iosm-cli 0.2.14 → 0.2.16

package/dist/core/security/source-security.d.ts

@@ -0,0 +1,43 @@
+import type { TrustSourceType } from "./trust-ledger.js";
+export interface SecurityConsentRequest {
+    action: "install" | "update" | "download";
+    sourceType: TrustSourceType;
+    source: string;
+    identity: string;
+    host: string;
+    fingerprint: string;
+    reason: "new-source" | "fingerprint-change";
+    previousFingerprint?: string;
+}
+export interface SourceVerificationInput {
+    action: "install" | "update" | "download";
+    sourceType: TrustSourceType;
+    source: string;
+    identity: string;
+    host: string;
+    fingerprint: string;
+    allowOverride?: boolean;
+    allowPrompt?: boolean;
+}
+export interface SourceVerificationResult {
+    approved: boolean;
+    reusedApproval: boolean;
+    reason: "already-trusted" | "new-source-approved" | "fingerprint-reapproved";
+}
+export declare class SourceSecurityManager {
+    private readonly ledger;
+    private readonly allowedHosts;
+    private readonly consentProvider?;
+    constructor(options: {
+        agentDir: string;
+        allowedHosts?: string[];
+        consentProvider?: (request: SecurityConsentRequest) => Promise<boolean>;
+    });
+    getLedgerPath(): string;
+    getAllowedHosts(): string[];
+    verify(input: SourceVerificationInput): Promise<SourceVerificationResult>;
+    private requestConsent;
+    private buildKey;
+    private assertHostAllowed;
+}
+//# sourceMappingURL=source-security.d.ts.map

package/dist/core/security/source-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-security.d.ts","sourceRoot":"","sources":["../../../src/core/security/source-security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAa1E,MAAM,WAAW,sBAAsB;IACtC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC1C,UAAU,EAAE,eAAe,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,GAAG,oBAAoB,CAAC;IAC5C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC1C,UAAU,EAAE,eAAe,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,iBAAiB,GAAG,qBAAqB,GAAG,wBAAwB,CAAC;CAC7E;AAED,qBAAa,qBAAqB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAwD;gBAE7E,OAAO,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KACxE;IASD,aAAa,IAAI,MAAM;IAIvB,eAAe,IAAI,MAAM,EAAE;IAIrB,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;YAwDjE,cAAc;IAO5B,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,iBAAiB;CASzB"}

package/dist/core/security/source-security.js

@@ -0,0 +1,94 @@
+import { TrustLedger } from "./trust-ledger.js";
+const DEFAULT_ALLOWED_HOSTS = [
+    "registry.npmjs.org",
+    "npmjs.org",
+    "github.com",
+    "gitlab.com",
+    "bitbucket.org",
+    "api.github.com",
+    "raw.githubusercontent.com",
+];
+export class SourceSecurityManager {
+    constructor(options) {
+        this.ledger = new TrustLedger(options.agentDir);
+        const normalizedHosts = (options.allowedHosts ?? DEFAULT_ALLOWED_HOSTS)
+            .map((host) => host.trim().toLowerCase())
+            .filter((host) => host.length > 0);
+        this.allowedHosts = new Set(normalizedHosts);
+        this.consentProvider = options.consentProvider;
+    }
+    getLedgerPath() {
+        return this.ledger.getPath();
+    }
+    getAllowedHosts() {
+        return [...this.allowedHosts];
+    }
+    async verify(input) {
+        this.assertHostAllowed(input.host);
+        const key = this.buildKey(input.sourceType, input.identity);
+        const existing = this.ledger.get(key);
+        if (existing && existing.fingerprint === input.fingerprint) {
+            return {
+                approved: true,
+                reusedApproval: true,
+                reason: "already-trusted",
+            };
+        }
+        const reason = existing ? "fingerprint-change" : "new-source";
+        const approved = input.allowOverride === true
+            ? true
+            : input.allowPrompt === false
+                ? false
+                : await this.requestConsent({
+                    action: input.action,
+                    sourceType: input.sourceType,
+                    source: input.source,
+                    identity: input.identity,
+                    host: input.host,
+                    fingerprint: input.fingerprint,
+                    reason,
+                    previousFingerprint: existing?.fingerprint,
+                });
+        if (!approved) {
+            if (existing && existing.fingerprint !== input.fingerprint) {
+                throw new Error(`Source fingerprint changed for ${input.source} (${existing.fingerprint} -> ${input.fingerprint}). Update blocked until re-approved.`);
+            }
+            throw new Error(`Source ${input.source} is not trusted. Re-run with explicit trust approval.`);
+        }
+        const actorScope = input.allowOverride ? "non-interactive-override" : "user";
+        this.ledger.upsert({
+            key,
+            sourceType: input.sourceType,
+            source: input.source,
+            identity: input.identity,
+            host: input.host.toLowerCase(),
+            fingerprint: input.fingerprint,
+            approvedAt: new Date().toISOString(),
+            actorScope,
+        });
+        return {
+            approved: true,
+            reusedApproval: false,
+            reason: reason === "new-source" ? "new-source-approved" : "fingerprint-reapproved",
+        };
+    }
+    async requestConsent(request) {
+        if (!this.consentProvider) {
+            return false;
+        }
+        return this.consentProvider(request);
+    }
+    buildKey(sourceType, identity) {
+        return `${sourceType}:${identity}`;
+    }
+    assertHostAllowed(hostRaw) {
+        const host = hostRaw.trim().toLowerCase();
+        if (!host) {
+            throw new Error("Security policy rejected source with empty host.");
+        }
+        if (!this.allowedHosts.has(host)) {
+            throw new Error(`Security policy rejected source host "${host}" (not in allowlist).`);
+        }
+    }
+}
+//# sourceMappingURL=source-security.js.map

