sessiongraph-app-darwin-x64 1.0.7 → 1.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sessiongraph-app-darwin-x64",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "Explore & visualize all your LLM sessions — darwin/x64",
   "repository": {
     "type": "git",
@@ -10,7 +10,7 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
-  "sessionGraphCommit": "917fd2aa2b7485b278838d1af1588b3182e8cc10",
+  "sessionGraphCommit": "477079f037f7772fb9c1a55032d887d90a48333f",
   "os": [
     "darwin"
   ],

package/payload/SessionGraph.app/Contents/Info.plist

@@ -17,9 +17,9 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.0.7</string>
+	<string>1.0.9</string>
 	<key>CFBundleVersion</key>
-	<string>1.0.7</string>
+	<string>1.0.9</string>
 	<key>CSResourcesFileMapped</key>
 	<true/>
 	<key>LSApplicationCategoryType</key>

package/payload/SessionGraph.app/Contents/Resources/resources/server.mjs

@@ -2140,7 +2140,7 @@ import { createReadStream } from "node:fs";
 import { stat as stat5 } from "node:fs/promises";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 import { resolve as resolve2, extname, sep as sep4 } from "node:path";
-import { randomBytes, timingSafeEqual } from "node:crypto";
+import { randomBytes as randomBytes2, timingSafeEqual } from "node:crypto";
 
 // node_modules/.pnpm/@opencode+client@2.2.1_effect@4.0.1/node_modules/@opencode/client/dist/chunks/mcp-ve4aws36.js
 import { spawn } from "node:child_process";
@@ -2784,7 +2784,7 @@ function extractContent(messages) {
   for (const raw of messages) {
     if (!raw || typeof raw !== "object") continue;
     const message2 = raw;
-    const time3 = Number(message2.time?.created) || 0;
+    const time4 = Number(message2.time?.created) || 0;
     const seen = /* @__PURE__ */ new Set();
     const add = (value, kind) => {
       if (typeof value !== "string" || !value.trim() || value.startsWith("data:") || seen.has(value)) return;
@@ -2794,7 +2794,7 @@ function extractContent(messages) {
       if (size <= 0) return;
       const text2 = value.slice(0, size);
       remaining -= text2.length;
-      fragments.push({ text: text2, kind, time: time3 });
+      fragments.push({ text: text2, kind, time: time4 });
     };
     const strings = (value, depth = 0) => {
       if (depth > 5 || remaining <= 0) {
@@ -2873,7 +2873,7 @@ var blankSession = (source, nativeID, directory2 = "") => ({
   cost: null,
   tokens: null
 });
-var blankMessage = (id2, time3, role) => ({ id: id2, time: time3, role, fragments: [], files: [], tools: [] });
+var blankMessage = (id2, time4, role) => ({ id: id2, time: time4, role, fragments: [], files: [], tools: [] });
 function addText(message2, value, kind) {
   if (typeof value !== "string" || !value.trim() || value.startsWith("data:")) return;
   const remaining = Math.max(0, 128e3 - message2.fragments.reduce((n, f) => n + f.text.length, 0));
@@ -2897,7 +2897,7 @@ function toolText(message2, value, depth = 0) {
 }
 
 // server/activity.ts
-var messageTime = (time3) => Number.isFinite(time3) && time3 > 0 && time3 <= 864e13 ? time3 : null;
+var messageTime = (time4) => Number.isFinite(time4) && time4 > 0 && time4 <= 864e13 ? time4 : null;
 var isUserMessage = (message2) => message2.role === "user" && message2.fragments.some((f) => f.kind === "You" && f.text.trim());
 var activitySQL = `SELECT min(time) AS firstMessageAt, max(time) AS lastMessageAt,
   coalesce(sum(is_user), 0) AS userMessages,
@@ -2928,8 +2928,8 @@ function eventText(value, limit = 32e3) {
   }
 }
 function eventFor(message2, id2, kind, name, text2 = "", fields2 = {}) {
-  const time3 = messageTime(message2.time);
-  const event = { id: id2, kind, name, role: message2.role, time: time3, timeSource: time3 ? "message" : "unknown", text: eventText(text2, 64e3), ...fields2 };
+  const time4 = messageTime(message2.time);
+  const event = { id: id2, kind, name, role: message2.role, time: time4, timeSource: time4 ? "message" : "unknown", text: eventText(text2, 64e3), ...fields2 };
   event.partial ||= [event.text, event.input, event.output].some((value) => /\[(shortened|omitted|unavailable)\]/.test(value || "")) || text2.length > 64e3;
   return event;
 }
@@ -2997,7 +2997,7 @@ function normalizedEvents(message2, sessionID) {
   const files = message2.files.map((file, i) => eventFor(message2, `file:${i}`, "file_change", file.path, `${file.source} \xB7 ${file.steps} recorded step(s)`, { nativeType: file.source }));
   return [...events, ...files].slice(0, 200).map((event) => {
     const text2 = String(event.text || "").slice(0, 64e3), input = event.input?.slice(0, 32e3), output = event.output?.slice(0, 64e3);
