dexto 1.14.5 → 2.0.0-beta.0

package/dist/cli/cloud/local-chats.d.ts

@@ -0,0 +1,73 @@
+import type { CloudRuntime } from './runtime.js';
+export type LocalChatSource = 'claude-code' | 'codex';
+export declare const LOCAL_CHAT_SOURCES: readonly LocalChatSource[];
+interface LocalChatMessage {
+    readonly createdAt: string;
+    readonly role: 'assistant' | 'user';
+    readonly text: string;
+}
+export interface LocalChat {
+    readonly cwd: string | null;
+    readonly gitBranch: string | null;
+    readonly id: string;
+    readonly messages: readonly LocalChatMessage[];
+    /** The transcript file it was read from. */
+    readonly path: string;
+    readonly source: LocalChatSource;
+    readonly startedAt: string;
+    readonly title: string;
+    readonly updatedAt: string;
+}
+/** What `dexto_chat_import` takes; its bounds are the server's too. */
+export interface ChatImportInput {
+    readonly cwd?: string;
+    readonly gitBranch?: string;
+    readonly messages: readonly LocalChatMessage[];
+    readonly source: LocalChatSource;
+    readonly sourceSessionId: string;
+    readonly title: string;
+}
+export declare const MAX_IMPORT_MESSAGES = 2000;
+export declare const MAX_MESSAGE_CHARS = 64000;
+/**
+ * A Claude Code session file: one Agent SDK message per line (`type` `user` or `assistant`, with
+ * Anthropic `message.content`), plus `summary` lines that title it. Sidechain (subagent) and meta
+ * lines are left out, as is thinking.
+ */
+export declare function parseClaudeCodeTranscript(text: string, file: string): LocalChat | null;
+/**
+ * A Codex rollout: `{timestamp, type, payload}` lines, as `codex-rs/history` writes them. The
+ * `session_meta` line names the thread; `response_item` lines carry messages and tool calls.
+ * Developer and system messages, injected context and reasoning are left out.
+ */
+export declare function parseCodexRollout(text: string, file: string): LocalChat | null;
+export declare function redactSecrets(text: string): {
+    counts: Record<string, number>;
+    text: string;
+};
+type PreparedImport = {
+    readonly input: ChatImportInput;
+    readonly kind: 'ready';
+    /** How many of each kind of secret were redacted, counted from the markers sent. */
+    readonly redactions: Readonly<Record<string, number>>;
+    /** How many messages were cut to the size limit. */
+    readonly truncated: number;
+} | {
+    readonly kind: 'skipped';
+    readonly reason: string;
+};
+/** The chat as it is sent: redacted, each message within the size limit, or why it can't go. */
+export declare function toImportInput(chat: LocalChat): PreparedImport;
+export interface LocalChatQuery {
+    /** Another sessions folder to read instead of the source's own. */
+    readonly dir: string | null;
+    /** Keep sessions whose working directory is this folder or inside it. */
+    readonly folder: string | null;
+    /** Keep sessions with a turn at or after this date. */
+    readonly since: string | null;
+    readonly source: LocalChatSource;
+}
+/** The source's sessions on this machine that match the query, newest first. */
+export declare function findLocalChats(runtime: Pick<CloudRuntime, 'environment' | 'homeDirectory'>, query: LocalChatQuery): Promise<LocalChat[]>;
+export {};
+//# sourceMappingURL=local-chats.d.ts.map

package/dist/cli/cloud/local-chats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-chats.d.ts","sourceRoot":"","sources":["../../../src/cli/cloud/local-chats.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;AACtD,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAA6B,CAAC;AAEvF,UAAU,gBAAgB;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,4CAA4C;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC9B;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,mBAAmB,OAAQ,CAAC;AACzC,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAqJxC;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAgDtF;AAyBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CA0D9E;AAsCD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAgB5F;AAED,KAAK,cAAc,GACb;IACI,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,oFAAoF;IACpF,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC9B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,cAAc,CA+B7D;AAgBD,MAAM,WAAW,cAAc;IAC3B,mEAAmE;IACnE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CACpC;AAkBD,gFAAgF;AAChF,wBAAsB,cAAc,CAChC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,eAAe,CAAC,EAC5D,KAAK,EAAE,cAAc,GACtB,OAAO,CAAC,SAAS,EAAE,CAAC,CAsBtB"}

