claude-code-session-manager 0.111.0 → 0.113.0

package/src/main/lib/{atomicFs.cjs → util/atomicFs.cjs}

@@ -105,7 +105,49 @@ function readJsonOrSync(file, fallback) {
   }
 }
 
+function defaultIsPidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e?.code === 'EPERM'; // exists but owned by someone else
+  }
+}
+
+/**
+ * Remove orphaned `<file>.tmp-<pid>-<ts>-<rand>` files left by crashed
+ * writers. Direct children of `dir` only (no recursion); a file goes only when
+ * its mtime is older than `olderThanMs` AND its embedded pid is not alive.
+ * `.corrupt-*` / `.bak*` forensics never match. Never throws.
+ */
+function sweepStaleTmpFiles(dir, { olderThanMs = 3600000, isPidAlive = defaultIsPidAlive } = {}) {
+  const removed = [];
+  let names;
+  try {
+    names = fs.readdirSync(dir);
+  } catch {
+    return { removed };
+  }
+  const now = Date.now();
+  for (const name of names) {
+    try {
+      const m = /\.tmp-(\d+)-/.exec(name);
+      if (!m) continue;
+      if (/\.(corrupt|bak)/.test(name)) continue;
+      const full = path.join(dir, name);
+      const st = fs.lstatSync(full);
+      if (!st.isFile()) continue;
+      if (now - st.mtimeMs <= olderThanMs) continue;
+      if (isPidAlive(Number(m[1]))) continue;
+      fs.unlinkSync(full);
+      removed.push(full);
+    } catch { /* per-file errors are skipped */ }
+  }
+  return { removed };
+}
+
 module.exports = {
+  sweepStaleTmpFiles,
   tmpPathFor,
   writeTextAtomic,
   writeTextAtomicSync,

package/src/main/lib/{loopDelay.cjs → util/loopDelay.cjs}

@@ -11,7 +11,7 @@ const { monitorEventLoopDelay } = require('node:perf_hooks');
 
 const LOOP_DELAY_RESOLUTION_MS = 20;
 // A single beat whose worst loop delay exceeds this is a visible main-thread stall.
-const LOOP_STALL_WARN_MS = 250;
+const LOOP_STALL_WARN_MS = 1000;
 
 const NS_PER_MS = 1e6;
 const toMs = (ns) => Math.round(ns / NS_PER_MS * 10) / 10;

package/src/main/logs.cjs

@@ -1,7 +1,7 @@
 const { app, ipcMain } = require('electron');
 const fs = require('node:fs');
 const path = require('node:path');
-const opsErrorLog = require('./lib/opsErrorLog.cjs');
+const opsErrorLog = require('./lib/telemetry/opsErrorLog.cjs');
 
 // Rolling daily files under <userData>/logs/. Anything mtime'd older than
 // RETENTION_MS is pruned at boot; we never compact mid-session, since the

package/src/main/mcpStatus.cjs

@@ -10,8 +10,8 @@
  */
 
 const { spawn } = require('node:child_process');
-const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claudeBin.cjs');
-const { withProcRole } = require('./lib/cleanEnv.cjs');
+const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claude/claudeBin.cjs');
+const { withProcRole } = require('./lib/process/cleanEnv.cjs');
 
 const PROBE_TIMEOUT_MS = 30_000;
 

package/src/main/memoryAggregate.cjs

@@ -22,9 +22,9 @@
 const { ipcMain } = require('electron');
 const path = require('node:path');
 const os = require('node:os');
-const { encodeCwd } = require('./lib/encodeCwd.cjs');
-const { extractJson } = require('./lib/extractJson.cjs');
-const { runClaudeP } = require('./lib/runClaudeP.cjs');
+const { encodeCwd } = require('./lib/util/encodeCwd.cjs');
+const { extractJson } = require('./lib/util/extractJson.cjs');
+const { runClaudeP } = require('./lib/claude/runClaudeP.cjs');
 const { writeJson } = require('./config.cjs');
 const config = require('./config.cjs');
 const { opsPath } = require('./lib/opsOwnership.cjs');

package/src/main/memoryTool.cjs

@@ -36,7 +36,7 @@ const { scoreMemories } = require('./lib/memoryStale.cjs');
 const MAX_FILE_BYTES = 1024 * 1024; // 1 MiB
 const MAX_ENTRIES = 1000;
 
