@runfusion/fusion 0.75.0-beta.2 → 0.75.1-beta.0

package/dist/bin.js

@@ -32882,14 +32882,17 @@ function deepStripNulChars(value) {
     return stripNulChars(value);
   }
   if (Array.isArray(value)) {
-    return value.map(deepStripNulChars);
+    const sanitized = value.map(deepStripNulChars);
+    return sanitized.some((entry, index3) => entry !== value[index3]) ? sanitized : value;
   }
   if (value !== null && typeof value === "object") {
-    return Object.fromEntries(
-      Object.entries(value).map(
-        ([key, entry]) => [stripNulChars(key), deepStripNulChars(entry)]
-      )
-    );
+    const entries = Object.entries(value);
+    const sanitizedEntries = entries.map(([key, entry]) => [
+      stripNulChars(key),
+      deepStripNulChars(entry)
+    ]);
+    const changed = sanitizedEntries.some(([key, entry], index3) => key !== entries[index3]?.[0] || entry !== entries[index3]?.[1]);
+    return changed ? Object.fromEntries(sanitizedEntries) : value;
   }
   return value;
 }
@@ -124947,24 +124950,28 @@ function rowToRoomMessage(row) {
   };
 }
 async function createChatSession(handle, session) {
+  const sanitized = {
+    ...session,
+    inFlightGeneration: sanitizeJsonbValue(session.inFlightGeneration)
+  };
   await handle.insert(project_exports.chatSessions).values({
-    id: session.id,
-    agentId: session.agentId,
-    title: session.title,
-    status: session.status,
+    id: sanitized.id,
+    agentId: sanitized.agentId,
+    title: sanitized.title,
+    status: sanitized.status,
     // FNXC:MultiProjectIsolation 2026-07-15-23:40: write the caller's domain project to owner_project_id and never project_id — the trigger/GUC owns the partition.
-    ownerProjectId: session.projectId,
-    modelProvider: session.modelProvider,
-    modelId: session.modelId,
-    thinkingLevel: session.thinkingLevel ?? null,
-    createdAt: session.createdAt,
-    updatedAt: session.updatedAt,
-    pinnedAt: session.pinnedAt,
-    cliSessionFile: session.cliSessionFile,
-    inFlightGeneration: session.inFlightGeneration,
-    cliExecutorAdapterId: session.cliExecutorAdapterId
+    ownerProjectId: sanitized.projectId,
+    modelProvider: sanitized.modelProvider,
+    modelId: sanitized.modelId,
+    thinkingLevel: sanitized.thinkingLevel ?? null,
+    createdAt: sanitized.createdAt,
+    updatedAt: sanitized.updatedAt,
+    pinnedAt: sanitized.pinnedAt,
+    cliSessionFile: sanitized.cliSessionFile,
+    inFlightGeneration: sanitized.inFlightGeneration,
+    cliExecutorAdapterId: sanitized.cliExecutorAdapterId
   });
-  return session;
+  return sanitized;
 }
 async function getChatSession(handle, id) {
   const rows = await handle.select().from(project_exports.chatSessions).where(eq(project_exports.chatSessions.id, id));
@@ -125272,7 +125279,8 @@ async function setCliExecutorAdapterId(handle, id, adapterId) {
 async function setInFlightGeneration(handle, id, inFlightGeneration) {
   const existing = await getChatSession(handle, id);
   if (!existing) return void 0;
-  await handle.update(project_exports.chatSessions).set({ inFlightGeneration }).where(eq(project_exports.chatSessions.id, id));
+  const sanitizedInFlightGeneration = sanitizeJsonbValue(inFlightGeneration);
+  await handle.update(project_exports.chatSessions).set({ inFlightGeneration: sanitizedInFlightGeneration }).where(eq(project_exports.chatSessions.id, id));
   return getChatSession(handle, id);
 }
 async function addChatMessageAttachment(handle, sessionId, messageId, attachment) {
@@ -125280,7 +125288,10 @@ async function addChatMessageAttachment(handle, sessionId, messageId, attachment
   if (!message || message.sessionId !== sessionId) {
