@maxmo74/pi-coding-agent 0.0.0-stage → 1.4.0-max.1

package/dist/core/session-ownership.js

@@ -0,0 +1,205 @@
+// Coordinate session users and relocation within one local user account.
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, renameSync, rmdirSync, unlinkSync, writeFileSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import { basename, dirname, join, resolve } from "node:path";
+import { canonicalizePath } from "../utils/paths.js";
+const root = join(tmpdir(), `pi-session-owners-${process.getuid?.() ?? "user"}`);
+const sessions = new Map();
+const gateWait = new Int32Array(new SharedArrayBuffer(4));
+const gateTimeoutMs = 2000;
+let holdingGate = false;
+/** Serialize registration and moves; an abandoned gate fails closed rather than guessing. */
+export function withSessionOwnershipGate(operation) {
+    if (holdingGate)
+        throw new Error("Session ownership operations cannot acquire the gate recursively.");
+    mkdirSync(root, { recursive: true, mode: 0o700 });
+    // POSIX mode bits are only meaningful where they are reported. On Windows the per-user
+    // temporary directory is the isolation boundary and lstat reports a fixed mode.
+    const info = lstatSync(root);
+    const uid = process.getuid?.();
+    if (!info.isDirectory() || (uid !== undefined && (info.uid !== uid || (info.mode & 0o077) !== 0))) {
+        throw new Error(`Unsafe session ownership directory: ${root}`);
+    }
+    const gate = join(root, "gate");
+    const deadline = performance.now() + gateTimeoutMs;
+    for (;;) {
+        try {
+            mkdirSync(gate, { mode: 0o700 });
+            break;
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+            const remaining = deadline - performance.now();
+            if (remaining <= 0) {
+                throw new Error(`Session ownership is busy. Retry later. If a process crashed, inspect ${gate}.`);
+            }
+            // SessionManager's API is synchronous. Wait only for other processes, never for work on this event loop.
+            Atomics.wait(gateWait, 0, 0, Math.min(25, remaining));
+        }
+    }
+    holdingGate = true;
+    try {
+        return operation();
+    }
+    finally {
+        holdingGate = false;
+        rmdirSync(gate);
+    }
+}
+/** Register a manager's session before reading it, releasing its previous registration. */
+export function changeSessionOwnership(previous, next) {
+    if (previous === next)
+        return;
+    withSessionOwnershipGate(() => {
+        if (next && !existsSync(next) && existsSync(movedMarker(next)))
+            throw new Error("This session has moved. Refresh the session picker.");
+        const updated = new Map(sessions);
+        if (previous) {
+            const path = canonicalSessionPath(previous);
+            const count = updated.get(path) ?? 0;
+            if (count <= 1)
+                updated.delete(path);
+            else
+                updated.set(path, count - 1);
+        }
+        if (next) {
+            const path = canonicalSessionPath(next);
+            updated.set(path, (updated.get(path) ?? 0) + 1);
+        }
+        // A null start means the platform cannot distinguish a PID from a later process that reused it.
+        const temporary = join(root, `${process.pid}.tmp`);
+        writeFileSync(temporary, JSON.stringify({ start: processIdentity(process.pid) ?? null, sessions: [...updated.keys()] }), { mode: 0o600 });
+        renameSync(temporary, join(root, `${process.pid}.json`));
+        sessions.clear();
+        for (const [path, count] of updated)
+            sessions.set(path, count);
+    });
+}
+/** Hold a counted session reference during a synchronous read/copy/mutation operation. */
+export function withSessionFileUsage(path, operation) {
+    changeSessionOwnership(undefined, path);
+    try {
+        return operation();
+    }
+    finally {
+        changeSessionOwnership(path, undefined);
+    }
+}
+function canonicalSessionPath(path) {
+    const absolute = resolve(path);
+    return canonicalizePath(join(canonicalizePath(dirname(absolute)), basename(absolute)));
+}
+function movedMarker(path) {
+    return join(root, `${createHash("sha256").update(canonicalSessionPath(path)).digest("hex")}.moved`);
+}
+/** Prevent a concurrent opener from recreating the old path after relocation. */
+export function markSessionMoved(path, destination) {
+    writeFileSync(movedMarker(path), destination, { mode: 0o600 });
+}
+/** Roll back a relocation marker when the source was not removed. */
+export function unmarkSessionMoved(path) {
+    unlinkSync(movedMarker(path));
+}
+// Linux only: stat field 22 distinguishes a PID from a later process that reused it.
+// comm can contain spaces and parentheses, so fields are read after the last ')'.
+function linuxProcessStart(pid) {
+    const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+    return stat.slice(stat.lastIndexOf(")") + 2).split(" ")[19];
+}
+const processIdentity = process.platform === "linux" ? linuxProcessStart : () => undefined;
+/**
+ * Drop a record whose owner is provably gone. This is cleanup only: a failed removal must never
+ * affect the safety decision, because Windows can report EPERM or EBUSY for a file another
+ * process still has open.
+ */
+function removeStaleRecord(path) {
+    try {
+        unlinkSync(path);
+    }
+    catch {
+        // The next move retries the cleanup. A surviving stale record only ever causes a refusal.
+    }
+}
+/**
+ * Report whether a recorded owner process is still running. Anything other than a confirmed
+ * absence counts as running, including a permission error, so an uncertain check never allows
+ * a move. On non-Linux platforms a reused PID is indistinguishable and also counts as running,
+ * which can refuse a move that would have been safe.
+ */
+function processIsLive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code !== "ESRCH";
+    }
+}
+/** Reject live users and, on Linux, untracked Pi processes. Caller must hold the ownership gate. */
+export function assertSessionUnused(path) {
+    const canonical = canonicalSessionPath(path);
+    const registered = new Set();
+    for (const file of readdirSync(root)) {
+        if (!/^\d+\.json$/.test(file))
+            continue;
+        const pid = Number(file.split(".")[0]);
+        let start;
+        try {
+            start = processIdentity(pid);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            removeStaleRecord(join(root, file));
+            continue;
+        }
+        const record = JSON.parse(readFileSync(join(root, file), "utf8"));
+        if (!record ||
+            typeof record !== "object" ||
+            !("start" in record) ||
+            !("sessions" in record) ||
+            !Array.isArray(record.sessions)) {
+            throw new Error(`Invalid session ownership record: ${file}`);
+        }
+        if (record.start !== null) {
+            // Linux records carry a start identity. A mismatch means another process reused the PID,
+            // so the record is provably stale. The gate makes removing it safe.
+            if (start === undefined || record.start !== start) {
+                removeStaleRecord(join(root, file));
+                continue;
+            }
+        }
+        else if (!processIsLive(pid)) {
+            // Without a start identity, only a PID the OS confirms is gone proves the owner exited.
+            removeStaleRecord(join(root, file));
+            continue;
+        }
+        registered.add(pid);
+        if (record.sessions.includes(canonical))
+            throw new Error(`Session is open in process ${pid}. Close it before moving.`);
+    }
+    // Detecting Pi processes that predate ownership requires scanning the process table, and the
+    // portable process list is not reliable enough to do so outside Linux. Those platforms only
+    // enforce ownership registered by cooperating Pi instances.
+    if (process.platform !== "linux")
+        return;
+    const processes = execFileSync("ps", ["-u", String(process.getuid()), "-o", "pid=,comm=,args="], {
+        encoding: "utf8",
+    });
+    for (const line of processes.split("\n")) {
+        const match = line.trim().match(/^(\d+)\s+(\S+)\s+(.*)$/);
+        if (!match)
+            continue;
+        const pid = Number(match[1]);
+        if (pid === process.pid || registered.has(pid))
+            continue;
+        const isPi = match[2] === "pi" ||
+            /(?:^|\s)\S*(?:pi-coding-agent\/(?:dist|src)\/cli\.(?:js|ts)|\/pi\/packages\/coding-agent\/src\/cli\.ts)(?:\s|$)/.test(match[3]);
+        if (isPi)
+            throw new Error(`Pi process ${pid} does not report session ownership. Close older Pi instances before moving.`);
+    }
+}
+//# sourceMappingURL=session-ownership.js.map