-    const time3 = messageTime(event.time || 0);
+    const time4 = messageTime(event.time || 0);
     return {
       ...event,
       id: digest([message2.id, event.id]),
@@ -3009,8 +3009,8 @@ function normalizedEvents(message2, sessionID) {
       callID: event.callID ? String(event.callID).slice(0, 512) : void 0,
       parentID: event.parentID ? String(event.parentID).slice(0, 512) : void 0,
       endTime: messageTime(event.endTime || 0),
-      time: time3,
-      timeSource: time3 ? event.timeSource : "unknown",
+      time: time4,
+      timeSource: time4 ? event.timeSource : "unknown",
       text: text2,
       input,
       output,
@@ -3031,8 +3031,8 @@ function opencodeEvents(raw, message2) {
   const events = [];
   for (const [i, part] of (Array.isArray(raw.content) ? raw.content.slice(0, 200) : []).entries()) {
     const id2 = `${part.type}:${part.id || i}`, native = { nativeID: part.id, nativeType: String(part.type) };
-    const time3 = messageTime(part.time?.created);
-    const timing = time3 ? { time: time3, timeSource: "recorded" } : {};
+    const time4 = messageTime(part.time?.created);
+    const timing = time4 ? { time: time4, timeSource: "recorded" } : {};
     if (part.type === "text") events.push(eventFor(message2, id2, "message", "Assistant message", part.text || "", { ...native, ...timing }));
     else if (part.type === "reasoning") events.push(eventFor(message2, id2, "reasoning", "Recorded reasoning", part.text || "", { ...native, ...timing }));
     else if (part.type === "tool") {
@@ -30449,8 +30449,8 @@ async function claudeTranscript(path, revision2) {
       }
       entries2.push(row);
       if (typeof row.uuid === "string") {
-        const time3 = typeof row.timestamp === "string" ? Date.parse(row.timestamp) : NaN;
-        times.set(row.uuid, Number.isFinite(time3) && time3 > 0 ? time3 : 0);
+        const time4 = typeof row.timestamp === "string" ? Date.parse(row.timestamp) : NaN;
+        times.set(row.uuid, Number.isFinite(time4) && time4 > 0 ? time4 : 0);
       }
     } catch {
       partial = true;
@@ -30482,7 +30482,7 @@ function claudeTranscriptInfo(transcript, sessionId) {
   }).find(Boolean);
   const title = rows2.findLast((row) => ["custom-title", "ai-title", "summary"].includes(String(row.type)) && typeof (row.customTitle || row.aiTitle || row.summary) === "string");
   const cwd2 = rows2.findLast((row) => row.type === "relocated" && typeof row.relocatedCwd === "string")?.relocatedCwd || messages.find((row) => typeof row.cwd === "string")?.cwd;
-  const createdAt = messages.map((row) => transcript.times.get(String(row.uuid))).find((time3) => time3 && time3 > 0);
+  const createdAt = messages.map((row) => transcript.times.get(String(row.uuid))).find((time4) => time4 && time4 > 0);
   return { sessionId, summary: String(title?.customTitle || title?.aiTitle || title?.summary || firstPrompt || "Claude Code session"), firstPrompt, cwd: typeof cwd2 === "string" ? cwd2 : void 0, createdAt, lastModified: transcript.modified, fileSize: transcript.size };
 }
 function claudeTranscriptStore(transcript, sessionId, agent) {
@@ -31908,8 +31908,8 @@ import { fileURLToPath as fileURLToPath2 } from "node:url";
 
 // server/adapters/cursor-message.ts
 function cursorTime(value) {
-  const time3 = typeof value === "number" ? value : typeof value === "string" && /(?:Z|[+-]\d\d:\d\d)$/.test(value) ? Date.parse(value) : 0;
-  return Number.isFinite(time3) && time3 > 0 && time3 <= 864e13 ? time3 : 0;
+  const time4 = typeof value === "number" ? value : typeof value === "string" && /(?:Z|[+-]\d\d:\d\d)$/.test(value) ? Date.parse(value) : 0;
+  return Number.isFinite(time4) && time4 > 0 && time4 <= 864e13 ? time4 : 0;
 }
 function cursorEnvelopeTime(text2) {
   const value = text2.match(/^\s*<timestamp>([^<]+)<\/timestamp>/)?.[1];
@@ -31937,9 +31937,9 @@ function cursorMessage(raw, fallbackID) {
   if (!["user", "assistant", "tool", "system"].includes(role)) return;
   const content = body2.content;
   const firstText = typeof content === "string" ? content : Array.isArray(content) && content[0]?.type === "text" ? content[0].text : "";
-  const time3 = cursorTime(raw.timestamp) || cursorTime(body2.timestamp) || cursorTime(body2.createdAt) || (role === "user" && typeof firstText === "string" ? cursorEnvelopeTime(firstText) : 0);
+  const time4 = cursorTime(raw.timestamp) || cursorTime(body2.timestamp) || cursorTime(body2.createdAt) || (role === "user" && typeof firstText === "string" ? cursorEnvelopeTime(firstText) : 0);
