youmd 0.10.2 → 0.12.0

package/dist/lib/sessionCheckpoint.d.ts

@@ -0,0 +1,104 @@
+export declare const SESSION_CHECKPOINT_SCHEMA_VERSION: "you-md/session-checkpoint/v1";
+export type SessionRuntime = "codex" | "claude-code" | "cursor" | "you-agent" | (string & {});
+export interface SessionArtifactRef {
+    artifactRef: string;
+    mimeType?: string;
+    title?: string;
+    provider?: string;
+    sourceSessionRef?: string;
+    storageRef?: string;
+    availability?: "available" | "missing" | "permission-required" | "unknown";
+    permission?: "owner-private" | "shared" | "public" | "unknown";
+}
+export interface SessionGitState {
+    dirtyFiles?: number;
+    ahead?: number;
+    behind?: number;
+    lastCommit?: string;
+    statusDigest?: string;
+}
+/**
+ * The portable session continuation contract.
+ *
+ * Raw transcript paths, workspace paths, native runtime ids, and native resume
+ * commands are intentionally absent. Those values are machine-local hints, not
+ * cross-machine identity or authority.
+ */
+export interface PortableSessionCheckpoint {
+    schemaVersion: typeof SESSION_CHECKPOINT_SCHEMA_VERSION;
+    checkpointRef: string;
+    sessionRef: string;
+    previousCheckpointRef?: string;
+    runtime: SessionRuntime;
+    machineRef: string;
+    projectRef?: string;
+    projectSlug?: string;
+    businessRef?: string;
+    goalRefs: string[];
+    taskRefs: string[];
+    runRef?: string;
+    sourceRevision: string;
+    branch?: string;
+    worktreeRef?: string;
+    repoRef?: string;
+    now: string;
+    recent: string[];
+    next: string[];
+    blockers: string[];
+    decisions: string[];
+    artifactRefs: SessionArtifactRef[];
+    gitState?: SessionGitState;
+    eventAt: number;
+    secretValuesExposed: false;
+}
+export interface SessionCheckpointInput {
+    runtime: SessionRuntime;
+    machineRef: string;
+    /**
+     * Adapter-local entropy used only inside a one-way hash. It disambiguates
+     * concurrent native sessions without publishing the vendor's private id.
+     */
+    localSessionAnchor?: string;
+    /** Inherited portable identity when a different machine resumes the task. */
+    sessionRef?: string;
+    /** Prior accepted portable checkpoint; never inferred from local scan order. */
+    previousCheckpointRef?: string;
+    projectRef?: string;
+    projectSlug?: string;
+    businessRef?: string;
+    goalRefs?: string[];
+    taskRefs?: string[];
+    runRef?: string;
+    sourceRevision: string;
+    branch?: string;
+    worktreeRef?: string;
+    repoRef?: string;
+    now?: string;
+    recent?: string[];
+    next?: string[];
+    blockers?: string[];
+    decisions?: string[];
+    artifactRefs?: SessionArtifactRef[];
+    gitState?: SessionGitState;
+    eventAt: number;
+}
+export interface RuntimeCheckpointAdapterInput extends Omit<SessionCheckpointInput, "runtime"> {
+    /** Local-only command. Returned beside the checkpoint, never inside it. */
+    nativeResumeHint?: string;
+}
+export interface RuntimeCheckpointAdapterResult {
+    checkpoint: PortableSessionCheckpoint;
+    nativeResumeHint?: string;
+}
+export declare function stableCheckpointHash(value: unknown): string;
+/**
+ * Builds a stable checkpoint. `eventAt` is retained as provenance but omitted
+ * from checkpoint identity, so polling the same semantic input at a later time
+ * dedupes without a new model call or append-only row.
