@threadbase-sh/streamer 1.54.2 → 1.55.0

package/dist/index.js

@@ -3934,8 +3934,8 @@ import { EventEmitter } from "events";
 import { existsSync as existsSync16 } from "fs";
 import { realpath as realpath2 } from "fs/promises";
 import { createServer as createServer2 } from "http";
-import { homedir as homedir13, hostname as hostname3 } from "os";
-import { dirname as dirname10, join as join24 } from "path";
+import { homedir as homedir14, hostname as hostname3 } from "os";
+import { dirname as dirname11, join as join25 } from "path";
 
 // src/api/app.ts
 import { Hono as Hono18 } from "hono";
@@ -5399,6 +5399,66 @@ var PushRepository = class {
   }
 };
 
+// src/server-identity.ts
+import { createPrivateKey, createPublicKey, generateKeyPairSync } from "crypto";
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync7, renameSync as renameSync2, writeFileSync as writeFileSync3 } from "fs";
+import { homedir as homedir6 } from "os";
+import { dirname as dirname6, join as join10 } from "path";
+var IDENTITY_FILE_VERSION = 1;
+function serverIdentityKeyPath() {
+  const dir = process.env.THREADBASE_CONFIG_DIR ?? join10(homedir6(), ".threadbase");
+  return join10(dir, "keys", "server-identity.key");
+}
+function loadOrCreateServerIdentity() {
+  const path = serverIdentityKeyPath();
+  let raw;
+  try {
+    raw = readFileSync7(path, "utf-8");
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+    return generateIdentity(path);
+  }
+  let privateKey;
+  try {
+    privateKey = createPrivateKey({ key: JSON.parse(raw).key, format: "jwk" });
+  } catch {
+    throw new Error(
+      `Server identity key at ${path} could not be read. Refusing to generate a new one \u2014 that would invalidate every paired device. Repair or delete the file deliberately.`
+    );
+  }
+  return { publicKey: publicKeyOf(privateKey), privateKey };
+}
+function serverIdentityPublicKey() {
+  return loadOrCreateServerIdentity().publicKey;
+}
+function generateIdentity(path) {
+  const { privateKey } = generateKeyPairSync("x25519");
+  const file = {
+    v: IDENTITY_FILE_VERSION,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    key: privateKey.export({ format: "jwk" })
+  };
+  mkdirSync3(dirname6(path), { recursive: true, mode: 448 });
+  const tmp = `${path}.tmp`;
+  writeFileSync3(tmp, `${JSON.stringify(file)}
+`, { encoding: "utf-8", mode: 384 });
+  chmodSync2(tmp, 384);
+  renameSync2(tmp, path);
+  const publicKey = publicKeyOf(privateKey);
+  getLogger("identity").info(`Generated server identity key ${publicKey}`, {
+    event: "identity.key_generated",
+    path
+  });
+  return { publicKey, privateKey };
+}
+function publicKeyOf(privateKey) {
+  const jwk = createPublicKey(privateKey).export({ format: "jwk" });
+  if (jwk.crv !== "X25519" || typeof jwk.x !== "string") {
+    throw new Error(`Server identity key at ${serverIdentityKeyPath()} is not an X25519 key`);
+  }
+  return jwk.x;
+}
+
 // src/services/push/apnsClient.ts
 import { createSign } from "crypto";
 import { connect, constants } from "http2";
@@ -5607,6 +5667,21 @@ function describePushCapability(liveActivityEnabled, env = process.env) {
     liveActivityReason: describeMissingApnsCredentials(env) ?? "APNs credentials are set but the push token store is unavailable, so Live Activity push is disabled."
   };
 }
+var identityKeyFailureLogged = false;
+function describeServerIdentityKey() {
+  try {
+    return serverIdentityPublicKey();
+  } catch (err) {
+    if (!identityKeyFailureLogged) {
+      identityKeyFailureLogged = true;
+      getLogger("identity").error(
+        `Server identity key unavailable, so /api/info will omit it: ${err instanceof Error ? err.message : String(err)}`,
+        { event: "identity.unavailable" }
+      );
+    }
+    return void 0;
+  }
+}
 var clientLog = getLogger("client");
 var createMiscRoutes = (deps) => {
   const app = new Hono11();
@@ -5640,7 +5715,13 @@ var createMiscRoutes = (deps) => {
       // actually send a push, so mobile can hide an affordance instead of
       // registering tokens nothing will ever send to. Absent on older servers,
       // which a client should read as "unknown", not "unavailable".
-      push: describePushCapability(deps.liveActivityPushEnabled())
+      push: describePushCapability(deps.liveActivityPushEnabled()),
+      // This server's long-term X25519 public key, base64url. The same value the
+      // pair QR carries as `spk`, served here so an already-paired client can
+      // learn it without re-scanning. Additive: absent means a server with no
+      // readable identity key, which a client must read as "cannot verify this
+      // server" — never as a reason to fail the rest of this response.
+      serverIdentityKey: describeServerIdentityKey()
     });
   });
   app.get("/api/profiles", (c) => c.json([]));
@@ -6158,7 +6239,7 @@ import {
   search
 } from "@threadbase-sh/scanner";
 import { createReadStream, existsSync as existsSync8, readdirSync as readdirSync3 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { createInterface } from "readline";
 
