@prismshadow/penguin-server 0.1.0 → 0.1.1

package/dist/api/types.d.ts

@@ -159,6 +159,13 @@ interface ModelInfo {
      * unset (= treated as supported).
      */
     vision?: boolean;
+    /**
+     * Per-model max output tokens (TOML `max_tokens` annotation; user-only, never preset by the
+     * built-in catalog): when set it wins over the Agent's `system_config.model.max_tokens`;
+     * unset = inherit the Agent value. Lets a small-context model cap its output below the
+     * seeded per-Agent default (32000), which cannot fit into e.g. a 32k context window.
+     */
+    maxTokens?: number;
     pricing?: ModelPricingDto;
     /** Environment variable name to fall back to when api_key is empty (e.g. ANTHROPIC_API_KEY); unset if no known fallback. */
     envKey?: string;
@@ -192,6 +199,8 @@ interface ModelUpdateEntry {
     clientType?: string;
     /** Whether image input (vision/multimodal) is supported; omitted = supported (not persisted). */
     vision?: boolean;
+    /** Per-model max output tokens, a positive integer (wins over the Agent config); omitted = inherit the Agent value (the annotation is cleared). */
+    maxTokens?: number;
     pricing?: ModelPricingDto;
     /** Providing it overwrites and updates createdAt; omitting it keeps the existing value. */
     apiKey?: string;
@@ -367,7 +376,7 @@ interface SessionInfo {
     approvalMode: ApprovalMode;
     /** Short title auto-generated by the model after the first turn; unset until generated (frontend shows "New Chat"). */
     title?: string;
-    /** Session source (for list badges); unset for user-created sessions. */
+    /** Session source (for list badges/folders), derived from core session_meta — the single source of truth (not stored in the DB); unset for user-created sessions. */
     source?: SessionSource;
     createdAt: string;
     status: SessionStatus;

package/dist/index.js

@@ -54,9 +54,8 @@ CREATE TABLE IF NOT EXISTS sessions (
   approval_mode TEXT NOT NULL DEFAULT 'allow-all',   -- allow-all|deny-all|read-only|always-ask
   title         TEXT,                                -- auto-generated by the model after the first exchange; NULL=not yet (frontend shows "New chat")
   archived_at   TEXT,                                -- archive time; NULL=not archived (shown by default; archived ones move under "Archived")
-  source        TEXT,                                -- session origin: NULL=user-created | schedule (scheduled task) | subagent (child session)
   created_at    TEXT NOT NULL
-);
+);                                            -- session origin is NOT stored: session_meta in the Trace is the single source of truth (see runtime/session-sources.ts)
 CREATE TABLE IF NOT EXISTS usage_records (
   id                INTEGER PRIMARY KEY AUTOINCREMENT,
   ts                TEXT NOT NULL,
@@ -525,7 +524,6 @@ function mapRow3(r) {
     approvalMode: r.approval_mode,
     title: r.title ?? null,
     archivedAt: r.archived_at ?? null,
-    source: r.source ?? null,
     createdAt: r.created_at
   };
 }
@@ -536,8 +534,8 @@ var SessionsRepo = class {
   db;
   insert(row) {
     this.db.prepare(
-      `INSERT INTO sessions (session_id, project_id, agent_id, provider, model_id, workspace, approval_mode, title, source, created_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+      `INSERT INTO sessions (session_id, project_id, agent_id, provider, model_id, workspace, approval_mode, title, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
     ).run(
       row.sessionId,
       row.projectId,
