pennyrouter 0.2.8 → 0.2.10

package/src/statusline.test.js

@@ -1,72 +1,72 @@
-// Guards against the class of bug found 2026-07-18: an unescaped backtick inside a
-// comment on line 99 of statusline.js terminated the STATUSLINE_SCRIPT template
-// literal early, so every `pennyrouter install` since shipped a syntactically broken
-// generated script — installs succeeded silently, the crash only surfaced later, at
-// Claude Code's next statusline render, in a completely different process.
-//
-// `npm run check` (node --check on every source file) happened to catch this ONE
-// instance because the break also broke the OUTER file's parse — but that's
-// incidental: a subtler bug (backticks that still balance, or valid-looking JS that's
-// semantically wrong) would pass --check on the outer file yet still crash at
-// runtime, because --check never looks at the STRING CONTENT of a template literal.
-// This test extracts the ACTUAL constant (not a source-text regex) and validates the
-// real generated script: syntax-checks it, then executes it end-to-end with a fake
-// stdin payload the way Claude Code actually invokes it, so a broken script fails
-// `npm run check` locally instead of a user's install.
-//
-// No test framework in this package yet — plain assert + a process exit code, run via
-// `node src/statusline.test.js` (wired into `npm run check`).
-import assert from "node:assert/strict";
-import { execFileSync } from "node:child_process";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-import { configureClaudeCodeStatusline, statuslineScriptPath } from "./statusline.js";
-
-async function main() {
-  const tmpState = fs.mkdtempSync(path.join(os.tmpdir(), "pr-statusline-test-"));
-  const prevXdg = process.env.XDG_STATE_HOME;
-  process.env.XDG_STATE_HOME = tmpState;
-  try {
-    const current = {};
-    await configureClaudeCodeStatusline(current);
-    const scriptPath = statuslineScriptPath();
-    assert.ok(fs.existsSync(scriptPath), "script file was written");
-
-    // 1. Syntax: node --check on the ACTUAL written file (not a regex-extracted copy).
-    execFileSync(process.execPath, ["--check", scriptPath], { stdio: "pipe" });
-
-    // 2. Behavior: run it the way Claude Code does — JSON on stdin, plain stdout.
-    // The generated script may discover a real Claude config from the invoking user's
-    // home, but must render a valid Penny segment either way. XDG_STATE_HOME is isolated
-    // above, so no cached session state or wrapped command can influence this check.
-    const payload = JSON.stringify({
-      session_id: "test-session",
-      model: { display_name: "Test Model" },
-      workspace: { current_dir: "/tmp" },
-    });
-    const out = execFileSync(process.execPath, [scriptPath], {
-      input: payload, encoding: "utf8", timeout: 5000,
-    });
-    assert.ok(out.includes("🪙 penny"), `expected Penny status segment in output, got: ${out}`);
-    assert.ok(out.includes("Test Model"), `expected model name passed through, got: ${out}`);
-
-    // 3. Malformed stdin must not crash the script (best-effort JSON.parse fallback).
-    const outBadInput = execFileSync(process.execPath, [scriptPath], {
-      input: "not json", encoding: "utf8", timeout: 5000,
-    });
-    assert.ok(outBadInput.length > 0, "script still prints something on bad stdin");
-  } finally {
-    if (prevXdg === undefined) delete process.env.XDG_STATE_HOME;
-    else process.env.XDG_STATE_HOME = prevXdg;
-    fs.rmSync(tmpState, { recursive: true, force: true });
-  }
-
-  console.log("statusline.test.js: all checks passed");
-}
-
-main().catch((err) => {
-  console.error(err);
-  process.exit(1);
-});
+// Guards against the class of bug found 2026-07-18: an unescaped backtick inside a
+// comment on line 99 of statusline.js terminated the STATUSLINE_SCRIPT template
+// literal early, so every `pennyrouter install` since shipped a syntactically broken
+// generated script — installs succeeded silently, the crash only surfaced later, at
+// Claude Code's next statusline render, in a completely different process.