package/dist/cli/cloud/local-chats.js

@@ -0,0 +1,441 @@
+// Reads Claude Code and Codex chats on this machine into redacted, bounded turns to import.
+import { readdir, readFile, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { UsageError } from './command.js';
+export const LOCAL_CHAT_SOURCES = ['claude-code', 'codex'];
+export const MAX_IMPORT_MESSAGES = 2_000;
+export const MAX_MESSAGE_CHARS = 64_000;
+const MAX_IMPORT_CHARS = 4_000_000;
+const MAX_TITLE_CHARS = 200;
+const MAX_CWD_CHARS = 1_024;
+const MAX_BRANCH_CHARS = 255;
+/** How much of one tool call's input or result an imported chat keeps. */
+const MAX_TOOL_CHARS = 4_000;
+/** A transcript file larger than this is not read. */
+const MAX_FILE_BYTES = 64 * 1024 * 1024;
+const SOURCE_SESSION_ID = /^[A-Za-z0-9._:-]{1,200}$/u;
+// ---------------------------------------------------------------------------------------------
+// Turns
+// ---------------------------------------------------------------------------------------------
+/**
+ * Collects turns as a chat shows them: each person's message, then one assistant message holding
+ * everything the agent said and ran until the next one.
+ */
+function createTurns() {
+    const messages = [];
+    let assistant = null;
+    let lastAt = null;
+    const flush = () => {
+        if (assistant !== null && assistant.parts.length > 0)
+            messages.push({
+                createdAt: assistant.createdAt,
+                role: 'assistant',
+                text: assistant.parts.join('\n\n'),
+            });
+        assistant = null;
+    };
+    return {
+        assistant(text, createdAt) {
+            if (text.trim() === '')
+                return;
+            assistant ??= { createdAt, parts: [] };
+            assistant.parts.push(text.trim());
+            lastAt = createdAt;
+        },
+        /** The turns, and when the last thing in them happened. */
+        done() {
+            flush();
+            return { lastAt, messages };
+        },
+        user(text, createdAt) {
+            if (text.trim() === '')
+                return;
+            flush();
+            messages.push({ createdAt, role: 'user', text: text.trim() });
+            lastAt = createdAt;
+        },
+    };
+}
+function truncate(text, max) {
+    if (text.length <= max)
+        return text;
+    const marker = `\n… [${text.length - max} more characters left out]`;
+    return `${text.slice(0, Math.max(0, max - marker.length))}${marker}`;
+}
+/** Text in a fence no backtick run inside it can close. */
+function fenced(text) {
+    const longest = Math.max(2, ...[...text.matchAll(/`+/gu)].map((run) => run[0].length));
+    const fence = '`'.repeat(longest + 1);
+    return `${fence}\n${text}\n${fence}`;
+}
+/** Redacted whole, then cut: a cut can leave a secret no pattern still matches. */
+function toolBody(text) {
+    return fenced(truncate(redactSecrets(text).text, MAX_TOOL_CHARS));
+}
+function toolCallText(name, input) {
+    const body = typeof input === 'string' ? prettyJson(input) : JSON.stringify(input ?? null, null, 2);
+    return `**Tool call: ${name}**\n${toolBody(body)}`;
+}
+function toolResultText(output) {
+    return `**Tool result**\n${toolBody(output)}`;
+}
+/** A JSON string pretty-printed, or as it is when it isn't JSON. */
+function prettyJson(text) {
+    try {
+        return JSON.stringify(JSON.parse(text), null, 2);
+    }
+    catch {
+        return text;
+    }
+}
+function firstLine(text) {
+    const line = text.split('\n').find((each) => each.trim() !== '') ?? '';
+    return truncate(line.trim(), 80);
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function stringField(value, key) {
+    const field = value[key];
+    return typeof field === 'string' && field !== '' ? field : null;
+}
+/** Each line that is a JSON object; a torn or foreign line is left out. */
+function jsonLines(text) {
+    return text.split('\n').flatMap((line) => {
+        if (line.trim() === '')
+            return [];
+        try {
+            const value = JSON.parse(line);
+            return isRecord(value) ? [value] : [];
+        }
+        catch {
+            return [];
+        }
+    });
+}
+function validTime(value) {
+    if (value === null)
+        return null;
+    const time = new Date(value);
+    return Number.isNaN(time.getTime()) ? null : time.toISOString();
+}
+function finishChat(fields, { lastAt, messages }) {
+    const first = messages[0];
+    if (first === undefined || lastAt === null || !messages.some((m) => m.role === 'user'))
+        return null;
+    const firstUser = messages.find((message) => message.role === 'user');
+    return {
+        ...fields,
