naiad-cli 0.2.7 → 0.2.8

package/dist/sync/checkpoint.js

@@ -0,0 +1,240 @@
+import { readFileSync, readdirSync, unlinkSync, rmSync, statSync, openSync, readSync, closeSync, createReadStream } from "fs";
+import { createHash } from "crypto";
+const THROTTLE_MS = 30_000;
+const JSONL_MAX_BYTES = 200 * 1024 * 1024;
+const MARKER_LINE = '{"type":"system","message":"[Naiad] Session log truncated — earlier entries exceeded 200MB limit."}\n';
+export class CheckpointUploader {
+    client;
+    sessionId;
+    sessionDir;
+    attempt;
+    lastUploadAt = 0;
+    pendingCheckpoint = null;
+    constructor(client, sessionId, sessionDir, attempt) {
+        this.client = client;
+        this.sessionId = sessionId;
+        this.sessionDir = sessionDir;
+        this.attempt = attempt;
+    }
+    async handleCheckpoint(msg, forceUpload = false) {
+        this.pendingCheckpoint = msg;
+        const now = Date.now();
+        if (!forceUpload && now - this.lastUploadAt < THROTTLE_MS) {
+            return;
+        }
+        await this.uploadCheckpoint();
+    }
+    async flushOnExit() {
+        if (this.pendingCheckpoint) {
+            await this.uploadCheckpoint();
+        }
+    }
+    async uploadCheckpoint() {
+        const msg = this.pendingCheckpoint;
+        if (!msg)
+            return;
+        this.pendingCheckpoint = null;
+        try {
+            const policies = await this.client.requestCheckpointPolicies(this.sessionId);
+            const skippedArtifacts = [...msg.skippedArtifacts];
+            const uploadedKeys = {};
+            // Incremental checksum: UTF8(base_sha) + 0x0A + UTF8(head_sha)
+            const hash = createHash("sha256");
+            hash.update(msg.base_sha, "utf8");
+            hash.update("\n");
+            hash.update(msg.head_sha, "utf8");
+            // Upload patch
+            if (msg.patchPath && !msg.skippedArtifacts.includes("patch")) {
+                const patchData = readFileSync(msg.patchPath);
+                hash.update("\n");
+                hash.update(patchData);
+                await this.uploadArtifact(policies.artifacts["patch.bin"], patchData);
+                uploadedKeys.patch_key = policies.artifacts["patch.bin"].fields["key"];
+            }
+            // Upload untracked
+            if (msg.untrackedPath && !msg.skippedArtifacts.includes("untracked")) {
+                hash.update("\n");
+                const untrackedData = await this.readAndHash(msg.untrackedPath, hash);
+                await this.uploadArtifact(policies.artifacts["untracked.tar.gz"], untrackedData);
+                uploadedKeys.untracked_key = policies.artifacts["untracked.tar.gz"].fields["key"];
+            }
+            // Upload session JSONL (possibly truncated)
+            const sessionJsonl = this.findSessionJsonl();
+            if (sessionJsonl) {
+                const sessionResult = this.prepareSessionJsonl(sessionJsonl);
+                if (sessionResult === null) {
+                    skippedArtifacts.push("session");
+                }
+                else if (sessionResult === "stream") {
+                    hash.update("\n");
+                    const sessionData = await this.readAndHash(sessionJsonl, hash);
+                    await this.uploadArtifact(policies.artifacts["session.jsonl"], sessionData);
+                    uploadedKeys.session_key = policies.artifacts["session.jsonl"].fields["key"];
+                }
+                else {
+                    hash.update("\n");
+                    hash.update(sessionResult);
+                    await this.uploadArtifact(policies.artifacts["session.jsonl"], sessionResult);
+                    uploadedKeys.session_key = policies.artifacts["session.jsonl"].fields["key"];
+                }
+            }
+            else {
+                skippedArtifacts.push("session");
+            }
+            const checksum = "sha256:" + hash.digest("hex");
+            // Build manifest
+            const manifest = {
+                version: 1,
+                attempt: this.attempt,
+                base_sha: msg.base_sha,
+                head_sha: msg.head_sha,
+                checksum,
+                patch_key: uploadedKeys.patch_key ?? null,
+                patch_bytes: msg.patchBytes,
+                untracked_key: uploadedKeys.untracked_key ?? null,
+                untracked_bytes: msg.untrackedPath ? statSync(msg.untrackedPath).size : 0,
+                untracked_files: msg.untrackedFiles,
+                session_key: uploadedKeys.session_key ?? null,
+                session_bytes: sessionJsonl ? statSync(sessionJsonl).size : 0,
+                timestamp: new Date().toISOString(),
+                skipped_artifacts: skippedArtifacts,
+            };
+            // Upload manifest LAST
+            const manifestData = Buffer.from(JSON.stringify(manifest, null, 2));
+            await this.uploadArtifact(policies.artifacts["manifest.json"], manifestData);
+            // Update session metadata
+            const patchUpdate = {};