   const native = [raw.uuid, raw.id, body2.uuid, body2.id].find((id2) => typeof id2 === "string" && id2.length && id2.length <= 512);
-  const msg = blankMessage(native || fallbackID, time3, role);
+  const msg = blankMessage(native || fallbackID, time4, role);
   msg.events = role === "tool" ? [eventFor(msg, "result", "tool_result", body2.name || "Tool result", "", { callID: body2.tool_call_id, output: eventText(content, 64e3), status: "unknown" })] : blockEvents(msg, content);
   const kind = role === "user" ? "You" : role === "assistant" ? "Assistant" : "Tool";
   const text2 = (value) => addText(msg, role === "user" && typeof value === "string" ? cursorUserText(value) : value, kind);
@@ -33675,7 +33675,7 @@ function readEvents(db2, session, options = {}) {
   };
 }
 
-// src/preferences.ts
+// packages/core/src/preferences.ts
 var DEFAULT_PREFERENCES = Object.freeze({
   autoImport: true,
   muted: false,
@@ -33717,7 +33717,7 @@ function normalizePreferences(value) {
   return result;
 }
 
-// src/view-state.ts
+// packages/core/src/view-state.ts
 var DEFAULT_VIEW_STATE = Object.freeze({
   sourceID: "",
   projectID: "",
@@ -33913,12 +33913,12 @@ var SessionGraphStore = class {
     const count = this.db.prepare("SELECT COUNT(*) AS n FROM sessions WHERE source=?").get(id2);
     return { sessions: Number(count.n), lastImport: row?.last_import ? Number(row.last_import) : void 0, error: row?.error ? String(row.error) : void 0 };
   }
-  library(sources, importing) {
+  library(sources2, importing) {
     return {
       sourceID: this.setting("libraryID"),
       onboarding: this.setting("selected") === void 0,
       autoImport: this.autoImportEnabled(),
-      sources,
+      sources: sources2,
       importing,
       preferences: this.setting("preferences") ? { ...normalizePreferences(this.setting("preferences")), autoImport: this.autoImportEnabled() } : void 0,
       viewState: normalizeViewState(this.setting("viewState")),
@@ -34305,14 +34305,14 @@ function handoffDocument(snapshot2) {
 ${text3.slice(-half)}`;
   };
   const block = (message2, limit) => {
-    const time3 = messageTime(message2.time) ? new Date(message2.time).toISOString() : "time unavailable";
+    const time4 = messageTime(message2.time) ? new Date(message2.time).toISOString() : "time unavailable";
     const content = message2.fragments.map((f) => `[${f.kind}]
 ${clip(f.text, f.kind === "Tool" ? 2e3 : 12e3)}`).join("\n\n");
     const files = message2.files.length ? `
 
 Recorded file changes: ${message2.files.slice(0, 60).map((f) => JSON.stringify(f.path)).join(", ")}` : "";
     shortened ||= message2.files.length > 60 || Boolean(message2.partial);
-    return `## ${message2.role} \xB7 ${time3}
+    return `## ${message2.role} \xB7 ${time4}
 
 ${clip(content + files, limit)}
 `;
@@ -34441,7 +34441,349 @@ async function launchTerminal(session, prepared) {
   } else await exec(invocation.file, invocation.args, { timeout: 15e3, maxBuffer: 16384 });
 }
 
+// server/publishing.ts
+import { createHash as createHash5, randomBytes } from "node:crypto";
+import { chmod, mkdir as mkdir2, readFile as readFile5, rename as rename3, rm as rm5, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname10, join as join25 } from "node:path";
+
+// packages/core/src/layout.ts
+var directoryPath = (directory2) => (/^(?:[a-z]:[\\/]|\\\\)/i.test(directory2) ? directory2.replace(/\\/g, "/") : directory2).replace(/\/+$/, "") || (directory2.startsWith("/") ? "/" : "");
+var laneKey = (session) => session.directory ? JSON.stringify(["directory", directoryPath(session.directory)]) : JSON.stringify(["project", session.source || "opencode", session.projectID || session.id]);
+
+// packages/core/src/sources.ts
+var sources = {
+  opencode: { name: "OpenCode", icon: "opencode" },
+  "claude-code": { name: "Claude Code", icon: "claude" },
+  codex: { name: "Codex", icon: "openai" },
+  "t3-code": { name: "T3 Code", icon: "t3" },
+  cursor: { name: "Cursor", icon: "cursor" },
+  gemini: { name: "Gemini CLI", icon: "gemini" },
+  "qwen-code": { name: "Qwen Code", icon: "qwen" },
+  pi: { name: "Pi", icon: "pi" },
+  copilot: { name: "GitHub Copilot CLI", icon: "copilot" },
+  "copilot-chat": { name: "GitHub Copilot Chat (VS Code)", icon: "copilot" },
+  cline: { name: "Cline", icon: "cline" },
+  "roo-code": { name: "Roo Code", icon: "roo" },
+  "kilo-code": { name: "Kilo Code", icon: "kilo" },
+  continue: { name: "Continue", icon: "continue" },
+  "prime-agent": { name: "Prime Agent", icon: "prime" },
+  omp: { name: "Oh My Pi", icon: "pi" },
+  senpi: { name: "Senpi / OmO Native", icon: "senpi" },