package/dist/core/security/source-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-security.js","sourceRoot":"","sources":["../../../src/core/security/source-security.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,qBAAqB,GAAG;IAC7B,oBAAoB;IACpB,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,eAAe;IACf,gBAAgB;IAChB,2BAA2B;CAC3B,CAAC;AA8BF,MAAM,OAAO,qBAAqB;IAKjC,YAAY,OAIX;QACA,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;aACrE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACxC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAChD,CAAC;IAED,aAAa;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,CAAC;IAED,eAAe;QACd,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QAC1C,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;YAC5D,OAAO;gBACN,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,IAAI;gBACpB,MAAM,EAAE,iBAAiB;aACzB,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAqC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAAC;QAChG,MAAM,QAAQ,GACb,KAAK,CAAC,aAAa,KAAK,IAAI;YAC3B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK;gBAC5B,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC;oBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,MAAM;oBACN,mBAAmB,EAAE,QAAQ,EAAE,WAAW;iBAC1C,CAAC,CAAC;QACN,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,IAAI,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CACd,kCAAkC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,WAAW,OAAO,KAAK,CAAC,WAAW,sCAAsC,CACrI,CAAC;YACH,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,MAAM,uDAAuD,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,UAAU,GAAoB,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9F,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAClB,GAAG;YACH,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,UAAU;SACV,CAAC,CAAC;QAEH,OAAO;YACN,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,KAAK;YACrB,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,wBAAwB;SAClF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAA+B;QAC3D,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAEO,QAAQ,CAAC,UAA2B,EAAE,QAAgB;QAC7D,OAAO,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;IACpC,CAAC;IAEO,iBAAiB,CAAC,OAAe;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,uBAAuB,CAAC,CAAC;QACvF,CAAC;IACF,CAAC;CACD","sourcesContent":["import type { TrustActorScope, TrustSourceType } from \"./trust-ledger.js\";\nimport { TrustLedger } from \"./trust-ledger.js\";\n\nconst DEFAULT_ALLOWED_HOSTS = [\n\t\"registry.npmjs.org\",\n\t\"npmjs.org\",\n\t\"github.com\",\n\t\"gitlab.com\",\n\t\"bitbucket.org\",\n\t\"api.github.com\",\n\t\"raw.githubusercontent.com\",\n];\n\nexport interface SecurityConsentRequest {\n\taction: \"install\" | \"update\" | \"download\";\n\tsourceType: TrustSourceType;\n\tsource: string;\n\tidentity: string;\n\thost: string;\n\tfingerprint: string;\n\treason: \"new-source\" | \"fingerprint-change\";\n\tpreviousFingerprint?: string;\n}\n\nexport interface SourceVerificationInput {\n\taction: \"install\" | \"update\" | \"download\";\n\tsourceType: TrustSourceType;\n\tsource: string;\n\tidentity: string;\n\thost: string;\n\tfingerprint: string;\n\tallowOverride?: boolean;\n\tallowPrompt?: boolean;\n}\n\nexport interface SourceVerificationResult {\n\tapproved: boolean;\n\treusedApproval: boolean;\n\treason: \"already-trusted\" | \"new-source-approved\" | \"fingerprint-reapproved\";\n}\n\nexport class SourceSecurityManager {\n\tprivate readonly ledger: TrustLedger;\n\tprivate