+ */
+export declare function buildPortableSessionCheckpoint(input: SessionCheckpointInput): PortableSessionCheckpoint;
+export declare function adaptCodexCheckpoint(input: RuntimeCheckpointAdapterInput): RuntimeCheckpointAdapterResult;
+export declare function adaptClaudeCheckpoint(input: RuntimeCheckpointAdapterInput): RuntimeCheckpointAdapterResult;
+/** Preserve first-seen event provenance while dropping unchanged checkpoints. */
+export declare function dedupeUnchangedCheckpoints(checkpoints: PortableSessionCheckpoint[]): PortableSessionCheckpoint[];
+//# sourceMappingURL=sessionCheckpoint.d.ts.map

package/dist/lib/sessionCheckpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionCheckpoint.d.ts","sourceRoot":"","sources":["../../src/lib/sessionCheckpoint.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,iCAAiC,EAC5C,8BAAuC,CAAC;AAM1C,MAAM,MAAM,cAAc,GACtB,OAAO,GACP,aAAa,GACb,QAAQ,GACR,WAAW,GACX,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,WAAW,GAAG,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAAC;IAC3E,UAAU,CAAC,EAAE,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;CAChE;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,OAAO,iCAAiC,CAAC;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACnC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,KAAK,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,6BACf,SAAQ,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC;IAC/C,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,yBAAyB,CAAC;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAmBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE3D;AAgED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,sBAAsB,GAC5B,yBAAyB,CAkE3B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,6BAA6B,GACnC,8BAA8B,CAKhC;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,6BAA6B,GACnC,8BAA8B,CAKhC;AAED,iFAAiF;AACjF,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,yBAAyB,EAAE,GACvC,yBAAyB,EAAE,CAO7B"}

package/dist/lib/sessionCheckpoint.js

@@ -0,0 +1,191 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_CHECKPOINT_SCHEMA_VERSION = void 0;
+exports.stableCheckpointHash = stableCheckpointHash;
+exports.buildPortableSessionCheckpoint = buildPortableSessionCheckpoint;
+exports.adaptCodexCheckpoint = adaptCodexCheckpoint;
+exports.adaptClaudeCheckpoint = adaptClaudeCheckpoint;
+exports.dedupeUnchangedCheckpoints = dedupeUnchangedCheckpoints;
+const node_crypto_1 = require("node:crypto");
+const redact_1 = require("./redact");
+exports.SESSION_CHECKPOINT_SCHEMA_VERSION = "you-md/session-checkpoint/v1";
+const MAX_TEXT_LENGTH = 500;
+const MAX_LIST_ITEMS = 8;
+const MAX_ARTIFACTS = 12;
+function sha256(value) {
+    return (0, node_crypto_1.createHash)("sha256").update(value, "utf8").digest("hex");
+}
+function stableValue(value) {
+    if (Array.isArray(value))
+        return value.map(stableValue);
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value)
+            .filter(([, child]) => child !== undefined)
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([key, child]) => [key, stableValue(child)]));
+    }
+    return value;
+}
+function stableCheckpointHash(value) {
+    return sha256(JSON.stringify(stableValue(value)));
+}
+function cleanText(value) {
+    if (!value)
+        return "";
+    const normalized = value.replace(/\s+/g, " ").trim().slice(0, MAX_TEXT_LENGTH);
+    return (0, redact_1.redactText)(normalized).text;
+}
+function cleanList(values) {
+    if (!values)
+        return [];
+    const seen = new Set();
+    const out = [];
+    for (const value of values) {
+        const clean = cleanText(value);
+        if (!clean || seen.has(clean))
+            continue;
+        seen.add(clean);
+        out.push(clean);
+        if (out.length >= MAX_LIST_ITEMS)
+            break;
+    }
+    return out;
+}
+function cleanRef(value) {
+    const clean = cleanText(value);
+    if (!clean)
+        return undefined;
+    // Refs are compact identifiers, never local filesystem paths or URLs with
+    // embedded credentials.