+//
+// `npm run check` (node --check on every source file) happened to catch this ONE
+// instance because the break also broke the OUTER file's parse — but that's
+// incidental: a subtler bug (backticks that still balance, or valid-looking JS that's
+// semantically wrong) would pass --check on the outer file yet still crash at
+// runtime, because --check never looks at the STRING CONTENT of a template literal.
+// This test extracts the ACTUAL constant (not a source-text regex) and validates the
+// real generated script: syntax-checks it, then executes it end-to-end with a fake
+// stdin payload the way Claude Code actually invokes it, so a broken script fails
+// `npm run check` locally instead of a user's install.
+//
+// No test framework in this package yet — plain assert + a process exit code, run via
+// `node src/statusline.test.js` (wired into `npm run check`).
+import assert from "node:assert/strict";
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+import { configureClaudeCodeStatusline, statuslineScriptPath } from "./statusline.js";
+
+async function main() {
+  const tmpState = fs.mkdtempSync(path.join(os.tmpdir(), "pr-statusline-test-"));
+  const prevXdg = process.env.XDG_STATE_HOME;
+  process.env.XDG_STATE_HOME = tmpState;
+  try {
+    const current = {};
+    await configureClaudeCodeStatusline(current);
+    const scriptPath = statuslineScriptPath();
+    assert.ok(fs.existsSync(scriptPath), "script file was written");
+
+    // 1. Syntax: node --check on the ACTUAL written file (not a regex-extracted copy).
+    execFileSync(process.execPath, ["--check", scriptPath], { stdio: "pipe" });
+
+    // 2. Behavior: run it the way Claude Code does — JSON on stdin, plain stdout.
+    // The generated script may discover a real Claude config from the invoking user's
+    // home, but must render a valid Penny segment either way. XDG_STATE_HOME is isolated
+    // above, so no cached session state or wrapped command can influence this check.
+    const payload = JSON.stringify({
+      session_id: "test-session",
+      model: { display_name: "Test Model" },
+      workspace: { current_dir: "/tmp" },
+    });
+    const out = execFileSync(process.execPath, [scriptPath], {
+      input: payload, encoding: "utf8", timeout: 5000,
+    });
+    assert.ok(out.includes("🪙 penny"), `expected Penny status segment in output, got: ${out}`);
+    assert.ok(out.includes("Test Model"), `expected model name passed through, got: ${out}`);
+
+    // 3. Malformed stdin must not crash the script (best-effort JSON.parse fallback).
+    const outBadInput = execFileSync(process.execPath, [scriptPath], {
+      input: "not json", encoding: "utf8", timeout: 5000,
+    });
+    assert.ok(outBadInput.length > 0, "script still prints something on bad stdin");
+  } finally {
+    if (prevXdg === undefined) delete process.env.XDG_STATE_HOME;
+    else process.env.XDG_STATE_HOME = prevXdg;
+    fs.rmSync(tmpState, { recursive: true, force: true });
+  }
+
+  console.log("statusline.test.js: all checks passed");
+}
+
+main().catch((err) => {
+  console.error(err);
+  process.exit(1);
+});

package/src/thread-session.js

@@ -0,0 +1,204 @@
+/* Write a canonical thread into a Claude Code session file it will resume from.
+
+   `claude --resume` enumerates ~/.claude/projects/<flattened-cwd>/*.jsonl and offers what it
+   finds, so a synthesized file appears in the picker and resumes with the history in context.
+   Verified end-to-end on 2.1.226: a file written by this shape resumed and the model quoted back
+   a turn it never actually saw.
+
+   THE FORMAT IS UNDOCUMENTED. It is read from ~140 real local sessions, not from a spec, and
+   Claude Code updates itself. Three rules follow, and none of them are optional:
+
+     1. Never write over an existing session. Every synthesis gets a fresh uuid, so the worst
+        case is a stray file in the picker rather than a destroyed conversation.
+     2. Version-gate. Outside the range this was verified against, write the brief instead of a
+        session file and say so — a malformed session file is worse than no session file,
+        because the user finds out at resume time.
+     3. Records must chain. `parentUuid` is a linked list; a break in it truncates the history
+        silently, which looks like a working import that lost half the conversation.