readonly allowedHosts: Set<string>;\n\tprivate readonly consentProvider?: (request: SecurityConsentRequest) => Promise<boolean>;\n\n\tconstructor(options: {\n\t\tagentDir: string;\n\t\tallowedHosts?: string[];\n\t\tconsentProvider?: (request: SecurityConsentRequest) => Promise<boolean>;\n\t}) {\n\t\tthis.ledger = new TrustLedger(options.agentDir);\n\t\tconst normalizedHosts = (options.allowedHosts ?? DEFAULT_ALLOWED_HOSTS)\n\t\t\t.map((host) => host.trim().toLowerCase())\n\t\t\t.filter((host) => host.length > 0);\n\t\tthis.allowedHosts = new Set(normalizedHosts);\n\t\tthis.consentProvider = options.consentProvider;\n\t}\n\n\tgetLedgerPath(): string {\n\t\treturn this.ledger.getPath();\n\t}\n\n\tgetAllowedHosts(): string[] {\n\t\treturn [...this.allowedHosts];\n\t}\n\n\tasync verify(input: SourceVerificationInput): Promise<SourceVerificationResult> {\n\t\tthis.assertHostAllowed(input.host);\n\t\tconst key = this.buildKey(input.sourceType, input.identity);\n\t\tconst existing = this.ledger.get(key);\n\t\tif (existing && existing.fingerprint === input.fingerprint) {\n\t\t\treturn {\n\t\t\t\tapproved: true,\n\t\t\t\treusedApproval: true,\n\t\t\t\treason: \"already-trusted\",\n\t\t\t};\n\t\t}\n\n\t\tconst reason: SecurityConsentRequest[\"reason\"] = existing ? \"fingerprint-change\" : \"new-source\";\n\t\tconst approved =\n\t\t\tinput.allowOverride === true\n\t\t\t\t? true\n\t\t\t\t: input.allowPrompt === false\n\t\t\t\t\t? false\n\t\t\t\t\t: await this.requestConsent({\n\t\t\t\t\t\taction: input.action,\n\t\t\t\t\t\tsourceType: input.sourceType,\n\t\t\t\t\t\tsource: input.source,\n\t\t\t\t\t\tidentity: input.identity,\n\t\t\t\t\t\thost: input.host,\n\t\t\t\t\t\tfingerprint: input.fingerprint,\n\t\t\t\t\t\treason,\n\t\t\t\t\t\tpreviousFingerprint: existing?.fingerprint,\n\t\t\t\t\t});\n\t\tif (!approved) {\n\t\t\tif (existing && existing.fingerprint !== input.fingerprint) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Source fingerprint changed for ${input.source} (${existing.fingerprint} -> ${input.fingerprint}). Update blocked until re-approved.`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tthrow new Error(`Source ${input.source} is not trusted. Re-run with explicit trust approval.`);\n\t\t}\n\n\t\tconst actorScope: TrustActorScope = input.allowOverride ? \"non-interactive-override\" : \"user\";\n\t\tthis.ledger.upsert({\n\t\t\tkey,\n\t\t\tsourceType: input.sourceType,\n\t\t\tsource: input.source,\n\t\t\tidentity: input.identity,\n\t\t\thost: input.host.toLowerCase(),\n\t\t\tfingerprint: input.fingerprint,\n\t\t\tapprovedAt: new Date().toISOString(),\n\t\t\tactorScope,\n\t\t});\n\n\t\treturn {\n\t\t\tapproved: true,\n\t\t\treusedApproval: false,\n\t\t\treason: reason === \"new-source\" ? \"new-source-approved\" : \"fingerprint-reapproved\",\n\t\t};\n\t}\n\n\tprivate async requestConsent(request: SecurityConsentRequest): Promise<boolean> {\n\t\tif (!this.consentProvider) {\n\t\t\treturn false;\n\t\t}\n\t\treturn this.consentProvider(request);\n\t}\n\n\tprivate buildKey(sourceType: TrustSourceType, identity: string): string {\n\t\treturn `${sourceType}:${identity}`;\n\t}\n\n\tprivate assertHostAllowed(hostRaw: string): void {\n\t\tconst host = hostRaw.trim().toLowerCase();\n\t\tif (!host) {\n\t\t\tthrow new Error(\"Security policy rejected source with empty host.\");\n\t\t}\n\t\tif (!this.allowedHosts.has(host)) {\n\t\t\tthrow new Error(`Security policy rejected source host \"${host}\" (not in allowlist).`);\n\t\t}\n\t}\n}\n"]}