+  kimchi: { name: "Kimchi", icon: "kimchi" },
+  gajae: { name: "Gajae-Code", icon: "gajae" },
+  openclaw: { name: "OpenClaw", icon: "openclaw" },
+  hermes: { name: "Hermes Agent", icon: "hermes" },
+  amp: { name: "Amp", icon: "amp" },
+  droid: { name: "Factory Droid", icon: "droid" },
+  codebuff: { name: "Codebuff", icon: "codebuff" },
+  freebuff: { name: "Freebuff", icon: "freebuff" },
+  kimi: { name: "Kimi CLI / Code", icon: "kimi" },
+  grok: { name: "Grok Build", icon: "grok" },
+  jcode: { name: "Jcode", icon: "jcode" },
+  "cherry-studio": { name: "Cherry Studio", icon: "cherry" },
+  "command-code": { name: "Command Code", icon: "commandcode" },
+  zcode: { name: "ZCode", icon: "zcode" },
+  codebuddy: { name: "CodeBuddy", icon: "codebuddy" },
+  workbuddy: { name: "WorkBuddy", icon: "codebuddy" },
+  proma: { name: "Proma", icon: "proma" },
+  "deepseek-harness": { name: "DeepSeek Harness", icon: "deepseek" },
+  aside: { name: "Aside", icon: "aside" },
+  vibe: { name: "Mistral Vibe", icon: "mistral" },
+  muse: { name: "Muse Code", icon: "muse" },
+  junie: { name: "Junie", icon: "junie" },
+  augment: { name: "Augment Code", icon: "augment" },
+  fx: { name: "Fx", icon: "fx" },
+  "minimax-code": { name: "MiniMax Code", icon: "minimax" },
+  opencodereview: { name: "OpenCodeReview", icon: "opencode" },
+  goose: { name: "Goose", icon: "goose" },
+  zed: { name: "Zed Agent", icon: "zed" },
+  devin: { name: "Devin CLI", icon: "devin" },
+  "devin-desktop": { name: "Devin Desktop", icon: "devin" },
+  crush: { name: "Crush", icon: "crush" },
+  octofriend: { name: "Octofriend", icon: "octofriend" },
+  "kilo-cli": { name: "Kilo CLI", icon: "kilo" },
+  "mimo-code": { name: "MiMo Code", icon: "mimo" },
+  "mimo-desktop": { name: "Xiaomi MiMo AI", icon: "mimo" },
+  unsloth: { name: "Unsloth Studio", icon: "unsloth" },
+  kiro: { name: "Kiro", icon: "kiro" },
+  mux: { name: "Mux", icon: "mux" },
+  antigravity: { name: "Antigravity", icon: "antigravity" },
+  "antigravity-cli": { name: "Antigravity CLI", icon: "antigravity" },
+  "antigravity-extension": { name: "Antigravity IDE Extension", icon: "antigravity" },
+  reasonix: { name: "Reasonix", icon: "reasonix" },
+  trae: { name: "Trae / Trae Solo", icon: "trae" },
+  warp: { name: "Warp / Oz", icon: "warp" },
+  "lm-studio": { name: "LM Studio", icon: "lmstudio" },
+  hindsight: { name: "Hindsight", icon: "hindsight" }
+};
+var isKnownSource = (id2) => typeof id2 === "string" && Object.hasOwn(sources, id2);
+
+// packages/core/src/public-graph.ts
+var DEFAULT_PUBLISHING = { tokens: true, timestamps: true, messageCounts: true, messageTimestamps: true, model: true, harness: true };
+function publishingSettings(value) {
+  const result = { ...DEFAULT_PUBLISHING };
+  if (object2(value)) {
+    for (const key of Object.keys(result)) if (typeof value[key] === "boolean") result[key] = value[key];
+  }
+  if (!result.timestamps || !result.messageCounts) result.messageTimestamps = false;
+  return result;
+}
+var PUBLIC_GRAPH_MAX_SESSIONS = 1e4;
+var PUBLIC_GRAPH_MAX_BYTES = 2e6;
+var PUBLIC_GRAPH_MAX_MESSAGE_TIMES = 1e5;
+var modelPattern = /^(?:gpt-[3-6](?:\.[0-9])?(?:-(?:turbo|mini|nano|pro|codex|astra|instant|thinking|chat|latest|preview|[0-9]{4,8}))*|o[1-4](?:-(?:mini|pro|preview|[0-9]{4,8}))*|claude-(?:(?:sonnet|opus|haiku)-[3-5](?:[.-][0-9])?|[3-5](?:-[0-9])?-(?:sonnet|opus|haiku))(?:-(?:latest|thinking|[0-9]{8}))*|gemini-[1-4](?:\.[0-9])?-(?:pro|flash)(?:-(?:lite|preview|exp|latest|[0-9]{2,4}))*|deepseek-(?:chat|reasoner|v[3-4](?:\.[0-9])?|r1)|grok-[2-5](?:\.[0-9])?(?:-(?:fast|code|reasoning|non-reasoning|[0-9]))*|kimi-k[1-3](?:\.[0-9])?(?:-thinking)?|minimax-m[1-3](?:\.[0-9])?)$/i;
+var publicModel = (value) => {
+  const name = value.split("/").at(-1) || "";
+  return name.length <= 100 && modelPattern.test(name) ? name.toLowerCase() : null;
+};
+function publishableGraph(sessions, settings, messages = /* @__PURE__ */ new Map()) {
+  const fields2 = publishingSettings(settings);
+  const ordered = [...sessions].sort((a, b) => a.created - b.created || a.id.localeCompare(b.id));
+  const ids = new Map(ordered.map((session, index) => [session.id, index]));
+  const groups = /* @__PURE__ */ new Map();
+  return validatePublicGraph({ version: 1, settings: fields2, sessions: ordered.map((session) => {
+    const key = laneKey(session);
+    if (!groups.has(key)) groups.set(key, groups.size);
+    const result = {
+      id: ids.get(session.id),
+      group: groups.get(key),
+      parent: session.parentID ? ids.get(session.parentID) ?? null : null,
