pennyrouter 0.3.0 → 0.3.2

package/src/thread-session.js

@@ -0,0 +1,215 @@
+/* Write a canonical thread into a Claude Code session file it will resume from.
+
+   `claude --resume` enumerates ~/.claude/projects/<flattened-cwd>/*.jsonl and offers what it
+   finds, so a synthesized file appears in the picker and resumes with the history in context.
+   Verified end-to-end on 2.1.226: a file written by this shape resumed and the model quoted back
+   a turn it never actually saw.
+
+   THE FORMAT IS UNDOCUMENTED. It is read from ~140 real local sessions, not from a spec, and
+   Claude Code updates itself. Three rules follow, and none of them are optional:
+
+     1. Never write over an existing session. Every synthesis gets a fresh uuid, so the worst
+        case is a stray file in the picker rather than a destroyed conversation.
+     2. Version-gate. Outside the range this was verified against, write the brief instead of a
+        session file and say so — a malformed session file is worse than no session file,
+        because the user finds out at resume time.
+     3. Records must chain. `parentUuid` is a linked list; a break in it truncates the history
+        silently, which looks like a working import that lost half the conversation.
+
+   Only `user` and `assistant` records are needed to reconstruct a conversation. Tool blocks are
+   deliberately NOT replayed as `tool_use`/`tool_result` pairs: those reference call ids the new
+   session's tools never issued, and a dangling pair is the one thing observed to make a resumed
+   session misbehave rather than merely look odd. They are rendered as prose instead. */
+
+import { randomUUID } from "node:crypto";
+import { mkdirSync, existsSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+/** Versions this writer has been verified against. */
+export const VERIFIED_MIN = "2.0.0";
+export const VERIFIED_MAX = "2.999.999";
+
+export function projectDirFor(cwd) {
+  // Claude Code flattens the workspace path into a single directory name: every separator and
+  // dot becomes "-". Confirmed against the real ~/.claude/projects listing.
+  return join(homedir(), ".claude", "projects", cwd.replace(/[/\\.]/g, "-"));
+}
+
+function compare(a, b) {
+  const pa = String(a).split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = String(b).split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i += 1) {
+    if ((pa[i] || 0) !== (pb[i] || 0)) return (pa[i] || 0) < (pb[i] || 0) ? -1 : 1;
+  }
+  return 0;
+}
+
+export function versionSupported(version) {
+  if (!version) return false;
+  const clean = String(version).trim().split(/\s+/)[0];
+  return compare(clean, VERIFIED_MIN) >= 0 && compare(clean, VERIFIED_MAX) <= 0;
+}
+
+/** One block rendered as the text a resumed model should read. */
+function renderBlock(block) {
+  switch (block?.type) {
+    case "text":
+      return block.text || "";
+    case "thinking":
+      // One model's reasoning trace is noise to a different model picking the work up.
+      return "";
+    case "tool_use": {
+      const input = block.input ? ` ${JSON.stringify(block.input)}` : "";
+      return `[used ${block.name}${input}]`.slice(0, 2000);
+    }
+    case "tool_result": {
+      const status = block.ok === false ? "failed" : "result";
+      return `[${block.name || "tool"} ${status}] ${block.output || ""}`.slice(0, 2000);
+    }
+    case "file":
+      return ["```" + (block.language || ""), block.text || "", "```"].join("\n");
+    case "diff":
+      return ["```diff", block.patch || "", "```"].join("\n");
+    case "image":
+      return `[image${block.alt ? `: ${block.alt}` : ""}]`;
+    default:
+      return "";
+  }
+}
+
+export function renderMessage(message) {
+  return (message.blocks || [])
+    .map(renderBlock)
+    .filter((t) => t && t.trim())
+    .join("\n\n")
+    .trim();
+}
+
+/** The record that tells the resumed agent what it is looking at. */
+export function orientation(thread) {
+  const origin = thread.origin_app || thread.source || "another assistant";
+  return [
+    `This session was imported by PennyRouter from a ${origin} conversation.`,
+    thread.source_url ? `Source: ${thread.source_url}` : null,
+    "",
+    "The turns that follow are that conversation, replayed as history. They are a record of",
+    "what was discussed elsewhere — not work this session performed. Tool calls in it were",
+    "rendered as text, so no file in this workspace has been touched on their account.",
+    "",
+    "Pick up from where it left off. Do not re-litigate decisions that were already settled.",
+  ]
+    .filter((line) => line !== null)
+    .join("\n");
+}
+
+/**
+ * Build the JSONL records for a thread. Exported separately from the write so the chain can be
+ * asserted in tests without touching the real ~/.claude directory.
