@maudecode/talaria-web 0.0.0

package/dist/sessions/shares.js

@@ -0,0 +1,267 @@
+import { str } from '../util.js';
+/**
+ * Public share snapshots (Python `api/shares.py`): sanitized read-only copies
+ * of a conversation under `shares/<token>.json`. Only user/assistant prose is
+ * published; credentials and local paths are always redacted; local MEDIA:
+ * references become inline images only when they resolve inside an allowed
+ * root and pass the image allow-list.
+ */
+import { closeSync, existsSync, fstatSync, mkdirSync, readFileSync, statSync } from 'node:fs';
+import { randomBytes } from 'node:crypto';
+import { basename, extname, join, resolve } from 'node:path';
+import { atomicWriteText } from '../fs/atomic.js';
+import { redactSensitive } from '../redact.js';
+import { expandHome, isWithin, resolvePathLikePython } from '../workspace/paths.js';
+import { openAnchoredFd } from '../workspace/fs.js';
+const isDict = (v) => Boolean(v) && typeof v === 'object' && !Array.isArray(v);
+const SHARE_TOKEN_RE = /^[A-Za-z0-9_-]{8,64}$/;
+const SHARE_MEDIA_RE = /MEDIA:(?!https?:\/\/)([^\s)\]>]+)/g;
+const SHARE_EMBED_MAX_BYTES = 512 * 1024;
+const ALLOWED_MIME = { '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.gif': 'image/gif', '.webp': 'image/webp' };
+const PLACEHOLDER = '[*Local attachment omitted from public share*]';
+const IMAGE_MAGIC = { 'image/png': Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]), 'image/jpeg': Buffer.from([0xff, 0xd8, 0xff]), 'image/gif': Buffer.from('GIF8'), 'image/webp': Buffer.from('RIFF') };
+function escapeHtml(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#x27;');
+}
+function shareMessageText(message) {
+    const content = message.content;
+    if (Array.isArray(content)) {
+        const parts = [];
+        for (const item of content)
+            if (isDict(item) && item.type === 'text' && typeof item.text === 'string')
+                parts.push(item.text);
+        return parts.join('').trim();
+    }
+    if (typeof content === 'string')
+        return content.trim();
+    return '';
+}
+export function redactSharePaths(text, extraPaths) {
+    let out = text;
+    for (const p of extraPaths) {
+        const path = (p ?? '').trim();
+        if (path.length >= 4 && out.includes(path))
+            out = out.split(path).join('[redacted-path]');
+    }
+    return out;
+}
+function checkImageMagic(data, mime) {
+    const magic = IMAGE_MAGIC[mime];
+    if (!magic || !data.subarray(0, magic.length).equals(magic))
+        return false;
+    if (mime === 'image/webp')
+        return data.length >= 12 && data.subarray(8, 12).toString() === 'WEBP';
+    return true;
+}
+/** The candidate file and the allowed root it sits under; the bytes are then read through an anchored walk from that root. */
+function resolveAgainstRoots(raw, allowed, home) {
+    if (raw.startsWith('file://'))
+        return null;
+    if (raw.startsWith('/') || raw.startsWith('~')) {
+        let p;
+        try {
+            p = resolvePathLikePython(expandHome(raw, home), home);
+        }
+        catch {
+            return null;
+        }
+        const root = allowed.find((r) => isWithin(p, r));
+        return root && isFile(p) ? { path: p, root } : null;
+    }
+    for (const root of allowed) {
+        let candidate;
+        try {
+            candidate = resolvePathLikePython(resolve(root, raw), home);
+        }
+        catch {
+            continue;
+        }
+        if (!isWithin(candidate, root))
+            continue;
+        if (isFile(candidate))
+            return { path: candidate, root };
+    }
+    return null;
+}
+function isFile(p) {
+    try {
+        return statSync(p).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/** The file's bytes read through the anchored walk (no symlinked component, nothing swapped since resolution), or null. */
+function readAnchoredImage(root, path) {
+    let fd;
+    try {
+        fd = openAnchoredFd(root, path, { wantDir: false });
+    }
+    catch {
+        return null;
+    }
+    try {
+        const st = fstatSync(fd);
+        // A hard link to a private image outside the roots passes the pathname walk; the inode's link count does not.