 // src/conversation-cache.ts
@@ -6167,9 +6248,9 @@ import {
   parseJsonlLine
 } from "@threadbase-sh/scanner";
 import Database from "better-sqlite3";
-import { closeSync as closeSync3, existsSync as existsSync6, mkdirSync as mkdirSync3, openSync as openSync3, readSync as readSync3, statSync as statSync3 } from "fs";
+import { closeSync as closeSync3, existsSync as existsSync6, mkdirSync as mkdirSync4, openSync as openSync3, readSync as readSync3, statSync as statSync3 } from "fs";
 import { open as openAsync } from "fs/promises";
-import { dirname as dirname7 } from "path";
+import { dirname as dirname8 } from "path";
 import { setImmediate as yieldToEventLoop } from "timers/promises";
 
 // src/db/query-timing.ts
@@ -6241,17 +6322,17 @@ function labelStatements(statements) {
 }
 
 // src/db/sqlite-migrate.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync7 } from "fs";
-import { dirname as dirname6, join as join10 } from "path";
+import { readdirSync as readdirSync2, readFileSync as readFileSync8 } from "fs";
+import { dirname as dirname7, join as join11 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function getMigrationsDir2() {
   if (typeof import.meta !== "undefined" && import.meta.url) {
-    return dirname6(fileURLToPath2(import.meta.url));
+    return dirname7(fileURLToPath2(import.meta.url));
   }
   return __dirname;
 }
 function resolveMigrationsDir(name = "migrations") {
-  return join10(getMigrationsDir2(), name);
+  return join11(getMigrationsDir2(), name);
 }
 var SCHEMA_MIGRATIONS_SQL = `
 CREATE TABLE IF NOT EXISTS schema_migrations (
@@ -6273,7 +6354,7 @@ function runSqliteMigrations(db, migrationsDir) {
       skipped.push(file);
       continue;
     }
-    const sql = readFileSync7(join10(dir, file), "utf-8");
+    const sql = readFileSync8(join11(dir, file), "utf-8");
     const tx = db.transaction(() => {
       db.exec(sql);
       recordApplied.run(file, (/* @__PURE__ */ new Date()).toISOString());
@@ -7016,7 +7097,7 @@ var ConversationCache = class _ConversationCache {
     return this.classifyAgentFile(filePath, s.mtimeMs, s.size);
   }
   static open(dbPath, tailSize = 10, migrationsDir, options) {
-    mkdirSync3(dirname7(dbPath), { recursive: true });
+    mkdirSync4(dirname8(dbPath), { recursive: true });
     const db = instrumentDatabase(new Database(dbPath));
     db.pragma("journal_mode = WAL");
     db.pragma("foreign_keys = ON");
@@ -8309,12 +8390,12 @@ var ConversationHandlers = class {
     for (const projectsDir of this.scannerManager.projectsDirs()) {
       if (!existsSync8(projectsDir)) continue;
       for (const dir of readdirSync3(projectsDir)) {
-        const fp = join11(projectsDir, dir, filename);
+        const fp = join12(projectsDir, dir, filename);
         if (existsSync8(fp)) return fp;
-        const projectDir = join11(projectsDir, dir);
+        const projectDir = join12(projectsDir, dir);
         try {
           for (const sub of readdirSync3(projectDir)) {
-            const subagentPath = join11(projectDir, sub, "subagents", filename);
+            const subagentPath = join12(projectDir, sub, "subagents", filename);
             if (existsSync8(subagentPath)) return subagentPath;
           }
         } catch {
@@ -8789,7 +8870,7 @@ var ConversationHandlers = class {
 
