@threadbase-sh/streamer 1.58.0 → 1.58.2

package/dist/index.js

@@ -851,9 +851,24 @@ import { basename } from "path";
 
 // src/platform.ts
 import { execFileSync } from "child_process";
-import { existsSync } from "fs";
+import { accessSync, constants, existsSync, statSync } from "fs";
 import { homedir as homedir2, platform } from "os";
-import { join as join4 } from "path";
+import { delimiter, join as join4 } from "path";
+
+// src/providers.ts
+var CLAUDE_CODE_PROVIDER = "claude-code";
+var CODEX_CLI_PROVIDER = "codex-cli";
+function isProviderName(value) {
+  return value === CLAUDE_CODE_PROVIDER || value === CODEX_CLI_PROVIDER;
+}
+function coerceProviderForRunner(value) {
+  return isProviderName(value) ? value : CLAUDE_CODE_PROVIDER;
+}
+function isProviderResumable(_provider, availabilityResumable) {
+  return availabilityResumable;
+}
+
+// src/platform.ts
 var isWindows = platform() === "win32";
 var WINDOWS_EXECUTABLE_EXTENSIONS = /* @__PURE__ */ new Set([".exe", ".cmd", ".bat"]);
 function isWindowsExecutablePath(path) {
@@ -983,18 +998,38 @@ function resolveCodexExe() {
   _codexExe = "codex";
   return _codexExe;
 }
-
-// src/providers.ts
-var CLAUDE_CODE_PROVIDER = "claude-code";
-var CODEX_CLI_PROVIDER = "codex-cli";
-function isProviderName(value) {
-  return value === CLAUDE_CODE_PROVIDER || value === CODEX_CLI_PROVIDER;
+function isExecutableFile(path) {
+  try {
+    if (!statSync(path).isFile()) return false;
+    accessSync(path, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
 }
-function coerceProviderForRunner(value) {
-  return isProviderName(value) ? value : CLAUDE_CODE_PROVIDER;
+function locateExecutable(exe) {
+  if (/[\\/]/.test(exe)) return isExecutableFile(exe) ? exe : null;
+  const names = isWindows ? [
+    ...isWindowsExecutablePath(exe) ? [exe] : [],
+    ...[...WINDOWS_EXECUTABLE_EXTENSIONS].map((ext) => `${exe}${ext}`)
+  ] : [exe];
+  for (const dir of (process.env.PATH ?? "").split(delimiter)) {
+    if (!dir) continue;
+    for (const name of names) {
+      const candidate = join4(dir, name);
+      if (isExecutableFile(candidate)) return candidate;
+    }
+  }
+  return null;
 }
-function isProviderResumable(_provider, availabilityResumable) {
-  return availabilityResumable;
+function locateProviderExe(provider) {
+  const isCodex = provider === CODEX_CLI_PROVIDER;
+  const found = locateExecutable(isCodex ? resolveCodexExe() : resolveClaudeExe());
+  if (found === null) {
+    if (isCodex) clearCodexExeCache();
+    else clearClaudeExeCache();
+  }
+  return found;
 }
 