package/dist/core/security/trust-ledger.d.ts

@@ -0,0 +1,24 @@
+export type TrustSourceType = "npm" | "git" | "tool-download";
+export type TrustActorScope = "user" | "workspace" | "session" | "non-interactive-override";
+export interface TrustLedgerEntry {
+    key: string;
+    sourceType: TrustSourceType;
+    source: string;
+    identity: string;
+    host: string;
+    fingerprint: string;
+    approvedAt: string;
+    actorScope: TrustActorScope;
+}
+export declare class TrustLedger {
+    private readonly path;
+    private data;
+    constructor(agentDir: string);
+    getPath(): string;
+    get(key: string): TrustLedgerEntry | undefined;
+    getAll(): TrustLedgerEntry[];
+    upsert(entry: TrustLedgerEntry): void;
+    private load;
+    private save;
+}
+//# sourceMappingURL=trust-ledger.d.ts.map

package/dist/core/security/trust-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-ledger.d.ts","sourceRoot":"","sources":["../../../src/core/security/trust-ledger.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,eAAe,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,0BAA0B,CAAC;AAE5F,MAAM,WAAW,gBAAgB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,eAAe,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,eAAe,CAAC;CAC5B;AASD,qBAAa,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,IAAI,CAAkB;gBAElB,QAAQ,EAAE,MAAM;IAK5B,OAAO,IAAI,MAAM;IAIjB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAI9C,MAAM,IAAI,gBAAgB,EAAE;IAI5B,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAUrC,OAAO,CAAC,IAAI;IAgCZ,OAAO,CAAC,IAAI;CAOZ"}

package/dist/core/security/trust-ledger.js

@@ -0,0 +1,66 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+const TRUST_LEDGER_FILENAME = "trust-ledger.json";
+export class TrustLedger {
+    constructor(agentDir) {
+        this.path = join(agentDir, TRUST_LEDGER_FILENAME);
+        this.data = this.load();
+    }
+    getPath() {
+        return this.path;
+    }
+    get(key) {
+        return this.data.entries.find((entry) => entry.key === key);
+    }
+    getAll() {
+        return this.data.entries.map((entry) => ({ ...entry }));
+    }
+    upsert(entry) {
+        const index = this.data.entries.findIndex((item) => item.key === entry.key);
+        if (index >= 0) {
+            this.data.entries[index] = { ...entry };
+        }
+        else {
+            this.data.entries.push({ ...entry });
+        }
+        this.save();
+    }
+    load() {
+        if (!existsSync(this.path)) {
+            return { version: 1, entries: [] };
+        }
+        try {
+            const raw = readFileSync(this.path, "utf8");
+            const parsed = JSON.parse(raw);
+            const entries = Array.isArray(parsed.entries) ? parsed.entries : [];
+            return {
+                version: typeof parsed.version === "number" ? parsed.version : 1,
+                entries: entries
+                    .filter((entry) => {
+                    return (typeof entry === "object" &&
+                        entry !== null &&
+                        typeof entry.key === "string" &&
+                        typeof entry.sourceType === "string" &&
+                        typeof entry.source === "string" &&
+                        typeof entry.identity === "string" &&
+                        typeof entry.host === "string" &&
+                        typeof entry.fingerprint === "string" &&
+                        typeof entry.approvedAt === "string" &&
+                        typeof entry.actorScope === "string");
+                })
+                    .map((entry) => ({ ...entry })),
+            };
+        }
+        catch {
+            return { version: 1, entries: [] };
+        }
+    }
+    save() {
+        const dir = dirname(this.path);
+        if (!existsSync(dir)) {
+            mkdirSync(dir, { recursive: true });
+        }
+        writeFileSync(this.path, `${JSON.stringify(this.data, null, 2)}\n`, "utf8");
+    }
+}
+//# sourceMappingURL=trust-ledger.js.map