+      fork: session.forkID ? ids.get(session.forkID) ?? null : null
+    };
+    if (fields2.timestamps) result.timestamps = { created: session.created, lastMessageAt: session.activity?.lastMessageAt ?? null };
+    if (fields2.tokens) result.tokens = session.tokens;
+    const stats = messages.get(session.id);
+    if (fields2.messageCounts) result.messages = { count: stats?.count ?? null, untimed: stats?.untimed ?? null, partial: stats?.partial ?? true };
+    if (fields2.messageTimestamps) result.messageTimes = { values: stats?.times ?? [], limited: stats?.timesLimited ?? true };
+    if (fields2.model) result.model = publicModel(session.model);
+    if (fields2.harness) result.harness = isKnownSource(session.source) ? session.source : null;
+    return result;
+  }) });
+}
+var object2 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+var exact = (value, keys) => object2(value) && Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
+var integer = (value, max = Number.MAX_SAFE_INTEGER) => Number.isSafeInteger(value) && value >= 0 && value <= max;
+var time3 = (value) => integer(value, Date.UTC(2100, 0, 1));
+var nullableCount = (value) => value === null || integer(value);
+function validatePublicGraph(value) {
+  const fail2 = () => {
+    throw new Error("Invalid anonymous graph. Reopen the publishing preview and try again.");
+  };
+  if (!exact(value, ["version", "settings", "sessions"]) || value.version !== 1 || !Array.isArray(value.sessions)) return fail2();
+  if (!exact(value.settings, Object.keys(DEFAULT_PUBLISHING)) || Object.values(value.settings).some((v3) => typeof v3 !== "boolean")) return fail2();
+  const settings = value.settings;
+  if (settings.messageTimestamps && (!settings.timestamps || !settings.messageCounts)) return fail2();
+  if (value.sessions.length < 1 || value.sessions.length > PUBLIC_GRAPH_MAX_SESSIONS) throw new Error(`Choose between 1 and ${PUBLIC_GRAPH_MAX_SESSIONS.toLocaleString("en")} sessions to publish.`);
+  const keys = ["id", "group", "parent", "fork", ...settings.timestamps ? ["timestamps"] : [], ...settings.tokens ? ["tokens"] : [], ...settings.messageCounts ? ["messages"] : [], ...settings.messageTimestamps ? ["messageTimes"] : [], ...settings.model ? ["model"] : [], ...settings.harness ? ["harness"] : []];
+  let times = 0;
+  for (let index = 0; index < value.sessions.length; index++) {
+    const s = value.sessions[index];
+    if (!exact(s, keys) || s.id !== index || !integer(s.group, value.sessions.length - 1)) return fail2();
+    for (const key of ["parent", "fork"]) if (s[key] !== null && (!integer(s[key], value.sessions.length - 1) || s[key] === index)) return fail2();
+    if (settings.timestamps && (!exact(s.timestamps, ["created", "lastMessageAt"]) || !time3(s.timestamps.created) || s.timestamps.lastMessageAt !== null && !time3(s.timestamps.lastMessageAt))) return fail2();
+    if (settings.tokens && !nullableCount(s.tokens)) return fail2();
+    if (settings.messageCounts && (!exact(s.messages, ["count", "untimed", "partial"]) || !nullableCount(s.messages.count) || !nullableCount(s.messages.untimed) || typeof s.messages.partial !== "boolean")) return fail2();
+    if (settings.messageTimestamps) {
+      if (!exact(s.messageTimes, ["values", "limited"]) || !Array.isArray(s.messageTimes.values) || s.messageTimes.values.length > 2e3 || typeof s.messageTimes.limited !== "boolean" || s.messageTimes.values.some((v3) => !time3(v3))) return fail2();
+      times += s.messageTimes.values.length;
+      if (times > PUBLIC_GRAPH_MAX_MESSAGE_TIMES) return fail2();
+    }
+    if (settings.model && s.model !== null && (typeof s.model !== "string" || publicModel(s.model) !== s.model)) return fail2();
+    if (settings.harness && s.harness !== null && (typeof s.harness !== "string" || !isKnownSource(s.harness))) return fail2();
+  }
+  const sessions = value.sessions;
+  const colors = new Uint8Array(sessions.length);
+  for (let i = 0; i < sessions.length; i++) {
+    if (colors[i]) continue;
+    const stack = [[i, false]];
+    while (stack.length) {
+      const [id2, exit] = stack.pop();
+      if (exit) {
+        colors[id2] = 2;
+        continue;
+      }
+      if (colors[id2] === 1) return fail2();
+      if (colors[id2] === 2) continue;
+      colors[id2] = 1;
+      stack.push([id2, true]);
+      for (const parent2 of [sessions[id2].parent, sessions[id2].fork]) if (parent2 !== null) stack.push([parent2, false]);
+    }
+  }
+  if (new TextEncoder().encode(JSON.stringify(value)).length > PUBLIC_GRAPH_MAX_BYTES) throw new Error("This graph is too large. Choose a smaller date range.");