package/dist/core/session-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-ownership.js","sourceRoot":"","sources":["../../src/core/session-ownership.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACN,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,aAAa,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,MAAM,EAAE,CAAC,CAAC;AACjF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC3C,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAI,SAAkB;IAC7D,IAAI,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACtG,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,uFAAuF;IACvF,gFAAgF;IAChF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;IACnD,SAAS,CAAC;QACT,IAAI,CAAC;YACJ,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjC,MAAM;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,yEAAyE,IAAI,GAAG,CAAC,CAAC;YACnG,CAAC;YACD,yGAAyG;YACzG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QACvD,CAAC;IACF,CAAC;IACD,WAAW,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC;QACJ,OAAO,SAAS,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACV,WAAW,GAAG,KAAK,CAAC;QACpB,SAAS,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;AACF,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CAAC,QAA4B,EAAE,IAAwB;IAC5F,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO;IAC9B,wBAAwB,CAAC,GAAG,EAAE;QAC7B,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,KAAK,IAAI,CAAC;gBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;gBAChC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,gGAAgG;QAChG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QACnD,aAAa,CACZ,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAC9F,EAAE,IAAI,EAAE,KAAK,EAAE,CACf,CAAC;QACF,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QACzD,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAAI,IAAY,EAAE,SAAkB;IACvE,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC;QACJ,OAAO,SAAS,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACV,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACrG,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAAmB;IACjE,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,qFAAqF;AACrF,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,GAAW;IACrC,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;AAE3F;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACtC,IAAI,CAAC;QACJ,UAAU,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACR,0FAA0F;IAC3F,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,GAAW;IACjC,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC/C,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,KAAyB,CAAC;QAC9B,IAAI,CAAC;YACJ,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACpC,SAAS;QACV,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,IACC,CAAC,MAAM;YACP,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC;YACpB,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC;YACvB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC9B,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC3B,yFAAyF;YACzF,oEAAoE;YACpE,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBACnD,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBACpC,SAAS;YACV,CAAC;QACF,CAAC;aAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,wFAAwF;YACxF,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACpC,SAAS;QACV,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,2BAA2B,CAAC,CAAC;IAChF,CAAC;IACD,6FAA6F;IAC7F,4FAA4F;IAC5F,4DAA4D;IAC5D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAO,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE;QACjG,QAAQ,EAAE,MAAM;KAChB,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACzD,MAAM,IAAI,GACT,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,iHAAiH,CAAC,IAAI,CACrH,KAAK,CAAC,CAAC,CAAC,CACR,CAAC;QACH,IAAI,IAAI;YACP,MAAM,IAAI,KAAK,CACd,cAAc,GAAG,6EAA6E,CAC9F,CAAC;IACJ,CAAC;AACF,CAAC","sourcesContent":["// Coordinate session users and relocation within one local user account.\n\nimport { execFileSync } from \"node:child_process\";\nimport { createHash } from \"node:crypto\";\nimport {\n\texistsSync,\n\tlstatSync,\n\tmkdirSync,\n\treaddirSync,\n\treadFileSync,\n\trenameSync,\n\trmdirSync,\n\tunlinkSync,\n\twriteFileSync,\n} from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { basename, dirname, join, resolve } from \"node:path\";\nimport { canonicalizePath } from \"../utils/paths.ts\";\n\nconst root = join(tmpdir(), `pi-session-owners-${process.getuid?.