+
+   Only `user` and `assistant` records are needed to reconstruct a conversation. Tool blocks are
+   deliberately NOT replayed as `tool_use`/`tool_result` pairs: those reference call ids the new
+   session's tools never issued, and a dangling pair is the one thing observed to make a resumed
+   session misbehave rather than merely look odd. They are rendered as prose instead. */
+
+import { randomUUID } from "node:crypto";
+import { mkdirSync, existsSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+/** Versions this writer has been verified against. */
+export const VERIFIED_MIN = "2.0.0";
+export const VERIFIED_MAX = "2.999.999";
+
+export function projectDirFor(cwd) {
+  // Claude Code flattens the workspace path into a single directory name: every separator and
+  // dot becomes "-". Confirmed against the real ~/.claude/projects listing.
+  return join(homedir(), ".claude", "projects", cwd.replace(/[/\\.]/g, "-"));
+}
+
+function compare(a, b) {
+  const pa = String(a).split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = String(b).split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i += 1) {
+    if ((pa[i] || 0) !== (pb[i] || 0)) return (pa[i] || 0) < (pb[i] || 0) ? -1 : 1;
+  }
+  return 0;
+}
+
+export function versionSupported(version) {
+  if (!version) return false;
+  const clean = String(version).trim().split(/\s+/)[0];
+  return compare(clean, VERIFIED_MIN) >= 0 && compare(clean, VERIFIED_MAX) <= 0;
+}
+
+/** One block rendered as the text a resumed model should read. */
+function renderBlock(block) {
+  switch (block?.type) {
+    case "text":
+      return block.text || "";
+    case "thinking":
+      // One model's reasoning trace is noise to a different model picking the work up.
+      return "";
+    case "tool_use": {
+      const input = block.input ? ` ${JSON.stringify(block.input)}` : "";
+      return `[used ${block.name}${input}]`.slice(0, 2000);
+    }
+    case "tool_result": {
+      const status = block.ok === false ? "failed" : "result";
+      return `[${block.name || "tool"} ${status}] ${block.output || ""}`.slice(0, 2000);
+    }
+    case "file":
+      return ["```" + (block.language || ""), block.text || "", "```"].join("\n");
+    case "diff":
+      return ["```diff", block.patch || "", "```"].join("\n");
+    case "image":
+      return `[image${block.alt ? `: ${block.alt}` : ""}]`;
+    default:
+      return "";
+  }
+}
+
+export function renderMessage(message) {
+  return (message.blocks || [])
+    .map(renderBlock)
+    .filter((t) => t && t.trim())
+    .join("\n\n")
+    .trim();
+}
+
+/** The record that tells the resumed agent what it is looking at. */
+export function orientation(thread) {
+  const origin = thread.origin_app || thread.source || "another assistant";
+  return [
+    `This session was imported by PennyRouter from a ${origin} conversation.`,
+    thread.source_url ? `Source: ${thread.source_url}` : null,
+    "",
+    "The turns that follow are that conversation, replayed as history. They are a record of",
+    "what was discussed elsewhere — not work this session performed. Tool calls in it were",
+    "rendered as text, so no file in this workspace has been touched on their account.",
+    "",
+    "Pick up from where it left off. Do not re-litigate decisions that were already settled.",
+  ]
+    .filter((line) => line !== null)
+    .join("\n");
+}
+
+/**
+ * Build the JSONL records for a thread. Exported separately from the write so the chain can be
+ * asserted in tests without touching the real ~/.claude directory.
+ */
+export function buildRecords(thread, { cwd, sessionId, version, gitBranch = "" }) {
+  const now = new Date().toISOString();
+  const base = {
+    isSidechain: false,
+    userType: "external",
+    cwd,
+    sessionId,
+    version,
+    gitBranch,
+  };
+
+  const records = [];
+  let parentUuid = null;
+  const push = (type, message) => {
+    const uuid = randomUUID();
+    records.push({ ...base, parentUuid, uuid, type, timestamp: now, message });
+    parentUuid = uuid;
+  };
+
+  push("user", { role: "user", content: orientation(thread) });
+  push("assistant", {
+    role: "assistant",
+    model: thread.origin_model || "claude-opus-4",
+    content: [
+      {
+        type: "text",
+        text: "Understood — I have the imported conversation and will continue from it.",
+      },
+    ],
+  });
+
+  for (const message of thread.messages || []) {
+    const text = renderMessage(message);
+    if (!text) continue;
+    if (message.role === "assistant") {
+      push("assistant", {
+        role: "assistant",
+        model: message.model || thread.origin_model || "claude-opus-4",
+        content: [{ type: "text", text }],
+      });
+    } else if (message.role === "user") {
+      push("user", { role: "user", content: text });
+    }
+    // `system` and `tool` roles carry no turn a resumed agent should replay as its own.
