starred/orca
1
0
Fork 0
mirror of https://github.com/stablyai/orca.git synced 2026-10-30 16:47:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

refactor(relay): delete the SSH relay server, its build assets and tests (#27215)

Browse Source 
* wip: delete the SSH relay server and its build, assets and tests

* wip: drop main/relay plugin conformance; WSL reader lookup test

* fix: drop the emptied relay bench; prune baselines

* test: keep the native halves of tests that also covered the relay

* chore(ci): drop shard timings for the deleted relay server tests

* fix: keep the directory listing budget that darwin terminal names now import

---------

Co-authored-by: m4air <m4air@Mac.localdomain>
This commit is contained in:
OrcaWin
2026-10-10 22:36:42 -07:00
committed by GitHub
co-authored by m4air
parent c2c63e7f9a
commit 2b4b60a87e
512 changed files with 359 additions and 85654 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitattributes
-1
View File
@@ -19,7 +19,6 @@
# .version, which names the immutable remote install dir. A CRLF checkout makes a
# Windows-built client disagree with a mac/Linux-built one on the same release,
# so one host ends up with two relay trees (#17886 review).
/config/relay-assets/** text eol=lf
# Pin the bytes so a patch reads and diffs identically on every host. It is NOT
# what makes the hash right: pnpm hashes a patch LF-normalized, so a CRLF checkout
# cannot change it. Believing otherwise put a hand-computed raw digest in the
.github/workflows/performance-contracts.yml
-1
View File
@@ -22,7 +22,6 @@ on:
- 'src/main/codex-usage/scanner-incremental-append.test.ts'
- 'src/main/usage/jsonl-file-reader.test.ts'
- 'src/main/usage/jsonl-file-snapshot.test.ts'
- 'src/relay/fs-path-metadata-symlink-concurrency.test.ts'
- 'src/renderer/src/components/editor/rich-markdown-list-tokenizers.test.ts'
- 'src/renderer/src/components/editor/rich-markdown-lowlight-cache.test.ts'
- 'src/renderer/src/components/terminal-pane/agent-completion-coordinator-queued-inspection-disposal.test.ts'
.github/workflows/pr.yml
+2 -13
View File
@@ -503,8 +503,7 @@ jobs:
pnpm exec vitest run --config config/vitest.config.ts \
src/shared/git-binary-compatibility.test.ts \
src/main/git/worktree-safety-real-git.test.ts \
src/main/git/worktree-rebase-update-refs-real-git.test.ts \
src/relay/git-review-draft-binary-compatibility.test.ts
src/main/git/worktree-rebase-update-refs-real-git.test.ts
) &
pids+=("$!")
@@ -516,8 +515,7 @@ jobs:
pnpm exec vitest run --config config/vitest.config.ts \
src/shared/git-binary-compatibility.test.ts \
src/main/git/worktree-safety-real-git.test.ts \
src/main/git/worktree-rebase-update-refs-real-git.test.ts \
src/relay/git-review-draft-binary-compatibility.test.ts
src/main/git/worktree-rebase-update-refs-real-git.test.ts
) &
pids+=("$!")
done
@@ -792,7 +790,6 @@ jobs:
src/main/terminal-history-fish-session.node-pty.test.ts \
src/main/zsh-scoped-histfile.live-shell.test.ts \
src/main/zsh-startup-hook-user-config-equivalence.live-shell.test.ts \
src/main/zsh-wrapper-version-mismatch.live-shell.test.ts \
src/main/runtime/structured-session-cli-login-shell.live-shell.test.ts \
src/renderer/src/components/terminal-pane/fish-color-scheme-child-stdin.node-pty.test.ts \
src/shared/fish-query-reply-child-stdin.node-pty.test.ts \
@@ -969,17 +966,11 @@ jobs:
- uses: ./.github/actions/install-node-dependencies
- name: Build relay companions
run: pnpm run build:relay
- name: Setup Node 18 runtime
uses: actions/setup-node@v6
with:
node-version: '18'
- name: Smoke managed-hook companions
run: node config/scripts/smoke-managed-hook-runtime-node18.mjs
# The process-host package declares engines >=18; load its staged public output on Node 18.
- name: Smoke process-host package
run: node config/scripts/smoke-process-host-node18.mjs
@@ -1270,9 +1261,7 @@ jobs:
src/main/ipc/pty-spawn-env-codex-resume-provenance.test.ts
src/main/ipc/preflight-provider-command-selection.test.ts
src/main/ipc/preflight-runnable-local-cli.test.ts
src/relay/windows-port-scan.win32.test.ts
src/main/ssh/remote-node-runtime-store-windows.test.ts
config/scripts/node-pty-windows-pty-teardown-patch.test.mjs
# Why the :parallel variant: identical to build:release except the three
# electron-vite targets overlap instead of running back to back. The Linux package
.github/workflows/release-cut.yml
-6
View File
@@ -1520,12 +1520,6 @@ jobs:
node config/scripts/runtime-file-watcher-fault-harness.mjs
ELECTRON_RUN_AS_NODE=1 pnpm exec electron config/scripts/runtime-file-watcher-fault-harness.mjs
- name: Gate SSH relay watcher process isolation
run: |
# Why: the remote native watcher shares a daemon with live PTYs.
# Kill only its child and require both PTY and watch recovery before packaging.
node config/scripts/relay-watcher-fault-harness.mjs
# Why: main ships minified with sourcemap:'hidden' and packaging drops
# out/**/*.map from app.asar, so a crash trace from a released build is
# otherwise undecodable. The main bundle is platform-independent, so one
.github/workflows/release-mac-build.yml
-6
View File
@@ -195,12 +195,6 @@ jobs:
node config/scripts/runtime-file-watcher-fault-harness.mjs
ELECTRON_RUN_AS_NODE=1 pnpm exec electron config/scripts/runtime-file-watcher-fault-harness.mjs
- name: Gate SSH relay watcher process isolation
run: |
# Why: the remote native watcher shares a daemon with live PTYs.
# Kill only its child and require both PTY and watch recovery before packaging.
node config/scripts/relay-watcher-fault-harness.mjs
- name: Abort if the parent release-cut run was cancelled
# Why: this workflow is dispatched separately, so cancelling release-cut
# does not stop mac `--publish always`. A cancelled parent left v1.4.206
.github/workflows/ssh-hostile-hosts.yml
-1
View File
@@ -16,7 +16,6 @@ on:
- 'src/main/ssh/ssh-remote-*'
- 'src/main/ssh/ssh-hostile-host-*'
- 'src/main/ssh/sftp-*'
- 'src/relay/**'
- 'src/wsl-guest/**'
- 'src/shared/node-runtime-pin.ts'
- 'src/shared/orcad-artifacts.ts'
.github/workflows/ssh-windows-hosts.yml
-2
View File
@@ -17,7 +17,6 @@ on:
- 'src/main/ssh/ssh-hostile-host-*'
- 'src/main/ssh/ssh-windows-host-*'
- 'src/main/ssh/ssh-session-command-audit.ts'
- 'src/relay/**'
- 'src/wsl-guest/**'
- 'src/packages/process-host/**'
- 'pnpm-workspace.yaml'
@@ -35,7 +34,6 @@ on:
- 'config/patches/node-pty*'
- 'config/patches/@vscode__windows-process-tree*'
- 'config/scripts/build-windows-process-tree-relay-addon.mjs'
- 'config/scripts/relay-windows-process-tree-staging.mjs'
- 'config/scripts/relay-windows-process-tree-prepared-addon*.mjs'
- 'config/scripts/windows-process-tree-gyp-rebuild.mjs'
- 'src/shared/relay-windows-breakaway-launch.ts'
config/ci/windows-ssh-provider/invoke-pinned-relay-cells.ps1
-1
View File
@@ -92,7 +92,6 @@ function Invoke-AppCell($Account,[string]$Descriptor,[string]$Log,[string]$Spec,
New-Item -ItemType Directory -Force -Path $ReceiptRoot | Out-Null
Push-Location $SourceRoot
try {
if(-not (Test-Path -LiteralPath "out\relay\$Target\relay.js")){throw 'Build the relay before provisioning'}
if(-not (Test-Path -LiteralPath 'out\orcad-template')){throw 'Build the orcad template before provisioning'}
# ssh2 consults the runner's known_hosts: pin only this private endpoint, restored below.
New-Item -ItemType Directory -Force -Path (Split-Path $knownPath) | Out-Null
config/knip.json
-1
View File
@@ -20,7 +20,6 @@
"src/renderer/src/web/main.tsx",
"src/renderer/src/**/*.worker.ts",
"src/cli/index.ts",
"src/relay/relay.ts",
"src/wsl-guest/wsl-agent-hook-relay.ts",
"config/scripts/**/*.{mjs,cjs,js,ts}",
"config/build-plugins/**/*.ts",
config/max-lines-baseline.txt
-1
View File
@@ -5,5 +5,4 @@
inline src/main/ipc/worktree-remote.ts
inline src/main/ssh/ssh-channel-multiplexer.ts
inline src/main/ssh/ssh-connection.ts
inline src/relay/pty-handler.ts
inline src/renderer/src/components/terminal-pane/remote-runtime-pty-transport.ts
config/process-host-direct-import-baseline.txt
-10
View File
@@ -121,16 +121,6 @@ src/main/wsl-availability.ts
src/main/wsl-unc-delete.ts
src/main/wsl.ts
src/main/zsh-startup-hook-pty-harness.ts
src/relay/agent-exec-handler.ts
src/relay/ai-vault-service-client-state.ts
src/relay/ai-vault-service-client.ts
src/relay/ai-vault-service-spawn.ts
src/relay/external-automations-handler.ts
src/relay/fs-handler-git-fallback.ts
src/relay/fs-handler-list-files.ts
src/relay/pty-shell-utils.ts
src/relay/subprocess-tree-termination.ts
src/relay/workspace-space-scan.ts
src/shared/ephemeral-vm-recipe-process.ts
src/shared/ephemeral-vm-recipe-runner.ts
src/shared/fish-binary-requirement.ts
config/relay-assets/node-pty-1.1.0-console-list-agent-patch.cjs
-71
View File
@@ -1,71 +0,0 @@
const { createHash } = require('node:crypto')
const { readFileSync, renameSync, rmSync, writeFileSync } = require('node:fs')
const { join, resolve } = require('node:path')
const EXPECTED_NODE_PTY_VERSION = '1.1.0'
const ORIGINAL_SOURCE_SHA256 = '0d010879bb6680a0253d44363183d53e631f42972594eb6dcb1fb842c8c85e52'
const PATCHED_SOURCE_SHA256 = '84df20cfe711a88d2bef35078615c58a6ce14f39348a4aef40e852b854dcd857'
const ORIGINAL_BODY = 'var consoleProcessList = getConsoleProcessList(shellPid);'
const PATCHED_BODY = `var consoleProcessList;
try {
consoleProcessList = getConsoleProcessList(shellPid);
}
catch (_a) {
// Why: AttachConsole can fail without a Win32 console; use node-pty's timeout fallback immediately.
consoleProcessList = [shellPid];
}`
function inspectNodePtyConsoleListAgent(relayDir = process.cwd()) {
const nodePtyDir = resolve(relayDir, 'node_modules', 'node-pty')
const packageJsonPath = join(nodePtyDir, 'package.json')
const agentPath = join(nodePtyDir, 'lib', 'conpty_console_list_agent.js')
const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8'))
if (packageJson.version !== EXPECTED_NODE_PTY_VERSION) {
throw new Error(
`Refusing to patch node-pty ${packageJson.version}; expected ${EXPECTED_NODE_PTY_VERSION}`
)
}
const source = readFileSync(agentPath, 'utf8')
return { agentPath, source }
}
function assertPatchedNodePtyConsoleListAgent(relayDir = process.cwd()) {
const inspected = inspectNodePtyConsoleListAgent(relayDir)
if (sourceSha256(inspected.source) !== PATCHED_SOURCE_SHA256) {
throw new Error('node-pty ConPTY console-list fallback is not installed')
}
}
function patchNodePtyConsoleListAgent(relayDir = process.cwd()) {
const inspected = inspectNodePtyConsoleListAgent(relayDir)
const sourceHash = sourceSha256(inspected.source)
if (sourceHash === PATCHED_SOURCE_SHA256) {
return
}
if (sourceHash !== ORIGINAL_SOURCE_SHA256) {
throw new Error('Refusing to patch unexpected node-pty console-list agent source')
}
const patchedSource = inspected.source.replace(ORIGINAL_BODY, PATCHED_BODY)
const temporaryPath = `${inspected.agentPath}.orca-patch-${process.pid}`
// Why: a terminated remote install must leave either known source version recoverable on reconnect.
try {
writeFileSync(temporaryPath, patchedSource)
renameSync(temporaryPath, inspected.agentPath)
} finally {
rmSync(temporaryPath, { force: true })
}
assertPatchedNodePtyConsoleListAgent(relayDir)
}
function sourceSha256(source) {
return createHash('sha256').update(source).digest('hex')
}
if (require.main === module) {
patchNodePtyConsoleListAgent()
}
module.exports = {
assertPatchedNodePtyConsoleListAgent,
patchNodePtyConsoleListAgent
}
config/relay-assets/node-pty-1.1.0-master-cloexec-patch.cjs
-448
View File
@@ -1,448 +0,0 @@
/**
* Relay-side pty fd-leak patch for node-pty 1.1.0 (#17915).
*
* The app gets this through pnpm `patchedDependencies`; the relay installs stock
* node-pty from npm onto the host, where no pnpm patch reaches. Stock 1.1.0 leaks
* a pty fd on both Unix relay platforms, by two unrelated bugs on two code paths.
*
* Linux takes forkpty(), which has no atomic O_CLOEXEC, so every later child of
* the relay -- pty children, git helpers, probes, agent CLIs -- inherits each live
* master and keeps its /dev/pts device alive for the life of the relay (#8362).
*
* macOS takes pty_posix_spawn(), which opens up to three throwaway ptys to push
* the real master off fds 0-2 and then never closes them: the cleanup loop is
* `for (; count > 0; count--)`, but in any running process the first posix_openpt()
* already returns >= 2, so the loop breaks with count == 0 and its body never runs
* -- and where it does run it closes low_fds[count], never low_fds[0]. Measured on
* darwin-arm64: one orphaned /dev/ptmx fd per terminal, never returned.
*
* macOS does not inherit the master into spawned children today, but not because it
* is marked: FD_CLOEXEC is not set on it (`lsof +fg` shows R,W,NB, no CX). What
* closes it is POSIX_SPAWN_CLOEXEC_DEFAULT in pty_posix_spawn's spawn flags, an
* Apple-only flag that closes every fd in the child. That is one option away from
* gone -- setting uid/gid drops libuv back to fork()/exec(), which honors nothing
* but FD_CLOEXEC -- so the master is marked on the Apple path too, exactly as the
* app's pnpm patch marks it. Windows has no fds and is excluded.
*
* The compile it buys differs by platform. Linux relays already run node-gyp at
* install time (1.1.0 ships no linux prebuild), so this is a second compile on a
* path that already compiles. macOS runs the shipped darwin prebuild and has no
* build/ at all, so this is its first compile -- the price of the only fix there
* is, since the bug is in the source that prebuild was built from.
*
* Non-fatal by construction: the working build is moved aside before anything is
* touched and moved back on any failure, and a failed attempt drops a skip marker
* so the compile is attempted at most once per relay directory.
*/
const { spawnSync } = require('node:child_process')
const { createHash } = require('node:crypto')
const {
existsSync,
mkdirSync,
readFileSync,
renameSync,
rmSync,
writeFileSync
} = require('node:fs')
const { dirname, join, resolve } = require('node:path')
const EXPECTED_NODE_PTY_VERSION = '1.1.0'
const ORIGINAL_SOURCE_SHA256 = '5e1005d6bdcfbe97b486ee415419fe7adae99035047f07340fbad36419e0bae6'
const PATCHED_SOURCE_SHA256 = '3e6bc1a688aae187d231687130cfc0a11781c672f5f616d73183d471ee8ee65c'
const STATUS_PREFIX = 'ORCA-NPTY-CLOEXEC:'
const SKIP_MARKER_FILENAME = '.node-pty-cloexec-skip'
const BACKUP_DIRNAME = '.orca-cloexec-prepatch-release'
// Under the caller's 240s SSH command timeout, so the rollback below still runs.
const REBUILD_TIMEOUT_MS = 200000
const VERIFY_TIMEOUT_MS = 15000
const FORWARD_DECLARATION = [
'static int\npty_nonblock(int);\n',
'static int\npty_nonblock(int);\n\nstatic int\npty_cloexec(int);\n'
]
const DEFINITION = [
`static int
pty_nonblock(int fd) {
int flags = fcntl(fd, F_GETFL, 0);
if (flags == -1) return -1;
return fcntl(fd, F_SETFL, flags | O_NONBLOCK);
}
`,
`static int
pty_nonblock(int fd) {
int flags = fcntl(fd, F_GETFL, 0);
if (flags == -1) return -1;
return fcntl(fd, F_SETFL, flags | O_NONBLOCK);
}
/**
* Orca: close-on-exec FD
*
* forkpty()/posix_openpt() have no atomic O_CLOEXEC, so a master left without
* FD_CLOEXEC is inherited by every later child of this process -- including
* later pty children -- which keeps its /dev/pts device and buffers alive long
* after its own session ends (#8362).
*/
static int
pty_cloexec(int fd) {
int flags = fcntl(fd, F_GETFD);
if (flags == -1) return -1;
if (flags & FD_CLOEXEC) return 0;
return fcntl(fd, F_SETFD, flags | FD_CLOEXEC);
}
`
]
const FORKPTY_CALL_SITE = [
` default:
if (pty_nonblock(master) == -1) {
throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
}
}
`,
` default:
if (pty_nonblock(master) == -1) {
throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
}
if (pty_cloexec(master) == -1) {
throw Napi::Error::New(napiEnv, "Could not set master fd to close-on-exec.");
}
}
`
]
// Apple never reaches FORKPTY_CALL_SITE: `default:` sits in the `#else` arm of PtyFork's
// `#if defined(__APPLE__)`, so before this pair the asset patched nothing macOS executes.
const POSIX_SPAWN_CALL_SITE = [
` if (pty_nonblock(master) == -1) {
throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
}
#else
`,
` if (pty_nonblock(master) == -1) {
throw Napi::Error::New(napiEnv, "Could not set master fd to nonblocking.");
}
if (pty_cloexec(master) == -1) {
throw Napi::Error::New(napiEnv, "Could not set master fd to close-on-exec.");
}
#else
`
]
// The throwaway ptys pty_posix_spawn opens to keep the real master off fds 0-2. Byte-identical to
// the app's pnpm patch, so both trees compile the same cleanup.
const LOW_FDS_DECLARATION = [
` int low_fds[3];
size_t count = 0;
`,
` int low_fds[3] = {-1, -1, -1};
size_t count = 0;
`
]
const LOW_FDS_CLEANUP = [
` for (; count > 0; count--) {
close(low_fds[count]);
}
`,
` for (size_t i = 0; i <= count && i < 3; i++) {
if (low_fds[i] != -1) {
close(low_fds[i]);
}
}
`
]
const REPLACEMENTS = [
FORWARD_DECLARATION,
DEFINITION,
POSIX_SPAWN_CALL_SITE,
FORKPTY_CALL_SITE,
LOW_FDS_DECLARATION,
LOW_FDS_CLEANUP
]
function sourceSha256(source) {
return createHash('sha256').update(source).digest('hex')
}
function nodePtyDir(relayDir) {
return resolve(relayDir, 'node_modules', 'node-pty')
}
function inspectNodePtyUnixSource(relayDir) {
const ptyDir = nodePtyDir(relayDir)
const sourcePath = join(ptyDir, 'src', 'unix', 'pty.cc')
const version = JSON.parse(readFileSync(join(ptyDir, 'package.json'), 'utf8')).version
if (version !== EXPECTED_NODE_PTY_VERSION) {
throw new Error(`Refusing to patch node-pty ${version}; expected ${EXPECTED_NODE_PTY_VERSION}`)
}
return { ptyDir, sourcePath, source: readFileSync(sourcePath, 'utf8') }
}
function writeSourceAtomically(sourcePath, contents) {
const temporaryPath = `${sourcePath}.orca-patch-${process.pid}`
// Why: a terminated install must leave one of the two known source versions on disk.
try {
writeFileSync(temporaryPath, contents)
renameSync(temporaryPath, sourcePath)
} finally {
rmSync(temporaryPath, { force: true })
}
}
function rewriteSource(source, reverse) {
let rewritten = source
for (const [original, patched] of REPLACEMENTS) {
const from = reverse ? patched : original
const to = reverse ? original : patched
if (rewritten.split(from).length - 1 !== 1) {
throw new Error('Refusing to rewrite unexpected node-pty pty.cc source')
}
rewritten = rewritten.replace(from, to)
}
return rewritten
}
/** True when the patch was applied, false when it was already installed. */
function patchNodePtyMasterCloexecSource(relayDir = process.cwd()) {
const inspected = inspectNodePtyUnixSource(relayDir)
const hash = sourceSha256(inspected.source)
if (hash === PATCHED_SOURCE_SHA256) {
return false
}
if (hash !== ORIGINAL_SOURCE_SHA256) {
throw new Error('Refusing to patch unexpected node-pty pty.cc source')
}
writeSourceAtomically(inspected.sourcePath, rewriteSource(inspected.source, false))
assertPatchedNodePtyMasterCloexecSource(relayDir)
return true
}
function assertPatchedNodePtyMasterCloexecSource(relayDir = process.cwd()) {
const inspected = inspectNodePtyUnixSource(relayDir)
if (sourceSha256(inspected.source) !== PATCHED_SOURCE_SHA256) {
throw new Error('node-pty pty master close-on-exec patch is not installed')
}
}
function revertNodePtyMasterCloexecSource(relayDir = process.cwd()) {
const inspected = inspectNodePtyUnixSource(relayDir)
if (sourceSha256(inspected.source) === ORIGINAL_SOURCE_SHA256) {
return false
}
writeSourceAtomically(inspected.sourcePath, rewriteSource(inspected.source, true))
return true
}
function rebuildNodePty(relayDir) {
const result = spawnSync('npm', ['rebuild', '--ignore-scripts=false', 'node-pty'], {
cwd: relayDir,
encoding: 'utf8',
timeout: REBUILD_TIMEOUT_MS,
windowsHide: true
})
if (result.error) {
throw new Error(`npm rebuild node-pty failed: ${result.error.message}`)
}
if (result.status !== 0) {
const tail = `${result.stdout || ''}${result.stderr || ''}`.trim().slice(-300)
throw new Error(`npm rebuild node-pty exited ${result.status ?? result.signal}: ${tail}`)
}
}
// Why a child, for both scripts below: a bad build can abort the process on require, which would
// strand the moved-aside working build. Why each ends in a reachability check: a host that cannot
// show its fds says nothing, and an unobservable flag is not evidence the rebuild was wrong.
//
// Linux's leak is inheritance, so the observation is a later plain child's /proc/self/fd.
const VERIFY_INHERITANCE_SCRIPT = `
const pty = require(process.argv[1]);
const term = pty.spawn('/bin/sh', ['-c', 'exit 0'], {
name: 'xterm-256color', cols: 80, rows: 24, cwd: process.cwd(), env: process.env
});
const probe = require('node:child_process').spawnSync('/bin/sh', ['-c', 'ls -l /proc/self/fd'], { encoding: 'utf8' });
try { term.kill() } catch {}
const listing = probe.stdout || '';
if (probe.status !== 0 || !listing.includes('->')) { console.log('UNVERIFIED'); process.exit(0) }
console.log(listing.includes('ptmx') ? 'LEAKED' : 'ISOLATED');
process.exit(0);
`
// Apple's leak is self-held, not inherited, so the observation is this process's own fd table:
// N live ptys must account for exactly N /dev/ptmx rows. A stock build shows 2N -- the master plus
// the throwaway pty_posix_spawn opened and never closed. lsof, not /proc, because macOS has no
// /proc; a host without lsof cannot say, which is 'unverified', not a failed patch.
const VERIFY_SELF_FDS_SCRIPT = `
const pty = require(process.argv[1]);
const terms = [];
for (let i = 0; i < 3; i++) {
terms.push(pty.spawn('/bin/sh', ['-c', 'sleep 30'], {
name: 'xterm-256color', cols: 80, rows: 24, cwd: process.cwd(), env: process.env
}));
}
const probe = require('node:child_process').spawnSync('/bin/sh', ['-c', 'lsof -p ' + process.pid], { encoding: 'utf8', maxBuffer: 1 << 24 });
for (const term of terms) { try { term.kill() } catch {} }
const rows = (probe.stdout || '').split('\\n').filter((line) => line.includes('/dev/ptmx'));
if (probe.status !== 0 || rows.length < terms.length) { console.log('UNVERIFIED'); process.exit(0) }
console.log(rows.length > terms.length ? 'LEAKED' : 'ISOLATED');
process.exit(0);
`
const LEAK_MESSAGE = {
darwin: 'rebuilt node-pty still leaks a throwaway pty fd per spawn',
linux: 'rebuilt node-pty still leaks the pty master into later children'
}
/** 'isolated' when the platform's leak is gone, 'unverified' when the host cannot show it. */
function verifyNoPtyFdLeak(relayDir, platform) {
const script = platform === 'darwin' ? VERIFY_SELF_FDS_SCRIPT : VERIFY_INHERITANCE_SCRIPT
const result = spawnSync(process.execPath, ['-e', script, nodePtyDir(relayDir)], {
cwd: relayDir,
encoding: 'utf8',
timeout: VERIFY_TIMEOUT_MS,
windowsHide: true
})
const output = `${result.stdout || ''}`
if (result.status !== 0 || result.error) {
const tail = `${output}${result.stderr || ''}`.trim().slice(-300)
throw new Error(
`rebuilt node-pty did not load: ${tail || result.error?.message || result.signal}`
)
}
if (output.includes('LEAKED')) {
throw new Error(LEAK_MESSAGE[platform] || LEAK_MESSAGE.linux)
}
return output.includes('ISOLATED') ? 'isolated' : 'unverified'
}
/**
* What gets moved aside before the compile, and where the compile writes.
*
* Linux ships no prebuild, so `build/Release` is both the working build and the compile's output,
* and moving it aside only arms the rollback. macOS runs `prebuilds/darwin-<arch>` and has no
* `build/` at all, so the compile writes a new `build/Release` -- which node-pty's loader checks
* ahead of `prebuilds`. Moving `prebuilds` aside does double duty there: it arms the rollback and
* it is what makes node-pty's install script fall through from "prebuild found" to `node-gyp
* rebuild`. Deliberately not `npm_config_build_from_source`, which deletes the prebuilds outright
* and would leave nothing to roll back to.
*/
function buildLayout(relayDir, platform, arch) {
const ptyDir = nodePtyDir(relayDir)
const compiledDir = join(ptyDir, 'build', 'Release')
if (platform === 'darwin') {
const prebuildsDir = join(ptyDir, 'prebuilds')
return {
compiledDir,
movedDir: prebuildsDir,
workingBuildPath: join(prebuildsDir, `darwin-${arch}`, 'pty.node'),
missingStatus: 'skipped:no-prebuild'
}
}
return {
compiledDir,
movedDir: compiledDir,
workingBuildPath: join(compiledDir, 'pty.node'),
missingStatus: 'skipped:no-compiled-build'
}
}
function rollback(relayDir, layout, backupDir) {
rmSync(layout.compiledDir, { recursive: true, force: true })
try {
revertNodePtyMasterCloexecSource(relayDir)
} catch {
// The build that is about to be restored predates the patch either way.
}
if (existsSync(backupDir)) {
mkdirSync(dirname(layout.movedDir), { recursive: true })
renameSync(backupDir, layout.movedDir)
}
}
/**
* Patch and rebuild the host's node-pty, or leave it exactly as found.
* Never throws: the caller is on the connect path and a leaky relay beats no relay.
*/
function applyNodePtyMasterCloexecPatch(relayDir = process.cwd(), options = {}) {
const platform = options.platform || process.platform
const arch = options.arch || process.arch
const rebuild = options.rebuild || rebuildNodePty
const verify = options.verify || verifyNoPtyFdLeak
if (platform !== 'linux' && platform !== 'darwin') {
return 'skipped:unsupported-platform'
}
const skipMarkerPath = join(relayDir, SKIP_MARKER_FILENAME)
if (existsSync(skipMarkerPath)) {
return 'skipped:earlier-attempt-failed'
}
const layout = buildLayout(relayDir, platform, arch)
const backupDir = join(nodePtyDir(relayDir), BACKUP_DIRNAME)
// A backup stranded by a connection that died mid-rebuild is stale by definition:
// whatever repaired node-pty since built from the source now on disk.
rmSync(backupDir, { recursive: true, force: true })
let inspected
try {
inspected = inspectNodePtyUnixSource(relayDir)
} catch (err) {
return `skipped:${err.message}`
}
const hash = sourceSha256(inspected.source)
if (hash === PATCHED_SOURCE_SHA256) {
return 'already-patched'
}
if (hash !== ORIGINAL_SOURCE_SHA256) {
return 'skipped:unexpected-source'
}
// Nothing to fall back on means the host runs neither a compile nor the prebuild
// this platform expects; rebuilding could only take away the artifact the probe
// just proved loadable.
if (!existsSync(layout.workingBuildPath)) {
return layout.missingStatus
}
try {
renameSync(layout.movedDir, backupDir)
} catch (err) {
return `skipped:${err.message}`
}
try {
patchNodePtyMasterCloexecSource(relayDir)
rebuild(relayDir)
const verdict = verify(relayDir, platform)
// Discarded, not restored: a tree that gets published must hold no unpatched binary the
// loader could still fall back to. A later repair recompiles from the patched source.
rmSync(backupDir, { recursive: true, force: true })
return verdict === 'isolated' ? 'patched' : 'patched-unverified'
} catch (err) {
rollback(relayDir, layout, backupDir)
// Bounded on purpose: one compile attempt per relay directory, never a retry loop.
try {
writeFileSync(skipMarkerPath, `${new Date().toISOString()} ${err.message}\n`)
} catch {
// A relay dir we cannot write to will fail the cheap checks above next time anyway.
}
return `failed:${err.message}`
}
}
if (require.main === module) {
console.log(`${STATUS_PREFIX}${applyNodePtyMasterCloexecPatch()}`)
}
module.exports = {
EXPECTED_NODE_PTY_VERSION,
ORIGINAL_SOURCE_SHA256,
PATCHED_SOURCE_SHA256,
SKIP_MARKER_FILENAME,
STATUS_PREFIX,
applyNodePtyMasterCloexecPatch,
assertPatchedNodePtyMasterCloexecSource,
patchNodePtyMasterCloexecSource,
revertNodePtyMasterCloexecSource
}
config/relay-assets/node-pty-1.1.0-windows-pty-teardown-patch.cjs
-362
View File
@@ -1,362 +0,0 @@
const { createHash } = require('node:crypto')
const { readFileSync, renameSync, rmSync, writeFileSync } = require('node:fs')
const { join, resolve } = require('node:path')
/**
* Release the ConPTY teardown handles a relay's npm-installed node-pty never releases.
*
* Two files, and the ORDER of one of the edits is the whole fix.
*
* `windowsPtyAgent.js` -- `kill()` flips `readable` on both sockets and destroys neither.
* `_cleanUpProcess` destroys `_outSocket`, so the conout handle comes back; nothing ever destroys
* `_inSocket`, and it wraps a real Windows named-pipe handle from `fs.openSync(term.conin, 'w')`.
* Every terminal leaks one File handle for the life of the host process.
*
* The obvious fix -- and the placement `config/patches/node-pty@1.1.0.patch` uses -- releases it at
* the TOP of the branch, before `_getConsoleProcessList()` forks and before the native kill. That is
* measurably worse than leaving the leak alone: teardown aborts partway, the forked console-list
* agent is never reaped, and both pipe handles stay alive instead of one. This asset releases it at
* the END of the branch instead, after the fork and the kill have already happened.
*
* Measured on a Windows SSH host, 20 spawn/kill cycles, handles bucketed by NT object type
* (identical numbers standalone and through a real relay). Every row is the NON-DLL branch, which
* is the branch a relay runs -- see the divergence note below for why that matters:
*
* published node-pty File +1/terminal, Process flat
* desktop patch placement File +2/terminal, Process +1/terminal <-- 3x WORSE
* released last (here) File flat, Process flat
*
* `windowsTerminal.js` carries the desktop's error-listener hunks verbatim. The conin listener is
* what keeps a pipe error retiring one terminal instead of the host -- its own comment names the
* failure mode: "Without a listener, Node promotes errors such as write EAGAIN to uncaughtException".
* It is not what fixes the leak (adding it changed nothing on its own), but it is the guard that
* makes destroying conin safe at all.
*
* Why this ships as a relay asset rather than only in config/patches/node-pty@1.1.0.patch: pnpm
* patches do not cross the SSH boundary -- a relay host runs the tree `npm install` put there.
*
* DELIBERATE DIVERGENCE FROM THE DESKTOP, AND WHY IT IS NOT A DESKTOP-TERMINAL BUG: the two hosts
* do not run the same branch of `kill()`. node-pty defaults `_useConptyDll` to false
* (`windowsPtyAgent.js`). Every desktop site that opens a terminal pane sets it true --
* `local-pty-utils.ts` (two) and `native-pty-spawn.ts` -- as does the `windows-conpty-warmup.ts`
* warm-up, so all of those take the `else` branch, where UPSTREAM ALREADY destroys the input
* socket. The relay passes no such option (`src/relay/pty-handler.ts`), so it takes the
* `!useConptyDll` branch -- the one this asset and the desktop patch both edit.
*
* THE DESKTOP IS NOT ENTIRELY OFF THAT BRANCH. Two desktop sites omit the option and so run it
* too: the hidden rate-limit probes in `src/main/rate-limits/claude-pty.ts` and
* `codex-pty-rate-limit-probe.ts`. Both recur -- their fetchers poll -- and both tear down through
* `kill()`, so this hunk is live on the desktop, just never for a pane a user can see. Do not
* restate this as "the desktop never executes that branch": that sentence stood here for two
* revisions and is false.
*
* What the numbers above therefore do NOT cover: they were measured on relay-style spawn/kill
* cycles. Whether the early placement costs the same +2 File / +1 Process across a probe's
* lifecycle is UNMEASURED -- plausible, not established, and worth measuring before anyone quotes
* a desktop figure. What IS settled is the claim this comment replaced: that the desktop patch made
* every Windows user worse off ON EVERY TERMINAL. Terminals take the DLL branch, and the harness
* that produced that claim defaulted into the branch it was not trying to measure.
*
* The divergence is therefore about which branch each host runs for the workload that matters, not
* about a regression in the terminals users open. The test still pins it, because a future "sync
* the patches" would put the early placement onto the relay's branch, where it does cost +2 File
* and +1 Process per terminal.
*
* If you extend this enumeration, grep for `node-pty` rather than for a static import: those two
* probes were missed three times because they use `await import('node-pty')`.
*
* THE SELF-EXIT LEAK: FIXED FOR THE DESKTOP BY #18635, STILL LIVE ON A RELAY. A terminal that exits
* on its own is also torn down through `kill()` -- both hosts call `destroy()` on natural exit and
* `WindowsTerminal.destroy()` is `kill()` -- but the shell is already gone by then, so the ordering
* this asset relies on does not hold. Measured over 20 self-exit cycles on the NON-DLL branch:
* published +3 File/+1 Process per terminal, desktop patch placement +2/+1, this tree +2/+1. This
* asset does not close it.
*
* #18635 does, in `config/patches/node-pty@1.1.0.patch`: the baton outlives the shell so `PtyKill`
* still reaches `ClosePseudoConsole`, plus an unconditional conout dispose on the DLL branch. That
* fix does not reach a Windows relay, and no hunk in THIS file can carry it, because it is mostly
* NATIVE (`src/win/conpty.cc`) and this asset only rewrites `lib/*.js`. Three delivery paths exist
* and none currently covers Windows:
*
* - the pnpm patch does not cross the SSH boundary -- the remote `npm install` yields upstream's
* unpatched node-pty;
* - the orcad prebuild matrix now compiles win32 slots from patched source
* (`config/scripts/build-orcad-prebuilds.mjs`), but only standalone orcad consumes them;
* nothing ships them to a Windows relay host yet;
* - a relay asset CAN patch native source and rebuild on the host -- that is exactly what
* `node-pty-1.1.0-master-cloexec-patch.cjs` does -- but it returns
* `skipped:unsupported-platform` for anything but linux/darwin. Extending it to win32 means
* requiring an MSVC toolchain on the relay host, a far heavier precondition than on Linux,
* where node-gyp already runs at install time.
*
* So a Windows SSH relay still leaks a pseudoconsole per self-exiting terminal, and closing it is a
* DELIVERY problem, not another hunk here. Do not read #18635's flat self-exit relay numbers as
* covering deployed relays: they were measured against a locally rebuilt binary, so they describe
* the relay CODE PATH on a patched tree, not the tree a relay host actually installs.