+ */
+export function buildRecords(thread, { cwd, sessionId, version, gitBranch = "" }) {
+  const now = new Date().toISOString();
+  const base = {
+    isSidechain: false,
+    userType: "external",
+    cwd,
+    sessionId,
+    version,
+    gitBranch,
+  };
+
+  const records = [];
+  let parentUuid = null;
+  const push = (type, message) => {
+    const uuid = randomUUID();
+    records.push({ ...base, parentUuid, uuid, type, timestamp: now, message });
+    parentUuid = uuid;
+  };
+
+  // The resume picker labels a session with its `ai-title` and falls back to the first user
+  // message, which here is the orientation preamble — so without this every import reads as
+  // "This session was imported by PennyRouter from a…". The source thread already has a real
+  // title; use it. Deliberately outside the parentUuid chain: this record type carries no
+  // uuid/parentUuid in Claude Code's own sessions, and threading it would break the walk.
+  if (thread.title) {
+    records.push({ type: "ai-title", aiTitle: thread.title, sessionId });
+  }
+
+  push("user", { role: "user", content: orientation(thread) });
+  push("assistant", {
+    role: "assistant",
+    model: thread.origin_model || "claude-opus-4",
+    content: [
+      {
+        type: "text",
+        text: "Understood — I have the imported conversation and will continue from it.",
+      },
+    ],
+  });
+
+  for (const message of thread.messages || []) {
+    const text = renderMessage(message);
+    if (!text) continue;
+    if (message.role === "assistant") {
+      push("assistant", {
+        role: "assistant",
+        model: message.model || thread.origin_model || "claude-opus-4",
+        content: [{ type: "text", text }],
+      });
+    } else if (message.role === "user") {
+      push("user", { role: "user", content: text });
+    }
+    // `system` and `tool` roles carry no turn a resumed agent should replay as its own.
+  }
+
+  return records;
+}
+
+/** Assert the linked list is intact: one root, and every parent already seen before its child. */
+export function assertChained(records) {
+  const seen = new Set();
+  let roots = 0;
+  // Metadata records (`ai-title`) sit outside the conversation and carry no uuid, matching
+  // Claude Code's own sessions. Only the message chain is walked.
+  for (const record of records.filter((r) => r.uuid)) {
+    if (record.parentUuid === null) roots += 1;
+    else if (!seen.has(record.parentUuid)) {
+      throw new Error(`session records are not chained (orphan ${record.uuid})`);
+    }
+    seen.add(record.uuid);
+  }
+  if (roots !== 1) throw new Error(`session must have exactly one root, found ${roots}`);
+}
+
+/**
+ * Write `thread` as a resumable Claude Code session in `cwd`.
+ * Returns { sessionId, path, messageCount }.
+ */
+export function writeSession(thread, { cwd, version, gitBranch = "" }) {
+  if (!versionSupported(version)) {
+    throw new Error(
+      `Claude Code ${version || "(unknown version)"} is outside the range this importer has ` +
+        `been verified against (${VERIFIED_MIN}–${VERIFIED_MAX}). Refusing to write a session ` +
+        `file that may not resume.`,
+    );
+  }
+
+  const dir = projectDirFor(cwd);
+  mkdirSync(dir, { recursive: true });
+
+  const sessionId = randomUUID();
+  const path = join(dir, `${sessionId}.jsonl`);
+  // A fresh uuid cannot collide in practice; checking anyway is what makes "never overwrite an
+  // existing session" a property of the code rather than a probability.
+  if (existsSync(path)) throw new Error("session id collision; try again");
+
+  const records = buildRecords(thread, { cwd, sessionId, version, gitBranch });
+  assertChained(records);
+
+  writeFileSync(path, records.map((r) => JSON.stringify(r)).join("\n") + "\n", {
+    encoding: "utf8",
+    flag: "wx", // fail rather than clobber, even against a race
+  });
+
+  return { sessionId, path, messageCount: records.length };
+}

package/src/thread-session.test.js

@@ -0,0 +1,151 @@
+import assert from "node:assert/strict";
+import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+import {
+  assertChained,
+  buildRecords,
+  orientation,
+  projectDirFor,
+  renderMessage,
+  versionSupported,
+  writeSession,
+} from "./thread-session.js";
+
+const thread = {
+  title: "Kickplate removal",
+  source: "perplexity_share",
+  origin_app: "Perplexity",
+  source_url: "https://www.perplexity.ai/search/x",
+  messages: [
+    { role: "user", blocks: [{ type: "text", text: "Can the kickplate be removed?" }] },
+    {
+      role: "assistant",
+      blocks: [
+        { type: "thinking", text: "REASONING-TRACE" },
+        { type: "text", text: "Yes, it is a snap-in base grille." },
+        { type: "file", language: "python", text: "print('hi')" },
+      ],
+    },
+    { role: "system", blocks: [{ type: "text", text: "SYSTEM-PREAMBLE" }] },
+    { role: "user", blocks: [] },
+  ],
+};
+
+// -- path flattening ------------------------------------------------------
+// Asserted against the real shape of ~/.claude/projects: separators AND dots collapse to "-",
+// which is why a nested path with a dotted segment doubles up its dashes.