 // src/pty-shared.ts
@@ -1252,11 +1287,19 @@ var CodexPtyRunner = class {
   onStatusChange;
   onPhaseChange;
   onReady;
-  // Broadcasts Codex's blocking startup gates (directory trust, hooks review)
-  // as question cards; null dismisses the card once the gate leaves the screen.
+  // Every Codex prompt the client can answer — startup gates (directory trust,
+  // hooks review), command approvals, and the rate-limit model picker — is
+  // broadcast through this one channel; null dismisses the card once the prompt
+  // leaves the screen.
+  //
+  // Deliberately NOT onLiveQuestion/onLiveQuestionGone, which is Claude's
+  // AskUserQuestion transport. Both channels land on the same mobile
+  // QuestionCard, and the permission one is the correct fit for Codex: its menus
+  // are answered by the option's real on-screen number (parseCodexNumberedOptions
+  // emits `answerKeys: "2\r"`), which is exactly what `permissionIndices` carries
+  // and what AskUserQuestion's down-arrow-count model cannot express. Wiring the
+  // question channel as well would be a second path to the same card.
   onPermissionChange;
-  onLiveQuestion;
-  onLiveQuestionGone;
   onUserMessage;
   log;
   // Tracks sessions whose PTY has spawned but Codex hasn't yet reached its
@@ -1306,8 +1349,6 @@ var CodexPtyRunner = class {
     this.onPhaseChange = options.onPhaseChange;
     this.onReady = options.onReady;
     this.onPermissionChange = options.onPermissionChange;
-    this.onLiveQuestion = options.onLiveQuestion;
-    this.onLiveQuestionGone = options.onLiveQuestionGone;
     this.onUserMessage = options.onUserMessage;
     this.log = options.logger ?? getLogger("codex-pty");
   }
@@ -3615,11 +3656,13 @@ var LiveSessionManager = class {
   async start(sessionId, options) {
     const provider = options.provider ?? CLAUDE_CODE_PROVIDER;
     const runner = this.assertSupportedProvider(provider, options.projectPath);
+    this.assertProviderInstalled(provider);
     return runner.start(sessionId, options);
   }
   async startFresh(options) {
     const provider = options.provider ?? CLAUDE_CODE_PROVIDER;
     const runner = this.assertSupportedProvider(provider, options.projectPath);
+    this.assertProviderInstalled(provider);
     return runner.startFresh(options);
   }
   /**
@@ -3638,6 +3681,7 @@ var LiveSessionManager = class {
       err.statusCode = 501;
       throw err;
     }
+    this.assertProviderInstalled(provider);
     return runner.startFork(options);
   }
   sendInput(sessionId, input) {
@@ -3719,6 +3763,30 @@ var LiveSessionManager = class {
     }
     throw new Error(`Session not found: ${sessionId}`);
   }
+  /**
+   * Refuse before spawning when the provider's CLI is not on this machine.
+   *
+   * Without this the spawn "succeeds": on POSIX execvp fails inside the forked
+   * child, so a session appears, exits ~12ms later with code 1 and no output,
+   * and the caller is told only that it "exited before becoming ready" — or,
+   * on the Claude resume path, is told nothing at all, since that path answers
+   * 200 before the process has had a chance to die. Every start route funnels
+   * through here, so one check covers start, resume, adopt and fork.
+   *
+   * 503, not 500: the request was well-formed and the fault is this machine's
+   * environment. `code` is what mobile branches on (it reads `errBody.code`),
+   * and `PROVIDER_NOT_INSTALLED` is a remediation string it already knows.
+   */
+  assertProviderInstalled(provider) {
+    if (locateProviderExe(provider) !== null) return;
+    const command = provider === CODEX_CLI_PROVIDER ? "codex" : "claude";
+    const err = new Error(
+      `The ${command} command was not found on this server. Install the ${provider} CLI, or make sure it is on the PATH the streamer runs with.`
+    );
+    err.statusCode = 503;
+    err.code = "PROVIDER_NOT_INSTALLED";
+    throw err;
+  }
   assertSupportedProvider(provider, projectPath) {
     if (this.remoteRunner) return this.remoteRunner;
     const runner = this.runners.get(provider);
@@ -4401,7 +4469,9 @@ var corsMiddleware = (configValue) => {
 // src/api/middleware/error.middleware.ts
 var errorMiddleware = (err, c) => {
   const message = err instanceof Error ? err.message : "Internal server error";
-  return c.json({ error: message }, 500);
+  const { statusCode, code } = err;
+  const status = typeof statusCode === "number" && statusCode >= 400 && statusCode <= 599 ? statusCode : 500;
+  return c.json(typeof code === "string" ? { error: message, code } : { error: message }, status);
 };
 
 // src/api/routes/backup.routes.ts
@@ -4956,24 +5026,26 @@ function computeBootToken() {
 }
 
 // src/api/routes/diagnostics.routes.ts
-function providerCheck(name, resolve2) {
+function providerCheck(name) {
   try {
-    const exe = resolve2();
-    return {
-      id: `provider:${name}`,
-      status: "ok",
-      summary: `${name} CLI is installed.`,
-      remediation: "NONE",
-      detail: { location: redactPath(exe) }
-    };
+    const exe = locateProviderExe(name);
+    if (exe !== null) {
+      return {
+        id: `provider:${name}`,
+        status: "ok",
+        summary: `${name} CLI is installed.`,
+        remediation: "NONE",
+        detail: { location: redactPath(exe) }
+      };
+    }
   } catch {
-    return {
-      id: `provider:${name}`,
-      status: "failed",
-      summary: `${name} CLI could not be located. Sessions for this provider cannot start.`,
-      remediation: "PROVIDER_NOT_INSTALLED"
-    };
   }
+  return {
+    id: `provider:${name}`,
+    status: "failed",
+    summary: `${name} CLI could not be located. Sessions for this provider cannot start.`,
+    remediation: "PROVIDER_NOT_INSTALLED"
+  };
 }
 var createDiagnosticsRoutes = (deps) => {
   const app = new Hono8();
@@ -4986,8 +5058,8 @@ var createDiagnosticsRoutes = (deps) => {
       remediation: "NONE",
       detail: { version: getVersion(), uptimeSeconds: Math.floor(process.uptime()) }
     });
-    checks.push(providerCheck("claude-code", resolveClaudeExe));
-    checks.push(providerCheck("codex-cli", resolveCodexExe));
+    checks.push(providerCheck(CLAUDE_CODE_PROVIDER));
+    checks.push(providerCheck(CODEX_CLI_PROVIDER));
     const cacheAlert = deps.cacheMonitor()?.healthzField();
     checks.push(
       cacheAlert ? {
@@ -5092,7 +5164,7 @@ var createHealthRoutes = (deps) => {
 };
 