+  }
+
+  return records;
+}
+
+/** Assert the linked list is intact: one root, and every parent already seen before its child. */
+export function assertChained(records) {
+  const seen = new Set();
+  let roots = 0;
+  for (const record of records) {
+    if (record.parentUuid === null) roots += 1;
+    else if (!seen.has(record.parentUuid)) {
+      throw new Error(`session records are not chained (orphan ${record.uuid})`);
+    }
+    seen.add(record.uuid);
+  }
+  if (roots !== 1) throw new Error(`session must have exactly one root, found ${roots}`);
+}
+
+/**
+ * Write `thread` as a resumable Claude Code session in `cwd`.
+ * Returns { sessionId, path, messageCount }.
+ */
+export function writeSession(thread, { cwd, version, gitBranch = "" }) {
+  if (!versionSupported(version)) {
+    throw new Error(
+      `Claude Code ${version || "(unknown version)"} is outside the range this importer has ` +
+        `been verified against (${VERIFIED_MIN}–${VERIFIED_MAX}). Refusing to write a session ` +
+        `file that may not resume.`,
+    );
+  }
+
+  const dir = projectDirFor(cwd);
+  mkdirSync(dir, { recursive: true });
+
+  const sessionId = randomUUID();
+  const path = join(dir, `${sessionId}.jsonl`);
+  // A fresh uuid cannot collide in practice; checking anyway is what makes "never overwrite an
+  // existing session" a property of the code rather than a probability.
+  if (existsSync(path)) throw new Error("session id collision; try again");
+
+  const records = buildRecords(thread, { cwd, sessionId, version, gitBranch });
+  assertChained(records);
+
+  writeFileSync(path, records.map((r) => JSON.stringify(r)).join("\n") + "\n", {
+    encoding: "utf8",
+    flag: "wx", // fail rather than clobber, even against a race
+  });
+
+  return { sessionId, path, messageCount: records.length };
+}

package/src/thread-session.test.js

@@ -0,0 +1,140 @@
+import assert from "node:assert/strict";
+import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+import {
+  assertChained,
+  buildRecords,
+  orientation,
+  projectDirFor,
+  renderMessage,
+  versionSupported,
+  writeSession,
+} from "./thread-session.js";
+
+const thread = {
+  title: "Kickplate removal",
+  source: "perplexity_share",
+  origin_app: "Perplexity",
+  source_url: "https://www.perplexity.ai/search/x",
+  messages: [
+    { role: "user", blocks: [{ type: "text", text: "Can the kickplate be removed?" }] },
+    {
+      role: "assistant",
+      blocks: [
+        { type: "thinking", text: "REASONING-TRACE" },
+        { type: "text", text: "Yes, it is a snap-in base grille." },
+        { type: "file", language: "python", text: "print('hi')" },
+      ],
+    },
+    { role: "system", blocks: [{ type: "text", text: "SYSTEM-PREAMBLE" }] },
+    { role: "user", blocks: [] },
+  ],
+};
+
+// -- path flattening ------------------------------------------------------
+// Asserted against the real shape of ~/.claude/projects: separators AND dots collapse to "-",
+// which is why a nested path with a dotted segment doubles up its dashes.
+assert.ok(
+  projectDirFor("/Users/x/Documents/GitHub/penny-router").endsWith(
+    "-Users-x-Documents-GitHub-penny-router",
+  ),
+);
+assert.ok(projectDirFor("/tmp/a.b/c").endsWith("-tmp-a-b-c"));
+
+// -- version gate ---------------------------------------------------------
+// The format is undocumented, so writing outside the verified range is refused rather than
+// attempted: a malformed session file is discovered at resume time, when it is too late.
