = requireRecord(request.body);
+            return await sessions.cancelAsk(sessionRefFromBody(request.params.sessionId, body), requireBoundedId(body["askId"], "askId"));
+        }
+        catch (error) {
+            return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
+        }
+    });
+    app.post(`${prefix}/sessions/:sessionId/dialogs/answer`, async (request, reply) => {
+        try {
+            const body = requireRecord(request.body);
+            const answer = extensionDialogAnswerFromBody(body);
+            return await sessions.answerDialog(sessionRefFromBody(request.params.sessionId, body), answer.dialogId, answer.value);
+        }
+        catch (error) {
+            return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
+        }
+    });
+    app.post(`${prefix}/sessions/:sessionId/dialogs/cancel`, async (request, reply) => {
+        try {
+            const body = requireRecord(request.body);
+            const cancel = extensionDialogCancelFromBody(body);
+            return await sessions.cancelDialog(sessionRefFromBody(request.params.sessionId, body), cancel.dialogId);
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
@@ -243,7 +304,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     app.post(`${prefix}/sessions/:sessionId/warnings/dismiss`, async (request, reply) => {
         try {
             const body = optionalRecord(request.body);
-            return await sessions.dismissWarning(sessionLookupFromBody(request.params.sessionId, body), requireString(body, "dismissId"));
+            return await sessions.dismissWarning(sessionRefFromBody(request.params.sessionId, body), requireString(body, "dismissId"));
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
@@ -255,7 +316,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
             const folder = body["folder"];
             if (folder !== undefined && typeof folder !== "string")
                 throw new Error("folder field must be a string");
-            const attachments = await sessions.saveAttachments(sessionLookupFromBody(request.params.sessionId, body), body["attachments"], folder);
+            const attachments = await sessions.saveAttachments(sessionRefFromBody(request.params.sessionId, body), body["attachments"], folder);
             return { attachments };
         }
         catch (error) {
@@ -265,7 +326,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     app.post(`${prefix}/sessions/:sessionId/shell`, async (request, reply) => {
         try {
             const body = optionalRecord(request.body);
-            await sessions.shell(sessionLookupFromBody(request.params.sessionId, body), requireString(body, "text"));
+            await sessions.shell(sessionRefFromBody(request.params.sessionId, body), requireString(body, "text"));
             return { accepted: true };
         }
         catch (error) {
@@ -275,7 +336,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     app.post(`${prefix}/sessions/:sessionId/commands/run`, async (request, reply) => {
         try {
             const body = optionalRecord(request.body);
-            return await sessions.runCommand(sessionLookupFromBody(request.params.sessionId, body), requireString(body, "text"));
+            return await sessions.runCommand(sessionRefFromBody(request.params.sessionId, body), requireString(body, "text"));
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
@@ -284,7 +345,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     app.post(`${prefix}/sessions/:sessionId/commands/respond`, async (request, reply) => {
         try {
             const body = optionalRecord(request.body);
-            return await sessions.respondToCommand(sessionLookupFromBody(request.params.sessionId, body), requireString(body, "requestId"), requireString(body, "value"));
+            return await sessions.respondToCommand(sessionRefFromBody(request.params.sessionId, body), requireString(body, "requestId"), requireString(body, "value"));
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
@@ -293,7 +354,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     app.post(`${prefix}/sessions/:sessionId/tree/navigate`, async (request, reply) => {
         try {
             const body = requireRecord(request.body);
-            return await sessions.navigateTree(sessionLookupFromBody(request.params.sessionId, body), sessionTreeNavigateRequestFromBody(body));
+            return await sessions.navigateTree(sessionRefFromBody(request.params.sessionId, body), sessionTreeNavigateRequestFromBody(body));
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
@@ -301,7 +362,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     });
     app.post(`${prefix}/sessions/:sessionId/abort`, async (request, reply) => {
         try {
-            await sessions.abort(sessionLookupFromBody(request.params.sessionId, optionalRecord(request.body)));