 // src/api/handlers/sessions.handlers.ts
 import { existsSync as existsSync10 } from "fs";
-import { basename as basename5, dirname as dirname8, join as join15 } from "path";
+import { basename as basename5, dirname as dirname9, join as join16 } from "path";
 
 // node_modules/nanoid/index.js
 import crypto2 from "crypto";
@@ -8972,7 +9053,7 @@ async function handleSendAgentInput(sessionId, body, deps) {
 
 // src/agent/handle-start-agent-session.ts
 import { existsSync as existsSync9 } from "fs";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 function validateBody(body) {
   if (body === null || body === void 0 || typeof body !== "object") {
     return { ok: false };
@@ -9002,7 +9083,7 @@ async function handleStartAgentSession(body, deps) {
   }
   let conversationId = parsed.conversationId;
   if (conversationId) {
-    const jsonlPath = join12(deps.conversationsDir, `${conversationId}.jsonl`);
+    const jsonlPath = join13(deps.conversationsDir, `${conversationId}.jsonl`);
     if (!existsSync9(jsonlPath)) {
       return {
         status: 404,
@@ -9048,7 +9129,7 @@ async function handleStartAgentSession(body, deps) {
 
 // src/browse.ts
 import { mkdir as mkdir2, readdir, realpath, stat } from "fs/promises";
-import { join as join13, resolve, sep } from "path";
+import { join as join14, resolve, sep } from "path";
 var BrowsePathNotFoundError = class extends Error {
   constructor(message) {
     super(message);
@@ -9090,7 +9171,7 @@ async function createDirectory(parentAbsolutePath, name) {
   if (name.includes("/") || name.includes("\\") || name === ".." || name === ".") {
     throw new Error("Invalid directory name");
   }
-  const target = join13(parentAbsolutePath, name);
+  const target = join14(parentAbsolutePath, name);
   try {
     const s = await stat(target);
     if (s.isDirectory()) throw new Error("Directory already exists");
@@ -9365,7 +9446,7 @@ function readIdempotencyKey(body) {
 import { randomBytes as randomBytes3 } from "crypto";
 import { mkdir as mkdir3, writeFile } from "fs/promises";
 import heicConvert from "heic-convert";
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 var UPLOAD_DIR_NAME = ".threadbase-uploads";
 var MAX_BYTES = 25 * 1024 * 1024;
 var HEIC_MIMES = /* @__PURE__ */ new Set(["image/heic", "image/heif"]);
@@ -9398,9 +9479,9 @@ async function saveUploadFile(input) {
   }
   const id = `up_${randomBytes3(8).toString("hex")}`;
   const safeName = sanitizeFilename(originalName) || `file${MIME_TO_EXT[mimeType] ?? ""}`;
-  const dir = join14(input.projectPath, UPLOAD_DIR_NAME, input.sessionId);
+  const dir = join15(input.projectPath, UPLOAD_DIR_NAME, input.sessionId);
   await mkdir3(dir, { recursive: true });
-  const filePath = join14(dir, `${Date.now()}-${id}-${safeName}`);
+  const filePath = join15(dir, `${Date.now()}-${id}-${safeName}`);
   await writeFile(filePath, buffer);
   return {
     id,
@@ -10321,7 +10402,7 @@ var SessionHandlers = class {
         sessionStore: this.sessionStore,
         // biome-ignore lint/style/noNonNullAssertion: agentClient is set when agentConfig.enabled is true
         agentClient: this.agentClient,
-        conversationsDir: this.cacheDir ? join15(dirname8(this.cacheDir), "conversations") : "",
+        conversationsDir: this.cacheDir ? join16(dirname9(this.cacheDir), "conversations") : "",
         agentConfig: this.agentConfig
       });
       json(res, result.status, result.body);
@@ -10798,10 +10879,10 @@ var SessionsRepository = class {
 