     throw new Error(`Message ${messageId} not found in session ${sessionId}`);
   }
-  const updatedAttachments = [...message.attachments ?? [], attachment];
+  const updatedAttachments = sanitizeJsonbValue([
+    ...message.attachments ?? [],
+    attachment
+  ]);
   await handle.update(project_exports.chatMessages).set({ attachments: updatedAttachments }).where(eq(project_exports.chatMessages.id, messageId));
   const updated = await getChatMessage(handle, messageId);
   if (!updated) throw new Error(`Failed to update message ${messageId}`);
@@ -125343,7 +125354,7 @@ async function updateChatMessageMetadata(handle, messageId, metadata, options) {
   }
   const merge2 = options?.merge !== false;
   const nextMetadata = metadata === null ? merge2 ? existing.metadata : null : merge2 ? { ...existing.metadata ?? {}, ...metadata } : metadata;
-  await handle.update(project_exports.chatMessages).set({ metadata: nextMetadata ?? null }).where(eq(project_exports.chatMessages.id, messageId));
+  await handle.update(project_exports.chatMessages).set({ metadata: sanitizeJsonbValue(nextMetadata) ?? null }).where(eq(project_exports.chatMessages.id, messageId));
   const updated = await getChatMessage(handle, messageId);
   if (!updated) {
     throw new Error(`Failed to update message ${messageId}`);
@@ -125412,7 +125423,10 @@ async function addChatRoomMessageAttachment(handle, roomId, messageId, attachmen
   if (!message || message.roomId !== roomId) {
     throw new Error(`Message ${messageId} not found in room ${roomId}`);
   }
-  const updatedAttachments = [...message.attachments ?? [], attachment];
+  const updatedAttachments = sanitizeJsonbValue([
+    ...message.attachments ?? [],
+    attachment
+  ]);
   await handle.update(project_exports.chatRoomMessages).set({ attachments: updatedAttachments }).where(eq(project_exports.chatRoomMessages.id, messageId));
   await handle.update(project_exports.chatRooms).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq(project_exports.chatRooms.id, roomId));
   const updated = await getChatRoomMessage(handle, messageId);
@@ -134435,6 +134449,19 @@ async function seedPreReleasePlanReviewContinuation(store, task, ir2, options =
   const item = await store.replaceActiveTaskWorkflowContinuation(input);
   return { seeded: true, workItemId: item.id };
 }
+async function resumeApprovedPlanReviewHandoff(store, task, ir2) {
+  const node = resolvePreReleasePlanReviewNode(ir2);
+  if (!node || node.column !== task.column) return { resumed: false, reason: "not-plan-in-place" };
+  if (isTaskBlockedOnApproval(task)) return { resumed: false, reason: "awaiting-approval" };
+  if (task.paused === true || task.userPaused === true) return { resumed: false, reason: "paused" };
+  if (task.status === "needs-replan") return { resumed: false, reason: "needs-replan" };
+  const seeded = await seedPreReleasePlanReviewContinuation(store, task, ir2, { atomic: true });
+  if (seeded.seeded) return { resumed: true, reason: "seeded", workItemId: seeded.workItemId };
+  return {
+    resumed: false,
+    reason: seeded.reason ?? "not-plan-in-place"
+  };
+}
 function evaluateStrandedHoldContinuation(input) {
   if (!input.columnFlags.hold) return { stranded: false, candidate: false, reason: "not-hold-column" };
   const review = resolvePreReleasePlanReviewNode(input.ir);
@@ -268177,6 +268204,7 @@ __export(src_exports2, {
   resolveWorkspaceTaskRevertCommits: () => resolveWorkspaceTaskRevertCommits,
   resolveWorktrunkBinary: () => resolveWorktrunkBinary,
   restoreUnrelatedRootDirChanges: () => restoreUnrelatedRootDirChanges,
+  resumeApprovedPlanReviewHandoff: () => resumeApprovedPlanReviewHandoff,
   revertWorkspaceTask: () => revertWorkspaceTask,