*/
const EXPECTED_NODE_PTY_VERSION = '1.1.0'
const WINDOWS_TERMINAL_TEARDOWN_REPLACEMENTS = [
[
' var parsedEnv = _this._parseEnv(env);\n // If the terminal is ready\n _this._isReady = false;\n // Functions that need to run after `ready` event is emitted.\n _this._deferreds = [];\n // Create new termal.\n',
' var parsedEnv = _this._parseEnv(env);\n // If the terminal is ready\n _this._isReady = false;\n _this._killRequested = false;\n _this._killComplete = false;\n _this._isPipeReady = false;\n // Functions that need to run after `ready` event is emitted.\n _this._deferreds = [];\n // Create new termal.\n'
],
[
" _this._pid = _this._agent.innerPid;\n _this._fd = _this._agent.fd;\n _this._pty = _this._agent.pty;\n // The forked windows terminal is not available until `ready` event is\n // emitted.\n _this._socket.on('ready_datapipe', function () {\n // Run deferreds and set ready state once the first data event is received.\n _this._socket.once('data', function () {\n // Wait until the first data event is fired then we can run deferreds.\n if (!_this._isReady) {\n // Terminal is now ready and we can avoid having to defer method\n // calls.\n _this._isReady = true;\n",
" _this._pid = _this._agent.innerPid;\n _this._fd = _this._agent.fd;\n _this._pty = _this._agent.pty;\n // A pre-output teardown must still publish the actual pipe close.\n _this._socket.once('close', function () {\n if (_this._isPipeReady) {\n _this.emit('exit', _this._agent.exitCode);\n }\n _this._close();\n });\n // The forked windows terminal is not available until `ready` event is\n // emitted.\n _this._socket.on('ready_datapipe', function () {\n _this._isPipeReady = true;\n if (_this._killRequested) {\n _this.kill();\n return;\n }\n // Run deferreds and set ready state once the first data event is received.\n _this._socket.once('data', function () {\n // Wait until the first data event is fired then we can run deferreds.\n if (!_this._isReady && !_this._killRequested) {\n // Terminal is now ready and we can avoid having to defer method\n // calls.\n _this._isReady = true;\n"
],
[
" _this._deferreds = [];\n }\n });\n // Cleanup after the socket is closed.\n _this._socket.on('close', function () {\n _this.emit('exit', _this._agent.exitCode);\n _this._close();\n });\n });\n _this._file = file;\n _this._name = name;\n",
' _this._deferreds = [];\n }\n });\n });\n _this._file = file;\n _this._name = name;\n'
],
[
" });\n };\n WindowsTerminal.prototype.destroy = function () {\n var _this = this;\n this._deferNoArgs(function () {\n _this.kill();\n });\n };\n WindowsTerminal.prototype.kill = function (signal) {\n var _this = this;\n this._deferNoArgs(function () {\n if (signal) {\n throw new Error('Signals not supported on windows.');\n }\n _this._close();\n _this._agent.kill();\n });\n };\n WindowsTerminal.prototype._deferNoArgs = function (deferredFn) {\n var _this = this;\n // If the terminal is ready, execute.\n if (this._isReady) {\n",
" });\n };\n WindowsTerminal.prototype.destroy = function () {\n this.kill();\n };\n WindowsTerminal.prototype.kill = function (signal) {\n if (signal) {\n throw new Error('Signals not supported on windows.');\n }\n // Retire input now; native close requires the forwarding pipe, not first output.\n this._killRequested = true;\n this._deferreds = [];\n this._close();\n if (!this._isPipeReady || this._killComplete) {\n return;\n }\n this._agent.kill();\n this._killComplete = true;\n };\n WindowsTerminal.prototype._deferNoArgs = function (deferredFn) {\n if (this._killRequested) {\n return;\n }\n var _this = this;\n // If the terminal is ready, execute.\n if (this._isReady) {\n"
],
[
' });\n };\n WindowsTerminal.prototype._defer = function (deferredFn, arg) {\n var _this = this;\n // If the terminal is ready, execute.\n if (this._isReady) {\n',
' });\n };\n WindowsTerminal.prototype._defer = function (deferredFn, arg) {\n if (this._killRequested) {\n return;\n }\n var _this = this;\n // If the terminal is ready, execute.\n if (this._isReady) {\n'
]
]
const PRECONNECT_AGENT_REPLACEMENTS = [
[
'var utils_1 = require("./utils");',
'var utils_1 = require("./utils");\nvar eventEmitter2_1 = require("./eventEmitter2");'
],
[
' this._innerPid = 0;',
' this._innerPid = 0;\n this._onProcessExit = new eventEmitter2_1.EventEmitter2();'
],
[
' WindowsPtyAgent.prototype.kill = function () {',
' Object.defineProperty(WindowsPtyAgent.prototype, "onProcessExit", {\n get: function () { return this._onProcessExit.event; },\n enumerable: false,\n configurable: true\n });\n Object.defineProperty(WindowsPtyAgent.prototype, "isConpty", {\n get: function () { return this._useConpty === true; },\n enumerable: false,\n configurable: true\n });\n WindowsPtyAgent.prototype.killAfterOutputClosed = function () {\n var _this = this;\n return this._conoutSocketWorker.disposeImmediately().then(function () { return _this.kill(); });\n };\n WindowsPtyAgent.prototype.kill = function () {'
],
[
" this._outSocket.on('data', function () { return _this._flushDataAndCleanUp(); });\n }\n };",
" this._outSocket.on('data', function () { return _this._flushDataAndCleanUp(); });\n }\n this._onProcessExit.fire(exitCode);\n };"
]
]
const PRECONNECT_TERMINAL_REPLACEMENTS = [
[
' _this._isPipeReady = false;',
' _this._isPipeReady = false;\n _this._exitEmitted = false;\n _this._preconnectCleanupRequested = false;'
],
[
" // A pre-output teardown must still publish the actual pipe close.\n _this._socket.once('close', function () {\n if (_this._isPipeReady) {\n _this.emit('exit', _this._agent.exitCode);\n }\n _this._close();\n });",
" _this._agent.onProcessExit(function () {\n if (_this._killRequested) _this._emitExit();\n });\n _this._socket.once('close', function () {\n if (_this._isPipeReady && !_this._preconnectCleanupRequested && (!_this._killRequested || !_this._agent.isConpty || _this._agent.exitCode !== undefined)) _this._emitExit();\n _this._close();\n if (_this._killRequested && !_this._isPipeReady) _this._killAfterOutputClosed();\n });"
],
[
' if (!this._isPipeReady || this._killComplete) {\n return;\n }',
' if (this._killComplete || this._preconnectCleanup) return;\n if (this._preconnectCleanupRequested || (!this._isPipeReady && this._socket.destroyed)) {\n this._killAfterOutputClosed();\n return;\n }\n if (!this._isPipeReady) return;'
],
[
' WindowsTerminal.prototype._deferNoArgs =',
" WindowsTerminal.prototype._emitExit = function () {\n if (this._exitEmitted) return;\n this._exitEmitted = true;\n this.emit('exit', this._agent.exitCode);\n };\n WindowsTerminal.prototype._killAfterOutputClosed = function () {\n var _this = this;\n if (!this._agent.isConpty || this._killComplete || this._preconnectCleanup) return;\n this._preconnectCleanupRequested = true;\n this._preconnectCleanup = this._agent.killAfterOutputClosed().then(function () {\n _this._killComplete = true;\n if (_this._agent.exitCode !== undefined) _this._emitExit();\n }, function (error) {\n _this._preconnectCleanup = undefined;\n if (_this.listeners('error').length > 1) {\n _this.emit('error', error);\n }\n });\n if (this._agent.exitCode !== undefined) this._emitExit();\n };\n WindowsTerminal.prototype._deferNoArgs ="
]
]
const PRECONNECT_CONOUT_REPLACEMENTS = [
[
' case 1 /* READY */:\n _this._onReady.fire();',
' case 1 /* READY */:\n if (_this._termination) return;\n _this._onReady.fire();'
],
[
' ConoutConnection.prototype.connectSocket = function (socket) {\n socket.connect',
' ConoutConnection.prototype.disposeImmediately = function () {\n this._isDisposed = true;\n if (this._drainTimeout) clearTimeout(this._drainTimeout);\n return this._destroySocket();\n };\n ConoutConnection.prototype.connectSocket = function (socket) {\n if (this._termination) return;\n socket.connect'
],
[
' ConoutConnection.prototype._destroySocket = function () {\n return __awaiter(this, void 0, void 0, function () {\n return __generator(this, function (_a) {\n switch (_a.label) {\n case 0: return [4 /*yield*/, this._worker.terminate()];\n case 1:\n _a.sent();\n return [2 /*return*/];\n }\n });\n });\n };\n',
' ConoutConnection.prototype._destroySocket = function () {\n if (!this._termination) {\n this._termination = this._worker.terminate().then(function () { return undefined; });\n }\n return this._termination;\n };\n'
]
]
/** Each entry is one published file, its patched form, and the edits between them. */
const PREVIOUS_PATCH_TARGETS = [
{
relativePath: ['lib', 'windowsConoutConnection.js'],
originalSha256: '1440f70908fb1f55911ac8e936a1230f68a9c00c03096fcef6788eac6aad9d62',
patchedSha256: '37fab0688764326444509f7ffb24369f99fda4fbe29db72dccfad52c457ba244',
replacements: PRECONNECT_CONOUT_REPLACEMENTS
},
{
relativePath: ['lib', 'windowsPtyAgent.js'],
originalSha256: '8636d16b38266112204061a22b135734177c242837982fd3a4055be726efa64a',
patchedSha256: '3c14daf8d0ec2d1e2d66435caa5fb2b629b230e237873594e623e79e6a7d1223',
previousPatchedSha256: '1e23ef480569e73706e3ab4f5482c7e553c76f51414ae8e7b0bdcc2fd75f7280',
previousReplacements: PRECONNECT_AGENT_REPLACEMENTS,
replacements: [
[
' this._ptyNative.kill(this._pty, this._useConptyDll);\n this._conoutSocketWorker.dispose();\n',
' this._ptyNative.kill(this._pty, this._useConptyDll);\n this._conoutSocketWorker.dispose();\n // Orca: released AFTER the console-list fork and the native kill, not before them.\n // Destroying conin first aborts teardown partway -- measured on a Windows SSH relay\n // as +2 File and +1 Process handles per terminal, against +1 File unpatched.\n this._inSocket.destroy();\n'
],
...PRECONNECT_AGENT_REPLACEMENTS
]
},
{
relativePath: ['lib', 'windowsTerminal.js'],
originalSha256: 'c3a65716f53fed0135a8a633373d5f9c2ab092544d651f27ef0a67096dd3bcd9',
patchedSha256: '5dfeb1dda46645e1d77964ad4d07072b34f0a897dfc7e785137cc39e755b4641',
additionalPreviousVariants: [
{
sha256: '3060c6514a8e9e3285f91b9b549930e7d25d59d4cf7e1ed3a25b9a680dd1ded5',
replacements: PRECONNECT_TERMINAL_REPLACEMENTS
},
{
sha256: '598755ee75307d041a72cd7c7c4e12ae4a4bbf35eee19da67b42b61fdae0d4d6',
replacements: [
[
" _this._preconnectCleanup = undefined;\n _this.emit('error', error);",
" _this._preconnectCleanup = undefined;\n if (_this.listeners('error').length > 1) {\n _this.emit('error', error);\n }"
],
[
' if (_this._preconnectCleanupRequested) _this._emitExit();',
' if (_this._killRequested) _this._emitExit();'
],
[
' if (_this._isPipeReady && !_this._preconnectCleanupRequested) _this._emitExit();',
' if (_this._isPipeReady && !_this._preconnectCleanupRequested && (!_this._killRequested || !_this._agent.isConpty || _this._agent.exitCode !== undefined)) _this._emitExit();'
]
]
}
],
previousPatchedSha256: '8247ecd69be8b18257050fb026b290024612c5ffc6d492ff1d46f81e613be2cf',
previousReplacements: [
...WINDOWS_TERMINAL_TEARDOWN_REPLACEMENTS,
...PRECONNECT_TERMINAL_REPLACEMENTS
],
replacements: [
[
' _this._agent = new windowsPtyAgent_1.WindowsPtyAgent(file, args, parsedEnv, cwd, _this._cols, _this._rows, false, opt.useConpty, opt.useConptyDll, opt.conptyInheritCursor);\n _this._socket = _this._agent.outSocket;\n // Not available until `ready` event emitted.\n _this._pid = _this._agent.innerPid;',
" _this._agent = new windowsPtyAgent_1.WindowsPtyAgent(file, args, parsedEnv, cwd, _this._cols, _this._rows, false, opt.useConpty, opt.useConptyDll, opt.conptyInheritCursor);\n _this._socket = _this._agent.outSocket;\n // Attach before readiness so a broken ConPTY output pipe cannot be unhandled.\n _this._socket.on('error', function (err) {\n var code = err && err.code;\n // PTY output can report EPIPE before `_close()` wins the race.\n _this._close();\n if (code === 'EPIPE' || code === 'ERR_STREAM_PUSH_AFTER_EOF' || code === 'ERR_STREAM_DESTROYED') {\n return;\n }\n // EIO, happens when someone closes our child process: the only process\n // in the terminal.\n // node < 0.6.14: errno 5\n // node >= 0.6.14: read EIO\n if (typeof code === 'string') {\n if (~code.indexOf('errno 5') || ~code.indexOf('EIO'))\n return;\n }\n // Throw anything else.\n if (_this.listeners('error').length < 2) {\n throw err;\n }\n });\n // Not available until `ready` event emitted.\n _this._pid = _this._agent.innerPid;"
],
[
" }\n });\n // Shutdown if `error` event is emitted.\n _this._socket.on('error', function (err) {\n // Close terminal session.\n _this._close();\n // EIO, happens when someone closes our child process: the only process\n // in the terminal.\n // node < 0.6.14: errno 5\n // node >= 0.6.14: read EIO\n if (err.code) {\n if (~err.code.indexOf('errno 5') || ~err.code.indexOf('EIO'))\n return;\n }\n // Throw anything else.\n if (_this.listeners('error').length < 2) {\n throw err;\n }\n });\n // Cleanup after the socket is closed.\n _this._socket.on('close', function () {",
" }\n });\n // Cleanup after the socket is closed.\n _this._socket.on('close', function () {"
],
[
' _this._readable = true;\n _this._writable = true;\n _this._forwardEvents();\n return _this;',
" _this._readable = true;\n _this._writable = true;\n // A ConPTY input-pipe error must retire only this terminal. Without a listener, Node promotes\n // errors such as write EAGAIN to uncaughtException and kills every PTY in the daemon.\n _this._agent.inSocket.on('error', function () {\n if (!_this._writable) {\n return;\n }\n _this._close();\n try {\n _this._agent.kill();\n }\n catch (_a) {\n // The failing pipe may have raced process exit; the terminal is already unwritable.\n }\n });\n _this._forwardEvents();\n return _this;"
],
[
'exports.WindowsTerminal = WindowsTerminal;\n//# sourceMappingURL=windowsTerminal.js.map',
'exports.WindowsTerminal = WindowsTerminal;\n//# sourceMappingURL=windowsTerminal.js.map\n'
],
...WINDOWS_TERMINAL_TEARDOWN_REPLACEMENTS,
...PRECONNECT_TERMINAL_REPLACEMENTS
]
}
]
// Retire the entrypoint before removing the APIs it required.
const PATCH_TARGETS = [
'windowsTerminal.js',
'windowsPtyAgent.js',
'windowsConoutConnection.js'
].map((file) => {
const previous = PREVIOUS_PATCH_TARGETS.find((target) => target.relativePath.at(-1) === file)
const inverse = (replacements) => replacements.toReversed().map(([from, to]) => [to, from])
const isConout = file === 'windowsConoutConnection.js'
const retiredReplacements = isConout ? previous.replacements : previous.previousReplacements
return {
relativePath: previous.relativePath,
originalSha256: previous.originalSha256,
patchedSha256: isConout ? previous.originalSha256 : previous.previousPatchedSha256,
replacements: isConout
? []
: previous.replacements.slice(0, previous.replacements.length - retiredReplacements.length),
previousPatchedSha256: previous.patchedSha256,
previousReplacements: inverse(retiredReplacements),
additionalPreviousVariants: previous.additionalPreviousVariants?.map((variant) => ({
sha256: variant.sha256,
replacements: [...variant.replacements, ...inverse(retiredReplacements)]
}))
}
})
function inspectTarget(relayDir, target) {
const nodePtyDir = resolve(relayDir, 'node_modules', 'node-pty')
const packageJson = JSON.parse(readFileSync(join(nodePtyDir, 'package.json'), 'utf8'))
if (packageJson.version !== EXPECTED_NODE_PTY_VERSION) {
throw new Error(
`Refusing to patch node-pty ${packageJson.version}; expected ${EXPECTED_NODE_PTY_VERSION}`
)
}
const filePath = join(nodePtyDir, ...target.relativePath)
return { filePath, source: readFileSync(filePath, 'utf8') }
}
function assertPatchedNodePtyWindowsTeardown(relayDir = process.cwd()) {
for (const target of PATCH_TARGETS) {
const inspected = inspectTarget(relayDir, target)
if (sourceSha256(inspected.source) !== target.patchedSha256) {
throw new Error(
`node-pty ConPTY teardown release is not installed in ${target.relativePath.join('/')}`
)
}
}
}
function patchNodePtyWindowsTeardown(relayDir = process.cwd()) {
const pending = []
for (const target of PATCH_TARGETS) {
const inspected = inspectTarget(relayDir, target)
const sourceHash = sourceSha256(inspected.source)
if (sourceHash === target.patchedSha256) {
continue
}
const replacements =
sourceHash === target.originalSha256
? target.replacements
: sourceHash === target.previousPatchedSha256
? target.previousReplacements
: target.additionalPreviousVariants?.find((entry) => entry.sha256 === sourceHash)
?.replacements
if (!replacements) {
throw new Error(
`Refusing to patch unexpected node-pty source in ${target.relativePath.join('/')}`
)
}
let patchedSource = inspected.source
for (const [from, to] of replacements) {
// Why the count check: an anchor that matched twice would patch the wrong site silently, and
// the hash below would then reject a tree this script had already rewritten.
if (patchedSource.split(from).length - 1 !== 1) {
throw new Error(`Refusing to patch ${target.relativePath.join('/')}; anchor is not unique`)
}
patchedSource = patchedSource.replace(from, to)
}
if (sourceSha256(patchedSource) !== target.patchedSha256) {
throw new Error(
`Refusing to install unexpected patched node-pty source in ${target.relativePath.join('/')}`
)
}
pending.push({ filePath: inspected.filePath, patchedSource })
}
for (const { filePath, patchedSource } of pending) {
const temporaryPath = `${filePath}.orca-patch-${process.pid}`
// Why: a terminated remote install must leave either known source version recoverable on reconnect.
try {
writeFileSync(temporaryPath, patchedSource)
renameSync(temporaryPath, filePath)
} finally {
rmSync(temporaryPath, { force: true })
}
}
assertPatchedNodePtyWindowsTeardown(relayDir)
}
function sourceSha256(source) {
return createHash('sha256').update(source).digest('hex')
}
if (require.main === module) {
patchNodePtyWindowsTeardown()
}
module.exports = {
assertPatchedNodePtyWindowsTeardown,
patchNodePtyWindowsTeardown
}
config/reliability-gates.jsonc
+46 -522
View File
@@ -854,16 +854,13 @@
"invariant": "A fresh PTY launch of an agent with a trust preset pre-trusts its workspace root (for Codex, whose lookup keys on its start folder, the folder it starts in, including a floating terminal's) before the provider spawn, in both spawn builders, on the host that runs the agent: main for local and WSL launches, the SSH relay on its own disk for SSH launches. It never waits past the preset's deadline: 20 s for local Codex, the short budget for every other write, local or on the relay. A failed or abandoned write lets the launch proceed untrusted, so the agent asks. Restored or reattached panes, spawns with no launch command and the setting turned off are never trusted; for an agent whose trust on a home covers the folders below it (Claude, Copilot, Qoder), no writer stores a path that is a root, a home or a folder above one, and an unknown home writes nothing; Codex, Cursor and Antigravity, whose trust on a home covers only the home, trust it as they did before; and a WSL launch never writes the Windows home. A structured Codex chat, which has no PTY, pre-trusts its folder the same way when it is created, under the same setting.",
"oracle": "A trust write held pending keeps each builder from returning until it settles. A never-settling local Codex write resolves the dispatcher only after the long deadline; a never-settling local Claude write resolves after the short budget with a named warning. Rejected and throwing writes, and a throwing guard, resolve with a warning. Restored panes, spawns without a command and the setting off make no dispatcher call; Codex in a floating terminal or a workspace subfolder is trusted at that folder, and every other preset at the workspace root. Creating a structured Codex chat trusts its folder before launch preparation, and nothing with the setting off. An SSH launch returns the relay field for every preset and calls no writer, and the relay's pty.spawn starts no process until that launch's trust call settles. A home, a folder above one, a root, a symlink to a home and a missing path that climbs back to the home through `..` write no Claude, Copilot or Qoder trust file, on this machine and on the relay, and the home writes Codex, Cursor and Antigravity trust.",
"commands": [
"ORCA_BACKGROUND_LAUNCH=1 pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty/spawn-options-agent-workspace-trust.test.ts src/main/agent-workspace-trust-spawn.test.ts src/main/agent-workspace-trust.test.ts src/main/execution-host-workspace-trust.test.ts src/relay/agent-workspace-trust-spawn.test.ts src/relay/agent-workspace-trust-spawn-guard-failure.test.ts src/relay/pty-handler-agent-workspace-trust.test.ts src/main/runtime/orca-runtime-structured-agent-session-create-intent.test.ts"
"ORCA_BACKGROUND_LAUNCH=1 pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty/spawn-options-agent-workspace-trust.test.ts src/main/agent-workspace-trust-spawn.test.ts src/main/agent-workspace-trust.test.ts src/main/execution-host-workspace-trust.test.ts src/main/runtime/orca-runtime-structured-agent-session-create-intent.test.ts"
],
"testFiles": [
"src/main/ipc/pty/spawn-options-agent-workspace-trust.test.ts",
"src/main/agent-workspace-trust-spawn.test.ts",
"src/main/agent-workspace-trust.test.ts",
"src/main/execution-host-workspace-trust.test.ts",
"src/relay/agent-workspace-trust-spawn.test.ts",
"src/relay/agent-workspace-trust-spawn-guard-failure.test.ts",
"src/relay/pty-handler-agent-workspace-trust.test.ts",
"src/main/runtime/orca-runtime-structured-agent-session-create-intent.test.ts"
],
"assertionRefs": [
@@ -904,24 +901,6 @@
"writes no %s trust when the host knows no home"
]
},
{
"file": "src/relay/agent-workspace-trust-spawn.test.ts",
"assertions": [
"writes %s trust on the relay host's own disk",
"trusts the relay home for %s, whose trust there covers only the home",
"leaves Antigravity to ask, since its writer is unverified on SSH hosts"
]
},
{
"file": "src/relay/agent-workspace-trust-spawn-guard-failure.test.ts",
"assertions": ["skips %s trust and never fails the spawn"]
},
{
"file": "src/relay/pty-handler-agent-workspace-trust.test.ts",
"assertions": [
"writes the launch's trust with its final env before the agent's process starts"
]
},
{
"file": "src/main/runtime/orca-runtime-structured-agent-session-create-intent.test.ts",
"assertions": [
@@ -935,7 +914,7 @@
"date": "2026-09-29",
"runner": "local",
"platform": "macos",
"command": "ORCA_BACKGROUND_LAUNCH=1 pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty/spawn-options-agent-workspace-trust.test.ts src/main/agent-workspace-trust-spawn.test.ts src/main/agent-workspace-trust.test.ts src/main/execution-host-workspace-trust.test.ts src/relay/agent-workspace-trust-spawn.test.ts src/relay/agent-workspace-trust-spawn-guard-failure.test.ts src/relay/pty-handler-agent-workspace-trust.test.ts src/main/runtime/orca-runtime-structured-agent-session-create-intent.test.ts",
"command": "ORCA_BACKGROUND_LAUNCH=1 pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty/spawn-options-agent-workspace-trust.test.ts src/main/agent-workspace-trust-spawn.test.ts src/main/agent-workspace-trust.test.ts src/main/execution-host-workspace-trust.test.ts src/main/runtime/orca-runtime-structured-agent-session-create-intent.test.ts",
"result": "passed",
"durationSeconds": 4.16,
"summary": "201 tests across eight suites pass, run through node_modules/.bin/vitest with a throwaway HOME. No native launch, PTY or live SSH host."
@@ -1213,81 +1192,6 @@
"promotionCriteria": ["Retain red/green heap and value assertions and complete CI soak."],
"demotionRule": "Keep experimental until cross-platform and soak evidence; investigate failures without weakening content or memory assertions."
},
{
"id": "relay-performance.ai-vault-ready-ownership",
"title": "AI Vault readiness releases canceled request owners",
"maturity": "experimental",
"protection": "partial",
"owner": "desktop-runtime",
"layer": "relay-service-client-contract",
"surfaces": ["AI Vault sidecar startup", "SSH title lookup cancellation"],
"platforms": ["macos", "linux", "windows"],
"providers": ["ssh"],
"coveredPlatforms": ["macos"],
"coveredProviders": ["ssh"],
"coverageNotes": "Production relay client with synthetic child events and real forced GC. Native remote process execution and live SSH remain untested. Local/daemon PTY, WSL shell selection and mobile terminal stream are unaffected.",
"motivatingLinks": ["https://github.com/stablyai/orca/issues/23024"],
"invariant": "Canceled unsent calls release request payloads before sidecar readiness, disposal releases all pending readiness owners, and live calls still start exactly once through cancellation and startup failures.",
"oracle": "Hold ready and cancel 1,000 title calls; require zero retained request arrays after GC and one child. Dispose before ready and require uncanceled payload collection and zero timers. Race ready with abort and spawn failure with a second lane; require only live calls delivered and successful results. Preserve existing restart and cancel-ack behavior.",
"commands": [
"ORCA_BACKGROUND_LAUNCH=1 pnpm exec vitest run --config config/vitest.config.ts src/relay/ai-vault-service-ready-retention.test.ts src/relay/ai-vault-service-client.test.ts src/relay/ai-vault-service-restart-policy.test.ts src/relay/ai-vault-service-spawn.test.ts src/relay/ai-vault-handler.test.ts src/shared/promise-settlement-waiters.test.ts"
],
"testFiles": [
"src/relay/ai-vault-service-ready-retention.test.ts",
"src/relay/ai-vault-service-client.test.ts",
"src/relay/ai-vault-service-restart-policy.test.ts",
"src/relay/ai-vault-service-spawn.test.ts",
"src/relay/ai-vault-handler.test.ts",
"src/shared/promise-settlement-waiters.test.ts"
],
"assertionRefs": [
{
"file": "src/relay/ai-vault-service-ready-retention.test.ts",
"assertions": [
"releases canceled request payloads while readiness remains pending",
"releases uncanceled readiness payloads when the client is disposed",
"does not send a call canceled in the turn that readiness arrives",
"retries an unsent lane after spawn fails while the other lane starts a child"
]
}
],
"evidenceRuns": [
{
"date": "2026-09-25",
"runner": "local",
"platform": "macos",
"command": "ORCA_BACKGROUND_LAUNCH=1 pnpm exec vitest run --config config/vitest.config.ts src/relay/ai-vault-service-ready-retention.test.ts src/relay/ai-vault-service-client.test.ts src/relay/ai-vault-service-restart-policy.test.ts src/relay/ai-vault-service-spawn.test.ts src/relay/ai-vault-handler.test.ts src/shared/promise-settlement-waiters.test.ts",
"result": "passed",
"durationSeconds": 0.616,
"summary": "38 tests across six suites passed, including real forced-GC retention and startup/cancel races."
}
],
"runtimeBudget": {
"p95Seconds": 10,
"scope": "focused Node contract tests with forced GC"
},
"flakeHistory": {
"status": "unknown",
"evidence": "Local runs passed; CI/soak history not collected."
},
"redGreenEvidence": {
"status": "complete",
"evidence": "Baseline retains all 1,000 canceled arrays and the disposed uncanceled payload; both permanent regressions fail there and pass after the fix. Independent spawn-failure race failed on the initial prototype, passed on baseline and passes after correction."
},
"performanceBudget": {
"required": true,
"evidence": "Synthetic cold-start churn retains 1,000 to zero canceled arrays; incremental heap 34,771,464 to 492,504 bytes. One shared startup reaction, no new polling, timers, process starts, timeout changes or wire fields."
},
"promotionCriteria": [
"Collect 100 consecutive CI passes or 14 days of soak history.",
"Exercise real SSH sidecar cancellation and restart on Linux and Windows."
],
"knownGaps": [
"Synthetic churn does not measure typical user frequency or UI latency.",
"Physical sidecar/native Windows/Linux and live SSH paths were not exercised."
],
"demotionRule": "Keep experimental or demote if canceled payloads survive GC, disposal retains startup owners, or live lanes stall/duplicate after startup failure."
},
{
"id": "runtime.connection-owned-host-status",
"title": "Host status recovers with its owning connection",
@@ -3283,8 +3187,8 @@
"invariant": "Shell startup scanning preserves every non-Orca output byte in order across arbitrary PTY chunk boundaries. Bash scalar and supported array PROMPT_COMMAND values preserve user bytes, hook order, and foreground exit status while emitting exactly one OSC 133 A/C/D lifecycle without syntax errors. Before user startup files run, the wrapper publishes its shell PID. If a later exec discards the ready marker, proof-based recovery releases queued startup input only after the launched shell's actual executable image with that exact PID owns the PTY foreground, emits its post-hook line-editor enable sequence, and exposes zle/readline termios; startup reads, line-init hooks, child foreground processes, and non-shell readline replacements cannot trigger that proof. The existing bounded compatibility timeout may enqueue input without proof, but must not publish readiness, lose or duplicate that input across reconnect, or execute it before the replacement shell can accept it.",
"oracle": "Split Fish output immediately after the ready marker and after the following ESC introducer; local and daemon owners must emit the exact ESC [ ? 2004 h bytes and headless xterm must not render literal control text. Run the real generated wrappers under node-pty with disposable zsh, bash, and Fish startup files. Exercise Bash scalar and array PROMPT_COMMAND values with empty, repeated, escaped, whitespace, control-byte, odd-backslash, status-mutating, DEBUG-trap, zoxide, and RHEL-style hooks; require exact A,C,D:0,A,C,D:1,A,C ordering and byte preservation. Plain and exec -a replacement shells must receive one queued command at their first completed line editor without waiting for the 15-second timeout. The identical oracle must time out without the startup identity and prompt fallback. Same-shell reads, child-process reads, a blocking zle-line-init hook, sqlite3, and sqlite3 renamed zsh must not trigger prompt fallback. Relay owner coverage must use the same lossless scanner composition and release through the same prompt contract.",
"commands": [
"pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/daemon/bash-prompt-command-composition.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready-marker-scan.test.ts src/main/providers/local-pty-shell-ready-startup-command.test.ts src/main/providers/local-pty-shell-ready-wrapper-generation.test.ts src/main/providers/local-pty-provider-shell-readiness.test.ts src/relay/pty-shell-launch.test.ts src/relay/pty-handler-startup-command-delivery.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready-marker-scan.test.ts src/main/providers/local-pty-shell-ready-startup-command.test.ts src/main/providers/local-pty-shell-ready-wrapper-generation.test.ts src/main/providers/local-pty-provider-shell-readiness.test.ts src/relay/pty-shell-launch.test.ts src/relay/pty-handler-startup-command-delivery.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/daemon/bash-prompt-command-composition.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready-marker-scan.test.ts src/main/providers/local-pty-shell-ready-startup-command.test.ts src/main/providers/local-pty-shell-ready-wrapper-generation.test.ts src/main/providers/local-pty-provider-shell-readiness.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready-marker-scan.test.ts src/main/providers/local-pty-shell-ready-startup-command.test.ts src/main/providers/local-pty-shell-ready-wrapper-generation.test.ts src/main/providers/local-pty-provider-shell-readiness.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts --maxWorkers=1 src/main/daemon/shell-ready.test.ts src/main/shell-startup-output-scanner.test.ts",
"ORCA_E2E_WEB_CLIENT=1 SKIP_BUILD=1 pnpm exec playwright test tests/e2e/paired-startup-exec-readiness.spec.ts --config tests/playwright.config.ts --project electron-headless --project electron-headful --workers=1"
],
@@ -3303,8 +3207,6 @@
"src/main/providers/local-pty-shell-ready-startup-command.test.ts",
"src/main/providers/local-pty-shell-ready-wrapper-generation.test.ts",
"src/main/providers/local-pty-provider-shell-readiness.test.ts",
"src/relay/pty-shell-launch.test.ts",
"src/relay/pty-handler-startup-command-delivery.test.ts",
"tests/e2e/paired-startup-exec-readiness.spec.ts"
],
"assertionRefs": [
@@ -3348,14 +3250,6 @@
"zsh configurations without a line-editor enable sequence retain the existing timeout backstop"
]
},
{
"file": "src/relay/pty-handler-startup-command-delivery.test.ts",
"assertions": [
"the SSH relay owner strips startup identity and releases provider-delivered input through prompt readiness",
"renderer-owned SSH delivery receives the existing ready marker after authoritative relay prompt readiness",
"normal renderer-owned ready markers pass through unchanged and retain no readiness state"
]
},
{
"file": "tests/e2e/paired-startup-exec-readiness.spec.ts",
"assertions": [
@@ -3378,7 +3272,7 @@
"date": "2026-08-12",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready-marker-scan.test.ts src/main/providers/local-pty-shell-ready-startup-command.test.ts src/main/providers/local-pty-shell-ready-wrapper-generation.test.ts src/main/providers/local-pty-provider-shell-readiness.test.ts src/relay/pty-shell-launch.test.ts src/relay/pty-handler-startup-command-delivery.test.ts",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready-marker-scan.test.ts src/main/providers/local-pty-shell-ready-startup-command.test.ts src/main/providers/local-pty-shell-ready-wrapper-generation.test.ts src/main/providers/local-pty-provider-shell-readiness.test.ts",
"result": "passed",
"durationSeconds": 6,
"summary": "473 tests passed with one local Fish skip, including every-boundary scanner composition, real exec, silent-read, line-init-hook, renamed-image, disabled-bracketed-paste, and relay-owner oracles."
@@ -3387,7 +3281,7 @@
"date": "2026-08-15",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/daemon/bash-prompt-command-composition.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready-marker-scan.test.ts src/main/providers/local-pty-shell-ready-startup-command.test.ts src/main/providers/local-pty-shell-ready-wrapper-generation.test.ts src/main/providers/local-pty-provider-shell-readiness.test.ts src/relay/pty-shell-launch.test.ts src/relay/pty-handler-startup-command-delivery.test.ts",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/daemon/repro-13767-shell-ready-marker-lost-to-exec.test.ts src/main/daemon/bash-prompt-command-composition.test.ts src/main/line-editor-ready-output-scanner.test.ts src/main/shell-startup-identity-scanner.test.ts src/main/shell-startup-output-scanner.test.ts src/main/shell-prompt-readiness-probe.test.ts src/shared/pty-slave-line-discipline-echo.test.ts src/shared/shell-process-readiness.test.ts src/main/daemon/session.test.ts src/main/daemon/shell-ready.test.ts src/main/providers/local-pty-shell-ready-marker-scan.test.ts src/main/providers/local-pty-shell-ready-startup-command.test.ts src/main/providers/local-pty-shell-ready-wrapper-generation.test.ts src/main/providers/local-pty-provider-shell-readiness.test.ts",
"result": "passed",
"durationSeconds": 6,
"summary": "233 tests passed with one local Fish skip, including exact Bash PROMPT_COMMAND byte/status/lifecycle composition across daemon, local, and relay owners."
@@ -10077,15 +9971,14 @@
"ORCA_E2E_WEB_CLIENT=1 SKIP_BUILD=1 pnpm exec playwright test tests/e2e/remote-agent-session-focus-authority.spec.ts --config tests/playwright.config.ts --project electron-headful --workers=1",
"Manual headed paired-server journey: isolated Orca desktop host + separate paired web client + real Codex process + 20-second WebSocket fault + reconnect + explicit stop",
"pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/terminal-orphan-owner.test.ts src/main/runtime/terminal-orphan-topology.test.ts src/renderer/src/runtime/web-session-terminal-orphan-recovery.test.ts src/renderer/src/runtime/web-session-terminal-orphan-mixed-version.test.ts src/renderer/src/runtime/web-session-tabs-sync.test.ts --maxWorkers=1",
"pnpm exec vitest run --config config/vitest.config.ts src/main/providers/pty-process-inspection.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts src/relay/pty-handler-spawn-admission.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/runtime/orca-runtime.test.ts tests/e2e/remote-agent-completion-authority.unit.test.ts src/renderer/src/runtime/runtime-terminal-inspection.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-process-cadence.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-pending-title-inspection.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts tests/e2e/remote-agent-completion-authority.unit.test.ts src/main/providers/pty-process-inspection.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts src/relay/pty-handler-spawn-admission.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/renderer/src/runtime/runtime-terminal-inspection.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-process-cadence.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-pending-title-inspection.test.ts src/renderer/src/components/terminal-pane/pty-connection-task-complete-dispatch.test.ts src/renderer/src/lib/codex-session-restart.test.ts"
"pnpm exec vitest run --config config/vitest.config.ts src/main/providers/pty-process-inspection.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/runtime/orca-runtime.test.ts tests/e2e/remote-agent-completion-authority.unit.test.ts src/renderer/src/runtime/runtime-terminal-inspection.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-process-cadence.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-pending-title-inspection.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts tests/e2e/remote-agent-completion-authority.unit.test.ts src/main/providers/pty-process-inspection.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/renderer/src/runtime/runtime-terminal-inspection.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-process-cadence.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-pending-title-inspection.test.ts src/renderer/src/components/terminal-pane/pty-connection-task-complete-dispatch.test.ts src/renderer/src/lib/codex-session-restart.test.ts"
],
"testFiles": [
"src/main/providers/pty-process-inspection.test.ts",
"src/main/daemon/terminal-host.test.ts",
"src/main/daemon/daemon-pty-router.test.ts",
"src/main/daemon/degraded-daemon-pty-provider.test.ts",
"src/relay/pty-handler-spawn-admission.test.ts",
"src/main/runtime/orca-runtime.test.ts",
"tests/e2e/remote-agent-completion-authority.unit.test.ts",
"src/renderer/src/runtime/runtime-terminal-inspection.test.ts",
@@ -10142,10 +10035,6 @@
"completion inspection rejects an unmapped session instead of borrowing the local fallback"
]
},
{
"file": "src/relay/pty-handler-spawn-admission.test.ts",
"assertions": ["strict relay inspection rejects a missing PTY"]
},
{
"file": "tests/e2e/remote-agent-completion-authority.unit.test.ts",
"assertions": [
@@ -10327,7 +10216,7 @@
"date": "2026-07-23",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts tests/e2e/remote-agent-completion-authority.unit.test.ts src/main/providers/pty-process-inspection.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts src/relay/pty-handler-spawn-admission.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/renderer/src/runtime/runtime-terminal-inspection.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-process-cadence.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-pending-title-inspection.test.ts src/renderer/src/components/terminal-pane/pty-connection-task-complete-dispatch.test.ts src/renderer/src/lib/codex-session-restart.test.ts",
"command": "pnpm exec vitest run --config config/vitest.config.ts tests/e2e/remote-agent-completion-authority.unit.test.ts src/main/providers/pty-process-inspection.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/renderer/src/runtime/runtime-terminal-inspection.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-process-cadence.test.ts src/renderer/src/components/terminal-pane/agent-completion-coordinator-pending-title-inspection.test.ts src/renderer/src/components/terminal-pane/pty-connection-task-complete-dispatch.test.ts src/renderer/src/lib/codex-session-restart.test.ts",
"result": "passed",
"durationSeconds": 11.96,
"summary": "Eleven focused files and 870 tests passed on the current-main candidate. The cross-boundary harness fails with the implementation reverted by dispatching process-exit from unavailable remote evidence. Direct SSH uses strict main-process inspection, daemon and relay inspection reject missing or unmapped sessions, the terminal lifecycle suite uses the atomic inspection boundary, and one stale pane cannot suppress restart notices for a separately confirmed Codex pane."
@@ -10776,7 +10665,7 @@
"invariant": "A visible desktop-owned terminal cannot trust 0x0, stale requested size, or renderer-only size; xterm, fit/proposed size, applied PTY size, shell-visible size, and the runtime mirror's parse dimensions must converge or enter explicit degraded state, and mirror resize reflow must stay ordered with queued output writes.",
"oracle": "The current executable slice uses deterministic frame schedulers and fake providers to force 0x0 first fit, delayed layout settle, dropped resize/readback drift, hidden-to-visible activation, and window wake. It asserts the renderer forwards a usable size, pty:getSize reports applied rather than merely requested size where available, visibility resume reasserts real drift without hot listSessions, one settled wake produces one geometry-only readback, and SSH relay readback is authoritative with bounded fallback. Shell-visible stty/echo-wrap convergence remains a live-gate follow-up.",
"commands": [
"pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/pty-size-reconcile.test.ts src/renderer/src/components/terminal-pane/pty-size-reassertion.test.ts src/renderer/src/components/terminal-pane/split-right-white-screen.test.ts src/renderer/src/components/terminal-pane/use-terminal-window-wake-recovery.test.ts src/main/ipc/pty-applied-size-reporting.test.ts src/main/providers/ssh-pty-provider.test.ts src/main/runtime/orca-runtime.test.ts src/relay/pty-handler-output-streaming.test.ts"
"pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/pty-size-reconcile.test.ts src/renderer/src/components/terminal-pane/pty-size-reassertion.test.ts src/renderer/src/components/terminal-pane/split-right-white-screen.test.ts src/renderer/src/components/terminal-pane/use-terminal-window-wake-recovery.test.ts src/main/ipc/pty-applied-size-reporting.test.ts src/main/providers/ssh-pty-provider.test.ts src/main/runtime/orca-runtime.test.ts"
],
"testFiles": [
"src/renderer/src/components/terminal-pane/pty-size-reconcile.test.ts",
@@ -10785,8 +10674,7 @@
"src/renderer/src/components/terminal-pane/use-terminal-window-wake-recovery.test.ts",
"src/main/ipc/pty-applied-size-reporting.test.ts",
"src/main/providers/ssh-pty-provider.test.ts",
"src/main/runtime/orca-runtime.test.ts",
"src/relay/pty-handler-output-streaming.test.ts"
"src/main/runtime/orca-runtime.test.ts"
],
"assertionRefs": [
{
@@ -10840,13 +10728,6 @@
"the headless mirror resizes after an accepted desktop PTY resize (#7192)",
"headless mirror resizes are ordered behind queued PTY writes (#7192)"
]
},
{
"file": "src/relay/pty-handler-output-streaming.test.ts",
"assertions": [
"relay readback reports the grid actually applied by node-pty",
"missing relay PTYs return an unverified null size"
]
}
],
"evidenceRuns": [
@@ -10854,7 +10735,7 @@
"date": "2026-07-21",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/pty-size-reconcile.test.ts src/renderer/src/components/terminal-pane/pty-size-reassertion.test.ts src/renderer/src/components/terminal-pane/split-right-white-screen.test.ts src/renderer/src/components/terminal-pane/use-terminal-window-wake-recovery.test.ts src/main/ipc/pty-applied-size-reporting.test.ts src/main/providers/ssh-pty-provider.test.ts src/main/runtime/orca-runtime.test.ts src/relay/pty-handler-output-streaming.test.ts",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/pty-size-reconcile.test.ts src/renderer/src/components/terminal-pane/pty-size-reassertion.test.ts src/renderer/src/components/terminal-pane/split-right-white-screen.test.ts src/renderer/src/components/terminal-pane/use-terminal-window-wake-recovery.test.ts src/main/ipc/pty-applied-size-reporting.test.ts src/main/providers/ssh-pty-provider.test.ts src/main/runtime/orca-runtime.test.ts",
"result": "passed",
"durationSeconds": 18.54,
"summary": "8 test files passed, 1,272 tests passed on the PR branch."
@@ -12302,7 +12183,7 @@
"invariant": "Typing, focus, terminal switch, workspace switch, visibility resume, resize, render, per-pane liveness, and tab-title synchronization must not call global pty:listSessions or aiVault.listSessions; they must use targeted APIs or cached provider-owned state.",
"oracle": "The current executable slice asserts targeted visibility/first-input liveness, resize re-assertion after visibility resume, light tab/active-state resume, SSH/remote skip behavior, and a closed Resource Manager budget of one readiness seed plus one coalesced inventory read only for unknown spawn IDs. AI Vault title sync deterministically accepts only resolveSessionTitles, batches at most 64 exact identities, bounds scanner-service calls at sixteen, routes requests to the transcript-owning local/SSH/runtime host, and proves zero broad scans for unsupported hosts. The full hot-path oracle still needs instrumentation around raw focus, split focus, workspace switch, render ticks, and high-session PTY fixtures.",
"commands": [
"pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/lib/ai-vault-tab-title-sync.test.ts src/main/ai-vault/session-scanner-service-client.test.ts src/main/ai-vault/session-title-file-reader.test.ts src/main/ai-vault/session-parse-cache-persistence.test.ts src/main/ipc/ai-vault.test.ts src/main/runtime/rpc/methods/ai-vault.test.ts src/relay/ai-vault-handler.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/lib/ai-vault-tab-title-sync.test.ts src/main/ai-vault/session-scanner-service-client.test.ts src/main/ai-vault/session-title-file-reader.test.ts src/main/ai-vault/session-parse-cache-persistence.test.ts src/main/ipc/ai-vault.test.ts src/main/runtime/rpc/methods/ai-vault.test.ts",
"ORCA_BACKGROUND_LAUNCH=1 pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-startup-barrier-and-listing.test.ts src/renderer/src/components/status-bar/use-resource-session-inventory.test.tsx src/renderer/src/components/status-bar/resource-session-inventory.test.ts --maxWorkers=2 --reporter=dot"
],
"testFiles": [
@@ -12314,8 +12195,7 @@
"src/main/ai-vault/session-title-file-reader.test.ts",
"src/main/ai-vault/session-parse-cache-persistence.test.ts",
"src/main/ipc/ai-vault.test.ts",
"src/main/runtime/rpc/methods/ai-vault.test.ts",
"src/relay/ai-vault-handler.test.ts"
"src/main/runtime/rpc/methods/ai-vault.test.ts"
],
"assertionRefs": [
{
@@ -12381,7 +12261,7 @@
"date": "2026-10-02",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/lib/ai-vault-tab-title-sync.test.ts src/main/ai-vault/session-scanner-service-client.test.ts src/main/ai-vault/session-title-file-reader.test.ts src/main/ai-vault/session-parse-cache-persistence.test.ts src/main/ipc/ai-vault.test.ts src/main/runtime/rpc/methods/ai-vault.test.ts src/relay/ai-vault-handler.test.ts",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/lib/ai-vault-tab-title-sync.test.ts src/main/ai-vault/session-scanner-service-client.test.ts src/main/ai-vault/session-title-file-reader.test.ts src/main/ai-vault/session-parse-cache-persistence.test.ts src/main/ipc/ai-vault.test.ts src/main/runtime/rpc/methods/ai-vault.test.ts",
"result": "passed",
"durationSeconds": 5.3,
"summary": "The focused run passed 138 tests across 7 files, proving exact-title-only renderer requests, provider-isolated batching, per-lane scanner-service lifecycle and fault recovery, exact transcript identity, host routing, mixed-version degradation, and zero broad-scan fallback."
