@sumicom/quicksave 0.8.5 → 0.8.7

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Quicksave, KingYoung Technology
+Copyright (c) 2026 King Young Technology and contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,114 +1,52 @@
 # @sumicom/quicksave — desktop agent
 
-Background daemon that runs on your development machine and connects your
-Quicksave PWA (phone or browser) to the local git working tree and Claude
-Code CLI sessions. All communication is end-to-end encrypted; the relay
-server never sees plaintext.
+Background daemon that runs on your development machine and connects
+your Quicksave PWA (phone or browser) to your coding-agent CLI sessions
+and the local git working tree. All communication is end-to-end
+encrypted; the relay server never sees plaintext.
 
-## Install
+## Prerequisites
 
-```bash
-npm install -g @sumicom/quicksave
-```
-
-## Usage
+Quicksave drives a coding-agent CLI on your `$PATH`. Install one (or
+both) and sign in first:
 
 ```bash
-# cd into a git repo, then:
-quicksave
-
-# or point at an explicit repo:
-quicksave --repo /path/to/repo
+# Claude Code (Anthropic) — https://code.claude.com/docs/en/setup
+curl -fsSL https://claude.ai/install.sh | bash
+claude   # follow login prompts
 
-# custom signaling server:
-quicksave -s wss://your-relay.example.com
+# Codex (OpenAI) — https://github.com/openai/codex#readme
+npm install -g @openai/codex
+codex    # follow login prompts
 ```
 
-On first run this prints a pairing URL and QR code. Scan it from the
-[Quicksave PWA](https://quicksave.dev) to connect.
-
-The CLI auto-launches a background daemon (`quicksave service run`) and
-then exits. The daemon keeps running; future `quicksave` invocations just
-attach to it to add repos or re-read pairing info.
-
-## Subcommands
-
-| Command                          | Purpose                                                      |
-| -------------------------------- | ------------------------------------------------------------ |
-| `quicksave`                      | Start / ensure daemon; print pairing URL + QR                |
-| `quicksave rotate-keys`          | Generate a new keypair (invalidates paired PWAs)             |
-| `quicksave service start`        | Start daemon in the background                               |
-| `quicksave service stop`         | Stop the running daemon                                      |
-| `quicksave service status`       | Live status (pid, peers, active sessions, managed repos)     |
-| `quicksave service info`         | Static status from `service.json` (no IPC)                   |
-| `quicksave service run`          | Run daemon in foreground (not normally invoked directly)     |
-
-### Debug commands
+You also need Node.js 20+ and `git`.
 
-Available only when `QUICKSAVE_DEBUG=1` is set (auto-enabled in dev mode):
+## Install
 
 ```bash
-QUICKSAVE_DEBUG=1 quicksave service debug          # full state snapshot
-QUICKSAVE_DEBUG=1 quicksave service sessions       # list all Claude sessions
-QUICKSAVE_DEBUG=1 quicksave service cards <id>     # card history for a session
-QUICKSAVE_DEBUG=1 quicksave service resolve <id>   # force-resolve stuck permission
+npm install -g @sumicom/quicksave
 ```
 
