claude-code-session-manager 0.35.8 → 0.35.10

package/dist/index.html

@@ -7,7 +7,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Newsreader:ital,opsz,wght@0,6..72,400;0,6..72,500;0,6..72,600;0,6..72,700;1,6..72,400&family=Geist:wght@300;400;500;600;700&family=IBM+Plex+Mono:wght@400;500;600&display=swap" rel="stylesheet">
-    <script type="module" crossorigin src="./assets/index-CCqF0xvC.js"></script>
+    <script type="module" crossorigin src="./assets/index-B1hI9l9p.js"></script>
     <link rel="modulepreload" crossorigin href="./assets/monaco-editor-BW5C4Iv1.js">
     <link rel="stylesheet" crossorigin href="./assets/monaco-editor-BTnBOi8r.css">
     <link rel="stylesheet" crossorigin href="./assets/index-C7NyYuXu.css">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-code-session-manager",
-  "version": "0.35.8",
+  "version": "0.35.10",
   "description": "Local cockpit for the Claude Code CLI — multi-tab terminal, full config surface, scheduler, voice dictation, and live observability.",
   "type": "module",
   "main": "src/main/index.cjs",

package/src/main/__tests__/runVerify.test.cjs

@@ -903,6 +903,25 @@ test('pass_no_commit: SCHEDULER_VERDICT: PASS but no commit landed → needs_rev
   }
 });
 
+test('pass_no_commit: fix-plan job (slug ^\\d+-fix-) with PASS but no commit is exempt → clean', async () => {
+  const tmp = makeTmpDir();
+  try {
+    const slug = '523-fix-bounded-fix-plan-retry';
+    writeLog(tmp, slug, noOpRunEvents('Verification complete — no code gap exists.\nSCHEDULER_VERDICT: PASS'));
+    const prdPath = writePrd(tmp, slug, '# Fix: bounded fix-plan retry');
+    const verdict = await verifyRun({
+      runDir: tmp,
+      prdPath,
+      queueEntry: { slug, status: 'running' },
+      allJobs: [],
+      committedDuringRun: false,
+    });
+    assert.equal(verdict.verdict, 'clean', `expected clean (fix-plan exemption), got ${verdict.verdict}: ${verdict.reason}`);
+  } finally {
+    rmdir(tmp);
+  }
+});
+
 // (e) halt + sentinel PASS → still halt (override must not apply to halt)
 test('halt result + sentinel PASS + committedDuringRun:true → still halt', async () => {
   const tmp = makeTmpDir();

package/src/main/__tests__/scheduler-autofix-select.test.cjs

@@ -8,7 +8,10 @@
 
 const { test } = require('node:test');
 const assert = require('node:assert/strict');
-const { selectAutoFixTargets, isUnresolvableNeedsReview } = require('../scheduler.cjs');
+const {
+  selectAutoFixTargets, isUnresolvableNeedsReview, isRescanCandidate,
+  healTargetForFix, isFixPlanBeyondDepthCap, MAX_INVESTIGATION_DEPTH,
+} = require('../scheduler.cjs');
 
 const noSiblingOnDisk = () => false;
 const noRunDir = () => null;
@@ -140,4 +143,74 @@ test('defaults parallelGroup to 99 when absent', () => {
   assert.strictEqual(seen[0], '99-fix-my-feature');
 });
 
