aicodeman 0.2.8

package/dist/config/map-limits.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @fileoverview Centralized Map size limits for memory management.
+ *
+ * These constants define maximum sizes for Maps that track ephemeral data.
+ * Without limits, long-running sessions can accumulate unbounded entries
+ * leading to memory leaks.
+ *
+ * Memory Budget Rationale:
+ * - Assuming average entry size of ~1KB
+ * - MAX_TRACKED_AGENTS=500 × 1KB = ~500KB for agent tracking
+ * - Activity/results per agent × agents = bounded by these limits
+ * - Total Map overhead: <50MB even under heavy load
+ *
+ * @module config/map-limits
+ */
+/**
+ * Maximum concurrent sessions allowed.
+ * Each session consumes significant resources (PTY, buffers, watchers).
+ */
+export declare const MAX_CONCURRENT_SESSIONS = 50;
+/**
+ * Maximum concurrent SSE client connections.
+ * Each connection holds an open HTTP response and receives all broadcast events.
+ */
+export declare const MAX_SSE_CLIENTS = 100;
+/**
+ * Maximum todo items to track per session.
+ */
+export declare const MAX_TODOS_PER_SESSION = 500;
+/**
+ * Maximum pending tool calls to track per subagent.
+ * Entries should be cleaned up on tool_result, but this prevents leaks.
+ */
+export declare const MAX_PENDING_TOOL_CALLS = 100;
+/**
+ * TTL for orphaned pending tool calls (5 minutes).
+ * If no tool_result received, entry is cleaned up.
+ */
+export declare const PENDING_TOOL_CALL_TTL_MS: number;
+//# sourceMappingURL=map-limits.d.ts.map

package/dist/config/map-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-limits.d.ts","sourceRoot":"","sources":["../../src/config/map-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH;;;GAGG;AACH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAM1C;;;GAGG;AACH,eAAO,MAAM,eAAe,MAAM,CAAC;AAMnC;;GAEG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAMzC;;;GAGG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,wBAAwB,QAAgB,CAAC"}

package/dist/config/map-limits.js

@@ -0,0 +1,52 @@
+/**
+ * @fileoverview Centralized Map size limits for memory management.
+ *
+ * These constants define maximum sizes for Maps that track ephemeral data.
+ * Without limits, long-running sessions can accumulate unbounded entries
+ * leading to memory leaks.
+ *
+ * Memory Budget Rationale:
+ * - Assuming average entry size of ~1KB
+ * - MAX_TRACKED_AGENTS=500 × 1KB = ~500KB for agent tracking
+ * - Activity/results per agent × agents = bounded by these limits
+ * - Total Map overhead: <50MB even under heavy load
+ *
+ * @module config/map-limits
+ */
+// ============================================================================
+// Session Tracking Limits
+// ============================================================================
+/**
+ * Maximum concurrent sessions allowed.
+ * Each session consumes significant resources (PTY, buffers, watchers).
+ */
+export const MAX_CONCURRENT_SESSIONS = 50;
+// ============================================================================
+// SSE Client Limits
+// ============================================================================
+/**
+ * Maximum concurrent SSE client connections.
+ * Each connection holds an open HTTP response and receives all broadcast events.
+ */
+export const MAX_SSE_CLIENTS = 100;
+// ============================================================================
+// Todo Item Limits (Ralph Tracker)
+// ============================================================================
+/**
+ * Maximum todo items to track per session.
+ */
+export const MAX_TODOS_PER_SESSION = 500;
+// ============================================================================
+// Pending Tool Calls Limits
+// ============================================================================
+/**
+ * Maximum pending tool calls to track per subagent.
+ * Entries should be cleaned up on tool_result, but this prevents leaks.
+ */
+export const MAX_PENDING_TOOL_CALLS = 100;
+/**
+ * TTL for orphaned pending tool calls (5 minutes).
+ * If no tool_result received, entry is cleaned up.