+        if (!st.isFile() || st.nlink > 1 || st.size > SHARE_EMBED_MAX_BYTES)
+            return null;
+        return readFileSync(fd);
+    }
+    catch {
+        return null;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function embedShareMedia(text, allowedRoots, home) {
+    if (!text)
+        return text;
+    const allowed = allowedRoots.filter(Boolean).map((r) => resolvePathLikePython(r, home));
+    return text.replace(SHARE_MEDIA_RE, (whole, rawRef) => {
+        const raw = rawRef.trim();
+        if (!raw)
+            return whole;
+        const found = resolveAgainstRoots(raw, allowed, home);
+        if (found === null)
+            return PLACEHOLDER;
+        const mime = ALLOWED_MIME[extname(found.path).toLowerCase()];
+        if (!mime)
+            return PLACEHOLDER;
+        const data = readAnchoredImage(found.root, found.path);
+        if (!data || !checkImageMagic(data, mime))
+            return PLACEHOLDER;
+        return `<img src="data:${mime};base64,${data.toString('base64')}" class="msg-media-img" alt="${escapeHtml(basename(found.path))}" loading="lazy">`;
+    });
+}
+export function sanitizeShareMessage(message, redactPaths, allowedRoots, home) {
+    if (!isDict(message))
+        return null;
+    const role = str(message.role).trim().toLowerCase();
+    if (role !== 'user' && role !== 'assistant')
+        return null;
+    let text = shareMessageText(message);
+    if (!text)
+        return null;
+    text = redactSensitive(text);
+    text = embedShareMedia(text, allowedRoots, home);
+    text = redactSharePaths(text, redactPaths);
+    if (!text.trim())
+        return null;
+    const sanitized = { role, content: text };
+    if (typeof message.timestamp === 'number')
+        sanitized.timestamp = message.timestamp;
+    return sanitized;
+}
+export function buildShareSnapshot(session, messages, opts) {
+    const redactPaths = [];
+    for (const value of [session.workspace, session.worktree_path, session.worktree_repo_root])
+        if (value)
+            redactPaths.push(value);
+    redactPaths.push(opts.hermesHome, opts.home);
+    const allowedRoots = [];
+    if (session.workspace.trim())
+        allowedRoots.push(session.workspace.trim());
+    allowedRoots.push(opts.attachmentRoot);
+    const safe = [];
+    for (const raw of messages) {
+        const sanitized = sanitizeShareMessage(raw, redactPaths, allowedRoots, opts.home);
+        if (sanitized)
+            safe.push(sanitized);
+    }
+    if (!safe.length)
+        throw new Error('This conversation has no shareable messages yet.');
+    let title = typeof session.title === 'string' ? session.title : 'Untitled';
+    title = redactSensitive(title || 'Untitled');
+    title = redactSharePaths(title, redactPaths) || 'Untitled';
+    return { title, messages: safe, message_count: safe.length };
+}
+export class ShareStore {
+    dir;
+    now;
+    constructor(dir, now) {
+        this.dir = dir;
+        this.now = now;
+    }
+    pathFor(token) {
+        const t = token.trim();
+        if (!SHARE_TOKEN_RE.test(t))
+            throw new Error('Invalid share token');
+        return join(this.dir, `${t}.json`);
+    }
+    createOrRefresh(session, snapshot) {
+        mkdirSync(this.dir, { recursive: true });
+        const token = (session.share_token ?? '').trim() || randomBytes(18).toString('base64url');
+        const now = this.now();
+        const payload = {
+            token, source_session_id: session.session_id, title: snapshot.title, messages: snapshot.messages, message_count: snapshot.message_count,
+            created_at: now, updated_at: now, revoked_at: null,
+        };
+        const path = this.pathFor(token);
+        if (existsSync(path)) {
+            try {
+                const existing = JSON.parse(readFileSync(path, 'utf8'));
+                if (isDict(existing))
+                    payload.created_at = existing.created_at || now;
+            }
+            catch { /* malformed existing snapshot */ }
+        }
+        atomicWriteText(path, JSON.stringify(payload, null, 2), { mode: 0o600 });
+        return { share_token: token, share_title: snapshot.title, share_message_count: snapshot.message_count, share_created_at: payload.created_at, share_updated_at: now };
+    }
+    /** The public payload, or null when missing/revoked. */
+    load(token) {
+        let path;
+        try {
+            path = this.pathFor(token);
+        }
+        catch {
+            return null;
+        }
+        if (!existsSync(path))
+            return null;
+        let payload;
+        try {
+            payload = JSON.parse(readFileSync(path, 'utf8'));
+        }
+        catch {
+            return null;
+        }
+        if (!isDict(payload) || payload.revoked_at)
+            return null;
+        const messages = Array.isArray(payload.messages) ? payload.messages : [];
+        const pub = { title: str(payload.title) || 'Untitled', messages, message_count: Math.trunc(Number(payload.message_count)) || messages.length };
+        if (typeof payload.created_at === 'number')
+            pub.created_at = payload.created_at;
+        if (typeof payload.updated_at === 'number')
+            pub.updated_at = payload.updated_at;
+        return pub;
+    }
+    revoke(session) {
+        const token = (session.share_token ?? '').trim();
