sessionpipe-core 0.13.3 → 0.13.4

package/dist/index.js

@@ -1,4 +1,4 @@
-// sessionpipe-core 0.13.3 · Apache-2.0 · https://sessionpipe.org
+// sessionpipe-core 0.13.4 · Apache-2.0 · https://sessionpipe.org
 var __defProp = Object.defineProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -63,6 +63,82 @@ import { existsSync as existsSync2, readdirSync as readdirSync2, readFileSync as
 import { userInfo } from "node:os";
 import path4 from "node:path";
 
+// src/control/frames.ts
+function hostOf(receiver) {
+  try {
+    return new URL(receiver).host;
+  } catch {
+    return receiver;
+  }
+}
+var IN_PLACE_ANSWER = "Answer it right here, as you would answer the person at the keyboard: your reply is sent back to them automatically. Don't run a command or call a tool just to send it.";
+var COPY_WHYS = ["open", "running", "recent"];
+var copyNote = (why) => `You are a copy of that session, started because the original is ${why === "open" ? "open in a window" : "in use by another process"}, and you have its conversation, folder and tools. Do what the message asks the way the original would: edits, commands and publishing all take effect for real. Only this conversation stays here, so the person reads your reply and not the original's${why === "open" ? " window" : ""}: say what you did, then stop.`;
+var RE_ARM = "(Answer it right here, as you would answer the person at the keyboard: your reply is sent back to them automatically, so don't run a command or call a tool just to send it. Then, without mentioning it, start `sessionpipe wait` again as a background command, with the longest timeout your harness allows, to keep receiving messages.)";
+function frame(text, receiver) {
+  return `Message via ${hostOf(receiver)} (sessionpipe control, signed on the sender's device):
+
+${text}`;
+}
+var marked = (text, host, mark) => `Message via ${host} (sessionpipe control, signed on the sender's device; ${mark}):
+
+${text}`;
+function frameStart(text, receiver) {
+  return `${text}
+
+(Sent via ${hostOf(receiver)} with sessionpipe control, signed on the sender's device.)`;
+}
+function frameAsk(text, from, mark) {
+  return `${text}
+
+(Asked by ${from ?? "another session"} on this machine with sessionpipe ask${mark ? `, ${mark}` : ""}. Answer here in full: your reply is returned to that session automatically. Don't run a command or call a tool just to send it.)`;
+}
+function frameHandoff(from, receiver, reply) {
+  return `Answer from ${from} (sessionpipe handoff, asked via ${hostOf(receiver)}):
+
+${reply}`;
+}
+var HOLE = "\0";
+var MARK = "
";
+var lineOf = (built, hole = "(\\S+)") => new RegExp(
+  `^${built.trim().replace(/[.*+?^${}()|[\]\\]/g, "\\$&").replaceAll(HOLE, hole).replaceAll(MARK, "message \\S+")}$`
+);
+var HEAD_LINES = [lineOf(frame("", HOLE)), lineOf(marked("", HOLE, MARK))];
+var START_LINES = [lineOf(frameStart("", HOLE))];
+var ASK_LINES = [lineOf(frameAsk("", HOLE), "[^\\n]{1,300}")];
+var MARKED_ASK_LINES = [lineOf(frameAsk("", HOLE, MARK), "([^\\n]{1,300}?)")];
+var HANDOFF_LINES = [lineOf(frameHandoff(HOLE, HOLE, ""))];
+var COPY_NOTE_0_13_0 = "You are a copy of that session, started to answer this message: the conversation above is a replay, the original session is somewhere else, and nothing you do here appears in it. Answer the message and stop; don't carry on the original's work.";
+var COPY_NOTES = [...new Set(COPY_WHYS.map(copyNote)), COPY_NOTE_0_13_0];
+var NOTES = [IN_PLACE_ANSWER, ...COPY_NOTES, RE_ARM];
+var ASK_NOTES = [...COPY_NOTES, RE_ARM];
+var lineIn = (lines, line) => {
+  for (const l of lines) {
+    const m = l.exec(line);
+    if (m) return m;
+  }
+  return null;
+};
+function deliveredWords(text) {
+  const paragraphs = text.split("\n\n");
+  const at = (i) => paragraphs[i].trim();
+  const n = paragraphs.length;
+  const note = n > 1 && NOTES.includes(at(n - 1)) ? at(n - 1) : null;
+  const end = note === null ? n : n - 1;
+  const words = (from, to) => paragraphs.slice(from, to).join("\n\n").trim();
+  const head = lineIn(HEAD_LINES, at(0));
+  if (head && words(1, end)) return { text: words(1, end), via: head[1], delivered: true };
+  const start = note === null ? lineIn(START_LINES, at(n - 1)) : null;
+  if (start && words(0, n - 1)) return { text: words(0, n - 1), via: start[1], delivered: true };
+  const asks = note === null || ASK_NOTES.includes(note);
+  const theirs = asks && (lineIn(ASK_LINES, at(end - 1)) && words(0, end - 1) || lineIn(HANDOFF_LINES, at(0)) && words(1, end));
+  if (theirs) return { text: note === null ? text : words(0, end), via: null, delivered: true };
+  const marked2 = asks ? lineIn(MARKED_ASK_LINES, at(end - 1)) : null;
+  if (marked2 && words(0, end - 1))