+test('isRescanCandidate: needs_review + runId + no_verdict_sentinel → true (RESCANNABLE_VERDICTS includes it)', () => {
+  const job = makeJob({ verifierVerdict: 'no_verdict_sentinel' });
+  assert.strictEqual(isRescanCandidate(job), true);
+});
+
+test('isRescanCandidate: needs_review + runId + uncommitted_changes → false (git commit-guard verdict stays excluded)', () => {
+  const job = makeJob({ verifierVerdict: 'uncommitted_changes' });
+  assert.strictEqual(isRescanCandidate(job), false);
+});
+
+test('isRescanCandidate: needs_review + runId + pass_no_commit → true (fix-plan exemption can flip the verdict on rescan)', () => {
+  const job = makeJob({ verifierVerdict: 'pass_no_commit' });
+  assert.strictEqual(isRescanCandidate(job), true);
+});
+
+// ---- investigationDepth bound (fix-plan-of-a-fix-plan recursion cap) ----
+
+test('depth-1 (ordinary, no investigationDepth field) needs_review job is eligible', () => {
+  const jobs = [makeJob({ slug: '05-my-feature' })];
+  const result = selectAutoFixTargets(jobs, { fixSlugExists: noSiblingOnDisk });
+  assert.strictEqual(result.length, 1);
+});
+
+test('fix-plan job with investigationDepth: 2 is now ALSO eligible', () => {
+  const jobs = [makeJob({ slug: '05-fix-foo', investigationDepth: 2 })];
+  const result = selectAutoFixTargets(jobs, { fixSlugExists: noSiblingOnDisk });
+  assert.strictEqual(result.length, 1);
+});
+
+test('fix-plan job with investigationDepth: 3 is NOT eligible (bound holds)', () => {
+  const jobs = [makeJob({ slug: '05-fix-foo', investigationDepth: 3 })];
+  const result = selectAutoFixTargets(jobs, { fixSlugExists: noSiblingOnDisk });
+  assert.strictEqual(result.length, 0);
+});
+
+test('legacy fix-plan job with no investigationDepth field defaults to excluded (back-compat)', () => {
+  const jobs = [makeJob({ slug: '05-fix-foo' })];
+  const result = selectAutoFixTargets(jobs, { fixSlugExists: noSiblingOnDisk });
+  assert.strictEqual(result.length, 0);
+});
+
+test('isFixPlanBeyondDepthCap: non-fix-plan slug is never capped regardless of depth', () => {
+  assert.strictEqual(isFixPlanBeyondDepthCap('05-my-feature', 99), false);
+});
+
+test('isFixPlanBeyondDepthCap: fix-plan at depth 1 or 2 is not capped, depth 3 is', () => {
+  assert.strictEqual(isFixPlanBeyondDepthCap('05-fix-foo', 1), false);
+  assert.strictEqual(isFixPlanBeyondDepthCap('05-fix-foo', MAX_INVESTIGATION_DEPTH), false);
+  assert.strictEqual(isFixPlanBeyondDepthCap('05-fix-foo', MAX_INVESTIGATION_DEPTH + 1), true);
+});
+
+test('healTargetForFix: depth-2 fix-of-a-fix slug resolves back to the depth-1 fix job (521-fix-recorder-export-footer-redesign)', () => {
+  // Depth-1 fix job: originally authored to fix job 521, itself in needs_review.
+  const depth1FixJob = {
+    slug: '521-fix-recorder-export-footer-redesign',
+    status: 'needs_review',
+    parallelGroup: 521,
+    investigationDepth: 2,
+  };
+  const jobs = [depth1FixJob];
+  // spawnInvestigation's fix-slug formula: baseSlug strips only the leading
+  // numeric prefix (not "fix-"), so investigating this depth-1 fix job
+  // produces a depth-2 fix slug of the form "<group>-fix-fix-<rest>".
+  const baseSlug = depth1FixJob.slug.replace(/^\d+-/, '');
+  const depth2FixSlug = `${String(depth1FixJob.parallelGroup).padStart(2, '0')}-fix-${baseSlug}`;
+  assert.strictEqual(depth2FixSlug, '521-fix-fix-recorder-export-footer-redesign');
+  const resolved = healTargetForFix(depth2FixSlug, jobs);
+  assert.strictEqual(resolved, depth1FixJob);
+});
+
 console.log('scheduler-autofix-select tests: PASS');

package/src/main/index.cjs

@@ -434,6 +434,25 @@ ipcMain.handle('app:pick-directory', async () => {
 
 ipcMain.on('app:reboot-app', () => rebootApp());
 
+// Recorder export "Save to file…" (PRD 412) — native Save As dialog, written
+// directly since the path is user-chosen, not renderer input.
+ipcMain.handle('browser:save-recording', validated(schemas.browserSaveRecording, async ({ defaultName, text }) => {
+  try {
+    const result = await dialog.showSaveDialog(mainWindow, {
+      defaultPath: defaultName,
+      filters: [
+        { name: 'Markdown', extensions: ['md'] },
+        { name: 'All Files', extensions: ['*'] },
+      ],
+    });
+    if (result.canceled || !result.filePath) return { ok: false, canceled: true };
+    await fsp.writeFile(result.filePath, text, 'utf8');
+    return { ok: true, path: result.filePath };
+  } catch (e) {
+    return { ok: false, error: e && e.message ? e.message : String(e) };
+  }
+}));
+
 // Image paste — Ctrl+V in the Terminal pane. Reads the OS clipboard via
 // Electron's native API (renderer's navigator.clipboard.read() doesn't expose
 // raw image MIME types under contextIsolation), saves the bitmap to a temp
@@ -469,6 +488,16 @@ ipcMain.handle('clipboard:paste-text', async () => {
   }
 });
 