 // src/api/routes/logs.routes.ts
-import { closeSync, existsSync as existsSync5, fstatSync, openSync, readSync, statSync } from "fs";
+import { closeSync, existsSync as existsSync5, fstatSync, openSync, readSync, statSync as statSync2 } from "fs";
 import { join as join8 } from "path";
 import { Hono as Hono10 } from "hono";
 
@@ -5112,7 +5184,7 @@ function resolveLogPath(source) {
 function pickDefaultSource() {
   for (const source of ["stdout", "stderr", "dev"]) {
     const p = resolveLogPath(source);
-    if (existsSync5(p) && statSync(p).size > 0) return source;
+    if (existsSync5(p) && statSync2(p).size > 0) return source;
   }
   return "stdout";
 }
@@ -5170,7 +5242,7 @@ function createLogsRoutes() {
         });
       }
       const { lines, offset, total } = readLogLines(logPath, sinceOffset, limit);
-      const stats = statSync(logPath);
+      const stats = statSync2(logPath);
       return c.json({
         logs: lines,
         offset,
@@ -5200,7 +5272,7 @@ function createLogsRoutes() {
         if (!existsSync5(logPath)) {
           return { source, exists: false, total: 0, fileSize: 0 };
         }
-        const stats = statSync(logPath);
+        const stats = statSync2(logPath);
         return {
           source,
           exists: true,
@@ -5578,7 +5650,7 @@ function publicKeyOf(privateKey) {
 