+        if (!token)
+            return false;
+        let path;
+        try {
+            path = this.pathFor(token);
+        }
+        catch {
+            return false;
+        }
+        if (existsSync(path)) {
+            let payload = {};
+            try {
+                const parsed = JSON.parse(readFileSync(path, 'utf8'));
+                if (isDict(parsed))
+                    payload = parsed;
+            }
+            catch {
+                payload = {};
+            }
+            payload.revoked_at = this.now();
+            atomicWriteText(path, JSON.stringify(payload, null, 2), { mode: 0o600 });
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=shares.js.map

package/dist/sessions/shares.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shares.js","sourceRoot":"","sources":["../../src/sessions/shares.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAChC;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAGnD,MAAM,MAAM,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AACrH,MAAM,cAAc,GAAG,uBAAuB,CAAA;AAC9C,MAAM,cAAc,GAAG,oCAAoC,CAAA;AAC3D,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAA;AACxC,MAAM,YAAY,GAA2B,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAA;AAC7J,MAAM,WAAW,GAAG,gDAAgD,CAAA;AACpE,MAAM,WAAW,GAA2B,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;AAE9O,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC7H,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgC;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5H,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAA;IACtD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,UAAoB;IACjE,IAAI,GAAG,GAAG,IAAI,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACzE,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,MAAM,CAAA;IACjG,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8HAA8H;AAC9H,SAAS,mBAAmB,CAAC,GAAW,EAAE,OAAiB,EAAE,IAAY;IACvE,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAS,CAAA;QACb,IAAI,CAAC;YAAC,CAAC,GAAG,qBAAqB,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QACpF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAChD,OAAO,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACrD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,SAAiB,CAAA;QACrB,IAAI,CAAC;YAAC,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAQ;QAAC,CAAC;QACtF,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;YAAE,SAAQ;QACxC,IAAI,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IACzD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,IAAI,CAAC;QAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAC5D,CAAC;AAED,2HAA2H;AAC3H,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAY;IACnD,IAAI,EAAU,CAAA;IACd,IAAI,CAAC;QAAC,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;QACxB,8GAA8G;QAC9G,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,qBAAqB;YAAE,OAAO,IAAI,CAAA;QAChF,OAAO,YAAY,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,YAAsB,EAAE,IAAY;IAChF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;IACvF,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QACzB,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAA;QACtB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QACrD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,WAAW,CAAA;QACtC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QAC5D,IAAI,CAAC,IAAI;YAAE,OAAO,WAAW,CAAA;QAC7B,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACtD,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,WAAW,CAAA;QAC7D,OAAO,kBAAkB,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,gCAAgC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAA;IACpJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,WAAqB,EAAE,YAAsB,EAAE,IAAY;IAChH,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACnD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAA;IACxD,IAAI,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;IAChD,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA;IAC7B,MAAM,SAAS,GAA4B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAClE,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QAAE,SAAS,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;IAClF,OAAO,SAAS,CAAA;AAClB,CAAC;AAID,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,QAAmB,EAAE,IAAkE;IAC1I,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,kBAAkB,CAAC;QAAE,IAAI,KAAK;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9H,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,YAAY,GAAa,EAAE,CAAA;IACjC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE;QAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAA;IACzE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IACtC,MAAM,IAAI,GAA8B,EAAE,CAAA;IAC1C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QACjF,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACrF,IAAI,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAA;IAC1E,KAAK,GAAG,eAAe,CAAC,KAAK,IAAI,UAAU,CAAC,CAAA;IAC5C,KAAK,GAAG,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,UAAU,CAAA;IAC1D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;AAC9D,CAAC;AAID,MAAM,OAAO,UAAU;IACA;IAA8B;IAAnD,YAAqB,GAAW,EAAmB,GAAiB;QAA/C,QAAG,GAAH,GAAG,CAAQ;QAAmB,QAAG,GAAH,GAAG,CAAc;IAAG,CAAC;IAEhE,OAAO,CAAC,KAAa;QAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QACtB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACnE