@prestyj/cli 5.9.0 → 5.11.0

package/dist/core/sandbox.test.js

@@ -0,0 +1,157 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { getAppPaths } from "../config.js";
+import { DEFAULT_SETTINGS } from "./settings-manager.js";
+import { buildSandboxSettings, prepareSandboxLaunch, resetSandboxSupportProbeForTests, } from "./sandbox.js";
+describe("buildSandboxSettings", () => {
+    it("limits writes to the workspace and temp directory, and enforces an allowlist", () => {
+        // A real directory, so symlinked temp roots (macOS /var → /private/var) are
+        // exercised rather than silently skipped.
+        const cwd = fs.mkdtempSync(path.join(os.tmpdir(), "gg-sandbox-workspace-"));
+        const settings = buildSandboxSettings(cwd, { mode: "workspace", allowedDomains: [] }, "darwin");
+        expect(settings.filesystem.allowWrite).toEqual(expect.arrayContaining([
+            fs.realpathSync(path.resolve(cwd)),
+            fs.realpathSync(path.resolve(os.tmpdir())),
+            getAppPaths().agentDir,
+        ]));
+        expect(settings.filesystem.allowWrite).not.toContain(os.homedir());
+        // The sandbox matches real paths, so a deny rule must cover the resolved
+        // workspace or it silently never fires (macOS /var → /private/var).
+        expect(settings.filesystem.denyWrite).toEqual(expect.arrayContaining([path.join(fs.realpathSync(path.resolve(cwd)), ".env")]));
+        expect(settings.filesystem.denyRead).toEqual(expect.arrayContaining([
+            path.join(os.homedir(), ".ssh"),
+            path.join(os.homedir(), ".ezcoder", "auth.json"),
+        ]));
+        expect(settings.network).toMatchObject({
+            strictAllowlist: true,
+            allowUnixSockets: [],
+            // Dev servers and the screenshot tool bind loopback; blocking it would
+            // break core workflows without containing anything.
+            allowLocalBinding: true,
+        });
+        // Egress is an allowlist, never open: an unknown host stays unreachable.
+        expect(settings.network.allowedDomains).not.toContain("api.example.com");
+    });
+    it("keeps bash writable in the same roots the write guard already allows", () => {
+        const cwd = path.join(os.tmpdir(), "gg-sandbox-workspace");
+        const extraRoot = path.join(os.tmpdir(), "gg-sandbox-second-root");
+        const settings = buildSandboxSettings(cwd, { mode: "workspace", allowedDomains: [], additionalRoots: [extraRoot] }, "darwin");
+        // Multi-root sessions and ~/.ezcoder must not silently lose bash writes.
+        expect(settings.filesystem.allowWrite).toEqual(expect.arrayContaining([path.resolve(cwd), path.resolve(extraRoot), getAppPaths().agentDir]));
+        expect(settings.filesystem.allowWrite).not.toContain(os.homedir());
+    });
+    it("honors the outside-workspace opt-out instead of contradicting the user", () => {
+        const settings = buildSandboxSettings(path.join(os.tmpdir(), "gg-sandbox-workspace"), { mode: "workspace", allowedDomains: [], allowOutsideWorkspaceWrites: true }, "darwin");
+        expect(settings.filesystem.allowWrite).toContain(os.homedir());
+        // Consenting to write outside the workspace is not consent to leak secrets.
+        expect(settings.filesystem.denyRead).toContain(path.join(os.homedir(), ".ssh"));
+    });
+    it("normalizes and de-duplicates explicit network domains deterministically", () => {
+        const settings = buildSandboxSettings("/workspace", {
+            mode: "workspace",
+            allowedDomains: [" registry.npmjs.org ", "github.com", "github.com", ""],
+            strictDomains: true,
+        });
+        expect(settings.network.allowedDomains).toEqual(["github.com", "registry.npmjs.org"]);
+    });
+});
+describe("sandbox defaults", () => {
+    it("stays opt-in while upstream breaks core workflows", () => {
+        // Verified upstream breakage: Linux pipes/redirections fail under seccomp,
+        // macOS git-over-SSH fails the SOCKS handshake, and `git config --global`
+        // is refused. Turning this on by default would break `git push` and piped
+        // commands right after an update. Revisit when those are fixed upstream.
+        expect(DEFAULT_SETTINGS.sandboxMode).toBe("off");
+    });
+    it("reaches mainstream toolchains out of the box, so the default is invisible", () => {
+        const { network } = buildSandboxSettings("/workspace", {
+            mode: "auto",