   reviewStep: () => reviewStep,
   runAiMerge: () => runAiMerge,
@@ -268381,6 +268409,7 @@ var init_src5 = __esm({
     init_remote_node_client();
     init_remote_node_runtime();
     init_hold_release();
+    init_plan_review_continuation();
     init_step_session_executor();
     init_step_runner();
     init_pty_native();
@@ -292320,6 +292349,7 @@ var init_auth_middleware = __esm({
 });
 
 // ../dashboard/src/routes/register-task-workflow-routes.ts
+import { createHash as createHash29 } from "node:crypto";
 import { createReadStream } from "node:fs";
 import { readFile as readFile46, stat as stat11 } from "node:fs/promises";
 import { join as join89 } from "node:path";
@@ -292672,7 +292702,71 @@ function buildReviewerAgentItemId(input) {
   const timePart = (input.createdAt ?? "na").replace(/[:.]/g, "-");
   return `reviewer-${input.reviewType}-${stepPart}-${verdictPart}-${timePart}-${input.index + 1}`;
 }
+function parseTaskReviewVerdict(value) {
+  switch (value) {
+    case "APPROVE":
+    case "APPROVE_WITH_NOTES":
+    case "REVISE":
+    case "RETHINK":
+    case "UNAVAILABLE":
+      return value;
+    default:
+      return void 0;
+  }
+}
+function isCurrentWorkflowReviewResult(result2) {
+  return CURRENT_WORKFLOW_REVIEW_STEP_IDS.has(result2.workflowStepId) && CURRENT_WORKFLOW_REVIEW_STATUSES.has(result2.status) && result2.verdict !== void 0 && result2.supersededAt === void 0 && result2.bypassedBy === void 0 && result2.bypassedAt === void 0 && result2.bypassReason === void 0 && result2.bypassedFromStatus === void 0 && result2.bypassedFromVerdict === void 0;
+}
+function buildWorkflowReviewItemId(task, result2) {
+  const identity = JSON.stringify({
+    taskId: task.id,
+    workflowStepId: result2.workflowStepId,
+    workflowStepName: result2.workflowStepName,
+    phase: result2.phase,
+    status: result2.status,
+    verdict: result2.verdict,
+    completedAt: result2.completedAt,
+    startedAt: result2.startedAt,
+    output: result2.output,
+    notes: result2.notes
+  });
+  return `workflow-review-${createHash29("sha256").update(identity).digest("hex").slice(0, 24)}`;
+}
+function buildWorkflowReviewItems(task) {
+  return (task.workflowStepResults ?? []).filter(isCurrentWorkflowReviewResult).map((result2) => {
+    const reviewType = result2.workflowStepId === "plan-review" ? "plan" : "code";
+    const body = result2.output?.trim() || result2.notes?.trim() || "No written feedback was provided by this review step.";
+    const timestamp2 = result2.completedAt ?? result2.startedAt ?? task.updatedAt ?? task.createdAt;
+    return {
+      itemId: buildWorkflowReviewItemId(task, result2),
+      sourceMode: "reviewer-agent",
+      title: `${result2.workflowStepName || result2.workflowStepId} ${result2.verdict}`,
+      body,
+      author: "reviewer-agent",
+      createdAt: timestamp2,
+      updatedAt: timestamp2,
+      reviewState: result2.verdict,
+      verdict: result2.verdict,
+      reviewType,
+      progressStatus: null
+    };
+  }).sort((a, b3) => Date.parse(b3.createdAt ?? "") - Date.parse(a.createdAt ?? "") || a.itemId.localeCompare(b3.itemId));
+}
+function buildDirectReviewSummary(items) {
+  const latest = items[0];
+  return latest ? { summary: latest.title, verdict: latest.verdict } : null;
+}
 async function buildDirectTaskReviewData(task, store) {
+  const structuredItems = buildWorkflowReviewItems(task);
+  if (structuredItems.length > 0) {
+    return {
+      mode: "reviewer-agent",
+      refreshable: true,
+      fetchedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      summary: buildDirectReviewSummary(structuredItems),
+      items: structuredItems
+    };
+  }