() ?? \"user\"}`);\nconst sessions = new Map<string, number>();\nconst gateWait = new Int32Array(new SharedArrayBuffer(4));\nconst gateTimeoutMs = 2000;\nlet holdingGate = false;\n\n/** Serialize registration and moves; an abandoned gate fails closed rather than guessing. */\nexport function withSessionOwnershipGate<T>(operation: () => T): T {\n\tif (holdingGate) throw new Error(\"Session ownership operations cannot acquire the gate recursively.\");\n\tmkdirSync(root, { recursive: true, mode: 0o700 });\n\t// POSIX mode bits are only meaningful where they are reported. On Windows the per-user\n\t// temporary directory is the isolation boundary and lstat reports a fixed mode.\n\tconst info = lstatSync(root);\n\tconst uid = process.getuid?.();\n\tif (!info.isDirectory() || (uid !== undefined && (info.uid !== uid || (info.mode & 0o077) !== 0))) {\n\t\tthrow new Error(`Unsafe session ownership directory: ${root}`);\n\t}\n\tconst gate = join(root, \"gate\");\n\tconst deadline = performance.now() + gateTimeoutMs;\n\tfor (;;) {\n\t\ttry {\n\t\t\tmkdirSync(gate, { mode: 0o700 });\n\t\t\tbreak;\n\t\t} catch (error) {\n\t\t\tif ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n\t\t\tconst remaining = deadline - performance.now();\n\t\t\tif (remaining <= 0) {\n\t\t\t\tthrow new Error(`Session ownership is busy. Retry later. If a process crashed, inspect ${gate}.`);\n\t\t\t}\n\t\t\t// SessionManager's API is synchronous. Wait only for other processes, never for work on this event loop.\n\t\t\tAtomics.wait(gateWait, 0, 0, Math.min(25, remaining));\n\t\t}\n\t}\n\tholdingGate = true;\n\ttry {\n\t\treturn operation();\n\t} finally {\n\t\tholdingGate = false;\n\t\trmdirSync(gate);\n\t}\n}\n\n/** Register a manager's session before reading it, releasing its previous registration. */\nexport function changeSessionOwnership(previous: string | undefined, next: string | undefined): void {\n\tif (previous === next) return;\n\twithSessionOwnershipGate(() => {\n\t\tif (next && !existsSync(next) && existsSync(movedMarker(next)))\n\t\t\tthrow new Error(\"This session has moved. Refresh the session picker.\");\n\t\tconst updated = new Map(sessions);\n\t\tif (previous) {\n\t\t\tconst path = canonicalSessionPath(previous);\n\t\t\tconst count = updated.get(path) ?? 0;\n\t\t\tif (count <= 1) updated.delete(path);\n\t\t\telse updated.set(path, count - 1);\n\t\t}\n\t\tif (next) {\n\t\t\tconst path = canonicalSessionPath(next);\n\t\t\tupdated.set(path, (updated.get(path) ?? 0) + 1);\n\t\t}\n\t\t// A null start means the platform cannot distinguish a PID from a later process that reused it.\n\t\tconst temporary = join(root, `${process.pid}.tmp`);\n\t\twriteFileSync(\n\t\t\ttemporary,\n\t\t\tJSON.stringify({ start: processIdentity(process.pid) ?? null, sessions: [...updated.keys()] }),\n\t\t\t{ mode: 0o600 },\n\t\t);\n\t\trenameSync(temporary, join(root, `${process.pid}.json`));\n\t\tsessions.clear();\n\t\tfor (const [path, count] of updated) sessions.set(path, count);\n\t});\n}\n\n/** Hold a counted session reference during a synchronous read/copy/mutation operation. */\nexport function withSessionFileUsage<T>(path: string, operation: () => T): T {\n\tchangeSessionOwnership(undefined, path);\n\ttry {\n\t\treturn operation();\n\t} finally {\n\t\tchangeSessionOwnership(path, undefined);\n\t}\n}\n\nfunction canonicalSessionPath(path: string): string {\n\tconst absolute = resolve(path);\n\treturn canonicalizePath(join(canonicalizePath(dirname(absolute)), basename(absolute)));\n}\n\nfunction movedMarker(path: string): string {\n\treturn join(root, `${createHash(\"sha256\").update(canonicalSessionPath(path)).digest(\"hex\")}.moved`);\n}\n\n/** Prevent a concurrent opener from recreating the old path after relocation. */\nexport function markSessionMoved(path: string, destination: string): void {\n\twriteFileSync(movedMarker(path), destination, { mode: 0o600 });\n}\n\n/** Roll back a relocation marker when the source was not removed. */\nexport function unmarkSessionMoved(path: string): void {\n\tunlinkSync(movedMarker(path));\n}\n\n// Linux only: stat field 22 distinguishes a PID from a later process that reused it.