+// Recorder export "Copy to clipboard" (PRD 412) — write side.
+ipcMain.handle('clipboard:write-text', validated(schemas.clipboardWriteText, ({ text }) => {
+  try {
+    clipboard.writeText(text);
+    return { ok: true };
+  } catch (e) {
+    return { ok: false, error: e && e.message ? e.message : String(e) };
+  }
+}));
+
 // PRD 407 Capture panel — write side of paste-image's read. Writes a
 // screenshot capture to the OS clipboard as an image.
 ipcMain.handle('browser:copy-image', validated(schemas.browserCopyImage, ({ dataUrl }) => {

package/src/main/ipcSchemas.cjs

@@ -96,6 +96,19 @@ const browserCopyImage = z.object({
   dataUrl: z.string().min(1).max(50_000_000),
 });
 
+// Recorder export (PRD 412): write arbitrary recorded-flow text to the OS
+// clipboard, separate from the image-only browserCopyImage above.
+const clipboardWriteText = z.object({
+  text: z.string().max(1_000_000),
+});
+
+// Recorder export (PRD 412): native "Save As" dialog write, bypassing the
+// config.cjs write-boundary since the path is user-chosen via OS dialog.
+const browserSaveRecording = z.object({
+  defaultName: z.string().min(1).max(255),
+  text: z.string().max(1_000_000),
+});
+
 // PRD 407: binary-safe atomic write (browser:save-binary) for screenshot
 // captures — config:write-text is utf8-only.
 const browserSaveBinary = z.object({
@@ -621,6 +634,8 @@ module.exports = {
     browserCaptureSelection,
     browserCopyImage,
     browserSaveBinary,
+    clipboardWriteText,
+    browserSaveRecording,
     browserReplay,
     browserSetZoom,
     browserFind,

package/src/main/runVerify.cjs

@@ -636,7 +636,20 @@ async function verifyRun({ runDir, prdPath, queueEntry, allJobs = [], committedD
     // silently accepting a bare sentinel as proof of work done. Mutually
     // exclusive with the no_verdict_sentinel case above (sentinel === null
     // vs sentinel === 'pass'), kept as a separate sibling check for clarity.
-    if (sentinel === 'pass' && !committedDuringRun) {
+    //
+    // EXEMPTION: fix-plan jobs (slug matches ^\d+-fix-) are investigations —
+    // "I checked, the original work already landed correctly, nothing to
+    // change" is a legitimate, correct, common outcome for them, not a
+    // silent no-op bug. Applying this check to fix-plan jobs the same way as
+    // original feature/bugfix PRDs produced a false-positive cascade
+    // (2026-07-12: 523-fix-bounded-fix-plan-retry re-verified PRD 523, found
+    // it already fully implemented and committed, correctly declined to make
+    // a no-op commit, and printed a truthful PASS — but still got flagged
+    // needs_review). Original PRDs are expected to build something new, so a
+    // bare PASS with no commit from one is still a strong silent-failure
+    // signal and stays covered by this check.
+    const isFixPlanJob = /^\d+-fix-/.test(queueEntry?.slug || '');
+    if (sentinel === 'pass' && !committedDuringRun && !isFixPlanJob) {
       issues.push({
         verdict: 'pass_no_commit',
         reason: 'SCHEDULER_VERDICT: PASS but no commit landed during the run window — the run claims success but produced no code change',