+ */
+export const PENDING_TOOL_CALL_TTL_MS = 5 * 60 * 1000;
+//# sourceMappingURL=map-limits.js.map

package/dist/config/map-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-limits.js","sourceRoot":"","sources":["../../src/config/map-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAE1C,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC"}

package/dist/file-stream-manager.d.ts

@@ -0,0 +1,148 @@
+/**
+ * @fileoverview File Stream Manager - Manages tail -f processes for live log viewing
+ *
+ * This module spawns and manages `tail -f` processes for streaming live file
+ * content to the frontend. It handles:
+ * - Spawning tail processes with initial history
+ * - Streaming output via callbacks
+ * - Cleanup when streams are closed
+ * - Security validation (path within working directory)
+ *
+ * @module file-stream-manager
+ */
+import { ChildProcess } from 'node:child_process';
+import { EventEmitter } from 'node:events';
+/**
+ * Represents an active file stream.
+ */
+export interface FileStream {
+    /** Unique stream identifier */
+    id: string;
+    /** Session this stream belongs to */
+    sessionId: string;
+    /** Absolute path to the file being streamed */
+    filePath: string;
+    /** Tail process handle */
+    process: ChildProcess;
+    /** Timestamp when stream was created */
+    createdAt: number;
+    /** Timestamp of last data received */
+    lastDataAt: number;
+    /** Whether the stream is still active */
+    active: boolean;
+    /** Callback for sending data to client */
+    onData: (data: string) => void;
+    /** Callback for stream end */
+    onEnd: () => void;
+    /** Callback for errors */
+    onError: (error: string) => void;
+}
+/**
+ * Options for creating a file stream.
+ */
+export interface CreateStreamOptions {
+    /** Session ID requesting the stream */
+    sessionId: string;
+    /** Path to the file to stream */
+    filePath: string;
+    /** Working directory for path validation */
+    workingDir: string;
+    /** Number of historical lines to show (default: 50) */
+    lines?: number;
+    /** Callback for data */
+    onData: (data: string) => void;
+    /** Callback for stream end */
+    onEnd: () => void;
+    /** Callback for errors */
+    onError: (error: string) => void;
+}
+/**
+ * Result of creating a stream.
+ */
+export interface CreateStreamResult {
+    success: boolean;
+    streamId?: string;
+    error?: string;
+}
+/**
+ * Manages file streaming via tail -f processes.
+ * Ensures security by validating paths and limiting concurrent streams.
+ *
+ * @example
+ * ```typescript
+ * const manager = new FileStreamManager();
+ *
+ * const result = await manager.createStream({
+ *   sessionId: 'session-123',
+ *   filePath: '/var/log/app.log',
+ *   workingDir: '/var/log',
+ *   onData: (data) => sseClient.write(data),
+ *   onEnd: () => sseClient.close(),
+ *   onError: (err) => console.error(err),
+ * });
+ *
+ * // Later, to stop:
+ * manager.closeStream(result.streamId);
+ * ```
+ */
+export declare class FileStreamManager extends EventEmitter {
+    private streams;
+    private sessionStreamCounts;
+    private cleanupTimer;
+    constructor();
+    /**
+     * Create a new file stream.
+     *
+     * @param options - Stream configuration
+     * @returns Result with stream ID on success, error on failure
+     */
+    createStream(options: CreateStreamOptions): Promise<CreateStreamResult>;
+    /**
+     * Close a file stream.
+     *
+     * @param streamId - ID of the stream to close
+     * @returns true if stream was closed, false if not found
+     */
+    closeStream(streamId: string): boolean;
+    /**
+     * Close all streams for a session.
+     *
+     * @param sessionId - Session ID whose streams to close
+     * @returns Number of streams closed
+     */
+    closeSessionStreams(sessionId: string): number;
+    /**
+     * Get all active streams for a session.