+        messages,
+        startedAt: first.createdAt,
+        title: truncate(fields.title ?? firstLine(firstUser?.text ?? 'Imported chat'), 200),
+        updatedAt: lastAt,
+    };
+}
+// ---------------------------------------------------------------------------------------------
+// Claude Code
+// ---------------------------------------------------------------------------------------------
+/** What Claude Code writes as a `user` line but the person never typed: slash commands and their output. */
+const CLAUDE_CODE_INJECTED = /^\s*<(command-name|command-message|local-command-[a-z]+)>/u;
+/**
+ * A Claude Code session file: one Agent SDK message per line (`type` `user` or `assistant`, with
+ * Anthropic `message.content`), plus `summary` lines that title it. Sidechain (subagent) and meta
+ * lines are left out, as is thinking.
+ */
+export function parseClaudeCodeTranscript(text, file) {
+    const turns = createTurns();
+    let sessionId = null;
+    let cwd = null;
+    let gitBranch = null;
+    let title = null;
+    for (const line of jsonLines(text)) {
+        if (line.type === 'summary') {
+            title ??= stringField(line, 'summary');
+            continue;
+        }
+        if (line.type !== 'user' && line.type !== 'assistant')
+            continue;
+        if (line.isSidechain === true || line.isMeta === true)
+            continue;
+        const message = line.message;
+        const at = validTime(stringField(line, 'timestamp'));
+        if (!isRecord(message) || at === null)
+            continue;
+        sessionId ??= stringField(line, 'sessionId');
+        cwd ??= stringField(line, 'cwd');
+        gitBranch ??= stringField(line, 'gitBranch');
+        const content = message.content;
+        if (typeof content === 'string') {
+            if (line.type === 'assistant')
+                turns.assistant(content, at);
+            else if (!CLAUDE_CODE_INJECTED.test(content))
+                turns.user(content, at);
+            continue;
+        }
+        if (!Array.isArray(content))
+            continue;
+        for (const block of content) {
+            if (!isRecord(block))
+                continue;
+            if (block.type === 'text' && typeof block.text === 'string') {
+                if (line.type === 'assistant')
+                    turns.assistant(block.text, at);
+                else if (!CLAUDE_CODE_INJECTED.test(block.text))
+                    turns.user(block.text, at);
+            }
+            else if (block.type === 'tool_use') {
+                turns.assistant(toolCallText(stringField(block, 'name') ?? 'tool', block.input), at);
+            }
+            else if (block.type === 'tool_result') {
+                turns.assistant(toolResultText(claudeToolResultText(block.content)), at);
+            }
+            else if (block.type === 'image' && line.type === 'user') {
+                turns.user('[An image was attached here; it was not imported.]', at);
+            }
+        }
+    }
+    const id = sessionId ?? path.basename(file, '.jsonl');
+    return finishChat({ cwd, gitBranch, id, path: file, source: 'claude-code', title }, turns.done());
+}
+function claudeToolResultText(content) {
+    if (typeof content === 'string')
+        return content;
+    if (!Array.isArray(content))
+        return '';
+    return content
+        .map((part) => isRecord(part) && typeof part.text === 'string'
+        ? part.text
+        : isRecord(part) && part.type === 'image'
+            ? '[image]'
+            : '')
+        .filter((part) => part !== '')
+        .join('\n');
+}
+// ---------------------------------------------------------------------------------------------
+// Codex
+// ---------------------------------------------------------------------------------------------
+/** Context Codex sends as `user` messages that the person never typed. */
+const CODEX_INJECTED = /^\s*(<environment_context>|<user_instructions>|<permissions instructions>|<turn_aborted>|# AGENTS\.md instructions)/u;
+/**
+ * A Codex rollout: `{timestamp, type, payload}` lines, as `codex-rs/history` writes them. The
+ * `session_meta` line names the thread; `response_item` lines carry messages and tool calls.
+ * Developer and system messages, injected context and reasoning are left out.
+ */
+export function parseCodexRollout(text, file) {
+    const turns = createTurns();
+    let id = null;
+    let cwd = null;
+    let gitBranch = null;
+    for (const line of jsonLines(text)) {
+        const payload = line.payload;
+        if (!isRecord(payload))
+            continue;
+        if (line.type === 'session_meta') {
+            id ??= stringField(payload, 'id');