 // src/db/runtime-store.ts
 import Database2 from "better-sqlite3";
-import { homedir as homedir6 } from "os";
-import { join as join16 } from "path";
+import { homedir as homedir7 } from "os";
+import { join as join17 } from "path";
 function resolveRuntimeDbPath(override) {
-  return override ?? process.env.THREADBASE_RUNTIME_DB ?? join16(process.env.THREADBASE_CONFIG_DIR ?? join16(homedir6(), ".threadbase"), "runtime.db");
+  return override ?? process.env.THREADBASE_RUNTIME_DB ?? join17(process.env.THREADBASE_CONFIG_DIR ?? join17(homedir7(), ".threadbase"), "runtime.db");
 }
 var RuntimeStore = class _RuntimeStore {
   constructor(db) {
@@ -11119,14 +11200,14 @@ import { spawn as spawn2 } from "child_process";
 
 // src/pty-host/socket.ts
 import { createConnection, createServer } from "net";
-import { homedir as homedir7 } from "os";
-import { join as join17 } from "path";
+import { homedir as homedir8 } from "os";
+import { join as join18 } from "path";
 function hostSocketPath(instanceId) {
   if (process.platform === "win32") {
     return `\\\\.\\pipe\\threadbase-pty-host-${instanceId}`;
   }
-  const dir = process.env.THREADBASE_CONFIG_DIR ?? join17(homedir7(), ".threadbase");
-  return join17(dir, "run", `pty-host-${instanceId}.sock`);
+  const dir = process.env.THREADBASE_CONFIG_DIR ?? join18(homedir8(), ".threadbase");
+  return join18(dir, "run", `pty-host-${instanceId}.sock`);
 }
 function socketTransport(socket) {
   socket.setEncoding("utf8");
@@ -11201,8 +11282,8 @@ import {
   ConversationScanner
 } from "@threadbase-sh/scanner";
 import { statSync as statSync7 } from "fs";
-import { homedir as homedir9 } from "os";
-import { join as join19 } from "path";
+import { homedir as homedir10 } from "os";
+import { join as join20 } from "path";
 
 // src/services/cache/cacheMetadata.ts
 function getCacheMetadata(repo, key) {
@@ -11302,9 +11383,9 @@ function refreshConversationCache(deps) {
 