 // src/services/push/apnsClient.ts
 import { createSign } from "crypto";
-import { connect, constants } from "http2";
+import { connect, constants as constants2 } from "http2";
 var log = getLogger("apns");
 var APNS_HOST_SANDBOX = "api.sandbox.push.apple.com";
 var APNS_MAX_PAYLOAD_BYTES = 4096;
@@ -5685,27 +5757,27 @@ var ApnsClient = class {
     }
     const session = this.getSession();
     const headers = {
-      [constants.HTTP2_HEADER_METHOD]: "POST",
-      [constants.HTTP2_HEADER_PATH]: `/3/device/${args.deviceToken}`,
-      [constants.HTTP2_HEADER_AUTHORIZATION]: `bearer ${this.getJwt()}`,
+      [constants2.HTTP2_HEADER_METHOD]: "POST",
+      [constants2.HTTP2_HEADER_PATH]: `/3/device/${args.deviceToken}`,
+      [constants2.HTTP2_HEADER_AUTHORIZATION]: `bearer ${this.getJwt()}`,
       "apns-push-type": "liveactivity",
       "apns-topic": this.topic,
       "apns-priority": String(args.priority ?? 10),
       ...args.expirationSeconds != null && {
         "apns-expiration": String(args.expirationSeconds)
       },
-      [constants.HTTP2_HEADER_CONTENT_TYPE]: "application/json",
-      [constants.HTTP2_HEADER_CONTENT_LENGTH]: String(body.byteLength)
+      [constants2.HTTP2_HEADER_CONTENT_TYPE]: "application/json",
+      [constants2.HTTP2_HEADER_CONTENT_LENGTH]: String(body.byteLength)
     };
     return new Promise((resolve2, reject) => {
       const req = session.request(headers);
       req.setTimeout(args.timeoutMs ?? 1e4, () => {
-        req.close(constants.NGHTTP2_CANCEL);
+        req.close(constants2.NGHTTP2_CANCEL);
         resolve2({ ok: false, status: 0, reason: "Timeout", tokenDead: false });
       });
       let status = 0;
       req.on("response", (resHeaders) => {
-        status = Number(resHeaders[constants.HTTP2_HEADER_STATUS] ?? 0);
+        status = Number(resHeaders[constants2.HTTP2_HEADER_STATUS] ?? 0);
       });
       const chunks = [];
       req.on("data", (chunk) => chunks.push(chunk));
@@ -6059,7 +6131,10 @@ function parseVersionOutput(output) {
   const match = output.match(/\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?/);
   return match ? match[0] : null;
 }
+var versionByExe = /* @__PURE__ */ new Map();
 function runVersion(exe) {
+  const cached3 = versionByExe.get(exe);
+  if (cached3 !== void 0) return Promise.resolve(cached3);
   const viaShell = isWindows && /\.(?:cmd|bat)$/i.test(exe);
   const file = viaShell ? `"${exe}"` : exe;
   return new Promise((resolve2) => {
@@ -6069,7 +6144,9 @@ function runVersion(exe) {
       { timeout: VERSION_TIMEOUT_MS, shell: viaShell, windowsHide: true },
       (err, stdout, stderr) => {
         if (err && !stdout && !stderr) return resolve2(null);
-        resolve2(parseVersionOutput(`${stdout}${stderr}`));
+        const version = parseVersionOutput(`${stdout}${stderr}`);
+        if (version !== null) versionByExe.set(exe, version);
+        resolve2(version);
       }
     );
   });
@@ -6113,13 +6190,16 @@ function compareSemver(a, b) {
   if (pb.pre === null) return -1;
   return pa.pre < pb.pre ? -1 : 1;
 }
-async function providerHealth(name, resolveExe, detect = runVersion) {
+async function providerHealth(name, locateExe = () => locateProviderExe(name), detect = runVersion) {
   const verifiedAgainst = VERIFIED_AGAINST[name];
   const capabilities = capabilitiesFor(name);
-  let exe;
+  let exe = null;
   try {
-    exe = resolveExe();
+    exe = locateExe();
   } catch {
+    exe = null;
+  }
+  if (exe === null) {
     return {
       name,
       available: false,
@@ -6156,8 +6236,8 @@ var createProviderRoutes = () => {
   const app = new Hono14();
   app.get("/", async (c) => {
     const providers = await Promise.all([
-      providerHealth(CLAUDE_CODE_PROVIDER, resolveClaudeExe),
-      providerHealth(CODEX_CLI_PROVIDER, resolveCodexExe)
+      providerHealth(CLAUDE_CODE_PROVIDER),
+      providerHealth(CODEX_CLI_PROVIDER)
     ]);
     return c.json({ providers });
   });
@@ -6388,7 +6468,7 @@ import {
   parseJsonlLine
 } from "@threadbase-sh/scanner";
 import Database from "better-sqlite3";
-import { closeSync as closeSync3, existsSync as existsSync6, mkdirSync as mkdirSync4, openSync as openSync3, readSync as readSync3, statSync as statSync3 } from "fs";
+import { closeSync as closeSync3, existsSync as existsSync6, mkdirSync as mkdirSync4, openSync as openSync3, readSync as readSync3, statSync as statSync4 } from "fs";
 import { open as openAsync } from "fs/promises";
 import { dirname as dirname8 } from "path";
 import { setImmediate as yieldToEventLoop } from "timers/promises";
@@ -6506,7 +6586,7 @@ function runSqliteMigrations(db, migrationsDir) {
 }
 
 // src/services/conversations/isAgentConversation.ts
-import { closeSync as closeSync2, openSync as openSync2, readSync as readSync2, statSync as statSync2 } from "fs";
+import { closeSync as closeSync2, openSync as openSync2, readSync as readSync2, statSync as statSync3 } from "fs";
 var DEFAULT_AGENT_ENTRYPOINTS = /* @__PURE__ */ new Set(["sdk-cli", "claude-vscode"]);
 var CHUNK_BYTES = 64 * 1024;
 var ENTRYPOINT_PROBE = `"entrypoint":`;
@@ -6533,7 +6613,7 @@ function isAgentFile(filePath, entrypoints = DEFAULT_AGENT_ENTRYPOINTS) {
     return false;
   }
   try {
-    const fileSize = statSync2(filePath).size;
+    const fileSize = statSync3(filePath).size;
     if (fileSize === 0) {
       fileDecisionCache.set(key, false);
       return false;
@@ -7171,7 +7251,7 @@ var ConversationCache = class _ConversationCache {
     if (!fileState) return null;
     let stat3;
     try {
-      stat3 = statSync3(filePath);
+      stat3 = statSync4(filePath);
     } catch {
       return null;
     }
@@ -7230,7 +7310,7 @@ var ConversationCache = class _ConversationCache {
   isAgentFileCached(filePath) {
     let s;
     try {
-      s = statSync3(filePath);
+      s = statSync4(filePath);
     } catch {
       return false;
     }
@@ -7441,7 +7521,7 @@ var ConversationCache = class _ConversationCache {
         let mtimeMs = null;
         let fileSize = null;
         try {
-          const s = statSync3(m.filePath);
+          const s = statSync4(m.filePath);
           mtimeMs = s.mtimeMs;
           fileSize = s.size;
         } catch {
@@ -7501,7 +7581,7 @@ var ConversationCache = class _ConversationCache {
     let fileSize;
     let fd;
     try {
-      fileSize = statSync3(filePath).size;
+      fileSize = statSync4(filePath).size;
       fd = openSync3(filePath, "r");
     } catch {
       return false;
@@ -9497,7 +9577,7 @@ async function findRolloutOwner(rolloutPath, options = {}) {
 }
 