+            allowedDomains: [],
+        });
+        // If any of these were missing, `npm install` / `pip install` / `git clone`
+        // would fail for every user the moment the sandbox shipped on.
+        for (const host of [
+            "github.com",
+            "registry.npmjs.org",
+            "pypi.org",
+            "files.pythonhosted.org",
+            "proxy.golang.org",
+            "crates.io",
+            "rubygems.org",
+        ]) {
+            expect(network.allowedDomains).toContain(host);
+        }
+    });
+    it("rejects patterns the sandbox itself refuses, so a bad entry cannot brick startup", () => {
+        const { network } = buildSandboxSettings("/workspace", {
+            mode: "auto",
+            allowedDomains: [],
+        });
+        for (const domain of network.allowedDomains) {
+            expect(domain).not.toBe("*");
+            // sandbox-runtime rejects overly broad wildcards like "*.com".
+            expect(domain).not.toMatch(/^\*\.[a-z]+$/);
+            expect(domain).not.toMatch(/[:/]/);
+        }
+    });
+    it("adds user hosts to the defaults, and honors an explicit takeover", () => {
+        const merged = buildSandboxSettings("/workspace", {
+            mode: "auto",
+            allowedDomains: ["internal.example.com"],
+        });
+        expect(merged.network.allowedDomains).toContain("internal.example.com");
+        expect(merged.network.allowedDomains).toContain("github.com");
+        const strict = buildSandboxSettings("/workspace", {
+            mode: "auto",
+            allowedDomains: ["internal.example.com"],
+            strictDomains: true,
+        });
+        expect(strict.network.allowedDomains).toEqual(["internal.example.com"]);
+    });
+});
+describe("prepareSandboxLaunch", () => {
+    const shell = { file: "bash", args: ["-c", "echo ok"], isCmdFallback: false };
+    beforeEach(() => resetSandboxSupportProbeForTests());
+    afterEach(() => {
+        vi.unstubAllEnvs();
+        resetSandboxSupportProbeForTests();
+    });
+    it("preserves the original shell only for explicit sandbox opt-out", async () => {
+        await expect(prepareSandboxLaunch(shell, "/workspace", { mode: "off", allowedDomains: [] })).resolves.toEqual({ ...shell, sandboxed: false });
+    });
+    it("wraps the command where isolation is available, and honors the mode contract where it is not", async () => {
+        // Whether an OS sandbox is usable is a property of the host, not of this
+        // code: CI Linux has no bwrap/socat and CI Windows has no provisioned
+        // sandbox user. `auto` never throws, so it reports which branch applies.
+        const probe = await prepareSandboxLaunch(shell, os.tmpdir(), {
+            mode: "auto",
+            allowedDomains: [],
+        });
+        if (!probe.sandboxed) {
+            // Unsupported host: `auto` degrades and `workspace` fails closed.
+            expect(probe).toEqual({ ...shell, sandboxed: false });
+            await expect(prepareSandboxLaunch(shell, os.tmpdir(), { mode: "workspace", allowedDomains: [] })).rejects.toThrow(/Install the OS sandbox prerequisites/);
+            return;
+        }
+        const launch = await prepareSandboxLaunch(shell, os.tmpdir(), {
+            mode: "workspace",
+            allowedDomains: [],
+        });
+        expect(launch.sandboxed).toBe(true);
+        expect(launch.file).toBe(process.execPath);
+        expect(launch.args).toEqual(expect.arrayContaining(["--settings", "--", "bash", "-c", "echo ok"]));
+    });
+    it("degrades instead of breaking every command when prerequisites are missing", async () => {
+        // An unusable interpreter makes the probe child exit non-zero, standing in
+        // for bwrap-less Linux or an unprovisioned Windows sandbox user.
+        vi.spyOn(process, "execPath", "get").mockReturnValue("/nonexistent/gg-node");
+        await expect(prepareSandboxLaunch(shell, os.tmpdir(), { mode: "auto", allowedDomains: [] })).resolves.toEqual({ ...shell, sandboxed: false });
+    });
+    it("fails closed in strict workspace mode with actionable install guidance", async () => {
+        vi.spyOn(process, "execPath", "get").mockReturnValue("/nonexistent/gg-node");
+        await expect(prepareSandboxLaunch(shell, os.tmpdir(), { mode: "workspace", allowedDomains: [] })).rejects.toThrow(/bubblewrap \+ socat|windows-install/);
+    });
+});
+//# sourceMappingURL=sandbox.test.js.map

