negotium 0.22.3 → 0.22.5

package/dist/types/packages/core/src/agents/mcp-tools/request-vault.d.ts

@@ -0,0 +1,120 @@
+import { type SharedMcpTool } from "./common";
+import { type RuntimeProcessLease, type RuntimeProcessLeaseHandle } from "../../storage/runtime-process-leases";
+import { type ClaimVaultRequestGateResult, type PrepareVaultRequestGateResult, type VaultRequestGateCardUpdate } from "../../storage/vault-request-gates";
+import type { AgentKind } from "../../types";
+import type { MessageDto, TopicDto } from "../../types/api";
+export interface RequestVaultToolContext {
+    userId: string;
+    topicId: string;
+    queryId?: string;
+    agent: AgentKind;
+    model?: string;
+    threadRootId?: string;
+    /**
+     * Set when this turn's surface cannot mask text input (Telegram has no
+     * native password field, so anything a person types becomes a plaintext
+     * message that lingers in chat history). When true the tool refuses
+     * immediately and never creates a card, instead of asking for a secret on
+     * a surface that cannot protect it.
+     */
+    unsupportedSurface?: boolean;
+}
+export type AnswerVaultSecretRequestResult = {
+    ok: true;
+    queryId?: string;
+    outcome: "fulfilled" | "declined";
+    answerMessage: MessageDto;
+} | {
+    ok: false;
+    error: string;
+};
+export interface RequestVaultRuntimeHost {
+    messaging: {
+        persistence: {
+            getMessage(topicId: string, messageId: string): MessageDto | null | undefined;
+            appendMessage(message: MessageDto): void;
+        };
+        publication: {
+            publishMessage(topicId: string, message: MessageDto): void;
+            publishCardUpdate(update: VaultRequestGateCardUpdate): void;
+        };
+    };
+    topics: {
+        getTopic(topicId: string): Pick<TopicDto, "participants"> | null | undefined;
+        getConfig(topicId: string): {
+            model?: string;
+        } | undefined;
+    };
+    vault: {
+        hasKey(userId: string, key: string): boolean;
+        /** Writes the secret. Called before the gate is claimed, so a storage
+         * failure never leaves a card marked "fulfilled" without a stored value. */
+        set(userId: string, key: string, value: string, description: string): void;
+    };
+    durability: {
+        gates: {
+            prepare(args: {
+                gateId: string;
+                topicId: string;
+                queryId?: string;
+                idempotencyKey: string;
+                bodyHash: string;
+                messageId: string;
+                ownerId: string;
+                now: string;
+            }): PrepareVaultRequestGateResult;
+            claimAndAnswer(args: {
+                topicId: string;
+                messageId: string;
+                outcome: "fulfilled" | "declined";
+                userId: string;
+                ownerId: string;
+                source: string;
+                now: string;
+            }): ClaimVaultRequestGateResult;
+            cancel(topicId: string, messageId: string, ownerId: string, now: string): VaultRequestGateCardUpdate | null;
+            quarantine(gateId: string, ownerId: string, now: string): VaultRequestGateCardUpdate | null;
+            quarantineForeign(liveOwnerIds: ReadonlySet<string>, now: string): VaultRequestGateCardUpdate[];
+        };
+        processLeases: {
+            acquire(role: string, ownerId: string): RuntimeProcessLeaseHandle | null;
+            list(rolePrefix: string): RuntimeProcessLease[];
+            isAlive(lease: RuntimeProcessLease): boolean;
+            removeDead(rolePrefix: string): void;
+        };
+    };
+    runtime: {
+        ownerId: string;
+        createId(): string;
+        now(): string;
+    };
+}
+export interface RequestVaultRuntime {
+    startGateOwner(): void;
+    stopGateOwner(): void;
+    reconcilePendingGates(): number;
+    answerPendingRequest(topicId: string, messageId: string, userId: string, value: string | null): AnswerVaultSecretRequestResult;
+    cancelPendingRequests(topicId: string, queryId: string): void;
+    createToolDefinition(ctx: RequestVaultToolContext): SharedMcpTool;
+}
+/**
+ * Create an isolated request-vault-secret lifecycle over host-provided
+ * messaging, topic, vault, durability, and runtime services. Mirrors
+ * `createAskUserRuntime`'s durable-gate shape, but the thing being
+ * exchanged is "did the user supply a value", never the value itself.
+ */
+export declare function createRequestVaultRuntime(host: RequestVaultRuntimeHost): RequestVaultRuntime;
+export declare const defaultRequestVaultDurabilityHost: RequestVaultRuntimeHost["durability"];
+export declare function startRequestVaultGateOwner(): void;
+export declare function stopRequestVaultGateOwner(): void;
+export declare function reconcilePendingRequestVaultGates(): number;
+/**
+ * Host-neutral answer path for pending vault-request cards. Terminal and
+ * Otium should call this rather than reimplementing pending-map and
+ * persistence ordering. `value: null` means the user declined; any other
+ * string is the secret, stored via `vaultSet` before the gate is claimed,
+ * and never echoed back in the result.
+ */
+export declare function answerPendingVaultSecretRequest(topicId: string, messageId: string, userId: string, value: string | null): AnswerVaultSecretRequestResult;
+export declare function cancelPendingVaultSecretRequests(topicId: string, queryId: string): void;
+export declare function createRequestVaultToolDefinition(ctx: RequestVaultToolContext): SharedMcpTool;