 // src/services/conversations/shouldRefreshProjectsFromHdd.ts
 import { readdirSync as readdirSync4, statSync as statSync6 } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join18 } from "path";
-var DEFAULT_PROJECTS_DIR = join18(homedir8(), ".claude", "projects");
+import { homedir as homedir9 } from "os";
+import { join as join19 } from "path";
+var DEFAULT_PROJECTS_DIR = join19(homedir9(), ".claude", "projects");
 function maxProjectsTreeMtimeMs(projectsDir) {
   let maxMs;
   try {
@@ -11316,7 +11397,7 @@ function maxProjectsTreeMtimeMs(projectsDir) {
     for (const ent of readdirSync4(projectsDir, { withFileTypes: true })) {
       if (!ent.isDirectory()) continue;
       try {
-        const childMs = statSync6(join18(projectsDir, ent.name)).mtimeMs;
+        const childMs = statSync6(join19(projectsDir, ent.name)).mtimeMs;
         if (childMs > maxMs) maxMs = childMs;
       } catch {
       }
@@ -11488,9 +11569,9 @@ var ScannerManager = class {
   projectsDirs() {
     const profiles = this.deps.scanProfiles;
     if (profiles && profiles.length > 0) {
-      return profiles.filter((p) => p.enabled).map((p) => join19(p.configDir, "projects"));
+      return profiles.filter((p) => p.enabled).map((p) => join20(p.configDir, "projects"));
     }
-    return [join19(homedir9(), ".claude", "projects")];
+    return [join20(homedir10(), ".claude", "projects")];
   }
   // ─── staleness ────────────────────────────────────────────────────
   // Drain the stale set and disarm the flag together. The caller owns the
@@ -11771,8 +11852,8 @@ import { statSync as statSync9 } from "fs";
 
 // src/handlers/handleListProjects.ts
 import { closeSync as closeSync4, openSync as openSync4, readdirSync as readdirSync5, readSync as readSync4, statSync as statSync8 } from "fs";
-import { homedir as homedir10 } from "os";
-import { join as join20 } from "path";
+import { homedir as homedir11 } from "os";
+import { join as join21 } from "path";
 var HEAD_BYTES = 64 * 1024;
 var MAX_FILES_PROBED = 3;
 function readRecordedCwd(dir) {
@@ -11785,7 +11866,7 @@ function readRecordedCwd(dir) {
   for (const file of files.slice(0, MAX_FILES_PROBED)) {
     let fd;
     try {
-      fd = openSync4(join20(dir, file), "r");
+      fd = openSync4(join21(dir, file), "r");
       const buf = Buffer.alloc(HEAD_BYTES);
       const bytes = readSync4(fd, buf, 0, HEAD_BYTES, 0);
       for (const line of buf.subarray(0, bytes).toString("utf8").split("\n")) {
@@ -11809,11 +11890,11 @@ function decodeProjectPath(dirName) {
 function handleListProjects(url, res) {
   const limit = Math.max(1, parseInt(url.searchParams.get("limit") ?? "50", 10) || 50);
   const offset = Math.max(0, parseInt(url.searchParams.get("offset") ?? "0", 10) || 0);
-  const projectsDir = join20(homedir10(), ".claude", "projects");
+  const projectsDir = join21(homedir11(), ".claude", "projects");
   let entries;
   try {
     entries = readdirSync5(projectsDir).map((dirName) => {
-      const fullPath = join20(projectsDir, dirName);
+      const fullPath = join21(projectsDir, dirName);
       let mtime = 0;
       try {
         mtime = statSync8(fullPath).mtimeMs;
@@ -11828,7 +11909,7 @@ function handleListProjects(url, res) {
   }
   const total = entries.length;
   const page = entries.slice(offset, offset + limit).map(({ dirName }) => {
-    const path = readRecordedCwd(join20(projectsDir, dirName)) ?? decodeProjectPath(String(dirName));
+    const path = readRecordedCwd(join21(projectsDir, dirName)) ?? decodeProjectPath(String(dirName));
     const name = path.split(/[\\/]/).filter(Boolean).pop() ?? dirName;
     return { name, path, dirName };
   });
@@ -12230,16 +12311,16 @@ import { createHash as createHash4 } from "crypto";
 import { existsSync as existsSync12 } from "fs";
 