+    return clean.slice(0, 240);
+}
+function cleanArtifact(artifact) {
+    const artifactRef = cleanRef(artifact.artifactRef);
+    if (!artifactRef)
+        return null;
+    return {
+        artifactRef,
+        ...(cleanRef(artifact.mimeType) ? { mimeType: cleanRef(artifact.mimeType) } : {}),
+        ...(cleanText(artifact.title) ? { title: cleanText(artifact.title) } : {}),
+        ...(cleanRef(artifact.provider) ? { provider: cleanRef(artifact.provider) } : {}),
+        ...(cleanRef(artifact.sourceSessionRef)
+            ? { sourceSessionRef: cleanRef(artifact.sourceSessionRef) }
+            : {}),
+        ...(cleanRef(artifact.storageRef) ? { storageRef: cleanRef(artifact.storageRef) } : {}),
+        ...(artifact.availability ? { availability: artifact.availability } : {}),
+        ...(artifact.permission ? { permission: artifact.permission } : {}),
+    };
+}
+function cleanGitState(value) {
+    if (!value)
+        return undefined;
+    const result = {};
+    if (Number.isSafeInteger(value.dirtyFiles) && (value.dirtyFiles ?? -1) >= 0) {
+        result.dirtyFiles = value.dirtyFiles;
+    }
+    if (Number.isSafeInteger(value.ahead) && (value.ahead ?? -1) >= 0)
+        result.ahead = value.ahead;
+    if (Number.isSafeInteger(value.behind) && (value.behind ?? -1) >= 0) {
+        result.behind = value.behind;
+    }
+    const lastCommit = cleanRef(value.lastCommit);
+    if (lastCommit)
+        result.lastCommit = lastCommit;
+    const statusDigest = cleanRef(value.statusDigest);
+    if (statusDigest)
+        result.statusDigest = statusDigest;
+    return Object.keys(result).length > 0 ? result : undefined;
+}
+/**
+ * Builds a stable checkpoint. `eventAt` is retained as provenance but omitted
+ * from checkpoint identity, so polling the same semantic input at a later time
+ * dedupes without a new model call or append-only row.
+ */
+function buildPortableSessionCheckpoint(input) {
+    const runtime = cleanRef(input.runtime) ?? "unknown";
+    const machineRef = cleanRef(input.machineRef);
+    const sourceRevision = cleanRef(input.sourceRevision);
+    if (!machineRef)
+        throw new Error("machineRef is required");
+    if (!sourceRevision)
+        throw new Error("sourceRevision is required");
+    if (!Number.isFinite(input.eventAt) || input.eventAt <= 0) {
+        throw new Error("eventAt must be a positive timestamp");
+    }
+    const projectRef = cleanRef(input.projectRef);
+    const projectSlug = cleanRef(input.projectSlug);
+    const repoRef = cleanRef(input.repoRef);
+    const localAnchorDigest = input.localSessionAnchor
+        ? stableCheckpointHash(cleanText(input.localSessionAnchor))
+        : undefined;
+    const inheritedSessionRef = cleanRef(input.sessionRef);
+    const sessionRef = inheritedSessionRef || `session:${stableCheckpointHash({
+        runtime,
+        machineRef,
+        projectRef,
+        projectSlug,
+        repoRef,
+        localAnchorDigest,
+    })}`;
+    const artifactRefs = (input.artifactRefs ?? [])
+        .slice(0, MAX_ARTIFACTS)
+        .map(cleanArtifact)
+        .filter((artifact) => artifact !== null);
+    const withoutIdentity = {
+        schemaVersion: exports.SESSION_CHECKPOINT_SCHEMA_VERSION,
+        sessionRef,
+        previousCheckpointRef: cleanRef(input.previousCheckpointRef),
+        runtime,
+        machineRef,
+        projectRef,
+        projectSlug,
+        businessRef: cleanRef(input.businessRef),
+        goalRefs: cleanList(input.goalRefs),
+        taskRefs: cleanList(input.taskRefs),
+        runRef: cleanRef(input.runRef),
+        sourceRevision,
+        branch: cleanRef(input.branch),
+        worktreeRef: cleanRef(input.worktreeRef),
+        repoRef,
+        now: cleanText(input.now),
+        recent: cleanList(input.recent),
+        next: cleanList(input.next),
+        blockers: cleanList(input.blockers),
