picocode-core 0.9.141 → 0.9.142

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "picocode-core",
-  "version": "0.9.141",
+  "version": "0.9.142",
   "description": "The agent runtime behind pico: sessions, tools, subagents, MCP, memory, and model access",
   "type": "module",
   "license": "MIT",

package/src/attachments.js

@@ -1,5 +1,7 @@
 import { existsSync } from 'node:fs'
-import { basename } from 'node:path'
+import { copyFile, mkdir, stat } from 'node:fs/promises'
+import { createHash } from 'node:crypto'
+import { basename, join } from 'node:path'
 
 const MEDIA_TYPES = {
   png: 'image/png',
@@ -146,3 +148,28 @@ export function finalizeUserContent(text, attachments, exists = existsSync) {
   if (expanded.length === 1 && expanded[0].type === 'text') return { content: expanded[0].text, used }
   return { content: expanded, used }
 }
+
+// images ride into a session by path, and the path is what the log keeps,
+// so each one is copied into the session's own attachments directory
+// before the message is written and the part points at the copy. later
+// turns and later readers then never depend on the original still being
+// where it was
+async function stashImage(part, dir) {
+  const path = part.source?.path
+  if (!path || part.source.kind !== 'path' || path.startsWith(dir)) return part
+  try {
+    const { size, mtimeMs } = await stat(path)
+    const key = createHash('sha1').update(`${path}\n${size}\n${Math.floor(mtimeMs)}`).digest('hex').slice(0, 10)
+    const copy = join(dir, `${key}-${basename(path)}`)
+    await mkdir(dir, { recursive: true })
+    if (!existsSync(copy)) await copyFile(path, copy)
+    return { ...part, source: { ...part.source, path: copy } }
+  } catch {
+    return part
+  }
+}
+
+export async function stashImages(content, dir) {
+  if (!Array.isArray(content)) return content
+  return Promise.all(content.map((part) => (part.type === 'image' ? stashImage(part, dir) : part)))
+}

package/src/controller.js

@@ -25,11 +25,11 @@ import { findModel, estimateCost } from './models.js'
 import { adhocModel } from './catalog.js'
 import { writeConfig } from './config.js'
 import { connectOpenAI, openaiCredentials, disconnectOpenAI } from './openai-auth.js'
-import { agentScratchDir, ensureDir } from './paths.js'
+import { agentScratchDir, ensureDir, sessionAttachmentsDir } from './paths.js'
 import { loadCodexModels } from './codex-models.js'
 import { fuzzyScore } from './fuzzy.js'
 import { MAX_DELIBERATION_ROUNDS } from './deliberation.js'
-import { buildUserContent, finalizeUserContent, inputTextFromContent, mediaTypeFor } from './attachments.js'
+import { buildUserContent, finalizeUserContent, inputTextFromContent, mediaTypeFor, stashImages } from './attachments.js'
 
 export const EFFORT_LEVELS = [
   { key: null, desc: 'let the provider decide how much to think' },
@@ -370,10 +370,11 @@ export function createController({ boot }) {
     // that text must not be scanned for image paths or it attaches twice
     const built = buildUserContent(text, state.attachments)
     const viewed = built.used.length > 0 && built.used.every((placeholder) => deliveredImages.has(placeholder))
-    const { content, used } = viewed ? built : finalizeUserContent(text, state.attachments)
+    const { content: built2, used } = viewed ? built : finalizeUserContent(text, state.attachments)
     for (const placeholder of used) deliveredImages.delete(placeholder)
-    persist(makeEvent('message', { message: { role: 'user', content }, ...(viewed ? { origin: 'view' } : {}) }))
     ensureSession()
+    const content = state.session.file ? await stashImages(built2, sessionAttachmentsDir(boot.root, state.session.id)) : built2
+    persist(makeEvent('message', { message: { role: 'user', content }, ...(viewed ? { origin: 'view' } : {}) }))
     reDerive()
     await runAgentTurn()
   }

package/src/paths.js

@@ -33,6 +33,10 @@ export function sessionScratchDir(root, sessionId) {
   return join(projectDir(root), 'scratchpads', sessionId)
 }
 
+export function sessionAttachmentsDir(root, sessionId) {
+  return join(projectDir(root), 'attachments', sessionId)
+}
+
 export function agentScratchDir(root, sessionId, agentId) {
   return join(sessionScratchDir(root, sessionId), `agent-${agentId}`)
 }

package/src/session.js

@@ -145,6 +145,7 @@ export async function deleteSession(file) {
   })
   await removeFromSessionIndex(file)
   await rm(join(project, 'scratchpads', sessionId), { recursive: true, force: true })
+  await rm(join(project, 'attachments', sessionId), { recursive: true, force: true })
 }
 
 export function deleteProjectData(root) {