+  return value;
+}
+
+// server/publishing.ts
+var PublishingError = class extends Error {
+  constructor(message2, status2 = 400) {
+    super(message2);
+    this.status = status2;
+  }
+  status;
+};
+var SITE = "https://sessiongraph.ai";
+var hash = (value) => createHash5("sha256").update(value).digest("hex");
+var token = () => randomBytes(32).toString("base64url");
+function preparePublicGraph(store, ids, inputSettings) {
+  if (!Array.isArray(ids) || !ids.length || ids.length > PUBLIC_GRAPH_MAX_SESSIONS || ids.some((id2) => typeof id2 !== "string") || new Set(ids).size !== ids.length) throw new PublishingError("Choose a valid set of sessions.");
+  const settings = publishingSettings(inputSettings);
+  const stats = /* @__PURE__ */ new Map();
+  const count = store.db.prepare("SELECT count(*) AS count, count(*) FILTER (WHERE time IS NULL) AS untimed FROM timeline_items WHERE session_id=? AND kind='message' AND role IN ('user','assistant')");
+  const times = store.db.prepare("SELECT time FROM timeline_items WHERE session_id=? AND kind='message' AND role IN ('user','assistant') AND time IS NOT NULL ORDER BY time,ordinal LIMIT ?");
+  const coverage2 = store.db.prepare("SELECT partial FROM timeline_coverage WHERE session_id=?");
+  let remaining = PUBLIC_GRAPH_MAX_MESSAGE_TIMES;
+  store.db.exec("BEGIN");
+  try {
+    const sessions = ids.map((id2) => {
+      const session = store.getSession(id2);
+      if (!session) throw new PublishingError("Your session selection changed. Reopen publishing.");
+      if (settings.messageCounts) {
+        const known = session.coverage?.history !== "pending" && !!coverage2.get(id2);
+        const totals = count.get(id2);
+        const rows2 = settings.messageTimestamps ? times.all(id2, Math.min(remaining, 2e3)) : [];
+        remaining -= rows2.length;
+        const values = rows2.map((row) => Number(row.time));
+        stats.set(id2, {
+          count: known ? Number(totals.count) : null,
+          untimed: known ? Number(totals.untimed) : null,
+          partial: !known || session.coverage?.history !== "complete" || Boolean(coverage2.get(id2)?.partial),
+          times: values,
+          timesLimited: !known || Number(totals.count) - Number(totals.untimed) > values.length
+        });
+      }
+      return session;
+    });
+    const result = publishableGraph(sessions, settings, stats);
+    store.db.exec("COMMIT");
+    return result;
+  } catch (error) {
+    store.db.exec("ROLLBACK");
+    throw error;
+  }
+}
+var PublishingClient = class {
+  constructor(credentialPath = join25(dirname10(databasePath()), "account.json"), fetcher = fetch) {
+    this.credentialPath = credentialPath;
+    this.fetcher = fetcher;
+  }
+  credentialPath;
+  fetcher;
+  pending;
+  preview;
+  busy = false;
+  async exclusive(work) {
+    if (this.busy) throw new PublishingError("Wait for the current account operation to finish.", 409);
+    this.busy = true;
+    try {
+      return await work();
+    } finally {
+      this.busy = false;
+    }
+  }
+  async credential() {
+    try {
+      const saved = JSON.parse(await readFile5(this.credentialPath, "utf8"));
+      if (typeof saved.token !== "string" || !/^[\w-]{43}$/.test(saved.token) || typeof saved.username !== "string" || !Number.isFinite(Date.parse(saved.expiresAt)) || Date.parse(saved.expiresAt) <= Date.now()) return null;
+      return saved;
+    } catch (error) {
+      if (error.code === "ENOENT") return null;
+      throw new PublishingError("Could not read your saved login. Sign out and try again.");
+    }
+  }
+  async save(value) {
+    await mkdir2(dirname10(this.credentialPath), { recursive: true, mode: 448 });
+    const temporary = `${this.credentialPath}.${randomBytes(8).toString("hex")}`;
+    try {
+      await writeFile3(temporary, JSON.stringify(value), { mode: 384, flag: "wx" });
+      await rename3(temporary, this.credentialPath);
+      await chmod(this.credentialPath, 384);
+    } finally {
+      await rm5(temporary, { force: true });
+    }
+  }
+  async call(path, method = "GET", value, credential) {
+    const response = await this.fetcher(`${SITE}/api/${path}`, { method, redirect: "error", signal: AbortSignal.timeout(25e3), headers: { "Content-Type": "application/json", "x-sessiongraph-action": "1", ...credential ? { Authorization: `Bearer ${credential.token}` } : {} }, ...value === void 0 ? {} : { body: JSON.stringify(value) } });
+    const data = await response.json().catch(() => ({}));
+    if (!response.ok) {
