claude-code-session-manager 0.29.0 → 0.30.0

package/dist/index.html

@@ -7,7 +7,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Newsreader:ital,opsz,wght@0,6..72,400;0,6..72,500;0,6..72,600;0,6..72,700;1,6..72,400&family=Geist:wght@300;400;500;600;700&family=IBM+Plex+Mono:wght@400;500;600&display=swap" rel="stylesheet">
-    <script type="module" crossorigin src="./assets/index-qS7GdCsL.js"></script>
+    <script type="module" crossorigin src="./assets/index-BBlKMDCL.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/monaco-editor-BW5C4Iv1.js">
     <link rel="stylesheet" crossorigin href="./assets/monaco-editor-BTnBOi8r.css">
     <link rel="stylesheet" crossorigin href="./assets/index-DMIi9YZH.css">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-code-session-manager",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "description": "Local cockpit for the Claude Code CLI — multi-tab terminal, full config surface, scheduler, voice dictation, and live observability.",
   "type": "module",
   "main": "src/main/index.cjs",

package/src/main/kg.cjs

@@ -51,6 +51,11 @@ const BATCH = 20;                 // prompts per extraction call (also a per-pro
 const KNOWN_VOCAB = 200;          // top node names pre-seeded for dedup-at-extraction
 const MAX_TAIL_BYTES = 8 * 1024 * 1024;   // bound bytes scanned per ingest run
 const MAX_EXTRACTIONS_PER_RUN = 30;       // bound claude calls per run (cost/time)
+// prompts.jsonl is append-only and otherwise grows forever (observed 325 MB).
+// Once we're caught up past this size, rotate it to prompts.jsonl.1 (one backup
+// kept) and reset the cursor — extraction only ever needs the new tail, and the
+// already-extracted prompts live in the per-project graphs.
+const MAX_LOG_BYTES = 256 * 1024 * 1024;
 // Coalescing window before an auto-ingest after new prompts land. Units never
 // mix projects, and a project switch in the log closes the current batch — so
 // with concurrent sessions a short window yields 1-2-prompt batches and one
@@ -159,6 +164,30 @@ async function saveIngestState(s) {
   await writeJson(INGEST_STATE_PATH, s);
 }
 
+/**
+ * Rotate prompts.jsonl once it grows past MAX_LOG_BYTES. Only call when caught
+ * up (lastOffset >= size) so no unconsumed prompts are lost. Renames to a single
+ * `.1` backup (overwriting any prior one) and resets the cursor to 0; the
+ * UserPromptSubmit hook recreates prompts.jsonl on its next append. Best-effort:
+ * a failure leaves the log in place and is retried on the next caught-up cycle.
+ */
+async function rotateLogIfTooLarge(st, stat) {
+  if (!stat || stat.size < MAX_LOG_BYTES) return false;
+  const rotated = LOG_PATH + '.1';
+  try {
+    try { await fsp.unlink(rotated); } catch { /* no prior backup */ }
+    await fsp.rename(LOG_PATH, rotated);
+    st.lastOffset = 0;
+    st.updatedAt = new Date().toISOString();
+    await saveIngestState(st);
+    logger.writeLine({ scope: 'kg', level: 'info', message: 'rotated prompts.jsonl', meta: { rotatedBytes: stat.size, backup: rotated } });
+    return true;
+  } catch (e) {
+    logger.writeLine({ scope: 'kg', level: 'warn', message: 'log rotation failed', meta: { error: e?.message } });
+    return false;
+  }
+}
+
 /**
  * Per-project prompt-count sidecar: { [encodedCwd]: { count: number, cwd: string } }
  * Returns null when the file does not yet exist (triggers a one-time migration scan).
@@ -356,7 +385,19 @@ async function ingest() {
     try { stat = await fsp.stat(LOG_PATH); }
     catch { broadcast('kg:ingest-progress', { phase: 'done', ingesting: false, added: 0 }); return { ok: true, added: 0, note: 'no log yet' }; }
 