+            if (uploadedKeys.patch_key)
+                patchUpdate.git_patch_key = uploadedKeys.patch_key;
+            if (uploadedKeys.session_key)
+                patchUpdate.session_jsonl_key = uploadedKeys.session_key;
+            if (Object.keys(patchUpdate).length > 0) {
+                await this.client.patchSession(this.sessionId, patchUpdate);
+            }
+            this.lastUploadAt = Date.now();
+            // Clean up temp files
+            this.cleanupTempFiles(msg);
+        }
+        catch (err) {
+            console.error("[checkpoint] Upload failed:", err.message);
+            // Re-queue for next attempt
+            if (!this.pendingCheckpoint) {
+                this.pendingCheckpoint = msg;
+            }
+        }
+    }
+    async uploadArtifact(policy, data) {
+        const formData = new FormData();
+        for (const [key, value] of Object.entries(policy.fields)) {
+            formData.append(key, value);
+        }
+        formData.append("file", new Blob([new Uint8Array(data)]));
+        const res = await fetch(policy.url, {
+            method: "POST",
+            body: formData,
+        });
+        if (!res.ok && res.status !== 204) {
+            const text = await res.text().catch(() => "");
+            throw new Error(`Artifact upload failed (${res.status}): ${text}`);
+        }
+    }
+    findSessionJsonl() {
+        try {
+            const files = readdirSync(this.sessionDir).filter((f) => f.endsWith(".jsonl"));
+            if (files.length === 0)
+                return null;
+            // Use the most recently modified
+            let best = null;
+            let bestMtime = 0;
+            for (const f of files) {
+                const full = `${this.sessionDir}/${f}`;
+                const st = statSync(full);
+                if (st.mtimeMs > bestMtime) {
+                    bestMtime = st.mtimeMs;
+                    best = full;
+                }
+            }
+            return best;
+        }
+        catch {
+            return null;
+        }
+    }
+    prepareSessionJsonl(filePath) {
+        try {
+            const st = statSync(filePath);
+            if (st.size === 0)
+                return null;
+            if (st.size <= JSONL_MAX_BYTES) {
+                return "stream";
+            }
+            // Truncation: keep last ~200MB on newline boundary
+            const markerBytes = Buffer.byteLength(MARKER_LINE, "utf8");
+            const maxPayload = JSONL_MAX_BYTES - markerBytes;
+            const seekPos = st.size - maxPayload;
+            const fd = openSync(filePath, "r");
+            try {
+                // Read a small chunk to find the next newline
+                const scanBuf = Buffer.alloc(Math.min(1024 * 1024, maxPayload));
+                const bytesRead = readSync(fd, scanBuf, 0, scanBuf.length, seekPos);
+                let newlineOffset = -1;
+                for (let i = 0; i < bytesRead; i++) {
+                    if (scanBuf[i] === 0x0a) {
+                        newlineOffset = i;
+                        break;
+                    }
+                }
+                const startPos = newlineOffset >= 0 ? seekPos + newlineOffset + 1 : seekPos + scanBuf.length;
+                const tailSize = st.size - startPos;
+                const tailBuf = Buffer.alloc(tailSize);
+                readSync(fd, tailBuf, 0, tailSize, startPos);
+                const marker = Buffer.from(MARKER_LINE, "utf8");
+                return Buffer.concat([marker, tailBuf]);
+            }
+            finally {
+                closeSync(fd);
+            }
+        }
+        catch (err) {
+            console.error("[checkpoint] Failed to read session JSONL:", err.message);
+            return null;
+        }
+    }
+    readAndHash(filePath, hash) {
+        return new Promise((resolve, reject) => {
+            const chunks = [];
+            const stream = createReadStream(filePath);
+            stream.on("data", (chunk) => {
+                if (typeof chunk === "string")
+                    chunk = Buffer.from(chunk);
+                hash.update(chunk);
+                chunks.push(chunk);
+            });
+            stream.on("end", () => resolve(Buffer.concat(chunks)));
+            stream.on("error", reject);
+        });
+    }
+    cleanupTempFiles(msg) {
+        try {
+            if (msg.patchPath)
+                unlinkSync(msg.patchPath);
+        }
+        catch { }
+        try {
+            if (msg.untrackedPath)
+                unlinkSync(msg.untrackedPath);
+        }
+        catch { }
+        // Try to remove the temp directory
+        if (msg.patchPath || msg.untrackedPath) {
+            const dir = msg.patchPath
+                ? msg.patchPath.replace(/\/[^/]+$/, "")
+                : msg.untrackedPath.replace(/\/[^/]+$/, "");
+            try {
+                rmSync(dir, { recursive: true, force: true });
+            }
+            catch { }
+        }
+    }
+}
+//# sourceMappingURL=checkpoint.js.map