+    return { text: `${words(0, end - 1)}${frameAsk("", marked2[1])}`, via: null, delivered: true };
+  return { text, via: null, delivered: false };
+}
+
 // src/readers/files.ts
 import { closeSync, fstatSync, openSync, readdirSync, readSync, statSync } from "node:fs";
 import path2 from "node:path";
@@ -199,15 +275,23 @@ function codexReplayBoundary(meta) {
 }
 
 // src/readers/transcripts.ts
-function pairTurns(msgs, endLine) {
+function pairTurns(msgs, endLine, tail = false) {
   const turns = [];
   let cur = null;
   for (const m of msgs) {
-    if (m.role === "user") {
+    if (m.role === "interrupt") {
+      if (cur) {
+        cur.interrupted = true;
+        cur.endLine = m.line;
+        turns.push(cur);
+        cur = null;
+      }
+    } else if (m.role === "user") {
       if (cur && !cur.assistant) {
         cur.user += `
 
 ${m.text}`;
+        if (m.id) cur.id = m.id;
         continue;
       }
       if (cur) turns.push(cur);
@@ -217,12 +301,14 @@ ${m.text}`;
         at: m.at,
         startLine: m.line,
         endLine: m.line,
-        ...m.injected ? { injected: true } : {}
+        ...m.injected ? { injected: true } : {},
+        ...m.id ? { id: m.id } : {}
       };
     } else {
       if (!cur) cur = { user: "", assistant: "", at: m.at, startLine: m.line, endLine: m.line };
       cur.assistant += (cur.assistant ? "\n\n" : "") + m.text;
       cur.endLine = m.line;
+      cur.said = m.text;
     }
   }
   if (cur?.assistant) turns.push(cur);
@@ -233,12 +319,22 @@ ${m.text}`;
       assistant: t.assistant,
       at: t.at,
       endLine: t.endLine,
-      ...t.injected ? { injected: true } : {}
+      ...t.injected ? { injected: true } : {},
+      ...t.id ? { id: t.id } : {},
+      ...t.interrupted ? { interrupted: true } : {}
     })),
     line
   };
   if (cur && !cur.assistant && cur.user)
-    out.open = { user: cur.user, at: cur.at, ...cur.injected ? { injected: true } : {} };
+    out.open = {
+      user: cur.user,
+      at: cur.at,
+      ...cur.injected ? { injected: true } : {},
+      ...cur.id ? { id: cur.id } : {}
+    };
+  const last = turns[turns.length - 1];
+  if (tail && last)
+    out.tail = { start: last.startLine, ...last.said !== void 0 && !last.interrupted ? { said: last.said } : {} };
   return out;
 }
 var isInjected = (text) => /^<[a-z_-]+(?:\s[^>]*)?>/i.test(text) && /<\/[a-z_-]+>\s*$/i.test(text) || /^<!--\s/.test(text) || /^<command-/.test(text);
@@ -262,6 +358,10 @@ var textParts = (c, kinds) => {
   ).map((b) => b.text).join("\n");
 };
 var SPOKEN = /* @__PURE__ */ new Set(["human", "peer"]);
+var fromAgent = (origin) => {
+  const o = origin;
+  return o?.handback === true || typeof o?.senderTaskId === "string";
+};
 var PEER_INTRO = /sent a message[^\n]*:$/;
 var PEER_OUTRO = "\n\nThis came from another ";
 var ENVELOPE = /^<cross-session-message\b[^>]*>\n([\s\S]*)\n<\/cross-session-message>$/;
@@ -281,40 +381,68 @@ var queuedPrompt = (a) => {
   const q = a;
   if (q.type !== "queued_command" || (q.commandMode ?? "prompt") !== "prompt") return "";
   const kind = q.origin?.kind ?? "human";
-  if (!SPOKEN.has(kind)) return "";
+  if (!SPOKEN.has(kind) || fromAgent(q.origin)) return "";
   const text = textParts(q.prompt, ["text"]).trim();
   return kind === "peer" ? peerAsk(q.origin, text) : text;
 };
 var channelText = (text) => /^<channel\b[^>]*>([\s\S]*)<\/channel>$/.exec(text)?.[1]?.trim() ?? "";
+var INTERRUPTED = /^\[Request interrupted by user[^\]]*\]$/;
+var HOOK_FEEDBACK = /^[A-Za-z]+ hook feedback:\n/;
+var hookDelivery = (text) => {
+  const head = HOOK_FEEDBACK.exec(text);
+  if (!head) return "";
+  const said = deliveredWords(text.slice(head[0].length));
+  return said.delivered ? said.text : "";
+};
+var hasBlock = (c, type) => Array.isArray(c) && c.some((b) => b && typeof b === "object" && b.type === type);
 function readClaude(lines, from) {
   const msgs = [];
+  let saidLine = -1;
+  let turnOver = false;
   for (let i = from; i < lines.length; i++) {
     const j = lines[i] ? parse(lines[i]) : null;
     if (!j || j.isSidechain) continue;
     const origin = j.origin;
     const channel = j.type === "user" && origin?.kind === "channel";
     const peer = origin?.kind === "peer";
+    const c = j.message?.content;
+    if (!turnOver && (j.type === "assistant" && hasBlock(c, "tool_use") || j.type === "user" && hasBlock(c, "tool_result")))
+      saidLine = -1;
     if (j.type === "user" && (j.isCompactSummary || j.repeatsCompactSummary)) continue;
-    if (j.type === "user" && !channel && !peer && (j.isMeta || origin?.kind && origin.kind !== "human")) continue;
     const at = Date.parse(String(j.timestamp ?? "")) || Date.now();
-    const c = j.message?.content;
+    const id = typeof j.promptId === "string" && j.promptId ? j.promptId : void 0;