-const { encodeCwd: encodeWorkspace } = require('./lib/encodeCwd.cjs');
+const { encodeCwd: encodeWorkspace } = require('./lib/util/encodeCwd.cjs');
 
 function memoryRoot() {
   return path.join(os.homedir(), '.claude', 'projects');

package/src/main/otel.cjs

@@ -8,14 +8,14 @@
  * plan text, and agent prompts are excluded unless `includeContent` is on
  * (matches upstream OTEL_LOG_USER_PROMPTS opt-in).
  *
- * Spans are POSTed as OTLP/HTTP JSON by lib/otlpTraceExporter.cjs (zero
+ * Spans are POSTed as OTLP/HTTP JSON by lib/telemetry/otlpTraceExporter.cjs (zero
  * dependencies). recordSpan() only queues; the exporter batches/sends on its
  * own unref()'d timer, so we never block the transcript flush. The app must
  * keep working without telemetry: a failed export is surfaced, never thrown.
  */
 
 const otelSettings = require('./otelSettings.cjs');
-const { createOtlpTraceExporter } = require('./lib/otlpTraceExporter.cjs');
+const { createOtlpTraceExporter } = require('./lib/telemetry/otlpTraceExporter.cjs');
 
 let exporter = null;
 let enabled = false;

package/src/main/pluginInstall.cjs

@@ -30,8 +30,8 @@ try {
 const path = require('node:path');
 const os = require('node:os');
 const fs = require('node:fs');
-const { cleanChildEnv, pathWithUserBins } = require('./lib/cleanEnv.cjs');
-const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claudeBin.cjs');
+const { cleanChildEnv, pathWithUserBins } = require('./lib/process/cleanEnv.cjs');
+const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claude/claudeBin.cjs');
 const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
 const { schemas } = require('./ipcSchemas.cjs');
 
@@ -229,6 +229,32 @@ async function install({ slug, marketplace }) {
   }
 }
 
+/**
+ * Refresh an already-installed plugin to the marketplace's current version.
+ * Subcommands confirmed from `claude plugin marketplace --help` / `claude plugin --help`:
+ * `claude plugin marketplace update <name>` then `claude plugin update <slug>@<name>`.
+ * Same pty spawn path as install(); no shell.
+ */
+async function update({ slug, marketplaceName }) {
+  if (typeof slug !== 'string' || !SLUG_RE.test(slug) || slug.length > 128 ||
+      typeof marketplaceName !== 'string' || !MKT_NAME_RE.test(marketplaceName) || marketplaceName.length > 128) {
+    return { ok: false, exitCode: -1, error: 'invalid slug or marketplace' };
+  }
+  if (inFlight.has(slug)) {
+    return { ok: false, exitCode: -1, error: 'install already in progress' };
+  }
+  inFlight.set(slug, null);
+  const register = (proc) => inFlight.set(slug, proc);
+  const unregister = () => inFlight.set(slug, null);
+  try {
+    const refreshed = await runStep({ slug, args: ['plugin', 'marketplace', 'update', marketplaceName], register, unregister });
+    if (!refreshed.ok) return refreshed;
+    return await runStep({ slug, args: ['plugin', 'update', `${slug}@${marketplaceName}`], register, unregister });
+  } finally {
+    inFlight.delete(slug);
+  }
+}
+
 function registerPluginInstallHandlers() {
   ipcMain.handle('plugins:install', async (_e, payload) => {
     // safeParse to preserve the existing `{ ok:false, exitCode:-1, error }`
@@ -257,4 +283,4 @@ function registerPluginInstallHandlers() {
   });
 }
 