+     *
+     * @param sessionId - Session ID to query
+     * @returns Array of stream info
+     */
+    getSessionStreams(sessionId: string): Array<{
+        id: string;
+        filePath: string;
+        createdAt: number;
+    }>;
+    /**
+     * Get count of active streams.
+     */
+    get activeStreamCount(): number;
+    /**
+     * Clean up and destroy the manager.
+     */
+    destroy(): void;
+    /**
+     * Validate that a file path is safe to access.
+     * Must be within the working directory (no path traversal).
+     */
+    private validatePath;
+    /**
+     * Remove a stream from tracking.
+     */
+    private removeStream;
+    /**
+     * Clean up streams that have been inactive for too long.
+     */
+    private cleanupInactiveStreams;
+}
+export declare const fileStreamManager: FileStreamManager;
+//# sourceMappingURL=file-stream-manager.d.ts.map

package/dist/file-stream-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-stream-manager.d.ts","sourceRoot":"","sources":["../src/file-stream-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAS,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIzD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA4B3C;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAC;IAChB,0CAA0C;IAC1C,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,8BAA8B;IAC9B,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,0BAA0B;IAC1B,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wBAAwB;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,8BAA8B;IAC9B,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,0BAA0B;IAC1B,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,iBAAkB,SAAQ,YAAY;IACjD,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,mBAAmB,CAAkC;IAC7D,OAAO,CAAC,YAAY,CAA+C;;IAUnE;;;;;OAKG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAuH7E;;;;;OAKG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAoCtC;;;;;OAKG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAW9C;;;;;OAKG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAchG;;OAEG;IACH,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED;;OAEG;IACH,OAAO,IAAI,IAAI;IAmBf;;;OAGG;IACH,OAAO,CAAC,YAAY;IAoDpB;;OAEG;IACH,OAAO,CAAC,YAAY;IAcpB;;OAEG;IACH,OAAO,CAAC,sBAAsB;CAS/B;AAGD,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}

package/dist/file-stream-manager.js

@@ -0,0 +1,351 @@
+/**
+ * @fileoverview File Stream Manager - Manages tail -f processes for live log viewing
+ *
+ * This module spawns and manages `tail -f` processes for streaming live file
+ * content to the frontend. It handles:
+ * - Spawning tail processes with initial history
+ * - Streaming output via callbacks
+ * - Cleanup when streams are closed
+ * - Security validation (path within working directory)
+ *
+ * @module file-stream-manager
+ */
+import { spawn } from 'node:child_process';
+import { existsSync, statSync, realpathSync } from 'node:fs';
+import { resolve, relative, isAbsolute } from 'node:path';
+import { homedir } from 'node:os';
+import { EventEmitter } from 'node:events';
+// ========== Configuration Constants ==========
+/**
+ * Default number of historical lines to show when opening a file.
+ */
+const DEFAULT_TAIL_LINES = 50;
+/**
+ * Maximum file size to stream (100MB).
+ * Skip files larger than this to prevent memory issues.
+ */
+const MAX_FILE_SIZE = 100 * 1024 * 1024;
+/**
+ * Maximum concurrent streams per session.
+ */
+const MAX_STREAMS_PER_SESSION = 5;
+/**
+ * Inactivity timeout for streams (5 minutes).
+ * Streams with no data for this long will be auto-closed.
+ */
+const STREAM_INACTIVITY_TIMEOUT_MS = 5 * 60 * 1000;
+// ========== FileStreamManager Class ==========
+/**
+ * Manages file streaming via tail -f processes.
+ * Ensures security by validating paths and limiting concurrent streams.