+assert.ok(
+  projectDirFor("/Users/x/Documents/GitHub/penny-router").endsWith(
+    "-Users-x-Documents-GitHub-penny-router",
+  ),
+);
+assert.ok(projectDirFor("/tmp/a.b/c").endsWith("-tmp-a-b-c"));
+
+// -- version gate ---------------------------------------------------------
+// The format is undocumented, so writing outside the verified range is refused rather than
+// attempted: a malformed session file is discovered at resume time, when it is too late.
+assert.equal(versionSupported("2.1.226 (Claude Code)"), true);
+assert.equal(versionSupported("2.0.0"), true);
+assert.equal(versionSupported("1.9.9"), false);
+assert.equal(versionSupported("3.0.0"), false);
+assert.equal(versionSupported(null), false);
+
+// -- record construction --------------------------------------------------
+const records = buildRecords(thread, {
+  cwd: "/tmp/ws",
+  sessionId: "sid",
+  version: "2.1.226",
+});
+
+// A title record, then the orientation pair, then one record per replayable turn. The empty
+// user turn and the system turn are dropped: neither is something a resumed agent should
+// replay as its own.
+assert.deepEqual(
+  records.map((r) => r.type),
+  ["ai-title", "user", "assistant", "user", "assistant"],
+);
+
+// The resume picker labels a session with ai-title and otherwise falls back to the first user
+// message — which is the orientation preamble, so every import would read as "This session was
+// imported by PennyRouter from a…" instead of naming the conversation.
+const title = records.find((r) => r.type === "ai-title");
+assert.equal(title.aiTitle, "Kickplate removal");
+assert.equal(title.sessionId, "sid");
+assert.ok(!title.uuid && !("parentUuid" in title), "metadata sits outside the message chain");
+
+const serialized = JSON.stringify(records);
+assert.ok(!serialized.includes("REASONING-TRACE"), "thinking must never reach a handoff");
+assert.ok(!serialized.includes("SYSTEM-PREAMBLE"), "system turns are not replayed");
+assert.ok(serialized.includes("print('hi')"), "code blocks survive as fenced text");
+const firstTurn = records.find((r) => r.type === "user");
+assert.ok(firstTurn.message.content.includes("Perplexity"), "orientation names the origin");
+assert.ok(orientation(thread).includes("Do not re-litigate"));
+
+for (const record of records.filter((r) => r.type !== "ai-title")) {
+  assert.equal(record.sessionId, "sid");
+  assert.equal(record.cwd, "/tmp/ws");
+  assert.equal(record.isSidechain, false);
+  assert.equal(record.userType, "external");
+  assert.ok(record.uuid && record.timestamp);
+}
+
+// -- chain integrity ------------------------------------------------------
+// A break in the parentUuid list truncates history silently, which reads as a working import
+// that lost half the conversation. That has to fail loudly instead.
+assertChained(records);
+const chain = records.filter((r) => r.uuid);
+assert.equal(chain[0].parentUuid, null);
+assert.equal(chain[1].parentUuid, chain[0].uuid);
+
+assert.throws(
+  () => assertChained([{ uuid: "a", parentUuid: "nope" }]),
+  /not chained/,
+);
+assert.throws(
+  () => assertChained([{ uuid: "a", parentUuid: null }, { uuid: "b", parentUuid: null }]),
+  /exactly one root/,
+);
+
+// -- writing --------------------------------------------------------------
+const home = mkdtempSync(join(tmpdir(), "pr-thread-"));
+const originalHome = process.env.HOME;
+process.env.HOME = home;
+try {
+  const workspace = mkdtempSync(join(tmpdir(), "pr-ws-"));
+  const result = writeSession(thread, { cwd: workspace, version: "2.1.226" });
+
+  const lines = readFileSync(result.path, "utf8").trim().split("\n");
+  assert.equal(lines.length, result.messageCount);
+  const parsed = lines.map((l) => JSON.parse(l));
+  assertChained(parsed);
+  assert.equal(parsed[0].sessionId, result.sessionId);
+  assert.ok(result.path.endsWith(`${result.sessionId}.jsonl`));
+
+  // Never overwrite an existing session: a second write of the same thread is a new file.
+  const again = writeSession(thread, { cwd: workspace, version: "2.1.226" });
+  assert.notEqual(again.sessionId, result.sessionId);
+  assert.notEqual(again.path, result.path);
+  // The first file is still intact and unmodified.
+  assert.equal(readFileSync(result.path, "utf8").trim().split("\n").length, lines.length);
+
+  assert.throws(
+    () => writeSession(thread, { cwd: workspace, version: "9.9.9" }),
+    /outside the range/,
+  );
+} finally {
+  process.env.HOME = originalHome;
+}
+
+// -- rendering ------------------------------------------------------------
+assert.equal(renderMessage({ blocks: [{ type: "text", text: "a" }] }), "a");
+assert.equal(renderMessage({ blocks: [{ type: "thinking", text: "x" }] }), "");
+assert.equal(renderMessage({ blocks: [] }), "");
+assert.ok(
+  renderMessage({ blocks: [{ type: "tool_use", name: "Bash", input: { cmd: "ls" } }] }).startsWith(
+    "[used Bash",
+  ),
+);
+
+console.log("thread-session tests passed");