-module.exports = { registerPluginInstallHandlers, attachWindow, install, bundledMarketplaceDir };
+module.exports = { registerPluginInstallHandlers, attachWindow, install, update, bundledMarketplaceDir };

package/src/main/projectBrief.cjs

@@ -9,12 +9,12 @@
  * surfaces (PRDs 838/840) read it via `projectBrief:get` and trigger
  * synthesis via `projectBrief:refresh`; this file is backend + preload only.
  *
- * Spawn pattern mirrors memoryAggregate.cjs (via the shared lib/runClaudeP.cjs
+ * Spawn pattern mirrors memoryAggregate.cjs (via the shared lib/claude/runClaudeP.cjs
  * helper it was extracted from): cost-gated (only fires on explicit
  * `refresh`), stdin closed, model pinned, hard timeout, SM_KG_INTERNAL=1 so
  * the prompt-logging hook skips it, brace-matching JSON extraction. Slot
  * pool: every refresh acquires a machine session slot from
- * lib/sessionSlots.cjs first (the same ≤3 `claude -p` pool scheduler jobs
+ * lib/scheduler/sessionSlots.cjs first (the same ≤3 `claude -p` pool scheduler jobs
  * and chat runs already share) and releases it in a finally.
  */
 
@@ -24,10 +24,10 @@ const { spawn } = require('node:child_process');
 const path = require('node:path');
 const os = require('node:os');
 const config = require('./config.cjs');
-const { encodeCwd } = require('./lib/encodeCwd.cjs');
-const { extractJson } = require('./lib/extractJson.cjs');
-const { runClaudeP } = require('./lib/runClaudeP.cjs');
-const sessionSlots = require('./lib/sessionSlots.cjs');
+const { encodeCwd } = require('./lib/util/encodeCwd.cjs');
+const { extractJson } = require('./lib/util/extractJson.cjs');
+const { runClaudeP } = require('./lib/claude/runClaudeP.cjs');
+const sessionSlots = require('./lib/scheduler/sessionSlots.cjs');
 const core = require('./lib/projectBriefCore.cjs');
 
 // Pinned explicitly per the automation model-pinning rule — same alias style

package/src/main/projectPages.cjs

@@ -6,7 +6,7 @@
  * `session-manager-operations/project-pages/`: `home.html` (written by the
  * `project_home_write` admin route) and `demo-video/index.html` (written by
  * the `project_demo_video_write` admin route) — both in
- * lib/projectHomeAdminRoutes.cjs. This module only reads them: get() returns
+ * lib/feedback-remote/projectHomeAdminRoutes.cjs. This module only reads them: get() returns
  * home.html's content plus the demo video's { path, mtimeMs }, and a
  * refcounted per-cwd watcher pushes `project-pages:changed` for either. It
  * never writes content (watch()'s mkdir creates an empty directory only).

package/src/main/promptSessionEvents.cjs

@@ -16,10 +16,10 @@ const config = require('./config.cjs');
 // activeIndexPath/withPathLock come from epicMint.cjs so this module's
 // read-modify-write of active-index.json (appendResponseEventIfKnown, below)
 // serializes through the EXACT SAME lock instance as ensureEpic/
-// appendPrdCreatedEvent and lib/activeIndexMerge.cjs's mergeActiveIndex — one
+// appendPrdCreatedEvent and lib/epic/activeIndexMerge.cjs's mergeActiveIndex — one
 // lock across all three writers of this file, not three independent maps
 // that could still interleave a stale read-modify-write past each other.
-const { activeIndexPath: promptSessionActiveIndexPath, withPathLock } = require('./lib/epicMint.cjs');
+const { activeIndexPath: promptSessionActiveIndexPath, withPathLock } = require('./lib/epic/epicMint.cjs');
 
 // IPC channel broadcast whenever an event is appended to a PromptSession's
 // chain from the main process (currently only the scheduler's response-event