+ *
+ * @example
+ * ```typescript
+ * const manager = new FileStreamManager();
+ *
+ * const result = await manager.createStream({
+ *   sessionId: 'session-123',
+ *   filePath: '/var/log/app.log',
+ *   workingDir: '/var/log',
+ *   onData: (data) => sseClient.write(data),
+ *   onEnd: () => sseClient.close(),
+ *   onError: (err) => console.error(err),
+ * });
+ *
+ * // Later, to stop:
+ * manager.closeStream(result.streamId);
+ * ```
+ */
+export class FileStreamManager extends EventEmitter {
+    streams = new Map();
+    sessionStreamCounts = new Map();
+    cleanupTimer = null;
+    constructor() {
+        super();
+        // Start cleanup timer for inactive streams
+        this.cleanupTimer = setInterval(() => this.cleanupInactiveStreams(), 60 * 1000);
+    }
+    // ========== Public Methods ==========
+    /**
+     * Create a new file stream.
+     *
+     * @param options - Stream configuration
+     * @returns Result with stream ID on success, error on failure
+     */
+    async createStream(options) {
+        const { sessionId, filePath, workingDir, lines = DEFAULT_TAIL_LINES, onData, onEnd, onError } = options;
+        // Check concurrent stream limit for this session
+        const currentCount = this.sessionStreamCounts.get(sessionId) || 0;
+        if (currentCount >= MAX_STREAMS_PER_SESSION) {
+            return {
+                success: false,
+                error: `Maximum ${MAX_STREAMS_PER_SESSION} concurrent streams per session`,
+            };
+        }
+        // Resolve and validate path
+        const validationResult = this.validatePath(filePath, workingDir);
+        if (!validationResult.valid) {
+            return { success: false, error: validationResult.error };
+        }
+        let absolutePath = validationResult.absolutePath;
+        // Check file exists and size
+        try {
+            const stats = statSync(absolutePath);
+            if (stats.size > MAX_FILE_SIZE) {
+                return {
+                    success: false,
+                    error: `File too large (${Math.round(stats.size / 1024 / 1024)}MB > ${MAX_FILE_SIZE / 1024 / 1024}MB limit)`,
+                };
+            }
+        }
+        catch (err) {
+            const errorCode = err instanceof Error && 'code' in err ? err.code : 'UNKNOWN';
+            console.warn(`[FileStreamManager] Failed to stat file "${absolutePath}" (${errorCode}):`, err instanceof Error ? err.message : String(err));
+            return { success: false, error: 'File not found or not accessible' };
+        }
+        // Re-resolve symlinks right before spawn to minimize TOCTOU window.
+        // A symlink could have been swapped between validatePath() and here.
+        try {
+            const resolvedPath = realpathSync(absolutePath);
+            if (resolvedPath !== absolutePath) {
+                // Symlink target changed — re-validate against allowed paths
+                const recheck = this.validatePath(resolvedPath, workingDir);
+                if (!recheck.valid) {
+                    return { success: false, error: recheck.error };
+                }
+                absolutePath = resolvedPath;
+            }
+        }
+        catch {
+            return { success: false, error: 'File not found or not accessible' };
+        }
+        // Generate stream ID
+        const streamId = `${sessionId}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+        // Spawn tail process
+        const tailProcess = spawn('tail', ['-f', '-n', String(lines), absolutePath], {
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        if (!tailProcess.pid) {
+            return { success: false, error: 'Failed to spawn tail process' };
+        }
+        const stream = {
+            id: streamId,
+            sessionId,
+            filePath: absolutePath,
+            process: tailProcess,
+            createdAt: Date.now(),
+            lastDataAt: Date.now(),
+            active: true,
+            onData,
+            onEnd,
+            onError,
+        };
+        // Handle stdout
+        tailProcess.stdout?.on('data', (data) => {
+            if (stream.active) {
+                stream.lastDataAt = Date.now();
+                onData(data.toString());
+            }
+        });
+        // Handle stderr
+        tailProcess.stderr?.on('data', (data) => {
+            if (stream.active) {
+                onError(data.toString());
+            }
+        });
+        // Handle process exit
+        tailProcess.on('exit', (_code) => {
+            if (stream.active) {
+                stream.active = false;
+                onEnd();
+                this.removeStream(streamId);
+            }
+        });
+        // Handle errors
+        tailProcess.on('error', (err) => {
+            if (stream.active) {
+                stream.active = false;
+                onError(err.message);
+                this.removeStream(streamId);
+            }
+        });
+        // Store stream
+        this.streams.set(streamId, stream);
+        this.sessionStreamCounts.set(sessionId, currentCount + 1);
+        return { success: true, streamId };
+    }
+    /**
+     * Close a file stream.