   const agentLogs = await store.getAgentLogs(task.id);
   const reviewerText = agentLogs.filter((entry) => entry.agent === "reviewer" && entry.type === "text").map((entry) => entry.text).join("\n");
   const fallbackLogs = (task.log ?? []).filter((entry) => REVIEW_STEP_RE.test(entry.action));
@@ -292694,6 +292788,8 @@ async function buildDirectTaskReviewData(task, store) {
       createdAt,
       updatedAt: createdAt,
       reviewState: verdict ?? null,
+      verdict: parseTaskReviewVerdict(verdict),
+      reviewType,
       progressStatus: null
     });
   }
@@ -292711,21 +292807,18 @@ async function buildDirectTaskReviewData(task, store) {
         createdAt: entry.timestamp,
         updatedAt: entry.timestamp,
         reviewState: verdict ?? null,
+        verdict: parseTaskReviewVerdict(verdict),
+        reviewType,
         progressStatus: null
       });
     });
   }
-  const sorted = [...items].sort((a, b3) => Date.parse(b3.createdAt ?? "") - Date.parse(a.createdAt ?? ""));
-  const latest = sorted[0];
-  const summary = latest ? {
-    summary: latest.title,
-    verdict: latest.reviewState ?? void 0
-  } : null;
+  const sorted = [...items].sort((a, b3) => Date.parse(b3.createdAt ?? "") - Date.parse(a.createdAt ?? "") || a.itemId.localeCompare(b3.itemId));
   return {
     mode: "reviewer-agent",
     refreshable: true,
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    summary,
+    summary: buildDirectReviewSummary(sorted),
     items: sorted
   };
 }
@@ -294942,6 +295035,13 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
           await scopedStore.moveTask(task.id, reboundColumn);
         }
         const approved = await scopedStore.updateTask(task.id, approvalPatch);
+        const approvedWorkflow = await resolveWorkflowIrForTask(scopedStore, approved.id);
+        const handoff = await resumeApprovedPlanReviewHandoff(
+          scopedStore,
+          approved,
+          approvedWorkflow
+        );
+        void handoff;
         await scopedStore.logEntry(task.id, "Plan approved by user").catch((error3) => {
           severityAuditLog33.warn(`Failed to record plan approval activity for ${task.id}: ${error3 instanceof Error ? error3.message : String(error3)}`);
         });
@@ -296335,7 +296435,7 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
       const selectedItems = Array.isArray(req.body?.selectedItems) ? req.body.selectedItems.filter((value) => {
         if (!value || typeof value !== "object") return false;
         const item = value;
-        return typeof item.id === "string" && item.id.trim().length > 0 && typeof item.summary === "string" && typeof item.body === "string";
+        return typeof item.id === "string" && item.id.trim().length > 0 && typeof item.source === "string";
       }) : [];
       if (selectedItems.length === 0) {
         throw badRequest("selectedItems must be a non-empty array of review items");
@@ -296370,7 +296470,9 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
         htmlUrl: item.url,
         state: item.reviewState ?? void 0,
         isResolved: item.isResolved,
-        source: item.sourceMode === "reviewer-agent" ? "reviewer-agent" : "github-pr"
+        source: item.sourceMode === "reviewer-agent" ? "reviewer-agent" : "github-pr",
+        verdict: item.verdict,
+        reviewType: item.reviewType
       }));
       const reviewState = {
         source: canonicalReviewData.mode,
@@ -296394,8 +296496,24 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
       if (hasUnknownSelection) {
         throw badRequest("selectedItems must reference existing review items");
       }