package/dist/core/sandbox.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.test.js","sourceRoot":"","sources":["../../src/core/sandbox.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,gCAAgC,GACjC,MAAM,cAAc,CAAC;AAEtB,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAEhG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,OAAO,CAC5C,MAAM,CAAC,eAAe,CAAC;YACrB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1C,WAAW,EAAE,CAAC,QAAQ;SACvB,CAAC,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,OAAO,CAC3C,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAChF,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,OAAO,CAC1C,MAAM,CAAC,eAAe,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC;SACjD,CAAC,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC;YACrC,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,EAAE;YACpB,uEAAuE;YACvE,oDAAoD;YACpD,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QACH,yEAAyE;QACzE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,oBAAoB,CACnC,GAAG,EACH,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,EACvE,QAAQ,CACT,CAAC;QAEF,yEAAyE;QACzE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,OAAO,CAC5C,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAC7F,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,QAAQ,GAAG,oBAAoB,CACnC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,EAC9C,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,EAC5E,QAAQ,CACT,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,4EAA4E;QAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,EAAE;YAClD,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,CAAC,sBAAsB,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC;YACxE,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,YAAY,EAAE;YACrD,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QAEH,4EAA4E;QAC5E,+DAA+D;QAC/D,KAAK,MAAM,IAAI,IAAI;YACjB,YAAY;YACZ,oBAAoB;YACpB,UAAU;YACV,wBAAwB;YACxB,kBAAkB;YAClB,WAAW;YACX,cAAc;SACf,EAAE,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,YAAY,EAAE;YACrD,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QAEH,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,+DAA+D;YAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE;YAChD,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,CAAC,sBAAsB,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE;YAChD,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,CAAC,sBAAsB,CAAC;YACxC,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAE9E,UAAU,CAAC,GAAG,EAAE,CAAC,gCAAgC,EAAE,CAAC,CAAC;IACrD,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,gCAAgC,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,CACV,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAC/E,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,yEAAyE;QACzE,sEAAsE;QACtE,yEAAyE;QACzE,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3D,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,kEAAkE;YAClE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,MAAM,MAAM,CACV,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CACpF,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;YAC5D,IAAI,EAAE,WAAW;YACjB,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CACzB,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,2EAA2E;QAC3E,iEAAiE;QACjE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC;QAE7E,MAAM,MAAM,CACV,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAC/E,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC;QAE7E,MAAM,MAAM,CACV,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CACpF,CAAC,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/session-compaction.d.ts

@@ -1,5 +1,7 @@
 import type { Message, Provider } from "@prestyj/ai";
 import type { SessionManager } from "./session-manager.js";
+/** Stable identity for one compaction source, including internal provenance. */
+export declare function sourceFingerprint(messages: readonly Message[]): string;
 export declare function appendMessagesToSession(sessionManager: SessionManager, sessionPath: string, messages: readonly Message[], startIndex?: number): Promise<void>;
 export declare function createCompactedSessionCheckpoint(sessionManager: SessionManager, options: {
     cwd: string;
@@ -7,6 +9,10 @@ export declare function createCompactedSessionCheckpoint(sessionManager: Session
     model: string;
     messages: readonly Message[];
     conversationId?: string;
+    generation?: number;
+    parentSessionId?: string;
+    sourceFingerprint?: string;
+    retainedMessageCount?: number;
     preview?: string;
     title?: string;
 }): Promise<{