+     *
+     * @param streamId - ID of the stream to close
+     * @returns true if stream was closed, false if not found
+     */
+    closeStream(streamId) {
+        const stream = this.streams.get(streamId);
+        if (!stream)
+            return false;
+        stream.active = false;
+        // Remove all event listeners to prevent memory leaks (closures hold references)
+        stream.process.stdout?.removeAllListeners();
+        stream.process.stderr?.removeAllListeners();
+        stream.process.removeAllListeners();
+        // Kill the tail process
+        try {
+            stream.process.kill('SIGTERM');
+            // Force kill after 1 second if still running
+            const forceKillTimer = setTimeout(() => {
+                try {
+                    stream.process.kill('SIGKILL');
+                }
+                catch {
+                    // Already dead
+                }
+            }, 1000);
+            // Clear the force kill timer if process exits naturally
+            stream.process.once('exit', () => {
+                clearTimeout(forceKillTimer);
+            });
+        }
+        catch {
+            // Process may have already exited
+        }
+        stream.onEnd();
+        this.removeStream(streamId);
+        return true;
+    }
+    /**
+     * Close all streams for a session.
+     *
+     * @param sessionId - Session ID whose streams to close
+     * @returns Number of streams closed
+     */
+    closeSessionStreams(sessionId) {
+        let closed = 0;
+        for (const [streamId, stream] of this.streams) {
+            if (stream.sessionId === sessionId) {
+                this.closeStream(streamId);
+                closed++;
+            }
+        }
+        return closed;
+    }
+    /**
+     * Get all active streams for a session.
+     *
+     * @param sessionId - Session ID to query
+     * @returns Array of stream info
+     */
+    getSessionStreams(sessionId) {
+        const result = [];
+        for (const [, stream] of this.streams) {
+            if (stream.sessionId === sessionId && stream.active) {
+                result.push({
+                    id: stream.id,
+                    filePath: stream.filePath,
+                    createdAt: stream.createdAt,
+                });
+            }
+        }
+        return result;
+    }
+    /**
+     * Get count of active streams.
+     */
+    get activeStreamCount() {
+        return this.streams.size;
+    }
+    /**
+     * Clean up and destroy the manager.
+     */
+    destroy() {
+        // Stop cleanup timer
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = null;
+        }
+        // Close all streams
+        for (const streamId of this.streams.keys()) {
+            this.closeStream(streamId);
+        }
+        // Clear Maps to release references
+        this.streams.clear();
+        this.sessionStreamCounts.clear();
+    }
+    // ========== Private Methods ==========
+    /**
+     * Validate that a file path is safe to access.
+     * Must be within the working directory (no path traversal).
+     */
+    validatePath(filePath, workingDir) {
+        // Expand ~ to home directory
+        let expandedPath = filePath;
+        if (expandedPath.startsWith('~')) {
+            expandedPath = expandedPath.replace(/^~/, homedir());
+        }
+        // Resolve to absolute path
+        let absolutePath = isAbsolute(expandedPath) ? resolve(expandedPath) : resolve(workingDir, expandedPath);
+        // Resolve symlinks to prevent symlink attacks — validate the real target,
+        // not the symlink itself. Fall back to resolved path if file doesn't exist yet.