 // src/services/sessions/conversationBusy.ts
-import { statSync as statSync4 } from "fs";
+import { statSync as statSync5 } from "fs";
 
 // src/utils/canonicalizeProjectPath.ts
 function canonicalizeProjectPath(projectPath) {
@@ -9521,7 +9601,7 @@ function conversationBusy(input) {
   let lastActivityMs = null;
   if (input.jsonlPath) {
     try {
-      const mtimeMs = statSync4(input.jsonlPath).mtimeMs;
+      const mtimeMs = statSync5(input.jsonlPath).mtimeMs;
       const age = now - mtimeMs;
       lastActivityMs = Math.max(0, age);
       const isSelfEcho = input.selfPtyEndedAt != null && mtimeMs <= input.selfPtyEndedAt + SELF_ACTIVITY_SKEW_MS;
@@ -10636,7 +10716,10 @@ var SessionHandlers = class {
       });
       this.sessionStore.addManaged(session);
       this.registryBoot.recordSessionSpawn(session);
-      const { outcome } = await this.deps.waitForStartupOutcome(session.id, START_READY_TIMEOUT_MS);
+      const { outcome, session: settled } = await this.deps.waitForStartupOutcome(
+        session.id,
+        START_READY_TIMEOUT_MS
+      );
       const current = this.sessionStore.get(session.id, this.deps.ptyAttachedIds());
       if (outcome === "ready" && current) {
         json(res, 200, { session: current });
@@ -10644,7 +10727,7 @@ var SessionHandlers = class {
         json(res, 502, {
           id: session.id,
           status: "idle",
-          error: current.failureReason ?? "Session exited before becoming ready"
+          error: settled?.failureReason ?? "Session exited before becoming ready"
         });
       } else {
         json(res, 202, { id: session.id, status: "pending" });
@@ -10658,11 +10741,16 @@ var SessionHandlers = class {
     } catch (err) {
       const message = err instanceof Error ? err.message : "Failed to start session";
       const statusCode = typeof err.statusCode === "number" ? err.statusCode : 500;
+      const code = err.code;
       this.log.error(`[start] failed to start session: ${message}`, {
         event: "session.start_failed",
         error: message
       });
-      json(res, statusCode, { error: message });
+      json(
+        res,
+        statusCode,
+        typeof code === "string" ? { error: message, code } : { error: message }
+      );
     }
   }
   async handleSetSessionName(sessionId, req, res) {
@@ -11152,7 +11240,7 @@ var RuntimeStore = class _RuntimeStore {
 };
 