+assert.equal(versionSupported("2.1.226 (Claude Code)"), true);
+assert.equal(versionSupported("2.0.0"), true);
+assert.equal(versionSupported("1.9.9"), false);
+assert.equal(versionSupported("3.0.0"), false);
+assert.equal(versionSupported(null), false);
+
+// -- record construction --------------------------------------------------
+const records = buildRecords(thread, {
+  cwd: "/tmp/ws",
+  sessionId: "sid",
+  version: "2.1.226",
+});
+
+// Orientation pair, then one record per replayable turn. The empty user turn and the system
+// turn are dropped: neither is something a resumed agent should replay as its own.
+assert.deepEqual(
+  records.map((r) => r.type),
+  ["user", "assistant", "user", "assistant"],
+);
+
+const serialized = JSON.stringify(records);
+assert.ok(!serialized.includes("REASONING-TRACE"), "thinking must never reach a handoff");
+assert.ok(!serialized.includes("SYSTEM-PREAMBLE"), "system turns are not replayed");
+assert.ok(serialized.includes("print('hi')"), "code blocks survive as fenced text");
+assert.ok(records[0].message.content.includes("Perplexity"), "orientation names the origin");
+assert.ok(orientation(thread).includes("Do not re-litigate"));
+
+for (const record of records) {
+  assert.equal(record.sessionId, "sid");
+  assert.equal(record.cwd, "/tmp/ws");
+  assert.equal(record.isSidechain, false);
+  assert.equal(record.userType, "external");
+  assert.ok(record.uuid && record.timestamp);
+}
+
+// -- chain integrity ------------------------------------------------------
+// A break in the parentUuid list truncates history silently, which reads as a working import
+// that lost half the conversation. That has to fail loudly instead.
+assertChained(records);
+assert.equal(records[0].parentUuid, null);
+assert.equal(records[1].parentUuid, records[0].uuid);
+
+assert.throws(
+  () => assertChained([{ uuid: "a", parentUuid: "nope" }]),
+  /not chained/,
+);
+assert.throws(
+  () => assertChained([{ uuid: "a", parentUuid: null }, { uuid: "b", parentUuid: null }]),
+  /exactly one root/,
+);
+
+// -- writing --------------------------------------------------------------
+const home = mkdtempSync(join(tmpdir(), "pr-thread-"));
+const originalHome = process.env.HOME;
+process.env.HOME = home;
+try {
+  const workspace = mkdtempSync(join(tmpdir(), "pr-ws-"));
+  const result = writeSession(thread, { cwd: workspace, version: "2.1.226" });
+
+  const lines = readFileSync(result.path, "utf8").trim().split("\n");
+  assert.equal(lines.length, result.messageCount);
+  const parsed = lines.map((l) => JSON.parse(l));
+  assertChained(parsed);
+  assert.equal(parsed[0].sessionId, result.sessionId);
+  assert.ok(result.path.endsWith(`${result.sessionId}.jsonl`));
+
+  // Never overwrite an existing session: a second write of the same thread is a new file.
+  const again = writeSession(thread, { cwd: workspace, version: "2.1.226" });
+  assert.notEqual(again.sessionId, result.sessionId);
+  assert.notEqual(again.path, result.path);
+  // The first file is still intact and unmodified.
+  assert.equal(readFileSync(result.path, "utf8").trim().split("\n").length, lines.length);
+
+  assert.throws(
+    () => writeSession(thread, { cwd: workspace, version: "9.9.9" }),
+    /outside the range/,
+  );
+} finally {
+  process.env.HOME = originalHome;
+}
+
+// -- rendering ------------------------------------------------------------
+assert.equal(renderMessage({ blocks: [{ type: "text", text: "a" }] }), "a");
+assert.equal(renderMessage({ blocks: [{ type: "thinking", text: "x" }] }), "");
+assert.equal(renderMessage({ blocks: [] }), "");
+assert.ok(
+  renderMessage({ blocks: [{ type: "tool_use", name: "Bash", input: { cmd: "ls" } }] }).startsWith(
+    "[used Bash",
+  ),
+);
+
+console.log("thread-session tests passed");