@@ -547,15 +545,14 @@ var SessionsRepo = class {
       row.workspace,
       row.approvalMode,
       row.title,
-      row.source ?? null,
       row.createdAt
     );
   }
   /** Idempotent insert: used when Trace directory discovery backfills a row (concurrent listing discovering the same Session no longer triggers a UNIQUE violation). */
   insertOrIgnore(row) {
     this.db.prepare(
-      `INSERT OR IGNORE INTO sessions (session_id, project_id, agent_id, provider, model_id, workspace, approval_mode, title, source, created_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+      `INSERT OR IGNORE INTO sessions (session_id, project_id, agent_id, provider, model_id, workspace, approval_mode, title, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`
     ).run(
       row.sessionId,
       row.projectId,
@@ -565,7 +562,6 @@ var SessionsRepo = class {
       row.workspace,
       row.approvalMode,
       row.title,
-      row.source ?? null,
       row.createdAt
     );
   }
@@ -1073,8 +1069,10 @@ function requireValidId(c, name) {
   return v;
 }
 function positiveIntParam(c, name) {
-  const v = Number.parseInt(pathParam(c, name), 10);
-  if (!Number.isInteger(v) || v < 1) throw badRequest(`${name} must be a positive integer.`);
+  const raw = pathParam(c, name);
+  if (!/^\d+$/.test(raw)) throw badRequest(`${name} must be a positive integer.`);
+  const v = Number.parseInt(raw, 10);
+  if (!Number.isSafeInteger(v) || v < 1) throw badRequest(`${name} must be a positive integer.`);
   return v;
 }
 function paginationQuery(c) {
@@ -1087,6 +1085,21 @@ function paginationQuery(c) {
   }
   return { offset, limit };
 }
+function optionalPagingQuery(c) {
+  const rawLimit = c.req.query("limit");
+  const rawOffset = c.req.query("offset");
+  if (rawLimit === void 0 && rawOffset === void 0) return null;
+  if (rawLimit === void 0) throw badRequest("offset requires limit.");
+  const limit = Number.parseInt(rawLimit, 10);
+  if (!Number.isInteger(limit) || limit < 1 || limit > 1e3) {
+    throw badRequest("limit must be an integer between 1 and 1000.");
+  }
+  const offset = Number.parseInt(rawOffset ?? "0", 10);
+  if (!Number.isInteger(offset) || offset < 0) {
+    throw badRequest("offset must be a non-negative integer.");
+  }
+  return { offset, limit };
+}
 async function readJson(c) {
   let body;
   try {
@@ -1143,10 +1156,15 @@ function optionalNumber(obj, key, rule = {}) {
 }
 function optionalDateParam(value, label) {
   if (value === void 0 || value === "") return void 0;
-  if (!/^\d{4}-\d{2}-\d{2}$/.test(value)) {
-    throw badRequest(`${label} must be in YYYY-MM-DD format.`);
+  const m = /^(\d{4})-(\d{2})-(\d{2})$/.exec(value);
+  if (m) {
+    const [, y, mo, d] = m;
+    const dt = /* @__PURE__ */ new Date(`${value}T00:00:00Z`);
+    if (!Number.isNaN(dt.getTime()) && dt.getUTCFullYear() === Number(y) && dt.getUTCMonth() + 1 === Number(mo) && dt.getUTCDate() === Number(d)) {
+      return value;
+    }
   }
-  return value;
+  throw badRequest(`${label} must be a valid date in YYYY-MM-DD format.`);
 }
 
 // src/http/routes/admin.ts
@@ -1445,6 +1463,12 @@ function parseModelsUpdate(body) {
       }
       entry.vision = m.vision;
     }
+    if (m.maxTokens !== void 0) {
+      if (typeof m.maxTokens !== "number" || !Number.isInteger(m.maxTokens) || m.maxTokens <= 0) {
+        throw badRequest(`models[${i}].maxTokens must be a positive integer.`);
+      }
+      entry.maxTokens = m.maxTokens;
+    }
     if (m.pricing !== void 0) {
       const p = m.pricing;