+    const ask = (said, m = {}) => {
+      const text = deliveredWords(said).text;
+      if (!text || isInjected(text)) return;
+      msgs.push({ role: "user", text, at, line: i, ...m });
+      turnOver = true;
+    };
+    if (j.type === "user" && !channel && !peer && (j.isMeta || origin?.kind && origin.kind !== "human")) {
+      if (j.isMeta && !origin?.kind)
+        ask(hookDelivery(textParts(c, ["text"]).trim()), { injected: true, ...id ? { id } : {} });
+      continue;
+    }
     if (channel) {
-      const text = channelText(textParts(c, ["text"]).trim());
-      if (text) msgs.push({ role: "user", text, at, line: i, injected: true });
+      ask(channelText(textParts(c, ["text"]).trim()), { injected: true });
     } else if (j.type === "user") {
       const raw = textParts(c, ["text"]).trim();
-      const text = peer ? peerAsk(origin, raw) : raw;
-      if (!text || isInjected(text)) continue;
-      msgs.push({ role: "user", text, at, line: i, ...peer ? { injected: true } : {} });
+      if (!peer && INTERRUPTED.test(raw)) {
+        msgs.push({ role: "interrupt", text: "", at, line: i });
+        turnOver = true;
+      } else if (!peer) ask(raw, id ? { id } : {});
+      else if (!fromAgent(origin)) ask(peerAsk(origin, raw), { injected: true, ...id ? { id } : {} });
     } else if (j.type === "assistant" && Array.isArray(c)) {
       const text = textParts(c, ["text"]).trim();
-      if (text) msgs.push({ role: "assistant", text, at, line: i });
-    } else if (j.type === "attachment") {
-      const text = queuedPrompt(j.attachment);
-      if (text && !isInjected(text)) msgs.push({ role: "user", text, at, line: i });
-    }
+      if (text) {
+        msgs.push({ role: "assistant", text, at, line: i });
+        saidLine = i;
+        turnOver = false;
+      }
+    } else if (j.type === "attachment") ask(queuedPrompt(j.attachment));
   }
-  return pairTurns(msgs, endOf(lines));
+  const out = pairTurns(msgs, endOf(lines), true);
+  if (out.tail && saidLine !== out.turns[out.turns.length - 1].endLine) delete out.tail.said;
+  return out;
 }
 function codexInjected(text) {
   return /^<[a-z_-]+>/i.test(text) || /^# AGENTS\.md instructions\b/i.test(text);
@@ -766,6 +894,8 @@ var claudeCode = {
     }
     const hints = {};
     if (event === "UserPromptSubmit" && typeof s.prompt === "string") hints.prompt = s.prompt;
+    if (event === "Stop" && typeof s.last_assistant_message === "string" && s.last_assistant_message.trim())
+      hints.final = s.last_assistant_message;
     const host = input.env.CLAUDE_CODE_HOST_SESSION_ID;
     if (host && DESKTOP_ID.test(host)) hints.desktop_id = host;
     const attended = input.env.CLAUDE_CODE_SESSION_ATTENDED;
@@ -1058,7 +1188,9 @@ function askText(j) {
   const origin = j.origin;
   if (origin?.kind && origin.kind !== "human") return null;
   const c = j.message?.content;
-  const text = (typeof c === "string" ? c : Array.isArray(c) ? c.filter((b) => b && b.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n") : "").trim();
+  const text = deliveredWords(
+    (typeof c === "string" ? c : Array.isArray(c) ? c.filter((b) => b && b.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n") : "").trim()
+  ).text;
   if (!text || isInjected(text)) return null;
   return text;
 }
@@ -1703,6 +1835,7 @@ var acp_control_exports = {};
 __export(acp_control_exports, {
   ACP_AGENTS: () => ACP_AGENTS,
   ACP_HARNESSES: () => ACP_HARNESSES,
+  CANCELLED_NOTE: () => CANCELLED_NOTE,
   acpAgent: () => acpAgent,
   acpHarnesses: () => acpHarnesses,
   acpOverride: () => acpOverride,
@@ -1810,8 +1943,13 @@ function runHeadless(bin, args, o) {
     let tooBig = false;
     let errTail = "";
     let timedOut = false;
+    let stopped = false;
     let settled = false;
     let child;
+    if (o.signal?.aborted) {
+      resolve({ stopped: true });
+      return;
+    }
     const c = spawnable(bin, args);
     if (!c) {
       resolve({ error: shimNote(bin) });
@@ -1874,27 +2012,53 @@ function runHeadless(bin, args, o) {
     child.stderr?.on("data", (b) => {
       errTail = (errTail + b.toString("utf8")).slice(-4e3);
     });
+    let ending = null;
+    let gone = false;
+    const end = () => {
+      kill("SIGTERM");
+      ending ??= setTimeout(() => {
+        ending = null;
+        kill("SIGKILL");
+      }, 1e4);
+      ending.unref();
+    };
     const timer = setTimeout(() => {
+      if (gone) return;
       timedOut = true;
-      kill("SIGTERM");
-      setTimeout(() => kill("SIGKILL"), 1e4).unref();
+      end();
     }, o.timeoutMs ?? JOB_TIMEOUT_MS);
+    const stop = () => {
+      if (gone) return;
+      stopped = true;
+      end();
+    };