package/dist/types/packages/core/src/agents/rollout/claude.d.ts

@@ -26,6 +26,11 @@ import type { ConversationEntry } from "../../storage/conversations";
  * synthetic rollouts landed at `…-user_6407801418/` while the SDK looked
  * at `…-user-6407801418/` — every `set_agent` switch surfaced as "No
  * conversation found with session ID" on the next message.
+ *
+ * Nothing is prepended: a POSIX path starts with `/`, which already becomes
+ * the leading `-`. A Windows path does not, and the SDK writes
+ * `C:\Users\x` as `C--Users-x`; forcing a `-` in front sent Windows rollouts
+ * to `-C--Users-x/`, where the SDK never looks.
  */
 export declare function encodeClaudeCwd(cwd: string): string;
 export interface ClaudeRolloutOptions {

package/dist/types/packages/core/src/platform/mcp-config.d.ts

@@ -2,6 +2,7 @@ import { type RuntimeMcpScope } from "./mcp-catalog-policy";
 import { browserOwnerCapability } from "./playwright/capability";
 import { buildPlaywrightMcpTransport, CODEX_BROWSER_CAPABILITY_ENV } from "./playwright/mcp-transport";
 import type { ActorTopicScope, AgentKind, AgentQueryOptions, PeerRuntimeBridgeContext, RemoteSessionGrant } from "../types";
+import type { TopicDto } from "../types/api";
 export type { RuntimeMcpScope } from "./mcp-catalog-policy";
 /**
  * Build the stdio transport spec for a Otium MCP server entry.
@@ -172,6 +173,13 @@ export declare function setNodeMcpServers(entries: NodeMcpEntry[]): void;
 export declare function getNodeMcpServers(): readonly NodeMcpEntry[];
 /** Prevent host grants from replacing node-owned MCP servers. */
 export declare function isReservedRuntimeMcpServerName(name: string): boolean;
+/**
+ * Why `topic` may not receive host MCP servers named `names`, or null when it
+ * may. A manager room takes any of them. An ordinary room takes everything but
+ * the manager administration surface, so a host can scope its own tools to a
+ * room. A subagent room takes none.
+ */
+export declare function hostMcpGrantRefusal(topic: Pick<TopicDto, "kind" | "isSubagent">, names: readonly string[]): string | null;
 /**
  * Lazily prepare per-topic HTTP manifest entries before a provider resolves
  * its otherwise-synchronous MCP config. One failed custom server is omitted

package/dist/types/packages/core/src/runtime/turn-runner.d.ts

@@ -186,8 +186,12 @@ export declare function resolveTurnToolCapabilities(topicId: string, params: {
     visualTools: boolean;
     fileDeliveryTools: boolean;
 };
-/** Require both room kind and execution scope so cron/ephemeral turns cannot inherit the grant. */
-export declare function resolveTurnHostMcpServers(topic: Pick<TopicDto, "id" | "kind">, sessionType?: "dm" | "forum" | "ephemeral" | "manager" | "cron"): Record<string, import("../runtime-gateway").HostMcpServerSpec> | undefined;
+/**
+ * A manager room's grant reaches only manager executions and an ordinary
+ * room's only forum executions, so cron/ephemeral turns cannot inherit it.
+ * Subagent rooms never take one.
+ */
+export declare function resolveTurnHostMcpServers(topic: Pick<TopicDto, "id" | "kind" | "isSubagent">, sessionType?: "dm" | "forum" | "ephemeral" | "manager" | "cron"): Record<string, import("../runtime-gateway").HostMcpServerSpec> | undefined;
 export interface StartAiTurnParams extends AiTurnExecutionOptions {
     topic: AiTurnTopic;
     userId: string;

package/dist/types/packages/core/src/storage/api-messages.d.ts

@@ -20,6 +20,7 @@ export interface ApiMessageRow {
     ask_user_question: string | null;
     tell_card: string | null;
     subagent_card: string | null;
+    vault_secret_request: string | null;
     mentions: string | null;
     thread_root_id: string | null;
     created_at: string;