 // src/external-tails.ts
-import { statSync as statSync5 } from "fs";
+import { statSync as statSync6 } from "fs";
 var EXTERNAL_TAIL_RECENCY_MS = RESUME_BUSY_WINDOW_MS;
 var EXTERNAL_TAIL_MAX = 32;
 var EXTERNAL_TAIL_IDLE_MS = 3e5;
@@ -11185,7 +11273,7 @@ var ExternalTailManager = class {
     if (this.isManagedTailPath(key)) return;
     let mtimeMs;
     try {
-      mtimeMs = statSync5(filePath).mtimeMs;
+      mtimeMs = statSync6(filePath).mtimeMs;
     } catch {
       return;
     }
@@ -11346,7 +11434,37 @@ var PairTokenStore = class {
       expiresInSeconds: Math.floor(this.ttlMs / 1e3)
     };
   }
+  /**
+   * Whether `consume` would succeed right now, WITHOUT spending the token.
+   *
+   * Exists so a caller can reject a bad token before doing any work, and still
+   * spend the token only once the work has succeeded. A pair token is
+   * single-use and lives 180 seconds, so spending it on a request that then
+   * fails costs the user a whole new QR — and, worse, makes their retry
+   * indistinguishable from an attacker replaying a photographed code, which is
+   * the one signal `design.md` §2.6 designates as replay detection.
+   *
+   * Advisory, not a reservation: it takes no lock and holds nothing. The
+   * authoritative answer is still `consume`'s.
+   */
+  verify(token) {
+    const result = this.check(token);
+    return result.ok ? { ok: true } : result;
+  }
   consume(token) {
+    const result = this.check(token);
+    if (!result.ok) return result;
+    result.record.used = true;
+    return { ok: true };
+  }
+  /**
+   * The shared predicate behind `verify` and `consume`.
+   *
+   * One implementation on purpose: two copies of "is this token usable" is two
+   * places for the expiry or single-use rule to drift, and a drift in this
+   * direction fails open.
+   */
+  check(token) {
     const record2 = this.current;
     if (!record2 || record2.token !== token) return { ok: false, reason: "unknown" };
     if (Date.now() > record2.expiresAt) {
@@ -11354,8 +11472,7 @@ var PairTokenStore = class {
       return { ok: false, reason: "expired" };
     }
     if (record2.used) return { ok: false, reason: "used" };
-    record2.used = true;
-    return { ok: true };
+    return { ok: true, record: record2 };
   }
   peek() {
     return this.current;
@@ -11461,7 +11578,7 @@ function spawnDetachedHost(socketPath, entryPoint) {
 import {
   ConversationScanner
 } from "@threadbase-sh/scanner";
-import { statSync as statSync7 } from "fs";
+import { statSync as statSync8 } from "fs";
 import { homedir as homedir10 } from "os";
 import { join as join20 } from "path";
 
@@ -11562,14 +11679,14 @@ function refreshConversationCache(deps) {
 }
 
 // src/services/conversations/shouldRefreshProjectsFromHdd.ts
-import { readdirSync as readdirSync4, statSync as statSync6 } from "fs";
+import { readdirSync as readdirSync4, statSync as statSync7 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join19 } from "path";
 var DEFAULT_PROJECTS_DIR = join19(homedir9(), ".claude", "projects");
 function maxProjectsTreeMtimeMs(projectsDir) {
   let maxMs;
   try {
-    maxMs = statSync6(projectsDir).mtimeMs;
+    maxMs = statSync7(projectsDir).mtimeMs;
   } catch {
     return null;
   }
@@ -11577,7 +11694,7 @@ function maxProjectsTreeMtimeMs(projectsDir) {
     for (const ent of readdirSync4(projectsDir, { withFileTypes: true })) {
       if (!ent.isDirectory()) continue;
       try {
-        const childMs = statSync6(join19(projectsDir, ent.name)).mtimeMs;
+        const childMs = statSync7(join19(projectsDir, ent.name)).mtimeMs;
         if (childMs > maxMs) maxMs = childMs;
       } catch {
       }
@@ -11789,7 +11906,7 @@ var ScannerManager = class {
     if (!conv.filePath) return false;
     let mtimeMs = null;
     try {
-      mtimeMs = statSync7(conv.filePath).mtimeMs;
+      mtimeMs = statSync8(conv.filePath).mtimeMs;
     } catch {
       return false;
     }
@@ -12028,10 +12145,10 @@ function seal(plaintext, recipientPublicKeyBase64) {
 }
 
 // src/server-wiring.ts
-import { statSync as statSync9 } from "fs";
+import { statSync as statSync10 } from "fs";
 