+            cwd ??= stringField(payload, 'cwd');
+            if (isRecord(payload.git))
+                gitBranch ??= stringField(payload.git, 'branch');
+            continue;
+        }
+        const at = validTime(stringField(line, 'timestamp'));
+        if (line.type !== 'response_item' || at === null)
+            continue;
+        switch (payload.type) {
+            case 'message': {
+                const said = codexContentText(payload.content);
+                if (payload.role === 'user' && !CODEX_INJECTED.test(said))
+                    turns.user(said, at);
+                if (payload.role === 'assistant')
+                    turns.assistant(said, at);
+                break;
+            }
+            case 'function_call':
+                turns.assistant(toolCallText(stringField(payload, 'name') ?? 'tool', payload.arguments ?? ''), at);
+                break;
+            case 'custom_tool_call':
+                turns.assistant(toolCallText(stringField(payload, 'name') ?? 'tool', payload.input ?? ''), at);
+                break;
+            case 'local_shell_call': {
+                const action = isRecord(payload.action) ? payload.action : {};
+                const command = Array.isArray(action.command) ? action.command : [];
+                turns.assistant(toolCallText('shell', { command }), at);
+                break;
+            }
+            case 'function_call_output':
+            case 'custom_tool_call_output':
+                turns.assistant(toolResultText(codexOutputText(payload.output)), at);
+                break;
+        }
+    }
+    return finishChat({
+        cwd,
+        gitBranch,
+        id: id ?? path.basename(file, '.jsonl'),
+        path: file,
+        source: 'codex',
+        title: null,
+    }, turns.done());
+}
+function codexContentText(content) {
+    if (!Array.isArray(content))
+        return '';
+    return content
+        .map((part) => (isRecord(part) && typeof part.text === 'string' ? part.text : ''))
+        .filter((part) => part !== '')
+        .join('\n');
+}
+function codexOutputText(output) {
+    if (typeof output === 'string')
+        return output;
+    if (isRecord(output) && typeof output.content === 'string')
+        return output.content;
+    return codexContentText(output);
+}
+// ---------------------------------------------------------------------------------------------
+// Redaction and bounds
+// ---------------------------------------------------------------------------------------------
+/** Credential shapes, most specific first; each match becomes `[redacted:<kind>]`. */
+const SECRET_PATTERNS = [
+    ['private_key', /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/gu],
+    ['secret_key', /\bsk-[A-Za-z0-9_-]{20,}/gu],
+    ['github_token', /\b(?:gh[pousr]_[A-Za-z0-9]{36,}|github_pat_[A-Za-z0-9_]{22,})/gu],
+    ['aws_access_key', /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/gu],
+    ['slack_token', /\bxox[abprs]-[A-Za-z0-9-]{10,}/gu],
+    ['google_api_key', /\bAIza[0-9A-Za-z_-]{35}/gu],
+    ['jwt', /\beyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/gu],
+    ['bearer_token', /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}/gu],
+];
+/** `password = value` and the like: the name stays, the value goes. */
+const SECRET_ASSIGNMENT = /\b((?:[A-Za-z0-9_]*_)?(?:password|passwd|secret|token|api[_-]?key)["']?\s*[:=]\s*["']?)([^\s"'[]{8,})/giu;
+const REDACTED_MARKER = /\[redacted:([a-z_]+)\]/gu;
+export function redactSecrets(text) {
+    const counts = {};
+    const count = (kind) => {
+        counts[kind] = (counts[kind] ?? 0) + 1;
+    };
+    let redacted = text;
+    for (const [kind, pattern] of SECRET_PATTERNS)
+        redacted = redacted.replace(pattern, () => {
+            count(kind);
+            return `[redacted:${kind}]`;
+        });
+    redacted = redacted.replace(SECRET_ASSIGNMENT, (_match, name) => {
+        count('assignment');
+        return `${name}[redacted:assignment]`;
+    });
+    return { counts, text: redacted };
+}
+/** The chat as it is sent: redacted, each message within the size limit, or why it can't go. */
+export function toImportInput(chat) {
+    if (!SOURCE_SESSION_ID.test(chat.id))
+        return { kind: 'skipped', reason: "Its session id isn't one Dexto takes." };
+    if (chat.messages.length > MAX_IMPORT_MESSAGES)
+        return { kind: 'skipped', reason: `It has more than ${MAX_IMPORT_MESSAGES} messages.` };
+    let truncated = 0;
+    let total = 0;
+    const messages = chat.messages.map((message) => {
+        const { text } = redactSecrets(message.text);
+        if (text.length > MAX_MESSAGE_CHARS)
+            truncated += 1;