-## What the daemon does
-
-- Maintains the WebSocket connection to the relay, does NaCl handshake with
-  each paired PWA, and decrypts/dispatches every message.
-- Executes git operations against managed repos (`status`, `diff`, stage,
-  unstage, commit, branch, log, `.gitignore` edits, etc.).
-- Manages Claude Code CLI sessions: spawns `claude` with stream-json I/O,
-  parses the output into `Card` events, handles `control_request`
-  permission prompts, forwards them to the PWA for approval, and streams
-  card updates back.
-- Generates commit messages either via Anthropic API (user-supplied key)
-  or via an agentic `claude -p` loop that uses the user's local Claude
-  subscription.
-- Hosts a pool of PTY-backed interactive shells (`src/terminal/terminalManager.ts`,
-  via `node-pty`) that the PWA can drive remotely. Each terminal keeps a
-  bounded scrollback buffer so a reconnecting PWA can redraw the current
-  screen without the shell having to repaint.
-- Serves an IPC (Unix socket) JSON-RPC API for the CLI to query state and
-  issue debug commands.
-- Triggers Web Push notifications through the relay when a permission
-  prompt arrives and no PWA peer is currently subscribed.
-
-## Architecture
-
-See [`docs/references/quicksave-architecture.md`](../../docs/references/quicksave-architecture.md)
-for the full design — session lifecycle, MessageBus wiring, permission
-flow, commit-summary pipeline, IPC protocol.
-
-## Data location
-
-| Path                            | Contents                                          |
-| ------------------------------- | ------------------------------------------------- |
-| `~/.quicksave/config.json`      | Agent ID, NaCl keypairs, managed repo list        |
-| `~/.quicksave/run/service.json` | Live daemon state (pid, socket path, heartbeat)   |
-| `~/.quicksave/run/*.sock`       | IPC socket                                        |
-| `~/.quicksave/sessions/`        | Per-session JSONL history (Claude Code CLI)       |
-
-## Development
+## Quick start
 
 ```bash
-# from monorepo root
-pnpm --filter @sumicom/quicksave dev              # tsx watch
-pnpm --filter @sumicom/quicksave test             # vitest
-pnpm --filter @sumicom/quicksave build            # tsc
+cd /path/to/your/repo
+quicksave
 ```
 
-Fast restart-from-source during active development:
+On first run this prints a pairing URL and QR code. Scan it from the
+[Quicksave PWA](https://quicksave.dev) to connect.
 
-```bash
-./scripts/dev-daemon.sh                           # kill + spawn
-./scripts/dev-daemon-delayed.sh 30                # delayed variant — safe
-                                                  # when called from inside a
-                                                  # daemon-spawned Claude CLI
-```
+The CLI auto-launches a background daemon (`quicksave service run`) and
+then exits. The daemon keeps running; future `quicksave` invocations
+just attach to it to add repos or re-read pairing info.
 
-## License
+## More
 
-MIT
+- **CLI subcommands, debug commands, data layout** —
+  [`docs/references/agent-cli.md`](../../docs/references/agent-cli.md)
+- **Architecture (sessions, MessageBus, permissions, IPC)** —
+  [`docs/references/quicksave-architecture.en.md`](../../docs/references/quicksave-architecture.en.md)
+- **Local development** —
+  [`docs/development.md`](../../docs/development.md)

package/dist/ai/asyncQueue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"asyncQueue.d.ts","sourceRoot":"","sources":["../../src/ai/asyncQueue.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,qBAAa,UAAU,CAAC,CAAC,CAAE,YAAW,aAAa,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,OAAO,CAAqD;IACpE,OAAO,CAAC,IAAI,CAAS;IAErB,8EAA8E;IAC9E,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI;IAWpB,iDAAiD;IACjD,GAAG,IAAI,IAAI;IASX,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC;CAe3C"}
+{"version":3,"file":"asyncQueue.d.ts","sourceRoot":"","sources":["../../src/ai/asyncQueue.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,qBAAa,UAAU,CAAC,CAAC,CAAE,YAAW,aAAa,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,OAAO,CAAqD;IACpE,OAAO,CAAC,IAAI,CAAS;IAErB,8EAA8E;IAC9E,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI;IAWpB,iDAAiD;IACjD,GAAG,IAAI,IAAI;IASX,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC;CAe3C"}

package/dist/ai/asyncQueue.js

@@ -1,3 +1,5 @@
+// SPDX-FileCopyrightText: 2026 King Young Technology
+// SPDX-License-Identifier: MIT
 /**
  * A simple async iterable queue for multi-turn prompt delivery.
  *