\n// comm can contain spaces and parentheses, so fields are read after the last ')'.\nfunction linuxProcessStart(pid: number): string {\n\tconst stat = readFileSync(`/proc/${pid}/stat`, \"utf8\");\n\treturn stat.slice(stat.lastIndexOf(\")\") + 2).split(\" \")[19];\n}\n\nconst processIdentity = process.platform === \"linux\" ? linuxProcessStart : () => undefined;\n\n/**\n * Drop a record whose owner is provably gone. This is cleanup only: a failed removal must never\n * affect the safety decision, because Windows can report EPERM or EBUSY for a file another\n * process still has open.\n */\nfunction removeStaleRecord(path: string): void {\n\ttry {\n\t\tunlinkSync(path);\n\t} catch {\n\t\t// The next move retries the cleanup. A surviving stale record only ever causes a refusal.\n\t}\n}\n\n/**\n * Report whether a recorded owner process is still running. Anything other than a confirmed\n * absence counts as running, including a permission error, so an uncertain check never allows\n * a move. On non-Linux platforms a reused PID is indistinguishable and also counts as running,\n * which can refuse a move that would have been safe.\n */\nfunction processIsLive(pid: number): boolean {\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (error) {\n\t\treturn (error as NodeJS.ErrnoException).code !== \"ESRCH\";\n\t}\n}\n\n/** Reject live users and, on Linux, untracked Pi processes. Caller must hold the ownership gate. */\nexport function assertSessionUnused(path: string): void {\n\tconst canonical = canonicalSessionPath(path);\n\tconst registered = new Set<number>();\n\tfor (const file of readdirSync(root)) {\n\t\tif (!/^\\d+\\.json$/.test(file)) continue;\n\t\tconst pid = Number(file.split(\".\")[0]);\n\t\tlet start: string | undefined;\n\t\ttry {\n\t\t\tstart = processIdentity(pid);\n\t\t} catch (error) {\n\t\t\tif ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n\t\t\tremoveStaleRecord(join(root, file));\n\t\t\tcontinue;\n\t\t}\n\t\tconst record: unknown = JSON.parse(readFileSync(join(root, file), \"utf8\"));\n\t\tif (\n\t\t\t!record ||\n\t\t\ttypeof record !== \"object\" ||\n\t\t\t!(\"start\" in record) ||\n\t\t\t!(\"sessions\" in record) ||\n\t\t\t!Array.isArray(record.sessions)\n\t\t) {\n\t\t\tthrow new Error(`Invalid session ownership record: ${file}`);\n\t\t}\n\t\tif (record.start !== null) {\n\t\t\t// Linux records carry a start identity. A mismatch means another process reused the PID,\n\t\t\t// so the record is provably stale. The gate makes removing it safe.\n\t\t\tif (start === undefined || record.start !== start) {\n\t\t\t\tremoveStaleRecord(join(root, file));\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t} else if (!processIsLive(pid)) {\n\t\t\t// Without a start identity, only a PID the OS confirms is gone proves the owner exited.\n\t\t\tremoveStaleRecord(join(root, file));\n\t\t\tcontinue;\n\t\t}\n\t\tregistered.add(pid);\n\t\tif (record.sessions.includes(canonical))\n\t\t\tthrow new Error(`Session is open in process ${pid}. Close it before moving.`);\n\t}\n\t// Detecting Pi processes that predate ownership requires scanning the process table, and the\n\t// portable process list is not reliable enough to do so outside Linux. Those platforms only\n\t// enforce ownership registered by cooperating Pi instances.\n\tif (process.platform !== \"linux\") return;\n\tconst processes = execFileSync(\"ps\", [\"-u\", String(process.getuid!()), \"-o\", \"pid=,comm=,args=\"], {\n\t\tencoding: \"utf8\",\n\t});\n\tfor (const line of processes.split(\"\\n\")) {\n\t\tconst match = line.trim().match(/^(\\d+)\\s+(\\S+)\\s+(.*)$/);\n\t\tif (!match) continue;\n\t\tconst pid = Number(match[1]);\n\t\tif (pid === process.pid || registered.has(pid)) continue;\n\t\tconst isPi =\n\t\t\tmatch[2] === \"pi\" ||\n\t\t\t/(?:^|\\s)\\S*(?:pi-coding-agent\\/(?:dist|src)\\/cli\\.(?:js|ts)|\\/pi\\/packages\\/coding-agent\\/src\\/cli\\.ts)(?:\\s|$)/.test(\n\t\t\t\tmatch[3],\n\t\t\t);\n\t\tif (isPi)\n\t\t\tthrow new Error(\n\t\t\t\t`Pi process ${pid} does not report session ownership. Close older Pi instances before moving.`,\n\t\t\t);\n\t}\n}\n"]}