+            await sessions.abort(sessionRefFromBody(request.params.sessionId, optionalRecord(request.body)));
             return { aborted: true };
         }
         catch (error) {
@@ -310,7 +371,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     });
     app.post(`${prefix}/sessions/:sessionId/stop`, async (request, reply) => {
         try {
-            await sessions.stop(sessionLookupFromBody(request.params.sessionId, optionalRecord(request.body)));
+            await sessions.stop(sessionRefFromBody(request.params.sessionId, optionalRecord(request.body)));
             return { stopped: true };
         }
         catch (error) {
@@ -319,7 +380,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     });
     app.post(`${prefix}/sessions/:sessionId/archive`, async (request, reply) => {
         try {
-            await sessions.archive(sessionLookupFromBody(request.params.sessionId, optionalRecord(request.body)));
+            await sessions.archive(sessionRefFromBody(request.params.sessionId, optionalRecord(request.body)));
             return { archived: true };
         }
         catch (error) {
@@ -328,7 +389,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     });
     app.post(`${prefix}/sessions/:sessionId/archive-tree`, async (request, reply) => {
         try {
-            return await sessions.archiveTree(sessionLookupFromBody(request.params.sessionId, optionalRecord(request.body)));
+            return await sessions.archiveTree(sessionRefFromBody(request.params.sessionId, optionalRecord(request.body)));
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
@@ -336,25 +397,16 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     });
     app.post(`${prefix}/sessions/:sessionId/restore`, async (request, reply) => {
         try {
-            await sessions.restore(sessionLookupFromBody(request.params.sessionId, optionalRecord(request.body)));
+            await sessions.restore(sessionRefFromBody(request.params.sessionId, optionalRecord(request.body)));
             return { restored: true };
         }
         catch (error) {
             return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
         }
     });
-    app.delete(`${prefix}/sessions/:sessionId`, async (request, reply) => {
-        try {
-            await sessions.deleteArchived(sessionLookupFromQuery(request.params.sessionId, request.query));
-            return { deleted: true };
-        }
-        catch (error) {
-            return reply.code(mutationErrorStatus(error)).send({ error: errorMessage(error) });
-        }
-    });
     app.post(`${prefix}/sessions/:sessionId/reload`, async (request, reply) => {
         try {
-            await sessions.reload(sessionLookupFromBody(request.params.sessionId, optionalRecord(request.body)));
+            await sessions.reload(sessionRefFromBody(request.params.sessionId, optionalRecord(request.body)));
             return { reloaded: true };
         }
         catch (error) {
@@ -363,7 +415,7 @@ export function registerSessionRoutes(app, sessions, eventHub, prefix = "") {
     });
     app.post(`${prefix}/sessions/:sessionId/detach-parent`, async (request, reply) => {
         try {
-            await sessions.detachParent(sessionLookupFromBody(request.params.sessionId, optionalRecord(request.body)));
+            await sessions.detachParent(sessionRefFromBody(request.params.sessionId, optionalRecord(request.body)));
             return { detached: true };
         }
         catch (error) {
@@ -394,12 +446,7 @@ function parseBulkMutationRef(value) {
     const id = requireString(record, "id").trim();
     if (id === "")
         throw new Error("id field must not be empty");
-    const cwd = record["cwd"];
-    if (cwd === undefined || cwd === "")
-        return { id };
-    if (typeof cwd !== "string")
-        throw new Error("cwd field must be a string");
-    return { id, cwd: normalizeRequestCwd(cwd) };
+    return { id, cwd: requireRefCwd(record["cwd"]) };
 }
 function notificationRefFromQuery(id, query) {
     const cwd = requireNonEmptyBoundedString(query.cwd, "cwd", MAX_NOTIFICATION_CWD_LENGTH);
@@ -415,21 +462,35 @@ function notificationRef(id, cwd) {
         cwd: normalizeRequestCwd(cwd),
     };
 }
-function sessionLookupFromQuery(id, query) {
-    return sessionLookupFromCwd(id, query.cwd);
-}
-function sessionLookupFromBody(id, body) {
-    const cwd = body["cwd"];
+function sessionRefFromQuery(id, query) {
+    const cwd = query.cwd;
     if (cwd === undefined || cwd === "")
-        return id;
-    if (typeof cwd !== "string")
-        throw new Error("cwd field must be a string");
+        throw new Error("cwd query parameter is required");
     return { id, cwd: normalizeRequestCwd(cwd) };
 }
-function sessionLookupFromCwd(id, cwd) {
-    // Legacy id-only lookups (no cwd) remain supported; a supplied cwd is
-    // normalized here so everything past the route layer sees canonical paths.