package/dist/core/security/trust-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-ledger.js","sourceRoot":"","sources":["../../../src/core/security/trust-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAqB1C,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAElD,MAAM,OAAO,WAAW;IAIvB,YAAY,QAAgB;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,OAAO;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,KAAuB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5E,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACzC,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;IACb,CAAC;IAEO,IAAI;QACX,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;YAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO;gBACN,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAChE,OAAO,EAAE,OAAO;qBACd,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE;oBAC5C,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;wBACzB,KAAK,KAAK,IAAI;wBACd,OAAQ,KAA0B,CAAC,GAAG,KAAK,QAAQ;wBACnD,OAAQ,KAA0B,CAAC,UAAU,KAAK,QAAQ;wBAC1D,OAAQ,KAA0B,CAAC,MAAM,KAAK,QAAQ;wBACtD,OAAQ,KAA0B,CAAC,QAAQ,KAAK,QAAQ;wBACxD,OAAQ,KAA0B,CAAC,IAAI,KAAK,QAAQ;wBACpD,OAAQ,KAA0B,CAAC,WAAW,KAAK,QAAQ;wBAC3D,OAAQ,KAA0B,CAAC,UAAU,KAAK,QAAQ;wBAC1D,OAAQ,KAA0B,CAAC,UAAU,KAAK,QAAQ,CAC1D,CAAC;gBACH,CAAC,CAAC;qBACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;aAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACpC,CAAC;IACF,CAAC;IAEO,IAAI;QACX,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;CACD","sourcesContent":["import { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport type TrustSourceType = \"npm\" | \"git\" | \"tool-download\";\nexport type TrustActorScope = \"user\" | \"workspace\" | \"session\" | \"non-interactive-override\";\n\nexport interface TrustLedgerEntry {\n\tkey: string;\n\tsourceType: TrustSourceType;\n\tsource: string;\n\tidentity: string;\n\thost: string;\n\tfingerprint: string;\n\tapprovedAt: string;\n\tactorScope: TrustActorScope;\n}\n\ninterface TrustLedgerFile {\n\tversion: number;\n\tentries: TrustLedgerEntry[];\n}\n\nconst TRUST_LEDGER_FILENAME = \"trust-ledger.json\";\n\nexport class TrustLedger {\n\tprivate readonly path: string;\n\tprivate data: TrustLedgerFile;\n\n\tconstructor(agentDir: string) {\n\t\tthis.path = join(agentDir, TRUST_LEDGER_FILENAME);\n\t\tthis.data = this.load();\n\t}\n\n\tgetPath(): string {\n\t\treturn this.path;\n\t}\n\n\tget(key: string): TrustLedgerEntry | undefined {\n\t\treturn this.data.entries.find((entry) => entry.key === key);\n\t}\n\n\tgetAll(): TrustLedgerEntry[] {\n\t\treturn this.data.entries.map((entry) => ({ ...entry }));\n\t}\n\n\tupsert(entry: TrustLedgerEntry): void {\n\t\tconst index = this.data.entries.findIndex((item) => item.key === entry.key);\n\t\tif (index >= 0) {\n\t\t\tthis.data.entries[index] = { ...entry };\n\t\t} else {\n\t\t\tthis.data.entries.push({ ...entry });\n\t\t}\n\t\tthis.save();\n\t}\n\n\tprivate load(): TrustLedgerFile {\n\t\tif (!existsSync(this.path)) {\n\t\t\treturn { version: 1, entries: [] };\n\t\t}\n\t\ttry {\n\t\t\tconst raw = readFileSync(this.path, \"utf8\");\n\t\t\tconst parsed = JSON.parse(raw) as Partial<TrustLedgerFile>;\n\t\t\tconst entries = Array.isArray(parsed.entries) ? parsed.entries : [];\n\t\t\treturn {\n\t\t\t\tversion: typeof parsed.version === \"number\" ? parsed.version : 1,\n\t\t\t\tentries: entries\n\t\t\t\t\t.filter((entry): entry is TrustLedgerEntry => {\n\t\t\t\t\t\treturn (\n\t\t\t\t\t\t\ttypeof entry === \"object\" &&\n\t\t\t\t\t\t\tentry !== null &&\n\t\t\t\t\t\t\ttypeof (entry as TrustLedgerEntry).key === \"string\" &&\n\t\t\t\t\t\t\ttypeof (entry as TrustLedgerEntry).sourceType === \"string\" &&\n\t\t\t\t\t\t\ttypeof (entry as TrustLedgerEntry).source === \"string\" &&\n\t\t\t\t\t\t\ttypeof (entry as TrustLedgerEntry).identity === \"string\" &&\n\t\t\t\t\t\t\ttypeof (entry as TrustLedgerEntry).host === \"string\" &&\n\t\t\t\t\t\t\ttypeof (entry as TrustLedgerEntry).fingerprint === \"string\" &&\n\t\t\t\t\t\t\ttypeof (entry as TrustLedgerEntry).approvedAt === \"string\" &&\n\t\t\t\t\t\t\ttypeof (entry as TrustLedgerEntry).actorScope === \"string\"\n\t\t\t\t\t\t);\n\t\t\t\t\t})\n\t\t\t\t\t.map((entry) => ({ ...entry })),\n\t\t\t};\n\t\t} catch {\n\t\t\treturn { version: 1, entries: [] };\n\t\t}\n\t}\n\n\tprivate save(): void {\n\t\tconst dir = dirname(this.path);\n\t\tif (!existsSync(dir)) {\n\t\t\tmkdirSync(dir, { recursive: true });\n\t\t}\n\t\twriteFileSync(this.path, `${JSON.stringify(this.data, null, 2)}\\n`, \"utf8\");\n\t}\n}\n"]}