 // src/services/cache-integrity/alertStore.ts
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir11 } from "os";
-import { dirname as dirname9, join as join21 } from "path";
+import { mkdirSync as mkdirSync5, readFileSync as readFileSync9, writeFileSync as writeFileSync4 } from "fs";
+import { homedir as homedir12 } from "os";
+import { dirname as dirname10, join as join22 } from "path";
 function alertStatePath() {
-  const dir = process.env.THREADBASE_CONFIG_DIR ?? join21(homedir11(), ".threadbase");
-  return join21(dir, "cache-alert.json");
+  const dir = process.env.THREADBASE_CONFIG_DIR ?? join22(homedir12(), ".threadbase");
+  return join22(dir, "cache-alert.json");
 }
 function loadAlertState() {
   try {
-    const parsed = JSON.parse(readFileSync8(alertStatePath(), "utf-8"));
+    const parsed = JSON.parse(readFileSync9(alertStatePath(), "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -12247,14 +12328,14 @@ function loadAlertState() {
 }
 function saveAlertState(state) {
   const path = alertStatePath();
-  mkdirSync4(dirname9(path), { recursive: true });
-  writeFileSync3(path, `${JSON.stringify(state, null, 2)}
+  mkdirSync5(dirname10(path), { recursive: true });
+  writeFileSync4(path, `${JSON.stringify(state, null, 2)}
 `);
 }
 
 // src/services/cache-integrity/backup.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync5, readdirSync as readdirSync6, statSync as statSync10, unlinkSync } from "fs";
-import { join as join22 } from "path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync6, readdirSync as readdirSync6, statSync as statSync10, unlinkSync } from "fs";
+import { join as join23 } from "path";
 var DEFAULT_RETAIN = 3;
 function retainCount() {
   const parsed = Number.parseInt(process.env.THREADBASE_CACHE_BACKUP_RETAIN ?? "", 10);
@@ -12265,13 +12346,13 @@ function timestamp(d) {
   return `${d.getFullYear()}${p(d.getMonth() + 1)}${p(d.getDate())}-${p(d.getHours())}${p(d.getMinutes())}${p(d.getSeconds())}`;
 }
 async function backupCacheDb(db, cacheDir) {
-  const backupsDir = join22(cacheDir, "backups");
-  mkdirSync5(backupsDir, { recursive: true });
-  const destPath = join22(backupsDir, `cache-${timestamp(/* @__PURE__ */ new Date())}.db`);
+  const backupsDir = join23(cacheDir, "backups");
+  mkdirSync6(backupsDir, { recursive: true });
+  const destPath = join23(backupsDir, `cache-${timestamp(/* @__PURE__ */ new Date())}.db`);
   await db.backup(destPath);
   const retain = retainCount();
   const backups = readdirSync6(backupsDir).filter((f) => f.startsWith("cache-") && f.endsWith(".db")).map((f) => {
-    const full = join22(backupsDir, f);
+    const full = join23(backupsDir, f);
     return { full, mtime: statSync10(full).mtimeMs };
   }).sort((a, b) => b.mtime - a.mtime);
   for (const stale of backups.slice(retain)) {
@@ -14239,9 +14320,9 @@ function discoveredToResponse(d, conversationId) {
 }
 