package/dist/ai/asyncQueue.js.map

@@ -1 +1 @@
-{"version":3,"file":"asyncQueue.js","sourceRoot":"","sources":["../../src/ai/asyncQueue.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACb,KAAK,GAAQ,EAAE,CAAC;IAChB,OAAO,GAAgD,IAAI,CAAC;IAC5D,IAAI,GAAG,KAAK,CAAC;IAErB,8EAA8E;IAC9E,IAAI,CAAC,KAAQ;QACX,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,GAAG;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,EAAE,KAAK,EAAE,SAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,CAAC,MAAM,CAAC,aAAa,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,GAA+B,EAAE;gBACrC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;oBAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;gBACzB,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"asyncQueue.js","sourceRoot":"","sources":["../../src/ai/asyncQueue.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,+BAA+B;AAC/B;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACb,KAAK,GAAQ,EAAE,CAAC;IAChB,OAAO,GAAgD,IAAI,CAAC;IAC5D,IAAI,GAAG,KAAK,CAAC;IAErB,8EAA8E;IAC9E,IAAI,CAAC,KAAQ;QACX,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,GAAG;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,EAAE,KAAK,EAAE,SAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,CAAC,MAAM,CAAC,aAAa,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,GAA+B,EAAE;gBACrC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;oBAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;gBACzB,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/ai/attachmentStaging.d.ts

@@ -0,0 +1,71 @@
+import { type Attachment, type AttachmentUploadRequestPayload, type AttachmentUploadResponsePayload } from '@sumicom/quicksave-shared';
+export interface AttachmentNotFoundError extends Error {
+    code: 'attachment_not_found';
+    attachmentId: string;
+}
+export interface AttachmentNotReadyError extends Error {
+    code: 'attachment_not_ready';
+    attachmentId: string;
+}
+export interface AttachmentTooLargeError extends Error {
+    code: 'attachment_too_large';
+    attachmentId: string;
+}
+export interface AttachmentTooManyPagesError extends Error {
+    code: 'attachment_too_many_pages';
+    attachmentId: string;
+}
+export interface AttachmentBadRequestError extends Error {
+    code: 'attachment_bad_request';
+    attachmentId: string;
+}
+export interface AttachmentPeerQuotaError extends Error {
+    code: 'attachment_peer_quota';
+}
+export interface AttachmentStagingOptions {
+    /** Override TTL — primarily for tests. */
+    ttlMs?: number;
+    /** Override per-peer cap — primarily for tests. */
+    perPeerMaxBytes?: number;
+    /** Custom clock — primarily for tests. */
+    now?: () => number;
+}
+/**
+ * In-memory staging map keyed by `(peerAddress, attachmentId)`. One instance
+ * per agent process; the messageHandler injects the peer address on every
+ * request.
+ */
+export declare class AttachmentStaging {
+    private readonly byPeer;
+    private readonly perPeerBytes;
+    private readonly ttlMs;
+    private readonly perPeerMaxBytes;
+    private readonly now;
+    constructor(opts?: AttachmentStagingOptions);
+    /**
+     * Apply one upload chunk. Returns the running progress + ready flag.
+     * Throws a tagged Error (`code` field) for validation failures so the
+     * messageHandler can map them to bus error responses.
+     */
+    acceptChunk(peerAddress: string, payload: AttachmentUploadRequestPayload): AttachmentUploadResponsePayload;
+    /**
+     * Atomically remove and return the requested attachments. Throws on the
+     * first missing or not-ready id (with that id in the error). On error,
+     * **no** attachments are consumed — callers can retry safely.
+     */
+    consume(peerAddress: string, attachmentIds: readonly string[]): Attachment[];
+    /** Drop a staged attachment if present. Returns true if anything was removed. */
+    cancel(peerAddress: string, attachmentId: string): boolean;
+    /** Drop every staging record for a peer (called on disconnect). */
+    removePeer(peerAddress: string): void;
+    /** Sweep expired entries. Safe to call from a periodic timer. */
+    gc(): void;
+    /** Test/diagnostic: count of staged records for a peer. */
+    size(peerAddress: string): number;
+    /** Test/diagnostic: bytes currently held for a peer. */
+    bytesFor(peerAddress: string): number;
+    private validateMeta;
+    private isReady;
+    private dropEntry;
+}
+//# sourceMappingURL=attachmentStaging.d.ts.map