package/dist/types/packages/core/src/storage/vault-request-gates.d.ts

@@ -0,0 +1,69 @@
+import type { VaultSecretRequestDto } from "../types/api";
+export type VaultRequestGateState = "pending" | "claimed" | "answered" | "cancelled" | "quarantined";
+export interface VaultRequestGateRecord {
+    gateId: string;
+    topicId: string;
+    queryId?: string;
+    idempotencyKey: string;
+    bodyHash: string;
+    messageId: string;
+    ownerId: string;
+    state: VaultRequestGateState;
+    outcome?: "fulfilled" | "declined";
+    answeredBy?: string;
+}
+export interface VaultRequestGateCardUpdate {
+    topicId: string;
+    messageId: string;
+    vaultSecretRequest: VaultSecretRequestDto;
+    editedAt: string;
+}
+export type PrepareVaultRequestGateResult = {
+    outcome: "created";
+    gate: VaultRequestGateRecord;
+} | {
+    outcome: "pending";
+    gate: VaultRequestGateRecord;
+} | {
+    outcome: "replay";
+    gate: VaultRequestGateRecord;
+} | {
+    outcome: "conflict";
+    gate: VaultRequestGateRecord;
+};
+export declare function prepareVaultRequestGate(args: {
+    gateId: string;
+    topicId: string;
+    queryId?: string;
+    idempotencyKey: string;
+    bodyHash: string;
+    messageId: string;
+    ownerId: string;
+    now: string;
+}): PrepareVaultRequestGateResult;
+export declare function quarantineVaultRequestGate(gateId: string, ownerId: string, now?: string): VaultRequestGateCardUpdate | null;
+export declare function quarantineForeignVaultRequestGates(liveOwnerIds: ReadonlySet<string>, now?: string): VaultRequestGateCardUpdate[];
+export type ClaimVaultRequestGateResult = {
+    outcome: "claimed";
+    gate: VaultRequestGateRecord;
+    vaultSecretRequest: VaultSecretRequestDto;
+    editedAt: string;
+} | {
+    outcome: "unavailable";
+};
+/**
+ * Claim the gate and mark the card's outcome. This never touches the secret
+ * value itself — the caller is responsible for writing to the vault (via
+ * `vaultSet`) *before* calling this, so the card only ever reflects
+ * "fulfilled"/"declined", never the plaintext.
+ */
+export declare function claimVaultRequestGateAndAnswer(args: {
+    topicId: string;
+    messageId: string;
+    outcome: "fulfilled" | "declined";
+    userId: string;
+    ownerId: string;
+    source: string;
+    now: string;
+}): ClaimVaultRequestGateResult;
+export declare function cancelVaultRequestGate(topicId: string, messageId: string, ownerId: string, now?: string): VaultRequestGateCardUpdate | null;

package/dist/types/packages/core/src/types/api.d.ts

@@ -249,8 +249,9 @@ export interface MessageDto {
     threadLastReplyAt?: string;
     /** Emoji reactions, one entry per (user, emoji). */
     reactions?: ReactionDto[];
-    kind?: "message" | "system" | "tool" | "ask_user_question" | "subagent" | "tell";
+    kind?: "message" | "system" | "tool" | "ask_user_question" | "vault_secret_request" | "subagent" | "tell";
     askUserQuestion?: AskUserQuestionDto;
+    vaultSecretRequest?: VaultSecretRequestDto;
     subagentCard?: SubagentCardDto;
     tellCard?: TellCardDto;
     createdAt: string;
@@ -264,6 +265,18 @@ export interface AskUserQuestionDto {
     selectedLabel?: string;
     expired?: boolean;
 }
+/**
+ * Blocking card for `request_vault_secret`: the agent proposes a key and
+ * description, a person types only the value on a surface that can mask
+ * input, and the plaintext never flows back through this DTO, a tool
+ * result, or chat history — only the outcome does.
+ */
+export interface VaultSecretRequestDto {
+    key: string;
+    description?: string;
+    status: "pending" | "fulfilled" | "declined" | "expired";
+    answeredBy?: string;
+}
 /** Structured cross-session delivery. Never inferred from system-message text. */
 export interface TellCardDto {
     fromLabel: string;
@@ -461,6 +474,7 @@ export type WsServerMessage = {
     editedAt?: string;
     usage?: MessageTokenUsage;
     askUserQuestion?: AskUserQuestionDto;
+    vaultSecretRequest?: VaultSecretRequestDto;
     subagentCard?: SubagentCardDto;
 } | {
     type: "reaction_update";

package/dist/types/packages/core/src/version.d.ts

@@ -1 +1 @@
-export declare const NEGOTIUM_VERSION = "0.22.3";
+export declare const NEGOTIUM_VERSION = "0.22.5";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "negotium",
-  "version": "0.22.3",
+  "version": "0.22.5",
   "type": "module",
   "description": "Install the Negotium multi-agent runtime and CLI with one package",
   "license": "Apache-2.0",