 // src/session-watchers.ts
-import { existsSync as existsSync15, watch as fsWatch, readdirSync as readdirSync7, readFileSync as readFileSync9, statSync as statSync12 } from "fs";
-import { homedir as homedir12 } from "os";
-import { basename as basename6, join as join23 } from "path";
+import { existsSync as existsSync15, watch as fsWatch, readdirSync as readdirSync7, readFileSync as readFileSync10, statSync as statSync12 } from "fs";
+import { homedir as homedir13 } from "os";
+import { basename as basename6, join as join24 } from "path";
 var SessionWatchers = class {
   constructor(deps) {
     this.deps = deps;
@@ -14307,7 +14388,7 @@ var SessionWatchers = class {
   // file isn't slurped in full.
   readFirstLineSessionId(filePath) {
     try {
-      const content = readFileSync9(filePath, "utf8");
+      const content = readFileSync10(filePath, "utf8");
       const nl = content.indexOf("\n");
       const firstLine = nl === -1 ? content : content.slice(0, nl);
       if (!firstLine.trim()) return null;
@@ -14322,9 +14403,9 @@ var SessionWatchers = class {
   // was passed to Claude via --session-id so the filename matches from the start.
   watchForJsonl(sessionId, projectPath) {
     const encoded = projectPath.replace(/[/\\:.]/g, "-");
-    const projectsDir = join23(homedir12(), ".claude", "projects", encoded);
+    const projectsDir = join24(homedir13(), ".claude", "projects", encoded);
     const expectedFile = `${sessionId}.jsonl`;
-    const filePath = join23(projectsDir, expectedFile);
+    const filePath = join24(projectsDir, expectedFile);
     const deadline = Date.now() + 12e4;
     let watcher = null;
     const cleanup = () => {
@@ -14346,10 +14427,10 @@ var SessionWatchers = class {
       if (!resolvedFilePath && existsSync15(projectsDir)) {
         try {
           const now = Date.now();
-          const match = readdirSync7(projectsDir).filter((f) => f.endsWith(".jsonl")).map((f) => ({ f, mtime: statSync12(join23(projectsDir, f)).mtimeMs })).filter(({ mtime }) => now - mtime < 5e3).filter(
-            ({ f }) => basename6(f, ".jsonl") === sessionId || this.readFirstLineSessionId(join23(projectsDir, f)) === sessionId
+          const match = readdirSync7(projectsDir).filter((f) => f.endsWith(".jsonl")).map((f) => ({ f, mtime: statSync12(join24(projectsDir, f)).mtimeMs })).filter(({ mtime }) => now - mtime < 5e3).filter(
+            ({ f }) => basename6(f, ".jsonl") === sessionId || this.readFirstLineSessionId(join24(projectsDir, f)) === sessionId
           ).sort((a, b) => b.mtime - a.mtime)[0];
-          if (match) resolvedFilePath = join23(projectsDir, match.f);
+          if (match) resolvedFilePath = join24(projectsDir, match.f);
         } catch {
         }
       }
@@ -14357,7 +14438,7 @@ var SessionWatchers = class {
       cleanup();
       this.deps.sessionFileMap.set(sessionId, resolvedFilePath);
       try {
-        const existing = readFileSync9(resolvedFilePath, "utf8").split("\n").filter(Boolean);
+        const existing = readFileSync10(resolvedFilePath, "utf8").split("\n").filter(Boolean);
         if (existing.length > 0) {
           this.deps.broadcastConversationLines(sessionId, existing);
         }
@@ -14393,7 +14474,7 @@ var SessionWatchers = class {
   watchForCodexRollout(sessionId, projectPath) {
     const deadline = Date.now() + 12e4;
     const now = /* @__PURE__ */ new Date();
-    const dateDir = join23(
+    const dateDir = join24(
       String(now.getFullYear()),
       String(now.getMonth() + 1).padStart(2, "0"),
       String(now.getDate()).padStart(2, "0")
@@ -14406,7 +14487,7 @@ var SessionWatchers = class {
     };
     const matchesProjectPath = (candidatePath) => {
       try {
-        const firstLine = readFileSync9(candidatePath, "utf8").split("\n", 1)[0];
+        const firstLine = readFileSync10(candidatePath, "utf8").split("\n", 1)[0];
         if (!firstLine) return null;
         const parsed = JSON.parse(firstLine);