package/dist/ai/attachmentStaging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentStaging.d.ts","sourceRoot":"","sources":["../../src/ai/attachmentStaging.ts"],"names":[],"mappings":"AASA,OAAO,EAKL,KAAK,UAAU,EAEf,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACrC,MAAM,2BAA2B,CAAC;AAqBnC,MAAM,WAAW,uBAAwB,SAAQ,KAAK;IACpD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,uBAAwB,SAAQ,KAAK;IACpD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,uBAAwB,SAAQ,KAAK;IACpD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,2BAA4B,SAAQ,KAAK;IACxD,IAAI,EAAE,2BAA2B,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,yBAA0B,SAAQ,KAAK;IACtD,IAAI,EAAE,wBAAwB,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,wBAAyB,SAAQ,KAAK;IACrD,IAAI,EAAE,uBAAuB,CAAC;CAC/B;AAqBD,MAAM,WAAW,wBAAwB;IACvC,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoD;IAC3E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,IAAI,GAAE,wBAA6B;IAM/C;;;;OAIG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,8BAA8B,GAAG,+BAA+B;IA2G1G;;;;OAIG;IACH,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,EAAE;IA6B5E,iFAAiF;IACjF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAI1D,mEAAmE;IACnE,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAKrC,iEAAiE;IACjE,EAAE,IAAI,IAAI;IAeV,2DAA2D;IAC3D,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAIjC,wDAAwD;IACxD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAMrC,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,SAAS;CAiBlB"}