 // src/handlers/handleListProjects.ts
-import { closeSync as closeSync4, openSync as openSync4, readdirSync as readdirSync5, readSync as readSync4, statSync as statSync8 } from "fs";
+import { closeSync as closeSync4, openSync as openSync4, readdirSync as readdirSync5, readSync as readSync4, statSync as statSync9 } from "fs";
 import { homedir as homedir11 } from "os";
 import { join as join21 } from "path";
 var HEAD_BYTES = 64 * 1024;
@@ -12077,7 +12194,7 @@ function handleListProjects(url, res) {
       const fullPath = join21(projectsDir, dirName);
       let mtime = 0;
       try {
-        mtime = statSync8(fullPath).mtimeMs;
+        mtime = statSync9(fullPath).mtimeMs;
       } catch {
       }
       return { dirName: String(dirName), mtime };
@@ -12111,7 +12228,7 @@ function createConversationWatcherEvents(deps) {
         const seqs = cache.extendMessageIndex(
           filePath,
           spans,
-          statSync9(filePath),
+          statSync10(filePath),
           readFrom,
           endOffset
         );
@@ -12158,7 +12275,7 @@ function createConversationWatcherEvents(deps) {
     },
     onConversationChanged: (filePath) => {
       try {
-        statSync9(filePath);
+        statSync10(filePath);
       } catch {
         deps.externalTailManager().handleJsonlDeleted(filePath);
         return;
@@ -12256,7 +12373,15 @@ function createLiveSessionOptions(deps) {
         // grace-timer/idle-reaper hold (statusSource "shutdown") apart from a
         // genuine process exit ("process-exit"), and reports both as
         // `lifecycle: "completed"`. See managedToResponse in session-store.ts.
-        ...session.statusSource != null && { statusSource: session.statusSource }
+        ...session.statusSource != null && { statusSource: session.statusSource },
+        // Why a session died, not just that it did. Without this the store's
+        // copy has no failureReason, so managedToResponse falls through to
+        // `lifecycle: "completed"` (see session-store.ts) and a session that
+        // never started — missing CLI, missing project dir — is reported to
+        // every client as one that finished normally. Guarded like its
+        // neighbours: a later transition must not blank a recorded failure.
+        ...session.failureReason != null && { failureReason: session.failureReason },
+        ...session.failureCode != null && { failureCode: session.failureCode }
       });
       deps.managedSessionsRepo()?.recordStatus(
         session.id,
@@ -12511,7 +12636,7 @@ function saveAlertState(state) {
 }
 
 // src/services/cache-integrity/backup.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync6, readdirSync as readdirSync6, statSync as statSync10, unlinkSync } from "fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync6, readdirSync as readdirSync6, statSync as statSync11, unlinkSync } from "fs";
 import { join as join23 } from "path";
 var DEFAULT_RETAIN = 3;
 function retainCount() {
@@ -12530,7 +12655,7 @@ async function backupCacheDb(db, cacheDir) {
   const retain = retainCount();
   const backups = readdirSync6(backupsDir).filter((f) => f.startsWith("cache-") && f.endsWith(".db")).map((f) => {
     const full = join23(backupsDir, f);
-    return { full, mtime: statSync10(full).mtimeMs };
+    return { full, mtime: statSync11(full).mtimeMs };
   }).sort((a, b) => b.mtime - a.mtime);
   for (const stale of backups.slice(retain)) {
     if (existsSync11(stale.full)) unlinkSync(stale.full);
@@ -12796,7 +12921,7 @@ var CacheIntegrityMonitor = class {
 
 // src/services/conversations/conversationWatcher.ts
 import chokidar from "chokidar";
-import { statSync as statSync11 } from "fs";
+import { statSync as statSync12 } from "fs";
 import { open, stat as stat2 } from "fs/promises";
 var ConversationWatcher = class {
   files = /* @__PURE__ */ new Map();
@@ -12822,7 +12947,7 @@ var ConversationWatcher = class {
     if (this.files.has(key)) return;
     let offset;
     try {
-      offset = statSync11(filePath).size;
+      offset = statSync12(filePath).size;
     } catch {
       offset = 0;
     }
@@ -14497,7 +14622,7 @@ function discoveredToResponse(d, conversationId) {
 }
 