package/src/main/pty.cjs

@@ -17,15 +17,15 @@ const path = require('node:path');
 const os = require('node:os');
 const fs = require('node:fs');
 const { addAllowedRoot } = require('./config.cjs');
-const { aliasedShellBin } = require('./lib/smProcNames.cjs');
-const { cleanChildEnv, pathWithUserBins } = require('./lib/cleanEnv.cjs');
+const { aliasedShellBin } = require('./lib/process/smProcNames.cjs');
+const { cleanChildEnv, pathWithUserBins } = require('./lib/process/cleanEnv.cjs');
 const { checkInsideHome } = require('./lib/insideHome.cjs');
-const { defaultShell } = require('./lib/defaultShell.cjs');
+const { defaultShell } = require('./lib/process/defaultShell.cjs');
 const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
-const opsErrorLog = require('./lib/opsErrorLog.cjs');
-const { planEpicSpawn } = require('./lib/epicSpawnPlan.cjs');
-const { resolveEpicSpawnCwd } = require('./lib/epicSpawnCwd.cjs');
-const telemetryCounters = require('./lib/telemetryCounters.cjs');
+const opsErrorLog = require('./lib/telemetry/opsErrorLog.cjs');
+const { planEpicSpawn } = require('./lib/epic/epicSpawnPlan.cjs');
+const { resolveEpicSpawnCwd } = require('./lib/epic/epicSpawnCwd.cjs');
+const telemetryCounters = require('./lib/telemetry/telemetryCounters.cjs');
 
 // Absolute path to the installed package root (src/main/ -> ../../), shown in
 // the remediation message so the user can cd there and rebuild.

package/src/main/queueOps.cjs

@@ -36,11 +36,11 @@ const { ipcMain } = require('electron');
 const { SCHEDULE_SLUG_RE: SLUG_RE, schemas } = require('./ipcSchemas.cjs');
 const logs = require('./logs.cjs');
 const config = require('./config.cjs');
-const { expandHome } = require('./lib/expandHome.cjs');
-const { HISTORY_RETENTION_MS } = require('./lib/schedulerConfig.cjs');
-const schedulerPaths = require('./lib/schedulerPaths.cjs');
+const { expandHome } = require('./lib/util/expandHome.cjs');
+const { HISTORY_RETENTION_MS } = require('./lib/scheduler/schedulerConfig.cjs');
+const schedulerPaths = require('./lib/scheduler/schedulerPaths.cjs');
 
-// Lazy: resolved via lib/schedulerPaths.cjs at each use (SM_SCHEDULER_HOME).
+// Lazy: resolved via lib/scheduler/schedulerPaths.cjs at each use (SM_SCHEDULER_HOME).
 const prdsArchiveDir = () => path.join(schedulerPaths.scheduledPlansRoot(), 'prds-archived');
 
 // ────────────────────────────────────────────── lint rules
@@ -125,8 +125,8 @@ const INTERACTIVE_AC_PATTERNS = [
   },
 ];
 
-const { splitFrontmatter } = require('./lib/prdFrontmatter.cjs');
-const { resolvePrdsDirs, resolvePrdWriteDir, listEpicPrdDirs } = require('./lib/prdLocations.cjs');
+const { splitFrontmatter } = require('./lib/prd/prdFrontmatter.cjs');
+const { resolvePrdsDirs, resolvePrdWriteDir, listEpicPrdDirs } = require('./lib/prd/prdLocations.cjs');
 
 // PRD 808: PRDS_DIR is now the LEGACY global dir — kept as a migration
 // source and search fallback for not-yet-migrated files. Live PRDs resolve

package/src/main/remoteClient.cjs

@@ -7,11 +7,11 @@
 
 const crypto = require('node:crypto');
 const path = require('node:path');
-const { claudeHome } = require('./lib/schedulerPaths.cjs');
-const { writeJsonAtomicSync, readJsonOrSync } = require('./lib/atomicFs.cjs');
-const { generateE2EKeyPair, deriveSessionKey, deriveSas, encryptBox, decryptBox } = require('./lib/remoteE2eCrypto.cjs');
+const { claudeHome } = require('./lib/scheduler/schedulerPaths.cjs');
+const { writeJsonAtomicSync, readJsonOrSync } = require('./lib/util/atomicFs.cjs');
+const { generateE2EKeyPair, deriveSessionKey, deriveSas, encryptBox, decryptBox } = require('./lib/feedback-remote/remoteE2eCrypto.cjs');
 const { ALLOWED_COMMANDS } = require('./ipcSchemas.cjs');
-const { relayClientAuth } = require('./lib/relayClientAuth.cjs');
+const { relayClientAuth } = require('./lib/feedback-remote/relayClientAuth.cjs');
 