       if (p === null || typeof p !== "object" || Array.isArray(p)) {
@@ -2656,7 +2680,12 @@ function agentSessionsRoutes(deps2) {
     const agentId = requireValidId(c, "agentId");
     deps2.projectService.requireProjectAccess(c.var.user.userId, projectId);
     await deps2.agentConfigService.requireExists(projectId, agentId);
-    const sessions = await deps2.sessionService.listSessions(projectId, agentId);
+    const paging = optionalPagingQuery(c);
+    const sessions = await deps2.sessionService.listSessions(
+      projectId,
+      agentId,
+      ...paging ? [paging] : []
+    );
     return c.json({ sessions });
   });
   app2.post("/", async (c) => {
@@ -2715,7 +2744,9 @@ function sessionsRoutes(deps2) {
   app2.get("/:sessionId", async (c) => {
     const row = resolveSession(c);
     const hasTrace = await deps2.sessionService.hasTrace(row);
-    return c.json({ session: deps2.sessionService.toInfo(row, hasTrace) });
+    return c.json({
+      session: await deps2.sessionService.toInfo(row, hasTrace)
+    });
   });
   app2.patch("/:sessionId", async (c) => {
     const row = resolveSession(c);
@@ -2761,7 +2792,7 @@ function sessionsRoutes(deps2) {
     }
     const hasTrace = await deps2.sessionService.hasTrace(updated);
     return c.json({
-      session: deps2.sessionService.toInfo(updated, hasTrace)
+      session: await deps2.sessionService.toInfo(updated, hasTrace)
     });
   });
   app2.delete("/:sessionId", async (c) => {
@@ -2780,6 +2811,7 @@ function sessionsRoutes(deps2) {
         { recursive: true, force: true }
       );
       deps2.sessionsRepo.deleteById(row.sessionId);
+      deps2.sessionSources.delete(row.sessionId);
     } finally {
       deps2.manager.endSessionDeletion(row.sessionId);
     }
@@ -3218,6 +3250,26 @@ function makeApprove(args) {
   };
 }
 
+// src/runtime/session-sources.ts
+function asSessionSource(v) {
+  return v === "schedule" || v === "subagent" ? v : void 0;
+}
+var SessionSources = class {
+  map = /* @__PURE__ */ new Map();
+  /** Records a Session's origin as read from session_meta (`null` = meta seen, user-created). */
+  set(sessionId, source) {
+    this.map.set(sessionId, source);
+  }
+  /** Known origin, `null` for a known user-created Session, `undefined` when this process has not seen the meta. */
+  get(sessionId) {
+    return this.map.get(sessionId);
+  }
+  /** Drops a deleted Session's entry (bulk Agent/Project deletion may leave stale entries; they are never matched again). */
+  delete(sessionId) {
+    this.map.delete(sessionId);
+  }
+};
+
 // src/runtime/stream-error-watcher.ts
 import { isEventMessage, isModelMessage, isSessionMeta } from "@prismshadow/penguin-core";
 import path7 from "path";
@@ -3396,7 +3448,7 @@ function compactUnavailable(why) {
   };
   return new HttpError(409, "nothing_to_compact", messages[why]);
 }
-function createCoreSessionLoader(root) {
+function createCoreSessionLoader(root, sources) {
   return {
     async load(row) {
       const agent = await createAgent({
@@ -3426,11 +3478,14 @@ function createCoreSessionLoader(root) {
           `This Session's Workspace no longer exists: ${row.workspace}, so it cannot continue. Create a new Session.`
         );
       }
+      const knownSource = sources?.get(row.sessionId);
       try {
         return await agent.createSession({
           workspaceDir: row.workspace,
           modelId: row.modelId,
-          provider: row.provider
+          provider: row.provider,
+          // The rebuilt Session re-records a known origin in its fresh session_meta.