package/dist/core/settings-defaults.d.ts

@@ -0,0 +1,66 @@
+/** Runtime defaults shared by settings accessors and the published JSON Schema. */
+export declare const SETTINGS_DEFAULTS: {
+    readonly transport: "auto";
+    readonly sessionShareDestination: "auto";
+    readonly steeringMode: "one-at-a-time";
+    readonly followUpMode: "one-at-a-time";
+    readonly compaction: {
+        readonly enabled: true;
+        readonly reserveTokens: 16384;
+        readonly keepRecentTokens: 20000;
+    };
+    readonly branchSummary: {
+        readonly reserveTokens: 16384;
+        readonly skipPrompt: false;
+    };
+    readonly retry: {
+        readonly enabled: true;
+        readonly maxRetries: 3;
+        readonly baseDelayMs: 2000;
+        readonly maxAgentDelayMs: 60000;
+        readonly provider: {
+            readonly maxRetryDelayMs: 60000;
+        };
+    };
+    readonly hideThinkingBlock: false;
+    readonly showCacheMissNotices: false;
+    readonly quietStartup: false;
+    readonly defaultProjectTrust: "ask";
+    readonly collapseChangelog: false;
+    readonly enableInstallTelemetry: true;
+    readonly enableAnalytics: false;
+    readonly enableSkillCommands: true;
+    readonly terminal: {
+        readonly showImages: true;
+        readonly imageWidthCells: 60;
+        readonly clearOnShrink: false;
+        readonly showTerminalProgress: false;
+    };
+    readonly images: {
+        readonly autoResize: true;
+        readonly blockImages: false;
+    };
+    readonly doubleEscapeAction: "tree";
+    readonly treeFilterMode: "default";
+    readonly editorPaddingX: 0;
+    readonly outputPad: 1;
+    readonly autocompleteMaxVisible: 5;
+    readonly markdown: {
+        readonly codeBlockIndent: "  ";
+        readonly mermaid: "streaming";
+    };
+    readonly warnings: {
+        readonly anthropicExtraUsage: true;
+    };
+    readonly codemode: {
+        readonly mode: "on";
+        readonly inlineBudget: 3000;
+    };
+    readonly cacheWarming: "streaming";
+    readonly tuiMode: "fullscreen";
+    readonly fullscreenExitOutput: "transcript";
+    readonly fullscreenScrollbar: "auto";
+    readonly fullscreenCopyOnSelect: true;
+    readonly fullscreenWheelScrollLines: "auto";
+};
+//# sourceMappingURL=settings-defaults.d.ts.map