package/dist/core/session-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/core/session-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAiB9E,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAIlB,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC5D,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,wBAAyB,SAAQ,gBAAgB;IACjE,IAAI,EAAE,uBAAuB,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACzD,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,gBAAgB;IACrE,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,iGAAiG;IACjG,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,gBAAgB;IACxE,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,iEAAiE;IACjE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,gBAAgB;IACjE,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,CAAC;CACT;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAW,SAAQ,gBAAgB;IACnD,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAED,gEAAgE;AAChE,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACzD,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,gBAAgB;IACxE,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,CAAC,WAAW,GAAG,YAAY,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,wGAAwG;AACxG,MAAM,MAAM,YAAY,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,gBAAgB,GAChB,eAAe,GACf,kBAAkB,GAClB,WAAW,GACX,kBAAkB,GAClB,UAAU,GACV,gBAAgB,CAAC;AAEpB,uCAAuC;AACvC,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,YAAY,CAAC;AAErD,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,sFAAsF;IACtF,GAAG,EAAE,MAAM,CAAC;IACZ,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,IAAI,CAAC;IACd,QAAQ,EAAE,IAAI,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACxC,cAAc,EACZ,QAAQ,GACR,eAAe,GACf,cAAc,GACd,gBAAgB,GAChB,WAAW,GACX,cAAc,GACd,UAAU,GACV,UAAU,GACV,WAAW,GACX,WAAW,GACX,YAAY,GACZ,SAAS,GACT,gBAAgB,CAClB,CAAC;AA2EF,2BAA2B;AAC3B,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAEhE;AAED,sCAAsC;AACtC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,CAehE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,eAAe,GAAG,IAAI,CAOxF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,YAAY,EAAE,EACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,GAC9B,cAAc,CAuGhB;AAeD,2BAA2B;AAC3B,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAyBjE;AAiBD,2BAA2B;AAC3B,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAavE;AA+HD,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;AAuC1E;;;;;;;;;;GAUG;AACH,qBAAa,cAAc;IAC1B,OAAO,CAAC,SAAS,CAAc;IAC/B,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,WAAW,CAAmB;IACtC,OAAO,CAAC,IAAI,CAAwC;IACpD,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,MAAM,CAAuB;IAErC,OAAO;IAeP,yEAAyE;IACzE,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAgCzC,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS;IAwB3D,OAAO,CAAC,WAAW;IAkBnB,OAAO,CAAC,YAAY;IAMpB,WAAW,IAAI,OAAO;IAItB,MAAM,IAAI,MAAM;IAIhB,aAAa,IAAI,MAAM;IAIvB,YAAY,IAAI,MAAM;IAItB,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAoBnC,OAAO,CAAC,YAAY;IAOpB;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,GAAG,oBAAoB,GAAG,MAAM;IAY9E,oGAAoG;IACpG,yBAAyB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM;IAYxD,2FAA2F;IAC3F,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAa5D,iGAAiG;IACjG,gBAAgB,CAAC,CAAC,GAAG,OAAO,EAC3B,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,CAAC,EACX,QAAQ,CAAC,EAAE,OAAO,GAChB,MAAM;IAgBT,4GAA4G;IAC5G,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM;IAa7D,0EAA0E;IAC1E,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAYvC,+EAA+E;IAC/E,cAAc,IAAI,MAAM,GAAG,SAAS;IAYpC;;;;;;;OAOG;IACH,wBAAwB,CAAC,CAAC,GAAG,OAAO,EACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,CAAC,WAAW,GAAG,YAAY,CAAC,EAAE,EAChD,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,CAAC,GACT,MAAM;IAmBT,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B,YAAY,IAAI,YAAY,GAAG,SAAS;IAIxC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAI9C;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE;IAU7C;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM;IAqBtE;;;;OAIG;IACH,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAW1C;;;OAGG;IACH,mBAAmB,IAAI,cAAc;IAIrC;;OAEG;IACH,SAAS,IAAI,aAAa,GAAG,IAAI;IAKjC;;;;OAIG;IACH,UAAU,IAAI,YAAY,EAAE;IAI5B;;;;OAIG;IACH,OAAO,IAAI,eAAe,EAAE;IA2C5B;;;;;OAKG;IACH,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAOlC;;;;OAIG;IACH,SAAS,IAAI,IAAI;IAIjB;;;;OAIG;IACH,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM;IAmB9G;;;;OAIG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IA8FzD;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc;IAK/D;;;;OAIG;IACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc;IAU9D;;;;OAIG;IACH,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc;IASvE,wDAAwD;IACxD,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAE,MAAsB,GAAG,cAAc;IAI5D;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc;IA2C3F;;;;;OAKG;WACU,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAO7G;;;OAGG;WACU,OAAO,CAAC,UAAU,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAiD9E"}