package/src/main/scheduler.cjs

@@ -616,7 +616,7 @@ async function reconcile(state) {
   }
   for (const [slug, p] of onDisk) {
     if (seen.has(slug)) continue;
-    next.push({
+    const entry = {
       slug,
       title: p.title,
       cwd: p.cwd,
@@ -629,7 +629,16 @@ async function reconcile(state) {
       finishedAt: null,
       exitCode: null,
       error: null,
-    });
+    };
+    // Newly-discovered fix-plan PRD: stamp its investigationDepth relative to
+    // the original job it heals, so selectAutoFixTargets/spawnInvestigation
+    // can bound the fix-of-a-fix recursion (see MAX_INVESTIGATION_DEPTH).
+    // Non-fix-plan jobs get no explicit field — they read as depth 1 via `?? 1`.
+    if (isFixPlanSlug(slug)) {
+      const parent = healTargetForFix(slug, state.jobs);
+      entry.investigationDepth = parent ? (parent.investigationDepth ?? 1) + 1 : 2;
+    }
+    next.push(entry);
   }
   state.jobs = next.sort((a, b) => b.slug.localeCompare(a.slug));
   return state;
@@ -1244,8 +1253,8 @@ DO NOT attempt the fix. ONLY write the file. When the file exists, exit immediat
  * Skipped if the failed job is itself a fix-plan (avoids infinite recursion).
  */
 async function spawnInvestigation(failedJob, runDir) {
-  if (isFixPlanSlug(failedJob.slug)) {
-    console.log(`[scheduler] skip investigation: ${failedJob.slug} is itself a fix plan`);
+  if (isFixPlanBeyondDepthCap(failedJob.slug, failedJob.investigationDepth)) {
+    console.log(`[scheduler] skip investigation: ${failedJob.slug} is a fix plan at/beyond depth cap (depth=${failedJob.investigationDepth ?? 'none'})`);
     return { deferred: false };
   }
   if (investigationsInFlight >= MAX_CONCURRENT_INVESTIGATIONS) {
@@ -1924,8 +1933,40 @@ function selectHistoryJobs(jobs, limit) {
 // Transcript-scan verdicts that re-running verifyRun can re-evaluate. NOT
 // 'uncommitted_changes' — that comes from the git commit-guard, which verifyRun
 // does not inspect, so re-scanning it would always return 'clean' and wrongly
-// heal a genuinely-unfinished job.
-const RESCANNABLE_VERDICTS = new Set(['transcript_errors', 'verify_unavailable']);
+// heal a genuinely-unfinished job. 'no_verdict_sentinel' is included because
+// its raising condition (sentinel === null && !committedDuringRun) depends on
+// commit-detection, which committedInWindow() can fix retroactively (e.g. the
+// git-log --all scan added for missed non-HEAD commits) — rescanning lets a
+// job whose commit is now correctly detected clear on its own instead of
+// staying stuck in needs_review forever. 'pass_no_commit' is included because
+// verifyRun now exempts fix-plan jobs (slug ^\d+-fix-) from that check — a
+// fix-plan job flagged before that exemption shipped gets a genuinely
+// different verdict on rescan (2026-07-12: false-positive cascade where
+// investigation jobs correctly found "nothing to fix" but were flagged
+// anyway). For non-fix-plan jobs the exemption never applies, so rescanning
+// their pass_no_commit verdict is a harmless no-op (same facts, same verdict).
+const RESCANNABLE_VERDICTS = new Set(['transcript_errors', 'verify_unavailable', 'no_verdict_sentinel', 'pass_no_commit']);
+
+// Bounds fix-plan recursion: depth 1 = the original job, depth 2 = its fix
+// (gets exactly one follow-up investigation if it also lands in
+// needs_review), depth 3+ (a fix-of-a-fix-of-a-fix) is excluded. Shared by
+// selectAutoFixTargets and spawnInvestigation so both call sites agree on
+// one threshold.
+const MAX_INVESTIGATION_DEPTH = 2;
+
+/**
+ * True when a fix-plan job's investigationDepth is at or past the recursion
+ * cap and it must be excluded from auto-fix eligibility. A fix-plan job with
+ * no recorded investigationDepth (a job already in the queue before this
+ * depth tracking shipped) is treated as excluded too, preserving the
+ * pre-existing blanket-exclusion behavior for legacy jobs — no retroactive
+ * migration. Non-fix-plan slugs are never capped here. Exported for tests.
+ */
+function isFixPlanBeyondDepthCap(slug, investigationDepth) {
+  if (!isFixPlanSlug(slug)) return false;
+  if (investigationDepth == null) return true;
+  return investigationDepth >= MAX_INVESTIGATION_DEPTH + 1;
+}
 