+    o.signal?.addEventListener("abort", stop, { once: true });
     const result = (code, signal) => ({
       code,
       signal,
       stdout: tooBig ? null : Buffer.concat(out).toString("utf8"),
       tooBig,
       stderr: errTail,
-      timedOut
+      timedOut,
+      ...stopped ? { stopped } : {}
     });
     const finish = (r) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
+      o.signal?.removeEventListener("abort", stop);
       resolve(r);
     };
     child.on("error", (e) => finish({ error: e.message }));
-    child.on("exit", (code, signal) => setTimeout(() => finish(result(code, signal)), 2e3).unref());
+    child.on("exit", (code, signal) => {
+      if (ending) {
+        clearTimeout(ending);
+        ending = null;
+        kill("SIGKILL");
+      }
+      gone = true;
+      setTimeout(() => finish(result(code, signal)), 2e3).unref();
+    });
     child.on("close", (code, signal) => {
       if (o.onLine && partial.trim()) {
         try {
@@ -1911,6 +2075,7 @@ function runHeadless(bin, args, o) {
 function stderrTail(stderr, n = 3) {
   return String(stderr || "").trim().split("\n").slice(-n).join(" ").trim();
 }
+var CANCELLED_NOTE = "(The turn was cancelled.)";
 function deniedNote(names, count) {
   if (!count) return "";
   return `
@@ -2152,7 +2317,9 @@ function startAcp(o) {
     pending.clear();
   };
   child.on("error", (e) => left(`couldn't start ${label}: ${e.message}`));
+  let dead = false;
   const exited = (code, signal) => {
+    dead = true;
     const tail = errTail.trim().split("\n").slice(-3).join(" ").trim();
     left(`${label} exited (${signal || `code ${code}`})${tail ? `: ${tail}` : ""}`);
   };
@@ -2166,6 +2333,7 @@ function startAcp(o) {
       child.stdin?.end();
     } catch {
     }
+    if (dead) return;
     const grace = o.closeGraceMs ?? 2e3;
     const t = setTimeout(() => kill("SIGTERM"), grace);
     t.unref();
@@ -2223,7 +2391,7 @@ function startAcp(o) {
               error: `${label} was still working after ${Math.round(limit / 6e4)} minutes, so it was stopped`
             } : { reply: `${words}
 
-(The turn was cancelled.)${refused2}` };
+${CANCELLED_NOTE}${refused2}` };
           return { reply: "", error: `${label} ended the turn with ${stop || "no stop reason"}` };
         } catch (e) {
           return { reply: "", error: e.message };
@@ -2711,8 +2879,10 @@ __export(claude_code_control_exports, {
   findClaude: () => findClaude,
   findTranscript: () => findTranscript,
   findTranscripts: () => findTranscripts,
+  helpFailure: () => helpFailure,
   homeSettings: () => homeSettings,
   hookMode: () => hookMode,
+  initSession: () => initSession,
   isUuid: () => isUuid,
   liveProcess: () => liveProcess,
   liveRecord: () => liveRecord,
@@ -2727,6 +2897,7 @@ __export(claude_code_control_exports, {
   parseCaps: () => parseCaps,
   parseResult: () => parseResult,
   peerClass: () => peerClass,
+  recentWrite: () => recentWrite,
   recentlyWritten: () => recentlyWritten,
   relaunchMode: () => relaunchMode,
   resolveHome: () => resolveHome,
@@ -2760,6 +2931,201 @@ var POOL_FIELDS = FIELDS.pool;
 var enc = new TextEncoder();
 var dec = new TextDecoder();
 
+// src/privacy/pii.ts
+import { createHash as createHash3 } from "node:crypto";
+var RULESET_PII = "pii@1";
+var EMAIL = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
+var PHONE = /(?<![\w.])(?:(?<!\)[ .-]?|\+\d{1,3}[ .-]?)(\+?(?:19|20)\d{2}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\d|3[01]))(?:(?= (?:[01]?\d|2[0-3]):)|(?!\w|[ .-]\d\d))|(?:\+\d{1,3}[ .-]?)?(?:\(\d{2,4}\)[ .-]?)?\d{2,4}(?:[ .-]?\d{2,4}){1,3}(?!\w))/g;
+function looksPhone(s) {
+  const digits = s.replace(/\D/g, "");
+  if (digits.length < 7 || digits.length > 15) return false;
+  if (!/[+() .-]/.test(s)) return false;
+  if (!/[+() -]/.test(s)) return false;
+  return true;
+}
+function reducePii(text, home) {
+  if (!text) return text;
+  let out = text.replace(EMAIL, "[email]");
+  out = out.replace(PHONE, (m, date) => !date && looksPhone(m) ? "[phone]" : m);
+  if (home) {
+    const h = home.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    out = out.replace(new RegExp(`(?<![A-Za-z0-9_])${h}(?=/|$|\\s|["'\`])`, "g"), "~");
+  }
+  return out;
+}
+function hashMachine(name) {
+  return createHash3("sha256").update(name).digest("hex").slice(0, 8);
+}
+function reducePiiDeep(v, home) {
+  if (typeof v === "string") return reducePii(v, home);
+  if (Array.isArray(v)) return v.map((x) => reducePiiDeep(x, home));
+  if (v && typeof v === "object") {
+    const out = {};
+    for (const [k, x] of Object.entries(v)) out[k] = reducePiiDeep(x, home);
+    return out;
+  }
+  return v;
+}
+
+// src/privacy/secrets.ts
+var RULESET_SECRETS = "secrets@1";
+var REDACTED = "[redacted]";