-      const modeSummary = `${reviewState.source === "pull-request" ? "pull-request" : "reviewer-agent"} \xB7 ${selectedItems.length} selected item(s)`;
-      const steeringItems = selectedItems.map((item, index3) => {
+      const canonicalById = new Map(reviewState.items.map((item) => [item.id, item]));
+      const canonicalSelections = selectedItems.map((selected) => {
+        const item = canonicalById.get(selected.id);
+        if (!item) throw badRequest("selectedItems must reference existing review items");
+        return {
+          id: item.id,
+          source: expectedSource,
+          summary: item.summary ?? item.body.slice(0, 120),
+          body: item.body,
+          author: item.author.login,
+          filePath: item.path,
+          lineNumber: item.line,
+          threadId: item.threadId,
+          url: item.htmlUrl
+        };
+      });
+      const modeSummary = `${reviewState.source === "pull-request" ? "pull-request" : "reviewer-agent"} \xB7 ${canonicalSelections.length} selected item(s)`;
+      const steeringItems = canonicalSelections.map((item, index3) => {
         const location = item.filePath ? `${item.filePath}${typeof item.lineNumber === "number" ? `:${item.lineNumber}` : ""}` : void 0;
         const snippetSource = item.body.trim() || item.summary.trim();
         const snippet = snippetSource.length > 220 ? `${snippetSource.slice(0, 220)}\u2026` : snippetSource;
@@ -296406,7 +296524,7 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
       const priorAddressingById = new Map(reviewState.addressing.map((record2) => [record2.itemId, record2]));
       const nextAddressing = [
         ...reviewState.addressing.filter((record2) => !selectedSet.has(record2.itemId)),
-        ...selectedItems.map((item) => {
+        ...canonicalSelections.map((item) => {
           const existing = priorAddressingById.get(item.id);
           return {
             itemId: item.id,
@@ -296717,7 +296835,7 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
     }
   });
 }
-var severityAuditLog33, AWAITING_PLANNING_ENRICH_LIMIT, LEGACY_WIP_LANES3, LEGACY_ARCHIVE_LANES5, REVIEW_BLOCK_RE, REVIEW_VERDICT_RE, REVIEW_STEP_RE, DUPLICATE_STOPWORDS, ARTIFACT_TYPES, ADDRESS_PR_FEEDBACK_PROMPT, __fingerprintCreateLocksForTests, RESET_TASK_FIELDS, RESET_DRIFT_CORRECTION_FIELDS;
+var severityAuditLog33, AWAITING_PLANNING_ENRICH_LIMIT, LEGACY_WIP_LANES3, LEGACY_ARCHIVE_LANES5, REVIEW_BLOCK_RE, REVIEW_VERDICT_RE, REVIEW_STEP_RE, DUPLICATE_STOPWORDS, ARTIFACT_TYPES, ADDRESS_PR_FEEDBACK_PROMPT, __fingerprintCreateLocksForTests, RESET_TASK_FIELDS, RESET_DRIFT_CORRECTION_FIELDS, CURRENT_WORKFLOW_REVIEW_STEP_IDS, CURRENT_WORKFLOW_REVIEW_STATUSES;
 var init_register_task_workflow_routes = __esm({
   "../dashboard/src/routes/register-task-workflow-routes.ts"() {
     "use strict";
@@ -296779,6 +296897,8 @@ var init_register_task_workflow_routes = __esm({
       worktreeSessionRetryCount: null,
       sessionFile: null
     };
+    CURRENT_WORKFLOW_REVIEW_STEP_IDS = /* @__PURE__ */ new Set(["code-review", "plan-review"]);
+    CURRENT_WORKFLOW_REVIEW_STATUSES = /* @__PURE__ */ new Set(["passed", "failed", "advisory_failure"]);
   }
 });
 
@@ -300695,6 +300815,22 @@ When you need structured input, or whenever you present options, choices, or a d
         this.cliChatRunner = runner;
         this.cliChatProjectId = projectId;
       }
+      /*
+      FNXC:ChatPersistence 2026-08-05-01:54:
+      Checkpoint snapshots contain environment-controlled tool output. Persistence
+      is best-effort for crash recovery, but every fire-and-forget write must have
+      its rejection observed so one failed jsonb write cannot become a process-wide
+      unhandled rejection or interrupt the streaming turn.