@@ -12541,20 +12421,18 @@
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-pending-projection-admissions.test.ts src/main/ipc/ssh-pty-legacy-projection.test.ts src/main/ipc/ssh-pty-model-admission.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime-path-candidate-history.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/orca-runtime-tail-wait-memo.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/providers/ssh-pty-provider.test.ts src/main/providers/ssh-pty-source-delivery-ledger.test.ts src/wsl-guest/protocol-backpressure.test.ts src/relay/pty-source-credit-ledger.test.ts src/relay/pty-source-credit-scheduler.test.ts src/relay/relay-pty-source-publication.test.ts src/relay/ssh-pty-source-credit-adapter.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/providers/ssh-pty-provider.test.ts src/main/providers/ssh-pty-source-delivery-ledger.test.ts src/wsl-guest/protocol-backpressure.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/ssh-pty-model-admission.test.ts src/main/ipc/ssh-pty-output-model-migration.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/relay/git-response-stream-ownership.test.ts src/relay/pty-handler-output-streaming.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-provider-agent-session-create-operation.test.ts src/main/providers/ssh-pty-provider-exit-race.test.ts src/main/providers/ssh-pty-provider-reattach-incarnation.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-pty-source-recovery-interleavings.test.ts src/relay/relay-pty-source-recovery-completion.test.ts src/relay/relay-pty-source-restore-retry.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/wsl-guest/dispatcher.test.ts src/relay/pty-handler-source-publication.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/wsl-guest/dispatcher.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/ssh-pty-legacy-projection.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/ssh-pty-remote-source-range-consumers.test.ts src/main/runtime/rpc/terminal-source-range-ledger.test.ts src/main/runtime/rpc/terminal-multiplex-source-range-admission.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/shared/pty-consumer-session.test.ts src/main/ipc/ssh-pty-output-intake.test.ts src/main/ipc/ssh-pty-output-exit-deadline.test.ts src/main/ipc/ssh-pty-remote-source-range-consumers.test.ts src/main/runtime/rpc/terminal-multiplex-source-range-admission.test.ts src/main/ssh/ssh-multiplexer-transport-writer.test.ts src/main/ssh/ssh-channel-multiplexer.test.ts src/wsl-guest/dispatcher-client-writer.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/shared/pty-consumer-session.test.ts src/main/ipc/ssh-pty-output-intake.test.ts src/main/ipc/ssh-pty-output-generation-guard.test.ts src/main/ipc/ssh-pty-output-exit-deadline.test.ts src/main/ipc/ssh-pty-remote-source-range-consumers.test.ts src/main/runtime/rpc/terminal-multiplex-source-range-admission.test.ts src/main/ssh/ssh-multiplexer-transport-writer.test.ts src/main/ssh/ssh-channel-multiplexer.test.ts src/main/ssh/ssh-channel-multiplexer-backpressure.test.ts src/wsl-guest/dispatcher-client-writer.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-pty-source-restore-retry.test.ts src/main/runtime/rpc/terminal-source-range-ledger.test.ts src/main/runtime/rpc/terminal-multiplex-source-range-admission.test.ts src/main/ssh/ssh-multiplexer-transport-writer.test.ts src/main/ssh/ssh-channel-multiplexer-backpressure.test.ts src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-source-delivery-ledger.test.ts src/main/providers/ssh-pty-provider-agent-session-create-operation.test.ts src/main/providers/ssh-pty-provider-exit-race.test.ts src/main/ipc/ssh-pty-output-exit-deadline.test.ts src/main/ipc/ssh-pty-remote-source-range-consumers.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/rpc/terminal-source-range-ledger.test.ts src/main/runtime/rpc/terminal-multiplex-source-range-admission.test.ts src/main/ssh/ssh-multiplexer-transport-writer.test.ts src/main/ssh/ssh-channel-multiplexer-backpressure.test.ts src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-source-delivery-ledger.test.ts src/main/providers/ssh-pty-provider-agent-session-create-operation.test.ts src/main/providers/ssh-pty-provider-exit-race.test.ts src/main/ipc/ssh-pty-output-exit-deadline.test.ts src/main/ipc/ssh-pty-remote-source-range-consumers.test.ts --reporter=dot",
"pnpm exec vitest run src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-provider-exit-race.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/relay/ssh-pty-consumer-session-adapter.test.ts src/main/persistence-ssh-targets-and-pane-keys.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-provider-reattach-incarnation.test.ts src/relay/relay-pty-source-recovery-interleavings.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/persistence-ssh-targets-and-pane-keys.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-provider-reattach-incarnation.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/agent-hooks/wsl-hook-relay-sentinel.test.ts --reporter=dot"
// Historical evidence commands; the override is ignored after the always-on transition.
],
@@ -12575,17 +12453,7 @@
"src/main/providers/ssh-pty-provider-exit-race.test.ts",
"src/main/providers/ssh-pty-provider-reattach-incarnation.test.ts",
"src/wsl-guest/protocol-backpressure.test.ts",
"src/relay/git-response-stream-ownership.test.ts",
"src/relay/pty-handler-output-streaming.test.ts",
"src/relay/pty-source-credit-ledger.test.ts",
"src/relay/pty-source-credit-scheduler.test.ts",
"src/relay/relay-pty-source-publication.test.ts",
"src/relay/relay-pty-source-recovery-interleavings.test.ts",
"src/relay/relay-pty-source-recovery-completion.test.ts",
"src/relay/relay-pty-source-restore-retry.test.ts",
"src/wsl-guest/dispatcher.test.ts",
"src/relay/pty-handler-source-publication.test.ts",
"src/relay/ssh-pty-source-credit-adapter.test.ts",
"src/shared/pty-consumer-session.test.ts",
"src/main/ipc/ssh-pty-model-admission.test.ts",
"src/main/ipc/ssh-pty-output-intake.test.ts",
@@ -12701,66 +12569,12 @@
"retired per-target source-credit selections are removed during normalization"
]
},
{
"file": "src/relay/pty-source-credit-ledger.test.ts",
"assertions": [
"an exact early cumulative ACK reserves eligibility without advancing credit before send settlement and survives only an exact same-token retry",
"source retention charges max UTF-8 or UTF-16 storage plus one record",
"fragmented multi-PTY source, charged-byte, and frame caps bind independently"
]
},
{
"file": "src/relay/pty-source-credit-scheduler.test.ts",
"assertions": [
"one rejecting delivery is removed after one reservation attempt while prior and later peer reservations remain committed without head-of-line blocking"
]
},
{
"file": "src/relay/git-response-stream-ownership.test.ts",
"assertions": [
"an 8-byte encoded producer capacity emits exactly two 6-byte payload chunks and one end call while the first bulk write is saturated"
]
},
{
"file": "src/relay/pty-handler-output-streaming.test.ts",
"assertions": [
"a fresh plain pending entry after transformed source-only output omits inherited rawLength and completes in exactly three admission calls"
]
},
{
"file": "src/wsl-guest/dispatcher.test.ts",
"assertions": [
"a saturated legacy primary remains required backpressure and is never detached as an additional subscriber"
]
},
{
"file": "src/relay/pty-handler-source-publication.test.ts",
"assertions": [
"immutable spawn and attach activation identity settles before the first source frame in the response/data interleaving",
"one saturated additional subscriber is bounded and detached without pausing the native PTY or negotiated owner"
]
},
{
"file": "src/relay/relay-pty-source-recovery-interleavings.test.ts",
"assertions": [
"failed exit publication retains sealed delivery for late cumulative ACK and exact token recovery",
"exact owner recovery republishes exit without reopening source admission",
"a failed recovery-completion frame rolls back its fence and the next exact owner republishes it before live admission",
"failed activation response retains private retry authority, and exact retry clears activation only after successful settlement"
]
},
{
"file": "src/relay/relay-pty-source-recovery-completion.test.ts",
"assertions": [
"unadmitted recovery completion retries once writer capacity returns, stays single-flight, and releases its bounded capacity listener"
]
},
{
"file": "src/relay/relay-pty-source-restore-retry.test.ts",
"assertions": [
"invalid-checkpoint cancellation retains the exact delivery until restore response settlement, then retry mints a fresh activation and emits one live source frame"
]
},
{
"file": "src/wsl-guest/protocol-backpressure.test.ts",
"assertions": [
@@ -12916,20 +12730,11 @@
"date": "2026-07-29",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/providers/ssh-pty-provider.test.ts src/main/providers/ssh-pty-source-delivery-ledger.test.ts src/wsl-guest/protocol-backpressure.test.ts src/relay/pty-source-credit-ledger.test.ts src/relay/pty-source-credit-scheduler.test.ts src/relay/relay-pty-source-publication.test.ts src/relay/ssh-pty-source-credit-adapter.test.ts --reporter=dot",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/providers/ssh-pty-provider.test.ts src/main/providers/ssh-pty-source-delivery-ledger.test.ts src/wsl-guest/protocol-backpressure.test.ts --reporter=dot",
"result": "passed",
"durationSeconds": 2.24,
"summary": "Sixteen deterministic SSH relay/session/source/decoder files passed 192 tests, including exit-sealed private recovery, retained stale-transfer cancellation authority, exact private-frame proof watermarks, one retirement record across 10,000 same-PTY token rotations, stale-owner fallback, and scheduler rejection isolation; no live topology was exercised."
},
{
"date": "2026-07-29",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/relay/git-response-stream-ownership.test.ts src/relay/pty-handler-output-streaming.test.ts --reporter=dot",
"result": "passed",
"durationSeconds": 11.81,
"summary": "Two deterministic relay stream and PTY batching files passed 120 tests, including exact encoded chunk capacity and transformed-to-plain metadata isolation."
},
{
"date": "2026-07-28",
"runner": "local",
@@ -12943,7 +12748,7 @@
"date": "2026-07-29",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-pty-source-restore-retry.test.ts src/main/runtime/rpc/terminal-source-range-ledger.test.ts src/main/runtime/rpc/terminal-multiplex-source-range-admission.test.ts src/main/ssh/ssh-multiplexer-transport-writer.test.ts src/main/ssh/ssh-channel-multiplexer-backpressure.test.ts src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-source-delivery-ledger.test.ts src/main/providers/ssh-pty-provider-agent-session-create-operation.test.ts src/main/providers/ssh-pty-provider-exit-race.test.ts src/main/ipc/ssh-pty-output-exit-deadline.test.ts src/main/ipc/ssh-pty-remote-source-range-consumers.test.ts --reporter=dot",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/rpc/terminal-source-range-ledger.test.ts src/main/runtime/rpc/terminal-multiplex-source-range-admission.test.ts src/main/ssh/ssh-multiplexer-transport-writer.test.ts src/main/ssh/ssh-channel-multiplexer-backpressure.test.ts src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-source-delivery-ledger.test.ts src/main/providers/ssh-pty-provider-agent-session-create-operation.test.ts src/main/providers/ssh-pty-provider-exit-race.test.ts src/main/ipc/ssh-pty-output-exit-deadline.test.ts src/main/ipc/ssh-pty-remote-source-range-consumers.test.ts --reporter=dot",
"result": "passed",
"durationSeconds": 6.89,
"summary": "Thirteen current-head deterministic files passed 150 tests across exit-sealed private recovery, stale-transfer cancellation authority, bounded latest-token retirement, restore retirement, fail-closed recovery cancellation, partial ACK and token rotation, reclaimed-span replacement, mux lane fairness, provisional activation, and exit-proof ordering; no live topology was exercised."
@@ -12961,7 +12766,7 @@
"date": "2026-07-28",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-provider-reattach-incarnation.test.ts src/relay/relay-pty-source-recovery-interleavings.test.ts --reporter=dot",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/providers/ssh-pty-notification-routing.test.ts src/main/providers/ssh-pty-provider-reattach-incarnation.test.ts --reporter=dot",
"result": "passed",
"durationSeconds": 1.63,
"summary": "Five deterministic provider, relay, deploy, and session files passed 70 tests after red seams proved that source frames mutated legacy incarnation state and generic restore-required reattach returned an outputless live PTY. The candidate keeps exact source identity side-effect free, fails generic restore-required reattach as expired, offers V1 through reconnect, and proves a failed recovery activation stays private and exact-retryable until successful response settlement; no live topology was exercised."
@@ -18418,24 +18223,20 @@
"oracle": "Fill the global watcher-child reservation, require native desktop, paired-runtime, and WSL setup to retain typed transient capacity and retry after one serialized release, then cancel pending desktop and paired-client watches and require no retry. Hold one live anchor while aborting 10,000 callers at the capacity, quarantine-assignment, runtime-root, relay-setup, and SSH-registration layers; require exactly one explicit waiter and one base-promise reaction to remain, then zero after settlement. Hold an old relay unsubscribe, queue one same-root setup leader and one anchor, then abort 10,000 joiners; require every cancellation to settle before teardown releases, exactly one anchor waiter, and only one later physical install. Advance the former paired-web callback deadline while capacity remains full, require cancellation ownership to stay live, publish the server token before ready, and require files.unwatch to abort setup before a later slot release can install a native root. Reject the first ready-watch unwatch with a physical-exit promise, resolve that exit later, and require a fresh physical unwatch attempt, registry release, and exactly one stream end. Fill one healthy shared child with multiple roots, map a standard SSH repository's base, Git common directory, and worktree roots to one relay supervisor, then inject IPC disconnect-before-exit, queued and active cancellation, operations during termination, kill-without-exit, repeated unkillable generations, initial and recovery timeouts, and shard failure. During local and SSH deletion, attempt a late terminal spawn whose worktree identity and cwd name different roots, enumerate a non-prefix remote PTY by authoritative worktree ownership, withhold daemon/relay exit callbacks, make attach positively prove a concurrent-shutdown PID dead, and make the provider unavailable; require every acquired admission to roll back on rejection, dead-PID proof to settle physical exit before reaping, timeout to retain ownership, and Git/filesystem deletion never to start. Require bounded watcher process count, physical-exit settlement, healthy-root recovery, stale-generation rejection, overflow plus later events, and fail-closed destructive cleanup. Verify relay build hashes and remote install probes require both relay.js and relay-watcher.js. Launch the built relay with a real PTY and Parcel watch, kill only the watcher child, and require the same relay PID and PTY to answer before a replacement child delivers overflow and a post-crash event.",
"commands": [
"pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/rpc/methods/files-watch-cleanup.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-watcher-pending-setup-waiters.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-watcher-parent-removal.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-unsubscribe-timeout.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/filesystem-watcher-native-capacity.test.ts src/main/ipc/parcel-watcher-child-registry.test.ts src/main/ipc/parcel-watcher-child-launch.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-supervisor-capacity-wait.test.ts src/main/ipc/parcel-watcher-supervisor-capacity.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-pending-assignment.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/main/runtime/rpc/methods/files-watch-cancellation.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/shared/physical-exit-tracker.test.ts src/shared/promise-settlement-waiters.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/relay-watcher-setup-wait.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/filesystem-watcher-native-capacity.test.ts src/main/ipc/parcel-watcher-child-registry.test.ts src/main/ipc/parcel-watcher-child-launch.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-supervisor-capacity.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/main/runtime/rpc/methods/files-watch-cancellation.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/shared/physical-exit-tracker.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/filesystem-watcher-native-capacity.test.ts src/main/ipc/parcel-watcher-child-registry.test.ts src/main/ipc/parcel-watcher-child-launch.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-supervisor-capacity-wait.test.ts src/main/ipc/parcel-watcher-supervisor-capacity.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-pending-assignment.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/main/runtime/rpc/methods/files-watch-cancellation.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/shared/physical-exit-tracker.test.ts src/shared/promise-settlement-waiters.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/filesystem-watcher-native-capacity.test.ts src/main/ipc/parcel-watcher-child-registry.test.ts src/main/ipc/parcel-watcher-child-launch.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-supervisor-capacity.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/main/runtime/rpc/methods/files-watch-cancellation.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/shared/physical-exit-tracker.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts --reporter=dot",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts",
"pnpm run build:electron-vite",
"node config/scripts/runtime-file-watcher-resource-probe.mjs",
"node config/scripts/runtime-file-watcher-fault-harness.mjs",
"ELECTRON_RUN_AS_NODE=1 pnpm exec electron config/scripts/runtime-file-watcher-fault-harness.mjs",
"pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-watcher-setup-wait.test.ts src/relay/relay-filesystem-watch-registry.test.ts src/relay/fs-handler.test.ts src/relay/git-handler.test.ts src/relay/subprocess.test.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs",
"pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-filesystem-watch-registry.test.ts src/relay/fs-handler.test.ts src/relay/git-handler.test.ts src/relay/subprocess.test.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs",
"pnpm run build:relay",
"node config/scripts/relay-watcher-fault-harness.mjs"
"pnpm exec vitest run --config config/vitest.config.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs",
"pnpm exec vitest run --config config/vitest.config.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs"
],
"testFiles": [
"src/main/daemon/daemon-pty-adapter.test.ts",
@@ -18482,21 +18283,8 @@
"src/shared/promise-settlement-waiters.test.ts",
"config/scripts/runtime-file-watcher-fault-harness.mjs",
"config/scripts/runtime-file-watcher-resource-probe.mjs",
"src/relay/relay-filesystem-watch-registry.test.ts",
"src/relay/relay-watcher-pending-setup-waiters.test.ts",
"src/relay/relay-watcher-parent-removal.test.ts",
"src/relay/relay-watcher-setup-wait.test.ts",
"src/relay/fs-handler.test.ts",
"src/relay/pty-handler-dispose-lifecycle.test.ts",
"src/relay/pty-handler-shutdown-signals.test.ts",
"src/relay/pty-handler-spawn-admission.test.ts",
"src/relay/pty-handler-attach-replay.test.ts",
"src/relay/pty-handler-revive.test.ts",
"src/relay/git-handler.test.ts",
"src/relay/subprocess.test.ts",
"src/main/ssh/ssh-relay-versioned-install.test.ts",
"config/scripts/package-electron-runtime-contract.test.mjs",
"config/scripts/relay-watcher-fault-harness.mjs"
"config/scripts/package-electron-runtime-contract.test.mjs"
],
"assertionRefs": [
{
@@ -18815,72 +18603,6 @@
"a later same-root listener opens a fresh server subscription instead of reusing a dead stream"
]
},
{
"file": "src/relay/relay-watcher-parent-removal.test.ts",
"assertions": [
"POSIX and Windows parent deletion closes and terminally notifies descendant watches before removal while preserving path siblings",
"parent deletion waits for descendant setup publication and already-retiring descendant teardown before removal"
]
},
{
"file": "src/relay/relay-watcher-pending-setup-waiters.test.ts",
"assertions": [
"10,000 aborted relay setup callers detach while one same-root teardown anchor remains and only one replacement installs"
]
},
{
"file": "src/relay/relay-watcher-setup-wait.test.ts",
"assertions": [
"10,000 cancelled relay setup callers leave exactly one explicit anchor and one base-promise reaction"
]
},
{
"file": "src/relay/relay-filesystem-watch-registry.test.ts",
"assertions": [
"each SSH host keeps its own healthy watcher supervisor while a standard repository's three distinct roots share that one child",
"shared-child failure moves those roots into separate quarantine supervisors with overflow and resumed events",
"replacement emits overflow before later ordered events",
"terminal shard failure preserves same-root clients through recovery",
"pending setup aborts only after the last same-root client leaves",
"relay-side removal sends every client a terminal failure, closes every watch, and fences new same-root watcher or PTY setup even when deletion fails",
"a missing child fails closed even if the relay inherits a VITEST environment"
]
},
{
"file": "src/relay/fs-handler.test.ts",
"assertions": [
"shared watches retain the twenty-root budget and release after every client leaves",
"recursive relay deletion closes and terminally notifies same-root watches before removing the directory"
]
},
{
"file": "src/relay/pty-handler-dispose-lifecycle.test.ts",
"assertions": [
"immediate relay shutdown stays pending with the PTY map entry retained until onExit",
"a missing exit rejects at the bounded deadline, preserves the physical owner, and a retry joins without duplicate SIGKILL",
"worktree removal waits explicit and default-cwd PTY creation, rejects later creation, and physically stops only authoritative matching PTYs before deletion"
]
},
{
"file": "src/relay/pty-handler-shutdown-signals.test.ts",
"assertions": [
"Windows relay graceful, fallback, immediate, stale-spawn, exit-dispose, and handler-dispose paths issue at most one ConPTY kill"
]
},
{
"file": "src/relay/pty-handler-spawn-admission.test.ts",
"assertions": [
"relay PTY admission succeeds when post-Node-18 array copy methods are unavailable",
"concurrent spawn and revive admission is atomic, capped at fifty physical PTYs, and same-id revive is deduplicated",
"relay spawn and revive fence distinct worktree-ID and cwd roots, rolling back earlier admissions in reverse when either root is removing"
]
},
{
"file": "src/relay/pty-handler-attach-replay.test.ts",
"assertions": [
"attach dead-PID proof settles a concurrent immediate shutdown before the stale PTY entry is reaped"
]
},
{
"file": "src/renderer/src/web/web-runtime-client.test.ts",
"assertions": [
@@ -18888,19 +18610,6 @@
"transient shared-socket loss replays an active file watch under a new transport id while preserving its logical handle and never revives a stopped watch"
]
},
{
"file": "src/relay/git-handler.test.ts",
"assertions": [
"remote Git worktree removal executes inside the relay filesystem watcher fence"
]
},
{
"file": "src/relay/subprocess.test.ts",
"assertions": [
"the real relay bundle serves PTY, filesystem, and Git requests with its adjacent watcher child",
"the Node-18-targeted relay bundle contains no unsupported array copy methods"
]
},
{
"file": "src/main/ssh/ssh-relay-versioned-install.test.ts",
"assertions": [
@@ -18927,13 +18636,6 @@
"the harness parent survives watcher-child SIGSEGV",
"the real supervisor automatically replaces the child, resubscribes, and delivers a post-crash event"
]
},
{
"file": "config/scripts/relay-watcher-fault-harness.mjs",
"assertions": [
"the built relay and existing PTY survive watcher-child fault injection",
"replacement emits overflow and a precise post-crash event"
]
}
],
"evidenceRuns": [
@@ -18941,7 +18643,7 @@
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/filesystem-watcher-native-capacity.test.ts src/main/ipc/parcel-watcher-child-registry.test.ts src/main/ipc/parcel-watcher-child-launch.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-supervisor-capacity-wait.test.ts src/main/ipc/parcel-watcher-supervisor-capacity.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-pending-assignment.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/main/runtime/rpc/methods/files-watch-cancellation.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/shared/physical-exit-tracker.test.ts src/shared/promise-settlement-waiters.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/relay-watcher-setup-wait.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts --reporter=dot",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/filesystem-watcher-native-capacity.test.ts src/main/ipc/parcel-watcher-child-registry.test.ts src/main/ipc/parcel-watcher-child-launch.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-supervisor-capacity-wait.test.ts src/main/ipc/parcel-watcher-supervisor-capacity.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-pending-assignment.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/main/runtime/rpc/methods/files-watch-cancellation.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/shared/physical-exit-tracker.test.ts src/shared/promise-settlement-waiters.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts --reporter=dot",
"result": "passed",
"durationSeconds": 11.98,
"summary": "Thirty-nine watcher, cancellation, desktop/serve, paired-web, WSL, SSH/relay, removal, and PTY physical-exit files passed with 2,008 tests. Capacity, quarantine, runtime-root, relay, and SSH setup layers each prove that 10,000 aborted callers detach while one anchor remains and zero waiters remain after settlement."
@@ -18950,7 +18652,7 @@
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/filesystem-watcher-native-capacity.test.ts src/main/ipc/parcel-watcher-child-registry.test.ts src/main/ipc/parcel-watcher-child-launch.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-supervisor-capacity.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/main/runtime/rpc/methods/files-watch-cancellation.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/shared/physical-exit-tracker.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts --reporter=dot",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/filesystem-watcher-native-capacity.test.ts src/main/ipc/parcel-watcher-child-registry.test.ts src/main/ipc/parcel-watcher-child-launch.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-supervisor-capacity.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/main/runtime/rpc/methods/files-watch-cancellation.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/shared/physical-exit-tracker.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/daemon-pty-adapter.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts --reporter=dot",
"result": "passed",
"durationSeconds": 11.59,
"summary": "Thirty-four watcher, cancellation, desktop/serve, paired-web, WSL, removal, PTY physical-exit, provider, renderer, and path files passed with 1,999 tests; paired-web cancellation now owns a server token before ready and aborts pending setup without a late native install."
@@ -18968,7 +18670,7 @@
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts --reporter=dot",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/filesystem-watcher.test.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/pty-subprocess.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts --reporter=dot",
"result": "passed",
"durationSeconds": 10.01,
"summary": "Twenty-seven watcher, WSL, desktop/serve removal, local/daemon/SSH PTY physical-exit, provider ownership, RPC, renderer, relay PTY admission, and cross-platform path files passed with 1,886 tests. The suite includes nested removal fencing, renderer/runtime cwd-only admission, legacy provider rows, rejected kill retries, transient WSL capacity, and synchronous-startup reservation cleanup."
@@ -18986,7 +18688,7 @@
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-filesystem-watch-registry.test.ts src/relay/fs-handler.test.ts src/relay/git-handler.test.ts src/relay/subprocess.test.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs",
"result": "passed",
"durationSeconds": 10.01,
"summary": "Six relay registry, filesystem/Git handler, bundled subprocess, install, and package contract files passed with 226 tests."
@@ -19022,25 +18724,7 @@
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm run build:relay",
"result": "passed",
"durationSeconds": 0.38,
"summary": "Relay and adjacent watcher artifacts built for Linux, macOS, and Windows on x64 and arm64, plus the WSL hook relay."
},
{
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "node config/scripts/relay-watcher-fault-harness.mjs",
"result": "passed",
"durationSeconds": 0.12,
"summary": "The relay and existing PTY survived watcher-child SIGSEGV; replacement delivered overflow and a precise post-crash event."
},
{
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/providers/local-pty-provider-shutdown.test.ts src/main/providers/local-pty-provider-session-inventory.test.ts src/main/daemon/session.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts",
"result": "passed",
"durationSeconds": 9.12,
"summary": "Twenty-five watcher, WSL, desktop/serve removal, local/daemon/SSH PTY physical-exit, provider ownership, RPC, renderer, relay PTY admission, and cross-platform path files passed with 1,762 tests. The suite covers operations joining in-flight termination, kill failures retaining ownership, bounded timeouts, atomic relay spawn/revive caps, and PTY-removal admission."
@@ -19058,7 +18742,7 @@
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-filesystem-watch-registry.test.ts src/relay/fs-handler.test.ts src/relay/git-handler.test.ts src/relay/subprocess.test.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs",
"result": "passed",
"durationSeconds": 10.69,
"summary": "Six relay registry, filesystem/Git handler, bundled subprocess, install, and package contract files passed with 226 tests, including watcher/PTY removal fencing and recursive deletion failure behavior."
@@ -19094,25 +18778,7 @@
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm run build:relay",
"result": "passed",
"durationSeconds": 0.39,
"summary": "Relay and adjacent watcher artifacts built for Linux, macOS, and Windows on x64 and arm64, plus the WSL hook relay."
},
{
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "node config/scripts/relay-watcher-fault-harness.mjs",
"result": "passed",
"durationSeconds": 0.12,
"summary": "The relay and existing PTY survived watcher-child SIGSEGV; replacement delivered overflow and a precise post-crash event."
},
{
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts src/relay/pty-handler-dispose-lifecycle.test.ts src/relay/pty-handler-shutdown-signals.test.ts src/relay/pty-handler-spawn-admission.test.ts src/relay/pty-handler-attach-replay.test.ts src/relay/pty-handler-revive.test.ts",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/parcel-watcher-process.test.ts src/main/ipc/parcel-watcher-disconnect-termination.test.ts src/main/ipc/runtime-watcher-process-pool.test.ts src/main/ipc/parcel-watcher-process-entry.test.ts src/main/ipc/parcel-watcher-event-delivery.test.ts src/main/ipc/filesystem-watcher-local-unsubscribe.test.ts src/main/ipc/filesystem-watcher-wsl.test.ts src/main/ipc/worktrees-delete-pty-teardown.test.ts src/main/ipc/worktrees-orphan-directory-cleanup.test.ts src/main/ipc/worktrees-remove-preflight.test.ts src/main/ipc/worktrees-remove-archive-hooks.test.ts src/main/ipc/watcher-removal-gate.test.ts src/main/runtime/file-watcher-host.test.ts src/main/runtime/orca-runtime-files-watch.test.ts src/main/runtime/worktree-teardown.test.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/rpc/methods/files.test.ts src/renderer/src/runtime/runtime-file-client.test.ts src/renderer/src/web/web-runtime-client.test.ts src/shared/cross-platform-path.test.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-listener-teardown-and-orphans.test.ts src/main/daemon/terminal-host.test.ts src/main/daemon/terminal-host-session-reaping-leak.test.ts src/main/providers/ssh-pty-provider.test.ts",
"result": "passed",
"durationSeconds": 9.03,
"summary": "Twenty-three watcher, desktop/serve removal, terminal-spawn gate, daemon/SSH physical PTY exit, provider ownership, RPC, renderer, and cross-platform path files passed with 1,630 tests. The suite includes same-turn watcher replacement, authoritative SSH teardown before Git, bounded kill-without-exit failures that retain ownership, and local/SSH deletion fail-closed behavior."
@@ -19130,20 +18796,11 @@
"date": "2026-07-13",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/relay/relay-filesystem-watch-registry.test.ts src/relay/fs-handler.test.ts src/relay/git-handler.test.ts src/relay/subprocess.test.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ssh/ssh-relay-versioned-install.test.ts config/scripts/package-electron-runtime-contract.test.mjs",
"result": "passed",
"durationSeconds": 9.79,
"summary": "Six relay registry, filesystem/Git handler, bundled subprocess, install, and package contract files passed with 225 tests, including terminal removal notification and recursive deletion fencing."
},
{
"date": "2026-07-12",
"runner": "local",
"platform": "macos",
"command": "node config/scripts/relay-watcher-fault-harness.mjs",
"result": "passed",
"durationSeconds": 0.61,
"summary": "The relay PID and existing PTY survived watcher-child SIGSEGV; overflow and precise events resumed from a replacement child."
},
{
"date": "2026-07-13",
"runner": "local",
@@ -19232,12 +18889,9 @@
"invariant": "terminal.sendText accepts only an explicit provider-owned terminal id present in one bounded inventory of the worktree resolved immediately before the send; an absent id causes zero send calls, and relay callers cannot supply their own capability grants or transport classification.",
"oracle": "Resolve the active worktree once, list that worktree with the v0 terminal cap once, and assert zero sendTerminal calls for a mismatched opaque id versus exactly one send for matching local- and SSH-shaped ids; then run the same permission and schema cases through desktop-main and registered relay panel/worker adapters and compare error codes.",
"commands": [
"pnpm exec vitest run --config config/vitest.config.ts src/main/plugins/plugin-host-methods.test.ts src/main/plugins/plugin-host-conformance.test.ts"
],
"testFiles": [
"src/main/plugins/plugin-host-methods.test.ts",
"src/main/plugins/plugin-host-conformance.test.ts"
"pnpm exec vitest run --config config/vitest.config.ts src/main/plugins/plugin-host-methods.test.ts"
],
"testFiles": ["src/main/plugins/plugin-host-methods.test.ts"],
"assertionRefs": [
{
"file": "src/main/plugins/plugin-host-methods.test.ts",
@@ -19246,14 +18900,6 @@
"matching local- and SSH-shaped opaque ids each perform one capped list and one exact send",
"workspace.readContext drops provider paths, path-bearing internal worktree ids, and terminal titles while capping its terminal projection"
]
},
{
"file": "src/main/plugins/plugin-host-conformance.test.ts",
"assertions": [
"all 13 v0 methods succeed with the required consented capability through desktop-main and relay adapters",
"missing consent, missing capability, unknown method, malformed params, panel-forbidden access, malformed results, and mutation-audit failure return identical codes",
"malformed qualified keys, client-supplied grants, and client-supplied transport flags are rejected before host policy resolution"
]
}
],
"evidenceRuns": [
@@ -19261,7 +18907,7 @@
"date": "2026-07-10",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/plugins/plugin-host-methods.test.ts src/main/plugins/plugin-host-conformance.test.ts",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/main/plugins/plugin-host-methods.test.ts",
"result": "passed",
"durationSeconds": 0.18,
"summary": "2 files and 17 tests passed, covering the 13-method main/relay conformance matrix and exact terminal routing call counts."
@@ -19794,88 +19440,6 @@
],
"demotionRule": "Keep experimental or demote if any case terminates on a signal, the preconditions stop holding on the CI runner, or an assertion can be satisfied by anything other than the command's own output."
},
{
"id": "ssh-managed-hooks.node18-runtime-compatibility",
"title": "SSH managed-hook companions load and install hooks on Node 18",
"maturity": "experimental",
"protection": "partial",
"owner": "agent-hooks",
"layer": "ssh-relay-companion-runtime",
"surfaces": [
"SSH managed-hook companion startup",
"remote Codex hook installation",
"remote Claude hook installation"
],
"platforms": ["macos", "linux", "windows"],
"providers": ["ssh"],
"coveredPlatforms": ["macos"],
"coveredProviders": ["ssh"],
"coverageNotes": "A real Node 18 process loads every platform's built companion and runs the bundled Codex and Claude installers against an isolated temporary home. The six artifacts share one platform-neutral source bundle; live SSH transport and physical remote hosts remain uncollected.",
"motivatingLinks": ["https://github.com/stablyai/orca/pull/12617"],
"invariant": "Every managed-hook companion shipped for Node 18 must load before agent installers execute, and importing desktop-only state inspection must not make unrelated remote installers depend on node:sqlite.",
"oracle": "Build all relay artifacts, require each managed-hook-runtime.js in a real Node 18 process, assert its installer export, then install only Codex and Claude into a fresh temporary home. Require two successful installer results, executable hook scripts, and both agent configs to reference their managed scripts without touching the user's home.",
"commands": [
"pnpm run build:relay && npx -y node@18 config/scripts/smoke-managed-hook-runtime-node18.mjs",
"pnpm exec vitest run --config config/vitest.config.ts config/scripts/pr-workflow-parallelism.test.mjs"
],
"testFiles": [
"config/scripts/smoke-managed-hook-runtime-node18.mjs",
"config/scripts/pr-workflow-parallelism.test.mjs"
],
"assertionRefs": [
{
"file": "config/scripts/smoke-managed-hook-runtime-node18.mjs",
"assertions": [
"all six built companions load and export installManagedHooks under Node 18",
"Codex and Claude installations both succeed in an isolated home",
"both generated configs reference executable managed hook scripts"
]
},
{
"file": "config/scripts/pr-workflow-parallelism.test.mjs",
"assertions": [
"PR CI builds the companions before switching to Node 18 and running the smoke oracle"
]
}
],
"evidenceRuns": [
{
"date": "2026-08-08",
"runner": "local",
"platform": "macos",
"result": "passed",
"command": "pnpm run build:relay && npx -y node@18 config/scripts/smoke-managed-hook-runtime-node18.mjs",
"durationSeconds": 4,
"summary": "All six companions loaded under Node 18.20.8; Codex and Claude produced two successful results, executable hook scripts, and managed configs in a temporary home."
}
],
"runtimeBudget": {
"p95Seconds": 30,
"scope": "six built-companion loads plus two isolated local-filesystem installer executions"
},
"flakeHistory": {
"status": "not-started",
"evidence": "New deterministic artifact smoke with no timing oracle; CI history is not yet available."
},
"redGreenEvidence": {
"status": "complete",
"evidence": "On main de4f272b31, the same Node 18 require exited 1 before exports with ERR_UNKNOWN_BUILTIN_MODULE for node:sqlite. The candidate passes all six loads and both installers; restoring the eager node:sqlite value import reproduces the original exit."
},
"performanceBudget": {
"required": false,
"evidence": "The product change replaces one eager built-in import with a constructor-time built-in lookup. It adds no polling, IPC, filesystem scan, subprocess, listener, or recurring work."
},
"promotionCriteria": [
"Collect 100 consecutive focused CI passes or 14 days of soak history.",
"Collect one live SSH install on Linux and one on Windows OpenSSH.",
"Keep all-platform load, selected installer, isolated-home, and workflow-order assertions green."
],
"knownGaps": [
"The artifact journey uses local filesystem calls rather than a live SSH transport.",
"Platform-named bundles are loaded on macOS locally; physical Linux and Windows evidence is not yet recorded."
],
"demotionRule": "Demote if any shipped companion stops loading on Node 18, selected installers mutate outside the isolated home, or the CI lane no longer runs the built artifact with Node 18."
},
{
"id": "terminal-history.daemon-checkpoint-session-isolation",
"title": "Daemon history checkpoints isolate stalled terminal sessions",
@@ -20002,17 +19566,12 @@
"commands": [
"pnpm exec vitest run --config config/vitest.config.ts src/main/skills/skill-upload-session-service.test.ts --reporter=verbose",
"ORCA_REAL_PROCESS_SKILL_TEST=1 pnpm exec vitest run --config config/vitest.config.ts src/main/skills/skill-upload-process-restart.integration.test.ts src/main/skills/skill-upload-process-restart-child.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"pnpm exec vitest run --config config/vitest.config.ts src/relay/skill-upload-multi-relay.integration.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"ORCA_REAL_PROCESS_SKILL_TEST=1 pnpm exec vitest run --config config/vitest.config.ts src/main/skills/skill-upload-session-service.test.ts src/main/skills/skill-upload-process-restart.integration.test.ts src/main/skills/skill-upload-process-restart-child.test.ts src/relay/skill-upload-multi-relay.integration.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"ORCA_SKILL_UPLOAD_LEGACY_RELAY_ENTRY=<fa9b20cb4163-relay.js> pnpm exec vitest run --config config/vitest.config.ts src/relay/skill-upload-multi-relay.integration.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"ORCA_SKILL_UPLOAD_RELAY_ENTRY=<fa9b20cb4163-relay.js;sha256=4db8609c4e1772f1efa9b0c0cf6affa8f64ff9ebc8e2b6f9e71678992ccdcf1a> pnpm exec vitest run --config config/vitest.config.ts src/relay/skill-upload-multi-relay.integration.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"ORCA_SKILL_UPLOAD_RELAY_ENTRY=<012e9f410c-fix-reverted-relay.js;sha256=ca03bf47d93828ec30473391b542d945df887b7881cce3df17e95d90226e34fb> pnpm exec vitest run --config config/vitest.config.ts src/relay/skill-upload-multi-relay.integration.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose"
"ORCA_REAL_PROCESS_SKILL_TEST=1 pnpm exec vitest run --config config/vitest.config.ts src/main/skills/skill-upload-session-service.test.ts src/main/skills/skill-upload-process-restart.integration.test.ts src/main/skills/skill-upload-process-restart-child.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose"
],
"testFiles": [
"src/main/skills/skill-upload-session-service.test.ts",
"src/main/skills/skill-upload-process-restart.integration.test.ts",
"src/main/skills/skill-upload-process-restart-child.test.ts",
"src/relay/skill-upload-multi-relay.integration.test.ts"
"src/main/skills/skill-upload-process-restart-child.test.ts"
],
"assertionRefs": [
{
@@ -20035,14 +19594,6 @@
"begun, partial, uploaded, and committed crash residue is reclaimed",
"the replacement transfer completes and leaves no owner directory"
]
},
{
"file": "src/relay/skill-upload-multi-relay.integration.test.ts",
"assertions": [
"two bundled relay PIDs retain separate archives under one account home",
"current and originating relay bundles retain separate archives in both launch orders",
"relay cancellation and live-upload graceful shutdown clean only the exact owner"
]
}
],
"evidenceRuns": [
@@ -20051,36 +19602,9 @@
"runner": "local",
"platform": "macos",
"result": "passed",
"command": "ORCA_REAL_PROCESS_SKILL_TEST=1 pnpm exec vitest run --config config/vitest.config.ts src/main/skills/skill-upload-session-service.test.ts src/main/skills/skill-upload-process-restart.integration.test.ts src/main/skills/skill-upload-process-restart-child.test.ts src/relay/skill-upload-multi-relay.integration.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"command": "ORCA_REAL_PROCESS_SKILL_TEST=1 pnpm exec vitest run --config config/vitest.config.ts src/main/skills/skill-upload-session-service.test.ts src/main/skills/skill-upload-process-restart.integration.test.ts src/main/skills/skill-upload-process-restart-child.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"durationSeconds": 5.95,
"summary": "Fifteen service tests, four crash-boundary cases, and one two-current-relay topology passed; the child fixture and two explicitly separate mixed-version cases skipped."