+var TOKEN_PATTERNS = [
+  /-----BEGIN [A-Z0-9 ]*PRIVATE KEY(?: BLOCK)?-----[\s\S]*?(?:-----END [A-Z0-9 ]*PRIVATE KEY(?: BLOCK)?-----|$)/g,
+  /\b(?:AKIA|ASIA|ABIA|ACCA)[0-9A-Z]{16}\b/g,
+  // AWS access key id
+  /\bgh[pousr]_[A-Za-z0-9]{30,}\b/g,
+  // GitHub
+  /\bgithub_pat_[A-Za-z0-9_]{30,}\b/g,
+  /\bglpat-[A-Za-z0-9_-]{20,}\b/g,
+  // GitLab
+  /\bxox[abposre]-[A-Za-z0-9-]{10,}\b/g,
+  // Slack
+  /\bhttps:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9/_-]+/g,
+  /\bhttps:\/\/(?:ptb\.|canary\.)?discord(?:app)?\.com\/api\/webhooks\/[0-9]+\/[A-Za-z0-9_-]+/g,
+  /\bsk-(?:ant-|proj-|svcacct-|admin-|or-v1-)?[A-Za-z0-9_-]{20,}\b/g,
+  // Anthropic, OpenAI, DeepSeek, OpenRouter
+  /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{16,}\b/g,
+  // Stripe secret / restricted
+  /\bwhsec_[A-Za-z0-9+/=]{20,}/g,
+  // Stripe / Svix / Standard Webhooks secret
+  /\bAIza[0-9A-Za-z_-]{35}\b/g,
+  // Google API key
+  /\bya29\.[0-9A-Za-z_-]{20,}/g,
+  // Google OAuth access token
+  /\b1\/\/0[0-9A-Za-z_-]{30,}/g,
+  // Google OAuth refresh token
+  /\bGOCSPX-[0-9A-Za-z_-]{20,}/g,
+  // Google OAuth client secret
+  /\bxai-[A-Za-z0-9]{30,}\b/g,
+  /\bgsk_[A-Za-z0-9]{30,}\b/g,
+  // Groq
+  /\bpplx-[A-Za-z0-9]{30,}\b/g,
+  // Perplexity
+  /\bhf_[A-Za-z0-9]{30,}\b/g,
+  // Hugging Face
+  /\bpcsk_[A-Za-z0-9_]{30,}\b/g,
+  // Pinecone
+  /\bnpm_[A-Za-z0-9]{30,}\b/g,
+  /\bpypi-[A-Za-z0-9_-]{50,}/g,
+  /\bSG\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}/g,
+  // SendGrid
+  /\bshp(?:at|ss|ca|pa)_[a-fA-F0-9]{32}\b/g,
+  // Shopify
+  /\bdop_v1_[a-f0-9]{64}\b/g,
+  // DigitalOcean
+  /\b(?:lin_api|lin_oauth)_[A-Za-z0-9]{30,}\b/g,
+  // Linear
+  /\b(?:ntn|secret)_[A-Za-z0-9]{40,}\b/g,
+  // Notion
+  /\bsbp_[a-f0-9]{40}\b/g,
+  // Supabase
+  /\bfigd_[A-Za-z0-9_-]{30,}/g,
+  // Figma
+  /\bdp\.(?:pt|st|sa|ct)\.[A-Za-z0-9]{30,}/g,
+  // Doppler
+  /\bgrn_[A-Za-z0-9_-]{20,}/g,
+  // Granola
+  /\bss_[a-f0-9]{32,}\b/g,
+  // spacesheep API keys
+  /\b[0-9]{8,10}:AA[A-Za-z0-9_-]{33}\b/g,
+  // Telegram bot token
+  /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
+  // JWT
+];
+var URL_CREDENTIALS = /\b([a-z][a-z0-9+.-]{1,20}:\/\/[^\s:/@'"`<>]{1,100}:)([^\s@/'"`<>]{1,200})(@)/gi;
+var AUTH_HEADER = /\b((?:Bearer|Basic|Token)\s+)([A-Za-z0-9._~+/=-]{16,})/g;
+var SECRET_WORD = "(?:pass(?:word|wd|phrase|code)?s?|pwd|secret(?:[ _-]?key)?s?|client[ _-]?secret|api[ _-]?keys?|apikeys?|access[ _-]?keys?|access[ _-]?tokens?|auth[ _-]?tokens?|refresh[ _-]?tokens?|private[ _-]?keys?|tokens?|credentials?|creds)";
+var NAME_SEP = /(?<![A-Za-z0-9_])([A-Za-z][A-Za-z0-9_-]{1,79})(["']?\s{0,3}(?::=|=>|=|:)\s{0,3})/g;
+var VALUE = /"([^"\n]{1,300})"|'([^'\n]{1,300})'|`([^`\n]{1,300})`|([^\s"'`,;&)}\]]{1,300})/y;
+function redactAssignments(text) {
+  let out = "";
+  let last = 0;
+  NAME_SEP.lastIndex = 0;
+  for (let m = NAME_SEP.exec(text); m; m = NAME_SEP.exec(text)) {
+    const name = m[1];
+    if (!isSecretName(name)) continue;
+    VALUE.lastIndex = NAME_SEP.lastIndex;
+    const v = VALUE.exec(text);
+    if (!v) continue;
+    const value = v[1] ?? v[2] ?? v[3] ?? v[4];
+    NAME_SEP.lastIndex = VALUE.lastIndex;
+    if (isPlaceholder(value) || value.includes(REDACTED)) continue;
+    if (/tokens?$/i.test(name) && /^\d+(?:[.,]\d+)*[km]?$/i.test(value)) continue;
+    const q = v[1] != null ? '"' : v[2] != null ? "'" : v[3] != null ? "`" : "";
+    out += text.slice(last, v.index) + q + REDACTED + q;
+    last = VALUE.lastIndex;
+  }
+  return last ? out + text.slice(last) : text;
+}
+function isSecretName(name) {
+  if (/^[A-Z0-9_]+_KEY$/.test(name)) return true;
+  const flat = name.toLowerCase().replace(/[_-]/g, "");
+  return /(?:pass(?:word|wd|phrase|code)|pwd|secret|secretkey|secretaccesskey|clientsecret|apikey|accesskey|accesstoken|authtoken|refreshtoken|privatekey|token|credential|creds)s?$/.test(
+    flat
+  );
+}
+var PROSE = new RegExp(
+  `(\\b${SECRET_WORD}(?:[ \\t]{1,3}(?:is|was|=|:|to|as|of|for[ \\t]{1,3}\\S{1,40}[ \\t]{1,3}is))?[ \\t]{1,3})(["'\`]?)([^\\s"'\`]{6,200})\\2`,
+  "gi"
+);
+function isPlaceholder(v) {
+  const s = v.replace(/[.,;:!?]+$/, "");
+  if (!s) return true;
+  if (/^(?:string|number|boolean|bool|str|int|any|unknown|null|undefined|none|nil|true|false|optional|required|text|varchar|password|secret|token|env|string\[\]|object|bytes)$/i.test(
+    s
+  ))
+    return true;
+  if (/^\[?redacted\]?$/i.test(s) || /^\*+$/.test(s) || /^x{3,}$/i.test(s) || /^\.{3}$|^…$/.test(s)) return true;
+  if (/^[<{$%]/.test(s)) return true;
+  if (/^(?:process\.env|env|os\.environ|c\.env|this\.env|import\.meta\.env|getenv|config|settings|secrets|args|opts|options|req|request|body|params|input|data|user|self|this)\b/i.test(
+    s
+  ))
