@prestyj/cli 5.8.0 → 5.9.0

package/dist/app-sidecar.js

@@ -23,7 +23,7 @@ import { runJsonMode } from "./modes/json-mode.js";
 import { runSubagentWorkerMode } from "./modes/subagent-worker-mode.js";
 import { AgentSession } from "./core/agent-session.js";
 import { RunLifecycle } from "./core/run-lifecycle.js";
-import { CHAT_AGENT_IDS, chatAgentSessionsDir, createChatAgent, parseChatAgentId, sessionsDirForChatAgent, switchChatAgent, } from "./chat-agents/index.js";
+import { CHAT_AGENT_IDS, chatAgentSessionsDir, createChatAgent, parseChatAgentId, switchChatAgent, } from "./chat-agents/index.js";
 import { buildJiwaTools, JiwaStore } from "./chat-agents/jiwa.js";
 import { buildMemoryTools, MemoryStore } from "./chat-agents/memory.js";
 import { buildNolanSystemPrompt, buildNolanAutopilotSystemPrompt } from "./core/nolan-prompt.js";
@@ -35,6 +35,7 @@ import { validateNolanModelPref, effectiveNolanModel, } from "./core/nolan-model
 import { normalizeAutopilotMarkersForHistory, normalizeAppMarkersForHistory, normalizeNolanTurnsForHistory, restoreUserRow, restoreAssistantTexts, autopilotMarkerCopySeed, } from "./core/session-history.js";
 import { AuthStorage } from "./core/auth-storage.js";
 import { cleanupToolOutputs } from "./tools/overflow.js";
+import { readCappedBody } from "./utils/http-body.js";
 import { fetchSubscriptionUsage, MOONSHOT_OAUTH_KEY, SubscriptionUsageError, XIAOMI_CREDITS_KEY, } from "@prestyj/core";
 import { loginAnthropic } from "./core/oauth/anthropic.js";
 import { loginOpenAI } from "./core/oauth/openai.js";
@@ -43,19 +44,20 @@ import { loginKimi } from "./core/oauth/kimi.js";
 import { AUTH_PROVIDERS } from "./core/auth-providers.js";
 import { ensureAppDirs, loadSavedSettings } from "./config.js";
 import { SettingsManager } from "./core/settings-manager.js";
-import { getModel, getMaxThinkingLevel, getContextWindow, MODELS } from "./core/model-registry.js";
+import { getModel, getDefaultThinkingLevel, getContextWindow, MODELS, } from "./core/model-registry.js";
 import { resolveStartOrFallback } from "./core/resolve-start.js";
 import { getGitBranch, getGitDirtyFileCount, isGitRepo } from "./utils/git.js";
 import { extractPlanSteps } from "./utils/plan-steps.js";
 import { getNextThinkingLevel, getSupportedThinkingLevels, isThinkingLevelSupported, } from "./core/thinking-level.js";
 import { PROMPT_COMMANDS } from "./core/prompt-commands.js";
 import { loadCustomCommands } from "./core/custom-commands.js";
-import { discoverProjects, listRecentSessions } from "./core/project-discovery.js";
+import { discoverProjects } from "./core/project-discovery.js";
+import { listSidecarSessions } from "./app-sidecar-sessions.js";
 import { loadTasksSync, saveTasksSync, pruneDoneTasksSync, getNextPendingTask, markTaskInProgress, } from "./core/task-store.js";
 import { initLogger, log } from "./core/logger.js";
 import { RADIO_STATIONS, getCurrentStation, getRadioVolume, playRadio, setRadioVolume, stopRadio, } from "./core/radio.js";
 import { enrichProcessPath } from "./core/shell-path.js";
-import { downscaleForPreview, validateVisionImage } from "./utils/image.js";
+import { downscaleForPreview, shrinkToFit, validateVisionImage } from "./utils/image.js";
 import { startServeMode } from "./modes/serve-mode.js";
 import { loadTelegramConfig, saveTelegramConfig, verifyBotToken } from "./core/telegram-config.js";
 import { loadServers, addServer, removeServer, getServer, parseMcpAddCommand, MCPClientManager, McpOAuthStore, } from "./core/mcp/index.js";
@@ -64,6 +66,7 @@ import { loadProgress, peekProgress, updateProgress } from "./core/progress/stor
 import { awardPrompt, awardCommits } from "./core/progress/engine.js";
 import { detectNewCommits, repoKey } from "./core/progress/git-xp.js";
 import { rebuildFromSessions } from "./core/progress/rebuild.js";
+import { captureSidecarError, flushSidecarErrors, shouldCaptureToolFailure, shouldCaptureUsagePollingError, wrapSidecarHandler, } from "./core/sidecar-error-reporter.js";
 const ALL_PROVIDERS = [
     // US
     "anthropic",
@@ -169,6 +172,7 @@ async function persistModelSelection(settingsFile, provider, model) {
         await sm.set("defaultModel", model);
     }
     catch (err) {
+        captureSidecarError(err, "app-sidecar.settings.persist-model");
         log("WARN", "app-sidecar", "failed to persist model selection", { err: String(err) });
     }
 }
@@ -185,6 +189,7 @@ async function persistThinkingLevel(settingsFile, level) {
             await sm.set("thinkingLevel", level);
     }
     catch (err) {
+        captureSidecarError(err, "app-sidecar.settings.persist-thinking");
         log("WARN", "app-sidecar", "failed to persist thinking level", { err: String(err) });
     }
 }
@@ -202,19 +207,28 @@ async function prepareAttachments(cwd, attachments) {
         const fileName = `${Date.now().toString(36)}-${safe}`;
         const filePath = path.join(dir, fileName);
         const buf = Buffer.from(a.data, "base64");
-        // Validate image attachments before they become native image content blocks.