},
{
"date": "2026-08-20",
"runner": "local",
"platform": "macos",
"result": "passed",
"command": "ORCA_SKILL_UPLOAD_LEGACY_RELAY_ENTRY=<fa9b20cb4163-relay.js> pnpm exec vitest run --config config/vitest.config.ts src/relay/skill-upload-multi-relay.integration.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"durationSeconds": 0.9,
"summary": "The current/current case and both originating/current mixed-version launch orders passed with exact per-root archive bytes."
},
{
"date": "2026-08-20",
"runner": "local",
"platform": "macos",
"result": "failed",
"command": "ORCA_SKILL_UPLOAD_RELAY_ENTRY=<fa9b20cb4163-relay.js;sha256=4db8609c4e1772f1efa9b0c0cf6affa8f64ff9ebc8e2b6f9e71678992ccdcf1a> pnpm exec vitest run --config config/vitest.config.ts src/relay/skill-upload-multi-relay.integration.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"durationSeconds": 0.4,
"summary": "Expected red: zero PID/UUID owner directories and one archive were observed where two each were required; relay A's exact first five bytes were missing."
},
{
"date": "2026-08-20",
"runner": "local",
"platform": "macos",
"result": "failed",
"command": "ORCA_SKILL_UPLOAD_RELAY_ENTRY=<012e9f410c-fix-reverted-relay.js;sha256=ca03bf47d93828ec30473391b542d945df887b7881cce3df17e95d90226e34fb> pnpm exec vitest run --config config/vitest.config.ts src/relay/skill-upload-multi-relay.integration.test.ts --pool=forks --maxWorkers=1 --no-file-parallelism --reporter=verbose",
"durationSeconds": 0.4,
"summary": "Expected red: zero PID/UUID owner directories and one archive were observed where two each were required; relay A's exact first five bytes were missing."
}
],
"runtimeBudget": {
config/scripts/benchmark-sentinel-retention.mjs
-72
View File
@@ -1,72 +0,0 @@
import { strict as assert } from 'node:assert'
import { EventEmitter } from 'node:events'
import { mkdtemp, rm } from 'node:fs/promises'
import { createRequire } from 'node:module'
import { tmpdir } from 'node:os'
import { join, resolve } from 'node:path'
import { build } from 'esbuild'
if (!global.gc) {
throw new Error('Run with node --expose-gc')
}
const root = resolve(import.meta.dirname, '../..')
const directory = await mkdtemp(join(tmpdir(), 'orca-sentinel-retention-'))
const output = join(directory, 'sentinel.cjs')
try {
await build({
stdin: {
contents: `export {waitForSentinel} from './src/main/ssh/ssh-relay-deploy-helpers';
export {RELAY_SENTINEL} from './src/main/ssh/relay-protocol';`,
resolveDir: root,
loader: 'ts'
},
bundle: true,
platform: 'node',
format: 'cjs',
packages: 'external',
banner: {
js: `var require = require('node:module').createRequire(${JSON.stringify(join(root, 'package.json'))});`
},
outfile: output
})
const { waitForSentinel, RELAY_SENTINEL } = createRequire(import.meta.url)(output)
const held = []
const banners = []
for (let i = 0; i < 100; i++) {
const channel = Object.assign(new EventEmitter(), {
stderr: new EventEmitter(),
stdin: { write: () => true },
close: () => {}
})
const pending = waitForSentinel(channel)
banners.push(feedBanner(channel))
channel.emit('data', Buffer.from(RELAY_SENTINEL))
const transport = await pending
const received = []
transport.onData((bytes) => received.push(bytes.toString()))
channel.emit('data', Buffer.from('frame'))
assert.deepEqual(received, ['frame'])
held.push({ channel, transport })
}
await new Promise((resolve) => setImmediate(resolve))
for (let i = 0; i < 5; i++) {
global.gc()
}
const retained = banners.filter((reference) => reference.deref() !== undefined).length
console.log(
JSON.stringify({
connections: held.length,
bannerBytes: 65536,
retainedBannerBuffers: retained,
retainedBannerBytes: retained * 65536
})
)
} finally {
await rm(directory, { recursive: true, force: true })
}
function feedBanner(channel) {
const banner = Buffer.alloc(65536, 120)
channel.emit('data', banner)
return new WeakRef(banner.buffer)
}
config/scripts/build-relay.mjs
+42 -319
View File
@@ -1,349 +1,72 @@
#!/usr/bin/env node
/**
* Bundle the relay daemon and its crash-isolated watcher child per platform.
*
* The relay runs on remote hosts via `node relay.js`, so both outputs use
* self-contained CommonJS bundles with no external dependencies beyond
* Node.js built-ins. Native addons (node-pty, @parcel/watcher) are
* marked external and expected to be installed on the remote or
* gracefully degraded.
* Bundle the programs Orca runs inside WSL distros: the WSL agent-hook relay, the WSL browser
* network relay, the Claude profile helper, and the OpenCode SQLite reader. Each is a
* self-contained CommonJS bundle with only Node.js built-ins; the Windows app ships them from
* out/relay/wsl via the relay extraResources mapping.
*/
import { build } from 'esbuild'
import { JSONC_PARSER_ESM_ALIAS } from '../build-plugins/jsonc-parser-esm.ts'
import { createHash } from 'node:crypto'
import {
copyFileSync,
existsSync,
mkdirSync,
readdirSync,
readFileSync,
rmSync,
writeFileSync
} from 'node:fs'
import { mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
import { join } from 'node:path'
import {
RELAY_BUILD_PLATFORMS,
RELAY_VERSION_FILENAME,
RELAY_OPENCODE_SQLITE_READER_FILENAME,
WSL_CLAUDE_PROFILE_HELPER_FILENAME,
relayOptionalArtifactFilenames,
isWindowsRelayPlatform,
relayArtifactFilenames
WSL_CLAUDE_PROFILE_HELPER_FILENAME
} from '../../src/shared/relay-artifacts.ts'
import {
parseRequiredRelayAddonArches,
stageRelayWindowsProcessTreeAddon
} from './relay-windows-process-tree-staging.mjs'
const __dirname = import.meta.dirname
// Why: the script lives under config/scripts, so go two levels up to reach the repo root.
const ROOT = join(__dirname, '..', '..')
const RELAY_ENTRY = join(ROOT, 'src', 'relay', 'relay.ts')
const WATCHER_ENTRY = join(ROOT, 'src', 'main', 'ipc', 'parcel-watcher-process-entry.ts')
const AI_VAULT_SERVICE_ENTRY = join(ROOT, 'src', 'relay', 'ai-vault-service-entry.ts')
const OPENCODE_SQLITE_READER_ENTRY = join(
ROOT,
'src',
'main',
'ai-vault',
'session-scanner-opencode-sqlite-process-entry.ts'
)
const WSL_TRANSCRIPT_FS_PROCESS_ENTRY = join(
ROOT,
'src',
'main',
'native-chat',
'wsl-transcript-fs-process-entry.ts'
)
const MANAGED_HOOK_RUNTIME_ENTRY = join(
ROOT,
'src',
'main',
'agent-hooks',
'managed-hook-runtime.ts'
)
const NODE_PTY_CONSOLE_LIST_PATCH_FILENAME = 'node-pty-1.1.0-console-list-agent-patch.cjs'
const NODE_PTY_CONSOLE_LIST_PATCH_SOURCE = join(
ROOT,
'config',
'relay-assets',
NODE_PTY_CONSOLE_LIST_PATCH_FILENAME
)
const NODE_PTY_WINDOWS_TEARDOWN_PATCH_FILENAME = 'node-pty-1.1.0-windows-pty-teardown-patch.cjs'
const NODE_PTY_WINDOWS_TEARDOWN_PATCH_SOURCE = join(
ROOT,
'config',
'relay-assets',
NODE_PTY_WINDOWS_TEARDOWN_PATCH_FILENAME
)
const NODE_PTY_MASTER_CLOEXEC_PATCH_FILENAME = 'node-pty-1.1.0-master-cloexec-patch.cjs'
const NODE_PTY_MASTER_CLOEXEC_PATCH_SOURCE = join(
ROOT,
'config',
'relay-assets',
NODE_PTY_MASTER_CLOEXEC_PATCH_FILENAME
)
// Written by build-windows-process-tree-relay-addon.mjs on Windows, or downloaded
// from CI's relay-windows-process-tree artifact on other OSes.
const WINDOWS_PROCESS_TREE_BUILD_DIR = join(ROOT, '.build', 'windows-process-tree')
// Per-arch rather than a flag because arm64 needs the MSVC ARM64 cross toolset,
// an optional VS component: where it is absent that relay should fall back to
// the scan, not fail the release the x64 relay is riding on.
const REQUIRED_ADDON_ARCHES = parseRequiredRelayAddonArches(
process.env.ORCA_REQUIRE_RELAY_NATIVE_ADDONS
)
// Why: lets the packaging contract test build into a temp tree instead of
// clobbering a developer's out/relay or racing tests that read it.
// Why: lets a contract test build into a temp tree instead of clobbering a developer's out/relay.
const OUT_ROOT = process.env.ORCA_RELAY_OUT_ROOT ?? join(ROOT, 'out', 'relay')
const RELAY_VERSION = '0.1.0'
async function buildRelayBundles(outDir) {
await build({
entryPoints: [RELAY_ENTRY],
alias: JSONC_PARSER_ESM_ALIAS,
const outDir = join(OUT_ROOT, 'wsl')
// Why: the SSH relay's per-platform directories are gone; a stale one must not ship.
rmSync(OUT_ROOT, { recursive: true, force: true })
mkdirSync(outDir, { recursive: true })
const bundle = (entry, outfile, extra = {}) =>
build({
entryPoints: [join(ROOT, entry)],
bundle: true,
platform: 'node',
target: 'node18',
format: 'cjs',
outfile: join(outDir, 'relay.js'),
// Native addons cannot be bundled — they must exist on the remote host.
// The relay gracefully degrades when they are absent.
external: ['node-pty', '@parcel/watcher', 'electron'],
outfile: join(outDir, outfile),
sourcemap: false,
minify: true,
define: {
'process.env.NODE_ENV': '"production"'
}
define: { 'process.env.NODE_ENV': '"production"' },
...extra
})
await build({
entryPoints: [WATCHER_ENTRY],
bundle: true,
platform: 'node',
target: 'node18',
format: 'cjs',
outfile: join(outDir, 'relay-watcher.js'),
external: ['@parcel/watcher'],
sourcemap: false,
minify: true,
define: {
'process.env.NODE_ENV': '"production"'
}
})
await build({
entryPoints: [AI_VAULT_SERVICE_ENTRY],
bundle: true,
platform: 'node',
target: 'node18',
format: 'cjs',
outfile: join(outDir, 'relay-ai-vault-service.js'),
external: ['electron'],
sourcemap: false,
minify: true,
define: {
'process.env.NODE_ENV': '"production"'
}
})
await build({
entryPoints: [OPENCODE_SQLITE_READER_ENTRY],
bundle: true,
platform: 'node',
target: 'node18',
format: 'cjs',
outfile: join(outDir, RELAY_OPENCODE_SQLITE_READER_FILENAME),
external: ['electron'],
sourcemap: false,
minify: true,
define: { 'process.env.NODE_ENV': '"production"' }
})
// Why beside the service: the spawn resolves this child next to its own
// bundle, and a relay host has no desktop out/main to fall back to.
await build({
entryPoints: [WSL_TRANSCRIPT_FS_PROCESS_ENTRY],
bundle: true,
platform: 'node',
target: 'node18',
format: 'cjs',
outfile: join(outDir, 'wsl-transcript-fs-process-entry.js'),
external: ['electron'],
sourcemap: false,
minify: true,
define: {
'process.env.NODE_ENV': '"production"'
}
})
await build({
entryPoints: [MANAGED_HOOK_RUNTIME_ENTRY],
bundle: true,
platform: 'node',
target: 'node18',
format: 'cjs',
outfile: join(outDir, 'managed-hook-runtime.js'),
// Why: jsonc-parser's default UMD build keeps relative dynamic requires
// that break after bundling; its ESM entry is equivalent and self-contained.
alias: JSONC_PARSER_ESM_ALIAS,
sourcemap: false,
minify: true,
define: {
'process.env.NODE_ENV': '"production"'
}
})
}
let bundledSourceDir
let bundledFilenames = []
for (const platform of RELAY_BUILD_PLATFORMS) {
const outDir = join(OUT_ROOT, platform)
// Why: a stale companion left by an earlier build would otherwise satisfy the
// manifest check and be hashed into .version, shipping mixed-generation bytes.
rmSync(outDir, { recursive: true, force: true })
mkdirSync(outDir, { recursive: true })
// The JavaScript selects its host at runtime; only native addons and patches vary.
if (bundledSourceDir) {
for (const filename of bundledFilenames) {
copyFileSync(join(bundledSourceDir, filename), join(outDir, filename))
}
} else {
await buildRelayBundles(outDir)
bundledSourceDir = outDir
bundledFilenames = readdirSync(outDir)
}
if (isWindowsRelayPlatform(platform)) {
copyFileSync(
NODE_PTY_CONSOLE_LIST_PATCH_SOURCE,
join(outDir, NODE_PTY_CONSOLE_LIST_PATCH_FILENAME)
)
copyFileSync(
NODE_PTY_WINDOWS_TEARDOWN_PATCH_SOURCE,
join(outDir, NODE_PTY_WINDOWS_TEARDOWN_PATCH_FILENAME)
)
}
copyFileSync(
NODE_PTY_MASTER_CLOEXEC_PATCH_SOURCE,
join(outDir, NODE_PTY_MASTER_CLOEXEC_PATCH_FILENAME)
)
stageRelayWindowsProcessTreeAddon({
platform,
outDir,
buildDir: WINDOWS_PROCESS_TREE_BUILD_DIR,
requiredArches: REQUIRED_ADDON_ARCHES
})
// Why: include a content hash so the deploy check detects code changes even
// when RELAY_VERSION hasn't been bumped. Hashing the whole manifest means a
// companion-only change still selects a fresh immutable relay directory.
const expected = relayArtifactFilenames(isWindowsRelayPlatform(platform))
function stampVersion(bundleFile, versionFile) {
const hash = createHash('sha256')
for (const filename of expected) {
const artifactPath = join(outDir, filename)
if (!existsSync(artifactPath)) {
throw new Error(
`Relay ${platform} declares ${filename} in RELAY_ARTIFACTS but never emitted it. ` +
'Add the build step, or drop it from src/shared/relay-artifacts.ts.'
)
}
hash.update(readFileSync(artifactPath))
}
// Why hashed only when present: a relay carrying the native addon answers
// differently from one that falls back to the scan, so the two must not share
// an immutable directory -- but a build without it is still valid.
for (const filename of relayOptionalArtifactFilenames(isWindowsRelayPlatform(platform))) {
const artifactPath = join(outDir, filename)
if (existsSync(artifactPath)) {
hash.update(readFileSync(artifactPath))
}
}
const contentHash = hash.digest('hex').slice(0, 12)
// Close the loop: an artifact emitted here but absent from the manifest would
// ship unhashed and unprobed — exactly how the WSL helper went missing.
const emitted = readdirSync(outDir).filter((name) => name !== RELAY_VERSION_FILENAME)
const declared = [
...expected,
...relayOptionalArtifactFilenames(isWindowsRelayPlatform(platform))
]
const undeclared = emitted.filter((name) => !declared.includes(name))
if (undeclared.length > 0) {
throw new Error(
`Relay ${platform} emitted undeclared artifacts: ${undeclared.join(', ')}. ` +
'Add them to RELAY_ARTIFACTS in src/shared/relay-artifacts.ts.'
)
}
writeFileSync(join(outDir, RELAY_VERSION_FILENAME), `${RELAY_VERSION}+${contentHash}`)
console.log(`Built relay for ${platform} → ${outDir}/relay.js`)
}
// WSL agent-hook relay: a hooks-only guest receiver launched inside WSL
// distros via wsl.exe. Pure Node built-ins (no node-pty/@parcel/watcher),
// so a single platform-independent bundle suffices; it ships inside the
// Windows app via the same out/relay extraResources mapping.
{
const wslHookEntry = join(ROOT, 'src', 'wsl-guest', 'wsl-agent-hook-relay.ts')
const wslBrowserNetworkEntry = join(ROOT, 'src', 'wsl-guest', 'wsl-browser-network-relay.ts')
const outDir = join(OUT_ROOT, 'wsl')
mkdirSync(outDir, { recursive: true })
await build({
entryPoints: [wslHookEntry],
alias: JSONC_PARSER_ESM_ALIAS,
bundle: true,
platform: 'node',
target: 'node18',
format: 'cjs',
outfile: join(outDir, 'wsl-agent-hook-relay.js'),
sourcemap: false,
minify: true,
define: {
'process.env.NODE_ENV': '"production"'
}
})
const content = readFileSync(join(outDir, 'wsl-agent-hook-relay.js'))
const hash = createHash('sha256').update(content).digest('hex').slice(0, 12)
writeFileSync(join(outDir, '.version'), `${RELAY_VERSION}+${hash}`)
console.log(`Built WSL hook relay → ${outDir}/wsl-agent-hook-relay.js`)
await build({
entryPoints: [wslBrowserNetworkEntry],
bundle: true,
platform: 'node',
target: 'node18',
format: 'cjs',
outfile: join(outDir, 'wsl-browser-network-relay.js'),
sourcemap: false,
minify: true,
define: {
'process.env.NODE_ENV': '"production"'
}
})
const browserNetworkContent = readFileSync(join(outDir, 'wsl-browser-network-relay.js'))
const browserNetworkHash = createHash('sha256')
.update(browserNetworkContent)
.update(readFileSync(join(outDir, bundleFile)))
.digest('hex')
.slice(0, 12)
writeFileSync(join(outDir, '.browser-network-version'), `${RELAY_VERSION}+${browserNetworkHash}`)
console.log(`Built WSL browser network relay → ${outDir}/wsl-browser-network-relay.js`)
// Why here, not the relay dirs: only the desktop runs it, inside WSL; SSH hosts never upload it.
await build({
entryPoints: [join(ROOT, 'src/main/claude-accounts/claude-profile-wsl-entry.ts')],
bundle: true,
platform: 'node',
target: 'node18',
format: 'cjs',
outfile: join(outDir, WSL_CLAUDE_PROFILE_HELPER_FILENAME),
minify: true,
define: { 'process.env.NODE_ENV': '"production"' }
})
writeFileSync(join(outDir, versionFile), `${RELAY_VERSION}+${hash}`)
}
console.log('Relay build complete.')
await bundle('src/wsl-guest/wsl-agent-hook-relay.ts', 'wsl-agent-hook-relay.js', {
alias: JSONC_PARSER_ESM_ALIAS
})
stampVersion('wsl-agent-hook-relay.js', '.version')
console.log(`Built WSL hook relay → ${outDir}/wsl-agent-hook-relay.js`)
await bundle('src/wsl-guest/wsl-browser-network-relay.ts', 'wsl-browser-network-relay.js')
stampVersion('wsl-browser-network-relay.js', '.browser-network-version')
console.log(`Built WSL browser network relay → ${outDir}/wsl-browser-network-relay.js`)
await bundle(
'src/main/claude-accounts/claude-profile-wsl-entry.ts',
WSL_CLAUDE_PROFILE_HELPER_FILENAME
)
await bundle(
'src/main/ai-vault/session-scanner-opencode-sqlite-process-entry.ts',
RELAY_OPENCODE_SQLITE_READER_FILENAME,
{ external: ['electron'] }
)
console.log('WSL guest build complete.')
config/scripts/ci-shard-timings.json
-240
View File
@@ -193,9 +193,6 @@
"config/scripts/msbuild-file-tracking.test.mjs": 44,
"config/scripts/native-chat-compaction-pagination.test.mjs": 446,
"config/scripts/node-old-space-limit.test.mjs": 50,
"config/scripts/node-pty-console-list-agent-patch.test.mjs": 57,
"config/scripts/node-pty-master-cloexec-patch.test.mjs": 121,
"config/scripts/node-pty-windows-pty-teardown-patch.test.mjs": 140,
"config/scripts/node-server-change-scope.test.mjs": 2687,
"config/scripts/node-server-concurrency.test.mjs": 173,
"config/scripts/node-server-qualification.test.mjs": 62,
@@ -255,10 +252,7 @@
"config/scripts/rebuild-native-deps.test.mjs": 1263,
"config/scripts/reclaim-dev-electron-bundles.test.ts": 64,
"config/scripts/regenerate-xterm-patches.test.mjs": 249,
"config/scripts/relay-artifact-manifest.test.mjs": 1065,
"config/scripts/relay-asset-line-ending-pin.test.mjs": 144,
"config/scripts/relay-windows-process-tree-prepared-addon.test.mjs": 168,
"config/scripts/relay-windows-process-tree-staging.test.mjs": 82,
"config/scripts/release-cut-token-permissions.test.mjs": 199,
"config/scripts/release-javascript-artifact.test.mjs": 253,
"config/scripts/release-javascript-parity.test.mjs": 98,
@@ -286,7 +280,6 @@
"config/scripts/sort-comparator-performance-plugin.test.mjs": 283,
"config/scripts/space-sharing-copy.test.ts": 96,
"config/scripts/ssh-browser-e2e-routing.test.mjs": 176,
"config/scripts/ssh-relay-import-boundary.test.mjs": 5796,
"config/scripts/stable-release-tag-selection-budget.test.mjs": 149,
"config/scripts/static-appimage-package-contract.test.mjs": 83,
"config/scripts/static-module-specifiers.test.mjs": 277,
@@ -586,9 +579,7 @@
"src/main/agent-hooks/managed-hook-command-contract.test.ts": 389,
"src/main/agent-hooks/managed-hook-detection-commands.test.ts": 68,
"src/main/agent-hooks/managed-hook-install-lock.test.ts": 332,
"src/main/agent-hooks/managed-hook-local-filesystem.test.ts": 547,
"src/main/agent-hooks/managed-hook-owner-identity.test.ts": 99,
"src/main/agent-hooks/managed-hook-runtime.test.ts": 464,
"src/main/agent-hooks/managed-hook-script-refresh-main-thread.test.ts": 410,
"src/main/agent-hooks/managed-hook-script-refresh.test.ts": 498,
"src/main/agent-hooks/managed-hook-stdin-lifecycle.test.ts": 1579,
@@ -758,7 +749,6 @@
"src/main/ai-vault/ai-vault-scan-coordinator.test.ts": 55,
"src/main/ai-vault/antigravity-ide-history.test.ts": 322,
"src/main/ai-vault/antigravity-index-file-admission.test.ts": 115,
"src/main/ai-vault/antigravity-index-reader.test.ts": 179,
"src/main/ai-vault/antigravity-opening-prompt-workspace.test.ts": 157,
"src/main/ai-vault/antigravity-recorded-history.test.ts": 281,
"src/main/ai-vault/cached-session-list-wsl-probe.test.ts": 472,
@@ -771,17 +761,6 @@
"src/main/ai-vault/openclaw-session-layout.test.ts": 172,
"src/main/ai-vault/opencode-wsl-runtime-preparation.test.ts": 1150,
"src/main/ai-vault/remote-session-content-lines.test.ts": 84,
"src/main/ai-vault/remote-session-large-transcripts.test.ts": 1388,
"src/main/ai-vault/remote-session-parse-cache.test.ts": 305,
"src/main/ai-vault/remote-session-scan-batching.test.ts": 61,
"src/main/ai-vault/remote-session-scanner-kiro.test.ts": 168,
"src/main/ai-vault/remote-session-scanner-muse.test.ts": 234,
"src/main/ai-vault/remote-session-scanner-omp-subagents.test.ts": 261,
"src/main/ai-vault/remote-session-scanner-opencode.test.ts": 235,
"src/main/ai-vault/remote-session-scanner-sources.test.ts": 187,
"src/main/ai-vault/remote-session-scanner.test.ts": 388,
"src/main/ai-vault/remote-session-sidecar-observation.test.ts": 235,
"src/main/ai-vault/remote-session-stream-lifecycle.test.ts": 98,
"src/main/ai-vault/runtime-session-scanner.test.ts": 256,
"src/main/ai-vault/runtime-session-search-call.test.ts": 44,
"src/main/ai-vault/session-cwd-bucket-layouts.test.ts": 59,
@@ -2133,7 +2112,6 @@
"src/main/git/settled-diff-cache-bounds.test.ts": 76,
"src/main/git/source-control/blob-absence-real-git.test.ts": 447,
"src/main/git/source-control/bulk-pathspec-command-line-budget.test.ts": 192,
"src/main/git/source-control/bulk-pathspec-stdin.test.ts": 492,
"src/main/git/source-control/resolve-git-dir.test.ts": 59,
"src/main/git/source-control/stage-worktree-changes.test.ts": 1305,
"src/main/git/source-control/staging-discard-index-safety.test.ts": 941,
@@ -2142,9 +2120,7 @@
"src/main/git/status-branch-compare.test.ts": 239,
"src/main/git/status-branch-line-total-exec-contract.test.ts": 892,
"src/main/git/status-branch-line-total-real-git.test.ts": 836,
"src/main/git/status-branch-line-total-relay-parity.test.ts": 528,
"src/main/git/status-conflict-operations.test.ts": 163,
"src/main/git/status-conflict-overlap.bench.test.ts": 312,
"src/main/git/status-cquoted-paths.test.ts": 374,
"src/main/git/status-diff-settled-cache.test.ts": 322,
"src/main/git/status-diff.test.ts": 260,
@@ -2880,7 +2856,6 @@
"src/main/ipc/worktrees-setup-launch-sparse-checkout.test.ts": 1390,
"src/main/ipc/worktrees-ssh-base-ref-resolution.test.ts": 1298,
"src/main/ipc/worktrees-ssh-create-base-prefetch.test.ts": 1305,
"src/main/ipc/worktrees-ssh-fork-push-target-remote.test.ts": 1327,
"src/main/ipc/worktrees-ssh-local-base-refresh-overlap.test.ts": 1478,
"src/main/ipc/worktrees-ssh-local-base-refresh.test.ts": 1443,
"src/main/ipc/worktrees-ssh-pr-head-fetch.test.ts": 1459,
@@ -3829,7 +3804,6 @@
"src/main/plugins/plugin-dev-watcher.test.ts": 509,
"src/main/plugins/plugin-discovery.test.ts": 325,
"src/main/plugins/plugin-enablement.test.ts": 366,
"src/main/plugins/plugin-host-conformance.test.ts": 363,
"src/main/plugins/plugin-host-methods.test.ts": 300,
"src/main/plugins/plugin-host-process.test.ts": 249,
"src/main/plugins/plugin-host-runtime.test.ts": 258,
@@ -3975,7 +3949,6 @@
"src/main/providers/ssh-pty-source-delivery-ledger.test.ts": 58,
"src/main/providers/ssh-pty-spawn-env.test.ts": 49,
"src/main/providers/ssh-pty-write.test.ts": 473,
"src/main/providers/ssh-review-draft-context.test.ts": 936,
"src/main/providers/ssh-worktree-catalog-authority.test.ts": 1068,
"src/main/providers/stable-foreground-process.test.ts": 68,
"src/main/providers/startup-line-typed-length.live-shell.test.ts": 165,
@@ -4965,7 +4938,6 @@
"src/main/runtime/runtime-extraction-regressions.test.ts": 4478,
"src/main/runtime/runtime-failed-local-worktree-removal.test.ts": 723,
"src/main/runtime/runtime-file-listing-producer-budgets.test.ts": 528,
"src/main/runtime/runtime-file-path-existence.test.ts": 911,
"src/main/runtime/runtime-file-target-execution-host.test.ts": 4300,
"src/main/runtime/runtime-file-upload-decode.test.ts": 421,
"src/main/runtime/runtime-folder-workspace.test.ts": 65,
@@ -5998,211 +5970,6 @@
"src/preload/ssh-authority-forwarding.test.ts": 1025,
"src/preload/updater-package-recovery.test.ts": 867,
"src/preload/usage-provider-api.test.ts": 52,
"src/relay/agent-exec-disposal.test.ts": 174,
"src/relay/agent-exec-handler-windows.test.ts": 139,
"src/relay/agent-exec-handler.test.ts": 179,
"src/relay/agent-exec-shell-environment.test.ts": 191,
"src/relay/agent-hook-retired-pane-suppression.test.ts": 647,
"src/relay/agent-status-store-relay-context.test.ts": 314,
"src/relay/agent-workspace-trust-spawn-guard-failure.test.ts": 292,
"src/relay/agent-workspace-trust-spawn.test.ts": 337,
"src/relay/ai-vault-handler.test.ts": 811,
"src/relay/ai-vault-opencode-reader.test.ts": 438,
"src/relay/ai-vault-service-cancellation.test.ts": 437,
"src/relay/ai-vault-service-client.test.ts": 96,
"src/relay/ai-vault-service-ready-retention.test.ts": 222,
"src/relay/ai-vault-service-restart-policy.test.ts": 51,
"src/relay/ai-vault-service-spawn.test.ts": 60,
"src/relay/context.test.ts": 46,
"src/relay/external-automation-provider-catalog.test.ts": 77,
"src/relay/external-automations-handler-log-path.test.ts": 49,
"src/relay/external-automations-handler.test.ts": 73,
"src/relay/freebuff-status-projection.test.ts": 1180,
"src/relay/fs-file-stream-shutdown.test.ts": 289,
"src/relay/fs-handler-doc-preview.test.ts": 227,
"src/relay/fs-handler-file-range-dispatch.test.ts": 705,
"src/relay/fs-handler-file-range.test.ts": 217,
"src/relay/fs-handler-git-search-capacity.test.ts": 157,
"src/relay/fs-handler-git-search-real-capacity.test.ts": 131,
"src/relay/fs-handler-git-search.test.ts": 142,
"src/relay/fs-handler-list-files-cancel.test.ts": 137,
"src/relay/fs-handler-list-files-candidates.integration.test.ts": 1201,
"src/relay/fs-handler-list-files-candidates.test.ts": 655,
"src/relay/fs-handler-list-files-diagnosis-cancel.test.ts": 101,
"src/relay/fs-handler-list-files-ignored.test.ts": 1166,
"src/relay/fs-handler-list-files-path-framing.test.ts": 152,
"src/relay/fs-handler-list-files-result-limit.test.ts": 465,
"src/relay/fs-handler-readdir-fallback.test.ts": 73,
"src/relay/fs-handler-ripgrep-fallback.test.ts": 370,
"src/relay/fs-handler-stream.test.ts": 449,
"src/relay/fs-handler.test.ts": 617,
"src/relay/fs-list-files-cancel.integration.test.ts": 352,
"src/relay/fs-list-files-large-response.integration.test.ts": 865,
"src/relay/fs-list-files-scan-coordinator.test.ts": 64,
"src/relay/fs-markdown-document-launch.test.ts": 75,
"src/relay/fs-markdown-document-listing.test.ts": 231,
"src/relay/fs-path-metadata-requests.test.ts": 64,
"src/relay/fs-path-metadata-symlink-concurrency.test.ts": 63,
"src/relay/fs-search-cancellation.test.ts": 438,
"src/relay/fs-search-diagnosis-cancellation.test.ts": 164,
"src/relay/fs-search-errors-real.test.ts": 157,
"src/relay/fs-search-line-fragments.test.ts": 197,
"src/relay/fs-stream-pty-echo-backpressure.integration.test.ts": 555,
"src/relay/fs-stream-registry-shutdown.test.ts": 66,
"src/relay/git-branch-delete-refusal-parity.test.ts": 201,
"src/relay/git-command-admission.test.ts": 141,
"src/relay/git-diff-cancellation.test.ts": 302,
"src/relay/git-exec-validator.test.ts": 93,
"src/relay/git-handler-blob-readers.test.ts": 73,
"src/relay/git-handler-branch-cleanup.test.ts": 119,
"src/relay/git-handler-branch-compare.test.ts": 135,
"src/relay/git-handler-branch-diff-equivalence.test.ts": 1113,
"src/relay/git-handler-branch-diff.test.ts": 298,
"src/relay/git-handler-check-ignore.test.ts": 50,
"src/relay/git-handler-clone-progress-capture.test.ts": 318,
"src/relay/git-handler-commit-metadata.test.ts": 488,
"src/relay/git-handler-diff-blobs.test.ts": 309,
"src/relay/git-handler-diff-read-coalescing.test.ts": 695,
"src/relay/git-handler-diff-retry.test.ts": 204,
"src/relay/git-handler-file-diff.test.ts": 921,
"src/relay/git-handler-fork-remote-exec.test.ts": 245,
"src/relay/git-handler-pull-reconciliation.test.ts": 866,
"src/relay/git-handler-push-target.test.ts": 66,
"src/relay/git-handler-remote-sync.test.ts": 1449,
"src/relay/git-handler-review-draft.test.ts": 350,
"src/relay/git-handler-stage-worktree-scope.test.ts": 905,
"src/relay/git-handler-staging.test.ts": 355,
"src/relay/git-handler-status-ops.test.ts": 140,
"src/relay/git-handler-submodule-cache-invalidation.test.ts": 248,
"src/relay/git-handler-submodule-ops.test.ts": 138,
"src/relay/git-handler-submodule-status-cancellation.test.ts": 193,
"src/relay/git-handler-termination.test.ts": 219,
"src/relay/git-handler-utils.test.ts": 46,
"src/relay/git-handler-working-tree-changes.test.ts": 879,
"src/relay/git-handler-worktree-clean.test.ts": 83,
"src/relay/git-handler-worktree-existence-cancellation.test.ts": 72,
"src/relay/git-handler-worktree-git-capabilities.test.ts": 232,
"src/relay/git-handler-worktree-inspection.test.ts": 371,
"src/relay/git-handler-worktree-list-authority.test.ts": 209,
"src/relay/git-handler-worktree-list-cancellation.test.ts": 207,
"src/relay/git-handler-worktree-list.test.ts": 72,
"src/relay/git-handler-worktree-ops.test.ts": 117,
"src/relay/git-handler-worktree-paths.test.ts": 88,
"src/relay/git-handler-worktree-provisioning.test.ts": 1195,
"src/relay/git-handler.test.ts": 543,
"src/relay/git-porcelain-local-parity.test.ts": 476,
"src/relay/git-push-target-local-parity.test.ts": 335,
"src/relay/git-response-pty-echo-backpressure.integration.test.ts": 1073,
"src/relay/git-response-stream-ownership.test.ts": 66,
"src/relay/git-response-stream-retention.test.ts": 456,
"src/relay/git-response-stream-shutdown.test.ts": 85,
"src/relay/git-review-draft-binary-compatibility.test.ts": 133,
"src/relay/git-status-branch-line-total.test.ts": 329,
"src/relay/git-status-upstream-negative-cache.test.ts": 319,
"src/relay/git-stdout-stream.test.ts": 141,
"src/relay/git-working-file-read.test.ts": 74,
"src/relay/hermes-run-correlation.test.ts": 49,
"src/relay/hermes-run-history.test.ts": 120,
"src/relay/integration.test.ts": 1263,
"src/relay/managed-hook-installer.test.ts": 78,
"src/relay/node-pty-binding-survey.test.ts": 428,
"src/relay/node-pty-unavailable-diagnosis.test.ts": 294,
"src/relay/omp-fresh-launch-environment.test.ts": 1156,
"src/relay/opencode-hook-selection.test.ts": 872,
"src/relay/port-scan-handler.test.ts": 193,
"src/relay/pty-handler-agent-launch-token.test.ts": 597,
"src/relay/pty-handler-agent-workspace-trust.test.ts": 501,
"src/relay/pty-handler-attach-replay.test.ts": 615,
"src/relay/pty-handler-dispose-lifecycle.test.ts": 685,
"src/relay/pty-handler-grace-timer.test.ts": 558,
"src/relay/pty-handler-immediate-descendants.test.ts": 685,
"src/relay/pty-handler-inventory-process-evidence.test.ts": 843,
"src/relay/pty-handler-opencode-revive.test.ts": 554,
"src/relay/pty-handler-output-drain-differential.test.ts": 728,
"src/relay/pty-handler-output-streaming.test.ts": 972,
"src/relay/pty-handler-owner-inventory-clone-budget.test.ts": 571,
"src/relay/pty-handler-pi-owner-env.test.ts": 670,
"src/relay/pty-handler-resize-stale-pty.test.ts": 715,
"src/relay/pty-handler-retired-pane-surface.test.ts": 649,
"src/relay/pty-handler-revive.test.ts": 701,
"src/relay/pty-handler-shell-recovery.test.ts": 850,
"src/relay/pty-handler-shell-resolution.test.ts": 665,
"src/relay/pty-handler-shutdown-signals.test.ts": 646,
"src/relay/pty-handler-source-publication.test.ts": 1260,
"src/relay/pty-handler-spawn-admission.test.ts": 936,
"src/relay/pty-handler-spawn-cwd.test.ts": 692,
"src/relay/pty-handler-spawn-environment.test.ts": 700,
"src/relay/pty-handler-startup-command-delivery.test.ts": 780,
"src/relay/pty-handler-startup-command-staging.test.ts": 599,
"src/relay/pty-handler-windows-child-process-evidence.test.ts": 673,
"src/relay/pty-shell-launch.test.ts": 343,
"src/relay/pty-shell-utils-process-cycles.test.ts": 120,
"src/relay/pty-shell-utils.test.ts": 151,
"src/relay/pty-source-credit-ledger.test.ts": 238,
"src/relay/pty-source-credit-scheduler.test.ts": 68,
"src/relay/pty-source-sent-boundaries.test.ts": 106,
"src/relay/relay-agent-process-lifetime.test.ts": 135,
"src/relay/relay-bundled-ripgrep.test.ts": 128,
"src/relay/relay-daemon-fatal-reap.test.ts": 1498,
"src/relay/relay-diagnostic-log.test.ts": 51,
"src/relay/relay-endpoint-credential-publication.test.ts": 2888,
"src/relay/relay-filesystem-watch-registry.test.ts": 269,
"src/relay/relay-grace-branch.test.ts": 70,
"src/relay/relay-grace-lifecycle.test.ts": 319,
"src/relay/relay-handshake-roundtrip.test.ts": 474,
"src/relay/relay-launch-options.test.ts": 63,
"src/relay/relay-oversized-notification-survival.test.ts": 269,
"src/relay/relay-pid-publication.test.ts": 53,
"src/relay/relay-primary-channel.test.ts": 309,
"src/relay/relay-pty-consumer-owner-displacement.test.ts": 316,
"src/relay/relay-pty-publication-admission.test.ts": 405,
"src/relay/relay-pty-source-cancellation-exit.test.ts": 306,
"src/relay/relay-pty-source-exit-publication.test.ts": 78,
"src/relay/relay-pty-source-publication.test.ts": 430,
"src/relay/relay-pty-source-recovery-completion.test.ts": 46,
"src/relay/relay-pty-source-recovery-interleavings.test.ts": 334,
"src/relay/relay-pty-source-recovery-window.test.ts": 398,
"src/relay/relay-pty-source-restore-retry.test.ts": 430,
"src/relay/relay-pty-source-send-scheduler.test.ts": 86,
"src/relay/relay-pty-source-superseded-activation.test.ts": 273,
"src/relay/relay-reconnect-listener-credential-gate.test.ts": 92,
"src/relay/relay-reconnect-listener-peer-end.test.ts": 351,
"src/relay/relay-reconnect-listener-peer-write-error.test.ts": 358,
"src/relay/relay-ripgrep-cwd-env.test.ts": 138,
"src/relay/relay-runtime-owned-process-shutdown.test.ts": 1354,
"src/relay/relay-runtime-self-test.test.ts": 73,
"src/relay/relay-socket-peer-close.test.ts": 51,
"src/relay/relay-watch-root-capacity.test.ts": 256,
"src/relay/relay-watcher-event-emitter.test.ts": 686,
"src/relay/relay-watcher-frame-chunking.test.ts": 598,
"src/relay/relay-watcher-parent-removal.test.ts": 139,
"src/relay/relay-watcher-pending-setup-waiters.test.ts": 176,
"src/relay/relay-watcher-setup-wait.test.ts": 214,
"src/relay/relay-watcher-shared-byte-index.test.ts": 842,
"src/relay/relay-watcher-shutdown.test.ts": 244,
"src/relay/relay-windows-path-ripgrep-cache.test.ts": 84,
"src/relay/relay-windows-path-ripgrep.test.ts": 68,
"src/relay/remote-artifact-cli-input.test.ts": 122,
"src/relay/remote-cli-env.test.ts": 41,
"src/relay/remote-cli-stdin.test.ts": 46,
"src/relay/remote-cli-timeout.test.ts": 66,
"src/relay/retired-pane-surfaces.test.ts": 48,
"src/relay/rotating-log-writer.test.ts": 91,
"src/relay/session-search-transport.test.ts": 325,
"src/relay/skill-install-handler.test.ts": 746,
"src/relay/skill-upload-multi-relay.integration.test.ts": 956,
"src/relay/ssh-pty-consumer-session-adapter.test.ts": 317,
"src/relay/ssh-pty-source-credit-adapter.test.ts": 81,
"src/relay/subprocess-tree-termination.test.ts": 56,
"src/relay/subprocess.test.ts": 24561,
"src/relay/terminal-history-wsl.test.ts": 76,
"src/relay/terminal-history.test.ts": 75,
"src/relay/windows-port-scan.test.ts": 169,
"src/relay/windows-port-scan.win32.test.ts": 83,
"src/relay/workspace-session-handler.test.ts": 269,
"src/relay/workspace-snapshot-publication.test.ts": 271,
"src/relay/workspace-space-scan-du-capacity.test.ts": 83,
"src/relay/workspace-space-scan.test.ts": 72,
"src/renderer/src/app-shell/app-command-handlers-child-workspaces.test.ts": 1064,
"src/renderer/src/app-shell/app-command-handlers-tab-rename.test.ts": 1261,
"src/renderer/src/app-shell/app-command-handlers-workspace-delete.test.ts": 646,
@@ -11579,17 +11346,12 @@
"src/shared/pull-request-generation.test.ts": 71,
"src/shared/qoder-agent.test.ts": 293,
"src/shared/qoder-cn-launch-recipe.test.ts": 147,
"src/shared/quick-open-directory-reader.test.ts": 67,
"src/shared/quick-open-expansion-paths.test.ts": 72,
"src/shared/quick-open-filter.renderer-safety.test.ts": 59,
"src/shared/quick-open-filter.test.ts": 93,
"src/shared/quick-open-fuzzy-scan.test.ts": 996,
"src/shared/quick-open-git-directory-collapse.test.ts": 88,
"src/shared/quick-open-install-rg.test.ts": 55,
"src/shared/quick-open-listing-limits.test.ts": 45,
"src/shared/quick-open-query-target.test.ts": 64,
"src/shared/quick-open-readdir-memory.test.ts": 100,
"src/shared/quick-open-readdir-walk.test.ts": 230,
"src/shared/quick-open-recent-candidates.test.ts": 63,
"src/shared/quick-open-transport-budget.test.ts": 55,
"src/shared/raster-image-base64-preview.test.ts": 391,
@@ -11988,7 +11750,6 @@
"src/wsl-guest/dispatcher-timeout.test.ts": 247,
"src/wsl-guest/dispatcher-writer-admission.test.ts": 111,
"src/wsl-guest/dispatcher.test.ts": 414,
"src/wsl-guest/filesystem-capacity-error-wire.test.ts": 281,
"src/wsl-guest/legacy-relay-publication-ledger.test.ts": 50,
"src/wsl-guest/omp-config-root.test.ts": 177,
"src/wsl-guest/opencode-startup-prompt-install.test.ts": 139,
@@ -12081,7 +11842,6 @@
"tests/tools/omp-close-lifecycle.test.mjs": 283,
"tests/tools/omp-config-root-local-shell.test.mjs": 249,
"tests/tools/omp-config-root-relay-shell.test.mjs": 162,
"tests/tools/omp-relay-close-lifecycle.test.mjs": 581,
"tests/tools/relay-bench/phone-e2ee-desktop-parity.test.mjs": 114,
"tests/tools/relay-bench/region-probe-replay.test.mjs": 84,
"tests/tools/relay-bench/relay-bench-invocation.test.mjs": 102,
config/scripts/ci-unit-files.mjs
-1
View File
@@ -27,7 +27,6 @@ export const UNIT_EXCLUDE = [
'src/main/terminal-history-fish-session.node-pty.test.ts',
'src/main/zsh-scoped-histfile.live-shell.test.ts',
'src/main/zsh-startup-hook-user-config-equivalence.live-shell.test.ts',
'src/main/zsh-wrapper-version-mismatch.live-shell.test.ts',
'src/main/runtime/structured-session-cli-login-shell.live-shell.test.ts',
'src/renderer/src/components/terminal-pane/fish-color-scheme-child-stdin.node-pty.test.ts',
'src/shared/fish-query-reply-child-stdin.node-pty.test.ts',
config/scripts/hermes-run-correlation-benchmark.mjs
+2 -5
View File
@@ -17,11 +17,8 @@ const key = (seconds) =>
.replace('T', '_')
.slice(0, 15)
try {
for (const host of ['native', 'relay']) {
const entry =
host === 'native'
? 'src/main/automations/hermes-cron-run-content.ts'
: 'src/relay/hermes-run-correlation.ts'
for (const host of ['native']) {
const entry = 'src/main/automations/hermes-cron-run-content.ts'
const readers = []
for (const mode of baselineDirectory ? ['baseline', 'current'] : ['current']) {
const bundle = join(fixture, `${host}-${mode}.cjs`)
config/scripts/node-pty-console-list-agent-patch.test.mjs
-82
View File
@@ -1,82 +0,0 @@
import { createRequire } from 'node:module'
import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
import { join, resolve } from 'node:path'
import { afterEach, describe, expect, it } from 'vitest'
const require = createRequire(import.meta.url)
const {
assertPatchedNodePtyConsoleListAgent,
patchNodePtyConsoleListAgent
} = require('../relay-assets/node-pty-1.1.0-console-list-agent-patch.cjs')
const projectDir = resolve(import.meta.dirname, '..', '..')