+        decisions: cleanList(input.decisions),
+        artifactRefs,
+        gitState: cleanGitState(input.gitState),
+        secretValuesExposed: false,
+    };
+    const checkpointRef = `checkpoint:${stableCheckpointHash(withoutIdentity)}`;
+    if (withoutIdentity.previousCheckpointRef === checkpointRef) {
+        throw new Error("previousCheckpointRef cannot self-reference");
+    }
+    return {
+        ...withoutIdentity,
+        checkpointRef,
+        eventAt: Math.round(input.eventAt),
+    };
+}
+function adaptCodexCheckpoint(input) {
+    return {
+        checkpoint: buildPortableSessionCheckpoint({ ...input, runtime: "codex" }),
+        ...(input.nativeResumeHint ? { nativeResumeHint: input.nativeResumeHint } : {}),
+    };
+}
+function adaptClaudeCheckpoint(input) {
+    return {
+        checkpoint: buildPortableSessionCheckpoint({ ...input, runtime: "claude-code" }),
+        ...(input.nativeResumeHint ? { nativeResumeHint: input.nativeResumeHint } : {}),
+    };
+}
+/** Preserve first-seen event provenance while dropping unchanged checkpoints. */
+function dedupeUnchangedCheckpoints(checkpoints) {
+    const seen = new Set();
+    return checkpoints.filter((checkpoint) => {
+        if (seen.has(checkpoint.checkpointRef))
+            return false;
+        seen.add(checkpoint.checkpointRef);
+        return true;
+    });
+}
+//# sourceMappingURL=sessionCheckpoint.js.map

package/dist/lib/sessionCheckpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionCheckpoint.js","sourceRoot":"","sources":["../../src/lib/sessionCheckpoint.ts"],"names":[],"mappings":";;;AAmIA,oDAEC;AAqED,wEAoEC;AAED,oDAOC;AAED,sDAOC;AAGD,gEASC;AA5SD,6CAAyC;AACzC,qCAAsC;AAEzB,QAAA,iCAAiC,GAC5C,8BAAuC,CAAC;AAE1C,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,aAAa,GAAG,EAAE,CAAC;AA0GzB,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;aAC1C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAc;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC/E,OAAO,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,MAA4B;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,GAAG,CAAC,MAAM,IAAI,cAAc;YAAE,MAAM;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,0EAA0E;IAC1E,wBAAwB;IACxB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,QAA4B;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO;QACL,WAAW;QACX,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACrC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAkC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC9F,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/C,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,YAAY;QAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,SAAgB,8BAA8B,CAC5C,KAA6B;IAE7B,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3D,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,iBAAiB,GAAG,KAAK,CAAC,kBAAkB;QAChD,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC3D,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,mBAAmB,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,mBAAmB,IAAI,WAAW,oBAAoB,CAAC;QACxE,OAAO;QACP,UAAU;QACV,UAAU;QACV,WAAW;QACX,OAAO;QACP,iBAAiB;KAClB,CAAC,EAAE,CAAC;IAEL,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;SAC5C,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;SACvB,GAAG,CAAC,aAAa,CAAC;SAClB,MAAM,CAAC,CAAC,QAAQ,EAAkC,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAE3E,MAAM,eAAe,GAAG;QACtB,aAAa,EAAE,yCAAiC;QAChD,UAAU;QACV,qBAAqB,EAAE,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC;QAC5D,OAAO;QACP,UAAU;QACV,UAAU;QACV,WAAW;QACX,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QACxC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,cAAc;QACd,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QACxC,OAAO;QACP,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC;QACzB,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/B,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