 // src/session-watchers.ts
-import { existsSync as existsSync15, watch as fsWatch, readdirSync as readdirSync7, readFileSync as readFileSync10, statSync as statSync12 } from "fs";
+import { existsSync as existsSync15, watch as fsWatch, readdirSync as readdirSync7, readFileSync as readFileSync10, statSync as statSync13 } from "fs";
 import { homedir as homedir13 } from "os";
 import { basename as basename6, join as join24 } from "path";
 var SessionWatchers = class {
@@ -14604,7 +14729,7 @@ var SessionWatchers = class {
       if (!resolvedFilePath && existsSync15(projectsDir)) {
         try {
           const now = Date.now();
-          const match = readdirSync7(projectsDir).filter((f) => f.endsWith(".jsonl")).map((f) => ({ f, mtime: statSync12(join24(projectsDir, f)).mtimeMs })).filter(({ mtime }) => now - mtime < 5e3).filter(
+          const match = readdirSync7(projectsDir).filter((f) => f.endsWith(".jsonl")).map((f) => ({ f, mtime: statSync13(join24(projectsDir, f)).mtimeMs })).filter(({ mtime }) => now - mtime < 5e3).filter(
             ({ f }) => basename6(f, ".jsonl") === sessionId || this.readFirstLineSessionId(join24(projectsDir, f)) === sessionId
           ).sort((a, b) => b.mtime - a.mtime)[0];
           if (match) resolvedFilePath = join24(projectsDir, match.f);
@@ -14701,7 +14826,7 @@ var SessionWatchers = class {
           continue;
         }
         const nowMs = Date.now();
-        const recentCandidates = candidateFiles.map((f) => ({ f, mtime: statSync12(join24(sessionsDir, f)).mtimeMs })).filter(({ mtime }) => nowMs - mtime < 1e4).sort((a, b) => b.mtime - a.mtime);
+        const recentCandidates = candidateFiles.map((f) => ({ f, mtime: statSync13(join24(sessionsDir, f)).mtimeMs })).filter(({ mtime }) => nowMs - mtime < 1e4).sort((a, b) => b.mtime - a.mtime);
         for (const { f } of recentCandidates) {
           const candidatePath = join24(sessionsDir, f);
           const match = matchesProjectPath(candidatePath);
@@ -15711,6 +15836,41 @@ var StreamerServer = class {
     json(res, 503, body);
     return true;
   }
+  /**
+   * Say which provider CLIs this machine can actually launch.
+   *
+   * The operator cannot discover this case unaided: under launchd/Task
+   * Scheduler the service inherits a stripped PATH, so a CLI that works
+   * perfectly in their terminal is invisible to the service, and every session
+   * start dies milliseconds in. `/api/diagnostics` answers it too, but only for
+   * someone who already suspects it.
+   *
+   * Availability only, never a version — `--version` costs a process spawn per
+   * provider (85ms for claude here) and belongs on the first request that wants
+   * it, not on boot.
+   *
+   * Called AFTER the port is bound, which is not cosmetic. This is the first
+   * caller of the exe resolvers in the process, so the memo is cold by
+   * definition and each provider pays one synchronous `which` / `where.exe`
+   * (platform.ts) with a 3s timeout. On POSIX that is 3ms found, 7ms missing.
+   * Windows is the risk — `where.exe` is slower, `execFileSync` blocks the
+   * event loop, and Task Scheduler's stripped PATH is exactly where a miss
+   * pays the full timeout — so the worst case is ~6s of two blocking lookups.
+   * After `listen()` that delays the first requests on a box that cannot start
+   * a session anyway; before it, it would have delayed binding the port.
+   */
+  logProviderAvailability() {
+    for (const provider of [CLAUDE_CODE_PROVIDER, CODEX_CLI_PROVIDER]) {
+      if (locateProviderExe(provider)) {
+        this.log.info(`Provider ${provider}: found`, { event: "config.provider", provider });
+      } else {
+        this.log.warn(`Provider ${provider}: not found on PATH \u2014 sessions cannot start`, {
+          event: "config.provider_missing",
+          provider
+        });
+      }
+    }
+  }
   async listen(port, opts) {
     if (this.featureFlags.ptyHost) {
       try {
@@ -15771,6 +15931,7 @@ var StreamerServer = class {
           event: "server.listening",
           ...this.host !== void 0 && { host: this.host }
         });
+        this.logProviderAvailability();
         try {
           this.runtimeStore = RuntimeStore.open(this.runtimeDbPath);
           this.managedSessionsRepo = new ManagedSessionsRepository(this.runtimeStore.getDatabase());
@@ -16147,9 +16308,9 @@ var StreamerServer = class {
       json(res, 400, { error: "Missing token or clientPublicKey" });
       return;
     }
-    const result = this.pairTokens.consume(token);
-    if (!result.ok) {
-      json(res, 401, { error: `Pair token ${result.reason}` });
+    const precheck = this.pairTokens.verify(token);
+    if (!precheck.ok) {
+      json(res, 401, { error: `Pair token ${precheck.reason}` });
       return;
     }
     let sealed;
@@ -16160,6 +16321,11 @@ var StreamerServer = class {
       json(res, 400, { error: message });
       return;
     }
+    const result = this.pairTokens.consume(token);
+    if (!result.ok) {
+      json(res, 401, { error: `Pair token ${result.reason}` });
+      return;
+    }
     const ts = (/* @__PURE__ */ new Date()).toISOString();
     this.log.info(`[pair] token exchanged from ${ip} at ${ts}`, {
       event: "pair.token_exchanged",