-        // A corrupt or unsupported-format image (e.g. a malformed .ico, or a .png
-        // with a bad IDAT) makes the provider reject the ENTIRE turn ("image data
-        // ... not a valid image") before the agent can respond. Downgrade such files
-        // to a plain "file" attachment so the model gets a path note and inspects
-        // them with its tools instead of the request 400ing.
+        // Validate and cap image attachments before they become native image content
+        // blocks. Anthropic applies a 2000 px per-dimension cap once conversation
+        // history contains more than 20 images, so every attachment must be safe for
+        // later turns too. Keep the original on disk, but send the resized bytes.
+        // Corrupt or unsupported images become plain files so they cannot reject the
+        // entire provider request.
         let prepared = { ...a };
         if (a.kind === "image") {
-            const validatedType = await validateVisionImage(buf).catch(() => null);
-            if (validatedType)
-                prepared = { ...a, mediaType: validatedType };
-            else
+            try {
+                const resized = await shrinkToFit(buf, a.mediaType);
+                const validatedType = await validateVisionImage(resized.buffer);
+                prepared = validatedType
+                    ? {
+                        ...a,
+                        mediaType: validatedType,
+                        data: resized.buffer.toString("base64"),
+                    }
+                    : { ...a, kind: "file" };
+            }
+            catch {
                 prepared = { ...a, kind: "file" };
+            }
         }
         try {
             await fs.writeFile(filePath, buf);
@@ -227,6 +241,9 @@ async function prepareAttachments(cwd, attachments) {
     return out;
 }
 const FILE_SEARCH_LIMIT = 20;
+// Upper bound on files walked per search (baseline #8 memory cap). Far above the
+// 20-result output limit, so relevance/recency ranking is unaffected in practice.
+const FILE_SEARCH_SCAN_CAP = 50_000;
 /** Score a candidate path against a lowercased query. Higher is better; a
  *  negative score means "no match". Basename hits beat path hits; prefix beats
  *  substring; shorter paths break ties. */
@@ -279,8 +296,13 @@ async function searchProjectFiles(cwd, rawQuery) {
     }
     const ig = ignore.default().add(gitignore);
     // `stats: true` gives mtime without a second stat pass, so the empty-query
-    // "recent files" path is a single walk.
-    const entries = await fg.default("**/*", {
+    // "recent files" path is a single walk. Stream + hard scan cap (baseline #8):
+    // collecting the full result array retained ~0.9 MB per 1k files (18.5 MB at
+    // 20k), unbounded. Bail after FILE_SEARCH_SCAN_CAP entries so a giant repo
+    // can't balloon RSS; the newest/most-relevant matches still surface because
+    // the cap is far above the 20-result output limit.
+    const entries = [];
+    const scanStream = fg.default.stream("**/*", {
         cwd,
         dot: false,
         onlyFiles: true,
@@ -289,6 +311,17 @@ async function searchProjectFiles(cwd, rawQuery) {
         followSymbolicLinks: false,
         stats: true,
     });
+    for await (const entry of scanStream) {
+        entries.push(entry);
+        if (entries.length >= FILE_SEARCH_SCAN_CAP) {
+            scanStream.destroy();
+            log("DEBUG", "app-sidecar", "file search scan cap hit", {
+                cap: String(FILE_SEARCH_SCAN_CAP),
+                cwd,
+            });
+            break;
+        }
+    }
     const files = entries.filter((e) => !ig.ignores(e.path));
     if (!query) {
         return files
@@ -443,7 +476,11 @@ async function runJsonModeIfRequested() {
         maxTurns: maxTurnsRaw ? parseInt(maxTurnsRaw, 10) : undefined,
         allowedTools,
         promptCacheKey: values["prompt-cache-key"],
-    }).catch((err) => {
+    }).catch(async (err) => {
+        captureSidecarError(err, "app-sidecar.json-mode", {
+            provider: String(values.provider ?? "anthropic"),
+        });
+        await flushSidecarErrors();
         process.stderr.write((err instanceof Error ? err.message : String(err)) + "\n");
         process.exit(1);
     });
@@ -452,13 +489,8 @@ async function runJsonModeIfRequested() {
 // ── Daemon-level HTTP helpers (shared by the session-management routes) ─────
 // The per-session route table has its own local copies; these serve the
 // daemon's own POST /session / DELETE /session routes.