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/core/session-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAiB9E,OAAO,EACN,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAIlB,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAIzC,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC5D,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,wBAAyB,SAAQ,gBAAgB;IACjE,IAAI,EAAE,uBAAuB,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACzD,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,gBAAgB;IACrE,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,iGAAiG;IACjG,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,gBAAgB;IACxE,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,iEAAiE;IACjE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,gBAAgB;IACjE,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,CAAC;CACT;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAW,SAAQ,gBAAgB;IACnD,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAED,gEAAgE;AAChE,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACzD,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,gBAAgB;IACxE,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,CAAC,WAAW,GAAG,YAAY,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,wGAAwG;AACxG,MAAM,MAAM,YAAY,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,gBAAgB,GAChB,eAAe,GACf,kBAAkB,GAClB,WAAW,GACX,kBAAkB,GAClB,UAAU,GACV,gBAAgB,CAAC;AAEpB,uCAAuC;AACvC,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,YAAY,CAAC;AAErD,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,sFAAsF;IACtF,GAAG,EAAE,MAAM,CAAC;IACZ,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,IAAI,CAAC;IACd,QAAQ,EAAE,IAAI,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACxB;AAeD,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACxC,cAAc,EACZ,QAAQ,GACR,eAAe,GACf,cAAc,GACd,gBAAgB,GAChB,WAAW,GACX,cAAc,GACd,UAAU,GACV,UAAU,GACV,WAAW,GACX,WAAW,GACX,YAAY,GACZ,SAAS,GACT,gBAAgB,CAClB,CAAC;AA2EF,2BAA2B;AAC3B,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAEhE;AAED,sCAAsC;AACtC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,CAehE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,eAAe,GAAG,IAAI,CAOxF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,YAAY,EAAE,EACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,GAC9B,cAAc,CAuGhB;AAeD,2BAA2B;AAC3B,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAyBjE;AAiBD,2BAA2B;AAC3B,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAavE;AA6ND,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;AAuC1E;;;;;;;;;;GAUG;AACH,qBAAa,cAAc;IAC1B,OAAO,CAAC,SAAS,CAAc;IAC/B,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,WAAW,CAAmB;IACtC,OAAO,CAAC,IAAI,CAAwC;IACpD,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,MAAM,CAAuB;IAErC,OAAO;IAeP,yEAAyE;IACzE,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAgCzC,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS;IAwB3D,OAAO,CAAC,WAAW;IAkBnB,OAAO,CAAC,YAAY;IAMpB,WAAW,IAAI,OAAO;IAItB,MAAM,IAAI,MAAM;IAIhB,aAAa,IAAI,MAAM;IAIvB,YAAY,IAAI,MAAM;IAItB,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAoBnC,OAAO,CAAC,YAAY;IAOpB;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,GAAG,oBAAoB,GAAG,MAAM;IAY9E,oGAAoG;IACpG,yBAAyB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM;IAYxD,2FAA2F;IAC3F,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAa5D,iGAAiG;IACjG,gBAAgB,CAAC,CAAC,GAAG,OAAO,EAC3B,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,CAAC,EACX,QAAQ,CAAC,EAAE,OAAO,GAChB,MAAM;IAgBT,4GAA4G;IAC5G,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM;IAa7D,0EAA0E;IAC1E,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAYvC,+EAA+E;IAC/E,cAAc,IAAI,MAAM,GAAG,SAAS;IAYpC;;;;;;;OAOG;IACH,wBAAwB,CAAC,CAAC,GAAG,OAAO,EACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,CAAC,WAAW,GAAG,YAAY,CAAC,EAAE,EAChD,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,CAAC,GACT,MAAM;IAmBT,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B,YAAY,IAAI,YAAY,GAAG,SAAS;IAIxC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAI9C;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE;IAU7C;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM;IAqBtE;;;;OAIG;IACH,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAW1C;;;OAGG;IACH,mBAAmB,IAAI,cAAc;IAIrC;;OAEG;IACH,SAAS,IAAI,aAAa,GAAG,IAAI;IAKjC;;;;OAIG;IACH,UAAU,IAAI,YAAY,EAAE;IAI5B;;;;OAIG;IACH,OAAO,IAAI,eAAe,EAAE;IA2C5B;;;;;OAKG;IACH,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAOlC;;;;OAIG;IACH,SAAS,IAAI,IAAI;IAIjB;;;;OAIG;IACH,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM;IAmB9G;;;;OAIG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IA8FzD;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc;IAK/D;;;;OAIG;IACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc;IAU9D;;;;OAIG;IACH,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc;IASvE,wDAAwD;IACxD,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAE,MAAsB,GAAG,cAAc;IAI5D;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc;IA2C3F;;;;;OAKG;WACU,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAO7G;;;OAGG;WACU,OAAO,CAAC,UAAU,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAyE9E"}