package/dist/core/session-compaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-compaction.d.ts","sourceRoot":"","sources":["../../src/core/session-compaction.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAA4B,MAAM,sBAAsB,CAAC;AAErF,wBAAsB,uBAAuB,CAC3C,cAAc,EAAE,cAAc,EAC9B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,UAAU,SAAI,GACb,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,wBAAsB,gCAAgC,CACpD,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBvC;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,EAAE,CAErF;AAED,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAK1F"}
+{"version":3,"file":"session-compaction.d.ts","sourceRoot":"","sources":["../../src/core/session-compaction.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,KAAK,EAAE,cAAc,EAA4B,MAAM,sBAAsB,CAAC;AAErF,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAGtE;AAED,wBAAsB,uBAAuB,CAC3C,cAAc,EAAE,cAAc,EAC9B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,UAAU,SAAI,GACb,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,wBAAsB,gCAAgC,CACpD,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAqBvC;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,EAAE,CAIrF;AAED,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAK1F"}

package/dist/core/session-compaction.js

@@ -1,4 +1,10 @@
 import crypto from "node:crypto";
+import { getHistoryMessageVisibility } from "./session-history.js";
+/** Stable identity for one compaction source, including internal provenance. */
+export function sourceFingerprint(messages) {
+    const source = messages.filter((message) => message.role !== "system");
+    return crypto.createHash("sha256").update(JSON.stringify(source)).digest("hex");
+}
 export async function appendMessagesToSession(sessionManager, sessionPath, messages, startIndex = 0) {
     for (let i = startIndex; i < messages.length; i++) {
         const msg = messages[i];
@@ -17,6 +23,10 @@ export async function appendMessagesToSession(sessionManager, sessionPath, messa
 export async function createCompactedSessionCheckpoint(sessionManager, options) {
     const session = await sessionManager.create(options.cwd, options.provider, options.model, {
         conversationId: options.conversationId,
+        generation: options.generation,
+        parentSessionId: options.parentSessionId,
+        sourceFingerprint: options.sourceFingerprint,
+        retainedMessageCount: options.retainedMessageCount,
         preview: options.preview ?? options.title,
     });
     await appendMessagesToSession(sessionManager, session.path, options.messages, 0);
@@ -33,7 +43,7 @@ export async function createCompactedSessionCheckpoint(sessionManager, options)
     return { path: session.path, id: session.id };
 }
 export function getRestoredMessagesForDisplay(messages) {
-    return messages.filter((msg) => msg.role !== "system");
+    return messages.filter((message) => message.role !== "system" && getHistoryMessageVisibility(message) !== "hidden");
 }
 export function formatRestoreInfoText(originalCount, restoredCount) {
     if (originalCount === restoredCount) {

package/dist/core/session-compaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-compaction.js","sourceRoot":"","sources":["../../src/core/session-compaction.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAIjC,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,cAA8B,EAC9B,WAAmB,EACnB,QAA4B,EAC5B,UAAU,GAAG,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACpC,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,GAAG;SACb,CAAC;QACF,MAAM,cAAc,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,cAA8B,EAC9B,OAQC;IAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE;QACxF,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK;KAC1C,CAAC,CAAC;IACH,MAAM,uBAAuB,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,UAAU,GAAe;YAC7B,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;QACF,MAAM,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAA4B;IACxE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,aAAqB,EAAE,aAAqB;IAChF,IAAI,aAAa,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO,uBAAuB,aAAa,YAAY,CAAC;IAC1D,CAAC;IACD,OAAO,iCAAiC,aAAa,MAAM,aAAa,YAAY,CAAC;AACvF,CAAC"}
+{"version":3,"file":"session-compaction.js","sourceRoot":"","sources":["../../src/core/session-compaction.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAGnE,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,QAA4B;IAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,cAA8B,EAC9B,WAAmB,EACnB,QAA4B,EAC5B,UAAU,GAAG,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACpC,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,GAAG;SACb,CAAC;QACF,MAAM,cAAc,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,cAA8B,EAC9B,OAYC;IAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE;QACxF,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK;KAC1C,CAAC,CAAC;IACH,MAAM,uBAAuB,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,UAAU,GAAe;YAC7B,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;QACF,MAAM,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAA4B;IACxE,OAAO,QAAQ,CAAC,MAAM,CACpB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,2BAA2B,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC5F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,aAAqB,EAAE,aAAqB;IAChF,IAAI,aAAa,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO,uBAAuB,aAAa,YAAY,CAAC;IAC1D,CAAC;IACD,OAAO,iCAAiC,aAAa,MAAM,aAAa,YAAY,CAAC;AACvF,CAAC"}