-function daemonReadBody(req) {
-    return new Promise((resolve, reject) => {
-        const chunks = [];
-        req.on("data", (c) => chunks.push(c));
-        req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
-        req.on("error", reject);
-    });
+function daemonReadBody(req, res) {
+    return readCappedBody(req, res);
 }
 function daemonJson(res, status, body) {
     res.writeHead(status, {
@@ -544,18 +576,24 @@ async function main() {
     });
     const usageCache = new Map();
     const usageRequests = new Map();
-    // 429 backoff: when the provider rate-limits the usage endpoint, hold the
-    // error result until this timestamp instead of re-polling (and re-logging a
-    // WARN) every 60s — the old cadence hammered a limited endpoint for hours.
+    // 429 backoff: quota endpoints are auxiliary UI data. Honor Retry-After when
+    // provided; otherwise retain the unavailable snapshot for 30 minutes. Clamp
+    // the provider value so a malformed header can neither hammer the endpoint
+    // nor suppress usage data forever.
     const usageRateLimitedUntil = new Map();
-    const USAGE_RATE_LIMIT_BACKOFF_MS = 5 * 60_000;
+    const USAGE_RATE_LIMIT_FALLBACK_BACKOFF_MS = 30 * 60_000;
+    const USAGE_RATE_LIMIT_MIN_BACKOFF_MS = 60_000;
+    const USAGE_RATE_LIMIT_MAX_BACKOFF_MS = 24 * 60 * 60_000;
     async function fetchUsageProvider(provider) {
-        const displayName = provider === "anthropic" ? "Anthropic" : "Codex";
-        if (!(await auth.hasProviderAuth(provider))) {
+        const displayName = provider === "anthropic" ? "Anthropic" : provider === "openai" ? "Codex" : "Kimi";
+        // Kimi plan usage is tracked on the OAuth credential specifically — the
+        // Moonshot platform API key is metered per-token, not per plan window.
+        const authKey = provider === "moonshot" ? MOONSHOT_OAUTH_KEY : provider;
+        if (!(await auth.hasProviderAuth(authKey))) {
             return { provider, displayName, connected: false, windows: [], fetchedAt: Date.now() };
         }
         try {
-            let credentials = await auth.resolveCredentials(provider);
+            let credentials = await auth.resolveCredentials(authKey);
             try {
                 const snapshot = {
                     ...(await fetchSubscriptionUsage(provider, credentials)),
@@ -568,7 +606,7 @@ async function main() {
                 // A provider can revoke an access token before its stored expiry. Refresh
                 // once on 401, matching inference auth recovery, then retry the usage call.
                 if (error instanceof SubscriptionUsageError && error.status === 401) {
-                    credentials = await auth.resolveCredentials(provider, { forceRefresh: true });
+                    credentials = await auth.resolveCredentials(authKey, { forceRefresh: true });
                     const snapshot = {
                         ...(await fetchSubscriptionUsage(provider, credentials)),
                         connected: true,
@@ -581,11 +619,20 @@ async function main() {
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
-            log("WARN", "app-sidecar", "subscription usage fetch failed", { provider, message });
+            if (shouldCaptureUsagePollingError(error)) {
+                captureSidecarError(error, "app-sidecar.usage.fetch", { provider });
+            }
+            let backoffMs;
             if (error instanceof SubscriptionUsageError && error.status === 429) {
-                usageRateLimitedUntil.set(provider, Date.now() + USAGE_RATE_LIMIT_BACKOFF_MS);
+                backoffMs = Math.min(USAGE_RATE_LIMIT_MAX_BACKOFF_MS, Math.max(USAGE_RATE_LIMIT_MIN_BACKOFF_MS, error.retryAfterMs ?? USAGE_RATE_LIMIT_FALLBACK_BACKOFF_MS));
+                usageRateLimitedUntil.set(provider, Date.now() + backoffMs);
             }
-            const connected = await auth.hasProviderAuth(provider);
+            log("WARN", "app-sidecar", "subscription usage fetch failed", {
+                provider,
+                message,
+                ...(backoffMs !== undefined && { backoffMs: String(backoffMs) }),
+            });
+            const connected = await auth.hasProviderAuth(authKey);
             return {
                 provider,
                 displayName,
@@ -640,7 +687,7 @@ async function main() {
             return null;
         }
     }
-    const server = http.createServer((req, res) => {
+    const server = http.createServer(wrapSidecarHandler((req, res) => {
         const url = req.url ?? "/";
         const method = req.method ?? "GET";
         // CORS preflight — the webview origin differs from 127.0.0.1.