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;IAED,eAAe,CAAC,OAAgB,EAAE,QAAuB;QACvD,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACzF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,OAAO,GAA4B;YACvC,KAAK,EAAE,iBAAiB,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa;YACvI,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI;SACnD,CAAA;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAChC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAA;gBAClE,IAAI,MAAM,CAAC,QAAQ,CAAC;oBAAE,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAA;YACvE,CAAC;YAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;QAC/C,CAAC;QACD,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,CAAC,aAAa,EAAE,gBAAgB,EAAE,OAAO,CAAC,UAAoB,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAA;IAChL,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,KAAa;QAChB,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAClC,IAAI,OAAgB,CAAA;QACpB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU;YAAE,OAAO,IAAI,CAAA;QACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QACxE,MAAM,GAAG,GAA4B,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAA;QACvK,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;YAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QAC/E,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;YAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QAC/E,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,MAAM,CAAC,OAAgB;QACrB,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QACxB,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;QACzD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,OAAO,GAA4B,EAAE,CAAA;YACzC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAA;gBAChE,IAAI,MAAM,CAAC,MAAM,CAAC;oBAAE,OAAO,GAAG,MAAM,CAAA;YACtC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAA;YAAC,CAAC;YACxB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC/B,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1E,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;CACF"}

package/dist/sessions/state-db.d.ts

@@ -0,0 +1,52 @@
+import { DatabaseSync } from 'node:sqlite';
+export type Dict = Record<string, unknown>;
+export declare const MESSAGING_SOURCES: Set<string>;
+export declare const CLI_MIN_UNTITLED_USER_MESSAGE_COUNT = 2;
+/** Python `normalize_agent_session_source`: the durable `{raw_source, session_source, source_label}` contract. */
+export declare function normalizeAgentSessionSource(rawSource: unknown): {
+    raw_source: string | null;
+    session_source: string;
+    source_label: string;
+};
+/** Python `is_cli_session_row`: rows that get the CLI-imported treatment. */
+export declare function isCliSessionRow(row: Dict): boolean;
+/** Python `is_cli_session_row_visible`. */
+export declare function isCliSessionRowVisible(row: Dict): boolean;
+/** Python `_project_agent_session_rows`: collapse compression chains into one sidebar row pointing at the freshest importable tip. */
+export declare function projectAgentSessionRows(rows: Dict[]): Dict[];
+/** Python `open_state_db_readonly`: read-only URI open with a bounded busy timeout; the caller closes it. */
+export declare function openStateDbReadonly(dbPath: string, busyTimeoutMs?: number): DatabaseSync;
+export interface ReadRowsOptions {
+    limit?: number | null;
+    excludeSources?: readonly string[] | null;
+    includeSources?: readonly string[] | null;
+    log?: (line: string) => void;
+}
+/**
+ * Python `read_importable_agent_session_rows`. The recency slice is bounded to
+ * `limit * 8` candidates before the messages aggregate runs; subagent parents
+ * already in the candidate set are re-added after the slice, so the result can
+ * exceed `limit`. Missing-index self-heal is not attempted: this handle is
+ * read-only, so the pre-aggregated join path serves databases without
+ * `idx_messages_session` exactly as Python does when its heal fails.
+ */
+export declare function readImportableAgentSessionRows(dbPath: string, opts?: ReadRowsOptions): Dict[];
+/** Python `agent_session_rows_existing`: batch existence probe; assumes present on any failure so nothing is pruned by mistake. */
+export declare function agentSessionRowsExisting(dbPath: string, sessionIds: Iterable<string>): Set<string>;
+/** Python `state_db_has_session`: true only when `sid` is a row of the sessions table; a missing or unreadable db is false. */
+export declare function stateDbHasSession(dbPath: string, sid: string): boolean;
+/**
+ * Python `_cheap_change_fingerprint`: `MAX(rowid)` of both tables, the file
+ * stamps of the DB and its WAL, and the SQLite change counter (header bytes
+ * 24..28). Returns null when unreadable so the caller projects instead.
+ */
+export declare function cheapChangeFingerprint(dbPath: string, onError?: (reason: string, error: unknown) => void): string | null;
+/**
+ * Python `get_state_db_session_messages(sid, stitch_continuations=True)`: the session's active rows in durable order,
+ * walking compatible compression/close parents so a continued CLI conversation reads as one transcript.
+ */
+export declare function stateDbSessionMessages(dbPath: string, sid: string, opts?: {
+    stitch?: boolean;
+}): Dict[];
+/** The `sessions` row for `sid` (source and lifecycle columns), or null. */
+export declare function stateDbSessionRow(dbPath: string, sid: string): Dict | null;