package/dist/chunk-bn1tt2qw.js.map

@@ -1,10 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../packages/core/src/agents/rollout/claude.ts"],
-  "sourcesContent": [
-    "/**\n * Claude rollout encoder.\n *\n * Materializes a synthetic JSONL at `~/.claude/projects/<encoded-cwd>/<sessionId>.jsonl`\n * so a subsequent `claude.query({ resume: sessionId })` continues the\n * cross-agent conversation as if it had always been native. Verified by\n * sandbox PoCs (test-7c/test-7d): the SDK accepts these without checksum\n * gating, requiring only `user`/`assistant` messages and a small per-turn\n * attachment chain captured into `agents/fixtures/claude-attachments.jsonl`.\n *\n * Tool history is folded into assistant text as `[Tool: ...]` annotations\n * (see shared.ts:extractChatPairs) — synthetic tool_use IDs across SDKs are\n * too fragile to reconstruct structurally.\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport {\n  assertUuidLike,\n  type ChatPair,\n  clone,\n  ensureCwdExists,\n  extractChatPairs,\n  FIXTURES_DIR,\n} from \"#agents/rollout/shared\";\nimport { parseJsonlText, writeJsonlFile } from \"#platform/jsonl\";\nimport { logger } from \"#platform/logger\";\nimport type { ConversationEntry } from \"#storage/conversations\";\n\ninterface ClaudeAttachments {\n  deferredToolsDelta: Record<string, unknown>;\n  skillListing: Record<string, unknown>;\n}\n\nlet _attachmentsCache: ClaudeAttachments | null = null;\nfunction loadClaudeAttachments(): ClaudeAttachments {\n  if (_attachmentsCache) return _attachmentsCache;\n  const raw = readFileSync(join(FIXTURES_DIR, \"claude-attachments.jsonl\"), \"utf8\");\n  const lines = parseJsonlText<Record<string, unknown>>(raw);\n  if (lines.length < 2) {\n    throw new Error(\n      `loadClaudeAttachments: expected >=2 entries in claude-attachments.jsonl, got ${lines.length}`,\n    );\n  }\n  _attachmentsCache = {\n    deferredToolsDelta: lines[0],\n    skillListing: lines[1],\n  };\n  return _attachmentsCache;\n}\n\n/**\n * Version strings stamped onto synthetic rollouts so they look indistinguishable\n * from a live SDK session. These do not affect resume behavior — the SDKs do\n * not gate on them — but keeping them current avoids confusion in observability\n * tooling that scans rollout files.\n */\nconst CLAUDE_SDK_VERSION = \"2.1.126\";\nconst CLAUDE_DEFAULT_MODEL = \"claude-sonnet-5\";\nconst CLAUDE_DEFAULT_GIT_BRANCH = \"HEAD\";\n\n/**\n * Encode a directory path the way Claude SDK expects in\n * `~/.claude/projects/<encoded-cwd>/`. macOS resolves `/tmp` to\n * `/private/tmp`, mirroring what the SDK records.\n *\n * The SDK normalizes ANY non-alphanumeric character to `-` (verified\n * empirically on disk: `/Users/maestrobot/.../user_6407801418` →\n * `-Users-...-user-6407801418`, i.e. both `/` AND `_` collapse to `-`).\n * A previous implementation only replaced `/` and left `_` intact, so\n * synthetic rollouts landed at `…-user_6407801418/` while the SDK looked\n * at `…-user-6407801418/` — every `set_agent` switch surfaced as \"No\n * conversation found with session ID\" on the next message.\n */\nexport function encodeClaudeCwd(cwd: string): string {\n  const realCwd = cwd.startsWith(\"/tmp/\") ? cwd.replace(/^\\/tmp\\//, \"/private/tmp/\") : cwd;\n  return `-${realCwd.replaceAll(/[^a-zA-Z0-9]/g, \"-\").replace(/^-/, \"\")}`;\n}\n\nexport interface ClaudeRolloutOptions {\n  /** Working directory the resumed Claude session will report. */\n  cwd: string;\n  /** Optional override; default = freshly generated UUIDv4. */\n  sessionId?: string;\n  /**\n   * Pairs to encode. If omitted, derived from `entries` via extractChatPairs.