;QACrC,YAAY;QACZ,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvC,mBAAmB,EAAE,KAAc;KACpC,CAAC;IACF,MAAM,aAAa,GAAG,cAAc,oBAAoB,CAAC,eAAe,CAAC,EAAE,CAAC;IAC5E,IAAI,eAAe,CAAC,qBAAqB,KAAK,aAAa,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,OAAO;QACL,GAAG,eAAe;QAClB,aAAa;QACb,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAClC,KAAoC;IAEpC,OAAO;QACL,UAAU,EAAE,8BAA8B,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,KAAoC;IAEpC,OAAO;QACL,UAAU,EAAE,8BAA8B,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QAChF,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAgB,0BAA0B,CACxC,WAAwC;IAExC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/sessionHandoff.d.ts

@@ -0,0 +1,47 @@
+import type { PortableSessionCheckpoint, SessionRuntime } from "./sessionCheckpoint";
+export declare const SESSION_HANDOFF_SCHEMA_VERSION: "you-md/session-handoff/v1";
+export declare const SESSION_HANDOFF_REGISTRY_VERSION: "you-md/session-handoff-registry/v1";
+export interface SessionHandoffBinding {
+    sessionRef: string;
+    previousCheckpointRef: string;
+}
+export interface CreateSessionHandoffInput {
+    checkpoint: PortableSessionCheckpoint;
+    projectDir: string;
+    baseDir?: string;
+    now?: number;
+    ttlMs?: number;
+    /** Origin-local vendor id, accepted only so it can be scrubbed. */
+    originNativeSessionId?: string;
+}
+export interface CreatedSessionHandoff {
+    schemaVersion: typeof SESSION_HANDOFF_SCHEMA_VERSION;
+    checkpointRef: string;
+    sessionRef: string;
+    briefPath: string;
+    runtime: "codex" | "claude-code";
+    command: string;
+    expiresAt: number;
+    secretValuesExposed: false;
+}
+export interface ConsumeSessionHandoffInput {
+    runtime: SessionRuntime;
+    projectSlug?: string;
+    repoRef?: string;
+    workspacePath?: string;
+    localSessionAnchor?: string;
+    sessionStartedAt: number;
+    baseDir?: string;
+    now?: number;
+}
+export interface SessionOrigin {
+    machineHostname?: string | null;
+    machineRef?: string | null;
+}
+export declare function isSameMachineSession(origin: SessionOrigin, local: {
+    hostname: string;
+    machineRef?: string;
+}): boolean;
+export declare function createPortableSessionHandoff(input: CreateSessionHandoffInput): CreatedSessionHandoff;
+export declare function consumeSessionHandoffBinding(input: ConsumeSessionHandoffInput): SessionHandoffBinding | undefined;
+//# sourceMappingURL=sessionHandoff.d.ts.map

package/dist/lib/sessionHandoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionHandoff.d.ts","sourceRoot":"","sources":["../../src/lib/sessionHandoff.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErF,eAAO,MAAM,8BAA8B,EAAG,2BAAoC,CAAC;AACnF,eAAO,MAAM,gCAAgC,EAAG,oCAA6C,CAAC;AAO9F,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAkBD,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,yBAAyB,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,OAAO,8BAA8B,CAAC;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,GAAG,aAAa,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,KAAK,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAuLD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAGT;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,yBAAyB,GAC/B,qBAAqB,CA6DvB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,0BAA0B,GAChC,qBAAqB,GAAG,SAAS,CAuCnC"}

package/dist/lib/sessionHandoff.js

@@ -0,0 +1,305 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_HANDOFF_REGISTRY_VERSION = exports.SESSION_HANDOFF_SCHEMA_VERSION = void 0;
+exports.isSameMachineSession = isSameMachineSession;
+exports.createPortableSessionHandoff = createPortableSessionHandoff;
+exports.consumeSessionHandoffBinding = consumeSessionHandoffBinding;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const node_crypto_1 = require("node:crypto");
+const node_child_process_1 = require("node:child_process");