+    return true;
+  if (/^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/.test(s)) return true;
+  if (/[(]/.test(s)) return true;
+  if (/^(?:your|my|the|a|an|some|new|old)[-_ ]/i.test(s)) return true;
+  return false;
+}
+function looksSecret(v) {
+  const s = v.replace(/[.,;:!?)]+$/, "");
+  if (s.length < 6) return false;
+  if (isPlaceholder(s)) return false;
+  if (/^https?:\/\//i.test(s)) return false;
+  if (/^[a-z]+(?:[-'][a-z]+)*$/.test(s)) return false;
+  if (/^[A-Z][a-z]+$/.test(s)) return false;
+  if (/^\d+(?:[.,]\d+)*[a-z%]*$/i.test(s)) return false;
+  if (/^[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)+$/.test(s)) return false;
+  const kinds = [/[a-z]/, /[A-Z]/, /[0-9]/, /[^A-Za-z0-9]/].filter((r) => r.test(s)).length;
+  return kinds >= 3 || /[0-9]/.test(s) && /[A-Za-z]/.test(s);
+}
+function redactSecrets(text) {
+  if (!text) return text;
+  let out = text;
+  for (const re of TOKEN_PATTERNS) out = out.replace(re, REDACTED);
+  out = out.replace(URL_CREDENTIALS, (_m, head, _pw, at) => `${head}${REDACTED}${at}`);
+  out = out.replace(AUTH_HEADER, (_m, head) => `${head}${REDACTED}`);
+  out = redactAssignments(out);
+  out = out.replace(
+    PROSE,
+    (m, head, q, v) => !looksSecret(v) || v.includes(REDACTED) ? m : `${head}${q}${REDACTED}${q}`
+  );
+  return out;
+}
+function hasSecret(text) {
+  return !!text && redactSecrets(text) !== text;
+}
+function redactDeep(v) {
+  if (typeof v === "string") return redactSecrets(v);
+  if (Array.isArray(v)) return v.map(redactDeep);
+  if (v && typeof v === "object") {
+    const out = {};
+    for (const [k, x] of Object.entries(v)) out[k] = redactDeep(x);
+    return out;
+  }
+  return v;
+}
+
 // src/adapters/claude-code-control.ts
 var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var LIVE_WRITE_MS = 9e4;
@@ -2952,6 +3318,23 @@ function loginHint(configDir, platform = process.platform) {
     return `Claude Code (${shown}) isn't signed in as this machine's background service sees it. On a Mac its login lives in the login keychain, which a background service can read only while someone is logged in at the screen: log in at the Mac, or run ${login} there.`;
   return `Claude Code (${shown}) isn't signed in on this machine: run ${login} there.`;
 }
+var ANSI = new RegExp(`${String.fromCharCode(27)}\\[[0-9;?]*[ -/]*[@-~]`, "g");
+function helpFailure(err, home = os5.homedir()) {
+  if (err?.code === "ENOENT") return "failed: no such file";
+  if (err?.code === "EACCES") return "failed: the file can't be run (permission denied)";
+  const plain2 = Array.from(String(err?.stderr ?? "").replace(ANSI, "")).filter((ch) => {
+    const c = ch.charCodeAt(0);
+    return c === 10 || c >= 32 && c !== 127;
+  }).join("");
+  const line = plain2.split("\n").map((l) => l.replace(/\s+/g, " ").trim()).find((l) => l.length > 0);
+  if (line) {
+    const said = redactSecrets(reducePii(line, home));
+    return `failed: ${said.length > 200 ? `${said.slice(0, 199)}\u2026` : said}`;
+  }
+  if (err?.signal) return `failed: killed by ${err.signal}`;
+  if (typeof err?.status === "number") return `failed with exit code ${err.status}`;
+  return "failed";
+}
 function detectCaps(bin, timeoutMs = 3e4) {
   const c = probe(bin, ["--help"]);
   try {
@@ -2969,7 +3352,7 @@ function detectCaps(bin, timeoutMs = 3e4) {
     const err = e;
     const caps = parseCaps(String(err?.stdout || ""));
     if (caps.hasMode) return caps;
-    const why = err?.code === "ETIMEDOUT" ? `timed out after ${timeoutMs / 1e3} s` : "failed";
+    const why = err?.code === "ETIMEDOUT" ? `timed out after ${timeoutMs / 1e3} s` : helpFailure(err);
     return { ...caps, unread: `\`${path10.basename(bin)} --help\` ${why}` };
   }
 }
@@ -3190,16 +3573,16 @@ function relaunchMode(recorded, home) {
     return recorded;
   return null;
 }
-function recentlyWritten(file, ourLastEnd, now = Date.now()) {
+function recentlyWritten(file, knownEnd, now = Date.now()) {
   let m;
   try {
     m = statSync5(file).mtimeMs;
   } catch {
     return false;
   }
-  if (now - m > LIVE_WRITE_MS) return false;
-  return !(ourLastEnd && m <= ourLastEnd + 2e3);
+  return recentWrite(m, knownEnd, now);
 }
+var recentWrite = (written, knownEnd, now) => now - written <= LIVE_WRITE_MS && !(knownEnd && written <= knownEnd + 2e3);
 function runClaude(bin, args, o) {
   return runHeadless(bin, args, { ...o, keep: o.keep ?? ((line) => line.includes('"type":"result"')) });
 }
@@ -3228,6 +3611,15 @@ function parseResult(stdout) {
   return null;
 }
 var isUuid = (s) => typeof s === "string" && UUID_RE2.test(s);
+function initSession(line) {
+  if (!line.includes('"init"')) return null;
+  try {
+    const j = JSON.parse(line);