package/dist/core/session-compaction.test.js

@@ -3,7 +3,7 @@ import { tmpdir } from "node:os";
 import path from "node:path";
 import { afterEach, describe, expect, it } from "vitest";
 import { SessionManager } from "./session-manager.js";
-import { appendMessagesToSession, createCompactedSessionCheckpoint, formatRestoreInfoText, getRestoredMessagesForDisplay, } from "./session-compaction.js";
+import { appendMessagesToSession, createCompactedSessionCheckpoint, formatRestoreInfoText, getRestoredMessagesForDisplay, sourceFingerprint, } from "./session-compaction.js";
 const tempDirs = [];
 async function makeTempDir() {
     const dir = await mkdtemp(path.join(tmpdir(), "gg-session-compaction-"));
@@ -32,6 +32,10 @@ describe("session compaction persistence", () => {
             model: "gpt-5",
             messages,
             conversationId: "original-conversation",
+            generation: 3,
+            parentSessionId: "parent-checkpoint",
+            sourceFingerprint: "f".repeat(64),
+            retainedMessageCount: 1,
             title: "Stable project title",
         });
         const loaded = await manager.load(checkpoint.path);
@@ -40,6 +44,10 @@ describe("session compaction persistence", () => {
         expect(loaded.header.provider).toBe("openai");
         expect(loaded.header.model).toBe("gpt-5");
         expect(loaded.header.conversationId).toBe("original-conversation");
+        expect(loaded.header.generation).toBe(3);
+        expect(loaded.header.parentSessionId).toBe("parent-checkpoint");
+        expect(loaded.header.sourceFingerprint).toBe("f".repeat(64));
+        expect(loaded.header.retainedMessageCount).toBe(1);
         expect(loaded.header.preview).toBe("Stable project title");
         expect(loaded.entries.find((entry) => entry.type === "label")?.label).toBe("Stable project title");
         expect(loadedMessages).toEqual(messages.slice(1));
@@ -47,6 +55,15 @@ describe("session compaction persistence", () => {
         expect(file).not.toContain("system prompt");
         expect(file).toContain("[Previous conversation summary]");
     });
+    it("fingerprints provenance as part of the non-system compaction source", () => {
+        const base = { role: "user", content: "same text" };
+        const tagged = {
+            ...base,
+            provenance: { source: "runtime", kind: "automation", visibility: "hidden" },
+        };
+        expect(sourceFingerprint([message("system", "one"), base])).toBe(sourceFingerprint([message("system", "different"), base]));
+        expect(sourceFingerprint([base])).not.toBe(sourceFingerprint([tagged]));
+    });
     it("appends only messages at and after the requested start index", async () => {
         const sessionsDir = await makeTempDir();
         const manager = new SessionManager(sessionsDir);