+          ...knownSource != null ? { source: knownSource } : {}
         });
       } catch (err) {
         if (isMissingCredential(err)) throw modelCredentialMissing(row.modelId);
@@ -3958,6 +4013,8 @@ var SessionManager = class {
     const p = msg.payload;
     const agentId = path8.basename(path8.dirname(p.agent_state));
     if (!agentId || agentId === "." || agentId === "..") return null;
+    const source = asSessionSource(p.source) ?? "subagent";
+    this.deps.sources.set(childSid, source);
     this.deps.sessions.insertOrIgnore({
       sessionId: childSid,
       projectId: entry.projectId,
@@ -3969,7 +4026,6 @@ var SessionManager = class {
       // inserted with defaults (matches the convention for Sessions discovered by the CLI).
       approvalMode: "allow-all",
       title: null,
-      source: "subagent",
       createdAt: (/* @__PURE__ */ new Date()).toISOString()
     });
     this.publishEvent(entry, {
@@ -3977,7 +4033,7 @@ var SessionManager = class {
       projectId: entry.projectId,
       agentId,
       sessionId: childSid,
-      source: "subagent"
+      source
     });
     const child = {
       sessionId: childSid,
@@ -4774,6 +4830,7 @@ var ProjectConfigService = class {
       const cat = catalogEntryFor(provider, modelId);
       const envKey = resolveModelEnv(modelId, clientType)?.envKey;
       const vision = typeof m.vision === "boolean" ? m.vision : cat?.supportsVision;
+      const maxTokens = optNum(m.max_tokens);
       const displayName = optStr(m.display_name) ?? cat?.displayName;
       const apiKey = optStr(m.api_key);
       const credBaseUrl = optStr(m.base_url);
@@ -4786,6 +4843,7 @@ var ProjectConfigService = class {
         ...optNum(m.context_window) !== void 0 ? { contextWindow: optNum(m.context_window) } : {},
         ...clientType ? { clientType } : {},
         ...vision !== void 0 ? { vision } : {},
+        ...maxTokens !== void 0 ? { maxTokens } : {},
         ...envKey ? { envKey } : {},
         ...pricingDto ? { pricing: pricingDto } : {},
         ...apiKey !== void 0 || credBaseUrl !== void 0 ? {
@@ -4844,6 +4902,7 @@ var ProjectConfigService = class {
       delete next2.context_window;
       delete next2.client_type;
       delete next2.vision;
+      delete next2.max_tokens;
       delete next2.pricing;
       delete next2.display_name;
       delete next2.request_model_id;
@@ -4854,6 +4913,7 @@ var ProjectConfigService = class {
       if (entry.contextWindow !== void 0) next2.context_window = entry.contextWindow;
       if (entry.clientType) next2.client_type = entry.clientType;
       if (entry.vision !== void 0) next2.vision = entry.vision;
+      if (entry.maxTokens !== void 0) next2.max_tokens = entry.maxTokens;
       if (entry.pricing !== void 0) {
         next2.pricing = {
           unit: "usd_per_mtok",
@@ -6004,8 +6064,13 @@ var SessionService = class {
     this.deps = deps2;
   }
   deps;
-  /** DB row -> SessionInfo (run status and pending approval count come from session-manager). */
-  toInfo(row, hasTrace) {
+  /**
+   * DB row -> SessionInfo (run status and pending approval count come from session-manager).
+   * Async because `source` is derived from session_meta: a registry miss (Session predating
+   * this process) falls back to reading the Trace head once (see sourceOf).
+   */
+  async toInfo(row, hasTrace) {
+    const source = await this.sourceOf(row, hasTrace);
     return {
       sessionId: row.sessionId,
       projectId: row.projectId,
@@ -6015,7 +6080,7 @@ var SessionService = class {
       workspace: row.workspace,
       approvalMode: row.approvalMode,
       ...row.title !== null ? { title: row.title } : {},
-      ...row.source != null ? { source: row.source } : {},
+      ...source !== void 0 ? { source } : {},
       createdAt: row.createdAt,
       status: this.deps.manager.statusOf(row.sessionId),
       pendingApprovalCount: this.deps.manager.pendingApprovalCount(row.sessionId),
@@ -6023,13 +6088,36 @@ var SessionService = class {
       archived: (row.archivedAt ?? null) !== null
     };
   }
+  /**
+   * A Session's origin, with session_meta as the single source of truth: the in-process
+   * registry answers first (populated at creation / subagent registration / adoption);
+   * on a miss (a Session created before this process started) the earliest Trace shard's
+   * session_meta is read once and cached. A Session with no Trace yet stays unknown and
+   * is NOT cached negatively — its meta may appear with the first run.