const cleanupDirs = []
afterEach(() => {
for (const dir of cleanupDirs.splice(0)) {
rmSync(dir, { recursive: true, force: true })
}
})
describe('Windows SSH relay node-pty console-list patch', () => {
it('installs and verifies the fallback idempotently', () => {
const fixture = writeNodePtyFixture('1.1.0', publishedAgentSource())
patchNodePtyConsoleListAgent(fixture.root)
const once = readFileSync(fixture.agentPath, 'utf8')
expect(once).toContain('consoleProcessList = [shellPid];')
expect(existsSync(`${fixture.agentPath}.orca-patch-${process.pid}`)).toBe(false)
expect(() => assertPatchedNodePtyConsoleListAgent(fixture.root)).not.toThrow()
patchNodePtyConsoleListAgent(fixture.root)
expect(readFileSync(fixture.agentPath, 'utf8')).toBe(once)
})
it('refuses a different package version or unexpected agent source', () => {
const wrongVersion = writeNodePtyFixture('1.2.0-beta.11', publishedAgentSource())
expect(() => patchNodePtyConsoleListAgent(wrongVersion.root)).toThrow('expected 1.1.0')
const drifted = writeNodePtyFixture('1.1.0', `${publishedAgentSource()}\n// drift`)
expect(() => patchNodePtyConsoleListAgent(drifted.root)).toThrow('unexpected node-pty')
const tamperedPatch = writeNodePtyFixture('1.1.0', publishedAgentSource())
patchNodePtyConsoleListAgent(tamperedPatch.root)
writeFileSync(
tamperedPatch.agentPath,
`${readFileSync(tamperedPatch.agentPath, 'utf8')}\n// drift`
)
expect(() => assertPatchedNodePtyConsoleListAgent(tamperedPatch.root)).toThrow('not installed')
})
})
function writeNodePtyFixture(version, agentSource) {
const root = mkdtempSync(join(projectDir, '.node-pty-console-list-patch-test-'))
cleanupDirs.push(root)
const nodePtyDir = join(root, 'node_modules', 'node-pty')
const libDir = join(nodePtyDir, 'lib')
const agentPath = join(libDir, 'conpty_console_list_agent.js')
mkdirSync(libDir, { recursive: true })
writeFileSync(join(nodePtyDir, 'package.json'), JSON.stringify({ version }))
writeFileSync(agentPath, agentSource)
return { root, agentPath }
}
function publishedAgentSource() {
return [
'"use strict";',
'/**',
' * Copyright (c) 2019, Microsoft Corporation (MIT License).',
' *',
' * This module fetches the console process list for a particular PID. It must be',
' * called from a different process (child_process.fork) as there can only be a',
' * single console attached to a process.',
' */',
'Object.defineProperty(exports, "__esModule", { value: true });',
'var utils_1 = require("./utils");',
"var getConsoleProcessList = utils_1.loadNativeModule('conpty_console_list').module.getConsoleProcessList;",
'var shellPid = parseInt(process.argv[2], 10);',
'var consoleProcessList = getConsoleProcessList(shellPid);',
'process.send({ consoleProcessList: consoleProcessList });',
'process.exit(0);',
'//# sourceMappingURL=conpty_console_list_agent.js.map'
].join('\n')
}
config/scripts/node-pty-master-cloexec-patch.test.mjs
-333
View File
@@ -1,333 +0,0 @@
import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
import { createRequire } from 'node:module'
import { join, resolve } from 'node:path'
import { afterEach, describe, expect, it } from 'vitest'
const require = createRequire(import.meta.url)
const {
SKIP_MARKER_FILENAME,
applyNodePtyMasterCloexecPatch,
assertPatchedNodePtyMasterCloexecSource,
patchNodePtyMasterCloexecSource,
revertNodePtyMasterCloexecSource
} = require('../relay-assets/node-pty-1.1.0-master-cloexec-patch.cjs')
// Byte-exact src/unix/pty.cc from the npm tarball the relay installs. The patch is keyed by its
// sha256, so a fixture that drifted from what npm ships would make every assertion below vacuous.
const STOCK_SOURCE = readFileSync(
resolve(import.meta.dirname, '__fixtures__', 'node-pty-1.1.0-unix-pty.cc'),
'utf8'
)
const projectDir = resolve(import.meta.dirname, '..', '..')
const cleanupDirs = []
afterEach(() => {
for (const dir of cleanupDirs.splice(0)) {
rmSync(dir, { recursive: true, force: true })
}
})
describe('SSH relay node-pty pty fd-leak patch', () => {
it('adds the forkpty close-on-exec call and reverts to the published bytes', () => {
const fixture = writeRelayFixture()
expect(patchNodePtyMasterCloexecSource(fixture.root)).toBe(true)
const patched = readFileSync(fixture.sourcePath, 'utf8')
expect(patched).toContain('pty_cloexec(int fd)')
expect(patched).toContain('if (pty_cloexec(master) == -1)')
expect(() => assertPatchedNodePtyMasterCloexecSource(fixture.root)).not.toThrow()
expect(patchNodePtyMasterCloexecSource(fixture.root)).toBe(false)
expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(patched)
expect(revertNodePtyMasterCloexecSource(fixture.root)).toBe(true)
expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
})
it('rewrites the Apple branch, which is the only one macOS executes', () => {
const fixture = writeRelayFixture()
patchNodePtyMasterCloexecSource(fixture.root)
const patched = readFileSync(fixture.sourcePath, 'utf8')
// Stock's cleanup never runs: the first posix_openpt() already returns >= 2, so the loop
// breaks with count == 0 -- and where it does run it closes low_fds[count], never low_fds[0].
expect(STOCK_SOURCE).toContain('for (; count > 0; count--) {')
expect(patched).not.toContain('for (; count > 0; count--) {')
expect(patched).toContain('int low_fds[3] = {-1, -1, -1};')
expect(patched).toContain('for (size_t i = 0; i <= count && i < 3; i++) {')
// `default:` sits in the `#else` arm of PtyFork's `#if defined(__APPLE__)`, so marking only
// the forkpty call site left the master macOS actually opens unmarked.
expect(patched).toContain(
' if (pty_cloexec(master) == -1) {\n' +
' throw Napi::Error::New(napiEnv, "Could not set master fd to close-on-exec.");\n' +
' }\n#else\n'
)
})
it('refuses a different node-pty version or an unrecognized source', () => {
const wrongVersion = writeRelayFixture({ version: '1.2.0-beta.4' })
expect(() => patchNodePtyMasterCloexecSource(wrongVersion.root)).toThrow('expected 1.1.0')
const drifted = writeRelayFixture({
source: `${STOCK_SOURCE}\n// drift\n`
})
expect(() => patchNodePtyMasterCloexecSource(drifted.root)).toThrow('unexpected node-pty')
const tampered = writeRelayFixture()
patchNodePtyMasterCloexecSource(tampered.root)
writeFileSync(tampered.sourcePath, `${readFileSync(tampered.sourcePath, 'utf8')}\n// drift\n`)
expect(() => assertPatchedNodePtyMasterCloexecSource(tampered.root)).toThrow('not installed')
})
it('keeps the rebuilt addon once a later child no longer inherits the master', () => {
const fixture = writeRelayFixture()
const calls = []
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'linux',
rebuild: () => {
calls.push('rebuild')
writeBuild(fixture, 'patched-build')
},
verify: () => 'isolated'
})
expect(status).toBe('patched')
expect(calls).toEqual(['rebuild'])
expect(readFileSync(fixture.buildPath, 'utf8')).toBe('patched-build')
expect(readFileSync(fixture.sourcePath, 'utf8')).not.toBe(STOCK_SOURCE)
expect(existsSync(fixture.backupDir)).toBe(false)
expect(existsSync(fixture.skipMarkerPath)).toBe(false)
})
it('keeps a rebuilt addon whose flag /proc could not confirm', () => {
const fixture = writeRelayFixture()
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'linux',
rebuild: () => writeBuild(fixture, 'patched-build'),
verify: () => 'unverified'
})
expect(status).toBe('patched-unverified')
expect(readFileSync(fixture.buildPath, 'utf8')).toBe('patched-build')
})
it('restores the working build when the compile fails, and never retries it', () => {
const fixture = writeRelayFixture()
const calls = []
const failed = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'linux',
rebuild: () => {
calls.push('rebuild')
throw new Error('npm rebuild node-pty exited 1: no C++ toolchain')
},
verify: () => 'isolated'
})
expect(failed).toContain('failed:')
expect(failed).toContain('no C++ toolchain')
expect(readFileSync(fixture.buildPath, 'utf8')).toBe('stock-build')
expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
expect(existsSync(fixture.backupDir)).toBe(false)
expect(existsSync(fixture.skipMarkerPath)).toBe(true)
// Bounded, not backed off: a relay directory gets one compile attempt, ever.
const again = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'linux',
rebuild: () => calls.push('rebuild'),
verify: () => 'isolated'
})
expect(again).toBe('skipped:earlier-attempt-failed')
expect(calls).toEqual(['rebuild'])
})
it('restores the working build when the rebuilt addon still leaks the master', () => {
const fixture = writeRelayFixture()
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'linux',
rebuild: () => writeBuild(fixture, 'still-leaky-build'),
verify: () => {
throw new Error('rebuilt node-pty still leaks the pty master into later children')
}
})
expect(status).toContain('still leaks')
expect(readFileSync(fixture.buildPath, 'utf8')).toBe('stock-build')
expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
})
it('never compiles on a platform with no pty fds to leak', () => {
const fixture = writeRelayFixture()
const calls = []
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'win32',
rebuild: () => calls.push('rebuild'),
verify: () => 'isolated'
})
expect(status).toBe('skipped:unsupported-platform')
expect(calls).toEqual([])
expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
})
it('compiles a macOS install out from under its shipped prebuild', () => {
// macOS has no build/ at all: node-pty runs `prebuilds/darwin-<arch>`, built from the leaky
// source. Moving `prebuilds` aside is what both arms the rollback and makes node-pty's own
// install script fall through from "prebuild found" to node-gyp.
const fixture = writeRelayFixture({ platform: 'darwin' })
const prebuildsPresentDuringRebuild = []
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'darwin',
arch: fixture.arch,
rebuild: () => {
prebuildsPresentDuringRebuild.push(existsSync(fixture.prebuildsDir))
writeCompiledBuild(fixture, 'patched-build')
},
verify: () => 'isolated'
})
expect(status).toBe('patched')
expect(prebuildsPresentDuringRebuild).toEqual([false])
expect(readFileSync(fixture.compiledPath, 'utf8')).toBe('patched-build')
// The published tree must hold no unpatched binary: node-pty's loader checks build/Release
// first, but falls back to a prebuild if that ever fails to load.
expect(existsSync(fixture.prebuildsDir)).toBe(false)
expect(existsSync(fixture.backupDir)).toBe(false)
})
it('restores the macOS prebuild when the first compile fails', () => {
// A macOS host has no toolchain guarantee at all, so this is the common failure, not the rare
// one -- and the relay has to come back on the prebuild exactly as it was installed.
const fixture = writeRelayFixture({ platform: 'darwin' })
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'darwin',
arch: fixture.arch,
rebuild: () => {
writeCompiledBuild(fixture, 'half-built')
throw new Error('npm rebuild node-pty exited 1: no C++ toolchain')
},
verify: () => 'isolated'
})
expect(status).toContain('failed:')
expect(readFileSync(fixture.buildPath, 'utf8')).toBe('stock-build')
expect(existsSync(fixture.compiledPath)).toBe(false)
expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
expect(existsSync(fixture.skipMarkerPath)).toBe(true)
})
it('will not rebuild a macOS install that has no prebuild to fall back on', () => {
const fixture = writeRelayFixture({ platform: 'darwin', build: false })
const calls = []
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'darwin',
arch: fixture.arch,
rebuild: () => calls.push('rebuild'),
verify: () => 'isolated'
})
expect(status).toBe('skipped:no-prebuild')
expect(calls).toEqual([])
expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
})
it('leaves an already patched install alone', () => {
const fixture = writeRelayFixture()
patchNodePtyMasterCloexecSource(fixture.root)
const calls = []
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'linux',
rebuild: () => calls.push('rebuild'),
verify: () => 'isolated'
})
expect(status).toBe('already-patched')
expect(calls).toEqual([])
})
it('will not rebuild an install that has no compiled addon to fall back on', () => {
const fixture = writeRelayFixture({ build: false })
const calls = []
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'linux',
rebuild: () => calls.push('rebuild'),
verify: () => 'isolated'
})
expect(status).toBe('skipped:no-compiled-build')
expect(calls).toEqual([])
expect(readFileSync(fixture.sourcePath, 'utf8')).toBe(STOCK_SOURCE)
})
it('discards a backup stranded by an interrupted rebuild', () => {
const fixture = writeRelayFixture()
mkdirSync(fixture.backupDir, { recursive: true })
writeFileSync(join(fixture.backupDir, 'pty.node'), 'stranded-build')
const status = applyNodePtyMasterCloexecPatch(fixture.root, {
platform: 'linux',
rebuild: () => writeBuild(fixture, 'patched-build'),
verify: () => 'isolated'
})
expect(status).toBe('patched')
expect(existsSync(fixture.backupDir)).toBe(false)
expect(readFileSync(fixture.buildPath, 'utf8')).toBe('patched-build')
})
})
/**
* `buildPath` is the working build the patch has to be able to fall back on, which differs by
* platform: Linux compiles into build/Release at install time, macOS runs a shipped prebuild and
* has no build/ at all. `compiledPath` is where the rebuild writes on either.
*/
function writeRelayFixture({
version = '1.1.0',
source = STOCK_SOURCE,
build = true,
platform = 'linux',
arch = 'arm64'
} = {}) {
const root = mkdtempSync(join(projectDir, '.node-pty-cloexec-patch-test-'))
cleanupDirs.push(root)
const nodePtyDir = join(root, 'node_modules', 'node-pty')
const sourcePath = join(nodePtyDir, 'src', 'unix', 'pty.cc')
const compiledPath = join(nodePtyDir, 'build', 'Release', 'pty.node')
const prebuildsDir = join(nodePtyDir, 'prebuilds')
mkdirSync(join(nodePtyDir, 'src', 'unix'), { recursive: true })
writeFileSync(join(nodePtyDir, 'package.json'), JSON.stringify({ version }))
writeFileSync(sourcePath, source)
const fixture = {
root,
arch,
sourcePath,
compiledPath,
prebuildsDir,
buildPath:
platform === 'darwin' ? join(prebuildsDir, `darwin-${arch}`, 'pty.node') : compiledPath,
backupDir: join(nodePtyDir, '.orca-cloexec-prepatch-release'),
skipMarkerPath: join(root, SKIP_MARKER_FILENAME)
}
if (build) {
writeBuild(fixture, 'stock-build')
}
return fixture
}
function writeBuild(fixture, contents) {
mkdirSync(resolve(fixture.buildPath, '..'), { recursive: true })
writeFileSync(fixture.buildPath, contents)
}
function writeCompiledBuild(fixture, contents) {
mkdirSync(resolve(fixture.compiledPath, '..'), { recursive: true })
writeFileSync(fixture.compiledPath, contents)
}
config/scripts/node-pty-windows-pty-teardown-patch.test.mjs
-364
View File
@@ -1,364 +0,0 @@
// The relay's copy of the ConPTY teardown release, and the guard that keeps it in lockstep with
// `config/patches/node-pty@1.1.0.patch`. pnpm patches do not cross the SSH boundary, so a relay runs
// the tree `npm install` put there, and every terminal on a Windows SSH host leaked one File handle
// for the life of the relay process.
//
// The ORDER of the conin release is the fix. Releasing it at the top of the branch -- the placement
// the desktop patch uses -- was measured at 3x WORSE than shipping nothing (File +2/terminal and a
// new Process +1/terminal); releasing it after the console-list fork and the native kill is flat.
//
// Those numbers are the `!useConptyDll` branch, which is the branch a RELAY runs. Every desktop
// site that opens a terminal pane sets `useConptyDll: true` and takes the other branch, where
// upstream already destroys the input socket. The hidden rate-limit probe
// (`src/main/rate-limits/codex-pty-rate-limit-probe.ts`) does omit the option and so does run this
// hunk, but no user-visible pane does. The divergence pinned below is about which
// branch each host runs for terminals -- not about a regression in the panes users open.
import { createHash } from 'node:crypto'
import { createRequire } from 'node:module'
import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
import { join, resolve } from 'node:path'
import { afterEach, describe, expect, it } from 'vitest'
const require = createRequire(import.meta.url)
const {
assertPatchedNodePtyWindowsTeardown,
patchNodePtyWindowsTeardown
} = require('../relay-assets/node-pty-1.1.0-windows-pty-teardown-patch.cjs')
const projectDir = resolve(import.meta.dirname, '..', '..')
const cleanupDirs = []
const PATCHED_FILES = ['windowsPtyAgent.js', 'windowsTerminal.js', 'windowsConoutConnection.js']
/** The hunks config/patches/node-pty@1.1.0.patch adds to the installed desktop tree. */
const DESKTOP_HUNKS = {
'windowsPtyAgent.js': [
[
[
' this._inSocket.readable = false;',
' // The non-DLL path previously only flipped `readable`, leaving the',
' // conin PipeWrap alive until the host exited (#947).',
' this._inSocket.destroy();',
' this._outSocket.readable = false;',
''
].join('\n'),
[
' this._inSocket.readable = false;',
' this._outSocket.readable = false;',
''
].join('\n')
],
// The useConptyDll branch, which only the DESKTOP runs -- the relay takes the
// non-DLL branch above, where the dispose is already unconditional. Listed here
// so un-applying still yields published; the relay asset needs no counterpart.
[
[
' // Orca: dispose unconditionally, as the non-DLL branch above does.',
" // Waiting for another 'data' event leaks the conout worker on every",
' // self-exiting shell, because no more data ever arrives (F24).',
' this._conoutSocketWorker.dispose();',
''
].join('\n'),
[
" this._outSocket.on('data', function () {",
' _this._conoutSocketWorker.dispose();',
' });',
''
].join('\n')
]
],
'windowsTerminal.js': [
[
' // Attach before readiness so a broken ConPTY output pipe cannot be unhandled.',
null
],
[' // A ConPTY input-pipe error must retire only this terminal.', null]
]
}
function desktopPath(file) {
return join(projectDir, 'node_modules', 'node-pty', 'lib', file)
}
afterEach(() => {
for (const dir of cleanupDirs.splice(0)) {
rmSync(dir, { recursive: true, force: true })
}
})
describe('Windows SSH relay node-pty ConPTY teardown patch', () => {
// Why reconstruct rather than vendor upstream: the installed tree IS the published file plus the
// desktop's hunks, so un-applying them yields upstream exactly -- and pinning that against this
// asset's own hashes is what fails loudly if either side of the pair moves.
it('takes the desktop error listeners verbatim', () => {
const fixture = writeNodePtyFixture('1.1.0')
patchNodePtyWindowsTeardown(fixture.root)
expect(readFileSync(join(fixture.libDir, 'windowsTerminal.js'), 'utf8')).toBe(
readFileSync(desktopPath('windowsTerminal.js'), 'utf8')
)
})
// The one hunk that must NOT match the desktop patch, and the reason is measured, not stylistic:
// on the branch a relay runs, releasing conin before `_getConsoleProcessList()` forks aborts
// teardown partway. Desktop terminal panes take the other branch, so no pane is affected either
// way; what this guards is a patch sync putting the early placement onto the relay's branch.
it('releases conin after the console-list fork, unlike the desktop patch placement', () => {
const fixture = writeNodePtyFixture('1.1.0')
patchNodePtyWindowsTeardown(fixture.root)
const patched = readFileSync(join(fixture.libDir, 'windowsPtyAgent.js'), 'utf8')
const branch = patched.slice(
patched.indexOf('if (!this._useConptyDll) {'),
patched.indexOf('else {', patched.indexOf('if (!this._useConptyDll) {'))
)
expect(branch).toContain('this._inSocket.destroy();')
expect(branch.indexOf('this._inSocket.destroy();')).toBeGreaterThan(
branch.indexOf('this._conoutSocketWorker.dispose();')
)
expect(branch.indexOf('this._inSocket.destroy();')).toBeGreaterThan(
branch.indexOf('this._getConsoleProcessList()')
)
// Pinned so a future "sync the relay asset to config/patches" cannot copy the early placement
// onto the relay's branch, where it costs +2 File and +1 Process per terminal.
expect(patched).not.toBe(readFileSync(desktopPath('windowsPtyAgent.js'), 'utf8'))
})
it('installs and verifies idempotently', () => {
const fixture = writeNodePtyFixture('1.1.0')
patchNodePtyWindowsTeardown(fixture.root)
const once = PATCHED_FILES.map((file) => readFileSync(join(fixture.libDir, file), 'utf8'))
for (const file of PATCHED_FILES) {
expect(existsSync(`${join(fixture.libDir, file)}.orca-patch-${process.pid}`)).toBe(false)
}
expect(() => assertPatchedNodePtyWindowsTeardown(fixture.root)).not.toThrow()
patchNodePtyWindowsTeardown(fixture.root)
expect(PATCHED_FILES.map((file) => readFileSync(join(fixture.libDir, file), 'utf8'))).toEqual(
once
)
})
it('refuses a different package version or unexpected source', () => {
const wrongVersion = writeNodePtyFixture('1.2.0-beta.11')
expect(() => patchNodePtyWindowsTeardown(wrongVersion.root)).toThrow('expected 1.1.0')
for (const file of PATCHED_FILES) {
const drifted = writeNodePtyFixture('1.1.0')
const path = join(drifted.libDir, file)
writeFileSync(path, `${readFileSync(path, 'utf8')}\n// drift`)
expect(() => patchNodePtyWindowsTeardown(drifted.root)).toThrow('unexpected node-pty')
}
})
it('refuses a half-applied tree, so one file cannot pass for both', () => {
for (const file of PATCHED_FILES) {
const partial = writeNodePtyFixture('1.1.0')
const fixture = writeNodePtyFixture('1.1.0')
patchNodePtyWindowsTeardown(fixture.root)
writeFileSync(join(partial.libDir, file), readFileSync(join(fixture.libDir, file), 'utf8'))
expect(() => assertPatchedNodePtyWindowsTeardown(partial.root)).toThrow('is not installed')
}
})
it.each([
'3060c6514a8e9e3285f91b9b549930e7d25d59d4cf7e1ed3a25b9a680dd1ded5',
'598755ee75307d041a72cd7c7c4e12ae4a4bbf35eee19da67b42b61fdae0d4d6',
'5dfeb1dda46645e1d77964ad4d07072b34f0a897dfc7e785137cc39e755b4641'
])(
'retires the known %s relay entrypoint without changing legacy input release',
(terminalHash) => {
const fixture = writePreviousNodePtyFixture(terminalHash)
patchNodePtyWindowsTeardown(fixture.root)
expect(() => assertPatchedNodePtyWindowsTeardown(fixture.root)).not.toThrow()
expect(
createHash('sha256')
.update(readFileSync(join(fixture.libDir, 'windowsPtyAgent.js')))
.digest('hex')
).toBe('1e23ef480569e73706e3ab4f5482c7e553c76f51414ae8e7b0bdcc2fd75f7280')
expect(readFileSync(join(fixture.libDir, 'windowsTerminal.js'), 'utf8')).toBe(
readFileSync(desktopPath('windowsTerminal.js'), 'utf8')
)
expect(readFileSync(join(fixture.libDir, 'windowsConoutConnection.js'), 'utf8')).toBe(
readFileSync(desktopPath('windowsConoutConnection.js'), 'utf8')
)
const once = PATCHED_FILES.map((file) => readFileSync(join(fixture.libDir, file), 'utf8'))
patchNodePtyWindowsTeardown(fixture.root)
expect(PATCHED_FILES.map((file) => readFileSync(join(fixture.libDir, file), 'utf8'))).toEqual(
once
)
}
)
it('finishes every interrupted entrypoint-first downgrade', () => {
const asset = readFileSync(
join(projectDir, 'config', 'relay-assets', 'node-pty-1.1.0-windows-pty-teardown-patch.cjs'),
'utf8'
)
const expectedOrder = ['windowsTerminal.js', 'windowsPtyAgent.js', 'windowsConoutConnection.js']
const expectedHashes = [
'8247ecd69be8b18257050fb026b290024612c5ffc6d492ff1d46f81e613be2cf',
'1e23ef480569e73706e3ab4f5482c7e553c76f51414ae8e7b0bdcc2fd75f7280',
'1440f70908fb1f55911ac8e936a1230f68a9c00c03096fcef6788eac6aad9d62'
]
for (const abortAfter of [1, 2, 3]) {
const fixture = writePreviousNodePtyFixture()
const renamed = []
const actualFs = require('node:fs')
const interrupted = loadPatchTargets(asset, (name) =>
name === 'node:fs'
? {
...actualFs,
renameSync(from, to) {
actualFs.renameSync(from, to)
renamed.push(expectedOrder.find((file) => join(fixture.libDir, file) === to))
if (renamed.length === abortAfter && abortAfter < 3) {
throw new Error('interrupted after actual rename')
}
}
}
: require(name)
)
if (abortAfter < 3) {
expect(() => interrupted.patchNodePtyWindowsTeardown(fixture.root)).toThrow(
'interrupted after actual rename'
)
} else {
interrupted.patchNodePtyWindowsTeardown(fixture.root)
}
expect(renamed).toEqual(expectedOrder.slice(0, abortAfter))
for (const [index, file] of expectedOrder.entries()) {
const actualHash = createHash('sha256')
.update(readFileSync(join(fixture.libDir, file)))
.digest('hex')
if (index < abortAfter) {
expect(actualHash).toBe(expectedHashes[index])
} else {
expect(actualHash).not.toBe(expectedHashes[index])
}
}
patchNodePtyWindowsTeardown(fixture.root)
expect(() => assertPatchedNodePtyWindowsTeardown(fixture.root)).not.toThrow()
for (const [index, file] of expectedOrder.entries()) {
expect(
createHash('sha256')
.update(readFileSync(join(fixture.libDir, file)))
.digest('hex')
).toBe(expectedHashes[index])
}
for (const file of ['windowsTerminal.js', 'windowsConoutConnection.js']) {
expect(readFileSync(join(fixture.libDir, file), 'utf8')).toBe(
readFileSync(desktopPath(file), 'utf8')
)
}
}
})
it('refuses unknown downgrade source before changing any file', () => {
for (const file of PATCHED_FILES) {
const fixture = writePreviousNodePtyFixture()
const path = join(fixture.libDir, file)
writeFileSync(path, `${readFileSync(path, 'utf8')}\n// unknown`)
const before = PATCHED_FILES.map((entry) => readFileSync(join(fixture.libDir, entry), 'utf8'))
expect(() => patchNodePtyWindowsTeardown(fixture.root)).toThrow('unexpected node-pty')
expect(
PATCHED_FILES.map((entry) => readFileSync(join(fixture.libDir, entry), 'utf8'))
).toEqual(before)
}
})
})
/** A published node-pty tree, rebuilt by un-applying the desktop hunks from the installed one. */
function writeNodePtyFixture(version) {
const root = mkdtempSync(join(projectDir, '.node-pty-teardown-patch-test-'))
cleanupDirs.push(root)
const libDir = join(root, 'node_modules', 'node-pty', 'lib')
mkdirSync(libDir, { recursive: true })
writeFileSync(join(root, 'node_modules', 'node-pty', 'package.json'), JSON.stringify({ version }))
for (const file of PATCHED_FILES) {
const desktop = readFileSync(desktopPath(file), 'utf8')
for (const [marker] of DESKTOP_HUNKS[file] || []) {
expect(desktop).toContain(marker)
}
writeFileSync(join(libDir, file), unapplyDesktopHunks(file, desktop))
}
return { root, libDir }
}
/**
* Reverse of the published-to-desktop transform.
*
* `windowsTerminal.js` is taken verbatim from the desktop, so the asset's own replacement table is
* the transform and reversing it is exact. `windowsPtyAgent.js` deliberately diverges, so its
* published form is rebuilt from the desktop hunk instead -- which is also what makes this file the
* place that notices if the desktop hunk itself ever moves.
*/
function unapplyDesktopHunks(file, desktop) {
if (file === 'windowsPtyAgent.js') {
let published = desktop
for (const [patched, original] of DESKTOP_HUNKS[file]) {
expect(published.split(patched).length - 1).toBe(1)
published = published.replace(patched, original)
}
return published
}
const asset = readFileSync(
join(projectDir, 'config', 'relay-assets', 'node-pty-1.1.0-windows-pty-teardown-patch.cjs'),
'utf8'
)
const { PATCH_TARGETS } = loadPatchTargets(asset)
const target = PATCH_TARGETS.find((entry) => entry.relativePath.at(-1) === file)
expect(target).toBeDefined()
let published = desktop
for (const [from, to] of target.replacements.toReversed()) {
expect(published.split(to).length - 1).toBe(1)
published = published.replace(to, from)
}
return published
}
function writePreviousNodePtyFixture(
terminalHash = '5dfeb1dda46645e1d77964ad4d07072b34f0a897dfc7e785137cc39e755b4641'
) {
const fixture = writeNodePtyFixture('1.1.0')
const asset = readFileSync(
join(projectDir, 'config', 'relay-assets', 'node-pty-1.1.0-windows-pty-teardown-patch.cjs'),
'utf8'
)
const { PREVIOUS_PATCH_TARGETS } = loadPatchTargets(asset)
for (const target of PREVIOUS_PATCH_TARGETS) {
const path = join(fixture.libDir, ...target.relativePath.slice(1))
let source = readFileSync(path, 'utf8')
for (const [from, to] of target.replacements) {
expect(source.split(from).length - 1).toBe(1)
source = source.replace(from, to)
}
let expectedHash = target.patchedSha256
if (target.relativePath.at(-1) === 'windowsTerminal.js' && terminalHash !== expectedHash) {
const variant = target.additionalPreviousVariants.find(
(entry) => entry.sha256 === terminalHash
)
expect(variant).toBeDefined()
for (const [from, to] of variant.replacements.toReversed()) {
expect(source.split(to).length - 1).toBe(1)
source = source.replace(to, from)
}
expectedHash = terminalHash
}
expect(createHash('sha256').update(source).digest('hex')).toBe(expectedHash)
writeFileSync(path, source)
}
return fixture
}
function loadPatchTargets(assetSource, controlledRequire = require) {
const module = { exports: {} }
const factory = new Function(
'module',
'exports',
'require',
`${assetSource}\nmodule.exports.PATCH_TARGETS = PATCH_TARGETS; module.exports.PREVIOUS_PATCH_TARGETS = PREVIOUS_PATCH_TARGETS`
)
factory(module, module.exports, controlledRequire)
return module.exports
}
config/scripts/node-server-qualification.mjs
+1 -1
View File
@@ -17,7 +17,7 @@ const BUILD_PREFIXES = [
'.github/actions/prepare-orcad-prebuilds/'
]
// A remote target's OS does not identify the client platform that builds its commands.
const CROSS_HOST_PREFIXES = ['src/main/ssh/', 'src/main/providers/', 'src/relay/', 'src/wsl-guest/']
const CROSS_HOST_PREFIXES = ['src/main/ssh/', 'src/main/providers/', 'src/wsl-guest/']
const PLATFORM_PREFIXES = [
'src/main/persistence/',
'src/main/sqlite/',
config/scripts/node-server-qualification.test.mjs
-2
View File
@@ -39,7 +39,6 @@ it.each([
'src/main/sqlite/database.ts',
'src/main/orcad/entry.ts',
'src/main/daemon/entry.ts',
'src/relay/index.ts',
'config/scripts/build-orcad-prebuilds.mjs',
'config/scripts/orcad-prebuild-slot-contents.mjs',
'src/shared/node-runtime-pin.ts'
@@ -124,7 +123,6 @@ it.each([
'src/main/ssh/orcad-remote-node-runtime-windows.ts',
'src/main/ssh/ssh-posix-command-wrapper.test.ts',
'src/main/providers/agent-foreground-process-git-bash.win32.test.ts',
'src/relay/windows-port-scan.ts',
'src/main/runtime/windows-firewall-remote-scope.ts',
'src/shared/remote-windows-path.ts'
])('qualifies every client platform for a remote execution input: %s', (file) => {
config/scripts/pr-code-change-scope.mjs
-4
View File
@@ -51,7 +51,6 @@ const GIT_COMPAT_PREFIXES = [
'src/shared/review-head-tracking-ref',
'src/shared/worktree/local-base-branch-fast-forward',
'src/main/git/',
'src/relay/git-',
'config/scripts/git-binary-compatibility'
]
@@ -244,12 +243,10 @@ const CROSS_VERSION_WIRE_PREFIXES = [
]
const MANAGED_HOOK_PREFIXES = [
'config/scripts/smoke-managed-hook-runtime-node18',
'config/scripts/smoke-process-host-node18',
'config/scripts/packaged-process-host-fixture',
'src/packages/process-host/',
'config/scripts/build-relay',
'src/relay/',
'src/wsl-guest/',
'src/shared/agent-hook',
'src/main/agent-hooks/'
@@ -413,7 +410,6 @@ const WINDOWS_PACKAGE_TESTS = [
'src/main/ipc/pty-spawn-env-codex-resume-provenance.test.ts',
'src/main/ipc/preflight-provider-command-selection.test.ts',
'src/main/ipc/preflight-runnable-local-cli.test.ts',
'src/relay/windows-port-scan.win32.test.ts',
'src/main/ssh/remote-node-runtime-store-windows.test.ts'
]
config/scripts/pr-e2e-source-routing.mjs
+1 -1
View File
@@ -269,7 +269,7 @@ export const PR_E2E_SOURCE_ROUTES = [
specs: ['tests/e2e/paired-quick-open-large-tree.spec.ts'],
matches: (file) =>
isProductSource(file) &&
/^(?:src\/main\/ipc\/filesystem-(?:list-files|search-file-paths)\.ts|src\/main\/ripgrep\/bundled-ripgrep-path\.ts|src\/main\/providers\/(?:filesystem-provider-contract|ssh-filesystem-provider(?:-capabilities)?)\.ts|src\/main\/runtime\/(?:orca-runtime-files|rpc\/methods\/files)\.ts|src\/relay\/(?:fs-handler(?:-install-rg|-list-files|-ripgrep-fallback)?|fs-list-files-fallback-chain|relay-bundled-ripgrep)\.ts|src\/renderer\/src\/(?:components\/(?:QuickOpen|quick-open-file-list|quick-open-search)\.tsx?|runtime\/(?:runtime-file-client|runtime-legacy-quick-open-inventory)\.ts)|src\/shared\/(?:quick-open-(?:install-rg|path-search|transport-budget)|ripgrep-process-availability|bundled-ripgrep)\.ts)$/.test(
/^(?:src\/main\/ipc\/filesystem-(?:list-files|search-file-paths)\.ts|src\/main\/ripgrep\/bundled-ripgrep-path\.ts|src\/main\/providers\/(?:filesystem-provider-contract|ssh-filesystem-provider(?:-capabilities)?)\.ts|src\/main\/runtime\/(?:orca-runtime-files|rpc\/methods\/files)\.ts|src\/renderer\/src\/(?:components\/(?:QuickOpen|quick-open-file-list|quick-open-search)\.tsx?|runtime\/(?:runtime-file-client|runtime-legacy-quick-open-inventory)\.ts)|src\/shared\/(?:quick-open-(?:install-rg|path-search|transport-budget)|ripgrep-process-availability|bundled-ripgrep)\.ts)$/.test(
file
)
},
config/scripts/pty-source-ack-boundary-benchmark.mjs
-89
View File
@@ -1,89 +0,0 @@
#!/usr/bin/env node
// Benchmarks relay PTY sent-boundary cleanup across a cumulative ACK drain, using the shipped
// PtySourceSentBoundaries rather than a stub so V8's real Set/array costs are included.
import { performance } from 'node:perf_hooks'
import { createJiti } from 'jiti'
const BOUNDARY_COUNTS = [1_024, 4_096, 16_384, 65_536]
// Set rehash timing swings run to run, so every row reports a median instead of a single sample.
const REPETITIONS = 3
const jiti = createJiti(import.meta.url)
const { PtySourceSentBoundaries } = await jiti.import(
'../../src/relay/pty-source-sent-boundaries.ts'
)
// Pre-change cleanup: rescan every retained boundary on every ACK.
function fullScanDrain(count) {
const boundaries = new Set()
for (let boundary = 0; boundary <= count; boundary += 1) {
boundaries.add(boundary)
}
const started = performance.now()
for (let creditedEndSu = 1; creditedEndSu <= count; creditedEndSu += 1) {
for (const boundary of boundaries) {
if (boundary < creditedEndSu) {
boundaries.delete(boundary)
}
}
}
return performance.now() - started
}
// Early-break cleanup: stops at the first live boundary, but still rebuilds a Set iterator per ACK.
function earlyBreakDrain(count) {
const boundaries = new Set()
for (let boundary = 0; boundary <= count; boundary += 1) {
boundaries.add(boundary)
}
const started = performance.now()
for (let creditedEndSu = 1; creditedEndSu <= count; creditedEndSu += 1) {
for (const boundary of boundaries) {
if (boundary >= creditedEndSu) {
break
}
boundaries.delete(boundary)
}
}
return performance.now() - started
}
// Shipped cleanup: a monotone cursor over ascending boundaries, so no boundary is ever revisited.
function cursorDrain(count) {
const boundaries = new PtySourceSentBoundaries(0)
for (let boundary = 1; boundary <= count; boundary += 1) {
boundaries.add(boundary)
}
const started = performance.now()
for (let creditedEndSu = 1; creditedEndSu <= count; creditedEndSu += 1) {
boundaries.dropBelow(creditedEndSu)
}
return performance.now() - started
}
function medianMs(drain, count) {
const samples = Array.from({ length: REPETITIONS }, () => drain(count)).sort((a, b) => a - b)
return samples[(samples.length - 1) >> 1]
}
function report(count) {
const fullScanMs = medianMs(fullScanDrain, count)
const earlyBreakMs = medianMs(earlyBreakDrain, count)
const cursorMs = medianMs(cursorDrain, count)
console.log(
`${String(count).padStart(6)} boundaries ` +
`full-scan ${fullScanMs.toFixed(2)}ms ` +
`early-break ${earlyBreakMs.toFixed(2)}ms ` +
`cursor ${cursorMs.toFixed(3)}ms ` +
`(cursor is ${(fullScanMs / cursorMs).toFixed(0)}x faster than full-scan, ` +
`${(earlyBreakMs / cursorMs).toFixed(0)}x faster than early-break)`
)
}
// Warm the three drains up first so the smallest row is not dominated by JIT tiering.
fullScanDrain(256)
earlyBreakDrain(256)
cursorDrain(256)
for (const count of BOUNDARY_COUNTS) {
report(count)
}
config/scripts/relay-artifact-manifest.test.mjs
-105
View File
@@ -1,105 +0,0 @@
// Packaged-relay contract: what `build:relay` actually writes to disk.