package/dist/core/session-compaction.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-compaction.test.js","sourceRoot":"","sources":["../../src/core/session-compaction.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,uBAAuB,EACvB,gCAAgC,EAChC,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,QAAQ,GAAa,EAAE,CAAC;AAE9B,KAAK,UAAU,WAAW;IACxB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACzE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,IAAqB,EAAE,OAAe;IACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAa,CAAC;AACtC,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG;YACf,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC;YAClC,OAAO,CAAC,MAAM,EAAE,0CAA0C,CAAC;YAC3D,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;YAC3B,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC;SAClC,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,gCAAgC,CAAC,OAAO,EAAE;YACjE,GAAG,EAAE,OAAO;YACZ,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,OAAO;YACd,QAAQ;YACR,cAAc,EAAE,uBAAuB;YACvC,KAAK,EAAE,sBAAsB;SAC9B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CACxE,sBAAsB,CACvB,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAElD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG;YACf,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC;YAClC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC;YACpC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC;YAClC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC;SAC/B,CAAC;QAEF,MAAM,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,QAAQ,GAAG,6BAA6B,CAAC;YAC7C,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC;YAClC,OAAO,CAAC,MAAM,EAAE,0CAA0C,CAAC;YAC3D,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACrD,gDAAgD,CACjD,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"session-compaction.test.js","sourceRoot":"","sources":["../../src/core/session-compaction.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,uBAAuB,EACvB,gCAAgC,EAChC,qBAAqB,EACrB,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,QAAQ,GAAa,EAAE,CAAC;AAE9B,KAAK,UAAU,WAAW;IACxB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACzE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,IAAqB,EAAE,OAAe;IACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAa,CAAC;AACtC,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG;YACf,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC;YAClC,OAAO,CAAC,MAAM,EAAE,0CAA0C,CAAC;YAC3D,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;YAC3B,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC;SAClC,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,gCAAgC,CAAC,OAAO,EAAE;YACjE,GAAG,EAAE,OAAO;YACZ,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,OAAO;YACd,QAAQ;YACR,cAAc,EAAE,uBAAuB;YACvC,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,mBAAmB;YACpC,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,oBAAoB,EAAE,CAAC;YACvB,KAAK,EAAE,sBAAsB;SAC9B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CACxE,sBAAsB,CACvB,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAElD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,IAAI,GAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAY;YACtB,GAAG,IAAI;YACP,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE;SAC5E,CAAC;QACF,MAAM,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9D,iBAAiB,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,CAC1D,CAAC;QACF,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG;YACf,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC;YAClC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC;YACpC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC;YAClC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC;SAC/B,CAAC;QAEF,MAAM,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,QAAQ,GAAG,6BAA6B,CAAC;YAC7C,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC;YAClC,OAAO,CAAC,MAAM,EAAE,0CAA0C,CAAC;YAC3D,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACrD,gDAAgD,CACjD,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/session-export.d.ts