+   */
+  async sourceOf(row, hasTrace) {
+    const known = this.deps.sources.get(row.sessionId);
+    if (known !== void 0) return known ?? void 0;
+    if (!hasTrace) return void 0;
+    const meta = await this.readTraceMeta(row.projectId, row.agentId, row.sessionId);
+    if (!meta) return void 0;
+    const source = asSessionSource(meta.payload.source) ?? null;
+    this.deps.sources.set(row.sessionId, source);
+    return source ?? void 0;
+  }
   /** Whether this Session already has a Trace record (a Task has been run). */
   async hasTrace(row) {
     const ids = await this.discoverTraceSessionIds(row.projectId, row.agentId);
     return ids.has(row.sessionId);
   }
-  /** List: DB ∪ Trace directory discovery, sorted by createdAt descending. */
-  async listSessions(projectId, agentId) {
+  /**
+   * List: DB ∪ Trace directory discovery, sorted by createdAt descending. Optional
+   * `paging` returns just that slice (the sidebar pages with limit+1 to detect "has
+   * more"); slicing happens before toInfo, so per-request source derivation (lazy
+   * Trace-head reads) stays bounded by the page size. Discovery/adoption still scans
+   * the whole directory — the union and global ordering need every id.
+   */
+  async listSessions(projectId, agentId, paging) {
     const traceIds = await this.discoverTraceSessionIds(projectId, agentId);
     const rows = new Map(
       this.deps.sessions.listByAgent(projectId, agentId).map((r) => [r.sessionId, r])
@@ -6039,9 +6127,11 @@ var SessionService = class {
       const discovered = await this.adoptTraceSession(projectId, agentId, sessionId);
       if (discovered) rows.set(sessionId, discovered);
     }
-    return [...rows.values()].sort(
+    const sorted = [...rows.values()].sort(
       (a, b) => b.createdAt.localeCompare(a.createdAt) || b.sessionId.localeCompare(a.sessionId)
-    ).map((row) => this.toInfo(row, traceIds.has(row.sessionId)));
+    );
+    const page = paging ? sorted.slice(paging.offset, paging.offset + paging.limit) : sorted;
+    return Promise.all(page.map((row) => this.toInfo(row, traceIds.has(row.sessionId))));
   }
   /**
    * Session stats (Agents list card): total count = size of the union of DB index
@@ -6121,7 +6211,9 @@ var SessionService = class {
       session = await agent.createSession({
         modelId,
         provider,
-        ...args.workspace !== void 0 ? { workspaceDir: args.workspace } : {}
+        ...args.workspace !== void 0 ? { workspaceDir: args.workspace } : {},
+        // The origin is also recorded in core session_meta (Trace), not just the index row.
+        ...args.source !== void 0 ? { source: args.source } : {}
       });
     } catch (err) {
       if (isMissingCredential(err)) throw modelCredentialMissing(modelId);
@@ -6131,6 +6223,11 @@ var SessionService = class {
         err instanceof Error ? err.message : String(err)
       );
     }
+    const metaMsg = session.metaMessage;
+    this.deps.sources.set(
+      session.sessionId,
+      isSessionMeta4(metaMsg) ? asSessionSource(metaMsg.payload.source) ?? null : null
+    );
     const row = {
       sessionId: session.sessionId,
       projectId: args.projectId,
@@ -6140,8 +6237,7 @@ var SessionService = class {
       workspace: session.workspaceDir,
       approvalMode: args.approvalMode ?? "allow-all",
       title: null,
-      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-      ...args.source !== void 0 ? { source: args.source } : {}
+      createdAt: (/* @__PURE__ */ new Date()).toISOString()
     };
     this.deps.sessions.insert(row);
     this.deps.manager.adopt(row, session);
@@ -6159,8 +6255,12 @@ var SessionService = class {
     }
     return ids;
   }
-  /** Adopts a Session that exists only in the Trace directory: reads session_meta from the first line of the earliest index file. */
-  async adoptTraceSession(projectId, agentId, sessionId) {
+  /**
+   * session_meta from the earliest Trace shard of a Session (the shard whose head carries
+   * the original meta); null when there is no readable Trace or it has no meta. Shared by
+   * adoption backfill and lazy `source` resolution.