+      */
+      persistInFlightGeneration(sessionId, snapshot) {
+        try {
+          void this.chatStore.setInFlightGeneration(sessionId, snapshot).catch(() => {
+            diagnostics6.warn(`Failed to persist in-flight chat checkpoint for session ${sessionId}`);
+          });
+        } catch {
+          diagnostics6.warn(`Failed to persist in-flight chat checkpoint for session ${sessionId}`);
+        }
+      }
       queueInFlightGenerationPersist(sessionId, snapshot) {
         const existingTimer = this.inFlightPersistTimers.get(sessionId);
         if (existingTimer) {
@@ -300702,7 +300838,7 @@ When you need structured input, or whenever you present options, choices, or a d
         }
         const timer2 = setTimeout(() => {
           this.inFlightPersistTimers.delete(sessionId);
-          this.chatStore.setInFlightGeneration(sessionId, snapshot);
+          this.persistInFlightGeneration(sessionId, snapshot);
         }, IN_FLIGHT_PERSIST_DEBOUNCE_MS);
         this.inFlightPersistTimers.set(sessionId, timer2);
       }
@@ -300712,7 +300848,7 @@ When you need structured input, or whenever you present options, choices, or a d
           clearTimeout(existingTimer);
           this.inFlightPersistTimers.delete(sessionId);
         }
-        this.chatStore.setInFlightGeneration(sessionId, snapshot);
+        this.persistInFlightGeneration(sessionId, snapshot);
       }
       async getChatModelSettings() {
         if (!this.getSettings) {
@@ -341606,8 +341742,8 @@ var init_register_settings_sync_routes = __esm({
             exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
             version: 1
           };
-          const { createHash: createHash31 } = await import("node:crypto");
-          const checksum = createHash31("sha256").update(JSON.stringify(payloadWithoutChecksum)).digest("hex");
+          const { createHash: createHash32 } = await import("node:crypto");
+          const checksum = createHash32("sha256").update(JSON.stringify(payloadWithoutChecksum)).digest("hex");
           const localPeerInfo = await central.getLocalPeerInfo();
           await fetchFromRemoteNode(node, "/api/settings/sync-receive", {
             method: "POST",
@@ -341678,7 +341814,7 @@ var init_register_settings_sync_routes = __esm({
             });
             return;
           }
-          const { createHash: createHash31 } = await import("node:crypto");
+          const { createHash: createHash32 } = await import("node:crypto");
           const exportedAt = (/* @__PURE__ */ new Date()).toISOString();
           const payloadWithoutChecksum = {
             global: remoteSettings.global,
@@ -341687,7 +341823,7 @@ var init_register_settings_sync_routes = __esm({
             exportedAt,
             version: 1
           };
-          const checksum = createHash31("sha256").update(JSON.stringify(payloadWithoutChecksum)).digest("hex");
+          const checksum = createHash32("sha256").update(JSON.stringify(payloadWithoutChecksum)).digest("hex");
           const result2 = await central.applyRemoteSettings({
             ...payloadWithoutChecksum,
             checksum
@@ -368064,7 +368200,7 @@ var init_report_scrub = __esm({
 });
 
 // ../dashboard/src/report-pipeline.ts
-import { createHash as createHash29 } from "node:crypto";
+import { createHash as createHash30 } from "node:crypto";
 function resolveReportMode(actionType, settings) {
   return settings.reportModeByAction?.[actionType] ?? settings.reportMode ?? "draft-review";
 }
@@ -368180,7 +368316,7 @@ async function embedScreenshot(args) {
   try {
     const extension = EXT_BY_MIME[attachment.mimeType];