//
// Asserts against a real build, not the source tree — the unit suites cannot see
// this gap, because the WSL transcript dispatcher runs in-process under vitest
// and never forks.
import { execFileSync } from 'node:child_process'
import { createHash } from 'node:crypto'
import {
existsSync,
mkdirSync,
mkdtempSync,
readdirSync,
readFileSync,
rmSync,
writeFileSync
} from 'node:fs'
import { tmpdir } from 'node:os'
import { join, resolve } from 'node:path'
import { afterAll, beforeAll, describe, expect, it } from 'vitest'
import {
RELAY_BUILD_PLATFORMS,
RELAY_VERSION_FILENAME,
isWindowsRelayPlatform,
relayArtifactFilenames,
relayOptionalArtifactFilenames
} from '../../src/shared/relay-artifacts.ts'
const projectDir = resolve(import.meta.dirname, '../..')
// Its own tree: building into out/relay would clobber a developer's build and
// race the suites that read it.
const relayOutDir = mkdtempSync(join(tmpdir(), 'orca-relay-contract-'))
beforeAll(() => {
// A repeated build must not copy stale companions into the other platform bundles.
for (const platform of RELAY_BUILD_PLATFORMS) {
const outDir = join(relayOutDir, platform)
mkdirSync(outDir, { recursive: true })
writeFileSync(join(outDir, 'stale-companion.js'), 'throw new Error("stale")')
}
execFileSync('node', [join(projectDir, 'config', 'scripts', 'build-relay.mjs')], {
cwd: projectDir,
stdio: 'pipe',
env: { ...process.env, ORCA_RELAY_OUT_ROOT: relayOutDir }
})
}, 120_000)
afterAll(() => {
rmSync(relayOutDir, { recursive: true, force: true })
})
describe('packaged relay artifact manifest', () => {
it.each([...RELAY_BUILD_PLATFORMS])('emits exactly the declared artifacts for %s', (platform) => {
const outDir = join(relayOutDir, platform)
const expected = relayArtifactFilenames(isWindowsRelayPlatform(platform))
for (const filename of expected) {
expect(existsSync(join(outDir, filename)), `${platform}/${filename} missing`).toBe(true)
}
// Exactly, not merely at least: an undeclared artifact ships unhashed and
// unprobed, which is the same gap in the other direction.
const emitted = readdirSync(outDir)
.filter((name) => name !== RELAY_VERSION_FILENAME)
.sort()
const optional = relayOptionalArtifactFilenames(isWindowsRelayPlatform(platform)).filter(
(filename) => existsSync(join(outDir, filename))
)
expect(emitted).toEqual([...expected, ...optional].sort())
})
it.each([...RELAY_BUILD_PLATFORMS])('hashes every declared artifact for %s', (platform) => {
const outDir = join(relayOutDir, platform)
const hash = createHash('sha256')
const artifacts = [
...relayArtifactFilenames(isWindowsRelayPlatform(platform)),
...relayOptionalArtifactFilenames(isWindowsRelayPlatform(platform)).filter((filename) =>
existsSync(join(outDir, filename))
)
]
for (const filename of artifacts) {
hash.update(readFileSync(join(outDir, filename)))
}
const version = readFileSync(join(outDir, RELAY_VERSION_FILENAME), 'utf8')
// A companion left out of the hash lets a changed relay reuse an existing
// immutable remote directory, serving a mixed-generation install forever.
expect(version.split('+')[1]).toBe(hash.digest('hex').slice(0, 12))
})
it('ships the WSL transcript helper beside the service that forks it', () => {
for (const platform of RELAY_BUILD_PLATFORMS) {
const outDir = join(relayOutDir, platform)
const service = readFileSync(join(outDir, 'relay-ai-vault-service.js'), 'utf8')
// The bundled service reaches the fork, so the entry must sit beside it:
// the spawn resolves the child relative to its own bundle directory.
expect(service, `${platform} service no longer forks the helper`).toContain(
'wsl-transcript-fs-process-entry.js'
)
expect(
existsSync(join(outDir, 'wsl-transcript-fs-process-entry.js')),
`${platform} forks a helper it does not ship`
).toBe(true)
}
})
})
config/scripts/relay-asset-line-ending-pin.test.mjs
-82
View File
@@ -1,82 +0,0 @@
import { execFileSync } from 'node:child_process'
import { resolve } from 'node:path'
import { RELAY_ARTIFACTS } from '../../src/shared/relay-artifacts.ts'
import { describe, expect, it } from 'vitest'
/**
* Guard the `.gitattributes` pin that keeps `config/relay-assets` on LF.
*
* `core.autocrlf=true` ships in the Git-for-Windows system config, so without a
* pin a Windows runner checks these out as CRLF. build-relay.mjs copies them
* verbatim into the bundle and hashes them byte-for-byte into `.version`, which
* names the immutable remote relay directory -- so a Windows-built client and a
* mac/Linux-built one disagree on the same release, and one SSH host ends up with
* two relay trees, each paying its own remote native-dep compile.
*
* Measured on v1.4.197: master-cloexec-patch.cjs shipped at 11229 bytes from the
* mac runner and 11547 (= 11229 + 318 lines) from the Windows one.
*/
const projectDir = resolve(import.meta.dirname, '../..')
function git(args) {
return execFileSync('git', args, { cwd: projectDir, encoding: 'utf8' })
}
/** `git check-attr -z` emits NUL-separated path/attr/value triples. */
function eolAttributes(paths) {
const fields = git(['check-attr', '-z', 'eol', '--', ...paths]).split('\0')
const found = new Map()
for (let index = 0; index + 2 < fields.length; index += 3) {
found.set(fields[index], fields[index + 2])
}
return found
}
/**
* Keyed off the manifest, not a directory: build-relay refuses to emit an
* artifact absent from RELAY_ARTIFACTS, so relocating an asset cannot slip
* past this the way a path glob would. esbuild bundles have no tracked
* source and contribute no hits, so they need no classifying.
*/
function trackedManifestSources() {
const paths = new Set()
for (const { filename } of RELAY_ARTIFACTS) {
const hits = git(['ls-files', '-z', '--', `*/${filename}`])
.split('\0')
.filter(Boolean)
for (const path of hits) {
paths.add(path)
}
}
return [...paths]
}
describe('config/relay-assets line-ending pin', () => {
it('pins every tracked relay artifact source to LF', () => {
const assets = trackedManifestSources()
expect(assets.length).toBeGreaterThan(0)
const attributes = eolAttributes(assets)
const unpinned = assets.filter((path) => attributes.get(path) !== 'lf')
expect(
unpinned,
'A relay asset left on the platform default gets CRLF on a Windows runner, ' +
'which changes the .version hash and splits one release across two remote ' +
'relay directories. Pin it in .gitattributes.'
).toEqual([])
})
// Why: the assertion above only sees files that exist today. These fix the
// pattern itself -- broad enough to cover a file added tomorrow, narrow enough
// not to claim neighbours.
it.each([
['config/relay-assets/example.cjs', 'lf'],
['config/relay-assets/nested/deeper/example.cjs', 'lf'],
['config/relay-assets/example.txt', 'lf'],
['config/relay-assets-extra/example.cjs', 'unspecified'],
['vendor/config/relay-assets/example.cjs', 'unspecified']
])('resolves %s to eol=%s', (path, expected) => {
expect(eolAttributes([path]).get(path)).toBe(expected)
})
})
config/scripts/relay-replay-buffer-benchmark.mjs
-218
View File
@@ -1,218 +0,0 @@
#!/usr/bin/env node
// Benchmark: the relay's per-PTY-chunk replay buffer append (src/relay/pty-handler.ts).
//
// appendReplayBuffer did `buffered += data` then, over the cap, `buffered.slice(-CAP)`.
// Once a PTY has produced CAP bytes -- which a long-lived shell does almost immediately
// -- every subsequent chunk flattened and copied the whole 100 KB window. The append is
// called per raw node-pty emission, before batching, so it is per chunk, not per flush.
//
// The fix reuses RecentPtyOutputBuffer: keep chunks, drop from the head, and defer the
// join to read(), which only attach/adopt/revive call.
//
// Both arms are compared for an identical retained tail before timing.
//
// Run with: node config/scripts/relay-replay-buffer-benchmark.mjs
import { readFileSync } from 'node:fs'
import { performance } from 'node:perf_hooks'
const ROUNDS = 6
const SECONDS = Number(process.env.ORCA_REPLAY_BENCH_SECONDS ?? '1')
if (!Number.isFinite(SECONDS) || SECONDS <= 0) {
throw new Error(`ORCA_REPLAY_BENCH_SECONDS must be positive, received ${SECONDS}`)
}
// Why re-read the sources: the claim is that the relay now appends into a chunk deque
// with the relay's own cap. If either reverts, these numbers stop meaning what they say.
const HANDLER_SOURCE = readFileSync(
new URL('../../src/relay/pty-handler.ts', import.meta.url),
'utf8'
)
if (!/managed\.buffered\.append\(/.test(HANDLER_SOURCE)) {
throw new Error('relay no longer appends into a chunk deque; this benchmark is stale')
}
const capMatch = HANDLER_SOURCE.match(/REPLAY_BUFFER_MAX = ([\d *]+)/)
if (!capMatch) {
throw new Error('REPLAY_BUFFER_MAX not found; this benchmark is stale')
}
// The regex admits only digits, spaces, and `*`, so the literal is a plain product.
const REPLAY_BUFFER_MAX = capMatch[1]
.split('*')
.map((factor) => Number(factor.trim()))
.reduce((product, factor) => product * factor, 1)
if (!Number.isSafeInteger(REPLAY_BUFFER_MAX) || REPLAY_BUFFER_MAX <= 0) {
throw new Error(`could not read REPLAY_BUFFER_MAX from source, got ${capMatch[1]}`)
}
// Pre-fix: rolling string, re-sliced once over the cap.
function appendString(state, data) {
if (data.length === 0) {
return state
}
const next = state + data
return next.length > REPLAY_BUFFER_MAX ? next.slice(-REPLAY_BUFFER_MAX) : next
}
// Post-fix: mirrors RecentPtyOutputBuffer's append/read for the relay's options.
class ChunkDeque {
constructor(limit) {
this.chunks = []
this.headIndex = 0
this.headOffset = 0
this.totalLen = 0
this.limit = limit
}
append(data) {
if (data.length === 0) {
return
}
if (data.length >= this.limit) {
this.chunks = [data.slice(-this.limit)]
this.headIndex = 0
this.headOffset = 0
this.totalLen = this.limit
return
}
this.chunks.push(data)
this.totalLen += data.length
while (this.totalLen > this.limit) {
const headRemaining = this.chunks[this.headIndex].length - this.headOffset
const excess = this.totalLen - this.limit
if (headRemaining <= excess) {
this.chunks[this.headIndex] = ''
this.headIndex += 1
this.headOffset = 0
this.totalLen -= headRemaining
} else {
this.headOffset += excess
this.totalLen -= excess
}
}
if (this.headIndex >= 1024) {
this.chunks = this.chunks.slice(this.headIndex)
this.headIndex = 0
}
}
read() {
if (this.chunks.length - this.headIndex > 1) {
const retained = this.chunks.slice(this.headIndex)
if (this.headOffset > 0) {
retained[0] = retained[0].slice(this.headOffset)
this.headOffset = 0
}
this.chunks = [retained.join('')]
this.headIndex = 0
} else if (this.headOffset > 0) {
this.chunks[this.headIndex] = this.chunks[this.headIndex].slice(this.headOffset)
this.headOffset = 0
}
return this.chunks[this.headIndex] ?? ''
}
}
function makeChunks(chunkBytes, chunkCount) {
// Vary content so V8 cannot dedupe or treat the appends as loop-invariant.
return Array.from({ length: chunkCount }, (_value, index) =>
`${index}:`.padEnd(chunkBytes, 'abcdefghijklmnopqrstuvwxyz')
)
}
// Why pre-saturate: the interesting regime is a PTY that has already filled the window,
// which is where the old form copied 100 KB on literally every chunk. Timing from empty
// would average in a cheap warm-up the real process leaves behind in milliseconds.
function saturate(chunks) {
let stringState = ''
const deque = new ChunkDeque(REPLAY_BUFFER_MAX)
const preload = 'p'.repeat(REPLAY_BUFFER_MAX)
stringState = appendString(stringState, preload)
deque.append(preload)
return { stringState, deque, chunks }
}
function median(samples) {
const sorted = [...samples].sort((a, b) => a - b)
const mid = sorted.length / 2
return (sorted[mid - 1] + sorted[mid]) / 2
}
function timeString(chunks) {
let state = 'p'.repeat(REPLAY_BUFFER_MAX)
const start = performance.now()
for (const chunk of chunks) {
state = appendString(state, chunk)
}
const elapsed = performance.now() - start
if (state.length !== REPLAY_BUFFER_MAX) {
throw new Error('string arm lost its window')
}
return elapsed
}
function timeDeque(chunks) {
const deque = new ChunkDeque(REPLAY_BUFFER_MAX)
deque.append('p'.repeat(REPLAY_BUFFER_MAX))
const start = performance.now()
for (const chunk of chunks) {
deque.append(chunk)
}
const elapsed = performance.now() - start
return elapsed
}
// Arms alternate which one leads so within-round drift cannot favour either.
function measure(chunks) {
timeString(chunks)
timeDeque(chunks)
const stringSamples = []
const dequeSamples = []
for (let round = 0; round < ROUNDS; round += 1) {
if (round % 2 === 0) {
stringSamples.push(timeString(chunks))
dequeSamples.push(timeDeque(chunks))
} else {
dequeSamples.push(timeDeque(chunks))
stringSamples.push(timeString(chunks))
}
}
return { stringMs: median(stringSamples), dequeMs: median(dequeSamples) }
}
const pad = (value, width) => String(value).padStart(width)
console.log('Relay PTY replay-buffer append, per second of output. Lower is better.')
console.log(
`cap=${(REPLAY_BUFFER_MAX / 1024).toFixed(0)} KiB rounds=${ROUNDS} (per-arm medians, pre-saturated)`
)
console.log(
`${pad('workload', 30)} ${pad('rolling str', 12)} ${pad('chunk deque', 12)} ${pad('speedup', 9)}`
)
for (const [label, chunkBytes, chunksPerSecond] of [
['interactive shell 64B x200', 64, 200],
['agent TUI 512B x400', 512, 400],
['build log 4KiB x256 (1 MiB/s)', 4 * 1024, 256],
['dump 8KiB x512 (4 MiB/s)', 8 * 1024, 512],
['firehose 16KiB x1024 (16 MiB/s)', 16 * 1024, 1024]
]) {
const chunks = makeChunks(chunkBytes, Math.round(chunksPerSecond * SECONDS))
const { stringState, deque } = saturate(chunks)
let stringTail = stringState
for (const chunk of chunks) {
stringTail = appendString(stringTail, chunk)
deque.append(chunk)
}
if (deque.read() !== stringTail) {
throw new Error(`retained tail differs for ${label}`)
}
if (stringTail.length !== REPLAY_BUFFER_MAX) {
throw new Error(`fixture never saturated the window for ${label}`)
}
const { stringMs, dequeMs } = measure(chunks)
console.log(
`${pad(label, 30)} ${pad(`${stringMs.toFixed(3)} ms`, 12)} ${pad(`${dequeMs.toFixed(3)} ms`, 12)} ${pad(`${(stringMs / dequeMs).toFixed(0)}x`, 9)}`
)
}
console.log(
"\nThis is per PTY, and the relay runs on the user's SSH host. Reads (attach, adopt,\nrevive) now pay the join instead, but those are rare and were already O(window)."
)
config/scripts/relay-watcher-fault-harness.mjs
-385
View File
@@ -1,385 +0,0 @@
import { build } from 'esbuild'
import { spawn } from 'node:child_process'
import { randomBytes } from 'node:crypto'
import { createRequire } from 'node:module'
import { existsSync } from 'node:fs'
import { mkdtemp, readFile, realpath, rm, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { dirname, join, resolve } from 'node:path'
const WAIT_TIMEOUT_MS = 20_000
const require = createRequire(import.meta.url)
// Why: endpoint credentials are 32–256 base64url chars; openClient requires an authenticated
// transport, and #12746 admits pty.data only after a consumer grant.
function writeEndpointCredential(path) {
return writeFile(path, randomBytes(32).toString('base64url'), 'utf8')
}
function withTimeout(promise, label, stderr) {
return new Promise((resolvePromise, rejectPromise) => {
const timer = setTimeout(() => {
rejectPromise(new Error(`Timed out waiting for ${label}\n${stderr()}`))
}, WAIT_TIMEOUT_MS)
promise.then(
(value) => {
clearTimeout(timer)
resolvePromise(value)
},
(error) => {
clearTimeout(timer)
rejectPromise(error)
}
)
})
}
function pollUntil(readValue, label, stderr) {
const deadline = Date.now() + WAIT_TIMEOUT_MS
return new Promise((resolveValue, rejectValue) => {
const poll = async () => {
try {
const value = await readValue()
if (value !== undefined) {
resolveValue(value)
return
}
} catch {}
if (Date.now() >= deadline) {
rejectValue(new Error(`Timed out waiting for ${label}\n${stderr()}`))
return
}
setTimeout(poll, 10)
}
void poll()
})
}
function waitForExit(proc) {
if (proc.exitCode !== null || proc.signalCode !== null) {
return Promise.resolve()
}
return new Promise((resolveExit) => proc.once('exit', resolveExit))
}
async function loadProtocol(bundleDir) {
const outfile = join(bundleDir, 'relay-protocol.cjs')
await build({
entryPoints: [resolve('src/wsl-guest/protocol.ts')],
bundle: true,
platform: 'node',
format: 'cjs',
outfile,
logLevel: 'silent'
})
return require(outfile)
}
function attachProcessStreams(proc) {
let stderr = ''
proc.stderr.on('data', (chunk) => {
stderr = `${stderr}${String(chunk)}`.slice(-8_000)
})
return {
stderr: () => stderr
}
}
function waitForStdoutSentinel(proc, protocol, stderr) {
let stdoutBuffer = Buffer.alloc(0)
return withTimeout(
new Promise((resolvePromise, rejectPromise) => {
let settled = false
const onData = (chunk) => {
stdoutBuffer = Buffer.concat([stdoutBuffer, chunk])
const sentinel = Buffer.from(protocol.RELAY_SENTINEL)
const index = stdoutBuffer.indexOf(sentinel)
if (index === -1) {
return
}
settled = true
proc.stdout.off('data', onData)
proc.off('exit', onExit)
resolvePromise(stdoutBuffer.subarray(index + sentinel.length))
}
const onExit = (code, signal) => {
if (settled) {
return
}
settled = true
proc.stdout.off('data', onData)
rejectPromise(
new Error(`process exited before sentinel (code=${code}, signal=${signal})\n${stderr()}`)
)
}
proc.stdout.on('data', onData)
proc.once('exit', onExit)
}),
'relay sentinel',
stderr
)
}
function createRelayClient(entryPath, args, env, protocol) {
const proc = spawn(process.execPath, [entryPath, ...args], {
cwd: dirname(entryPath),
env,
stdio: ['pipe', 'pipe', 'pipe']
})
const streams = attachProcessStreams(proc)
const messages = []
let nextSequence = 1
let stdoutBuffer = Buffer.alloc(0)
let ready = false
let resolveReady
const sentinelReceived = new Promise((resolvePromise) => {
resolveReady = resolvePromise
})
const decoder = new protocol.FrameDecoder((frame) => {
if (frame.type === protocol.MessageType.Regular) {
messages.push(protocol.parseJsonRpcMessage(frame.payload))
}
})
proc.stdout.on('data', (chunk) => {
if (ready) {
decoder.feed(chunk)
return
}
stdoutBuffer = Buffer.concat([stdoutBuffer, chunk])
const sentinel = Buffer.from(protocol.RELAY_SENTINEL)
const index = stdoutBuffer.indexOf(sentinel)
if (index === -1) {
return
}
ready = true
resolveReady()
const remainder = stdoutBuffer.subarray(index + sentinel.length)
if (remainder.length > 0) {
decoder.feed(remainder)
}
})
const waitForMessage = (startIndex, predicate, label) =>
pollUntil(() => messages.slice(startIndex).find(predicate), label, streams.stderr)
const request = async (method, params = {}) => {
const id = nextSequence++
const startIndex = messages.length
proc.stdin.write(protocol.encodeJsonRpcFrame({ jsonrpc: '2.0', id, method, params }, id, 0))
const response = await waitForMessage(
startIndex,
(message) => message.id === id,
`response to ${method}`
)
if (response.error) {
throw new Error(`${method} failed: ${response.error.message}`)
}
return response.result
}
const notify = (method, params = {}) => {
const sequence = nextSequence++
proc.stdin.write(protocol.encodeJsonRpcFrame({ jsonrpc: '2.0', method, params }, sequence, 0))
}
return {
proc,
request,
notify,
sentinelReceived: withTimeout(sentinelReceived, 'relay sentinel', streams.stderr),
messageCount: () => messages.length,
waitForNotification: (startIndex, method, predicate = () => true) =>
waitForMessage(
startIndex,
(message) => message.method === method && predicate(message.params ?? {}),
`${method} notification`
),
stderr: streams.stderr
}
}
async function stopProcess(proc, stderr, label) {
if (!proc || proc.exitCode !== null || proc.signalCode !== null) {
return
}
proc.kill('SIGTERM')
try {
await withTimeout(waitForExit(proc), `${label} shutdown`, stderr)
} catch {
proc.kill('SIGKILL')
await withTimeout(waitForExit(proc), `forced ${label} shutdown`, stderr)
}
}
async function waitForWatcherPid(pidFile, previousPid, stderr) {
return pollUntil(
async () => {
const pid = Number((await readFile(pidFile, 'utf8')).trim())
if (!Number.isInteger(pid) || pid <= 0 || pid === previousPid) {
return undefined
}
// Why: replacement children reuse this exclusive path after fault injection.
await rm(pidFile, { force: true })
return pid
},
previousPid ? 'replacement watcher child pid' : 'initial watcher child pid',
stderr
)
}
function includesWatchPath(params, targetPath) {
return Array.isArray(params.events)
? params.events.some((event) => event.absolutePath === targetPath)
: false
}
async function main() {
const platform = `${process.platform}-${process.arch}`
const relayEntry = resolve('out', 'relay', platform, 'relay.js')
const watcherEntry = resolve('out', 'relay', platform, 'relay-watcher.js')
if (!existsSync(relayEntry) || !existsSync(watcherEntry)) {
throw new Error(`Missing built relay artifacts for ${platform}; run pnpm run build:relay first`)
}
let tempRoot
let daemon
let daemonStreams
let relay
try {
tempRoot = await mkdtemp(join(tmpdir(), 'orca-relay-watcher-fault-'))
const watchRoot = await realpath(tempRoot)
const pidFile = join(tempRoot, 'watcher.pid')
const credentialFile = join(tempRoot, 'endpoint.credential')
const protocol = await loadProtocol(tempRoot)
const socketPath =
process.platform === 'win32'
? `\\\\.\\pipe\\orca-relay-watcher-fault-${process.pid}-${Date.now()}`
: join(tempRoot, 'relay.sock')
await writeEndpointCredential(credentialFile)
// Why detached + --connect: the daemon primary stdio is unproved, so it cannot open a consumer
// session; only an endpoint-credential socket client is admitted for pty.data after #12746.
daemon = spawn(
process.execPath,
[
relayEntry,
'--detached',
'--grace-time',
'0',
'--sock-path',
socketPath,
'--endpoint-dir',
join(tempRoot, 'agent-hooks'),
'--credential-file',
credentialFile
],
{
cwd: dirname(relayEntry),
env: { ...process.env, ORCA_WATCHER_CHILD_PID_FILE: pidFile },
stdio: ['ignore', 'pipe', 'pipe']
}
)
daemonStreams = attachProcessStreams(daemon)
await waitForStdoutSentinel(daemon, protocol, daemonStreams.stderr)
relay = createRelayClient(
relayEntry,
['--connect', '--sock-path', socketPath, '--credential-file', credentialFile],
process.env,
protocol
)
await relay.sentinelReceived
// Why no outputFlowControl: legacy owner grant admits plain pty.data without delivery tokens.
const grant = await relay.request('pty.openClient', {
protocolVersion: 1,
clientInstanceId: `relay-watcher-fault-${process.pid}`,
requestedRole: 'session-owner'
})
if (grant?.role !== 'session-owner') {
throw new Error(`expected session-owner grant, got ${JSON.stringify(grant)}`)
}
const spawned = await relay.request('pty.spawn', { cols: 80, rows: 24, cwd: watchRoot })
const beforePtyMarker = `ORCA_PTY_BEFORE_${Date.now()}`
let startIndex = relay.messageCount()
relay.notify('pty.data', { id: spawned.id, data: `echo ${beforePtyMarker}\r` })
await relay.waitForNotification(
startIndex,
'pty.data',
(params) => params.id === spawned.id && String(params.data).includes(beforePtyMarker)
)
await relay.request('fs.watch', { rootPath: watchRoot })
const firstWatcherPid = await waitForWatcherPid(
pidFile,
undefined,
() => `${daemonStreams.stderr()}\n${relay.stderr()}`
)
const beforePath = join(watchRoot, 'before.txt')
startIndex = relay.messageCount()
await writeFile(beforePath, 'before')
await relay.waitForNotification(startIndex, 'fs.changed', (params) =>
includesWatchPath(params, beforePath)
)
const faultSignal = process.platform === 'win32' ? 'SIGTERM' : 'SIGSEGV'
startIndex = relay.messageCount()
process.kill(firstWatcherPid, faultSignal)
const replacementWatcherPid = await waitForWatcherPid(
pidFile,
firstWatcherPid,
() => `${daemonStreams.stderr()}\n${relay.stderr()}`
)
await relay.waitForNotification(startIndex, 'fs.changed', (params) =>
Array.isArray(params.events)
? params.events.some(
(event) => event.kind === 'overflow' && event.absolutePath === watchRoot
)
: false
)
const status = await relay.request('relay.status')
if (status.pid !== daemon.pid) {
throw new Error('relay.status did not come from the original surviving relay process')
}
const afterPtyMarker = `ORCA_PTY_AFTER_${Date.now()}`
startIndex = relay.messageCount()
relay.notify('pty.data', { id: spawned.id, data: `echo ${afterPtyMarker}\r` })
await relay.waitForNotification(
startIndex,
'pty.data',
(params) => params.id === spawned.id && String(params.data).includes(afterPtyMarker)
)
const afterPath = join(watchRoot, 'after.txt')
startIndex = relay.messageCount()
await writeFile(afterPath, 'after')
await relay.waitForNotification(startIndex, 'fs.changed', (params) =>
includesWatchPath(params, afterPath)
)
relay.notify('fs.unwatch', { rootPath: watchRoot })
await relay.request('pty.shutdown', { id: spawned.id })
console.log(
JSON.stringify({
relayPid: daemon.pid,
killedWatcherPid: firstWatcherPid,
replacementWatcherPid,
faultSignal,
relaySurvived: true,
existingPtySurvived: true,
overflowRefreshDelivered: true,
postCrashEventDelivered: true
})
)
} finally {
await stopProcess(relay?.proc, relay?.stderr ?? (() => ''), 'connect bridge')
await stopProcess(daemon, daemonStreams?.stderr ?? (() => ''), 'relay daemon')
if (tempRoot) {
await rm(tempRoot, { recursive: true, force: true })
}
}
}
await main()
config/scripts/relay-windows-process-tree-staging.mjs
-64
View File
@@ -1,64 +0,0 @@
/**
* Stage the prebuilt `@vscode/windows-process-tree` addon into a Windows relay bundle.
*
* Every desktop package ships relays for every host OS, so a macOS or Linux build
* needs the addon a Windows job compiled: without it a Windows SSH host cannot
* launch the relay outside sshd's job as a standard user. Release builds list the
* arches they require; a local build without the addon ships the scan fallback.
*/
import { copyFileSync } from 'node:fs'
import { join } from 'node:path'
import {
RELAY_WINDOWS_PROCESS_TREE_FILENAME,
isWindowsRelayPlatform
} from '../../src/shared/relay-artifacts.ts'
import { relayWindowsProcessTreeAddonDefect } from './windows-process-tree-gyp-rebuild.mjs'
/** `ORCA_REQUIRE_RELAY_NATIVE_ADDONS`: comma-separated arches, or `all`. */
export function parseRequiredRelayAddonArches(value) {
return (value ?? '')
.split(',')
.map((entry) => entry.trim())
.filter(Boolean)
}
/**
* @param {{
* platform: string,
* outDir: string,
* buildDir: string,
* requiredArches: string[],
* log?: (message: string) => void
* }} options
* @returns {'staged' | 'skipped' | 'not-windows'}
*/
export function stageRelayWindowsProcessTreeAddon({
platform,
outDir,
buildDir,
requiredArches,
log = console.log
}) {
if (!isWindowsRelayPlatform(platform)) {
return 'not-windows'
}
const arch = platform.slice('win32-'.length)
const source = join(buildDir, arch, RELAY_WINDOWS_PROCESS_TREE_FILENAME)
const required = requiredArches.includes(arch) || requiredArches.includes('all')
const defect = relayWindowsProcessTreeAddonDefect(source, arch)
if (defect) {
const reason = `${source}: ${defect}`
if (required) {
throw new Error(
`Relay ${platform} needs ${RELAY_WINDOWS_PROCESS_TREE_FILENAME}, but ${reason}. ` +
`On Windows run: node config/scripts/build-windows-process-tree-relay-addon.mjs --arch=${arch}. ` +
'CI builds on other OSes download it from the relay-windows-process-tree artifact.'
)
}
// Never ship a defective binary: the scan fallback beats a relay that loads the wrong addon.
log(`Relay ${platform}: ${reason}; relay will use the PowerShell scan.`)
return 'skipped'
}
copyFileSync(source, join(outDir, RELAY_WINDOWS_PROCESS_TREE_FILENAME))
return 'staged'
}
config/scripts/relay-windows-process-tree-staging.test.mjs
-106
View File
@@ -1,106 +0,0 @@
import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { afterEach, describe, expect, it } from 'vitest'
import {
parseRequiredRelayAddonArches,
stageRelayWindowsProcessTreeAddon
} from './relay-windows-process-tree-staging.mjs'
import { relayWindowsProcessTreeAddonDefect } from './windows-process-tree-gyp-rebuild.mjs'
const MACHINE = { x64: 0x8664, arm64: 0xaa64 }
const LAUNCHER = 'spawnOutsideJob\0'
const roots = []
afterEach(() => roots.splice(0).forEach((root) => rmSync(root, { recursive: true, force: true })))
function peImage(machine, body) {
const header = Buffer.alloc(0x90)
header.write('MZ')
header.writeUInt32LE(0x80, 0x3c)
header.write('PE\0\0', 0x80)
header.writeUInt16LE(machine, 0x84)
return Buffer.concat([header, Buffer.from(body, 'binary')])
}
function fixture(addons = {}) {
const root = mkdtempSync(join(tmpdir(), 'relay-process-tree-'))
roots.push(root)
const buildDir = join(root, 'build')
const outDir = join(root, 'out')
mkdirSync(outDir)
for (const [arch, bytes] of Object.entries(addons)) {
mkdirSync(join(buildDir, arch), { recursive: true })
writeFileSync(join(buildDir, arch, 'windows-process-tree.node'), bytes)
}
const logs = []
const stage = (platform, requiredArches = []) =>
stageRelayWindowsProcessTreeAddon({
platform,
outDir,
buildDir,
requiredArches,
log: (message) => logs.push(message)
})
return { buildDir, outDir, logs, stage, staged: join(outDir, 'windows-process-tree.node') }
}
describe('relay windows-process-tree addon check', () => {
it('accepts only a clean launcher build for the requested machine', () => {
const { buildDir } = fixture({
x64: peImage(MACHINE.x64, `ntdll.dll\0${LAUNCHER}`),
arm64: peImage(MACHINE.x64, LAUNCHER)
})
expect(
relayWindowsProcessTreeAddonDefect(join(buildDir, 'x64/windows-process-tree.node'), 'x64')
).toBeNull()
expect(
relayWindowsProcessTreeAddonDefect(join(buildDir, 'arm64/windows-process-tree.node'), 'arm64')
).toContain('machine 0x8664, not arm64')
})
it('rejects a pre-launcher build that is otherwise clean and loadable', () => {
const { buildDir } = fixture({ x64: peImage(MACHINE.x64, 'NtQueryInformationProcess\0') })
expect(
relayWindowsProcessTreeAddonDefect(join(buildDir, 'x64/windows-process-tree.node'), 'x64')
).toContain('does not export spawnOutsideJob')
})
it('rejects the unpatched command-line reader even when it has the launcher', () => {
const { buildDir } = fixture({ x64: peImage(MACHINE.x64, `ReadProcessMemory\0${LAUNCHER}`) })
expect(
relayWindowsProcessTreeAddonDefect(join(buildDir, 'x64/windows-process-tree.node'), 'x64')
).toContain('ReadProcessMemory')
})
})
describe('staging the relay windows-process-tree addon', () => {
it('copies a valid addon into each Windows relay and skips other hosts', () => {
const addon = peImage(MACHINE.arm64, LAUNCHER)
const { stage, staged } = fixture({ arm64: addon })
expect(stage('linux-x64', ['all'])).toBe('not-windows')
expect(existsSync(staged)).toBe(false)
expect(stage('win32-arm64', ['x64', 'arm64'])).toBe('staged')
expect(readFileSync(staged)).toEqual(addon)
})
it('degrades to the scan when an unrequired addon is missing or stale', () => {
const { stage, staged, logs } = fixture({ x64: peImage(MACHINE.x64, 'no launcher') })
expect(stage('win32-x64')).toBe('skipped')
expect(stage('win32-arm64')).toBe('skipped')
expect(existsSync(staged)).toBe(false)
expect(logs.join('\n')).toMatch(/does not export spawnOutsideJob[\s\S]*is missing/)
})
it('fails a release build whose required addon is missing or stale', () => {
const { stage, staged } = fixture({ x64: peImage(MACHINE.x64, 'no launcher') })
expect(() => stage('win32-x64', ['x64', 'arm64'])).toThrow(/spawnOutsideJob/)
expect(() => stage('win32-arm64', ['all'])).toThrow(/is missing/)
expect(existsSync(staged)).toBe(false)
})
it('reads the per-arch requirement list', () => {
expect(parseRequiredRelayAddonArches(undefined)).toEqual([])
expect(parseRequiredRelayAddonArches(' x64, arm64 ,')).toEqual(['x64', 'arm64'])
})
})
config/scripts/smoke-managed-hook-runtime-node18.mjs
-64
View File
@@ -1,64 +0,0 @@
#!/usr/bin/env node
import assert from 'node:assert/strict'
import { constants } from 'node:fs'
import { access, mkdtemp, readFile, rm } from 'node:fs/promises'
import { createRequire } from 'node:module'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { fileURLToPath } from 'node:url'
const PLATFORMS = [
'linux-x64',
'linux-arm64',
'darwin-x64',
'darwin-arm64',
'win32-x64',
'win32-arm64'
]
const ROOT = fileURLToPath(new URL('../..', import.meta.url))
const require = createRequire(import.meta.url)
assert.match(process.versions.node, /^18\./, 'This smoke test must run under Node 18')
const home = await mkdtemp(join(tmpdir(), 'orca-managed-hook-node18-'))
const originalHome = process.env.HOME
const originalUserProfile = process.env.USERPROFILE
const originalGetuid = process.getuid
process.env.HOME = home
process.env.USERPROFILE = home
process.getuid = undefined
try {
const runtimes = PLATFORMS.map((platform) => {
const artifact = join(ROOT, 'out', 'relay', platform, 'managed-hook-runtime.js')
const runtime = require(artifact)
assert.equal(typeof runtime.installManagedHooks, 'function', `${platform} installer export`)
return runtime
})
const summary = await runtimes[0].installManagedHooks({ agents: ['codex', 'claude'] })
assert.deepEqual(summary, { installers: 2, errors: 0 })
const codexHooks = await readFile(join(home, '.codex', 'hooks.json'), 'utf8')
const claudeSettings = await readFile(join(home, '.claude', 'settings.json'), 'utf8')
assert.match(codexHooks, /\.orca\/agent-hooks\/codex-hook\.sh/)
assert.match(claudeSettings, /\.orca\/agent-hooks\/claude-hook\.sh/)
await access(join(home, '.orca', 'agent-hooks', 'codex-hook.sh'), constants.X_OK)
await access(join(home, '.orca', 'agent-hooks', 'claude-hook.sh'), constants.X_OK)
} finally {
if (originalHome === undefined) {
delete process.env.HOME
} else {
process.env.HOME = originalHome
}
if (originalUserProfile === undefined) {
delete process.env.USERPROFILE
} else {
process.env.USERPROFILE = originalUserProfile
}
process.getuid = originalGetuid
await rm(home, { recursive: true, force: true })
}
console.log('Node 18 managed-hook runtime smoke passed for all relay platforms.')
config/scripts/ssh-relay-import-boundary.test.mjs
-69
View File
@@ -1,69 +0,0 @@
import { globSync, readFileSync } from 'node:fs'
import path from 'node:path'
import { expect, it } from 'vitest'
import { collectModuleSpecifiers } from './static-module-specifiers.mjs'
import { isTestOnlySourcePath } from './test-only-source-path.mjs'
const ROOT = path.resolve(import.meta.dirname, '..', '..')
const RELAY_SOURCE = 'src/relay'
// Why: the SSH relay is being retired; only its own tests may reach into it, and this list only shrinks.
const RELAY_TEST_IMPORTERS = [
'src/main/ai-vault-search/session-search-scope-entry-points.test.ts',
'src/main/ai-vault/antigravity-index-file-admission.test.ts',
'src/main/ai-vault/remote-session-large-transcripts.test.ts',
'src/main/git/git-network-safety-real-git.test.ts',
'src/main/git/source-control/blob-absence-real-git.test.ts',
'src/main/git/source-control/bulk-pathspec-stdin.test.ts',
'src/main/git/source-control/staging-discard-index-safety.test.ts',
'src/main/git/status-branch-compare-real-ref.test.ts',
'src/main/git/status-branch-line-total-relay-parity.test.ts',
'src/main/git/status-conflict-overlap.bench.test.ts',
'src/main/git/worktree-rebase-update-refs-real-git.test.ts',
'src/main/git/worktree-safety-real-git.test.ts',
'src/main/ipc/filesystem-quick-open-options.integration.test.ts',
'src/main/ipc/worktree-push-target-cleanup.test.ts',
'src/main/ipc/worktree-push-target-reconciliation.test.ts',
'src/main/ipc/worktrees-ssh-fork-push-target-remote.test.ts',
'src/main/plugins/plugin-host-conformance.test.ts',
'src/main/providers/ssh-review-draft-context.test.ts',
'src/main/runtime/runtime-file-path-existence.test.ts',
'src/main/runtime/runtime-repository-ref-queries.test.ts',
'src/main/runtime/tui-idle-name-only-real-pty.integration.test.ts',
'src/main/shell-wrapper-generated-file-snapshot.test.ts',
'src/main/zsh-scoped-histfile.live-shell.test.ts',
'src/main/zsh-wrapper-version-mismatch.live-shell.test.ts',
'tests/tools/omp-relay-close-lifecycle.test.mjs'
]
function importsRelay(file, contents) {
// Why: parsing every source file overruns the test timeout on a loaded runner.