         if (parsed?.type !== "session_meta") return null;
@@ -14434,7 +14515,7 @@ var SessionWatchers = class {
         this.deps.sessionStore.listManaged().filter((s) => s.id !== sessionId && s.boundConversationId != null).map((s) => s.boundConversationId)
       );
       for (const root of this.deps.codexRoots) {
-        const sessionsDir = join23(root, dateDir);
+        const sessionsDir = join24(root, dateDir);
         if (!existsSync15(sessionsDir)) continue;
         let candidateFiles;
         try {
@@ -14443,9 +14524,9 @@ var SessionWatchers = class {
           continue;
         }
         const nowMs = Date.now();
-        const recentCandidates = candidateFiles.map((f) => ({ f, mtime: statSync12(join23(sessionsDir, f)).mtimeMs })).filter(({ mtime }) => nowMs - mtime < 1e4).sort((a, b) => b.mtime - a.mtime);
+        const recentCandidates = candidateFiles.map((f) => ({ f, mtime: statSync12(join24(sessionsDir, f)).mtimeMs })).filter(({ mtime }) => nowMs - mtime < 1e4).sort((a, b) => b.mtime - a.mtime);
         for (const { f } of recentCandidates) {
-          const candidatePath = join23(sessionsDir, f);
+          const candidatePath = join24(sessionsDir, f);
           const match = matchesProjectPath(candidatePath);
           if (!match) continue;
           if (boundElsewhere.has(match.id)) continue;
@@ -14466,7 +14547,7 @@ var SessionWatchers = class {
           this.deps.sessionFileMap.set(sessionId, candidatePath);
           this.deps.fileWatcher.watch(candidatePath);
           try {
-            const existing = readFileSync9(candidatePath, "utf8").split("\n").filter(Boolean);
+            const existing = readFileSync10(candidatePath, "utf8").split("\n").filter(Boolean);
             if (existing.length > 0) {
               this.deps.broadcastConversationLines(sessionId, existing);
             }
@@ -14849,7 +14930,7 @@ var StreamerServer = class {
     this.skipStartupWarmup = config.skipStartupWarmup ?? false;
     this.autoResumeOnBoot = config.autoResumeOnBoot ?? false;
     this.scanProfiles = config.scanProfiles;
-    this.codexRoots = config.codexRoots ?? [join24(homedir13(), ".codex", "sessions")];
+    this.codexRoots = config.codexRoots ?? [join25(homedir14(), ".codex", "sessions")];
     this.ptyGracePeriodMs = config.ptyGracePeriodMs ?? DEFAULT_PTY_GRACE_PERIOD_MS;
     this.defaultSystemPrompt = config.defaultSystemPrompt ?? DEFAULT_SYSTEM_PROMPT;
     const flagResolution = resolveFeatureFlags({
@@ -14866,7 +14947,7 @@ var StreamerServer = class {
     this.claudeFlagsPersistable = config.claudeFlags === void 0;
     this.claudeFlags = config.claudeFlags ?? loadClaudeFlags();
     this.claudeExtraArgs = config.claudeExtraArgs ?? loadClaudeExtraArgs();
-    this.cacheDir = config.cacheDir ?? loadCacheDir() ?? join24(homedir13(), ".threadbase", "cache");
+    this.cacheDir = config.cacheDir ?? loadCacheDir() ?? join25(homedir14(), ".threadbase", "cache");
     this.runtimeDbPath = resolveRuntimeDbPath(config.runtimeDbPath);
     this.tailSize = config.tailSize ?? loadTailSize() ?? 10;
     this.directoryDebounceMs = parseDirScanDebounceEnv(process.env.THREADBASE_DIR_SCAN_DEBOUNCE_MS) ?? config.directoryScanDebounceMs ?? 1e3;
@@ -15043,7 +15124,7 @@ var StreamerServer = class {
         temporalClient,
         taskQueue: agentConfig.temporal.taskQueue
       });
-      const conversationsBaseDir = agentConfig.conversationsDir || join24(dirname10(this.cacheDir), "conversations");
+      const conversationsBaseDir = agentConfig.conversationsDir || join25(dirname11(this.cacheDir), "conversations");
       conversationWriter = createConversationWriter({
         baseDir: conversationsBaseDir
       });
@@ -15536,7 +15617,7 @@ var StreamerServer = class {
         }
         try {
           this.cache = ConversationCache.open(
-            join24(this.cacheDir, "cache.db"),
+            join25(this.cacheDir, "cache.db"),
             this.tailSize,
             void 0,
             {