package/dist/sync/checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../src/sync/checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AAC9H,OAAO,EAAE,UAAU,EAAa,MAAM,QAAQ,CAAC;AAG/C,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,WAAW,GAAG,uGAAuG,CAAC;AAc5H,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAY;IAClB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,OAAO,CAAS;IAChB,YAAY,GAAG,CAAC,CAAC;IACjB,iBAAiB,GAA6B,IAAI,CAAC;IAE3D,YAAY,MAAiB,EAAE,SAAiB,EAAE,UAAkB,EAAE,OAAe;QACnF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAsB,EAAE,WAAW,GAAG,KAAK;QAChE,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC;QAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,WAAW,EAAE,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE7E,MAAM,gBAAgB,GAAG,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACnD,MAAM,YAAY,GAAyE,EAAE,CAAC;YAE9F,+DAA+D;YAC/D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAElC,eAAe;YACf,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7D,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvB,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;gBACtE,YAAY,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzE,CAAC;YAED,mBAAmB;YACnB,IAAI,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAClB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;gBACtE,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,CAAC;gBACjF,YAAY,CAAC,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpF,CAAC;YAED,4CAA4C;YAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBAC7D,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oBAC3B,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,CAAC;qBAAM,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;oBACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAClB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;oBAC/D,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC,CAAC;oBAC5E,YAAY,CAAC,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/E,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAClB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;oBAC3B,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,CAAC;oBAC9E,YAAY,CAAC,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEhD,iBAAiB;YACjB,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ;gBACR,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,IAAI;gBACzC,WAAW,EAAE,GAAG,CAAC,UAAU;gBAC3B,aAAa,EAAE,YAAY,CAAC,aAAa,IAAI,IAAI;gBACjD,eAAe,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACzE,eAAe,EAAE,GAAG,CAAC,cAAc;gBACnC,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,IAAI;gBAC7C,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC7D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,iBAAiB,EAAE,gBAAgB;aACpC,CAAC;YAEF,uBAAuB;YACvB,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC,CAAC;YAE7E,0BAA0B;YAC1B,MAAM,WAAW,GAA2B,EAAE,CAAC;YAC/C,IAAI,YAAY,CAAC,SAAS;gBAAE,WAAW,CAAC,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC;YAC/E,IAAI,YAAY,CAAC,WAAW;gBAAE,WAAW,CAAC,iBAAiB,GAAG,YAAY,CAAC,WAAW,CAAC;YACvF,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE/B,sBAAsB;YACtB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,4BAA4B;YAC5B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAsB,EAAE,IAAY;QAC/D,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,iCAAiC;YACjC,IAAI,IAAI,GAAkB,IAAI,CAAC;YAC/B,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC1B,IAAI,EAAE,CAAC,OAAO,GAAG,SAAS,EAAE,CAAC;oBAC3B,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;oBACvB,IAAI,GAAG,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,QAAgB;QAC1C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE/B,IAAI,EAAE,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;gBAC/B,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,mDAAmD;YACnD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,eAAe,GAAG,WAAW,CAAC;YACjD,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,GAAG,UAAU,CAAC;YAErC,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,8CAA8C;gBAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;gBAChE,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAEpE,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;gBACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;oBACnC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBACxB,aAAa,GAAG,CAAC,CAAC;wBAClB,MAAM;oBACR,CAAC;gBACH,CAAC;gBAED,MAAM,QAAQ,GAAG,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC7F,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACpC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACvC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAE7C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBAChD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1C,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,QAAgB,EAAE,IAAU;QAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;gBAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,GAAsB;QAC7C,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,SAAS;gBAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,aAAa;gBAAE,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,mCAAmC;QACnC,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS;gBACvB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;gBACvC,CAAC,CAAC,GAAG,CAAC,aAAc,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/sync/command-listener.d.ts