@@ -656,7 +703,9 @@ async function main() {
         // ── Daemon-level routes (session lifecycle) ──────────────────────────
         // Create a session for a window: { mode?, cwd, sessionPath? } → { sessionId }.
         if (method === "POST" && url === "/session") {
-            void daemonReadBody(req).then(async (raw) => {
+            void daemonReadBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let body = {};
                 try {
                     body = raw ? JSON.parse(raw) : {};
@@ -684,6 +733,7 @@ async function main() {
                 }
                 catch (err) {
                     const message = err instanceof Error ? err.message : String(err);
+                    captureSidecarError(err, "app-sidecar.session.create");
                     log("ERROR", "app-sidecar", "session create failed", { message });
                     daemonJson(res, 500, { error: message });
                 }
@@ -714,12 +764,13 @@ async function main() {
         if (method === "GET" && (url === "/usage" || url.startsWith("/usage?"))) {
             void (async () => {
                 const provider = new URL(url, `http://${host}`).searchParams.get("provider");
-                if (provider !== "anthropic" && provider !== "openai") {
+                if (provider !== "anthropic" && provider !== "openai" && provider !== "moonshot") {
                     daemonJson(res, 400, { error: "unsupported usage provider" });
                     return;
                 }
                 daemonJson(res, 200, await subscriptionUsage(provider));
             })().catch((error) => {
+                captureSidecarError(error, "app-sidecar.usage.request");
                 log("ERROR", "app-sidecar", "subscription usage request failed", {
                     message: error instanceof Error ? error.message : String(error),
                 });
@@ -735,7 +786,7 @@ async function main() {
             return;
         }
         ctx.handle(req, res, url, method);
-    });
+    }, "app-sidecar.http"));
     server.listen(port, host, () => {
         const addr = server.address();
         // The Rust shell reads this line to learn the daemon port.
@@ -752,6 +803,8 @@ async function main() {
         // Radio playback is app-wide (one stream across all windows), so it stops
         // at the daemon level, not per session.
         stopRadio();
+        // Close the ~/.ezcoder progress fs.watch handle (baseline #8 leak fix).
+        progress.dispose();
         await Promise.all([...sessions.values()].map((c) => c.dispose().catch(() => { })));
         server.close();
         process.exit(0);
@@ -880,6 +933,7 @@ async function createProgressManager(agentDir, broadcastAll) {
             broadcastAll(buildSnapshot(updated), originId);
         }
         catch (err) {
+            captureSidecarError(err, "app-sidecar.progress.award");
             log("DEBUG", "app-sidecar", "progress award failed", {
                 message: err instanceof Error ? err.message : String(err),
             });
@@ -888,6 +942,7 @@ async function createProgressManager(agentDir, broadcastAll) {
     // Watch ~/.ezcoder (dir watch survives the atomic tmp+rename) for progress.json
     // writes from other daemon processes; debounce, reload read-only, dedupe by nonce.
     let watchDebounce = null;
+    let progressWatcher = null;
     try {
         const watcher = fsWatch(agentDir, (_event, filename) => {
             if (filename !== "progress.json")
@@ -909,13 +964,30 @@ async function createProgressManager(agentDir, broadcastAll) {
             }, 150);
         });
         watcher.unref();
+        progressWatcher = watcher;
     }
     catch (err) {
+        captureSidecarError(err, "app-sidecar.progress.watch");
         log("DEBUG", "app-sidecar", "progress watch unavailable", {
             message: err instanceof Error ? err.message : String(err),
         });
     }
-    return { snapshot, awardRun };
+    // Dispose closes the fs.watch handle (baseline #8: it was previously never
+    // closed — a per-daemon leak) and clears any pending debounce timer.
+    function dispose() {
+        if (watchDebounce) {
+            clearTimeout(watchDebounce);
+            watchDebounce = null;
+        }
+        try {
+            progressWatcher?.close();
+        }
+        catch {
+            // Already closed / never opened — nothing to do.
+        }
+        progressWatcher = null;
+    }
+    return { snapshot, awardRun, dispose };
 }
 /**
  * Build one in-process agent session: its AgentSession, SSE client set, event
@@ -934,6 +1006,10 @@ async function createSession(deps, opts) {
     // parsing); the daemon owns the real listen host.
     const host = "127.0.0.1";
     const saved = loadSavedSettings(paths.settingsFile);
+    // Native login/logout and other live sessions share auth.json. Refresh the
+    // daemon-level snapshot before choosing this session's provider so a project
+    // never boots against credentials that were just replaced or disconnected.