\n   * Pass explicit pairs when the caller has already shaped the dialogue.\n   */\n  pairs?: ChatPair[];\n  /** When `pairs` is omitted, the source UnifiedEvent log to digest. */\n  entries?: ConversationEntry[];\n  /** Full provider model id stamped on synthesized assistant history. */\n  model?: string;\n}\n\nexport interface ClaudeRolloutResult {\n  sessionId: string;\n  rolloutPath: string;\n}\n\n/**\n * Materialize a Claude rollout JSONL with the provided dialogue and place it\n * at `~/.claude/projects/<encoded-cwd>/<sessionId>.jsonl` so a subsequent\n * `claude.query({ resume: sessionId })` will continue the conversation.\n */\nexport function writeClaudeRollout(opts: ClaudeRolloutOptions): ClaudeRolloutResult {\n  const sessionId = opts.sessionId ?? randomUUID();\n  assertUuidLike(\"sessionId\", sessionId);\n  ensureCwdExists(opts.cwd);\n  const pairs = opts.pairs ?? extractChatPairs(opts.entries ?? []);\n  const cwdReal = opts.cwd.startsWith(\"/tmp/\")\n    ? opts.cwd.replace(/^\\/tmp\\//, \"/private/tmp/\")\n    : opts.cwd;\n\n  const lines: unknown[] = [];\n  const ts = () => new Date().toISOString();\n  let lastUuid: string | null = null;\n\n  // Queue-operation noise that the live SDK records around each turn. Not\n  // strictly required for resume but mirrors what the SDK itself writes,\n  // keeping the synthetic file indistinguishable.\n  lines.push({ type: \"queue-operation\", operation: \"enqueue\", timestamp: ts(), sessionId });\n  lines.push({ type: \"queue-operation\", operation: \"dequeue\", timestamp: ts(), sessionId });\n\n  // Per-turn attachment chain captured from a real Claude rollout. claude SDK\n  // emits `deferred_tools_delta` followed by `skill_listing` immediately after\n  // every user message, building a parentUuid chain user → att1 → att2 →\n  // assistant. PoC-7d preserved this shape; replaying it keeps the resumed\n  // session indistinguishable from a native one.\n  const attachments = loadClaudeAttachments();\n\n  for (const pair of pairs) {\n    const userUuid = randomUUID();\n    lines.push({\n      parentUuid: lastUuid,\n      isSidechain: false,\n      promptId: randomUUID(),\n      type: \"user\",\n      message: { role: \"user\", content: [{ type: \"text\", text: pair.userText }] },\n      uuid: userUuid,\n      timestamp: ts(),\n      permissionMode: \"bypassPermissions\",\n      userType: \"external\",\n      entrypoint: \"sdk-ts\",\n      cwd: cwdReal,\n      sessionId,\n      version: CLAUDE_SDK_VERSION,\n      gitBranch: CLAUDE_DEFAULT_GIT_BRANCH,\n    });\n\n    // Attachment 1: deferred_tools_delta — chain from user.\n    const att1Uuid = randomUUID();\n    const att1 = clone(attachments.deferredToolsDelta);\n    (att1 as Record<string, unknown>).parentUuid = userUuid;\n    (att1 as Record<string, unknown>).uuid = att1Uuid;\n    (att1 as Record<string, unknown>).timestamp = ts();\n    (att1 as Record<string, unknown>).sessionId = sessionId;\n    (att1 as Record<string, unknown>).cwd = cwdReal;\n    lines.push(att1);\n\n    // Attachment 2: skill_listing — chain from att1.