package/dist/ai/attachmentStaging.js

@@ -0,0 +1,243 @@
+// SPDX-FileCopyrightText: 2026 King Young Technology
+// SPDX-License-Identifier: MIT
+// ============================================================================
+// Attachment staging — buffers chunked uploads from a peer until they are
+// consumed by a `claude:start` / `claude:resume` whose payload references
+// the attachment ids. Buffers live in memory; the GC loop drops idle records
+// after `ATTACHMENT_STAGING_TTL_MS`.
+// ============================================================================
+import { ATTACHMENT_LIMITS, ATTACHMENT_STAGING_TTL_MS, PDF_MAX_PAGES, PER_PEER_STAGING_MAX_BYTES, } from '@sumicom/quicksave-shared';
+import { countPdfPages } from './pdfMeta.js';
+function makeError(code, message, extra = {}) {
+    const err = new Error(message);
+    err.code = code;
+    Object.assign(err, extra);
+    return err;
+}
+/**
+ * In-memory staging map keyed by `(peerAddress, attachmentId)`. One instance
+ * per agent process; the messageHandler injects the peer address on every
+ * request.
+ */
+export class AttachmentStaging {
+    byPeer = new Map();
+    perPeerBytes = new Map();
+    ttlMs;
+    perPeerMaxBytes;
+    now;
+    constructor(opts = {}) {
+        this.ttlMs = opts.ttlMs ?? ATTACHMENT_STAGING_TTL_MS;
+        this.perPeerMaxBytes = opts.perPeerMaxBytes ?? PER_PEER_STAGING_MAX_BYTES;
+        this.now = opts.now ?? (() => Date.now());
+    }
+    /**
+     * Apply one upload chunk. Returns the running progress + ready flag.
+     * Throws a tagged Error (`code` field) for validation failures so the
+     * messageHandler can map them to bus error responses.
+     */
+    acceptChunk(peerAddress, payload) {
+        const { attachmentId, chunkIndex, chunk, meta } = payload;
+        if (!attachmentId || typeof attachmentId !== 'string') {
+            throw makeError('attachment_bad_request', 'attachmentId required', { attachmentId: String(attachmentId) });
+        }
+        if (typeof chunkIndex !== 'number' || chunkIndex < 0 || !Number.isInteger(chunkIndex)) {
+            throw makeError('attachment_bad_request', 'chunkIndex must be a non-negative integer', { attachmentId });
+        }
+        if (typeof chunk !== 'string') {
+            throw makeError('attachment_bad_request', 'chunk must be base64 string', { attachmentId });
+        }
+        const peerMap = this.byPeer.get(peerAddress) ?? new Map();
+        let staged = peerMap.get(attachmentId);
+        if (!staged) {
+            // First time we see this id — meta is required.
+            if (!meta) {
+                throw makeError('attachment_bad_request', 'meta required on first chunk', { attachmentId });
+            }
+            this.validateMeta(attachmentId, meta);
+            staged = {
+                attachmentId,
+                kind: meta.kind,
+                mimeType: meta.mimeType,
+                name: meta.name,
+                size: meta.size,
+                totalChunks: meta.totalChunks,
+                chunks: new Array(meta.totalChunks),
+                receivedBytes: 0,
+                receivedCount: 0,
+                lastTouchedAt: this.now(),
+            };
+            peerMap.set(attachmentId, staged);
+            this.byPeer.set(peerAddress, peerMap);
+        }
+        else if (meta) {
+            // Subsequent chunks may include meta but must be consistent.
+            if (meta.kind !== staged.kind
+                || meta.mimeType !== staged.mimeType
+                || meta.name !== staged.name
+                || meta.size !== staged.size
+                || meta.totalChunks !== staged.totalChunks) {
+                throw makeError('attachment_bad_request', 'meta mismatch for existing attachment', { attachmentId });
+            }
+        }
+        if (chunkIndex >= staged.totalChunks) {
+            throw makeError('attachment_bad_request', `chunkIndex ${chunkIndex} >= totalChunks ${staged.totalChunks}`, { attachmentId });
+        }
+        if (staged.chunks[chunkIndex] !== undefined) {
+            // Idempotent re-send: if the bytes match, no-op; otherwise reject.
+            const existing = staged.chunks[chunkIndex];
+            const incoming = Buffer.from(chunk, 'base64');
+            if (existing.equals(incoming)) {
+                staged.lastTouchedAt = this.now();
+                return { attachmentId, receivedBytes: staged.receivedBytes, ready: this.isReady(staged) };
+            }
+            throw makeError('attachment_bad_request', `chunk ${chunkIndex} already received with different bytes`, { attachmentId });
+        }
+        const buf = Buffer.from(chunk, 'base64');
+        const nextRunningBytes = staged.receivedBytes + buf.length;
+        if (nextRunningBytes > staged.size) {
+            throw makeError('attachment_too_large', `running bytes exceeds declared size`, { attachmentId });
+        }
+        const peerTotal = this.perPeerBytes.get(peerAddress) ?? 0;
+        if (peerTotal + buf.length > this.perPeerMaxBytes) {
+            throw makeError('attachment_peer_quota', 'per-peer staging quota exceeded');
+        }
+        staged.chunks[chunkIndex] = buf;
+        staged.receivedBytes = nextRunningBytes;
+        staged.receivedCount += 1;
+        staged.lastTouchedAt = this.now();
+        this.perPeerBytes.set(peerAddress, peerTotal + buf.length);
+        const ready = this.isReady(staged);
+        if (ready && staged.receivedBytes !== staged.size) {
+            // Strict: declared size must match received bytes when ready.
+            this.dropEntry(peerAddress, attachmentId);
+            throw makeError('attachment_bad_request', 'received bytes do not match declared size', { attachmentId });