+const config_1 = require("./config");
+const redact_1 = require("./redact");
+exports.SESSION_HANDOFF_SCHEMA_VERSION = "you-md/session-handoff/v1";
+exports.SESSION_HANDOFF_REGISTRY_VERSION = "you-md/session-handoff-registry/v1";
+const DEFAULT_TTL_MS = 24 * 60 * 60 * 1000;
+const START_TIME_SLOP_MS = 2000;
+const MAX_TEXT = 500;
+const MAX_ITEMS = 8;
+function sha256(value) {
+    return (0, node_crypto_1.createHash)("sha256").update(value, "utf8").digest("hex");
+}
+function handoffDir(baseDir) {
+    return baseDir ?? path.join((0, config_1.getWritableHomeBundleDir)(), "session-handoffs");
+}
+function registryPath(baseDir) {
+    return path.join(handoffDir(baseDir), "registry.json");
+}
+function ensurePrivateDir(dir) {
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    fs.chmodSync(dir, 0o700);
+}
+function writePrivateJson(filePath, value) {
+    ensurePrivateDir(path.dirname(filePath));
+    const tempPath = `${filePath}.${process.pid}.tmp`;
+    fs.writeFileSync(tempPath, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
+    fs.chmodSync(tempPath, 0o600);
+    fs.renameSync(tempPath, filePath);
+    fs.chmodSync(filePath, 0o600);
+}
+function readRegistry(baseDir, now) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(registryPath(baseDir), "utf8"));
+        if (parsed.schemaVersion !== exports.SESSION_HANDOFF_REGISTRY_VERSION || !Array.isArray(parsed.entries)) {
+            return { schemaVersion: exports.SESSION_HANDOFF_REGISTRY_VERSION, entries: [] };
+        }
+        return {
+            schemaVersion: exports.SESSION_HANDOFF_REGISTRY_VERSION,
+            entries: parsed.entries.filter((entry) => entry
+                && typeof entry === "object"
+                && typeof entry.checkpointRef === "string"
+                && typeof entry.sessionRef === "string"
+                && typeof entry.previousCheckpointRef === "string"
+                && (entry.runtime === "codex" || entry.runtime === "claude-code")
+                && typeof entry.projectDirDigest === "string"
+                && typeof entry.createdAt === "number"
+                && typeof entry.expiresAt === "number"
+                && entry.expiresAt > now),
+        };
+    }
+    catch {
+        return { schemaVersion: exports.SESSION_HANDOFF_REGISTRY_VERSION, entries: [] };
+    }
+}
+function runtimeForCheckpoint(runtime) {
+    if (runtime === "codex")
+        return "codex";
+    if (runtime === "claude-code")
+        return "claude-code";
+    throw new Error(`unsupported handoff runtime: ${runtime}`);
+}
+function requirePortableCheckpoint(checkpoint) {
+    if (!checkpoint
+        || checkpoint.schemaVersion !== "you-md/session-checkpoint/v1"
+        || checkpoint.secretValuesExposed !== false
+        || !/^checkpoint:[a-f0-9]{64}$/.test(checkpoint.checkpointRef)
+        || !/^session:[a-f0-9]{64}$/.test(checkpoint.sessionRef)
+        || typeof checkpoint.machineRef !== "string"
+        || typeof checkpoint.sourceRevision !== "string"
+        || typeof checkpoint.now !== "string"
+        || !Array.isArray(checkpoint.recent)
+        || !Array.isArray(checkpoint.next)
+        || !Array.isArray(checkpoint.blockers)
+        || !Array.isArray(checkpoint.decisions)
+        || !Array.isArray(checkpoint.artifactRefs)
+        || !Number.isFinite(checkpoint.eventAt)) {
+        throw new Error("portable checkpoint is missing or malformed");
+    }
+}
+function safeText(value, forbiddenValues = []) {
+    if (typeof value !== "string")
+        return "";
+    const normalized = value.replace(/\s+/g, " ").trim().slice(0, MAX_TEXT);
+    if (!normalized)
+        return "";
+    let safe = (0, redact_1.redactText)(normalized).text;
+    for (const forbidden of forbiddenValues.filter(Boolean)) {
+        safe = safe.split(forbidden).join("[local-session]");
+    }
+    return safe