@@ -0,0 +1,98 @@
+import type { Message } from "@prestyj/ai";
+/**
+ * Markdown transcript export.
+ *
+ * Renders a session's persisted messages into a single self-contained `.md`
+ * file a human can read, paste into a PR, or hand to a teammate. Deliberately
+ * NOT built on the webview's `Item[]`: the app keeps tool activity in the
+ * pinned LiveToolPanel and never in the transcript, so serializing from there
+ * would export a chat with the actual work missing.
+ *
+ * Bubble text goes through the SAME `restoreUserRow` / `restoreAssistantTexts`
+ * helpers the `/history` resume path uses, so what lands in the file matches
+ * what the user saw on screen (steering wrappers, attachment notes and
+ * autopilot preambles stripped) rather than the raw provider payload.
+ */
+/** Hard cap on a single tool result's rendered text. Sessions already cap
+ *  persisted tool text at 40k chars; an export is for reading, so it gets a
+ *  much tighter budget — enough to see what happened, not a data dump. */
+export declare const MAX_TOOL_RESULT_CHARS = 1500;
+/** Hard cap on a single tool call's rendered arguments. */
+export declare const MAX_TOOL_ARGS_CHARS = 800;
+export interface SessionExportMeta {
+    /** Workspace mode this session ran in — picks the filename + title wording. */
+    mode: "chat" | "code";
+    cwd: string;
+    provider: string;
+    model: string;
+    /** Session id (a short prefix is shown in the header). */
+    sessionId?: string;
+    /** Export timestamp. Defaults to now. */
+    date?: Date;
+}
+/**
+ * How much of the agent's tool work to render.
+ *
+ * - `summary` (default) — one dim line per burst of tool calls, naming what ran
+ *   (`read src/a.ts`, `bash pnpm build`). Keeps the narrative of what the agent
+ *   did without the payloads. A real 1,346-message session is 708KB at `full`
+ *   and 71KB here — the same story, minus the 90% no human was going to read.
+ * - `none` — pure conversation, nothing but the two voices.
+ * - `full` — collapsed `<details>` with arguments and (truncated) results. For
+ *   debugging and bug reports, not for sharing.
+ */
+export type ToolDetail = "none" | "summary" | "full";
+export interface SessionExportOptions {
+    /** How much tool work to render. Default `summary`. */
+    toolDetail?: ToolDetail;
+    /** Render the model's reasoning blocks. Default false — thinking is scratch
+     *  work, and a shared transcript is better without it. */
+    includeThinking?: boolean;
+}
+/** `2026-07-26-1402` — local time, sortable, and unique enough that two
+ *  exports in the same day don't silently collide in the save dialog. */
+export declare function exportTimestamp(date: Date): string;
+/**
+ * Default filename offered in the native save dialog, e.g.
+ * `your-chat-2026-07-26-1402.md`. Coding sessions say `session` instead of
+ * `chat` so a folder of exports stays self-describing.
+ */
+export declare function defaultExportFilename(mode: "chat" | "code", date?: Date): string;
+/** One-line summary of a tool call for the `<details>` summary row: the tool
+ *  name plus its most identifying argument (path, command, pattern, …). */
+export declare function toolSummary(name: string, args: Record<string, unknown>): string;
+/**
+ * Render a tool call's arguments, or null when there's nothing worth showing.
+ *
+ * A lone string argument (the overwhelmingly common shape — `bash`'s command, a
+ * `web_fetch` url) is rendered raw in a fence: `JSON.stringify` would turn a
+ * shell one-liner into unreadable `\"` / `\n` soup. It's dropped entirely when
+ * the summary row already showed that exact value in full, so short calls don't
+ * say the same thing twice. Everything else falls back to pretty JSON.
+ */
+export declare function renderToolArgs(args: Record<string, unknown>): string | null;
+/**
+ * One dim line standing in for a burst of tool calls, e.g.
+ * `_🔧 read src/a.ts · bash pnpm build · edit App.tsx · +4 more_`.
+ *
+ * Entries are deduped so an agent that reads the same file three times says it
+ * once, and capped so a 40-tool burst doesn't become a wall. Failures are still
+ * called out — a reader skimming for what went wrong shouldn't have to re-export
+ * at `full` to discover that something did.
+ */
+export declare function renderToolSummaryLine(calls: readonly {
+    name: string;
+    args: Record<string, unknown>;
+    failed: boolean;
+}[]): string | null;
+/**
+ * Render a session's messages as Markdown.
+ *
+ * System messages are always dropped (the system prompt is ours, not the
+ * user's, and shipping it in a shared file leaks internals). Compaction
+ * summaries and self-correction hook prompts are machine-facing injections —
+ * they render as a quiet italic marker instead of a user bubble, exactly like
+ * the app shows them.
+ */
+export declare function sessionToMarkdown(meta: SessionExportMeta, messages: readonly Message[], options?: SessionExportOptions): string;
+//# sourceMappingURL=session-export.d.ts.map

package/dist/core/session-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-export.d.ts","sourceRoot":"","sources":["../../src/core/session-export.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,aAAa,CAAC;AAO9D;;;;;;;;;;;;;GAaG;AAEH;;0EAE0E;AAC1E,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAC1C,2DAA2D;AAC3D,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;8DAC0D;IAC1D,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAaD;yEACyE;AACzE,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAKlD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,OAAa,GAAG,MAAM,CAGtF;AAsDD;2EAC2E;AAC3E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAO/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAkB3E;AAMD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,EAAE,GACjF,MAAM,GAAG,IAAI,CAkBf;AAiCD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,GAAE,oBAAyB,GACjC,MAAM,CA+JR"}