+        }
+        // Page-count check on PDF completion. The Anthropic API rejects PDFs over
+        // PDF_MAX_PAGES and the SDK rewrites the rejection as a poison "PDF too
+        // large" assistant block — drop the entry now so the user sees a clean
+        // error instead of a stuck session. countPdfPages returns null/0 for
+        // PDFs where pages live in compressed object streams (rare); in that
+        // case we let it through and fall back to the recovery card path.
+        if (ready && staged.kind === 'pdf') {
+            const pages = countPdfPages(Buffer.concat(staged.chunks));
+            if (pages !== null && pages > PDF_MAX_PAGES) {
+                this.dropEntry(peerAddress, attachmentId);
+                throw makeError('attachment_too_many_pages', `PDF has ${pages} pages (max ${PDF_MAX_PAGES})`, { attachmentId });
+            }
+        }
+        return { attachmentId, receivedBytes: staged.receivedBytes, ready };
+    }
+    /**
+     * Atomically remove and return the requested attachments. Throws on the
+     * first missing or not-ready id (with that id in the error). On error,
+     * **no** attachments are consumed — callers can retry safely.
+     */
+    consume(peerAddress, attachmentIds) {
+        if (attachmentIds.length === 0)
+            return [];
+        const peerMap = this.byPeer.get(peerAddress);
+        if (!peerMap) {
+            throw makeError('attachment_not_found', `no staged attachments for peer`, { attachmentId: attachmentIds[0] });
+        }
+        // Validate all first, then remove.
+        for (const id of attachmentIds) {
+            const s = peerMap.get(id);
+            if (!s)
+                throw makeError('attachment_not_found', `attachment ${id} not staged`, { attachmentId: id });
+            if (!this.isReady(s))
+                throw makeError('attachment_not_ready', `attachment ${id} not ready`, { attachmentId: id });
+        }
+        const result = [];
+        for (const id of attachmentIds) {
+            const s = peerMap.get(id);
+            const data = Buffer.concat(s.chunks).toString('base64');
+            result.push({
+                id: s.attachmentId,
+                kind: s.kind,
+                mimeType: s.mimeType,
+                name: s.name,
+                size: s.size,
+                data,
+            });
+            this.dropEntry(peerAddress, id);
+        }
+        return result;
+    }
+    /** Drop a staged attachment if present. Returns true if anything was removed. */
+    cancel(peerAddress, attachmentId) {
+        return this.dropEntry(peerAddress, attachmentId);
+    }
+    /** Drop every staging record for a peer (called on disconnect). */
+    removePeer(peerAddress) {
+        this.byPeer.delete(peerAddress);
+        this.perPeerBytes.delete(peerAddress);
+    }
+    /** Sweep expired entries. Safe to call from a periodic timer. */
+    gc() {
+        const cutoff = this.now() - this.ttlMs;
+        for (const [peer, map] of this.byPeer) {
+            for (const [id, s] of map) {
+                if (s.lastTouchedAt <= cutoff) {
+                    this.dropEntry(peer, id);
+                }
+            }
+            if (map.size === 0) {
+                this.byPeer.delete(peer);
+                this.perPeerBytes.delete(peer);
+            }
+        }
+    }
+    /** Test/diagnostic: count of staged records for a peer. */
+    size(peerAddress) {
+        return this.byPeer.get(peerAddress)?.size ?? 0;
+    }
+    /** Test/diagnostic: bytes currently held for a peer. */
+    bytesFor(peerAddress) {
+        return this.perPeerBytes.get(peerAddress) ?? 0;
+    }
+    // ── Private ─────────────────────────────────────────────────────────────
+    validateMeta(attachmentId, meta) {
+        if (!meta.kind || !ATTACHMENT_LIMITS[meta.kind]) {
+            throw makeError('attachment_bad_request', `unknown kind`, { attachmentId });
+        }
+        if (typeof meta.size !== 'number' || meta.size <= 0 || !Number.isFinite(meta.size)) {
+            throw makeError('attachment_bad_request', 'invalid size', { attachmentId });
+        }
+        if (meta.size > ATTACHMENT_LIMITS[meta.kind].maxBytes) {
+            throw makeError('attachment_too_large', `${meta.kind} exceeds ${ATTACHMENT_LIMITS[meta.kind].maxBytes} bytes`, { attachmentId });
+        }
+        if (typeof meta.totalChunks !== 'number' || meta.totalChunks <= 0 || !Number.isInteger(meta.totalChunks)) {
+            throw makeError('attachment_bad_request', 'invalid totalChunks', { attachmentId });
+        }
+        if (typeof meta.mimeType !== 'string' || meta.mimeType.length === 0) {
+            throw makeError('attachment_bad_request', 'invalid mimeType', { attachmentId });
+        }
+        if (typeof meta.name !== 'string' || meta.name.length === 0) {
+            throw makeError('attachment_bad_request', 'invalid name', { attachmentId });
+        }
+    }
+    isReady(s) {
+        return s.receivedCount === s.totalChunks;
+    }
+    dropEntry(peerAddress, attachmentId) {
+        const peerMap = this.byPeer.get(peerAddress);
+        if (!peerMap)
+            return false;
+        const s = peerMap.get(attachmentId);
+        if (!s)
+            return false;
+        peerMap.delete(attachmentId);
+        const remainingBytes = (this.perPeerBytes.get(peerAddress) ?? 0) - s.receivedBytes;
+        if (remainingBytes > 0) {
+            this.perPeerBytes.set(peerAddress, remainingBytes);
+        }
+        else {
+            this.perPeerBytes.delete(peerAddress);
+        }
+        if (peerMap.size === 0) {
+            this.byPeer.delete(peerAddress);
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=attachmentStaging.js.map