package/dist/core/settings-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-defaults.d.ts","sourceRoot":"","sources":["../../src/core/settings-defaults.ts"],"names":[],"mappings":"AAEA,mFAAmF;AACnF,eAAO,MAAM,iBAAiB;aAC7B,SAAS,EAAE,MAAM;aACjB,uBAAuB,EAAE,MAAM;aAC/B,YAAY,EAAE,eAAe;aAC7B,YAAY,EAAE,eAAe;aAC7B,UAAU;iBACT,OAAO;iBACP,aAAa,EAAE,KAAK;iBACpB,gBAAgB,EAAE,KAAK;;aAExB,aAAa;iBACZ,aAAa,EAAE,KAAK;iBACpB,UAAU;;aAEX,KAAK;iBACJ,OAAO;iBACP,UAAU,EAAE,CAAC;iBACb,WAAW,EAAE,IAAI;iBACjB,eAAe;iBACf,QAAQ;qBACP,eAAe,EAAE,KAAK;;;aAGxB,iBAAiB;aACjB,oBAAoB;aACpB,YAAY;aACZ,mBAAmB,EAAE,KAAK;aAC1B,iBAAiB;aACjB,sBAAsB;aACtB,eAAe;aACf,mBAAmB;aACnB,QAAQ;iBACP,UAAU;iBACV,eAAe,EAAE,EAAE;iBACnB,aAAa;iBACb,oBAAoB;;aAErB,MAAM;iBACL,UAAU;iBACV,WAAW;;aAEZ,kBAAkB,EAAE,MAAM;aAC1B,cAAc,EAAE,SAAS;aACzB,cAAc,EAAE,CAAC;aACjB,SAAS,EAAE,CAAC;aACZ,sBAAsB,EAAE,CAAC;aACzB,QAAQ;iBACP,eAAe,EAAE,IAAI;iBACrB,OAAO,EAAE,WAAW;;aAErB,QAAQ;iBACP,mBAAmB;;aAEpB,QAAQ;iBACP,IAAI,EAAE,IAAI;iBACV,YAAY,EAAE,IAAI;;aAEnB,YAAY,EAAE,WAAW;aACzB,OAAO,EAAE,YAAY;aACrB,oBAAoB,EAAE,YAAY;aAClC,mBAAmB,EAAE,MAAM;aAC3B,sBAAsB;aACtB,0BAA0B,EAAE,MAAM;CACzB,CAAC"}

package/dist/core/settings-defaults.js

@@ -0,0 +1,67 @@
+import { DEFAULT_MAX_AGENT_RETRY_DELAY_MS } from "@earendil-works/pi-ai/utils/retry";
+/** Runtime defaults shared by settings accessors and the published JSON Schema. */
+export const SETTINGS_DEFAULTS = {
+    transport: "auto",
+    sessionShareDestination: "auto",
+    steeringMode: "one-at-a-time",
+    followUpMode: "one-at-a-time",
+    compaction: {
+        enabled: true,
+        reserveTokens: 16384,
+        keepRecentTokens: 20000,
+    },
+    branchSummary: {
+        reserveTokens: 16384,
+        skipPrompt: false,
+    },
+    retry: {
+        enabled: true,
+        maxRetries: 3,
+        baseDelayMs: 2000,
+        maxAgentDelayMs: DEFAULT_MAX_AGENT_RETRY_DELAY_MS,
+        provider: {
+            maxRetryDelayMs: 60000,
+        },
+    },
+    hideThinkingBlock: false,
+    showCacheMissNotices: false,
+    quietStartup: false,
+    defaultProjectTrust: "ask",
+    collapseChangelog: false,
+    enableInstallTelemetry: true,
+    enableAnalytics: false,
+    enableSkillCommands: true,
+    terminal: {
+        showImages: true,
+        imageWidthCells: 60,
+        clearOnShrink: false,
+        showTerminalProgress: false,
+    },
+    images: {
+        autoResize: true,
+        blockImages: false,
+    },
+    doubleEscapeAction: "tree",
+    treeFilterMode: "default",
+    editorPaddingX: 0,
+    outputPad: 1,
+    autocompleteMaxVisible: 5,
+    markdown: {
+        codeBlockIndent: "  ",
+        mermaid: "streaming",
+    },
+    warnings: {
+        anthropicExtraUsage: true,
+    },
+    codemode: {
+        mode: "on",
+        inlineBudget: 3000,
+    },
+    cacheWarming: "streaming",
+    tuiMode: "fullscreen",
+    fullscreenExitOutput: "transcript",
+    fullscreenScrollbar: "auto",
+    fullscreenCopyOnSelect: true,
+    fullscreenWheelScrollLines: "auto",
+};
+//# sourceMappingURL=settings-defaults.js.map