if (!contents.includes('relay')) {
return false
}
return collectModuleSpecifiers(file, contents).some((specifier) => {
if (!specifier.startsWith('.')) {
return false
}
const target = path.posix.normalize(path.posix.join(path.posix.dirname(file), specifier))
return target === RELAY_SOURCE || target.startsWith(`${RELAY_SOURCE}/`)
})
}
it('keeps everything outside the SSH relay from importing it', () => {
const importers = globSync(
['src', 'config', 'tests', 'mobile/src', 'mobile/app', 'mobile/scripts'].map(
(directory) => `${directory}/**/*.{ts,tsx,mts,cts,js,mjs,cjs}`
),
{
cwd: ROOT,
exclude: [`${RELAY_SOURCE}/**`, '**/node_modules/**', '**/dist/**', '**/out/**']
}
)
.map((file) => file.replaceAll('\\', '/'))
.filter((file) => importsRelay(file, readFileSync(path.join(ROOT, file), 'utf8')))
.sort()
expect(importers.filter((file) => !isTestOnlySourcePath(file))).toEqual([])
expect(importers).toEqual(RELAY_TEST_IMPORTERS)
})
config/scripts/vitest-node-runtime-files.mjs
-4
View File
@@ -54,8 +54,6 @@ export const NODE_RUNTIME_INCLUDE = [
'src/main/computer/desktop-script-serve-channel.test.ts',
'src/main/providers/local-pty-child-process-verdict.test.ts',
'src/main/providers/working-directory-validation.test.ts',
'src/relay/node-pty-binding-survey.test.ts',
'src/relay/relay-runtime-self-test.test.ts',
'src/main/pty/posix-pty-process-groups.integration.test.ts',
'src/shared/ephemeral-vm-recipe-output-capture.test.ts',
'src/main/gitlab/gitlab-known-host-retirement.test.ts',
@@ -83,8 +81,6 @@ export const NODE_RUNTIME_INCLUDE = [
'src/main/codex/codex-shared-server-probe.test.ts',
'src/main/opencode/opencode-launch-model-context-supervision.test.ts',
'src/main/hermes/hermes-config-remote-adapter.test.ts',
'src/relay/relay-reconnect-listener-peer-write-error.test.ts',
'src/relay/relay-primary-channel.test.ts',
'src/renderer/src/lib/monaco-languages/monarch-upstream-mdx-recursion.test.ts',
'src/main/ipc/orca-profiles-switch-persistence.test.ts',
'src/main/ipc/settings-delayed-response.test.ts',
config/scripts/windows-ssh-attach-console-repro.mjs
-436
View File
@@ -1,436 +0,0 @@
import { spawn, spawnSync } from 'node:child_process'
import { createHash } from 'node:crypto'
import { copyFileSync, cpSync, existsSync, mkdtempSync, readFileSync, rmSync } from 'node:fs'
import { createConnection } from 'node:net'
import { join, resolve } from 'node:path'
const projectDir = resolve(import.meta.dirname, '..', '..')
const relayBuildDir = join(projectDir, 'out', 'relay', 'win32-x64')
const SENTINEL = Buffer.from('ORCA-RELAY v0.1.0 READY\n')
const HEADER_LENGTH = 13
const REGRESSION_TIMEOUT_MS = 15_000
const NODE_PTY_PATCH_FILENAME = 'node-pty-1.1.0-console-list-agent-patch.cjs'
if (process.platform !== 'win32') {
console.log('SKIP: Windows ConPTY regression only runs on Windows.')
process.exit(0)
}
const options = parseArgs(process.argv.slice(2))
const nodePath = resolve(options.node ?? process.execPath)
const nodePtyDir = resolve(options.nodePty ?? join(projectDir, 'node_modules', 'node-pty'))
const expectFailure = options.expect === 'attach-console-failure'
for (const required of [
nodePath,
nodePtyDir,
join(relayBuildDir, 'relay.js'),
join(relayBuildDir, '.version')
]) {
if (!existsSync(required)) {
throw new Error(`Required regression input is missing: ${required}`)
}
}
const runDir = mkdtempSync(join(projectDir, '.issue-9586-relay-repro-'))
const relayPath = join(runDir, 'relay.js')
const stdoutLog = join(runDir, 'relay.log')
const stderrLog = join(runDir, 'relay.err.log')
const socketPath = `\\\\.\\pipe\\orca-issue-9586-${process.pid}-${Date.now()}`
let relayPid
try {
prepareRelayTree(runDir, nodePtyDir)
if (!options.skipRelayPatch) {
applyPackagedNodePtyPatch(nodePath, runDir)
}
relayPid = launchRelayWithoutConsole({
nodePath,
relayPath,
runDir,
socketPath,
stdoutLog,
stderrLog
})
await waitForPipe(socketPath, 5_000)
const observation = await exerciseRelayClient({
nodePath,
relayPath,
runDir,
socketPath,
shell: options.shell
})
await waitForExit(relayPid, 8_000)
const relayStdout = readIfPresent(stdoutLog)
const relayStderr = readIfPresent(stderrLog)
const attachConsoleFailed = relayStderr.includes('Error: AttachConsole failed')
const installedNodePtyDir = join(runDir, 'node_modules', 'node-pty')
const agentPath = join(installedNodePtyDir, 'lib', 'conpty_console_list_agent.js')
const nativeBindingPath = join(
installedNodePtyDir,
'prebuilds',
`${process.platform}-${process.arch}`,
'conpty.node'
)
const summary = {
node: observation.nodeVersion,
nodePty: JSON.parse(readFileSync(join(nodePtyDir, 'package.json'), 'utf8')).version,
shell: options.shell,
relayPid,
handshake: observation.handshake,
ptySpawn: observation.ptySpawn,
ptyShutdown: observation.ptyShutdown,
relayAliveAfterPtyShutdown: observation.relayAliveAfterPtyShutdown,
bridgeExit: observation.bridgeExit,
relayPatchApplied: !options.skipRelayPatch,
agentSha256: fileSha256(agentPath),
nativeBindingPresent: existsSync(nativeBindingPath),
attachConsoleFailed,
relayExitedAfterClientDisconnect: !isProcessAlive(relayPid)
}
console.log(JSON.stringify(summary, null, 2))
if (expectFailure !== attachConsoleFailed) {
throw new Error(
expectFailure
? `Expected the real console-list agent to fail AttachConsole. stderr:\n${relayStderr}`
: `The real console-list agent failed AttachConsole. stderr:\n${relayStderr}`
)
}
if (
!observation.handshake ||
!observation.ptySpawn ||
!observation.ptyShutdown ||
!observation.relayAliveAfterPtyShutdown
) {
throw new Error(
`Relay lifecycle did not complete. stdout:\n${relayStdout}\nstderr:\n${relayStderr}`
)
}
} finally {
if (relayPid && isProcessAlive(relayPid)) {
stopExactProcess(relayPid, relayPath)
}
rmSync(runDir, { recursive: true, force: true, maxRetries: 20, retryDelay: 100 })
}
function parseArgs(args) {
const parsed = { expect: 'clean', shell: 'cmd.exe', skipRelayPatch: false }
for (let index = 0; index < args.length; index++) {
const flag = args[index]
if (flag === '--skip-relay-patch') {
parsed.skipRelayPatch = true
continue
}
const value = args[index + 1]
if (!value || !['--node', '--node-pty', '--expect', '--shell'].includes(flag)) {
throw new Error(
'Usage: node windows-ssh-attach-console-repro.mjs [--node PATH] [--node-pty DIR] [--shell PATH] [--skip-relay-patch] [--expect clean|attach-console-failure]'
)
}
if (flag === '--node') {
parsed.node = value
}
if (flag === '--node-pty') {
parsed.nodePty = value
}
if (flag === '--expect') {
parsed.expect = value
}
if (flag === '--shell') {
parsed.shell = value
}
index++
}
if (!['clean', 'attach-console-failure'].includes(parsed.expect)) {
throw new Error(`Unsupported expectation: ${parsed.expect}`)
}
return parsed
}
function prepareRelayTree(runDir, nodePtyDir) {
for (const filename of [
'relay.js',
'relay-watcher.js',
'relay-ai-vault-service.js',
'managed-hook-runtime.js',
NODE_PTY_PATCH_FILENAME,
'.version'
]) {
copyFileSync(join(relayBuildDir, filename), join(runDir, filename))
}
cpSync(nodePtyDir, join(runDir, 'node_modules', 'node-pty'), { recursive: true })
}
function applyPackagedNodePtyPatch(nodePath, runDir) {
const result = spawnSync(nodePath, [join(runDir, NODE_PTY_PATCH_FILENAME)], {
cwd: runDir,
encoding: 'utf8',
windowsHide: true
})
if (result.status !== 0) {
throw new Error(`Packaged node-pty patch failed: ${result.stderr || result.stdout}`)
}
}
function launchRelayWithoutConsole({
nodePath,
relayPath,
runDir,
socketPath,
stdoutLog,
stderrLog
}) {
const relayArgs = [
quoteWindowsArg(nodePath),
quoteWindowsArg(relayPath),
'--detached',
'--grace-time',
'5',
'--sock-path',
quoteWindowsArg(socketPath),
'--endpoint-dir',
quoteWindowsArg(join(runDir, 'endpoint')),
'--log-file',
quoteWindowsArg(stdoutLog),
`1>${quoteWindowsArg(stdoutLog)}`,
`2>${quoteWindowsArg(stderrLog)}`
].join(' ')
const commandLine = `cmd.exe /d /s /c "${relayArgs}"`
const script = [
`$result = Invoke-CimMethod -ClassName Win32_Process -MethodName Create -Arguments @{ CommandLine = ${powerShellLiteral(commandLine)}; CurrentDirectory = ${powerShellLiteral(runDir)} }`,
`if ($result.ReturnValue -ne 0) { throw "Win32_Process.Create failed with $($result.ReturnValue)" }`,
'$result.ProcessId'
].join('; ')
const launched = runPowerShell(script)
const pid = Number(launched.stdout.trim())
if (!Number.isInteger(pid) || pid <= 0) {
throw new Error(`Could not parse detached relay pid from: ${launched.stdout}`)
}
return pid
}
function exerciseRelayClient({ nodePath, relayPath, runDir, socketPath, shell }) {
return new Promise((resolvePromise, rejectPromise) => {
const bridge = spawn(nodePath, [relayPath, '--connect', '--sock-path', socketPath], {
cwd: runDir,
windowsHide: true,
stdio: ['pipe', 'pipe', 'pipe']
})
const observation = {
nodeVersion: readNodeVersion(nodePath),
handshake: false,
ptySpawn: false,
ptyShutdown: false,
relayAliveAfterPtyShutdown: false,
bridgeExit: null
}
let stderr = ''
let buffer = Buffer.alloc(0)
let sentinelRead = false
let outgoingSequence = 1
let settled = false
const timeout = setTimeout(
() => finish(new Error(`Timed out waiting for relay client lifecycle. stderr:\n${stderr}`)),
REGRESSION_TIMEOUT_MS
)
bridge.stderr.on('data', (data) => {
stderr += data.toString()
})
bridge.on('error', finish)
bridge.on('close', (code, signal) => {
observation.bridgeExit = { code, signal }
if (!settled && observation.relayAliveAfterPtyShutdown) {
finish()
} else if (!settled) {
finish(new Error(`Relay bridge closed before lifecycle completed. stderr:\n${stderr}`))
}
})
bridge.stdout.on('data', (data) => {
try {
buffer = Buffer.concat([buffer, data])
if (!sentinelRead) {
const sentinelIndex = buffer.indexOf(SENTINEL)
if (sentinelIndex === -1) {
return
}
buffer = buffer.subarray(sentinelIndex + SENTINEL.length)
sentinelRead = true
observation.handshake = true
request(1, 'pty.spawn', {
shellOverride: shell,
cwd: projectDir,
cols: 80,
rows: 24,
env: {}
})
}
for (const message of drainMessages()) {
if (message.id === 1) {
throwResponseError(message)
observation.ptySpawn = true
request(2, 'pty.shutdown', { id: message.result.id, immediate: true })
} else if (message.id === 2) {
throwResponseError(message)
observation.ptyShutdown = true
request(3, 'relay.status', {})
} else if (message.id === 3) {
throwResponseError(message)
observation.relayAliveAfterPtyShutdown = message.result.ptys.active === 0
bridge.stdin.end()
}
}
} catch (error) {
finish(error)
}
})
function request(id, method, params) {
bridge.stdin.write(encodeRequestFrame({ id, method, params }, outgoingSequence++))
}
function drainMessages() {
const messages = []
while (buffer.length >= HEADER_LENGTH) {
const type = buffer[0]
const payloadLength = buffer.readUInt32BE(9)
if (buffer.length < HEADER_LENGTH + payloadLength) {
break
}
const payload = buffer.subarray(HEADER_LENGTH, HEADER_LENGTH + payloadLength)
buffer = buffer.subarray(HEADER_LENGTH + payloadLength)
if (type === 1) {
messages.push(JSON.parse(payload.toString('utf8')))
}
}
return messages
}
function finish(error) {
if (settled) {
return
}
settled = true
clearTimeout(timeout)
if (error) {
bridge.kill()
rejectPromise(error)
} else {
resolvePromise(observation)
}
}
})
}
function waitForPipe(socketPath, timeoutMs) {
const deadline = Date.now() + timeoutMs
return new Promise((resolvePromise, rejectPromise) => {
const attempt = () => {
const socket = createConnection(socketPath)
let settled = false
const retry = () => {
if (settled) {
return
}
settled = true
socket.destroy()
if (Date.now() >= deadline) {
rejectPromise(new Error(`Detached relay did not listen on ${socketPath}`))
} else {
setTimeout(attempt, 50)
}
}
socket.once('connect', () => {
if (settled) {
return
}
settled = true
socket.destroy()
resolvePromise()
})
socket.once('error', retry)
socket.setTimeout(250, retry)
}
attempt()
})
}
function encodeRequestFrame({ id, method, params }, sequence) {
const payload = Buffer.from(JSON.stringify({ jsonrpc: '2.0', id, method, params }))
const header = Buffer.alloc(HEADER_LENGTH)
header[0] = 1
header.writeUInt32BE(sequence, 1)
header.writeUInt32BE(0, 5)
header.writeUInt32BE(payload.length, 9)
return Buffer.concat([header, payload])
}
function throwResponseError(message) {
if (message.error) {
throw new Error(`Relay RPC failed: ${message.error.message}`)
}
}
function readNodeVersion(nodePath) {
return spawnSync(nodePath, ['--version'], { encoding: 'utf8' }).stdout.trim()
}
function waitForExit(pid, timeoutMs) {
const deadline = Date.now() + timeoutMs
return new Promise((resolvePromise) => {
const poll = () => {
if (!isProcessAlive(pid) || Date.now() >= deadline) {
resolvePromise()
return
}
setTimeout(poll, 50)
}
poll()
})
}
function isProcessAlive(pid) {
const result = runPowerShell(
`if (Get-Process -Id ${pid} -ErrorAction SilentlyContinue) { 'ALIVE' }`
)
return result.stdout.includes('ALIVE')
}
function stopExactProcess(pid, relayPath) {
const script = [
`$process = Get-CimInstance Win32_Process -Filter ${powerShellLiteral(`ProcessId = ${pid}`)}`,
`if ($process -and $process.CommandLine -like ${powerShellLiteral(`*${relayPath}*`)}) { Stop-Process -Id ${pid} -Force }`
].join('; ')
runPowerShell(script)
}
function runPowerShell(script) {
const encoded = Buffer.from(script, 'utf16le').toString('base64')
const result = spawnSync(
'powershell.exe',
['-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', encoded],
{ encoding: 'utf8' }
)
if (result.status !== 0) {
throw new Error(`PowerShell failed (${result.status}): ${result.stderr || result.stdout}`)
}
return result
}
function quoteWindowsArg(value) {
return `"${value.replaceAll('"', '\\"')}"`
}
function powerShellLiteral(value) {
return `'${value.replaceAll("'", "''")}'`
}
function readIfPresent(path) {
return existsSync(path) ? readFileSync(path, 'utf8') : ''
}
function fileSha256(path) {
return createHash('sha256').update(readFileSync(path)).digest('hex')
}
config/tsconfig.node.json
-1
View File
@@ -20,7 +20,6 @@
"../src/preload/**/*",
"../src/shared/**/*",
"../src/packages/process-host/src/__fixtures__/**/*",
"../src/relay/**/*",
"../src/wsl-guest/**/*",
"../src/types/**/*"
],
config/tsconfig.relay.json
-15
View File
@@ -1,15 +0,0 @@
{
"extends": "@electron-toolkit/tsconfig/tsconfig.node.json",
"include": [
"../src/relay/**/*",
"../src/wsl-guest/**/*",
"../src/main/pty/overlay-mirror.ts",
"../src/main/pty/shell-startup-env.ts"
],
"exclude": ["../src/relay/integration.test.ts"],
"compilerOptions": {
"composite": true,
"rootDir": "../src",
"outDir": "../out/relay"
}
}
config/vitest.performance.config.ts
-1
View File
@@ -13,7 +13,6 @@ const contracts = [
'src/main/codex-usage/scanner-incremental-append.test.ts',
'src/main/usage/jsonl-file-reader.test.ts',
'src/main/usage/jsonl-file-snapshot.test.ts',
'src/relay/fs-path-metadata-symlink-concurrency.test.ts',
'src/renderer/src/components/editor/rich-markdown-list-tokenizers.test.ts',
'src/renderer/src/components/editor/rich-markdown-lowlight-cache.test.ts',
'src/renderer/src/components/terminal-pane/agent-completion-coordinator-queued-inspection-disposal.test.ts',
package.json
+1 -1
View File
@@ -32,7 +32,7 @@
"test": "pnpm run build:packages && node config/scripts/ensure-native-runtime.mjs --runtime=node && node config/scripts/run-vitest.mjs run --config config/vitest.config.ts",
"test:node": "pnpm run build:packages && node config/scripts/ensure-native-runtime.mjs --runtime=node && vitest run --config config/vitest.config.ts",
"test:node-server": "node config/scripts/run-node-server-tests.mjs",
"test:skill-sharing:release": "vitest run --config config/vitest.config.ts src/main/skills src/main/runtime/rpc/methods/skills.test.ts src/relay/skill-install-handler.test.ts src/shared/skill-bundle-install-contract.test.ts src/shared/skill-install-contract.test.ts src/shared/skill-install-failure.test.ts src/shared/skill-package-manifest.test.ts",
"test:skill-sharing:release": "vitest run --config config/vitest.config.ts src/main/skills src/main/runtime/rpc/methods/skills.test.ts src/shared/skill-bundle-install-contract.test.ts src/shared/skill-install-contract.test.ts src/shared/skill-install-failure.test.ts src/shared/skill-package-manifest.test.ts",
"test:repro:remote-agent-session": "pnpm run build:cli && pnpm run build:electron-vite && node config/scripts/remote-agent-session-authority-repro.mjs",
"capture:agent-transcript": "node config/scripts/ensure-native-runtime.mjs --runtime=node && node config/scripts/capture-agent-pty-transcript.mjs",
"check:reliability-gates": "node config/scripts/check-reliability-gates.mjs",
src/main/agent-hooks/managed-hook-local-filesystem.ts → src/main/agent-hooks/managed-hook-local-filesystem.test-fixture.ts
+1 -2
View File
@@ -18,8 +18,7 @@ function finish<T>(callback: Callback<T>, error: NodeJS.ErrnoException | null, v
callback(null, value)
}
/** The managed installers only need this small callback-style SFTP surface.
* On the remote host it turns hundreds of WAN round trips into local fs calls. */
/** Runs the managed installers' callback-style SFTP surface against the local disk in tests. */
export function createManagedHookLocalFilesystem(): SFTPWrapper {
const adapter = {
readFile(path: string, _encoding: string, callback: Callback<string | Buffer>): void {
src/main/agent-hooks/managed-hook-local-filesystem.test.ts
-81
View File
@@ -1,81 +0,0 @@
import { mkdtemp, mkdir, readFile, readdir, rm, stat, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { afterEach, describe, expect, it } from 'vitest'
import {
installRemoteManagedAgentHooks,
REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
} from './remote-managed-hook-installers'
import { createManagedHookLocalFilesystem } from './managed-hook-local-filesystem'
const tempHomes: string[] = []
const tempRoot = process.platform === 'win32' ? tmpdir() : '/tmp'
async function createTempHome(): Promise<string> {
// Why: mkdir-p probes ancestors; macOS's per-user temp directory can contain hundreds of thousands of entries.
const home = await mkdtemp(join(tempRoot, 'orca-managed-hooks-'))
tempHomes.push(home)
return home
}
async function listFiles(root: string): Promise<string[]> {
const entries = await readdir(root, { withFileTypes: true })
const nested = await Promise.all(
entries.map(async (entry) => {
const path = join(root, entry.name)
return entry.isDirectory() ? await listFiles(path) : [path]
})
)
return nested.flat()
}
afterEach(async () => {
await Promise.all(tempHomes.splice(0).map((home) => rm(home, { recursive: true, force: true })))
})
describe('managed-hook local filesystem', () => {
it('supports cold and warm aggregate installs without SFTP or temp-file residue', async () => {
const home = await createTempHome()
const filesystem = createManagedHookLocalFilesystem()
const options = {
grokHomeDir: join(home, '.grok'),
agents: REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
}
const cold = await installRemoteManagedAgentHooks(filesystem, home, options)
const warm = await installRemoteManagedAgentHooks(filesystem, home, options)
expect(cold).toHaveLength(REMOTE_MANAGED_HOOK_INSTALLER_AGENTS.length)
expect(cold.filter((result) => result.state === 'error')).toEqual([])
expect(warm).toHaveLength(REMOTE_MANAGED_HOOK_INSTALLER_AGENTS.length)
expect(warm.filter((result) => result.state === 'error')).toEqual([])
const files = await listFiles(home)
expect(files.filter((path) => path.endsWith('.tmp'))).toEqual([])
const scripts = files.filter((path) => /\.(?:sh|cmd)$/.test(path))
expect(scripts.length).toBeGreaterThanOrEqual(10)
if (process.platform !== 'win32') {
for (const script of scripts) {
expect((await stat(script)).mode & 0o777).toBe(0o755)
}
}
})
it('isolates a malformed config while installing the remaining agents', async () => {
const home = await createTempHome()
const claudeConfig = join(home, '.claude', 'settings.json')
await mkdir(join(home, '.claude'), { recursive: true })
await writeFile(claudeConfig, '{"hooks": }', 'utf8')
const results = await installRemoteManagedAgentHooks(createManagedHookLocalFilesystem(), home, {
grokHomeDir: join(home, '.grok'),
agents: REMOTE_MANAGED_HOOK_INSTALLER_AGENTS
})
expect(results).toHaveLength(REMOTE_MANAGED_HOOK_INSTALLER_AGENTS.length)
expect(results.find((result) => result.agent === 'claude')?.state).toBe('error')
expect(results.find((result) => result.agent === 'openclaude')?.state).toBe('installed')
expect(results.find((result) => result.agent === 'kimi')?.state).toBe('installed')
expect(results.find((result) => result.agent === 'jcode')?.state).toBe('installed')
expect(await readFile(claudeConfig, 'utf8')).toBe('{"hooks": }')
})
})
src/main/agent-hooks/managed-hook-runtime.test.ts
-86
View File
@@ -1,86 +0,0 @@
import { chmod, mkdtemp, readdir, rm, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { afterEach, describe, expect, it, vi } from 'vitest'
const { installManagedHooks } = await import('./managed-hook-runtime')
const tempHomes: string[] = []
const tempRoot = process.platform === 'win32' ? tmpdir() : '/tmp'
const SHELL_NAME = 'login-shell'
const SHELL_RUNS_NAME = 'login-shell-runs'
async function createTempHome(): Promise<string> {
const home = await mkdtemp(join(tempRoot, 'orca-managed-hook-runtime-'))
tempHomes.push(home)
return home
}
/** Login shell that records each invocation, so a skipped GROK_HOME probe is observable. */
async function stubLoginShell(home: string): Promise<void> {
const shell = join(home, SHELL_NAME)
await writeFile(
shell,
`#!/bin/sh\necho ran >> "${join(home, SHELL_RUNS_NAME)}"\nexit 0\n`,
'utf8'
)
await chmod(shell, 0o755)
vi.stubEnv('HOME', home)
vi.stubEnv('SHELL', shell)
}
afterEach(async () => {
vi.unstubAllEnvs()
await Promise.all(tempHomes.splice(0).map((home) => rm(home, { recursive: true, force: true })))
})
describe.runIf(process.platform !== 'win32')('installManagedHooks', () => {
it.each([
['omitted', undefined],
['empty', { agents: [] }]
])(
'writes nothing and runs no probe when the allowlist is %s (issue #11641)',
async (_label, options) => {
const home = await createTempHome()
await stubLoginShell(home)
await expect(installManagedHooks(options)).resolves.toEqual({ installers: 0, errors: 0 })
// Why: no agent config home, no ~/.orca install lock, and no GROK_HOME login-shell probe.
expect(await readdir(home)).toEqual([SHELL_NAME])
}
)
it('still rejects an aborted request rather than resolving an empty summary', async () => {
const controller = new AbortController()
controller.abort()
await expect(
installManagedHooks({ signal: controller.signal, agents: [] })
).rejects.toMatchObject({ name: 'AbortError' })
})
it('installs only the allowlisted agent, under the install lock', async () => {
const home = await createTempHome()
await stubLoginShell(home)
await expect(installManagedHooks({ agents: ['claude'] })).resolves.toEqual({
installers: 1,
errors: 0
})
expect((await readdir(home)).sort()).toEqual(['.claude', '.orca', SHELL_NAME])
})
it('still probes the login shell when Grok is selected', async () => {
const home = await createTempHome()
await stubLoginShell(home)
await expect(installManagedHooks({ agents: ['grok'] })).resolves.toEqual({
installers: 1,
errors: 0
})
expect((await readdir(home)).sort()).toEqual(['.grok', '.orca', SHELL_NAME, SHELL_RUNS_NAME])
})
})
src/main/agent-hooks/managed-hook-runtime.ts
-62
View File
@@ -1,62 +0,0 @@
import { homedir } from 'node:os'
import { resolveLoginShellGrokHome, resolveLoginShellKiroHome } from './agent-home-login-shell'
import { installRemoteManagedAgentHooks } from './remote-managed-hook-installers'
import type { AgentHookTarget } from '../../shared/agent-hook-types'
import { createManagedHookLocalFilesystem } from './managed-hook-local-filesystem'
import { withManagedHookInstallLock } from './managed-hook-install-lock'
import {
readManagedHookHostIdentity,
scopeManagedHookHostIdentity
} from './managed-hook-owner-identity'
export type ManagedHookInstallSummary = {
installers: number
errors: number
}
export async function installManagedHooks(options?: {
signal?: AbortSignal
hostKeyFingerprint?: string
agents?: readonly AgentHookTarget[]
claudeVersion?: string
}): Promise<ManagedHookInstallSummary> {
options?.signal?.throwIfAborted()
// Why: empty/omitted allowlist fails closed before any home/host probes.
const agents = options?.agents ?? []
if (agents.length === 0) {
return { installers: 0, errors: 0 }
}
const home = homedir()
// Why parallel: each probe may wait out its own login-shell timeout.
const [grokHomeDir, kiroHomeDir] = await Promise.all([
agents.includes('grok') ? resolveLoginShellGrokHome(home, options?.signal) : undefined,
agents.includes('kiro') ? resolveLoginShellKiroHome(home, options?.signal) : undefined
])
options?.signal?.throwIfAborted()
const hostIdentity = scopeManagedHookHostIdentity(
await readManagedHookHostIdentity(),
options?.hostKeyFingerprint
)
return await withManagedHookInstallLock(
home,
options?.signal,
async () => {
const results = await installRemoteManagedAgentHooks(
createManagedHookLocalFilesystem(),
home,
{
grokHomeDir,
kiroHomeDir,
signal: options?.signal,
agents,
...(options?.claudeVersion ? { claudeVersion: options.claudeVersion } : {})
}
)
return {
installers: results.length,
errors: results.filter((result) => result.state === 'error').length
}
},
hostIdentity
)
}
src/main/agent-hooks/wsl-hook-relay-live.integration.test.ts
+1 -1
View File
@@ -13,7 +13,7 @@ import { afterEach, beforeAll, describe, expect, it, vi } from 'vitest'
import { AgentHookServer } from './server'
import { WslHookRelayManager } from './wsl-hook-relay-manager'
import { createManagedHookLocalFilesystem } from './managed-hook-local-filesystem'
import { createManagedHookLocalFilesystem } from './managed-hook-local-filesystem.test-fixture'
import { codexHookService } from '../codex/hook-service'
const BUNDLE_DIR = join(process.cwd(), 'out', 'relay', 'wsl')
src/main/ai-vault-search/session-search-scope-entry-points.test.ts
-53
View File
@@ -1,10 +1,7 @@
import '../runtime/rpc/unused-default-rpc-methods.test-fixture'
import { afterEach, describe, expect, it } from 'vitest'
import { AiVaultHandler } from '../../relay/ai-vault-handler'
import type { RelayDispatcher } from '../../wsl-guest/dispatcher'
import { createSessionSearchClient } from '../../shared/ai-vault-search-client'
import { fakeSearchService } from '../../shared/ai-vault-search-test-fixture'
import { AI_VAULT_AGENTS } from '../../shared/ai-vault-types'
import { RpcDispatcher } from '../runtime/rpc/dispatcher'
import { OrcaRuntimeService } from '../runtime/orca-runtime'
import { AI_VAULT_METHODS } from '../runtime/rpc/methods/ai-vault'
@@ -28,22 +25,6 @@ afterEach(() => {
resetSessionSearchScopeCatalogForTests()
})
function relayHandler(): (params: Record<string, unknown>) => Promise<unknown> {
const handlers = new Map<string, (params: Record<string, unknown>) => Promise<unknown>>()
const dispatcher = {
onRequest: (method: string, handler: (params: Record<string, unknown>) => Promise<unknown>) => {
handlers.set(method, handler)
}
}
// oxlint-disable-next-line typescript/consistent-type-assertions -- SAFETY: the handler only calls `onRequest`, and the test asserts the registration it makes.
new AiVaultHandler(dispatcher as unknown as RelayDispatcher)
const search = handlers.get('aiVault.searchSessions')
if (!search) {
throw new Error('relay registered no session search handler')
}
return search
}
describe('every search entry point carries the scope identity through', () => {
it('resolves over the in-process IPC entry point', async () => {
const service = fakeSearchService()
@@ -76,40 +57,6 @@ describe('every search entry point carries the scope identity through', () => {
})
})
it('resolves over the relay entry point', async () => {
const service = fakeSearchService()
setSessionSearchService(service)
installSessionSearchScopeCatalogSource(() => CATALOG)
await relayHandler()({
query: 'needle',
supportedAgents: [...AI_VAULT_AGENTS],
supportsQoderHistory: true,
supportsJcodeHistory: true,
within: WITHIN
})
expect(service.search).toHaveBeenCalledWith(expect.anything(), {
kind: 'resolved',
paths: ['/work/app']
})
})
it('hands the relay’s own verdict down, that host carrying no repo catalog', async () => {
const service = fakeSearchService()
setSessionSearchService(service)
await relayHandler()({
query: 'needle',
supportedAgents: [...AI_VAULT_AGENTS],
supportsQoderHistory: true,
supportsJcodeHistory: true,
within: WITHIN
})
expect(service.search).toHaveBeenCalledWith(
{ query: 'needle', limit: 20 },
{
kind: 'unknown'
}
)
})
})
describe('the shared remote client', () => {
src/main/ai-vault/antigravity-ide-history.test.ts
+2 -40
View File
@@ -2,13 +2,10 @@ import { runProcess } from '@orca/process-host'
import { mkdtemp, mkdir, rm, writeFile, utimes } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { dirname, join } from 'node:path'
import { afterEach, describe, expect, it, vi } from 'vitest'
import { afterEach, describe, expect, it } from 'vitest'
import { scanAiVaultSessions } from './session-scanner'
import { isolatedScanRoots, writeAntigravityTranscript } from './session-scanner-test-fixtures'
import { MemoryRemoteProvider, jsonLines } from './remote-session-scanner-test-fixtures'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { dedupeScannedSessions } from './session-root-dedup'
import { jsonLines } from './remote-session-scanner-test-fixtures'
import { antigravitySessionOrigin } from '../../shared/antigravity-session-origin'
import { readLocalAntigravityHistory } from './session-scanner-antigravity-history'
import { ANTIGRAVITY_INDEX_MAX_BYTES } from './session-scanner-antigravity-metadata'
@@ -190,39 +187,4 @@ describe('Antigravity IDE history discovery', () => {
expect(await readLocalAntigravityHistory(file)).toBeNull()
})
it('reads only the execution host and never collapses equal origin IDs from different remote hosts', async () => {
const provider = new MemoryRemoteProvider()
const remoteHome = '/remote/home'
for (const origin of origins) {
const logs = `${remoteHome}/.gemini/${origin}/brain/${conversationId}/.system_generated/logs`
provider.addFile(`${logs}/transcript_full.jsonl`, jsonLines(records(origin)), 10)
provider.addFile(`${logs}/transcript.jsonl`, jsonLines(records(origin)), 11)
}
const read = vi.spyOn(provider, 'readFile')
const options = {
provider,
remoteHome,
hostPlatform: getRemoteHostPlatform('linux-x64'),
includeAntigravityIdeSessions: true
}
const first = await scanRemoteAiVaultSessions({ ...options, executionHostId: 'ssh:first-host' })
const second = await scanRemoteAiVaultSessions({
...options,
executionHostId: 'ssh:second-host'
})
expect(first.sessions).toHaveLength(3)
expect(second.sessions).toHaveLength(3)
expect(dedupeScannedSessions([...first.sessions, ...second.sessions])).toHaveLength(6)
expect(read.mock.calls.every(([path]) => path.startsWith(remoteHome))).toBe(true)
expect(provider.readDirPaths.every((path) => path.startsWith(remoteHome))).toBe(true)
expect(
first.sessions.every((session) => session.filePath.endsWith('transcript_full.jsonl'))
).toBe(true)
const legacy = await scanRemoteAiVaultSessions({
...options,
executionHostId: 'ssh:first-host',
includeAntigravityIdeSessions: false
})
expect(legacy.sessions).toHaveLength(1)
})
})
src/main/ai-vault/antigravity-index-file-admission.test.ts
+1 -21
View File
@@ -1,6 +1,6 @@
import type * as NodeFsPromises from 'node:fs/promises'
import { constants } from 'node:fs'
import { mkdtemp, rm, symlink, writeFile } from 'node:fs/promises'
import { mkdtemp, rm, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { afterEach, describe, expect, it, vi } from 'vitest'
@@ -23,7 +23,6 @@ vi.mock('node:fs/promises', async (original) => {
})
import { readNodeFileWithinLimit } from '../../shared/node-bounded-file-reader'
import { readLocalAntigravityHistory } from './session-scanner-antigravity-history'
import { readRelayTranscriptBytes } from '../../relay/ai-vault-transcript-stream'
const roots: string[] = []
async function filePath() {
@@ -43,25 +42,6 @@ afterEach(async () => {
})
describe('bounded regular metadata reads', () => {
it.skipIf(process.platform === 'win32')(
'rejects real FIFO paths and symlinks without waiting for a writer',
async () => {
const file = await filePath()
await fifo(file)
const alias = `${file}.link`
await symlink(file, alias)
for (const path of [file, alias]) {
expect(await readLocalAntigravityHistory(path)).toBeNull()
await expect(readNodeFileWithinLimit(path, 64, { regularFileOnly: true })).rejects.toThrow(
'regular file'
)
await expect(
readRelayTranscriptBytes(path, undefined, { regularFileOnly: true, maxBytes: 64 }).next()
).rejects.toThrow('regular file')
}
},
2000
)
it.skipIf(process.platform === 'win32')(
'rejects a regular path replaced by a FIFO between stat and open',
src/main/ai-vault/antigravity-index-reader.test.ts
-67
View File
@@ -1,67 +0,0 @@
import { describe, expect, it, vi } from 'vitest'
import { readRemoteAntigravityIndex } from './antigravity-index-reader'
import { limitRemoteScanFilesystemConcurrency } from './remote-session-scan-concurrency'
import type { RemoteSessionFilesystemProvider } from './remote-session-scanner-types'
import { ANTIGRAVITY_INDEX_MAX_BYTES } from './session-scanner-antigravity-metadata'
function provider(): RemoteSessionFilesystemProvider {
return {
readDir: async () => [],
stat: async () => ({ type: 'file', size: 2, mtime: 0 }),
readFile: async () => ({ content: '{}', isBinary: false })
}
}
describe('execution-host Antigravity metadata reads', () => {
it('forwards regular-file admission and byte limits through the concurrency wrapper', async () => {
const host = provider()
const read = vi.fn(async function* () {
yield Buffer.from('{}')
})
host.readTranscriptBytes = read
expect(
await readRemoteAntigravityIndex(
limitRemoteScanFilesystemConcurrency(host),
'/host/projects.json'
)
).toBe('{}')
expect(read).toHaveBeenCalledWith('/host/projects.json', undefined, {
regularFileOnly: true,
maxBytes: ANTIGRAVITY_INDEX_MAX_BYTES
})
})
it('preserves the existing bounded read-file options on legacy providers', async () => {
const host = provider()
const read = vi.spyOn(host, 'readFile')
expect(
await readRemoteAntigravityIndex(
limitRemoteScanFilesystemConcurrency(host),
'/host/projects.json'
)
).toBe('{}')
expect(read).toHaveBeenCalledWith('/host/projects.json', {
maxTextBytes: ANTIGRAVITY_INDEX_MAX_BYTES
})
})
it('does not read directories or symlinks from legacy providers', async () => {
for (const type of ['directory', 'symlink'] as const) {
const host = provider()
host.stat = async () => ({ type, size: 0, mtime: 0 })
const read = vi.spyOn(host, 'readFile')
expect(await readRemoteAntigravityIndex(host, '/host/projects.json')).toBeNull()
expect(read).not.toHaveBeenCalled()
}
})
it('stops waiting for a legacy request that cannot cancel on the wire', async () => {
const host = provider()
host.readFile = () => new Promise(() => {})
const controller = new AbortController()
const read = readRemoteAntigravityIndex(host, '/host/projects.json', controller.signal)
await Promise.resolve()
controller.abort()
await expect(read).rejects.toMatchObject({ name: 'AbortError' })
})
})
src/main/ai-vault/antigravity-index-reader.ts
-48
View File
@@ -1,48 +0,0 @@
import {
ANTIGRAVITY_INDEX_MAX_BYTES,
readBoundedAntigravityIndex
} from './session-scanner-antigravity-metadata'
import type { RemoteSessionFilesystemProvider } from './remote-session-scanner-types'
import {
abandonRemoteSessionScanOnCancel,
throwIfAiVaultScanCancelled
} from './ai-vault-scan-cancellation'
export async function readRemoteAntigravityIndex(
provider: RemoteSessionFilesystemProvider,
path: string,
signal?: AbortSignal
): Promise<string | null> {
try {
throwIfAiVaultScanCancelled(signal)
if (provider.readTranscriptBytes) {
return await abandonRemoteSessionScanOnCancel(
readBoundedAntigravityIndex(
provider.readTranscriptBytes(path, signal, {
regularFileOnly: true,
maxBytes: ANTIGRAVITY_INDEX_MAX_BYTES
})
),
signal
)
}
const stat = await abandonRemoteSessionScanOnCancel(provider.stat(path), signal)
if (stat.type !== 'file' || stat.size > ANTIGRAVITY_INDEX_MAX_BYTES) {
return null
}
const read = await abandonRemoteSessionScanOnCancel(
provider.readFile(path, { maxTextBytes: ANTIGRAVITY_INDEX_MAX_BYTES }),
signal
)
throwIfAiVaultScanCancelled(signal)
return read.isBinary || Buffer.byteLength(read.content) > ANTIGRAVITY_INDEX_MAX_BYTES
? null
: read.content
} catch (error) {
throwIfAiVaultScanCancelled(signal)
if (error instanceof Error && error.name === 'AbortError') {
throw error
}
return null
}
}
src/main/ai-vault/openclaw-session-layout.test.ts
+1 -45
View File
@@ -1,11 +1,7 @@
import { mkdir, mkdtemp, readdir, rm, stat, writeFile } from 'node:fs/promises'
import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join, relative } from 'node:path'
import { afterEach, beforeEach, describe, expect, it } from 'vitest'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { discoverRemoteSourceCandidates } from './remote-session-scanner-discovery'
import { remoteSessionSources } from './remote-session-scanner-sources'
import type { RemoteScannerContext } from './remote-session-scanner-types'
import { AI_VAULT_AGENT_SOURCES } from './session-scanner-agent-sources'
import { walkSessionFiles } from './session-scanner-discovery'
@@ -49,44 +45,4 @@ describe('OpenClaw session discovery', () => {
expect(relativeToAgents(files)).toEqual(EXPECTED)
})
it('never lists an embedded agent home over a remote filesystem', async () => {
const readDirs: string[] = []
const provider: RemoteScannerContext['provider'] = {
readDir: async (dirPath) => {
readDirs.push(dirPath)
const entries = await readdir(dirPath, { withFileTypes: true })
return entries.map((entry) => ({
name: entry.name,
isDirectory: entry.isDirectory(),
isSymlink: entry.isSymbolicLink()
}))
},
stat: async (path) => {
const info = await stat(path)
return { size: info.size, type: 'file', mtime: info.mtimeMs }
},
readFile: async () => ({ content: '', isBinary: false })
}
const hostPlatform = getRemoteHostPlatform(
process.platform === 'win32' ? 'win32-x64' : 'linux-x64'
)
const source = remoteSessionSources(home, hostPlatform).find(
(candidate) => candidate.agent === 'openclaw'
)
const context: RemoteScannerContext = {
provider,
executionHostId: 'ssh:host',
hostPlatform,
titleCaches: new Map(),
antigravityWorkspaceResolver: { enrich: async (session) => session }
}
expect(source).toBeDefined()
const candidates = source
? await discoverRemoteSourceCandidates({ source, context, issues: [] })
: []
expect(relativeToAgents(candidates.map(({ file }) => file.path))).toEqual(EXPECTED)
expect(readDirs.some((dir) => dir.includes('codex-home'))).toBe(false)
})
})
src/main/ai-vault/opencode-wsl-runtime-preparation.test.ts
+1 -4
View File
@@ -87,10 +87,7 @@ describe('WSL SQLite runtime preparation', () => {
args: ['-e', expect.stringMatching(/require\('node:sqlite'\).*backup/)]
})
)
expect(mocks.bundles.mock.calls.map(([platform]) => platform)).toEqual([
'linux-x64',
'linux-arm64'
])
expect(mocks.bundles.mock.calls.map(([platform]) => platform)).toEqual(['wsl'])
expect(mocks.download).not.toHaveBeenCalled()
})
src/main/ai-vault/opencode-wsl-runtime-preparation.ts
+1 -3
View File
@@ -102,9 +102,7 @@ async function prepare(distro: string): Promise<OpenCodeWslRuntime> {
return result.stdout.trim()
}
const app = getAppEnvironment()
// The reader is plain JavaScript; either packaged Linux architecture is usable.