\n    const att2Uuid = randomUUID();\n    const att2 = clone(attachments.skillListing);\n    (att2 as Record<string, unknown>).parentUuid = att1Uuid;\n    (att2 as Record<string, unknown>).uuid = att2Uuid;\n    (att2 as Record<string, unknown>).timestamp = ts();\n    (att2 as Record<string, unknown>).sessionId = sessionId;\n    (att2 as Record<string, unknown>).cwd = cwdReal;\n    lines.push(att2);\n\n    const assistantUuid = randomUUID();\n    lines.push({\n      parentUuid: att2Uuid,\n      isSidechain: false,\n      message: {\n        model: opts.model ?? CLAUDE_DEFAULT_MODEL,\n        id: `msg_${randomUUID().replace(/-/g, \"\").slice(0, 24)}`,\n        type: \"message\",\n        role: \"assistant\",\n        content: [{ type: \"text\", text: pair.assistantText }],\n        stop_reason: \"end_turn\",\n        stop_sequence: null,\n        stop_details: null,\n        usage: {\n          input_tokens: 0,\n          cache_creation_input_tokens: 0,\n          cache_read_input_tokens: 0,\n          output_tokens: 0,\n          server_tool_use: { web_search_requests: 0, web_fetch_requests: 0 },\n          service_tier: \"standard\",\n          cache_creation: { ephemeral_1h_input_tokens: 0, ephemeral_5m_input_tokens: 0 },\n          inference_geo: \"\",\n          iterations: [],\n          speed: \"standard\",\n        },\n        diagnostics: null,\n      },\n      requestId: `req_${randomUUID().replace(/-/g, \"\").slice(0, 22)}`,\n      type: \"assistant\",\n      uuid: assistantUuid,\n      timestamp: ts(),\n      userType: \"external\",\n      entrypoint: \"sdk-ts\",\n      cwd: cwdReal,\n      sessionId,\n      version: CLAUDE_SDK_VERSION,\n      gitBranch: CLAUDE_DEFAULT_GIT_BRANCH,\n    });\n    lastUuid = assistantUuid;\n  }\n\n  const projectsDir = join(homedir(), \".claude\", \"projects\", encodeClaudeCwd(opts.cwd));\n  const path = join(projectsDir, `${sessionId}.jsonl`);\n  writeJsonlFile(path, lines);\n  logger.info(\n    { sessionId, path, pairs: pairs.length },\n    \"writeClaudeRollout: synthetic rollout placed\",\n  );\n  return { sessionId, rolloutPath: path };\n}\n\n/**\n * Remove the latest poisoned thinking turn and everything after it from the\n * session JSONL.\n *\n * When a turn ends with stop_reason=\"max_tokens\" while extended thinking is\n * active, the Claude CLI writes the truncated thinking block verbatim to the\n * rollout file. The Anthropic API rejects any subsequent resume that replays\n * this incomplete block with 400 \"thinking/redacted_thinking blocks cannot be\n * modified\". Dropping the entire poisoned turn (user entry + attachments +\n * truncated assistant) leaves the JSONL in a clean state so the next\n * claude.query({ resume }) can proceed without a 400.\n *\n * Returns true when the JSONL was found and repaired, false otherwise\n * (file missing, no poisoned assistant turn found, I/O error). Error-path\n * callers fall back to clearing the session ID when false is returned.\n */\nexport function repairPoisonedRollout(sessionId: string, cwd: string): boolean {\n  try {\n    const path = join(homedir(), \".claude\", \"projects\", encodeClaudeCwd(cwd), `${sessionId}.jsonl`);\n    if (!existsSync(path)) return false;\n\n    const lines = readFileSync(path, \"utf8\")\n      .split(\"\\n\")\n      .filter((l) => l.trim());\n\n    // Walk backwards to find the latest assistant turn that actually contains\n    // the poisoned shape: max_tokens plus a thinking/redacted_thinking block.\n    // A resume failure can append a fresh user entry after the poisoned turn;\n    // trimming the last user would remove only the retry and leave the bad\n    // assistant in place.