+      if (response.status === 401) await rm5(this.credentialPath, { force: true });
+      throw new PublishingError(typeof data.error === "string" ? data.error : "The publishing service is unavailable.", response.status);
+    }
+    return data;
+  }
+  async status() {
+    const credential = await this.credential();
+    if (!credential) return { username: null, publication: null };
+    return this.call("account", "GET", void 0, credential);
+  }
+  login() {
+    if (this.busy) throw new PublishingError("Wait for the current account operation to finish.", 409);
+    const verifier = token(), challenge = hash(verifier);
+    this.pending = { verifier, expires: Date.now() + 6e5, nextPoll: 0 };
+    return { url: `${SITE}/account?device=${challenge}`, code: challenge.slice(0, 8).toUpperCase() };
+  }
+  async poll() {
+    const pending2 = this.pending;
+    if (!pending2 || pending2.expires <= Date.now()) {
+      this.pending = void 0;
+      throw new PublishingError("Login expired. Start again.");
+    }
+    if (this.busy || pending2.nextPoll > Date.now()) return { pending: true };
+    pending2.nextPoll = Date.now() + 3e3;
+    return this.exclusive(async () => {
+      const result = await this.call("auth/device", "POST", { verifier: pending2.verifier });
+      if (this.pending !== pending2 || result.pending) return { pending: true };
+      if (typeof result.token !== "string" || !/^[\w-]{43}$/.test(result.token) || typeof result.username !== "string" || !Number.isFinite(Date.parse(result.expiresAt))) throw new PublishingError("Invalid login response.");
+      await this.save(result);
+      this.pending = void 0;
+      return { username: result.username };
+    });
+  }
+  prepare(store, ids, settings) {
+    this.preview = void 0;
+    let graph;
+    try {
+      graph = preparePublicGraph(store, ids, settings);
+    } catch (error) {
+      if (error instanceof PublishingError) throw error;
+      throw new PublishingError(error instanceof Error ? error.message : "Could not prepare the public graph.");
+    }
+    const id2 = token();
+    this.preview = { id: id2, graph, expires: Date.now() + 18e5 };
+    store.setting("publishing", graph.settings);
+    return { id: id2, graph };
+  }
+  async publish(previewID, confirmed) {
+    return this.exclusive(async () => {
+      const preview = this.preview;
+      if (confirmed !== true || !preview || preview.id !== previewID || preview.expires < Date.now()) throw new PublishingError("Review a fresh preview before publishing.");
+      const credential = await this.credential();
+      if (!credential) throw new PublishingError("Sign in before publishing.", 401);
+      const result = await this.call("publication", "PUT", { confirmed: true, graph: preview.graph }, credential);
+      if (this.preview === preview) this.preview = void 0;
+      return result;
+    });
+  }
+  async unpublish() {
+    return this.exclusive(async () => {
+      const credential = await this.credential();
+      if (!credential) throw new PublishingError("Sign in before unpublishing.", 401);
+      return this.call("publication", "DELETE", void 0, credential);
+    });
+  }
+  async logout() {
+    return this.exclusive(async () => {
+      this.pending = void 0;
+      this.preview = void 0;
+      const credential = await this.credential();
+      if (credential) await this.call("auth/logout", "POST", {}, credential);
+      await rm5(this.credentialPath, { force: true });
+      return { signedOut: true };
+    });
+  }
+};
+
 // server/middleware.ts
+var publishing = new PublishingClient();
 var generation = /* @__PURE__ */ Symbol("sessiongraph-backend");
 var runtime = globalThis;
 function library() {
@@ -34494,6 +34836,24 @@ async function sessionGraphMiddleware(req, res, next) {
   if (req.method !== "GET" && typeof req.headers["x-sessiongraph-action"] !== "string") return json4(403, { error: "Use the SessionGraph application." });
   try {
     const { store, importer } = library();
+    if (url.pathname.startsWith("/api/sessiongraph/publishing")) {
+      const action = url.pathname.slice("/api/sessiongraph/publishing".length);
+      if (action === "/settings" && req.method === "GET") return json4(200, publishingSettings(store.setting("publishing")));
+      if (action === "/status" && req.method === "GET") return json4(200, await publishing.status());
+      if (action === "/login" && req.method === "POST") return json4(200, publishing.login());
+      if (action === "/poll" && req.method === "POST") return json4(200, await publishing.poll());