+    await auth.load();
     // Per-project model/thinking prefs win over the shared global settings.json:
     // each window (one project cwd) restores its own selection instead of every
     // window reading the same single global slot that the last writer clobbered
@@ -952,9 +1028,14 @@ async function createSession(deps, opts) {
         });
     }
     // Per-project thinking prefs win over the global settings.json fallback.
+    // With no saved level, the default follows the active credential's endpoint:
+    // Kimi K3 on the OAuth coding endpoint starts at its declared default (high),
+    // matching the official kimi-code CLI's plan-usage profile.
     const thinkEnabled = projectPrefs?.thinkingEnabled ?? saved.thinkingEnabled;
     const thinkingLevel = thinkEnabled
-        ? (projectPrefs?.thinkingLevel ?? saved.thinkingLevel ?? getMaxThinkingLevel(model))
+        ? (projectPrefs?.thinkingLevel ??
+            saved.thinkingLevel ??
+            getDefaultThinkingLevel(model, { baseUrl: auth.getStoredBaseUrl(provider) }))
         : undefined;
     // ── SSE fan-out (declared before the session so plan callbacks can use it) ─
     const clients = new Set();
@@ -1001,6 +1082,11 @@ async function createSession(deps, opts) {
         const f = formatError(err);
         const message = f.message ? desktopGuidance(f.message) : undefined;
         const guidance = desktopGuidance(f.guidance);
+        captureSidecarError(err, `app-sidecar.${logLabel.replaceAll(" ", "-")}`, {
+            scope: type,
+            ...(f.provider ? { provider: f.provider } : {}),
+            ...(f.statusCode != null ? { status: String(f.statusCode) } : {}),
+        });
         log("ERROR", "app-sidecar", logLabel, {
             headline: f.headline,
             source: f.source,
@@ -1058,6 +1144,7 @@ async function createSession(deps, opts) {
                 chatAgent = nextAgent;
                 broadcast("chat_agent_change", { chatAgent: nextAgent });
                 await session.persistAppMarker("agent_handoff", { chatAgent: nextAgent }).catch((error) => {
+                    captureSidecarError(error, "app-sidecar.chat-agent.persist-handoff");
                     log("WARN", "app-sidecar", "agent handoff marker persist failed", {
                         message: error instanceof Error ? error.message : String(error),
                     });
@@ -1184,6 +1271,7 @@ async function createSession(deps, opts) {
             .catch(() => false)
             .then(() => syncApprovedPlanProgress(generation))
             .catch((error) => {
+            captureSidecarError(error, "app-sidecar.plan.refresh-progress");
             log("WARN", "app-sidecar", "plan progress refresh failed", {
                 message: error instanceof Error ? error.message : String(error),
             });
@@ -1238,6 +1326,11 @@ async function createSession(deps, opts) {
     session.eventBus.on("tool_call_end", (d) => {
         const name = toolCallNames.get(d.toolCallId) ?? "unknown";
         toolCallNames.delete(d.toolCallId);
+        if (d.isError && shouldCaptureToolFailure(name, d.result)) {
+            // Expected model-correctable validation failures stay in the local log and
+            // conversation. Unexpected failures are reported without private result data.
+            captureSidecarError(new Error(`Tool ${name} failed`), `tool.${name}`, { tool: name });
+        }
         log(d.isError ? "ERROR" : "INFO", "tool", `Tool call ended: ${name}`, {
             id: d.toolCallId,
             durationMs: String(d.durationMs),
@@ -1264,6 +1357,9 @@ async function createSession(deps, opts) {
     session.eventBus.on("server_tool_call", (d) => broadcast("server_tool_call", d));
     session.eventBus.on("turn_end", (d) => broadcast("turn_end", d));
     session.eventBus.on("agent_done", (d) => broadcast("agent_done", d));
+    // Non-clean stop (max_tokens/refusal/provider error) — info-style frame so
+    // the webview can warn instead of presenting truncated output as complete.
+    session.eventBus.on("truncated", (d) => broadcast("truncated", d));
     session.eventBus.on("error", (d) => {
         broadcastError("error", "agent error", d.error);
     });
@@ -1584,6 +1680,7 @@ async function createSession(deps, opts) {
                 catch (error) {
                     // Keep tracking when prompt cleanup fails; hiding the widget here
                     // would claim completion while the approved-plan contract remained.