\n    let poisonedAssistantIdx = -1;\n    for (let i = lines.length - 1; i >= 0; i--) {\n      const entry = parseClaudeRolloutLine(lines[i]);\n      if (entry && isPoisonedAssistantEntry(entry)) {\n        poisonedAssistantIdx = i;\n        break;\n      }\n    }\n\n    if (poisonedAssistantIdx < 0) {\n      logger.warn({ sessionId, path }, \"repairPoisonedRollout: no poisoned assistant entry found\");\n      return false;\n    }\n\n    let turnStartIdx = -1;\n    for (let i = poisonedAssistantIdx - 1; i >= 0; i--) {\n      const entry = parseClaudeRolloutLine(lines[i]);\n      if (entry?.type === \"user\") {\n        turnStartIdx = i;\n        break;\n      }\n    }\n\n    if (turnStartIdx < 0) {\n      logger.warn(\n        { sessionId, path, poisonedAssistantIdx },\n        \"repairPoisonedRollout: poisoned assistant has no preceding user entry\",\n      );\n      return false;\n    }\n\n    const kept = lines.slice(0, turnStartIdx);\n    writeFileSync(path, kept.length ? `${kept.join(\"\\n\")}\\n` : \"\");\n    logger.warn(\n      {\n        sessionId,\n        path,\n        poisonedAssistantIdx,\n        turnStartIdx,\n        droppedEntries: lines.length - turnStartIdx,\n        keptEntries: kept.length,\n      },\n      \"repairPoisonedRollout: truncated turn removed from rollout JSONL\",\n    );\n    return true;\n  } catch (err) {\n    logger.warn({ err, sessionId, cwd }, \"repairPoisonedRollout: I/O error\");\n    return false;\n  }\n}\n\ntype ClaudeRolloutEntry = {\n  type?: string;\n  message?: {\n    stop_reason?: string | null;\n    content?: unknown;\n  };\n};\n\nfunction parseClaudeRolloutLine(line: string): ClaudeRolloutEntry | null {\n  try {\n    return JSON.parse(line) as ClaudeRolloutEntry;\n  } catch {\n    return null;\n  }\n}\n\nfunction isPoisonedAssistantEntry(entry: ClaudeRolloutEntry): boolean {\n  if (entry.type !== \"assistant\") return false;\n  if (entry.message?.stop_reason !== \"max_tokens\") return false;\n  const content = entry.message.content;\n  if (!Array.isArray(content)) return false;\n  return content.some((block) => {\n    if (!block || typeof block !== \"object\") return false;\n    const type = (block as { type?: unknown }).type;\n    return type === \"thinking\" || type === \"redacted_thinking\";\n  });\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;AAeA;AACA;AACA;AACA;AAkBA,IAAI,oBAA8C;AAClD,SAAS,qBAAqB,GAAsB;AAAA,EAClD,IAAI;AAAA,IAAmB,OAAO;AAAA,EAC9B,MAAM,MAAM,aAAa,KAAK,cAAc,0BAA0B,GAAG,MAAM;AAAA,EAC/E,MAAM,QAAQ,eAAwC,GAAG;AAAA,EACzD,IAAI,MAAM,SAAS,GAAG;AAAA,IACpB,MAAM,IAAI,MACR,gFAAgF,MAAM,QACxF;AAAA,EACF;AAAA,EACA,oBAAoB;AAAA,IAClB,oBAAoB,MAAM;AAAA,IAC1B,cAAc,MAAM;AAAA,EACtB;AAAA,EACA,OAAO;AAAA;AAST,IAAM,qBAAqB;AAC3B,IAAM,uBAAuB;AAC7B,IAAM,4BAA4B;AAe3B,SAAS,eAAe,CAAC,KAAqB;AAAA,EACnD,MAAM,UAAU,IAAI,WAAW,OAAO,IAAI,IAAI,QAAQ,YAAY,eAAe,IAAI;AAAA,EACrF,OAAO,IAAI,QAAQ,WAAW,iBAAiB,GAAG,EAAE,QAAQ,MAAM,EAAE;AAAA;AA6B/D,SAAS,kBAAkB,CAAC,MAAiD;AAAA,EAClF,MAAM,YAAY,KAAK,aAAa,WAAW;AAAA,EAC/C,eAAe,aAAa,SAAS;AAAA,EACrC,gBAAgB,KAAK,GAAG;AAAA,EACxB,MAAM,QAAQ,KAAK,SAAS,iBAAiB,KAAK,WAAW,CAAC,CAAC;AAAA,EAC/D,MAAM,UAAU,KAAK,IAAI,WAAW,OAAO,IACvC,KAAK,IAAI,QAAQ,YAAY,eAAe,IAC5C,KAAK;AAAA,EAET,MAAM,QAAmB,CAAC;AAAA,EAC1B,MAAM,KAAK,MAAM,IAAI,KAAK,EAAE,YAAY;AAAA,EACxC,IAAI,WAA0B;AAAA,EAK9B,MAAM,KAAK,EAAE,MAAM,mBAAmB,WAAW,WAAW,WAAW,GAAG,GAAG,UAAU,CAAC;AAAA,EACxF,MAAM,KAAK,EAAE,MAAM,mBAAmB,WAAW,WAAW,WAAW,GAAG,GAAG,UAAU,CAAC;AAAA,EAOxF,MAAM,cAAc,sBAAsB;AAAA,EAE1C,WAAW,QAAQ,OAAO;AAAA,IACxB,MAAM,WAAW,WAAW;AAAA,IAC5B,MAAM,KAAK;AAAA,MACT,YAAY;AAAA,MACZ,aAAa;AAAA,MACb,UAAU,WAAW;AAAA,MACrB,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