@@ -0,0 +1,25 @@
+import type { APIClient } from "../api/client.js";
+import type { ChildProcess } from "child_process";
+export interface CommandListenerOptions {
+    client: APIClient;
+    sessionId: string;
+    sessionDir: string;
+    piProcess: ChildProcess;
+    onJsonlUpload?: () => void;
+}
+export declare class CommandListener {
+    private client;
+    private sessionId;
+    private sessionDir;
+    private piProcess;
+    private onJsonlUpload?;
+    private abortController;
+    private lastAckedSeq;
+    private running;
+    constructor(opts: CommandListenerOptions);
+    start(): void;
+    stop(): void;
+    private connectLoop;
+    private streamCommands;
+    private handleCommand;
+}

package/dist/sync/command-listener.js

@@ -0,0 +1,152 @@
+import { writeFileSync, openSync, closeSync, fsyncSync } from "fs";
+import { join } from "path";
+export class CommandListener {
+    client;
+    sessionId;
+    sessionDir;
+    piProcess;
+    onJsonlUpload;
+    abortController = null;
+    lastAckedSeq = 0;
+    running = false;
+    constructor(opts) {
+        this.client = opts.client;
+        this.sessionId = opts.sessionId;
+        this.sessionDir = opts.sessionDir;
+        this.piProcess = opts.piProcess;
+        this.onJsonlUpload = opts.onJsonlUpload;
+    }
+    start() {
+        if (this.running)
+            return;
+        this.running = true;
+        this.connectLoop();
+    }
+    stop() {
+        this.running = false;
+        this.abortController?.abort();
+        this.abortController = null;
+    }
+    async connectLoop() {
+        while (this.running) {
+            try {
+                await this.streamCommands();
+            }
+            catch (err) {
+                if (!this.running)
+                    return;
+                console.error("[command-listener] Connection lost, reconnecting in 3s:", err);
+                await sleep(3000);
+            }
+        }
+    }
+    async streamCommands() {
+        this.abortController = new AbortController();
+        const url = this.client.getCommandStreamUrl(this.sessionId, this.lastAckedSeq);
+        const res = await fetch(url, {
+            headers: {
+                ...this.client.getAuthHeaders(),
+                Accept: "text/event-stream",
+            },
+            signal: this.abortController.signal,
+        });
+        if (!res.ok) {
+            throw new Error(`Command stream failed: ${res.status}`);
+        }
+        const reader = res.body?.getReader();
+        if (!reader)
+            throw new Error("No response body");
+        const decoder = new TextDecoder();
+        let buffer = "";
+        while (this.running) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            buffer += decoder.decode(value, { stream: true });
+            const lines = buffer.split("\n");
+            buffer = lines.pop() ?? "";
+            let currentEvent = "";
+            let currentData = "";
+            let currentId = "";
+            for (const line of lines) {
+                if (line.startsWith("event: ")) {
+                    currentEvent = line.slice(7).trim();
+                }
+                else if (line.startsWith("data: ")) {
+                    currentData = line.slice(6);
+                }
+                else if (line.startsWith("id: ")) {
+                    currentId = line.slice(4).trim();
+                }
+                else if (line === "" && currentEvent) {
+                    // End of SSE message
+                    if (currentEvent === "session_ended") {
+                        console.error("[command-listener] Session ended, stopping");
+                        this.stop();
+                        return;
+                    }
+                    if (currentEvent === "user_message" && currentData) {
+                        try {
+                            const parsed = JSON.parse(currentData);
+                            await this.handleCommand(parsed.id, parsed.text, parseInt(currentId, 10));
+                        }
+                        catch (err) {
+                            console.error("[command-listener] Failed to handle command:", err);
+                        }
+                    }
+                    currentEvent = "";
+                    currentData = "";
+                    currentId = "";
+                }
+            }
+        }
+    }
+    async handleCommand(commandId, text, seq) {
+        // Step a: Append to local JSONL (fsync)
+        const jsonlPath = join(this.sessionDir, "injected-messages.jsonl");
+        const entry = JSON.stringify({
+            type: "user_injected_message",
+            text,
+            command_id: commandId,
+            seq,
+            timestamp: new Date().toISOString(),
+        }) + "\n";
+        const fd = openSync(jsonlPath, "a");
+        try {
+            writeFileSync(fd, entry);
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+        // Step b: Trigger JSONL upload (best-effort, non-blocking)
+        if (this.onJsonlUpload) {
+            try {
+                this.onJsonlUpload();
+            }
+            catch {
+                // best-effort
+            }
+        }
+        // Step c: Deliver to pi via follow_up on stdin
+        const followUp = JSON.stringify({ type: "follow_up", message: text });
+        try {
+            this.piProcess.stdin?.write(followUp + "\n");
+        }
+        catch (err) {
+            console.error("[command-listener] Failed to write to pi stdin:", err);
+        }
+        // Step d: Ack only after steps a-c
+        try {
+            await this.client.ackCommand(this.sessionId, commandId);
+            this.lastAckedSeq = seq;
+        }
+        catch (err) {
+            console.error("[command-listener] Failed to ack command:", err);
+        }
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=command-listener.js.map