     if (!extension) return args.report;
-    const safeId2 = createHash29("sha256").update(`${args.report.sessionToken ?? ""}:${attachment.artifactId}`).digest("hex").slice(0, 32);
+    const safeId2 = createHash30("sha256").update(`${args.report.sessionToken ?? ""}:${attachment.artifactId}`).digest("hex").slice(0, 32);
     const path14 = `.fusion-reports/${safeId2}/screenshot.${extension}`;
     const uploaded = await args.client.uploadImageAsset({ owner: args.owner, repo: args.repo, path: path14, contentBase64: Buffer.from(attachment.bytes).toString("base64"), message: "chore: add Fusion report screenshot", mimeType: attachment.mimeType });
     const alt = markdownEscapeImageAlt(scrubReportText(attachment.filename, args.scrubContext) || "Report screenshot");
@@ -371283,7 +371419,7 @@ var init_types6 = __esm({
 });
 
 // ../dashboard/src/stt/model-manager.ts
-import { createHash as createHash30, randomUUID as randomUUID64 } from "node:crypto";
+import { createHash as createHash31, randomUUID as randomUUID64 } from "node:crypto";
 import { mkdir as mkdir38, open as open4, readFile as readFile56, readdir as readdir14, rename as rename10, rm as rm21, stat as stat16, writeFile as writeFile37 } from "node:fs/promises";
 import { join as join118, relative as relative22, resolve as resolve68, sep as sep18 } from "node:path";
 function parseSafeTarListing(listing) {
@@ -371372,7 +371508,7 @@ function createVoiceModelManager(options = {}) {
         if (!response.ok || !response.body) throw Object.assign(new Error("download failed"), { voiceReason: "network" });
         if (!current(g2, signal)) return state;
         const total = Number(response.headers.get("content-length")) || void 0;
-        const hash = createHash30("sha256");
+        const hash = createHash31("sha256");
         let bytes = 0;
         for await (const chunk of response.body) {
           if (!current(g2, signal)) return state;

package/dist/child-process-worker.js

@@ -32880,14 +32880,17 @@ function deepStripNulChars(value) {
     return stripNulChars(value);
   }
   if (Array.isArray(value)) {
-    return value.map(deepStripNulChars);
+    const sanitized = value.map(deepStripNulChars);
+    return sanitized.some((entry, index2) => entry !== value[index2]) ? sanitized : value;
   }
   if (value !== null && typeof value === "object") {
-    return Object.fromEntries(
-      Object.entries(value).map(
-        ([key, entry]) => [stripNulChars(key), deepStripNulChars(entry)]
-      )
-    );
+    const entries = Object.entries(value);
+    const sanitizedEntries = entries.map(([key, entry]) => [
+      stripNulChars(key),
+      deepStripNulChars(entry)
+    ]);
+    const changed = sanitizedEntries.some(([key, entry], index2) => key !== entries[index2]?.[0] || entry !== entries[index2]?.[1]);
+    return changed ? Object.fromEntries(sanitizedEntries) : value;
   }
   return value;
 }
@@ -124945,24 +124948,28 @@ function rowToRoomMessage(row) {
   };
 }
 async function createChatSession(handle, session) {
+  const sanitized = {
+    ...session,
+    inFlightGeneration: sanitizeJsonbValue(session.inFlightGeneration)
+  };
   await handle.insert(project_exports.chatSessions).values({
-    id: session.id,
-    agentId: session.agentId,
-    title: session.title,
-    status: session.status,
+    id: sanitized.id,
+    agentId: sanitized.agentId,
+    title: sanitized.title,
+    status: sanitized.status,
     // FNXC:MultiProjectIsolation 2026-07-15-23:40: write the caller's domain project to owner_project_id and never project_id — the trigger/GUC owns the partition.