,QAAQ,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,SAAS,CAAC,EAAE;AAAA,MAC1E,MAAM;AAAA,MACN,WAAW,GAAG;AAAA,MACd,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb,CAAC;AAAA,IAGD,MAAM,WAAW,WAAW;AAAA,IAC5B,MAAM,OAAO,MAAM,YAAY,kBAAkB;AAAA,IAChD,KAAiC,aAAa;AAAA,IAC9C,KAAiC,OAAO;AAAA,IACxC,KAAiC,YAAY,GAAG;AAAA,IAChD,KAAiC,YAAY;AAAA,IAC7C,KAAiC,MAAM;AAAA,IACxC,MAAM,KAAK,IAAI;AAAA,IAGf,MAAM,WAAW,WAAW;AAAA,IAC5B,MAAM,OAAO,MAAM,YAAY,YAAY;AAAA,IAC1C,KAAiC,aAAa;AAAA,IAC9C,KAAiC,OAAO;AAAA,IACxC,KAAiC,YAAY,GAAG;AAAA,IAChD,KAAiC,YAAY;AAAA,IAC7C,KAAiC,MAAM;AAAA,IACxC,MAAM,KAAK,IAAI;AAAA,IAEf,MAAM,gBAAgB,WAAW;AAAA,IACjC,MAAM,KAAK;AAAA,MACT,YAAY;AAAA,MACZ,aAAa;AAAA,MACb,SAAS;AAAA,QACP,OAAO,KAAK,SAAS;AAAA,QACrB,IAAI,OAAO,WAAW,EAAE,QAAQ,MAAM,EAAE,EAAE,MAAM,GAAG,EAAE;AAAA,QACrD,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,cAAc,CAAC;AAAA,QACpD,aAAa;AAAA,QACb,eAAe;AAAA,QACf,cAAc;AAAA,QACd,OAAO;AAAA,UACL,cAAc;AAAA,UACd,6BAA6B;AAAA,UAC7B,yBAAyB;AAAA,UACzB,eAAe;AAAA,UACf,iBAAiB,EAAE,qBAAqB,GAAG,oBAAoB,EAAE;AAAA,UACjE,cAAc;AAAA,UACd,gBAAgB,EAAE,2BAA2B,GAAG,2BAA2B,EAAE;AAAA,UAC7E,eAAe;AAAA,UACf,YAAY,CAAC;AAAA,UACb,OAAO;AAAA,QACT;AAAA,QACA,aAAa;AAAA,MACf;AAAA,MACA,WAAW,OAAO,WAAW,EAAE,QAAQ,MAAM,EAAE,EAAE,MAAM,GAAG,EAAE;AAAA,MAC5D,MAAM;AAAA,MACN,MAAM;AAAA,MACN,WAAW,GAAG;AAAA,MACd,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,WAAW;AAAA,IACb,CAAC;AAAA,IACD,WAAW;AAAA,EACb;AAAA,EAEA,MAAM,cAAc,KAAK,QAAQ,GAAG,WAAW,YAAY,gBAAgB,KAAK,GAAG,CAAC;AAAA,EACpF,MAAM,OAAO,KAAK,aAAa,GAAG,iBAAiB;AAAA,EACnD,eAAe,MAAM,KAAK;AAAA,EAC1B,OAAO,KACL,EAAE,WAAW,MAAM,OAAO,MAAM,OAAO,GACvC,8CACF;AAAA,EACA,OAAO,EAAE,WAAW,aAAa,KAAK;AAAA;AAmBjC,SAAS,qBAAqB,CAAC,WAAmB,KAAsB;AAAA,EAC7E,IAAI;AAAA,IACF,MAAM,OAAO,KAAK,QAAQ,GAAG,WAAW,YAAY,gBAAgB,GAAG,GAAG,GAAG,iBAAiB;AAAA,IAC9F,IAAI,CAAC,WAAW,IAAI;AAAA,MAAG,OAAO;AAAA,IAE9B,MAAM,QAAQ,aAAa,MAAM,MAAM,EACpC,MAAM;AAAA,CAAI,EACV,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;AAAA,IAOzB,IAAI,uBAAuB;AAAA,IAC3B,SAAS,IAAI,MAAM,SAAS,EAAG,KAAK,GAAG,KAAK;AAAA,MAC1C,MAAM,QAAQ,uBAAuB,MAAM,EAAE;AAAA,MAC7C,IAAI,SAAS,yBAAyB,KAAK,GAAG;AAAA,QAC5C,uBAAuB;AAAA,QACvB;AAAA,MACF;AAAA,IACF;AAAA,IAEA,IAAI,uBAAuB,GAAG;AAAA,MAC5B,OAAO,KAAK,EAAE,WAAW,KAAK,GAAG,0DAA0D;AAAA,MAC3F,OAAO;AAAA,IACT;AAAA,IAEA,IAAI,eAAe;AAAA,IACnB,SAAS,IAAI,uBAAuB,EAAG,KAAK,GAAG,KAAK;AAAA,MAClD,MAAM,QAAQ,uBAAuB,MAAM,EAAE;AAAA,MAC7C,IAAI,OAAO,SAAS,QAAQ;AAAA,QAC1B,eAAe;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAAA,IAEA,IAAI,eAAe,GAAG;AAAA,MACpB,OAAO,KACL,EAAE,WAAW,MAAM,qBAAqB,GACxC,uEACF;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,OAAO,MAAM,MAAM,GAAG,YAAY;AAAA,IACxC,cAAc,MAAM,KAAK,SAAS,GAAG,KAAK,KAAK;AAAA,CAAI;AAAA,IAAQ,EAAE;AAAA,IAC7D,OAAO,KACL;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,MAAM,SAAS;AAAA,MAC/B,aAAa,KAAK;AAAA,IACpB,GACA,kEACF;AAAA,IACA,OAAO;AAAA,IACP,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK,EAAE,KAAK,WAAW,IAAI,GAAG,kCAAkC;AAAA,IACvE,OAAO;AAAA;AAAA;AAYX,SAAS,sBAAsB,CAAC,MAAyC;AAAA,EACvE,IAAI;AAAA,IACF,OAAO,KAAK,MAAM,IAAI;AAAA,IACtB,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,SAAS,wBAAwB,CAAC,OAAoC;AAAA,EACpE,IAAI,MAAM,SAAS;AAAA,IAAa,OAAO;AAAA,EACvC,IAAI,MAAM,SAAS,gBAAgB;AAAA,IAAc,OAAO;AAAA,EACxD,MAAM,UAAU,MAAM,QAAQ;AAAA,EAC9B,IAAI,CAAC,MAAM,QAAQ,OAAO;AAAA,IAAG,OAAO;AAAA,EACpC,OAAO,QAAQ,KAAK,CAAC,UAAU;AAAA,IAC7B,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,MAAU,OAAO;AAAA,IAChD,MAAM,OAAQ,MAA6B;AAAA,IAC3C,OAAO,SAAS,cAAc,SAAS;AAAA,GACxC;AAAA;",
-  "debugId": "1ECE58AFF7B086BE64756E2164756E21",
-  "names": []
-}