package/dist/core/settings-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-defaults.js","sourceRoot":"","sources":["../../src/core/settings-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAErF,mFAAmF;AACnF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAChC,SAAS,EAAE,MAAM;IACjB,uBAAuB,EAAE,MAAM;IAC/B,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;IAC7B,UAAU,EAAE;QACX,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,KAAK;QACpB,gBAAgB,EAAE,KAAK;KACvB;IACD,aAAa,EAAE;QACd,aAAa,EAAE,KAAK;QACpB,UAAU,EAAE,KAAK;KACjB;IACD,KAAK,EAAE;QACN,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,IAAI;QACjB,eAAe,EAAE,gCAAgC;QACjD,QAAQ,EAAE;YACT,eAAe,EAAE,KAAK;SACtB;KACD;IACD,iBAAiB,EAAE,KAAK;IACxB,oBAAoB,EAAE,KAAK;IAC3B,YAAY,EAAE,KAAK;IACnB,mBAAmB,EAAE,KAAK;IAC1B,iBAAiB,EAAE,KAAK;IACxB,sBAAsB,EAAE,IAAI;IAC5B,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,QAAQ,EAAE;QACT,UAAU,EAAE,IAAI;QAChB,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,KAAK;QACpB,oBAAoB,EAAE,KAAK;KAC3B;IACD,MAAM,EAAE;QACP,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,KAAK;KAClB;IACD,kBAAkB,EAAE,MAAM;IAC1B,cAAc,EAAE,SAAS;IACzB,cAAc,EAAE,CAAC;IACjB,SAAS,EAAE,CAAC;IACZ,sBAAsB,EAAE,CAAC;IACzB,QAAQ,EAAE;QACT,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,WAAW;KACpB;IACD,QAAQ,EAAE;QACT,mBAAmB,EAAE,IAAI;KACzB;IACD,QAAQ,EAAE;QACT,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,IAAI;KAClB;IACD,YAAY,EAAE,WAAW;IACzB,OAAO,EAAE,YAAY;IACrB,oBAAoB,EAAE,YAAY;IAClC,mBAAmB,EAAE,MAAM;IAC3B,sBAAsB,EAAE,IAAI;IAC5B,0BAA0B,EAAE,MAAM;CACzB,CAAC","sourcesContent":["import { DEFAULT_MAX_AGENT_RETRY_DELAY_MS } from \"@earendil-works/pi-ai/utils/retry\";\n\n/** Runtime defaults shared by settings accessors and the published JSON Schema. */\nexport const SETTINGS_DEFAULTS = {\n\ttransport: \"auto\",\n\tsessionShareDestination: \"auto\",\n\tsteeringMode: \"one-at-a-time\",\n\tfollowUpMode: \"one-at-a-time\",\n\tcompaction: {\n\t\tenabled: true,\n\t\treserveTokens: 16384,\n\t\tkeepRecentTokens: 20000,\n\t},\n\tbranchSummary: {\n\t\treserveTokens: 16384,\n\t\tskipPrompt: false,\n\t},\n\tretry: {\n\t\tenabled: true,\n\t\tmaxRetries: 3,\n\t\tbaseDelayMs: 2000,\n\t\tmaxAgentDelayMs: DEFAULT_MAX_AGENT_RETRY_DELAY_MS,\n\t\tprovider: {\n\t\t\tmaxRetryDelayMs: 60000,\n\t\t},\n\t},\n\thideThinkingBlock: false,\n\tshowCacheMissNotices: false,\n\tquietStartup: false,\n\tdefaultProjectTrust: \"ask\",\n\tcollapseChangelog: false,\n\tenableInstallTelemetry: true,\n\tenableAnalytics: false,\n\tenableSkillCommands: true,\n\tterminal: {\n\t\tshowImages: true,\n\t\timageWidthCells: 60,\n\t\tclearOnShrink: false,\n\t\tshowTerminalProgress: false,\n\t},\n\timages: {\n\t\tautoResize: true,\n\t\tblockImages: false,\n\t},\n\tdoubleEscapeAction: \"tree\",\n\ttreeFilterMode: \"default\",\n\teditorPaddingX: 0,\n\toutputPad: 1,\n\tautocompleteMaxVisible: 5,\n\tmarkdown: {\n\t\tcodeBlockIndent: \"  \",\n\t\tmermaid: \"streaming\",\n\t},\n\twarnings: {\n\t\tanthropicExtraUsage: true,\n\t},\n\tcodemode: {\n\t\tmode: \"on\",\n\t\tinlineBudget: 3000,\n\t},\n\tcacheWarming: \"streaming\",\n\ttuiMode: \"fullscreen\",\n\tfullscreenExitOutput: \"transcript\",\n\tfullscreenScrollbar: \"auto\",\n\tfullscreenCopyOnSelect: true,\n\tfullscreenWheelScrollLines: \"auto\",\n} as const;\n"]}