 // Hard-coded wss:// — same relay URL as webRemote.cjs, no plaintext downgrade.
 const RELAY_WSS_URL = 'wss://bilko.run/projects/session-manager/relay';

package/src/main/remoteClientIpc.cjs

@@ -11,7 +11,7 @@ const os = require('node:os');
 const { ipcMain } = require('electron');
 const { z } = require('zod');
 const { remoteClient } = require('./remoteClient.cjs');
-const { relayClientAuth } = require('./lib/relayClientAuth.cjs');
+const { relayClientAuth } = require('./lib/feedback-remote/relayClientAuth.cjs');
 const { ALLOWED_COMMANDS } = require('./ipcSchemas.cjs');
 const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
 

package/src/main/runVerify.cjs

@@ -40,7 +40,8 @@
 const fs = require('node:fs');
 const path = require('node:path');
 const { execFileSync } = require('node:child_process');
-const { parsePrdFile } = require('./lib/prdFrontmatter.cjs');
+const { parsePrdFile } = require('./lib/prd/prdFrontmatter.cjs');
+const { isSatisfiedDepRow } = require('./lib/prd/depSlugResolve.cjs');
 
 const VERDICTS_SCHEMA_VERSION = 1;
 
@@ -468,7 +469,9 @@ function checkDeps(queueEntry, allJobs, prdBody) {
     // bare dep name that never matched any row, and ended up on disk with no
     // queue row at all.
     if (deps.length === 0) continue;
-    const unfinished = deps.find((d) => d.status !== 'completed');
+    // Same predicate as findBlockingDep — an auto-resolve skip the picker
+    // dispatched past must not be re-judged unmet here (same infinite re-run).
+    const unfinished = deps.find((d) => !isSatisfiedDepRow(d));
     if (unfinished) {
       return { ok: false, reason: `dependsOn: "${depSlug}" is ${unfinished.status} (need completed)` };
     }
@@ -488,7 +491,7 @@ function checkDeps(queueEntry, allJobs, prdBody) {
       if (matches.length === 0) continue; // unresolvable fragment — skip
 
       for (const dep of matches) {
-        if (dep.status !== 'completed') {
+        if (!isSatisfiedDepRow(dep)) {
           return {
             ok: false,
             reason: `PRD body dep "${frag}" → "${dep.slug}" is ${dep.status} (need completed)`,

package/src/main/scheduler/CLAUDE.md

@@ -0,0 +1,26 @@
+# src/main/scheduler/ — scoped context
+
+Pure, extracted pieces of `../scheduler.cjs` (the most-edited file). Scheduler-family helpers
+(dispatch loop, slots, gates, supervisors, queue store) live in [`../lib/scheduler/`](../lib/CLAUDE.md).
+Runtime diagnosis (stuck queue, `needs_review`, reap gate) is NOT here — see
+[`scheduler-operations.md`](../../../session-manager-operations/architecture/scheduler-operations.md).
+
+## Rules
+
+- **Spy seam:** call module functions through the module object (`mod.fn()`), never destructure them, so `vi.spyOn` works.
+- **New pure scheduler logic goes in a module here, not in `scheduler.cjs`** (which keeps state, IO and timers).
+
+## If you are changing X, edit Y
+
+| Changing | Edit |
+| --- | --- |
+| PRD file parsing, frontmatter, dir/file mtime cache | `prdParser.cjs` |
+| Per-project PRD dirs, slug containment, archive-on-complete, boot migration, queue-backup sweep | `prdPaths.cjs` |
+| `needs_review` / auto-fix / auto-reset eligibility, verdict sets, thresholds | `reviewLadder.cjs` |
+| Git status/stash/HEAD helpers, shared-tree guard, commit-guard, finalize-drop predicates | `gitTreeGuard.cjs` |
+| Starvation / blocked-chain classifiers, dispatch-idle clock | `starvation.cjs` |
+| Stall / stranded-row / overrun / wall-clock budget selectors, failure backoff, `dependsOn` history lookup | `budget.cjs` |
+| `spawnJob` / execution, `tickQueue`, dead-process reaper, poll loop, IPC handlers, admin routes, queue-mutating ladder rungs and watchdogs | `../scheduler.cjs` (by section banner) |
+
+Before adding to `scheduler.cjs`, check the table: a predicate or selector belongs above, the
+mutation that acts on it stays in `scheduler.cjs`.