+        try {
+            absolutePath = realpathSync(absolutePath);
+        }
+        catch {
+            // File may not exist yet (tail -f can wait); keep the resolved path
+            // which will be caught by the existsSync check below
+        }
+        // Normalize the working directory
+        const normalizedWorkingDir = resolve(workingDir);
+        // Check if the resolved path is within the working directory
+        // or common log directories (/tmp intentionally excluded — world-writable)
+        const allowedPaths = [normalizedWorkingDir, '/var/log', resolve(homedir(), 'logs')];
+        const isAllowed = allowedPaths.some((allowed) => {
+            const rel = relative(allowed, absolutePath);
+            return rel && !rel.startsWith('..') && !isAbsolute(rel);
+        });
+        if (!isAllowed) {
+            return {
+                valid: false,
+                error: `Path must be within working directory or allowed log directories`,
+            };
+        }
+        // Note: No need to check for '..' — resolve() already normalizes the path,
+        // and realpathSync() resolves symlinks. Both eliminate traversal sequences.
+        // Check file exists
+        if (!existsSync(absolutePath)) {
+            return { valid: false, error: 'File does not exist' };
+        }
+        return { valid: true, absolutePath };
+    }
+    /**
+     * Remove a stream from tracking.
+     */
+    removeStream(streamId) {
+        const stream = this.streams.get(streamId);
+        if (stream) {
+            // Decrement session count
+            const count = this.sessionStreamCounts.get(stream.sessionId) || 0;
+            if (count <= 1) {
+                this.sessionStreamCounts.delete(stream.sessionId);
+            }
+            else {
+                this.sessionStreamCounts.set(stream.sessionId, count - 1);
+            }
+        }
+        this.streams.delete(streamId);
+    }
+    /**
+     * Clean up streams that have been inactive for too long.
+     */
+    cleanupInactiveStreams() {
+        const now = Date.now();
+        for (const [streamId, stream] of this.streams) {
+            if (now - stream.lastDataAt > STREAM_INACTIVITY_TIMEOUT_MS) {
+                console.log(`[FileStreamManager] Closing inactive stream: ${streamId}`);
+                this.closeStream(streamId);
+            }
+        }
+    }
+}
+// Export singleton instance
+export const fileStreamManager = new FileStreamManager();
+//# sourceMappingURL=file-stream-manager.js.map

package/dist/file-stream-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-stream-manager.js","sourceRoot":"","sources":["../src/file-stream-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,EAAgB,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,gDAAgD;AAEhD;;GAEG;AACH,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;GAGG;AACH,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC;;GAEG;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAElC;;;GAGG;AACH,MAAM,4BAA4B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AA2DnD,gDAAgD;AAEhD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACzC,OAAO,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC7C,mBAAmB,GAAwB,IAAI,GAAG,EAAE,CAAC;IACrD,YAAY,GAA0C,IAAI,CAAC;IAEnE;QACE,KAAK,EAAE,CAAC;QACR,2CAA2C;QAC3C,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IAClF,CAAC;IAED,uCAAuC;IAEvC;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,GAAG,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAExG,iDAAiD;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,YAAY,IAAI,uBAAuB,EAAE,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,WAAW,uBAAuB,iCAAiC;aAC3E,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC3D,CAAC;QAED,IAAI,YAAY,GAAG,gBAAgB,CAAC,YAAa,CAAC;QAElD,6BAA6B;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;gBAC/B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,mBAAmB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,QAAQ,aAAa,GAAG,IAAI,GAAG,IAAI,WAAW;iBAC7G,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC,CAAE,GAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1G,OAAO,CAAC,IAAI,CACV,4CAA4C,YAAY,MAAM,SAAS,IAAI,EAC3E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACvE,CAAC;QAED,oEAAoE;QACpE,qEAAqE;QACrE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;gBAClC,6DAA6D;gBAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;gBAC5D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClD,CAAC;gBACD,YAAY,GAAG,YAAY,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACvE,CAAC;QAED,qBAAqB;QACrB,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAExF,qBAAqB;QACrB,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,EAAE;YAC3E,