+        const bounded = truncate(text, MAX_MESSAGE_CHARS);
+        total += bounded.length;
+        return { createdAt: message.createdAt, role: message.role, text: bounded };
+    });
+    if (total > MAX_IMPORT_CHARS)
+        return {
+            kind: 'skipped',
+            reason: `It has more than ${MAX_IMPORT_CHARS.toLocaleString('en-US')} characters.`,
+        };
+    const title = redactSecrets(chat.title).text.slice(0, MAX_TITLE_CHARS);
+    const cwd = chat.cwd === null ? null : redactSecrets(chat.cwd).text;
+    const gitBranch = chat.gitBranch === null ? null : redactSecrets(chat.gitBranch).text;
+    const input = {
+        ...(cwd === null || cwd.length > MAX_CWD_CHARS ? {} : { cwd }),
+        ...(gitBranch === null || gitBranch.length > MAX_BRANCH_CHARS ? {} : { gitBranch }),
+        messages,
+        source: chat.source,
+        sourceSessionId: chat.id,
+        title: title.trim() === '' ? 'Imported chat' : title,
+    };
+    return { input, kind: 'ready', redactions: redactionCounts(input), truncated };
+}
+/** Each `[redacted:<kind>]` in what is sent, including those made while reading tool output. */
+function redactionCounts(input) {
+    const counts = {};
+    const sent = [input.title, input.cwd ?? '', input.gitBranch ?? ''];
+    for (const text of [...sent, ...input.messages.map((message) => message.text)])
+        for (const [, kind = ''] of text.matchAll(REDACTED_MARKER))
+            counts[kind] = (counts[kind] ?? 0) + 1;
+    return counts;
+}
+/** Where a source keeps its sessions on this machine. */
+function localChatsFolder(runtime, source) {
+    if (source === 'claude-code')
+        return path.join(runtime.environment.CLAUDE_CONFIG_DIR ?? path.join(runtime.homeDirectory, '.claude'), 'projects');
+    return path.join(runtime.environment.CODEX_HOME ?? path.join(runtime.homeDirectory, '.codex'), 'sessions');
+}
+/** The source's sessions on this machine that match the query, newest first. */
+export async function findLocalChats(runtime, query) {
+    if (query.dir !== null)
+        await readdir(query.dir).catch(() => {
+            throw new UsageError(`--dir ${query.dir} is not a folder this can read.`);
+        });
+    const folder = query.dir ?? localChatsFolder(runtime, query.source);
+    const since = query.since === null ? null : new Date(query.since);
+    const files = query.source === 'claude-code' ? await claudeCodeFiles(folder) : await codexFiles(folder);
+    const parse = query.source === 'claude-code' ? parseClaudeCodeTranscript : parseCodexRollout;
+    const within = query.folder === null ? null : path.resolve(query.folder);
+    const chats = [];
+    for (const file of files) {
+        const stats = await stat(file).catch(() => null);
+        if (stats === null || stats.size > MAX_FILE_BYTES)
+            continue;
+        const chat = parse(await readFile(file, 'utf8'), file);
+        if (chat === null)
+            continue;
+        if (since !== null && new Date(chat.updatedAt) < since)
+            continue;
+        if (within !== null && !insideFolder(chat.cwd, within))
+            continue;
+        chats.push(chat);
+    }
+    return chats.sort((left, right) => right.updatedAt.localeCompare(left.updatedAt));
+}
+function insideFolder(cwd, folder) {
+    if (cwd === null)
+        return false;
+    const relative = path.relative(folder, cwd);
+    return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+}
+async function entries(folder) {
+    return await readdir(folder, { withFileTypes: true }).catch(() => []);
+}
+/** `projects/<project>/<session>.jsonl`; deeper files are a session's subagents. */
+async function claudeCodeFiles(folder) {
+    const files = [];
+    for (const project of await entries(folder)) {
+        if (!project.isDirectory())
+            continue;
+        for (const file of await entries(path.join(folder, project.name)))
+            if (file.isFile() && file.name.endsWith('.jsonl'))
+                files.push(path.join(folder, project.name, file.name));
+    }
+    return files;
+}
+/** `sessions/YYYY/MM/DD/rollout-*.jsonl`; compressed rollouts are left out. */
+async function codexFiles(folder) {
+    const files = [];
+    const visit = async (dir, depth) => {
+        for (const entry of await entries(dir)) {
+            const full = path.join(dir, entry.name);
+            if (entry.isDirectory() && depth < 3)
+                await visit(full, depth + 1);
+            else if (entry.isFile() &&
+                entry.name.startsWith('rollout-') &&
+                entry.name.endsWith('.jsonl'))
+                files.push(full);
+        }
+    };
+    await visit(folder, 0);
+    return files;
+}