package/dist/sync/command-listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-listener.js","sourceRoot":"","sources":["../../src/sync/command-listener.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAY5B,MAAM,OAAO,eAAe;IAClB,MAAM,CAAY;IAClB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,SAAS,CAAe;IACxB,aAAa,CAAc;IAC3B,eAAe,GAA2B,IAAI,CAAC;IAC/C,YAAY,GAAG,CAAC,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,IAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC1C,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAO;gBAC1B,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,GAAG,CAAC,CAAC;gBAC9E,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAE/E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;gBAC/B,MAAM,EAAE,mBAAmB;aAC5B;YACD,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAEhB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE3B,IAAI,YAAY,GAAG,EAAE,CAAC;YACtB,IAAI,WAAW,GAAG,EAAE,CAAC;YACrB,IAAI,SAAS,GAAG,EAAE,CAAC;YAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC/B,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACtC,CAAC;qBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACrC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC;qBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnC,CAAC;qBAAM,IAAI,IAAI,KAAK,EAAE,IAAI,YAAY,EAAE,CAAC;oBACvC,qBAAqB;oBACrB,IAAI,YAAY,KAAK,eAAe,EAAE,CAAC;wBACrC,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;wBAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;wBACZ,OAAO;oBACT,CAAC;oBAED,IAAI,YAAY,KAAK,cAAc,IAAI,WAAW,EAAE,CAAC;wBACnD,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAiC,CAAC;4BACvE,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;wBAC5E,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;wBACrE,CAAC;oBACH,CAAC;oBAED,YAAY,GAAG,EAAE,CAAC;oBAClB,WAAW,GAAG,EAAE,CAAC;oBACjB,SAAS,GAAG,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,IAAY,EAAE,GAAW;QACtE,wCAAwC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,IAAI,EAAE,uBAAuB;YAC7B,IAAI;YACJ,UAAU,EAAE,SAAS;YACrB,GAAG;YACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,GAAG,IAAI,CAAC;QACV,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACzB,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAED,2DAA2D;QAC3D,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;CACF;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/extensions/naiad-extension.ts

@@ -8,6 +8,10 @@ import {
   type ToolCall,
   createAssistantMessageEventStream,
 } from "@mariozechner/pi-ai";
+import { execSync, execFileSync } from "child_process";
+import * as fs from "fs";
+import * as path from "path";
+import * as os from "os";
 
 interface NaiadModel {
   id: string;
@@ -27,6 +31,115 @@ export default function (pi: ExtensionAPI) {
     return;
   }
 