+    return j.type === "system" && j.subtype === "init" && isUuid(j.session_id) ? j.session_id : null;
+  } catch {
+    return null;
+  }
+}
 
 // src/adapters/codex.ts
 import { existsSync as existsSync4, readdirSync as readdirSync5, readFileSync as readFileSync7 } from "node:fs";
@@ -3917,7 +4309,7 @@ function codexStderr(stderr) {
 var reading2 = () => new CodexReading();
 
 // src/adapters/devin.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 import { existsSync as existsSync6, readlinkSync } from "node:fs";
 import path13 from "node:path";
 
@@ -4158,7 +4550,7 @@ var devin = {
     const tool = validTool4(s.tool_name) ? s.tool_name : void 0;
     const call_id = typeof s.tool_use_id === "string" ? s.tool_use_id : void 0;
     const response = s.tool_response && typeof s.tool_response === "object" && !Array.isArray(s.tool_response) ? s.tool_response : void 0;
-    const permissionId = () => `perm-${createHash3("sha256").update(`${turn_id ?? ""}|${tool ?? ""}|${JSON.stringify(s.tool_input ?? null)}`).digest("hex").slice(0, 16)}`;
+    const permissionId = () => `perm-${createHash4("sha256").update(`${turn_id ?? ""}|${tool ?? ""}|${JSON.stringify(s.tool_input ?? null)}`).digest("hex").slice(0, 16)}`;
     const ev = (type, data) => ({ type, data: prune4(data), harnessEvent: event });
     const events = [];
     switch (event) {
@@ -4979,201 +5371,6 @@ function processAlive(pid) {
   }
 }
 
-// src/privacy/pii.ts
-import { createHash as createHash4 } from "node:crypto";
-var RULESET_PII = "pii@1";
-var EMAIL = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
-var PHONE = /(?<![\w.])(?:(?<!\)[ .-]?|\+\d{1,3}[ .-]?)(\+?(?:19|20)\d{2}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\d|3[01]))(?:(?= (?:[01]?\d|2[0-3]):)|(?!\w|[ .-]\d\d))|(?:\+\d{1,3}[ .-]?)?(?:\(\d{2,4}\)[ .-]?)?\d{2,4}(?:[ .-]?\d{2,4}){1,3}(?!\w))/g;
-function looksPhone(s) {
-  const digits = s.replace(/\D/g, "");
-  if (digits.length < 7 || digits.length > 15) return false;
-  if (!/[+() .-]/.test(s)) return false;
-  if (!/[+() -]/.test(s)) return false;
-  return true;
-}
-function reducePii(text, home) {
-  if (!text) return text;
-  let out = text.replace(EMAIL, "[email]");
-  out = out.replace(PHONE, (m, date) => !date && looksPhone(m) ? "[phone]" : m);
-  if (home) {
-    const h = home.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-    out = out.replace(new RegExp(`(?<![A-Za-z0-9_])${h}(?=/|$|\\s|["'\`])`, "g"), "~");
-  }
-  return out;
-}
-function hashMachine(name) {
-  return createHash4("sha256").update(name).digest("hex").slice(0, 8);
-}
-function reducePiiDeep(v, home) {
-  if (typeof v === "string") return reducePii(v, home);
-  if (Array.isArray(v)) return v.map((x) => reducePiiDeep(x, home));
-  if (v && typeof v === "object") {
-    const out = {};
-    for (const [k, x] of Object.entries(v)) out[k] = reducePiiDeep(x, home);
-    return out;
-  }
-  return v;
-}
-
-// src/privacy/secrets.ts
-var RULESET_SECRETS = "secrets@1";
-var REDACTED = "[redacted]";
-var TOKEN_PATTERNS = [
-  /-----BEGIN [A-Z0-9 ]*PRIVATE KEY(?: BLOCK)?-----[\s\S]*?(?:-----END [A-Z0-9 ]*PRIVATE KEY(?: BLOCK)?-----|$)/g,
-  /\b(?:AKIA|ASIA|ABIA|ACCA)[0-9A-Z]{16}\b/g,
-  // AWS access key id
-  /\bgh[pousr]_[A-Za-z0-9]{30,}\b/g,
-  // GitHub
-  /\bgithub_pat_[A-Za-z0-9_]{30,}\b/g,
-  /\bglpat-[A-Za-z0-9_-]{20,}\b/g,
-  // GitLab
-  /\bxox[abposre]-[A-Za-z0-9-]{10,}\b/g,
-  // Slack
-  /\bhttps:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9/_-]+/g,
-  /\bhttps:\/\/(?:ptb\.|canary\.)?discord(?:app)?\.com\/api\/webhooks\/[0-9]+\/[A-Za-z0-9_-]+/g,
-  /\bsk-(?:ant-|proj-|svcacct-|admin-|or-v1-)?[A-Za-z0-9_-]{20,}\b/g,
-  // Anthropic, OpenAI, DeepSeek, OpenRouter
-  /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{16,}\b/g,
-  // Stripe secret / restricted
-  /\bwhsec_[A-Za-z0-9+/=]{20,}/g,
-  // Stripe / Svix / Standard Webhooks secret
-  /\bAIza[0-9A-Za-z_-]{35}\b/g,
-  // Google API key
-  /\bya29\.[0-9A-Za-z_-]{20,}/g,
-  // Google OAuth access token
-  /\b1\/\/0[0-9A-Za-z_-]{30,}/g,
-  // Google OAuth refresh token
-  /\bGOCSPX-[0-9A-Za-z_-]{20,}/g,
-  // Google OAuth client secret
-  /\bxai-[A-Za-z0-9]{30,}\b/g,
-  /\bgsk_[A-Za-z0-9]{30,}\b/g,
-  // Groq
-  /\bpplx-[A-Za-z0-9]{30,}\b/g,
-  // Perplexity
-  /\bhf_[A-Za-z0-9]{30,}\b/g,
-  // Hugging Face
-  /\bpcsk_[A-Za-z0-9_]{30,}\b/g,
-  // Pinecone
-  /\bnpm_[A-Za-z0-9]{30,}\b/g,
-  /\bpypi-[A-Za-z0-9_-]{50,}/g,
-  /\bSG\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}/g,
-  // SendGrid
-  /\bshp(?:at|ss|ca|pa)_[a-fA-F0-9]{32}\b/g,
-  // Shopify
-  /\bdop_v1_[a-f0-9]{64}\b/g,
-  // DigitalOcean
-  /\b(?:lin_api|lin_oauth)_[A-Za-z0-9]{30,}\b/g,
-  // Linear
-  /\b(?:ntn|secret)_[A-Za-z0-9]{40,}\b/g,
-  // Notion
-  /\bsbp_[a-f0-9]{40}\b/g,