+        .replace(/(?:^|\s)(?:\/Users\/|\/home\/|\/var\/|\/tmp\/|~\/|[A-Za-z]:\\)\S*/g, " [local-path]")
+        .replace(/\b[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\b/gi, "[opaque-ref]")
+        .replace(/\b(?:origin|local|native|vendor)(?:[-_](?:private|opaque))?[-_](?:id|session)(?:[-_][A-Za-z0-9]+)*\b/gi, "[native-session-ref]")
+        .trim();
+}
+function safeList(value, forbiddenValues = []) {
+    if (!Array.isArray(value))
+        return [];
+    return value
+        .slice(0, MAX_ITEMS)
+        .map((item) => safeText(item, forbiddenValues))
+        .filter(Boolean);
+}
+function canonicalRepoRef(remote) {
+    const normalized = remote
+        .replace(/^(https?:\/\/)[^/@]+@/i, "$1")
+        .replace(/^git@([^:]+):/i, "$1/")
+        .replace(/^ssh:\/\/git@/i, "")
+        .replace(/^https?:\/\//i, "")
+        .replace(/\.git$/i, "")
+        .replace(/\/+$/, "");
+    return normalized && !normalized.startsWith("/")
+        ? `repo:${normalized.toLowerCase()}`
+        : undefined;
+}
+function localRepoRef(projectDir) {
+    try {
+        return canonicalRepoRef((0, node_child_process_1.execFileSync)("git", ["remote", "get-url", "origin"], {
+            cwd: projectDir,
+            stdio: ["ignore", "pipe", "ignore"],
+            timeout: 3000,
+            encoding: "utf8",
+        }).trim());
+    }
+    catch {
+        return undefined;
+    }
+}
+function projectDirDigest(projectDir) {
+    const real = fs.realpathSync(projectDir);
+    return `sha256:${sha256(real)}`;
+}
+function shellQuote(value) {
+    return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function renderBrief(checkpoint, forbiddenValues) {
+    return {
+        schemaVersion: exports.SESSION_HANDOFF_SCHEMA_VERSION,
+        checkpointRef: checkpoint.checkpointRef,
+        sessionRef: checkpoint.sessionRef,
+        runtime: checkpoint.runtime,
+        projectRef: safeText(checkpoint.projectRef, forbiddenValues),
+        projectSlug: safeText(checkpoint.projectSlug, forbiddenValues),
+        businessRef: safeText(checkpoint.businessRef, forbiddenValues),
+        goalRefs: safeList(checkpoint.goalRefs, forbiddenValues),
+        taskRefs: safeList(checkpoint.taskRefs, forbiddenValues),
+        runRef: safeText(checkpoint.runRef, forbiddenValues),
+        sourceRevision: safeText(checkpoint.sourceRevision, forbiddenValues),
+        branch: safeText(checkpoint.branch, forbiddenValues),
+        repoRef: safeText(checkpoint.repoRef, forbiddenValues),
+        now: safeText(checkpoint.now, forbiddenValues),
+        recent: safeList(checkpoint.recent, forbiddenValues),
+        next: safeList(checkpoint.next, forbiddenValues),
+        blockers: safeList(checkpoint.blockers, forbiddenValues),
+        decisions: safeList(checkpoint.decisions, forbiddenValues),
+        artifactRefs: checkpoint.artifactRefs.slice(0, 12).map((artifact) => ({
+            artifactRef: safeText(artifact.artifactRef, forbiddenValues),
+            mimeType: safeText(artifact.mimeType, forbiddenValues),
+            title: safeText(artifact.title, forbiddenValues),
+            availability: artifact.availability,
+            permission: artifact.permission,
+        })),
+        eventAt: checkpoint.eventAt,
+        secretValuesExposed: false,
+    };
+}
+function isSameMachineSession(origin, local) {
+    if (origin.machineRef && local.machineRef)
+        return origin.machineRef === local.machineRef;
+    return Boolean(origin.machineHostname && origin.machineHostname === local.hostname);
+}
+function createPortableSessionHandoff(input) {
+    requirePortableCheckpoint(input.checkpoint);
+    const runtime = runtimeForCheckpoint(input.checkpoint.runtime);
+    const projectDir = fs.realpathSync(input.projectDir);
+    const slug = path.basename(projectDir);
+    const repoRef = localRepoRef(projectDir);
+    const checkpointSlug = safeText(input.checkpoint.projectSlug);