+                    captureSidecarError(error, "app-sidecar.plan.cleanup");
                     log("WARN", "app-sidecar", "completed plan cleanup failed", {
                         message: error instanceof Error ? error.message : String(error),
                     });
@@ -2039,13 +2136,8 @@ async function createSession(deps, opts) {
         gitPoll.unref?.();
     };
     scheduleGitPoll(5000);
-    function readBody(req) {
-        return new Promise((resolve, reject) => {
-            const chunks = [];
-            req.on("data", (c) => chunks.push(c));
-            req.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
-            req.on("error", reject);
-        });
+    function readBody(req, res) {
+        return readCappedBody(req, res);
     }
     function json(res, status, body) {
         const payload = JSON.stringify(redactValue(body, { secrets: environmentSecrets(process.env) }));
@@ -2083,7 +2175,10 @@ async function createSession(deps, opts) {
             void memoryStore
                 .snapshot()
                 .then((snapshot) => json(res, 200, snapshot))
-                .catch((error) => json(res, 500, { error: error instanceof Error ? error.message : String(error) }));
+                .catch((error) => {
+                captureSidecarError(error, "app-sidecar.memory.snapshot");
+                json(res, 500, { error: error instanceof Error ? error.message : String(error) });
+            });
             return;
         }
         if (method === "DELETE" && url.startsWith("/memories/")) {
@@ -2096,14 +2191,20 @@ async function createSession(deps, opts) {
                 .forget(id)
                 .then(() => memoryStore.snapshot())
                 .then((snapshot) => json(res, 200, snapshot))
-                .catch((error) => json(res, 500, { error: error instanceof Error ? error.message : String(error) }));
+                .catch((error) => {
+                captureSidecarError(error, "app-sidecar.memory.forget");
+                json(res, 500, { error: error instanceof Error ? error.message : String(error) });
+            });
             return;
         }
         if (method === "GET" && url === "/jiwa") {
             void jiwaStore
                 .snapshot()
                 .then((snapshot) => json(res, 200, snapshot))
-                .catch((error) => json(res, 500, { error: error instanceof Error ? error.message : String(error) }));
+                .catch((error) => {
+                captureSidecarError(error, "app-sidecar.jiwa.snapshot");
+                json(res, 500, { error: error instanceof Error ? error.message : String(error) });
+            });
             return;
         }
         if (method === "DELETE" && url.startsWith("/jiwa/")) {
@@ -2116,7 +2217,10 @@ async function createSession(deps, opts) {
                 .forget(id)
                 .then(() => jiwaStore.snapshot())
                 .then((snapshot) => json(res, 200, snapshot))
-                .catch((error) => json(res, 500, { error: error instanceof Error ? error.message : String(error) }));
+                .catch((error) => {
+                captureSidecarError(error, "app-sidecar.jiwa.forget");
+                json(res, 500, { error: error instanceof Error ? error.message : String(error) });
+            });
             return;
         }
         if (method === "GET" && (url === "/events" || url.startsWith("/events?"))) {
@@ -2174,7 +2278,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/settings") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let projectsRoot;
                 try {
                     projectsRoot = JSON.parse(raw).projectsRoot ?? "";
@@ -2197,7 +2303,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/create-project") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let name;
                 try {
                     name = JSON.parse(raw).name ?? "";
@@ -2229,6 +2337,7 @@ async function createSession(deps, opts) {
                     json(res, 200, { path: dir });
                 }
                 catch (err) {
+                    captureSidecarError(err, "app-sidecar.project.create");
                     json(res, 500, { error: err instanceof Error ? err.message : String(err) });
                 }
             });
@@ -2239,6 +2348,7 @@ async function createSession(deps, opts) {
             void discoverProjects()
                 .then((projects) => json(res, 200, { projects }))
                 .catch((err) => {
+                captureSidecarError(err, "app-sidecar.projects.discover");
                 log("ERROR", "app-sidecar", "discoverProjects failed", {
                     message: err instanceof Error ? err.message : String(err),
                 });
@@ -2253,37 +2363,14 @@ async function createSession(deps, opts) {
                 return;
             }
             const requestedAgent = new URL(url, `http://${host}`).searchParams.get("chatAgent");
-            if (requestedAgent === "all") {
-                void Promise.all(CHAT_AGENT_IDS.map(async (agentId) => {
-                    const agentSessions = await listRecentSessions(target, 5, chatAgentSessionsDir(paths.sessionsDir, agentId));
-                    return agentSessions.map((item) => ({ ...item, chatAgent: agentId }));
-                }))
-                    .then(async (groups) => {
-                    const dated = await Promise.all(groups.flat().map(async (item) => ({
-                        item,
-                        mtime: await fs
-                            .stat(item.path)
-                            .then((stat) => stat.mtimeMs)
-                            .catch(() => 0),
-                    })));
-                    const recent = dated
-                        .sort((left, right) => right.mtime - left.mtime)
-                        .slice(0, 5)
-                        .map(({ item }) => item);
-                    json(res, 200, { sessions: recent });
-                })
-                    .catch(() => json(res, 200, { sessions: [] }));
-                return;
-            }
-            // The picker may be served by a sidecar currently running in Chat mode.
-            // An omitted chatAgent always means coding history; chat callers identify
-            // their namespace explicitly (one agent or "all").