+  // --- Git checkpoint on turn_end ---
+  const callbackUrl = process.env.NAIAD_CALLBACK_URL;
+  const reporter = {
+    send(type: string, data: unknown) {
+      if (callbackUrl) {
+        fetch(callbackUrl, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ type, data }),
+        }).catch(() => {});
+      } else if (process.send) {
+        process.send({ type, data });
+      }
+    },
+  };
+
+  if (typeof (pi as any).on === "function") {
+    (pi as any).on("turn_end", () => {
+      try {
+        const baseSha = process.env.NAIAD_BASE_SHA;
+        if (!baseSha) return;
+
+        const headSha = execFileSync("git", ["rev-parse", "HEAD"]).toString().trim();
+
+        let patch: Buffer;
+        let patchExceededMaxBuffer = false;
+        try {
+          patch = execFileSync("git", ["diff", "--binary", baseSha], {
+            maxBuffer: 100 * 1024 * 1024,
+            encoding: "buffer",
+          });
+        } catch (err: any) {
+          if (err.code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") {
+            patchExceededMaxBuffer = true;
+            patch = Buffer.alloc(0);
+          } else {
+            throw err;
+          }
+        }
+
+        const untrackedList = execFileSync("git", ["ls-files", "-oz", "--exclude-standard"])
+          .toString().split("\0").filter(Boolean)
+          .filter(f => !f.startsWith("/") && !f.includes("..") && !f.startsWith("~"));
+
+        const sensitivePatterns = [".env", ".npmrc", ".netrc", ".pgpass", "credentials",
+          "id_rsa", "id_ed25519", ".pem", ".key", ".p12", ".keystore"];
+        const safeUntrackedList = untrackedList.filter(f => {
+          const basename = f.split("/").pop()!.toLowerCase();
+          return !sensitivePatterns.some(p => basename === p || basename.startsWith(p + "."));
+        });
+
+        let untrackedTarball: Buffer | null = null;
+        let untrackedExceededMaxBuffer = false;
+        if (safeUntrackedList.length > 0) {
+          const fileListBuf = Buffer.from(safeUntrackedList.join("\0") + "\0");
+          try {
+            untrackedTarball = execFileSync("tar", ["czf", "-", "--null", "-T", "-"], {
+              input: fileListBuf,
+              maxBuffer: 250 * 1024 * 1024,
+            });
+          } catch (err: any) {
+            if (err.code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") {
+              untrackedExceededMaxBuffer = true;
+              untrackedTarball = null;
+            } else {
+              console.error("[naiad] tar failed, skipping untracked archive:", err.message);
+              untrackedTarball = null;
+            }
+          }
+        }
+
+        const patchOverCap = patchExceededMaxBuffer || patch.length > 50 * 1024 * 1024;
+        const untrackedOverCap = untrackedExceededMaxBuffer || (untrackedTarball !== null && untrackedTarball.length > 200 * 1024 * 1024);
+        const skippedArtifacts: string[] = [];
+        if (patchOverCap) skippedArtifacts.push("patch");
+        if (untrackedOverCap) skippedArtifacts.push("untracked");
+
+        const tmpDir = path.join(os.tmpdir(), `naiad-checkpoint-${Date.now()}`);
+        fs.mkdirSync(tmpDir, { recursive: true });
+
+        let patchPath: string | null = null;
+        if (!patchOverCap && patch.length > 0) {
+          patchPath = path.join(tmpDir, "patch.bin");
+          fs.writeFileSync(patchPath, patch);
+        }
+
+        let untrackedPath: string | null = null;
+        if (!untrackedOverCap && untrackedTarball) {
+          untrackedPath = path.join(tmpDir, "untracked.tar.gz");
+          fs.writeFileSync(untrackedPath, untrackedTarball);
+        }
+
+        reporter.send("checkpoint", {
+          base_sha: baseSha,
+          head_sha: headSha,
+          patchPath,
+          untrackedPath,
+          untrackedFiles: safeUntrackedList,
+          patchBytes: patch.length,
+          patchExceededMaxBuffer,
+          skippedArtifacts,
+          timestamp: Date.now(),
+        });
+      } catch (err: any) {
+        console.error("[naiad] checkpoint generation failed:", err.message);
+      }
+    });
+  }
+
   // Parse available models from env; fall back to a single placeholder if unset
   let naiadModels: NaiadModel[] = [];
   try {
@@ -39,7 +152,6 @@ export default function (pi: ExtensionAPI) {
   }
 
   // Event forwarding via HTTP callback (for interactive mode)
-  const callbackUrl = process.env.NAIAD_CALLBACK_URL;
   if (callbackUrl && typeof (pi as any).on === "function") {
     const postEvent = (type: string, data: unknown) => {
       fetch(callbackUrl, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "naiad-cli",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "type": "module",
   "bin": {
     "naiad": "./dist/index.js"