+    const checkpointRepoRef = safeText(input.checkpoint.repoRef);
+    if (checkpointRepoRef
+        ? !repoRef || repoRef !== checkpointRepoRef
+        : checkpointSlug && checkpointSlug !== slug) {
+        throw new Error("current project does not match the portable checkpoint");
+    }
+    const now = input.now ?? Date.now();
+    const ttlMs = Math.max(60000, Math.min(input.ttlMs ?? DEFAULT_TTL_MS, 7 * 24 * 60 * 60 * 1000));
+    const expiresAt = now + ttlMs;
+    const dir = handoffDir(input.baseDir);
+    ensurePrivateDir(dir);
+    const digest = input.checkpoint.checkpointRef.slice("checkpoint:".length);
+    const briefPath = path.join(dir, `${digest}.json`);
+    writePrivateJson(briefPath, renderBrief(input.checkpoint, input.originNativeSessionId ? [input.originNativeSessionId] : []));
+    const registry = readRegistry(input.baseDir, now);
+    const entry = {
+        checkpointRef: input.checkpoint.checkpointRef,
+        sessionRef: input.checkpoint.sessionRef,
+        previousCheckpointRef: input.checkpoint.checkpointRef,
+        runtime,
+        ...(checkpointSlug ? { projectSlug: checkpointSlug } : {}),
+        ...(repoRef ? { repoRef } : {}),
+        projectDirDigest: projectDirDigest(projectDir),
+        createdAt: now,
+        expiresAt,
+    };
+    registry.entries = [
+        ...registry.entries.filter((candidate) => candidate.checkpointRef !== entry.checkpointRef),
+        entry,
+    ].slice(-24);
+    writePrivateJson(registryPath(input.baseDir), registry);
+    const binary = runtime === "codex" ? "codex" : "claude";
+    const prompt = `Continue this You.md session from the portable handoff at ${briefPath}. `
+        + "Treat it as context, inspect the current repository state, and verify before changing anything.";
+    const command = `cd ${shellQuote(projectDir)} && ${binary} ${shellQuote(prompt)}`;
+    return {
+        schemaVersion: exports.SESSION_HANDOFF_SCHEMA_VERSION,
+        checkpointRef: input.checkpoint.checkpointRef,
+        sessionRef: input.checkpoint.sessionRef,
+        briefPath,
+        runtime,
+        command,
+        expiresAt,
+        secretValuesExposed: false,
+    };
+}
+function consumeSessionHandoffBinding(input) {
+    if (!input.workspacePath
+        || !input.localSessionAnchor
+        || !Number.isFinite(input.sessionStartedAt))
+        return undefined;
+    const now = input.now ?? Date.now();
+    const registry = readRegistry(input.baseDir, now);
+    let digest;
+    try {
+        digest = projectDirDigest(input.workspacePath);
+    }
+    catch {
+        return undefined;
+    }
+    const localSessionDigest = `sha256:${sha256(input.localSessionAnchor)}`;
+    let index = registry.entries.findIndex((entry) => entry.runtime === input.runtime
+        && entry.projectDirDigest === digest
+        && (!entry.projectSlug || entry.projectSlug === input.projectSlug)
+        && (!entry.repoRef || entry.repoRef === input.repoRef)
+        && entry.boundLocalSessionDigest === localSessionDigest);
+    if (index < 0)
+        index = registry.entries.findIndex((entry) => entry.runtime === input.runtime
+            && entry.projectDirDigest === digest
+            && (!entry.projectSlug || entry.projectSlug === input.projectSlug)
+            && (!entry.repoRef || entry.repoRef === input.repoRef)
+            && !entry.boundLocalSessionDigest
+            && input.sessionStartedAt >= entry.createdAt - START_TIME_SLOP_MS
+            && input.sessionStartedAt <= entry.expiresAt);
+    if (index < 0)
+        return undefined;
+    const entry = registry.entries[index];
+    entry.boundLocalSessionDigest = localSessionDigest;
+    writePrivateJson(registryPath(input.baseDir), registry);
+    return {
+        sessionRef: entry.sessionRef,
+        previousCheckpointRef: entry.previousCheckpointRef,
+    };
+}
+//# sourceMappingURL=sessionHandoff.js.map