-    ownerProjectId: session.projectId,
-    modelProvider: session.modelProvider,
-    modelId: session.modelId,
-    thinkingLevel: session.thinkingLevel ?? null,
-    createdAt: session.createdAt,
-    updatedAt: session.updatedAt,
-    pinnedAt: session.pinnedAt,
-    cliSessionFile: session.cliSessionFile,
-    inFlightGeneration: session.inFlightGeneration,
-    cliExecutorAdapterId: session.cliExecutorAdapterId
+    ownerProjectId: sanitized.projectId,
+    modelProvider: sanitized.modelProvider,
+    modelId: sanitized.modelId,
+    thinkingLevel: sanitized.thinkingLevel ?? null,
+    createdAt: sanitized.createdAt,
+    updatedAt: sanitized.updatedAt,
+    pinnedAt: sanitized.pinnedAt,
+    cliSessionFile: sanitized.cliSessionFile,
+    inFlightGeneration: sanitized.inFlightGeneration,
+    cliExecutorAdapterId: sanitized.cliExecutorAdapterId
   });
-  return session;
+  return sanitized;
 }
 async function getChatSession(handle, id) {
   const rows = await handle.select().from(project_exports.chatSessions).where(eq(project_exports.chatSessions.id, id));
@@ -125270,7 +125277,8 @@ async function setCliExecutorAdapterId(handle, id, adapterId) {
 async function setInFlightGeneration(handle, id, inFlightGeneration) {
   const existing = await getChatSession(handle, id);
   if (!existing) return void 0;
-  await handle.update(project_exports.chatSessions).set({ inFlightGeneration }).where(eq(project_exports.chatSessions.id, id));
+  const sanitizedInFlightGeneration = sanitizeJsonbValue(inFlightGeneration);
+  await handle.update(project_exports.chatSessions).set({ inFlightGeneration: sanitizedInFlightGeneration }).where(eq(project_exports.chatSessions.id, id));
   return getChatSession(handle, id);
 }
 async function addChatMessageAttachment(handle, sessionId, messageId, attachment) {
@@ -125278,7 +125286,10 @@ async function addChatMessageAttachment(handle, sessionId, messageId, attachment
   if (!message || message.sessionId !== sessionId) {
     throw new Error(`Message ${messageId} not found in session ${sessionId}`);
   }
-  const updatedAttachments = [...message.attachments ?? [], attachment];
+  const updatedAttachments = sanitizeJsonbValue([
+    ...message.attachments ?? [],
+    attachment
+  ]);
   await handle.update(project_exports.chatMessages).set({ attachments: updatedAttachments }).where(eq(project_exports.chatMessages.id, messageId));
   const updated = await getChatMessage(handle, messageId);
   if (!updated) throw new Error(`Failed to update message ${messageId}`);
@@ -125341,7 +125352,7 @@ async function updateChatMessageMetadata(handle, messageId, metadata, options) {
   }
   const merge2 = options?.merge !== false;
   const nextMetadata = metadata === null ? merge2 ? existing.metadata : null : merge2 ? { ...existing.metadata ?? {}, ...metadata } : metadata;
-  await handle.update(project_exports.chatMessages).set({ metadata: nextMetadata ?? null }).where(eq(project_exports.chatMessages.id, messageId));
+  await handle.update(project_exports.chatMessages).set({ metadata: sanitizeJsonbValue(nextMetadata) ?? null }).where(eq(project_exports.chatMessages.id, messageId));
   const updated = await getChatMessage(handle, messageId);
   if (!updated) {
     throw new Error(`Failed to update message ${messageId}`);
@@ -125410,7 +125421,10 @@ async function addChatRoomMessageAttachment(handle, roomId, messageId, attachmen
   if (!message || message.roomId !== roomId) {
     throw new Error(`Message ${messageId} not found in room ${roomId}`);
   }
-  const updatedAttachments = [...message.attachments ?? [], attachment];
+  const updatedAttachments = sanitizeJsonbValue([
+    ...message.attachments ?? [],
+    attachment
+  ]);
   await handle.update(project_exports.chatRoomMessages).set({ attachments: updatedAttachments }).where(eq(project_exports.chatRoomMessages.id, messageId));
   await handle.update(project_exports.chatRooms).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq(project_exports.chatRooms.id, roomId));
   const updated = await getChatRoomMessage(handle, messageId);