package/dist/core/session-manager.js

@@ -1,10 +1,12 @@
 import { randomUUID } from "crypto";
 import { appendFileSync, closeSync, existsSync, mkdirSync, openSync, readdirSync, readFileSync, readSync, statSync, writeFileSync, } from "fs";
 import { readdir, readFile, stat } from "fs/promises";
-import { join, resolve } from "path";
+import { dirname, join, resolve } from "path";
 import { getAgentDir as getDefaultAgentDir, getSessionsDir } from "../config.js";
 import { createBranchSummaryMessage, createCompactionSummaryMessage, createCustomMessage, } from "./messages.js";
 export const CURRENT_SESSION_VERSION = 3;
+const SESSION_INDEX_FILENAME = "session-index.jsonl";
+const SESSION_INDEX_MAX_ALL_MESSAGES_CHARS = 40_000;
 /** Generate a unique short ID (8 hex chars, collision-checked) */
 function generateId(byId) {
     for (let i = 0; i < 100; i++) {
@@ -386,6 +388,94 @@ async function buildSessionInfo(filePath) {
         return null;
     }
 }
+function getSessionIndexPath() {
+    return join(getSessionsDir(), SESSION_INDEX_FILENAME);
+}
+function toSessionIndexRecord(info) {
+    const allMessagesText = info.allMessagesText.length > SESSION_INDEX_MAX_ALL_MESSAGES_CHARS
+        ? info.allMessagesText.slice(0, SESSION_INDEX_MAX_ALL_MESSAGES_CHARS)
+        : info.allMessagesText;
+    return {
+        path: info.path,
+        id: info.id,
+        cwd: info.cwd,
+        name: info.name,
+        parentSessionPath: info.parentSessionPath,
+        created: info.created.toISOString(),
+        modified: info.modified.toISOString(),
+        messageCount: info.messageCount,
+        firstMessage: info.firstMessage,
+        allMessagesText,
+    };
+}
+function parseSessionIndexRecord(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const record = raw;
+    if (typeof record.path !== "string" ||
+        typeof record.id !== "string" ||
+        typeof record.cwd !== "string" ||
+        typeof record.created !== "string" ||
+        typeof record.modified !== "string" ||
+        typeof record.messageCount !== "number" ||
+        typeof record.firstMessage !== "string" ||
+        typeof record.allMessagesText !== "string") {
+        return null;
+    }
+    const created = new Date(record.created);
+    const modified = new Date(record.modified);
+    if (Number.isNaN(created.getTime()) || Number.isNaN(modified.getTime())) {
+        return null;
+    }
+    return {
+        path: record.path,
+        id: record.id,
+        cwd: record.cwd,
+        name: typeof record.name === "string" ? record.name : undefined,
+        parentSessionPath: typeof record.parentSessionPath === "string" ? record.parentSessionPath : undefined,
+        created,
+        modified,
+        messageCount: Math.max(0, Math.trunc(record.messageCount)),
+        firstMessage: record.firstMessage || "(no messages)",
+        allMessagesText: record.allMessagesText,
+    };
+}
+function loadSessionIndex(indexPath) {
+    if (!existsSync(indexPath)) {
+        return { records: new Map(), loaded: false };
+    }
+    try {
+        const raw = readFileSync(indexPath, "utf8");
+        const records = new Map();
+        for (const line of raw.split("\n")) {
+            if (!line.trim())
+                continue;
+            try {
+                const parsed = JSON.parse(line);
+                const info = parseSessionIndexRecord(parsed);
+                if (!info)
+                    continue;
+                records.set(info.path, info);
+            }
+            catch {
+                // Skip malformed index lines and continue.
+            }
+        }
+        return { records, loaded: true };
+    }
+    catch {
+        return { records: new Map(), loaded: false };
+    }
+}
+function writeSessionIndex(indexPath, sessions) {
+    const dir = dirname(indexPath);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    const lines = sessions.map((session) => JSON.stringify(toSessionIndexRecord(session)));
+    const content = lines.length > 0 ? `${lines.join("\n")}\n` : "";
+    writeFileSync(indexPath, content, "utf8");
+}
 async function listSessionsFromDir(dir, onProgress, progressOffset = 0, progressTotal) {
     const sessions = [];
     if (!existsSync(dir)) {
@@ -1055,34 +1145,57 @@ export class SessionManager {
             }
             const entries = await readdir(sessionsDir, { withFileTypes: true });
             const dirs = entries.filter((e) => e.isDirectory()).map((e) => join(sessionsDir, e.name));
-            // Count total files first for accurate progress
-            let totalFiles = 0;
-            const dirFiles = [];
+            const allFiles = [];
             for (const dir of dirs) {
                 try {
                     const files = (await readdir(dir)).filter((f) => f.endsWith(".jsonl"));
-                    dirFiles.push(files.map((f) => join(dir, f)));
-                    totalFiles += files.length;
+                    for (const file of files) {
+                        allFiles.push(join(dir, file));
+                    }
                 }
                 catch {
-                    dirFiles.push([]);
+                    // Skip unreadable directory.
                 }
             }
-            // Process all files with progress tracking
+            const totalFiles = allFiles.length;
+            const indexPath = getSessionIndexPath();
+            const index = loadSessionIndex(indexPath);
             let loaded = 0;
-            const sessions = [];
-            const allFiles = dirFiles.flat();
             const results = await Promise.all(allFiles.map(async (file) => {
-                const info = await buildSessionInfo(file);
+                let refreshed = false;
+                let info = null;
+                const indexed = index.records.get(file);
+                if (indexed) {
+                    try {
+                        const fileStats = await stat(file);
+                        if (fileStats.mtime.getTime() <= indexed.modified.getTime()) {
+                            info = indexed;
+                        }
+                    }
+                    catch {
+                        // File disappeared or became unreadable; ignore indexed entry.
+                    }
+                }
+                if (!info) {
+                    refreshed = true;
+                    info = await buildSessionInfo(file);
+                }
                 loaded++;
                 onProgress?.(loaded, totalFiles);
-                return info;
+                return { info, refreshed };
             }));
-            for (const info of results) {
-                if (info) {
-                    sessions.push(info);
+            const sessions = [];
+            let shouldRewriteIndex = !index.loaded || index.records.size !== totalFiles;
+            for (const result of results) {
+                if (result.refreshed)
+                    shouldRewriteIndex = true;
+                if (result.info) {
+                    sessions.push(result.info);
                 }
             }
+            if (shouldRewriteIndex) {
+                writeSessionIndex(indexPath, sessions);
+            }
             sessions.sort((a, b) => b.modified.getTime() - a.modified.getTime());
             return sessions;
         }