-  // Supabase
-  /\bfigd_[A-Za-z0-9_-]{30,}/g,
-  // Figma
-  /\bdp\.(?:pt|st|sa|ct)\.[A-Za-z0-9]{30,}/g,
-  // Doppler
-  /\bgrn_[A-Za-z0-9_-]{20,}/g,
-  // Granola
-  /\bss_[a-f0-9]{32,}\b/g,
-  // spacesheep API keys
-  /\b[0-9]{8,10}:AA[A-Za-z0-9_-]{33}\b/g,
-  // Telegram bot token
-  /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
-  // JWT
-];
-var URL_CREDENTIALS = /\b([a-z][a-z0-9+.-]{1,20}:\/\/[^\s:/@'"`<>]{1,100}:)([^\s@/'"`<>]{1,200})(@)/gi;
-var AUTH_HEADER = /\b((?:Bearer|Basic|Token)\s+)([A-Za-z0-9._~+/=-]{16,})/g;
-var SECRET_WORD = "(?:pass(?:word|wd|phrase|code)?s?|pwd|secret(?:[ _-]?key)?s?|client[ _-]?secret|api[ _-]?keys?|apikeys?|access[ _-]?keys?|access[ _-]?tokens?|auth[ _-]?tokens?|refresh[ _-]?tokens?|private[ _-]?keys?|tokens?|credentials?|creds)";
-var NAME_SEP = /(?<![A-Za-z0-9_])([A-Za-z][A-Za-z0-9_-]{1,79})(["']?\s{0,3}(?::=|=>|=|:)\s{0,3})/g;
-var VALUE = /"([^"\n]{1,300})"|'([^'\n]{1,300})'|`([^`\n]{1,300})`|([^\s"'`,;&)}\]]{1,300})/y;
-function redactAssignments(text) {
-  let out = "";
-  let last = 0;
-  NAME_SEP.lastIndex = 0;
-  for (let m = NAME_SEP.exec(text); m; m = NAME_SEP.exec(text)) {
-    const name = m[1];
-    if (!isSecretName(name)) continue;
-    VALUE.lastIndex = NAME_SEP.lastIndex;
-    const v = VALUE.exec(text);
-    if (!v) continue;
-    const value = v[1] ?? v[2] ?? v[3] ?? v[4];
-    NAME_SEP.lastIndex = VALUE.lastIndex;
-    if (isPlaceholder(value) || value.includes(REDACTED)) continue;
-    if (/tokens?$/i.test(name) && /^\d+(?:[.,]\d+)*[km]?$/i.test(value)) continue;
-    const q = v[1] != null ? '"' : v[2] != null ? "'" : v[3] != null ? "`" : "";
-    out += text.slice(last, v.index) + q + REDACTED + q;
-    last = VALUE.lastIndex;
-  }
-  return last ? out + text.slice(last) : text;
-}
-function isSecretName(name) {
-  if (/^[A-Z0-9_]+_KEY$/.test(name)) return true;
-  const flat = name.toLowerCase().replace(/[_-]/g, "");
-  return /(?:pass(?:word|wd|phrase|code)|pwd|secret|secretkey|secretaccesskey|clientsecret|apikey|accesskey|accesstoken|authtoken|refreshtoken|privatekey|token|credential|creds)s?$/.test(
-    flat
-  );
-}
-var PROSE = new RegExp(
-  `(\\b${SECRET_WORD}(?:[ \\t]{1,3}(?:is|was|=|:|to|as|of|for[ \\t]{1,3}\\S{1,40}[ \\t]{1,3}is))?[ \\t]{1,3})(["'\`]?)([^\\s"'\`]{6,200})\\2`,
-  "gi"
-);
-function isPlaceholder(v) {
-  const s = v.replace(/[.,;:!?]+$/, "");
-  if (!s) return true;
-  if (/^(?:string|number|boolean|bool|str|int|any|unknown|null|undefined|none|nil|true|false|optional|required|text|varchar|password|secret|token|env|string\[\]|object|bytes)$/i.test(
-    s
-  ))
-    return true;
-  if (/^\[?redacted\]?$/i.test(s) || /^\*+$/.test(s) || /^x{3,}$/i.test(s) || /^\.{3}$|^…$/.test(s)) return true;
-  if (/^[<{$%]/.test(s)) return true;
-  if (/^(?:process\.env|env|os\.environ|c\.env|this\.env|import\.meta\.env|getenv|config|settings|secrets|args|opts|options|req|request|body|params|input|data|user|self|this)\b/i.test(
-    s
-  ))
-    return true;
-  if (/^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/.test(s)) return true;
-  if (/[(]/.test(s)) return true;
-  if (/^(?:your|my|the|a|an|some|new|old)[-_ ]/i.test(s)) return true;
-  return false;
-}
-function looksSecret(v) {
-  const s = v.replace(/[.,;:!?)]+$/, "");
-  if (s.length < 6) return false;
-  if (isPlaceholder(s)) return false;
-  if (/^https?:\/\//i.test(s)) return false;
-  if (/^[a-z]+(?:[-'][a-z]+)*$/.test(s)) return false;
-  if (/^[A-Z][a-z]+$/.test(s)) return false;
-  if (/^\d+(?:[.,]\d+)*[a-z%]*$/i.test(s)) return false;
-  if (/^[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)+$/.test(s)) return false;
-  const kinds = [/[a-z]/, /[A-Z]/, /[0-9]/, /[^A-Za-z0-9]/].filter((r) => r.test(s)).length;
-  return kinds >= 3 || /[0-9]/.test(s) && /[A-Za-z]/.test(s);
-}
-function redactSecrets(text) {
-  if (!text) return text;
-  let out = text;
-  for (const re of TOKEN_PATTERNS) out = out.replace(re, REDACTED);
-  out = out.replace(URL_CREDENTIALS, (_m, head, _pw, at) => `${head}${REDACTED}${at}`);
-  out = out.replace(AUTH_HEADER, (_m, head) => `${head}${REDACTED}`);
-  out = redactAssignments(out);
-  out = out.replace(
-    PROSE,
-    (m, head, q, v) => !looksSecret(v) || v.includes(REDACTED) ? m : `${head}${q}${REDACTED}${q}`
-  );
-  return out;
-}
-function hasSecret(text) {
-  return !!text && redactSecrets(text) !== text;
-}
-function redactDeep(v) {
-  if (typeof v === "string") return redactSecrets(v);
-  if (Array.isArray(v)) return v.map(redactDeep);
-  if (v && typeof v === "object") {
-    const out = {};
-    for (const [k, x] of Object.entries(v)) out[k] = redactDeep(x);
-    return out;
-  }
-  return v;
-}
-
 // src/privacy/filter.ts
 var TYPE_TIER = {
   "session.started": 0,