package/dist/ai/attachmentStaging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentStaging.js","sourceRoot":"","sources":["../../src/ai/attachmentStaging.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,+BAA+B;AAC/B,+EAA+E;AAC/E,0EAA0E;AAC1E,0EAA0E;AAC1E,6EAA6E;AAC7E,qCAAqC;AACrC,+EAA+E;AAE/E,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,aAAa,EACb,0BAA0B,GAK3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAoD7C,SAAS,SAAS,CAChB,IAAO,EACP,OAAe,EACf,QAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAwB,CAAC;IACrD,GAA8B,CAAC,IAAI,GAAG,IAAI,CAAC;IAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC;AAWD;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IACX,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAC;IAC1D,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,CAAS;IACd,eAAe,CAAS;IACxB,GAAG,CAAe;IAEnC,YAAY,OAAiC,EAAE;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,yBAAyB,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,0BAA0B,CAAC;QAC1E,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,WAAmB,EAAE,OAAuC;QACtE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAC1D,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,SAAS,CAAC,wBAAwB,EAAE,uBAAuB,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YACtF,MAAM,SAAS,CAAC,wBAAwB,EAAE,2CAA2C,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,SAAS,CAAC,wBAAwB,EAAE,6BAA6B,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAA4B,CAAC;QACpF,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEvC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,gDAAgD;YAChD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,SAAS,CAAC,wBAAwB,EAAE,8BAA8B,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACtC,MAAM,GAAG;gBACP,YAAY;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,MAAM,EAAE,IAAI,KAAK,CAAqB,IAAI,CAAC,WAAW,CAAC;gBACvD,aAAa,EAAE,CAAC;gBAChB,aAAa,EAAE,CAAC;gBAChB,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;aAC1B,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,6DAA6D;YAC7D,IACE,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;mBACtB,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;mBACjC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;mBACzB,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;mBACzB,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EAC1C,CAAC;gBACD,MAAM,SAAS,CAAC,wBAAwB,EAAE,uCAAuC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QAED,IAAI,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,SAAS,CAAC,wBAAwB,EAAE,cAAc,UAAU,mBAAmB,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YAC5C,mEAAmE;YACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC9C,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5F,CAAC;YACD,MAAM,SAAS,CAAC,wBAAwB,EAAE,SAAS,UAAU,wCAAwC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3H,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC;QAC3D,IAAI,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,SAAS,CAAC,sBAAsB,EAAE,qCAAqC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,SAAS,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAClD,MAAM,SAAS,CAAC,uBAAuB,EAAE,iCAAiC,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QAChC,MAAM,CAAC,aAAa,GAAG,gBAAgB,CAAC;QACxC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,KAAK,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YAClD,8DAA8D;YAC9D,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAC1C,MAAM,SAAS,CAAC,wBAAwB,EAAE,2CAA2C,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,kEAAkE;QAClE,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAkB,CAAC,CAAC,CAAC;YACtE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;gBAC5C,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;gBAC1C,MAAM,SAAS,CACb,2BAA2B,EAC3B,WAAW,KAAK,eAAe,aAAa,GAAG,EAC/C,EAAE,YAAY,EAAE,CACjB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,WAAmB,EAAE,aAAgC;QAC3D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,CAAC,sBAAsB,EAAE,gCAAgC,EAAE,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,mCAAmC;QACnC,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,sBAAsB,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;YACrG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,MAAM,SAAS,CAAC,sBAAsB,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAkB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpE,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,CAAC,CAAC,YAAY;gBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI;aACL,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iFAAiF;IACjF,MAAM,CAAC,WAAmB,EAAE,YAAoB;QAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;IAED,mEAAmE;IACnE,UAAU,CAAC,WAAmB;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAED,iEAAiE;IACjE,EAAE;QACA,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;gBAC1B,IAAI,CAAC,CAAC,aAAa,IAAI,MAAM,EAAE,CAAC;oBAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC,WAAmB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,wDAAwD;IACxD,QAAQ,CAAC,WAAmB;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,2EAA2E;IAEnE,YAAY,CAAC,YAAoB,EAAE,IAAyD;QAClG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,SAAS,CAAC,wBAAwB,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnF,MAAM,SAAS,CAAC,wBAAwB,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,SAAS,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,IAAI,YAAY,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACnI,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACzG,MAAM,SAAS,CAAC,wBAAwB,EAAE,qBAAqB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,SAAS,CAAC,wBAAwB,EAAE,kBAAkB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,SAAS,CAAC,wBAAwB,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,CAAmB;QACjC,OAAO,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,WAAW,CAAC;IAC3C,CAAC;IAEO,SAAS,CAAC,WAAmB,EAAE,YAAoB;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7B,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;QACnF,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/ai/attachmentStore.d.ts