package/dist/cli/cloud/output.d.ts

@@ -0,0 +1,34 @@
+import type { CloudRuntime } from './runtime.js';
+export interface Column<Row> {
+    readonly header: string;
+    readonly value: (row: Row) => string | number | boolean | null | undefined;
+}
+export interface Output {
+    /** Whether records and lists print as JSON. */
+    readonly json: boolean;
+    /**
+     * Whether content, such as a file, a command's output or a model's reply, prints as its JSON
+     * record: only with an explicit --json, so piped content stays intact.
+     */
+    readonly jsonContent: boolean;
+    /** A page of a list: a table, plus how to read the next page when there is one. */
+    list<Row>(page: ListPage<Row>, columns: readonly Column<Row>[]): void;
+    /** One resource: its fields, one per line. */
+    record(value: unknown): void;
+    /** A line for people; JSON output prints the value instead. */
+    result(value: unknown, text: string): void;
+    /** Progress and hints, on stderr so stdout stays parseable. */
+    note(text: string): void;
+}
+/** A list, paged or not: some `/v1` lists return everything at once. */
+export type ListPage<Row> = {
+    readonly data: readonly Row[];
+} | {
+    readonly data: readonly Row[];
+    readonly has_more: boolean;
+    readonly next_after: string | number | null;
+};
+/** `json` and `table` as asked; `auto` is tables at a terminal and JSON anywhere else. */
+export type OutputFormat = 'auto' | 'json' | 'table';
+export declare function createOutput(runtime: CloudRuntime, format: OutputFormat): Output;
+//# sourceMappingURL=output.d.ts.map

package/dist/cli/cloud/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../src/cli/cloud/output.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,WAAW,MAAM,CAAC,GAAG;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;CAC9E;AAED,MAAM,WAAW,MAAM;IACnB,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,mFAAmF;IACnF,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC;IACtE,8CAA8C;IAC9C,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3C,+DAA+D;IAC/D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wEAAwE;AACxE,MAAM,MAAM,QAAQ,CAAC,GAAG,IAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,EAAE,CAAA;CAAE,GACjC;IACI,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,EAAE,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CAC/C,CAAC;AAER,0FAA0F;AAC1F,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAErD,wBAAgB,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,CAiChF"}