-            const sessionsDir = requestedAgent
-                ? sessionsDirForChatAgent(paths.sessionsDir, requestedAgent)
-                : paths.sessionsDir;
-            void listRecentSessions(target, 5, sessionsDir)
+            // An omitted chatAgent means coding history; chat callers identify one
+            // agent or request the combined, recency-sorted "all" listing.
+            void listSidecarSessions(target, requestedAgent, paths.sessionsDir)
                 .then((sessions) => json(res, 200, { sessions }))
-                .catch(() => json(res, 200, { sessions: [] }));
+                .catch((error) => {
+                captureSidecarError(error, "app-sidecar.sessions.list");
+                json(res, 200, { sessions: [] });
+            });
             return;
         }
         if (method === "GET" && url.startsWith("/files")) {
@@ -2291,6 +2378,7 @@ async function createSession(deps, opts) {
             void searchProjectFiles(cwd, q)
                 .then((files) => json(res, 200, { files }))
                 .catch((err) => {
+                captureSidecarError(err, "app-sidecar.files.search");
                 log("ERROR", "app-sidecar", "searchProjectFiles failed", {
                     message: err instanceof Error ? err.message : String(err),
                 });
@@ -2631,7 +2719,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/prompt") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let text;
                 let attachments;
                 let meta;
@@ -2758,7 +2848,9 @@ async function createSession(deps, opts) {
                 json(res, 404, { error: "Nolan is not available in EZ Chat." });
                 return;
             }
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let text;
                 try {
                     text = JSON.parse(raw).text ?? "";
@@ -2817,7 +2909,9 @@ async function createSession(deps, opts) {
                 json(res, 404, { error: "Autopilot is not available in EZ Chat." });
                 return;
             }
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let enabled;
                 try {
                     enabled = Boolean(JSON.parse(raw).enabled);
@@ -2838,7 +2932,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/enhance") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let text;
                 try {
                     text = JSON.parse(raw).text ?? "";
@@ -2859,6 +2955,7 @@ async function createSession(deps, opts) {
                 }
                 catch (err) {
                     const message = err instanceof Error ? err.message : String(err);
+                    captureSidecarError(err, "app-sidecar.prompt-enhancer");
                     log("ERROR", "app-sidecar", "enhance failed", { message });
                     json(res, 500, { error: message });
                 }
@@ -2886,7 +2983,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/radio/volume") {
-            void readBody(req).then((raw) => {
+            void readBody(req, res).then((raw) => {
+                if (raw === null)
+                    return;
                 let volume;
                 try {
                     volume = Number(JSON.parse(raw).volume);
@@ -2909,7 +3008,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/radio") {
-            void readBody(req).then((raw) => {
+            void readBody(req, res).then((raw) => {
+                if (raw === null)
+                    return;
                 let station;
                 try {
                     station = JSON.parse(raw).station ?? "";
@@ -2933,7 +3034,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/tasks/run") {
-            void readBody(req).then((raw) => {
+            void readBody(req, res).then((raw) => {
+                if (raw === null)
+                    return;
                 let id;
                 let all;
                 try {
@@ -2955,7 +3058,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/tasks/add") {
-            void readBody(req).then((raw) => {
+            void readBody(req, res).then((raw) => {
+                if (raw === null)
+                    return;
                 let title;
                 let prompt;
                 try {
@@ -2987,7 +3092,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/tasks/update") {
-            void readBody(req).then((raw) => {
+            void readBody(req, res).then((raw) => {
+                if (raw === null)
+                    return;
                 let id;
                 let status;
                 let title;
@@ -3032,7 +3139,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/tasks/delete") {
-            void readBody(req).then((raw) => {
+            void readBody(req, res).then((raw) => {
+                if (raw === null)
+                    return;
                 let id;
                 try {
                     id = JSON.parse(raw).id ?? "";
@@ -3075,7 +3184,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/model") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let modelId;
                 try {
                     modelId = JSON.parse(raw).model ?? "";
@@ -3147,7 +3258,9 @@ async function createSession(deps, opts) {
         // to BOTH Nolan sessions (chat + autopilot reviewer); a switch landing while
         // either is mid-run defers via the pending-model mechanics.
         if (method === "POST" && url === "/ken/model") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let modelId;
                 try {
                     const parsed = JSON.parse(raw).model;
@@ -3191,7 +3304,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/kill") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let id;
                 try {
                     id = JSON.parse(raw).id ?? "";
@@ -3269,6 +3384,7 @@ async function createSession(deps, opts) {
                     drained,
                 });
             })().catch((error) => {
+                captureSidecarError(error, "app-sidecar.run.cancel");
                 broadcast("cancel_failed", { error: "cancel_failed", runState: runLifecycle.state });
                 json(res, 500, {
                     error: "cancel_failed",
@@ -3296,6 +3412,7 @@ async function createSession(deps, opts) {
                 json(res, 200, { ok: true });
             })
                 .catch((err) => {
+                captureSidecarError(err, "app-sidecar.session.new");
                 json(res, 500, { error: err instanceof Error ? err.message : String(err) });
             });
             return;
@@ -3310,7 +3427,9 @@ async function createSession(deps, opts) {
         //   3. session_reset tells the webview to clear its transcript; it then runs
         //      the "implement it now" prompt in the clean session.