@@ -0,0 +1,40 @@
+import type { Attachment, AttachmentMetadata } from '@sumicom/quicksave-shared';
+export interface PersistedMeta {
+    id: string;
+    kind: AttachmentMetadata['kind'];
+    mimeType: string;
+    name: string;
+    size: number;
+    storedAt: number;
+}
+/**
+ * Persist a batch of resolved attachments under one session id. Idempotent
+ * per id — re-writing the same id overwrites both files.
+ */
+export declare function persistAttachments(sessionId: string, attachments: readonly Attachment[]): Promise<void>;
+export interface TurnManifestEntry {
+    ids: string[];
+}
+/**
+ * Read the per-session attachment turn manifest in send order. Returns an
+ * empty array if no manifest exists yet (e.g. a session whose attachments
+ * predate this code), letting callers fall back to fuzzy rebind.
+ */
+export declare function readTurnManifest(sessionId: string): Promise<TurnManifestEntry[]>;
+/**
+ * Read one attachment's bytes back, returning the wire `Attachment` shape
+ * (metadata + base64 data). Returns `null` if the attachment isn't on disk
+ * — e.g. session was end-tasked, or the JSONL had an attachment we didn't
+ * persist (cold-start session before this code shipped).
+ */
+export declare function loadAttachment(sessionId: string, attachmentId: string): Promise<Attachment | null>;
+/** Drop every persisted attachment for one session (called on end-task). */
+export declare function removeSessionAttachments(sessionId: string): Promise<void>;
+/**
+ * List metadata for every attachment persisted under a session id. Mainly
+ * for diagnostics / tests.
+ */
+export declare function listSessionAttachments(sessionId: string): Promise<PersistedMeta[]>;
+/** True if the meta+bin pair exist on disk — without reading the bytes. */
+export declare function hasPersistedAttachment(sessionId: string, attachmentId: string): Promise<boolean>;
+//# sourceMappingURL=attachmentStore.d.ts.map

package/dist/ai/attachmentStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachmentStore.d.ts","sourceRoot":"","sources":["../../src/ai/attachmentStore.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAGhF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAkBD;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,SAAS,UAAU,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAoBtF;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAyB5B;AAED,4EAA4E;AAC5E,wBAAsB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM/E;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAkBxF;AAED,2EAA2E;AAC3E,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAUlB"}