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;QACnE,CAAC;QAED,MAAM,MAAM,GAAe;YACzB,EAAE,EAAE,QAAQ;YACZ,SAAS;YACT,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,WAAW;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,MAAM,EAAE,IAAI;YACZ,MAAM;YACN,KAAK;YACL,OAAO;SACR,CAAC;QAEF,gBAAgB;QAChB,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YAC9C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,gBAAgB;QAChB,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YAC9C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,sBAAsB;QACtB,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtB,KAAK,EAAE,CAAC;gBACR,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,gBAAgB;QAChB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC9B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACrB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,eAAe;QACf,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;QAE1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,QAAgB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;QAEtB,gFAAgF;QAChF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAEpC,wBAAwB;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/B,6CAA6C;YAC7C,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;gBACrC,IAAI,CAAC;oBACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACP,eAAe;gBACjB,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,wDAAwD;YACxD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC/B,YAAY,CAAC,cAAc,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,SAAiB;QACnC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAC3B,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,SAAiB;QACjC,MAAM,MAAM,GAA+D,EAAE,CAAC;QAC9E,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,OAAO;QACL,qBAAqB;QACrB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QAED,oBAAoB;QACpB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IACnC,CAAC;IAED,wCAAwC;IAExC;;;OAGG;IACK,YAAY,CAClB,QAAgB,EAChB,UAAkB;QAElB,6BAA6B;QAC7B,IAAI,YAAY,GAAG,QAAQ,CAAC;QAC5B,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,2BAA2B;QAC3B,IAAI,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAExG,0EAA0E;QAC1E,gFAAgF;QAChF,IAAI,CAAC;YACH,YAAY,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,qDAAqD;QACvD,CAAC;QAED,kCAAkC;QAClC,MAAM,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAEjD,6DAA6D;QAC7D,2EAA2E;QAC3E,MAAM,YAAY,GAAG,CAAC,oBAAoB,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAEpF,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC5C,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,kEAAkE;aAC1E,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,4EAA4E;QAE5E,oBAAoB;QACpB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QACxD,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,0BAA0B;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,4BAA4B,EAAE,CAAC;gBAC3D,OAAO,CAAC,GAAG,CAAC,gDAAgD,QAAQ,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,4BAA4B;AAC5B,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/hooks-config.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @fileoverview Claude Code hooks configuration generator
+ *
+ * Generates .claude/settings.local.json with hook definitions that POST
+ * to Codeman's /api/hook-event endpoint when Claude Code fires
+ * notification or stop hooks. Uses $CODEMAN_API_URL and
+ * $CODEMAN_SESSION_ID env vars (set on every managed session) so the
+ * config is static per case directory.
+ */
+/**
+ * Generates the hooks section for .claude/settings.local.json
+ *
+ * The hook commands read stdin JSON from Claude Code (contains tool_name,
+ * tool_input, etc.) and forward it as the `data` field to Codeman's API.
+ * Env vars are resolved at runtime by the shell, so the config is static
+ * per case directory.
+ */
+export declare function generateHooksConfig(): {
+    hooks: Record<string, unknown[]>;
+};
+/**
+ * Updates env vars in .claude/settings.local.json for the given case path.
+ * Merges with existing env field; removes vars set to empty string.
+ */
+export declare function updateCaseEnvVars(casePath: string, envVars: Record<string, string>): Promise<void>;
+/**
+ * Writes hooks config to .claude/settings.local.json in the given case path.
+ * Merges with existing file content, only touching the `hooks` key.
+ */
+export declare function writeHooksConfig(casePath: string): Promise<void>;
+//# sourceMappingURL=hooks-config.d.ts.map

package/dist/hooks-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-config.d.ts","sourceRoot":"","sources":["../src/hooks-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;CAAE,CA4C1E;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BxG;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBtE"}