-    return cwd === undefined || cwd === "" ? id : { id, cwd: normalizeRequestCwd(cwd) };
+// Every read-only per-session GET route starts with this parse; a malformed
+// query is a 400, sent here so the handlers stay flat.
+function sessionRefFromQueryOr400(id, query, reply) {
+    try {
+        return sessionRefFromQuery(id, query);
+    }
+    catch (error) {
+        reply.code(400).send({ error: errorMessage(error) });
+        return undefined;
+    }
+}
+function sessionRefFromBody(id, body) {
+    return { id, cwd: requireRefCwd(body["cwd"]) };
+}
+// Every per-session ref is cwd-scoped: the workspace path picks the session
+// store the id resolves in, and it is normalized here so everything past the
+// route layer sees canonical paths.
+function requireRefCwd(cwd) {
+    if (typeof cwd !== "string")
+        throw new Error("cwd field must be a string");
+    if (cwd === "")
+        throw new Error("cwd field must not be empty");
+    return normalizeRequestCwd(cwd);
 }
 function sessionTreeNavigateRequestFromBody(body) {
     const targetId = requireNonEmptyString(body, "targetId");
@@ -463,6 +524,60 @@ function requireExactFields(record, fields, label) {
     if (unexpected !== undefined)
         throw new Error(`${label} field contains unsupported property: ${unexpected}`);
 }
+/**
+ * Shape-check one submitted answer set. Only transport-level checks belong here:
+ * whether the answers fit the questions that were actually asked is the pending
+ * ask store's job, since only it knows the open ask.
+ */
+function askUserSubmissionFromBody(body) {
+    const answers = body["answers"];
+    if (!Array.isArray(answers))
+        throw new Error("answers field must be an array");
+    if (answers.length > ASK_USER_QUESTION_LIMIT)
+        throw new Error("answers field has too many entries");
+    return { answers: answers.map(askUserAnswerFromValue) };
+}
+function askUserAnswerFromValue(value) {
+    const record = requireRecord(value);
+    const values = record["values"];
+    if (!Array.isArray(values))
+        throw new Error("values field must be an array");
+    if (values.length > ASK_USER_OPTION_LIMIT)
+        throw new Error("values field has too many entries");
+    const otherText = record["otherText"];
+    if (otherText !== undefined && typeof otherText !== "string")
+        throw new Error("otherText field must be a string");
+    if (typeof otherText === "string" && otherText.length > ASK_USER_OTHER_TEXT_MAX_LENGTH)
+        throw new Error("otherText field is too long");
+    return {
+        id: requireBoundedId(record["id"], "id"),
+        values: values.map((entry) => requireBoundedId(entry, "values entry")),
+        ...(otherText === undefined ? {} : { otherText }),
+    };
+}
+function requireBoundedId(value, field) {
+    return requireNonEmptyBoundedString(value, field, ASK_USER_ID_MAX_LENGTH);
+}
+/**
+ * Shape-check one dialog answer. Only transport-level checks belong here:
+ * whether the value fits the answered dialog's kind is the pending dialog
+ * store's job, since only it knows the open dialog.
+ */
+function extensionDialogAnswerFromBody(body) {
+    const dialogId = requireNonEmptyBoundedString(body["dialogId"], "dialogId", EXTENSION_DIALOG_ID_MAX_LENGTH);
+    const value = body["value"];
+    if (typeof value === "boolean")
+        return { dialogId, value };
+    if (typeof value === "string") {
+        if (value.length > EXTENSION_DIALOG_INPUT_MAX_LENGTH)
+            throw new Error("value field is too long");
+        return { dialogId, value };
+    }
+    throw new Error("value field must be a string or a boolean");
+}
+function extensionDialogCancelFromBody(body) {
+    return { dialogId: requireNonEmptyBoundedString(body["dialogId"], "dialogId", EXTENSION_DIALOG_ID_MAX_LENGTH) };
+}
 function optionalRecord(value) {
     if (value === undefined || value === null)
         return {};