+      if (action === "/logout" && req.method === "POST") return json4(200, await publishing.logout());
+      if (action === "/preview" && req.method === "POST") {
+        const value = await body(req);
+        return json4(200, publishing.prepare(store, value?.ids, value?.settings));
+      }
+      if (action === "/publish" && req.method === "POST") {
+        const value = await body(req);
+        return json4(200, await publishing.publish(value?.id, value?.confirmed));
+      }
+      if (action === "/unpublish" && req.method === "POST") return json4(200, await publishing.unpublish());
+      return json4(405, { error: "Method not allowed." });
+    }
     if (url.pathname === "/api/sessiongraph/settings" && req.method === "POST") {
       const value = await body(req);
       if (!value || typeof value !== "object" || Array.isArray(value) || !["autoImport", "preferences", "viewState"].some((key) => value[key] !== void 0)) return json4(400, { error: "Choose valid settings." });
@@ -34535,8 +34895,8 @@ async function sessionGraphMiddleware(req, res, next) {
       }
     }
     if (url.pathname === "/api/sessiongraph" && req.method === "GET") {
-      const sources = adapters.map((a) => ({ id: a.id, name: a.name, description: a.description, capabilities: a.capabilities, selected: store.selected().includes(a.id), available: false, ...store.sourceInfo(a.id) }));
-      return json4(200, store.library(sources, importer.status.running));
+      const sources2 = adapters.map((a) => ({ id: a.id, name: a.name, description: a.description, capabilities: a.capabilities, selected: store.selected().includes(a.id), available: false, ...store.sourceInfo(a.id) }));
+      return json4(200, store.library(sources2, importer.status.running));
     }
     const match2 = /^\/api\/sessiongraph\/session\/([^/]+)(?:\/(content|timeline|events|event-markers|connection|prepare-launch|open-terminal))?$/.exec(url.pathname);
     if (match2) {
@@ -34568,6 +34928,7 @@ async function sessionGraphMiddleware(req, res, next) {
     }
     return json4(404, { error: "Not found." });
   } catch (error) {
+    if (error instanceof PublishingError) return json4(error.status, { error: error.message });
     if (error instanceof EventReadError) return json4(error.status, { error: error.message });
     console.error("[sessiongraph] Local operation failed:", error instanceof Error ? error.name : "Unknown error");
     return json4(500, { error: "Local operation failed. Check the import status or retry." });
@@ -34580,9 +34941,9 @@ var arg = (name) => {
   return at2 >= 0 ? process.argv[at2 + 1] : void 0;
 };
 var assets = resolve2(arg("--assets") || fileURLToPath5(new URL("../dist", import.meta.url)));
-var token = randomBytes(32).toString("hex");
+var token2 = randomBytes2(32).toString("hex");
 var ipc = process.argv.includes("--desktop") ? " ipc: http://ipc.localhost" : "";
-var equals = (value) => /^[a-f0-9]{64}$/.test(value) && timingSafeEqual(Buffer.from(value), Buffer.from(token));
+var equals = (value) => /^[a-f0-9]{64}$/.test(value) && timingSafeEqual(Buffer.from(value), Buffer.from(token2));
 var types = { ".html": "text/html; charset=utf-8", ".js": "text/javascript", ".css": "text/css", ".svg": "image/svg+xml", ".png": "image/png", ".woff": "font/woff", ".woff2": "font/woff2", ".json": "application/json" };
 var server = createServer(async (req, res) => {
   if (req.headers.host !== `127.0.0.1:${server.address().port}`) {
@@ -34595,7 +34956,7 @@ var server = createServer(async (req, res) => {
   res.setHeader("X-Content-Type-Options", "nosniff");
   res.setHeader("Content-Security-Policy", `default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self'; connect-src 'self'${ipc}; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'`);
   if (url.pathname === "/__sessiongraph" && equals(url.searchParams.get("token") || "")) {
-    res.setHeader("Set-Cookie", `sessiongraph=${token}; HttpOnly; SameSite=Strict; Path=/`);
+    res.setHeader("Set-Cookie", `sessiongraph=${token2}; HttpOnly; SameSite=Strict; Path=/`);
     res.setHeader("Cache-Control", "no-store");
     res.writeHead(303, { Location: "/" });
     res.end();
@@ -34636,7 +34997,7 @@ var server = createServer(async (req, res) => {
 });
 server.listen(0, "127.0.0.1", () => {
   const port = server.address().port;
-  process.stdout.write(JSON.stringify({ url: `http://127.0.0.1:${port}/__sessiongraph?token=${token}` }) + "\n");
+  process.stdout.write(JSON.stringify({ url: `http://127.0.0.1:${port}/__sessiongraph?token=${token2}` }) + "\n");
 });
 var parent = Number(arg("--parent-pid"));
 if (parent > 0) setInterval(() => {