         if (method === "POST" && url === "/plan/accept") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let planPath;
                 try {
                     planPath = JSON.parse(raw).planPath || undefined;
@@ -3350,6 +3469,7 @@ async function createSession(deps, opts) {
                     json(res, 200, { ok: true, planTotal });
                 }
                 catch (err) {
+                    captureSidecarError(err, "app-sidecar.plan.accept");
                     json(res, 500, { error: err instanceof Error ? err.message : String(err) });
                 }
             });
@@ -3361,7 +3481,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/auth/apikey") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let provider = "";
                 let key;
                 let variant;
@@ -3404,7 +3526,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/auth/oauth/start") {
-            void readBody(req).then((raw) => {
+            void readBody(req, res).then((raw) => {
+                if (raw === null)
+                    return;
                 let provider = "";
                 try {
                     provider = JSON.parse(raw).provider ?? "";
@@ -3446,6 +3570,7 @@ async function createSession(deps, opts) {
                         broadcast("auth_done", { provider });
                     }
                     catch (err) {
+                        captureSidecarError(err, "app-sidecar.auth.oauth", { provider });
                         broadcast("auth_error", {
                             provider,
                             message: err instanceof Error ? err.message : String(err),
@@ -3460,7 +3585,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/auth/oauth/code") {
-            void readBody(req).then((raw) => {
+            void readBody(req, res).then((raw) => {
+                if (raw === null)
+                    return;
                 let code;
                 try {
                     code = JSON.parse(raw).code ?? "";
@@ -3480,7 +3607,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/auth/logout") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let provider;
                 try {
                     provider = JSON.parse(raw).provider ?? "";
@@ -3519,7 +3648,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/telegram") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let botTokenInput;
                 let userIdInput;
                 try {
@@ -3587,6 +3718,7 @@ async function createSession(deps, opts) {
                 }
                 catch (err) {
                     serveController = null;
+                    captureSidecarError(err, "app-sidecar.serve.start", { provider: st.provider });
                     json(res, 400, { error: err instanceof Error ? err.message : String(err) });
                 }
             })();
@@ -3613,6 +3745,7 @@ async function createSession(deps, opts) {
             void buildMcpRows(targetCwd)
                 .then((servers) => json(res, 200, { servers }))
                 .catch((err) => {
+                captureSidecarError(err, "app-sidecar.mcp.list");
                 log("ERROR", "app-sidecar", "buildMcpRows failed", {
                     message: err instanceof Error ? err.message : String(err),
                 });
@@ -3621,7 +3754,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/mcp/add") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let line;
                 let scopeValue;
                 let bodyCwd;
@@ -3669,6 +3804,7 @@ async function createSession(deps, opts) {
                     });
                 }
                 catch (err) {
+                    captureSidecarError(err, "app-sidecar.mcp.add", { server: config.name });
                     json(res, 500, {
                         error: err instanceof Error ? err.message : String(err),
                     });
@@ -3677,7 +3813,9 @@ async function createSession(deps, opts) {
             return;
         }
         if (method === "POST" && url === "/mcp/remove") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let name;
                 let scopeValue;
                 let bodyCwd;
@@ -3714,7 +3852,9 @@ async function createSession(deps, opts) {
         // `mcp_auth_error`. Responds 202 immediately and runs the flow in the
         // background (the browser round-trip can take a while).
         if (method === "POST" && url === "/mcp/login") {
-            void readBody(req).then(async (raw) => {
+            void readBody(req, res).then(async (raw) => {
+                if (raw === null)
+                    return;
                 let name;
                 let scopeValue;
                 let bodyCwd;
@@ -3758,6 +3898,7 @@ async function createSession(deps, opts) {
                     }
                 }
                 catch (err) {
+                    captureSidecarError(err, "app-sidecar.mcp.login", { server: name });
                     broadcast("mcp_auth_error", {
                         name,
                         message: err instanceof Error ? err.message : String(err),
@@ -3804,7 +3945,9 @@ async function createSession(deps, opts) {
         dispose,
     };
 }
-main().catch((err) => {
+main().catch(async (err) => {
+    captureSidecarError(err, "app-sidecar.main", { severity: "fatal" });
+    await flushSidecarErrors();
     const message = err instanceof Error ? err.message : String(err);
     process.stderr.write(`GG_APP_FATAL ${message}\n`);
     process.exit(1);