+    // Truncation/rotation recovery: if the log shrank below our watermark it was
+    // rotated or truncated out from under us — restart from the top of the new
+    // file rather than wedging forever at a stale offset.
+    if (stat.size < st.lastOffset) {
+      logger.writeLine({ scope: 'kg', level: 'info', message: 'log shrank; resetting ingest cursor', meta: { size: stat.size, lastOffset: st.lastOffset } });
+      st.lastOffset = 0;
+      st.updatedAt = new Date().toISOString();
+      await saveIngestState(st);
+    }
+
     if (stat.size <= st.lastOffset) {
+      // Caught up — a safe moment to rotate the log if it has grown too large.
+      await rotateLogIfTooLarge(st, stat);
       broadcast('kg:ingest-progress', { phase: 'done', ingesting: false, added: 0 });
       return { ok: true, added: 0, note: 'up to date' };
     }

package/src/main/lib/cleanEnv.cjs

@@ -1,5 +1,36 @@
+const os = require('node:os');
+const path = require('node:path');
+
 const SECRET_KEY_RE = /^(?:.*_)?(TOKEN|API_?KEY|SECRET|PASSWORD|AUTHORIZATION|COOKIE|REFRESH[_-]?TOKEN|ACCESS[_-]?TOKEN)$/i;
 
+/**
+ * Common user + Homebrew bin dirs to PREPEND to a spawned child's PATH.
+ * Electron can launch from Finder/Dock with a stripped PATH, and Apple Silicon
+ * Homebrew lives under /opt/homebrew — without these, `claude`, git, node, etc.
+ * are invisible to ptys and `claude -p` jobs on macOS. Single source of truth
+ * so pty.cjs and pluginInstall.cjs can't drift (one of them was missing
+ * /opt/homebrew and broke plugin install on Apple Silicon).
+ */
+function userBinDirs() {
+  const home = os.homedir();
+  return [
+    path.join(home, '.claude', 'local'),
+    path.join(home, '.local', 'bin'),
+    path.join(home, '.npm-global', 'bin'),
+    '/opt/homebrew/bin',
+    '/opt/homebrew/sbin',
+    '/usr/local/bin',
+    '/usr/bin',
+    '/bin',
+  ];
+}
+
+/** Electron's PATH prefixed with the user/Homebrew bin dirs — the value to put
+ *  in a spawned child's PATH so `claude`, node, git, etc. resolve on macOS. */
+function pathWithUserBins() {
+  return `${userBinDirs().join(':')}:${process.env.PATH || ''}`;
+}
+
 function cleanChildEnv(extra = {}) {
   const env = { ...process.env, ...extra };
   for (const k of Object.keys(env)) {
@@ -17,4 +48,4 @@ function cleanChildEnv(extra = {}) {
   return env;
 }
 
-module.exports = { cleanChildEnv };
+module.exports = { cleanChildEnv, userBinDirs, pathWithUserBins };

package/src/main/lib/credentials.cjs

@@ -5,7 +5,8 @@ const fs = require('node:fs');
 const path = require('node:path');
 const os = require('node:os');
 const { spawn, execFileSync } = require('node:child_process');
-const { cleanChildEnv } = require('./cleanEnv.cjs');
+const { cleanChildEnv, pathWithUserBins } = require('./cleanEnv.cjs');
+const { resolveClaudeBin } = require('./claudeBin.cjs');
 
 const CREDS_PATH = path.join(os.homedir(), '.claude', '.credentials.json');
 
@@ -185,7 +186,12 @@ function tryCliFallback() {
     const timer = setTimeout(() => settle({ ok: false, reason: 'timeout' }), 15_000);
     let child;
     try {
-      child = spawn('claude', ['--version'], { stdio: 'ignore', env: cleanChildEnv() });
+      // Resolve the absolute binary + inject Homebrew/user bins so this works
+      // even when Electron launched from Finder/Dock with a stripped PATH (mac).
+      child = spawn(resolveClaudeBin(), ['--version'], {
+        stdio: 'ignore',
+        env: cleanChildEnv({ PATH: pathWithUserBins() }),
+      });
     } catch (e) {
       clearTimeout(timer);
       return settle({ ok: false, reason: e?.message });

package/src/main/pluginInstall.cjs

@@ -21,7 +21,7 @@ const pty = require('node-pty');
 const path = require('node:path');
 const os = require('node:os');
 const fs = require('node:fs');
-const { cleanChildEnv } = require('./lib/cleanEnv.cjs');
+const { cleanChildEnv, pathWithUserBins } = require('./lib/cleanEnv.cjs');
 const { resolveClaudeBin } = require('./lib/claudeBin.cjs');
 const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
 const { schemas } = require('./ipcSchemas.cjs');
@@ -58,16 +58,8 @@ function send(channel, payload) {
 }
 