 /**
  * Backfill a job's missing runId by scanning RUNS_DIR for a run directory
@@ -2014,7 +2055,7 @@ function selectAutoFixTargets(jobs, { fixSlugExists, resolveJobRunId = resolveRu
     if (job.status !== 'needs_review') return false;
     const runId = job.runId || resolveJobRunId(job);
     if (!runId) return false;
-    if (isFixPlanSlug(job.slug)) return false;
+    if (isFixPlanBeyondDepthCap(job.slug, job.investigationDepth)) return false;
     if (job.autoFixAttempted) {
       if (job.autoFixOutcome !== 'no-plan') return false;
       if ((job.autoFixRetries ?? 0) >= 1) return false;
@@ -2660,4 +2701,4 @@ const remote = {
   },
 };
 
-module.exports = { registerScheduleHandlers, attachWindow, init, ROOT, PRDS_DIR, selectHistoryJobs, parsePorcelain, FINISH_PROTOCOL, remote, pickNextBatch, pickForProject, reapDeadRunningJobs, pollRecoveryClearSource, memoryLimitedBatchSize, availableForJobs, reverifyNeedsReview, isRescanCandidate, isPromotableOriginal, selectAutoFixTargets, resolveRunId, isUnresolvableNeedsReview, healTargetForFix, buildInvestigationPrompt, committedInWindow };
+module.exports = { registerScheduleHandlers, attachWindow, init, ROOT, PRDS_DIR, selectHistoryJobs, parsePorcelain, FINISH_PROTOCOL, remote, pickNextBatch, pickForProject, reapDeadRunningJobs, pollRecoveryClearSource, memoryLimitedBatchSize, availableForJobs, reverifyNeedsReview, isRescanCandidate, isPromotableOriginal, selectAutoFixTargets, resolveRunId, isUnresolvableNeedsReview, healTargetForFix, buildInvestigationPrompt, committedInWindow, isFixPlanSlug, isFixPlanBeyondDepthCap, MAX_INVESTIGATION_DEPTH };

package/src/preload/api.d.ts

@@ -1066,6 +1066,13 @@ export interface SessionManagerAPI {
       | { ok: false; error: string }
     >;
     saveBinary: (path: string, base64: string) => Promise<{ ok: boolean; error?: string }>;
+    /** Opens a native "Save As" dialog and writes `text` to the chosen path directly
+     *  (bypasses config.cjs's write-boundary check — the path is user-chosen via OS dialog). */
+    saveRecording: (payload: { defaultName: string; text: string }) => Promise<
+      | { ok: true; path: string }
+      | { ok: false; canceled: true }
+      | { ok: false; error: string }
+    >;
     replay: (payload: {
       viewId: string;
       steps: RecordStep[];
@@ -1271,6 +1278,8 @@ export interface SessionManagerAPI {
     >;
     /** Write side — copies a Capture-panel screenshot data URL to the OS clipboard. */
     copyImage: (dataUrl: string) => Promise<{ ok: boolean; error?: string }>;
+    /** Write side — copies arbitrary text (e.g. a recorded flow export) to the OS clipboard. */
+    writeText: (text: string) => Promise<{ ok: boolean; error?: string }>;
   };
   memory: {
     /** List markdown memory entries for the given workspace (defaults to 'default'). */

package/src/preload/index.cjs

@@ -82,6 +82,7 @@ contextBridge.exposeInMainWorld('api', {
     captureDom: (payload) => ipcRenderer.invoke('browser:capture-dom', payload),
     captureShot: (viewId) => ipcRenderer.invoke('browser:capture-shot', { viewId }),
     saveBinary: (path, base64) => ipcRenderer.invoke('browser:save-binary', { path, base64 }),
+    saveRecording: (payload) => ipcRenderer.invoke('browser:save-recording', payload),
     replay: (payload) => ipcRenderer.invoke('browser:replay', payload),
     onReplayStep: (viewId, handler) => {
       const channel = `browser:replay-step:${viewId}`;
@@ -289,6 +290,7 @@ contextBridge.exposeInMainWorld('api', {
     pasteImage: () => ipcRenderer.invoke('clipboard:paste-image'),
     pasteText: () => ipcRenderer.invoke('clipboard:paste-text'),
     copyImage: (dataUrl) => ipcRenderer.invoke('browser:copy-image', { dataUrl }),
+    writeText: (text) => ipcRenderer.invoke('clipboard:write-text', { text }),
   },
   memory: {
     list: (workspace) => ipcRenderer.invoke('memory:list', workspace ? { workspace } : {}),