package/dist/cli/cloud/output.js

@@ -0,0 +1,76 @@
+// Prints API values: JSON for agents (--json, or stdout not a terminal), tables for people.
+import chalk from 'chalk';
+export function createOutput(runtime, format) {
+    const json = format === 'json' || (format === 'auto' && !runtime.stdoutIsTerminal);
+    const color = runtime.color;
+    const printJson = (value) => {
+        runtime.writeOutput(`${JSON.stringify(value, null, 2)}\n`);
+    };
+    return {
+        json,
+        jsonContent: format === 'json',
+        list(page, columns) {
+            if (json)
+                return printJson(page);
+            if (page.data.length === 0) {
+                runtime.writeOutput(`${dim('None.', color)}\n`);
+                return;
+            }
+            runtime.writeOutput(renderTable(page.data, columns, color));
+            if ('next_after' in page && page.has_more && page.next_after !== null)
+                runtime.writeError(`${dim(`More results: add --after ${String(page.next_after)}`, color)}\n`);
+        },
+        note(text) {
+            runtime.writeError(`${dim(text, color)}\n`);
+        },
+        record(value) {
+            if (json)
+                return printJson(value);
+            runtime.writeOutput(renderRecord(value, color));
+        },
+        result(value, text) {
+            if (json)
+                return printJson(value);
+            runtime.writeOutput(`${text}\n`);
+        },
+    };
+}
+function renderTable(rows, columns, color) {
+    const cells = rows.map((row) => columns.map((column) => cell(column.value(row))));
+    const widths = columns.map((column, index) => Math.max(column.header.length, ...cells.map((row) => (row[index] ?? '').length)));
+    const line = (values) => values
+        .map((value, index) => index === values.length - 1 ? value : value.padEnd(widths[index] ?? 0))
+        .join('  ')
+        .trimEnd();
+    const header = line(columns.map((column) => column.header.toUpperCase()));
+    return `${color ? chalk.bold(header) : header}\n${cells.map(line).join('\n')}\n`;
+}
+/** Top-level fields aligned; nested values as compact JSON. */
+function renderRecord(value, color) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return `${JSON.stringify(value, null, 2)}\n`;
+    const entries = Object.entries(value);
+    const width = Math.max(...entries.map(([key]) => key.length));
+    return `${entries
+        .map(([key, field]) => `${dim(key.padEnd(width), color)}  ${recordField(field)}`)
+        .join('\n')}\n`;
+}
+function recordField(value) {
+    if (value === null)
+        return '-';
+    if (typeof value === 'string')
+        return value.includes('\n') ? JSON.stringify(value) : value;
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return String(value);
+    return JSON.stringify(value);
+}
+const MAX_CELL = 60;
+function cell(value) {
+    if (value === null || value === undefined)
+        return '-';
+    const text = String(value).replace(/\s+/gu, ' ');
+    return text.length > MAX_CELL ? `${text.slice(0, MAX_CELL - 1)}…` : text;
+}
+function dim(text, color) {
+    return color ? chalk.dim(text) : text;
+}

package/dist/cli/cloud/run.d.ts

@@ -0,0 +1,26 @@
+import { type Command, type OptionSpec } from './command.js';
+import type { SignInFor } from './commands/account.js';
+import type { Connection, ConnectionOverrides } from './connection.js';
+import type { CloudRuntime } from './runtime.js';
+/** One area of commands in help, such as `projects` under `cloud`. */
+export interface Group {
+    readonly name: string;
+    readonly summary: string;
+}
+/** What the commands run against: injected so tests use a fake server and sign-in. */
+export interface CloudHost {
+    readonly commands: readonly Command[];
+    /** Help's areas by the words before them, such as `cloud`. */
+    readonly groups: Readonly<Record<string, readonly Group[]>>;
+    readonly runtime: CloudRuntime;
+    /** The connection for these overrides; null when signed out. */
+    readonly resolveConnection: (overrides: ConnectionOverrides) => Promise<Connection | null>;
+    /** The sign-in context login, logout, whoami and accounts run in. */
+    readonly signIn: SignInFor;
+    /** Signs the profile in again asking for `scope`; true once it did. */
+    readonly signInForScope: (overrides: ConnectionOverrides, scope: string) => Promise<boolean>;
+}
+export declare const GLOBAL_OPTIONS: Readonly<Record<string, OptionSpec>>;
+/** Runs one command line, such as `cloud secrets list --json`; returns its exit code. */
+export declare function runCloud(host: CloudHost, argv: readonly string[]): Promise<number>;
+//# sourceMappingURL=run.d.ts.map

package/dist/cli/cloud/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/cli/cloud/run.ts"],"names":[],"mappings":"AAKA,OAAO,EAOH,KAAK,OAAO,EAGZ,KAAK,UAAU,EAElB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAOvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,sEAAsE;AACtE,MAAM,WAAW,KAAK;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAED,sFAAsF;AACtF,MAAM,WAAW,SAAS;IACtB,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IACtC,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,iBAAiB,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC3F,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAChG;AAED,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAgC/D,CAAC;AASF,yFAAyF;AACzF,wBAAsB,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAExF"}