 function childEnv() {
-  const home = os.homedir();
-  const extraPath = [
-    path.join(home, '.local', 'bin'),
-    path.join(home, '.npm-global', 'bin'),
-    '/usr/local/bin',
-    '/usr/bin',
-    '/bin',
-  ].join(':');
   return cleanChildEnv({
-    PATH: `${extraPath}:${process.env.PATH || ''}`,
+    PATH: pathWithUserBins(),
     TERM: 'xterm-256color',
     FORCE_COLOR: '0', // strip ANSI so the renderer doesn't have to.
   });

package/src/main/pty.cjs

@@ -4,7 +4,7 @@ const path = require('node:path');
 const os = require('node:os');
 const fs = require('node:fs');
 const { addAllowedRoot } = require('./config.cjs');
-const { cleanChildEnv } = require('./lib/cleanEnv.cjs');
+const { cleanChildEnv, pathWithUserBins } = require('./lib/cleanEnv.cjs');
 const { checkInsideHome } = require('./lib/insideHome.cjs');
 const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
 
@@ -62,18 +62,11 @@ class PtyManager {
       return { pid: existing.proc.pid, cwd: existing.cwd, reattached: true };
     }
 
-    // Prefer `claude` on PATH; extend PATH with common user bin dirs since
-    // Electron can launch with a stripped environment.
-    const extraPath = [
-      path.join(os.homedir(), '.local', 'bin'),
-      path.join(os.homedir(), '.npm-global', 'bin'),
-      '/usr/local/bin',
-      '/usr/bin',
-      '/bin',
-    ].join(':');
-
+    // Prefer `claude` on PATH; extend PATH with common user + Homebrew bin dirs
+    // since Electron can launch with a stripped environment (Apple Silicon
+    // Homebrew is /opt/homebrew, absent from the default Electron PATH).
     const env = cleanChildEnv({
-      PATH: `${extraPath}:${process.env.PATH || ''}`,
+      PATH: pathWithUserBins(),
       TERM: 'xterm-256color',
       COLORTERM: 'truecolor',
       FORCE_COLOR: '1',

package/src/main/scheduler.cjs

@@ -48,7 +48,7 @@ const { randomUUID } = require('node:crypto');
 const { execFile } = require('node:child_process');
 const { ipcMain } = require('electron');
 const billing = require('./usage.cjs');
-const { cleanChildEnv } = require('./lib/cleanEnv.cjs');
+const { cleanChildEnv, pathWithUserBins } = require('./lib/cleanEnv.cjs');
 const supervisor = require('./supervisor.cjs');
 const { resolveClaudeBin } = require('./lib/claudeBin.cjs');
 const { readTail } = require('./lib/fileTail.cjs');
@@ -921,7 +921,9 @@ async function executeJob(job, runDir, defaultCwd, onPid) {
     // Strip Claude Code env and secrets that leak in when session-manager is
     // launched from a `claude` shell. CLAUDE_EFFORT=xhigh forces Opus and
     // overrides `--model sonnet`, so scheduled jobs burn Opus credits silently.
-    const childEnv = cleanChildEnv();
+    // PATH must include Homebrew/user bins or the job's node/git children ENOENT
+    // when Electron was launched from Finder/Dock on macOS (stripped PATH).
+    const childEnv = cleanChildEnv({ PATH: pathWithUserBins() });
 
     // Track whether the agent has emitted a `result` event in its JSONL stream.
     // null until seen; then one of "success" | "error_max_turns" | … per the
@@ -1230,7 +1232,7 @@ DO NOT attempt the fix. ONLY write the file. When the file exists, exit immediat
   }
 
   const claudeBin = resolveClaudeBin();
-  const childEnv = cleanChildEnv();
+  const childEnv = cleanChildEnv({ PATH: pathWithUserBins() }); // Homebrew/user bins for macOS
 
   // Investigation needs only a deadman watchdog — no idle-tail or result-tail
   // since investigations are short-running Opus probes with a hard ceiling.