package/dist/core/settings-diagnostics.d.ts

@@ -0,0 +1,9 @@
+import type { AgentSessionRuntimeDiagnostic } from "./agent-session-services.ts";
+import type { SettingsManager } from "./settings-manager.ts";
+export declare function collectSettingsDiagnostics(settingsManager: SettingsManager): AgentSessionRuntimeDiagnostic[];
+/**
+ * Remove duplicate type/message diagnostics while preserving their first occurrence.
+ * Startup and runtime settings managers can report the same file error.
+ */
+export declare function deduplicateDiagnostics(diagnostics: readonly AgentSessionRuntimeDiagnostic[]): AgentSessionRuntimeDiagnostic[];
+//# sourceMappingURL=settings-diagnostics.d.ts.map

package/dist/core/settings-diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-diagnostics.d.ts","sourceRoot":"","sources":["../../src/core/settings-diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,eAAe,GAAG,6BAA6B,EAAE,CAK5G;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACrC,WAAW,EAAE,SAAS,6BAA6B,EAAE,GACnD,6BAA6B,EAAE,CAQjC"}

package/dist/core/settings-diagnostics.js

@@ -0,0 +1,21 @@
+export function collectSettingsDiagnostics(settingsManager) {
+    return settingsManager.drainErrors().map(({ scope, path, error }) => ({
+        type: "warning",
+        message: path ? `Invalid settings file ${path}: ${error.message}` : `Invalid ${scope} settings: ${error.message}`,
+    }));
+}
+/**
+ * Remove duplicate type/message diagnostics while preserving their first occurrence.
+ * Startup and runtime settings managers can report the same file error.
+ */
+export function deduplicateDiagnostics(diagnostics) {
+    const seen = new Set();
+    return diagnostics.filter((diagnostic) => {
+        const key = `${diagnostic.type}\0${diagnostic.message}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+}
+//# sourceMappingURL=settings-diagnostics.js.map

package/dist/core/settings-diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-diagnostics.js","sourceRoot":"","sources":["../../src/core/settings-diagnostics.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,0BAA0B,CAAC,eAAgC;IAC1E,OAAO,eAAe,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,yBAAyB,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,cAAc,KAAK,CAAC,OAAO,EAAE;KACjH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACrC,WAAqD;IAErD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE;QACxC,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentSessionRuntimeDiagnostic } from \"./agent-session-services.ts\";\nimport type { SettingsManager } from \"./settings-manager.ts\";\n\nexport function collectSettingsDiagnostics(settingsManager: SettingsManager): AgentSessionRuntimeDiagnostic[] {\n\treturn settingsManager.drainErrors().map(({ scope, path, error }) => ({\n\t\ttype: \"warning\",\n\t\tmessage: path ? `Invalid settings file ${path}: ${error.message}` : `Invalid ${scope} settings: ${error.message}`,\n\t}));\n}\n\n/**\n * Remove duplicate type/message diagnostics while preserving their first occurrence.\n * Startup and runtime settings managers can report the same file error.\n */\nexport function deduplicateDiagnostics(\n\tdiagnostics: readonly AgentSessionRuntimeDiagnostic[],\n): AgentSessionRuntimeDiagnostic[] {\n\tconst seen = new Set<string>();\n\treturn diagnostics.filter((diagnostic) => {\n\t\tconst key = `${diagnostic.type}\\0${diagnostic.message}`;\n\t\tif (seen.has(key)) return false;\n\t\tseen.add(key);\n\t\treturn true;\n\t});\n}\n"]}