+   */
+  async readTraceMeta(projectId, agentId, sessionId) {
     const dir = tracesDir2(this.deps.root, projectId, agentId);
     let earliest = null;
     for (const dateDir of await listDirsSafe(dir)) {
@@ -6180,9 +6280,14 @@ var SessionService = class {
     } catch {
       return null;
     }
-    const meta = messages.find(isSessionMeta4);
+    return messages.find(isSessionMeta4) ?? null;
+  }
+  /** Adopts a Session that exists only in the Trace directory: reads session_meta from the first line of the earliest index file. */
+  async adoptTraceSession(projectId, agentId, sessionId) {
+    const meta = await this.readTraceMeta(projectId, agentId, sessionId);
     if (!meta) return null;
     if (typeof meta.payload.provider !== "string") return null;
+    this.deps.sources.set(sessionId, asSessionSource(meta.payload.source) ?? null);
     const row = {
       sessionId,
       projectId,
@@ -6848,10 +6953,12 @@ function buildAppDeps(config2, overrides = {}) {
   const recorder = new UsageRecorder(usageRepo, overrides.now ?? (() => /* @__PURE__ */ new Date()));
   const errors = new ErrorRecorder(errorsRepo, overrides.now ?? (() => /* @__PURE__ */ new Date()));
   const titles = overrides.titles ?? new TitleGenerator({ sessions: sessionsRepo, channels, recorder, errors, log });
+  const sessionSources = new SessionSources();
   const manager = new SessionManager({
     sessions: sessionsRepo,
     channels,
-    loader: overrides.loader ?? createCoreSessionLoader(config2.root),
+    loader: overrides.loader ?? createCoreSessionLoader(config2.root, sessionSources),
+    sources: sessionSources,
     recorder,
     errors,
     titles,
@@ -6890,7 +6997,8 @@ function buildAppDeps(config2, overrides = {}) {
     root: config2.root,
     sessions: sessionsRepo,
     manager,
-    projectConfig: projectConfigService
+    projectConfig: projectConfigService,
+    sources: sessionSources
   });
   const scheduler = new Scheduler({
     root: config2.root,
@@ -6926,6 +7034,7 @@ function buildAppDeps(config2, overrides = {}) {
     scheduler,
     channels,
     manager,
+    sessionSources,
     errors,
     log
   };
@@ -7043,7 +7152,7 @@ function registerStaticRoutes(app2, webDist) {
 import fs17 from "fs";
 import path16 from "path";
 import { fileURLToPath } from "url";
-import { resolveRoot } from "@prismshadow/penguin-core";
+import { DEFAULT_SERVER_PORT, resolveRoot } from "@prismshadow/penguin-core";
 var DAY_MS = 24 * 60 * 60 * 1e3;
 function defaultWebDist() {
   const here = path16.dirname(fileURLToPath(import.meta.url));
@@ -7053,7 +7162,7 @@ function defaultWebDist() {
 }
 function resolveServerConfig(env = process.env) {
   const root = env.PENGUIN_HOME ?? resolveRoot();
-  const port = Number(env.PORT || 7364);
+  const port = Number(env.PORT || DEFAULT_SERVER_PORT);
   if (!Number.isInteger(port) || port < 0 || port > 65535) {
     throw new Error(`Invalid port configuration PORT=${env.PORT}`);
   }