const reader = (['linux-x64', 'linux-arm64'] as const)
.flatMap((platform) => relayBundleCandidates(platform, app.getAppPath()))
const reader = relayBundleCandidates('wsl', app.getAppPath())
.map((directory) => join(directory, RELAY_OPENCODE_SQLITE_READER_FILENAME))
.find(existsSync)
if (!reader) {
src/main/ai-vault/remote-session-document-parsers.ts
-51
View File
@@ -1,51 +0,0 @@
import type { AiVaultAgent } from '../../shared/ai-vault-types'
import { parseDevinSessionDocument } from './session-scanner-devin-parser'
import { parseHermesSessionDocument } from './session-scanner-hermes-parser'
import {
parseGeminiSessionDocument,
parseGeminiJsonlSessionLines
} from './session-scanner-gemini-parsers'
import type { RemoteSessionSource } from './remote-session-scanner-types'
export function remoteSessionDocumentParsers(
agent: AiVaultAgent
): Pick<RemoteSessionSource, 'parseLines' | 'parseDocument'> {
const parse =
agent === 'hermes'
? parseHermesSessionDocument
: agent === 'devin'
? parseDevinSessionDocument
: agent === 'gemini'
? parseGeminiSessionDocument
: null
if (!parse) {
return {}
}
return {
parseDocument: (file, bytes, context) =>
parse(
file,
bytes,
context.hostPlatform.os,
{
executionHostId: context.executionHostId,
executionHostPlatform: context.hostPlatform.os
},
context.signal
),
...(agent === 'gemini'
? {
parseLines: (file, lines, context) =>
parseGeminiJsonlSessionLines({
file,
lines,
platform: context.hostPlatform.os,
options: {
executionHostId: context.executionHostId,
executionHostPlatform: context.hostPlatform.os
}
})
}
: {})
}
}
src/main/ai-vault/remote-session-large-transcripts.test.ts
-223
View File
@@ -1,223 +0,0 @@
import { mkdtemp, mkdir, writeFile, rm } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join, dirname } from 'node:path'
import { describe, it, expect } from 'vitest'
import { createRelayAiVaultFilesystemProvider } from '../../relay/ai-vault-service-filesystem'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
const platform = getRemoteHostPlatform(
process.platform === 'win32'
? 'win32-x64'
: process.platform === 'darwin'
? 'darwin-arm64'
: 'linux-x64'
)
const jsonl = (rows: unknown[]) => `${rows.map((row) => JSON.stringify(row)).join('\n')}\n`
const filler = jsonl([{ type: 'irrelevant_event', payload: 'x'.repeat(1024) }]).repeat(11000)
describe('large remote history through real relay filesystem', () => {
it('reports an oversized record without losing healthy sessions or publishing a partial session', async () => {
const home = await mkdtemp(join(tmpdir(), 'orca-history-record-limit-'))
try {
const directory = join(home, '.codex', 'sessions')
await mkdir(directory, { recursive: true })
const metadata = (id: string) =>
jsonl([{ type: 'session_meta', payload: { id, cwd: '/repo' } }])
const badPath = join(directory, 'bad.jsonl')
await writeFile(badPath, metadata('bad') + 'x'.repeat(11 * 1024 * 1024))
await writeFile(join(directory, 'good.jsonl'), metadata('good'))
const result = await scanRemoteAiVaultSessions({
provider: createRelayAiVaultFilesystemProvider({ homeDirectory: home, environment: {} }),
executionHostId: 'ssh:record-limit',
remoteHome: home,
hostPlatform: platform,
unlimited: true
})
expect(result.sessions.map((session) => session.sessionId)).toEqual(['good'])
expect(result.issues).toEqual([
expect.objectContaining({
path: badPath.replace(/\\/g, '/'),
message: 'Session transcript record exceeds 10485760 byte limit'
})
])
} finally {
await rm(home, { recursive: true, force: true })
}
})
it('lists a large Codex rollout with middle messages and usage intact', async () => {
const home = await mkdtemp(join(tmpdir(), 'orca-history-17744-'))
try {
const path = join(home, '.codex', 'sessions', 'large.jsonl')
await mkdir(dirname(path), { recursive: true })
await writeFile(
path,
jsonl([
{
type: 'session_meta',
timestamp: '2026-09-13T01:00:00Z',
payload: { id: 'large', cwd: '/repo' }
},
{
type: 'response_item',
timestamp: '2026-09-13T01:00:01Z',
payload: {
type: 'message',
role: 'user',
content: [{ type: 'input_text', text: 'Keep my history' }]
}
}
]) +
filler.slice(0, filler.length / 2) +
jsonl([
{
type: 'response_item',
timestamp: '2026-09-13T01:02:00Z',
payload: {
type: 'message',
role: 'assistant',
content: [{ type: 'output_text', text: 'Middle answer' }]
}
},
{
type: 'event_msg',
timestamp: '2026-09-13T01:03:00Z',
payload: {
type: 'token_count',
info: {
total_token_usage: { input_tokens: 123, output_tokens: 45, total_tokens: 168 }
}
}
}
]) +
filler.slice(filler.length / 2)
)
const result = await scanRemoteAiVaultSessions({
provider: createRelayAiVaultFilesystemProvider({ homeDirectory: home, environment: {} }),
executionHostId: 'ssh:synthetic-17744',
remoteHome: home,
hostPlatform: platform,
unlimited: true
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
sessionId: 'large',
messageCount: 2,
totalTokens: 168,
title: 'Keep my history'
})
} finally {
await rm(home, { recursive: true, force: true })
}
})
it.each(['hermes', 'devin', 'gemini', 'cline'] as const)(
'lists large %s documents with every message counted',
async (agent) => {
const home = await mkdtemp(join(tmpdir(), 'orca-history-17744-document-'))
try {
const messages = Array.from({ length: 11000 }, () => ({
role: 'assistant',
content: 'x'.repeat(1024)
}))
messages.splice(5000, 0, { role: 'user', content: 'A middle user turn' })
let path: string, record: unknown
if (agent === 'hermes') {
path = join(home, '.hermes', 'sessions', 'large.json')
record = { session_id: 'large', cwd: '/repo', model: 'test-model', messages }
} else if (agent === 'devin') {
path =
platform.os === 'win32'
? join(home, 'AppData', 'Roaming', 'devin', 'cli', 'transcripts', 'large.json')
: join(home, '.local', 'share', 'devin', 'cli', 'transcripts', 'large.json')
record = {
session_id: 'large',
working_directory: '/repo',
steps: messages.map((message) => ({
...message,
metadata: {
is_user_input: message.role === 'user',
metrics: { input_tokens: 2, output_tokens: 1 }
}
}))
}
} else if (agent === 'gemini') {
path = join(home, '.gemini', 'tmp', 'large.json')
record = {
sessionId: 'large',
messages: messages.map((message) => ({
type: message.role === 'assistant' ? 'gemini' : 'user',
content: message.content
}))
}
} else {
path = join(home, '.cline', 'data', 'sessions', 'large', 'large.json')
record = { session_id: 'large', cwd: '/repo' }
await mkdir(dirname(path), { recursive: true })
await writeFile(path.replace('.json', '.messages.json'), JSON.stringify({ messages }))
}
await mkdir(dirname(path), { recursive: true })
await writeFile(path, JSON.stringify(record))
const result = await scanRemoteAiVaultSessions({
provider: createRelayAiVaultFilesystemProvider({ homeDirectory: home, environment: {} }),
executionHostId: `ssh:large-${agent}`,
remoteHome: home,
hostPlatform: platform,
unlimited: true
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({ agent, sessionId: 'large', messageCount: 11001 })
if (agent === 'devin') {
expect(result.sessions[0].totalTokens).toBe(33003)
}
} finally {
await rm(home, { recursive: true, force: true })
}
}
)
it('keeps normal-size reads on their existing path and supports providers without streaming', async () => {
const home = await mkdtemp(join(tmpdir(), 'orca-history-legacy-'))
try {
const directory = join(home, '.codex', 'sessions')
await mkdir(directory, { recursive: true })
const content = jsonl([{ type: 'session_meta', payload: { id: 'small', cwd: '/repo' } }])
await writeFile(join(directory, 'small.jsonl'), content)
const provider = createRelayAiVaultFilesystemProvider({
homeDirectory: home,
environment: {}
})
provider.readTranscriptBytes = () => {
throw new Error('Small file must keep its existing read path')
}
const small = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:small-original',
remoteHome: home,
hostPlatform: platform,
unlimited: true
})
expect(small.issues).toEqual([])
expect(small.sessions.map((session) => session.sessionId)).toEqual(['small'])
await writeFile(join(directory, 'large.jsonl'), content + filler)
const legacy = { readDir: provider.readDir, readFile: provider.readFile, stat: provider.stat }
const fallback = await scanRemoteAiVaultSessions({
provider: legacy,
executionHostId: 'ssh:legacy-original',
remoteHome: home,
hostPlatform: platform,
unlimited: true
})
expect(fallback.sessions.map((session) => session.sessionId)).toEqual(['small'])
expect(
fallback.issues.some(
(issue) => issue.path.endsWith('large.jsonl') && issue.message.includes('10MB limit')
)
).toBe(true)
} finally {
await rm(home, { recursive: true, force: true })
}
})
})
src/main/ai-vault/remote-session-parse-cache.test.ts
-216
View File
@@ -1,216 +0,0 @@
import { beforeEach, describe, expect, it } from 'vitest'
import type { FileReadResult } from '../providers/types'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { resetRemoteSessionParseCacheForTests } from './remote-session-parse-cache'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { MemoryRemoteProvider, jsonLines } from './remote-session-scanner-test-fixtures'
/**
* Counts whole-transcript reads, which is the cost #13753 is about. Codex's
* per-scan `session_index.jsonl` title lookup is one small file and is not part
* of the corpus term, so it is excluded rather than asserted on.
*/
class CountingRemoteProvider extends MemoryRemoteProvider {
readonly readFilePaths: string[] = []
override async readFile(filePath: string): Promise<FileReadResult> {
if (filePath.includes('/sessions/')) {
this.readFilePaths.push(filePath)
}
return await super.readFile(filePath)
}
}
function transcript(sessionId: string, title: string, timestamp: string): string {
return jsonLines([
{
timestamp,
type: 'session_meta',
payload: { id: sessionId, cwd: '/home/ada/repo' }
},
{
timestamp,
type: 'response_item',
payload: { type: 'message', role: 'user', content: [{ type: 'text', text: title }] }
}
])
}
function scan(provider: CountingRemoteProvider): ReturnType<typeof scanRemoteAiVaultSessions> {
return scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
}
describe('remote AI Vault transcript re-reads', () => {
beforeEach(() => {
resetRemoteSessionParseCacheForTests()
})
it('does not re-read an unchanged corpus on the next scan', async () => {
const provider = new CountingRemoteProvider()
for (const day of ['07/07', '07/25', '08/10']) {
provider.addFile(
`/home/ada/.codex/sessions/2026/${day}/rollout-${day.replace('/', '')}.jsonl`,
transcript(
`session-${day.replace('/', '')}`,
`Work from ${day}`,
'2026-07-07T01:00:00.000Z'
),
1_000
)
}
const first = await scan(provider)
expect(first.sessions).toHaveLength(3)
expect(provider.readFilePaths).toHaveLength(3)
provider.readFilePaths.length = 0
const second = await scan(provider)
// Historical transcripts are immutable; a second pass must cost zero reads.
expect(provider.readFilePaths).toEqual([])
expect(second.sessions.map((session) => session.title)).toEqual(
first.sessions.map((session) => session.title)
)
})
it('re-reads a transcript that actually changed', async () => {
const provider = new CountingRemoteProvider()
const path = '/home/ada/.codex/sessions/2026/08/31/rollout-live.jsonl'
provider.addFile(
path,
transcript('live-session', 'First prompt', '2026-08-31T01:00:00.000Z'),
1_000
)
await scan(provider)
provider.readFilePaths.length = 0
provider.addFile(
path,
transcript('live-session', 'Second prompt', '2026-08-31T02:00:00.000Z'),
2_000
)
const result = await scan(provider)
expect(provider.readFilePaths).toEqual([path])
expect(result.sessions[0]?.title).toBe('Second prompt')
})
it('re-reads when only the size changed under an unchanged mtime', async () => {
const provider = new CountingRemoteProvider()
const path = '/home/ada/.codex/sessions/2026/08/31/rollout-grown.jsonl'
provider.addFile(path, transcript('grown-session', 'Short', '2026-08-31T01:00:00.000Z'), 1_000)
await scan(provider)
provider.readFilePaths.length = 0
provider.addFile(
path,
transcript(
'grown-session',
'A much longer first prompt than before',
'2026-08-31T01:00:00.000Z'
),
1_000
)
const result = await scan(provider)
expect(provider.readFilePaths).toEqual([path])
expect(result.sessions[0]?.title).toBe('A much longer first prompt than before')
})
// Codex names threads in $CODEX_HOME/session_index.jsonl asynchronously, after
// the rollout's last append — so the transcript's mtime+size never changes to
// signal it. That file sits outside `sessions/`, hence outside the read count.
it('picks up a session_index title written after the transcript was cached', async () => {
const provider = new CountingRemoteProvider()
const path = '/home/ada/.codex/sessions/2026/08/31/rollout-named-later.jsonl'
provider.addFile(
path,
transcript('named-later-session', 'First prompt', '2026-08-31T01:00:00.000Z'),
1_000
)
provider.addFile(
'/home/ada/.codex/session_index.jsonl',
jsonLines([{ id: 'some-other-session', thread_name: 'Unrelated thread' }]),
1_000
)
const first = await scan(provider)
expect(first.sessions[0]?.title).toBe('First prompt')
provider.readFilePaths.length = 0
provider.addFile(
'/home/ada/.codex/session_index.jsonl',
jsonLines([
{ id: 'some-other-session', thread_name: 'Unrelated thread' },
{ id: 'named-later-session', thread_name: 'Named by Codex after the fact' }
]),
2_000
)
const second = await scan(provider)
expect(second.sessions[0]?.title).toBe('Named by Codex after the fact')
// The #13753 win is preserved: the index is read, the transcript is not.
expect(provider.readFilePaths).toEqual([])
})
it('does not serve a cached parse to a different execution host', async () => {
const provider = new CountingRemoteProvider()
const path = '/home/ada/.codex/sessions/2026/08/31/rollout-host.jsonl'
provider.addFile(
path,
transcript('host-session', 'Host scoped', '2026-08-31T01:00:00.000Z'),
1_000
)
await scan(provider)
provider.readFilePaths.length = 0
const other = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:other-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(provider.readFilePaths).toEqual([path])
expect(other.sessions[0]?.executionHostId).toBe('ssh:other-box')
})
it('does not cache a read that failed', async () => {
const provider = new CountingRemoteProvider()
const path = '/home/ada/.codex/sessions/2026/08/31/rollout-flaky.jsonl'
provider.addFile(
path,
transcript('flaky-session', 'Recovered', '2026-08-31T01:00:00.000Z'),
1_000
)
let failNextRead = true
const originalReadFile = provider.readFile.bind(provider)
provider.readFile = async (filePath: string): Promise<FileReadResult> => {
if (failNextRead && filePath === path) {
failNextRead = false
provider.readFilePaths.push(filePath)
throw new Error('EIO: transient relay read failure')
}
return await originalReadFile(filePath)
}
const failed = await scan(provider)
expect(failed.sessions).toEqual([])
expect(failed.issues).toHaveLength(1)
provider.readFilePaths.length = 0
const recovered = await scan(provider)
expect(provider.readFilePaths).toEqual([path])
expect(recovered.sessions[0]?.title).toBe('Recovered')
})
})
src/main/ai-vault/remote-session-parse-cache.ts
-116
View File
@@ -1,116 +0,0 @@
import type { AiVaultSession } from '../../shared/ai-vault-types'
import type { RemoteScannerContext, RemoteSessionCandidate } from './remote-session-scanner-types'
import { sidecarUnchanged, type SessionSidecarObservation } from './session-sidecar-stat'
// Matches the local scanner's cap. The relay sidecar is forked with
// --max-old-space-size=384, and a retained session row is a title, a preview
// window and counters — orders of magnitude smaller than the transcript it was
// parsed from, which is what the cache stops us re-reading.
const MAX_CACHE_ENTRIES = 4096
type RemoteSessionParseCacheEntry = {
mtimeMs: number
sizeBytes: number | null
hostKey: string
sidecar?: SessionSidecarObservation
session: AiVaultSession | null
}
// Module scope so it outlives one scan: the sidecar is retired only after 10
// idle minutes, so it spans many passes of a 30s cadence.
const cache = new Map<string, RemoteSessionParseCacheEntry>()
export type RemoteSessionParseStats = { reused: number; parsed: number }
export function resetRemoteSessionParseCacheForTests(): void {
cache.clear()
}
/** Identity of the host a parse result belongs to; a result is not portable across either field. */
export function remoteSessionParseHostKey(context: RemoteScannerContext): string {
return `${context.executionHostId}\u0000${context.hostPlatform.relayPlatform}`
}
export function remoteSessionCandidateKey(candidate: RemoteSessionCandidate): string {
return `${candidate.source.agent}\u0000${candidate.file.path}`
}
function storeEntry(path: string, entry: RemoteSessionParseCacheEntry): void {
cache.delete(path)
cache.set(path, entry)
if (cache.size > MAX_CACHE_ENTRIES) {
const oldest = cache.keys().next()
if (!oldest.done) {
cache.delete(oldest.value)
}
}
}
/**
* Parse a remote transcript, reusing the previous result when the file is
* provably unchanged.
*
* Why this exists: the remote scanner had no cache of any kind, so every pass
* re-read and re-parsed the whole corpus — up to 3000 whole-file reads, GBs of
* JSONL, including July transcripts that had not changed in a month — which is
* what pegged the relay host on the renderer's 30s forced-rescan cadence
* (#13753). The local scanner has had `parseAgentSessionFileCached` for exactly
* this reason; this is its remote counterpart.
*
* `(mtimeMs, sizeBytes)` covers the transcript, and the sidecar observation
* discovery records beside it (remote-session-scanner-discovery.ts) covers a
* source's companion file, so a metadata-only transcript whose companion
* changed still looks changed. Remote Cline is the only such source; remote
* Cursor streams transcript content with no sibling to read. Sources whose
* parse reads a file discovery does not stat — Codex looks its title up in
* `session_index.jsonl` — are not covered by either and pass
* `refreshReusedSession` to re-derive the uncovered part without touching the
* transcript.
*
* Only a completed parse is stored. A read that threw stays uncached so a
* transient filesystem failure cannot pin a wrong answer for the corpus's life.
*/
export async function parseRemoteSessionFileCached(args: {
candidate: RemoteSessionCandidate
hostKey: string
parse: () => Promise<AiVaultSession | null>
// Applied to a reused session only; must not re-read the transcript.
refreshReusedSession?: (session: AiVaultSession) => Promise<AiVaultSession>
stats?: RemoteSessionParseStats
}): Promise<AiVaultSession | null> {
const { file } = args.candidate
const key = remoteSessionCandidateKey(args.candidate)
const entry = cache.get(key)
const unchanged =
entry !== undefined &&
entry.hostKey === args.hostKey &&
entry.mtimeMs === file.mtimeMs &&
(entry.sizeBytes === null ||
file.sizeBytes === undefined ||
entry.sizeBytes === file.sizeBytes) &&
sidecarUnchanged(entry.sidecar, file.sidecar)
if (unchanged) {
if (args.stats) {
args.stats.reused++
}
if (entry.session && args.refreshReusedSession) {
entry.session = await args.refreshReusedSession(entry.session)
}
// Refresh recency without re-parsing so the LRU evicts cold paths first.
storeEntry(key, entry)
return entry.session
}
const session = await args.parse()
if (args.stats) {
args.stats.parsed++
}
storeEntry(key, {
mtimeMs: file.mtimeMs,
sizeBytes: file.sizeBytes ?? null,
hostKey: args.hostKey,
sidecar: file.sidecar,
session
})
return session
}
src/main/ai-vault/remote-session-scan-batching.test.ts
-33
View File
@@ -1,33 +0,0 @@
import { describe, expect, it } from 'vitest'
import { mapRemoteScanBatches } from './remote-session-scan-batching'
describe('mapRemoteScanBatches', () => {
it('observes an abort that lands while the final batch yields', async () => {
const controller = new AbortController()
await expect(
mapRemoteScanBatches(
['a', 'b'],
2,
async (item) => {
controller.abort()
return item
},
controller.signal
)
).rejects.toMatchObject({ name: 'AbortError' })
})
it('observes an abort for empty inputs that never enter the loop', async () => {
const controller = new AbortController()
controller.abort()
await expect(
mapRemoteScanBatches([], 8, async (item) => item, controller.signal)
).rejects.toMatchObject({ name: 'AbortError' })
})
it('returns every batch result when nothing cancels', async () => {
expect(await mapRemoteScanBatches([1, 2, 3], 2, async (item) => item * 2)).toEqual([2, 4, 6])
})
})
src/main/ai-vault/remote-session-scan-batching.ts
-22
View File
@@ -1,22 +0,0 @@
import { setImmediate as yieldToEventLoop } from 'node:timers/promises'
import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
// Batching bounds concurrent remote round trips; the yield between batches keeps
// the process responsive, and the batch boundary is where cancellation lands.
export async function mapRemoteScanBatches<T, U>(
items: readonly T[],
concurrency: number,
mapper: (item: T) => Promise<U>,
signal?: AbortSignal
): Promise<U[]> {
const results: U[] = []
for (let index = 0; index < items.length; index += concurrency) {
throwIfAiVaultScanCancelled(signal)
results.push(...(await Promise.all(items.slice(index, index + concurrency).map(mapper))))
await yieldToEventLoop()
}
// An abort can land while the last batch yields, and empty inputs never enter
// the loop at all — observe it here so neither path returns as a success.
throwIfAiVaultScanCancelled(signal)
return results
}
src/main/ai-vault/remote-session-scan-concurrency.ts
-77
View File
@@ -1,77 +0,0 @@
import type { RemoteSessionFilesystemProvider } from './remote-session-scanner-types'
// Why: discovery batches (8 sources) each stat in batches of 8, and parse
// batches read whole transcripts — nested fan-out put ~64 filesystem round
// trips on one SSH mux or relay event loop at once, blowing the scan budget and
// starving pty/fs/hook traffic. Every scan shares one in-flight ceiling.
const REMOTE_SCAN_FILESYSTEM_CONCURRENCY = 8
/** Wraps a provider so all of one scan's filesystem calls share a single
* in-flight ceiling, regardless of how the callers nest their batches. */
export function limitRemoteScanFilesystemConcurrency(
provider: RemoteSessionFilesystemProvider,
maxInFlight: number = REMOTE_SCAN_FILESYSTEM_CONCURRENCY
): RemoteSessionFilesystemProvider {
const gate = createConcurrencyGate(maxInFlight)
return {
openCode: provider.openCode,
readDir: (dirPath) => gate(() => provider.readDir(dirPath)),
readFile: (filePath, limits) => gate(() => provider.readFile(filePath, limits)),
stat: (filePath) => gate(() => provider.stat(filePath)),
...(provider.readTranscriptBytes
? {
readTranscriptBytes: async function* (
path: string,
signal?: AbortSignal,
options?: { regularFileOnly: true; maxBytes: number }
) {
let enter!: () => void
let release!: () => void
const entered = new Promise<void>((resolve) => {
enter = resolve
})
const released = new Promise<void>((resolve) => {
release = resolve
})
const held = gate(async () => {
enter()
await released
})
await entered
try {
yield* provider.readTranscriptBytes!(path, signal, options)
} finally {
release()
await held
}
}
}
: {})
}
}
function createConcurrencyGate(maxInFlight: number): <T>(run: () => Promise<T>) => Promise<T> {
const limit = Math.max(1, Math.floor(maxInFlight))
const waiting: (() => void)[] = []
let inFlight = 0
return async <T>(run: () => Promise<T>): Promise<T> => {
if (inFlight < limit) {
inFlight++
} else {
// The releasing call hands its slot over directly, so a queued caller can
// never race a fresh one into an over-limit slot.
await new Promise<void>((resolve) => waiting.push(resolve))
}
try {
return await run()
} finally {
const next = waiting.shift()
if (next) {
next()
} else {
inFlight--
}
}
}
}
src/main/ai-vault/remote-session-scanner-cline-source.ts
-59
View File
@@ -1,59 +0,0 @@
import type { RemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { joinRemotePath } from '../ssh/ssh-remote-platform'
import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
import { isMissingRemoteSessionPathError } from './remote-session-file-stat'
import type { RemoteSessionSource } from './remote-session-scanner-types'
import {
clineMessagesPathForMetadata,
isClineSessionMetadataPath,
parseClineSessionDocuments,
parseClineSessionContent
} from './session-scanner-cline-parser'
export function remoteClineSource(
remoteHome: string,
hostPlatform: RemoteHostPlatform
): RemoteSessionSource {
return {
agent: 'cline',
rootDir: joinRemotePath(hostPlatform, remoteHome, '.cline', 'data', 'sessions'),
extensions: ['.json'],
filePredicate: isClineSessionMetadataPath,
contentDependencyPath: clineMessagesPathForMetadata,
directoryPredicate: (_name, depth) => depth === 0,
parseDocument: (file, bytes, context) =>
parseClineSessionDocuments(
file,
bytes,
() =>
context.provider.readTranscriptBytes!(
clineMessagesPathForMetadata(file.path),
context.signal
),
context.hostPlatform.os,
{
executionHostId: context.executionHostId,
executionHostPlatform: context.hostPlatform.os
},
context.signal
),
parse: async (file, content, context) => {
let messagesContent: string | null = null
try {
throwIfAiVaultScanCancelled(context.signal)
const read = await context.provider.readFile(clineMessagesPathForMetadata(file.path))
throwIfAiVaultScanCancelled(context.signal)
messagesContent = read.isBinary ? null : read.content
} catch (error) {
throwIfAiVaultScanCancelled(context.signal)
if (!isMissingRemoteSessionPathError(error)) {
throw error
}
}
return parseClineSessionContent(file, content, messagesContent, context.hostPlatform.os, {
executionHostId: context.executionHostId,
executionHostPlatform: context.hostPlatform.os
})
}
}
}
src/main/ai-vault/remote-session-scanner-codex-index.ts
-84
View File
@@ -1,84 +0,0 @@
import type { RemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { joinRemotePath } from '../ssh/ssh-remote-platform'
import { extractString, normalizeTitleText, parseJsonObject } from './session-scanner-values'
import { remoteSessionContentLines } from './remote-session-content-lines'
import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
import type {
RemoteScannerContext,
RemoteSessionFilesystemProvider
} from './remote-session-scanner-types'
const CODEX_SESSION_INDEX_FILE = 'session_index.jsonl'
// One index read per CODEX_HOME per scan (`context.titleCaches` is scan-scoped);
// used both by the transcript parse and by the parse cache's reuse path.
export function remoteCodexIndexedTitleReader(
codexHome: string,
context: RemoteScannerContext
): (sessionId: string) => Promise<string | null> {
return async (sessionId) =>
(
await remoteCodexIndexTitles({
provider: context.provider,
codexHome,
hostPlatform: context.hostPlatform,
titleCaches: context.titleCaches,
signal: context.signal
})
).get(sessionId) ?? null
}
export async function remoteCodexIndexTitles(args: {
provider: RemoteSessionFilesystemProvider
codexHome: string
hostPlatform: RemoteHostPlatform
titleCaches: Map<string, Promise<Map<string, string>>>
signal?: AbortSignal
}): Promise<Map<string, string>> {
const cached = args.titleCaches.get(args.codexHome)
if (cached) {
return cached
}
const pending = readRemoteCodexIndexTitles(
args.provider,
args.codexHome,
args.hostPlatform,
args.signal
)
args.titleCaches.set(args.codexHome, pending)
return pending
}
async function readRemoteCodexIndexTitles(
provider: RemoteSessionFilesystemProvider,
codexHome: string,
hostPlatform: RemoteHostPlatform,
signal?: AbortSignal
): Promise<Map<string, string>> {
const titleBySessionId = new Map<string, string>()
try {
throwIfAiVaultScanCancelled(signal)
const { content, isBinary } = await provider.readFile(
joinRemotePath(hostPlatform, codexHome, CODEX_SESSION_INDEX_FILE)
)
throwIfAiVaultScanCancelled(signal)
if (isBinary) {
return titleBySessionId
}
for await (const line of remoteSessionContentLines(content, signal)) {
const record = parseJsonObject(line)
if (!record) {
continue
}
const sessionId = extractString(record.id)
const title = normalizeTitleText(extractString(record.thread_name) ?? '')
if (sessionId && title) {
titleBySessionId.set(sessionId, title)
}
}
} catch {
throwIfAiVaultScanCancelled(signal)
// Codex indexes are opportunistic; raw transcripts remain sufficient.
}
return titleBySessionId
}
src/main/ai-vault/remote-session-scanner-codex-sources.ts
-51
View File
@@ -1,51 +0,0 @@
import { joinRemotePath, type RemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { parseCodexSessionContent } from './session-scanner-codex-parser'
import { remoteCodexIndexedTitleReader } from './remote-session-scanner-codex-index'
import type { RemoteSessionContent } from './remote-session-content-lines'
import type { FileWithMtime } from './session-scanner-types'
import type { RemoteScannerContext, RemoteSessionSource } from './remote-session-scanner-types'
/** Codex is the one remote agent whose sessions live under two CODEX_HOME roots, so it
* yields a source per root. Split from `remote-session-scanner-sources.ts` so adding an
* agent does not push that module past its line budget. */
export function remoteCodexSources(
remoteHome: string,
hostPlatform: RemoteHostPlatform
): RemoteSessionSource[] {
return [
joinRemotePath(hostPlatform, remoteHome, '.codex'),
joinRemotePath(
hostPlatform,
remoteHome,
'.local',
'share',
'orca',
'codex-runtime-home',
'home'
)
].map((codexHome) => {
const parse = (
file: FileWithMtime,
content: RemoteSessionContent,
context: RemoteScannerContext
) =>
parseCodexSessionContent({
file,
content,
platform: context.hostPlatform.os,
codexHome,
executionHostId: context.executionHostId,
executionHostPlatform: context.hostPlatform.os,
signal: context.signal,
readIndexedTitle: remoteCodexIndexedTitleReader(codexHome, context)
})
return {
agent: 'codex',
rootDir: joinRemotePath(hostPlatform, codexHome, 'sessions'),
codexHome,
extensions: ['.jsonl'],
parse,
parseLines: parse
}
})
}
src/main/ai-vault/remote-session-scanner-devin-source.ts
-38
View File
@@ -1,38 +0,0 @@
import type { RemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { joinRemotePath } from '../ssh/ssh-remote-platform'
import { remoteSessionDocumentParsers } from './remote-session-document-parsers'
import type { RemoteSessionSource } from './remote-session-scanner-types'
import { parseDevinSessionContent } from './session-scanner-devin-parser'
// Why: Devin CLI writes transcripts under %APPDATA% on a Windows host and
// ~/.local/share on posix ones.
function remoteDevinDataSegments(hostPlatform: RemoteHostPlatform): string[] {
return hostPlatform.os === 'win32'
? ['AppData', 'Roaming', 'devin', 'cli']
: ['.local', 'share', 'devin', 'cli']
}
export function remoteDevinSource(
remoteHome: string,
hostPlatform: RemoteHostPlatform,
directory: 'transcripts' | 'agent_logs' = 'transcripts'
): RemoteSessionSource {
return {
agent: 'devin',
rootDir: joinRemotePath(
hostPlatform,
remoteHome,
...remoteDevinDataSegments(hostPlatform),
directory
),
extensions: ['.json'],
...remoteSessionDocumentParsers('devin'),
parse: (file, content, context) =>
Promise.resolve(
parseDevinSessionContent(file, content, context.hostPlatform.os, {
executionHostId: context.executionHostId,
executionHostPlatform: context.hostPlatform.os
})
)
}
}
src/main/ai-vault/remote-session-scanner-discovery.ts
-189
View File
@@ -1,189 +0,0 @@
import { extname } from 'node:path'
import type { AiVaultScanIssue } from '../../shared/ai-vault-types'
import type { ExecutionHostId } from '../../shared/execution-host'
import { joinRemotePath } from '../ssh/ssh-remote-platform'
import { isMissingRemoteSessionPathError, statRemoteSessionFile } from './remote-session-file-stat'
import type { FileWithMtime } from './session-scanner-types'
import type { SessionSidecarObservation } from './session-sidecar-stat'
import { errorMessage } from './session-scanner-values'
import { mapRemoteScanBatches } from './remote-session-scan-batching'
import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
import { recordSessionScanIssue } from './session-scan-issues'
import type {
RemoteScannerContext,
RemoteSessionCandidate,
RemoteSessionSource
} from './remote-session-scanner-types'
const REMOTE_DISCOVERY_CONCURRENCY = 8
export async function discoverRemoteSourceCandidates(args: {
source: RemoteSessionSource
context: RemoteScannerContext
issues: AiVaultScanIssue[]
}): Promise<RemoteSessionCandidate[]> {
if (args.source.discover) {
const files = await args.source.discover(args.context, args.issues)
throwIfAiVaultScanCancelled(args.context.signal)
return files.map((file) => ({ source: args.source, file }))
}
const walked = args.source.fixedChildFileSegments
? await listRemoteFixedChildFiles(args.source, args.context, args.issues)
: await walkRemoteSessionFiles(args.source, args.context, args.issues)
const partition = args.source.partitionSubagentTranscripts?.(walked) ?? null
const paths = partition ? partition.sessionFilePaths : walked
const files = await mapRemoteScanBatches(
paths,
REMOTE_DISCOVERY_CONCURRENCY,
(path) => statRemoteCandidateFile(path, args.source, args.context, args.issues),
args.context.signal
)
return files
.filter((file): file is FileWithMtime => Boolean(file))
.map((file) => ({
source: args.source,
file,
subagentTranscriptCount: partition?.subagentTranscriptCounts.get(file.path) ?? 0
}))
}
async function statRemoteCandidateFile(
path: string,
source: RemoteSessionSource,
context: RemoteScannerContext,
issues: AiVaultScanIssue[]
): Promise<FileWithMtime | null> {
const file = await statRemoteSessionFile(
context.provider,
path,
source.agent,
context.executionHostId,
issues,
{
missingIsExpected: Boolean(source.fixedChildFileSegments),
signal: context.signal
}
)
if (!file || !source.contentDependencyPath) {
return file
}
const sidecarPath = source.contentDependencyPath(path)
// Recorded beside the transcript's own stat, never folded into it: one key
// cannot mean both "the transcript grew" and "the sibling changed".
return { ...file, sidecar: await observeRemoteSidecar(source, context, sidecarPath, issues) }
}
/**
* A stat that failed for any reason other than a missing path is `'unknown'`,
* not `'none'`: serving the cached session over an unreadable sibling would
* publish metadata nobody can currently see. `statRemoteSessionFile` already
* recorded the issue for the failure.
*/
async function observeRemoteSidecar(
source: RemoteSessionSource,
context: RemoteScannerContext,
sidecarPath: string,
issues: AiVaultScanIssue[]
): Promise<SessionSidecarObservation> {
try {
const sidecar = await statRemoteSessionFile(
context.provider,
sidecarPath,
source.agent,
context.executionHostId,
issues,
{ missingIsExpected: true, signal: context.signal, rethrowFailures: true }
)
return sidecar
? { path: sidecarPath, mtimeMs: sidecar.mtimeMs, sizeBytes: sidecar.sizeBytes ?? 0 }
: 'none'
} catch {
return 'unknown'
}
}
async function listRemoteFixedChildFiles(
source: RemoteSessionSource,
context: RemoteScannerContext,
issues: AiVaultScanIssue[]
): Promise<string[]> {
throwIfAiVaultScanCancelled(context.signal)
let entries
try {
entries = await context.provider.readDir(source.rootDir)
} catch (err) {
throwIfAiVaultScanCancelled(context.signal)
recordRemoteDirectoryIssue(source, context.executionHostId, issues, source.rootDir, err)
return []
}
const segments = source.fixedChildFileSegments ?? []
// Why: Antigravity's transcript path is fixed. Constructing it avoids three
// serialized SSH readDir round trips for every conversation directory.
return entries
.filter((entry) => entry.isDirectory && !entry.isSymlink)
.flatMap((entry) =>
[segments, ...(source.additionalFixedChildFileSegments ?? [])].map((fileSegments) =>
joinRemotePath(context.hostPlatform, source.rootDir, entry.name, ...fileSegments)
)
)
.filter((path) => source.filePredicate?.(path) ?? true)
}
async function walkRemoteSessionFiles(
source: RemoteSessionSource,
context: RemoteScannerContext,
issues: AiVaultScanIssue[],
dirPath = source.rootDir,
depth = 0
): Promise<string[]> {
throwIfAiVaultScanCancelled(context.signal)
let entries
try {
entries = await context.provider.readDir(dirPath)
} catch (err) {
throwIfAiVaultScanCancelled(context.signal)
recordRemoteDirectoryIssue(source, context.executionHostId, issues, dirPath, err)
return []
}
const extensions = new Set(source.extensions)
const files: string[] = []
for (const entry of entries) {
throwIfAiVaultScanCancelled(context.signal)
const fullPath = joinRemotePath(context.hostPlatform, dirPath, entry.name)
if (
entry.isDirectory &&
!entry.isSymlink &&
(source.directoryPredicate?.(entry.name, depth) ?? true)
) {
files.push(...(await walkRemoteSessionFiles(source, context, issues, fullPath, depth + 1)))
continue
}
if (
!entry.isSymlink &&
extensions.has(extname(entry.name).toLowerCase()) &&
(source.filePredicate?.(fullPath) ?? true)
) {
files.push(fullPath)
}
}
return files
}
function recordRemoteDirectoryIssue(
source: RemoteSessionSource,
executionHostId: ExecutionHostId,
issues: AiVaultScanIssue[],
path: string,
err: unknown
): void {
if (!isMissingRemoteSessionPathError(err)) {
recordSessionScanIssue(issues, {
executionHostId,
agent: source.agent,
kind: 'host',
path,
message: errorMessage(err)
})
}
}
src/main/ai-vault/remote-session-scanner-kiro-source.ts
-73
View File
@@ -1,73 +0,0 @@
import type { RemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { joinRemotePath } from '../ssh/ssh-remote-platform'
import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
import { isMissingRemoteSessionPathError } from './remote-session-file-stat'
import {
remoteSessionContentLines,
streamedSessionContentLines
} from './remote-session-content-lines'
import type { RemoteScannerContext, RemoteSessionSource } from './remote-session-scanner-types'
import {
isKiroSessionMetadataPath,
kiroTranscriptPathForMetadata,
parseKiroSessionContent
} from './session-scanner-kiro-parser'
async function readTranscriptLines(
metadataPath: string,
context: RemoteScannerContext
): Promise<Iterable<string> | AsyncIterable<string> | null> {
const transcriptPath = kiroTranscriptPathForMetadata(metadataPath)
// Why: beside the execution host the transcript streams; megabyte tool outputs are common.
if (context.provider.readTranscriptBytes) {
return streamedSessionContentLines(
context.provider.readTranscriptBytes(transcriptPath, context.signal),
context.signal
)
}
try {
throwIfAiVaultScanCancelled(context.signal)
const read = await context.provider.readFile(transcriptPath)
throwIfAiVaultScanCancelled(context.signal)
return read.isBinary ? null : remoteSessionContentLines(read.content, context.signal)
} catch (error) {
throwIfAiVaultScanCancelled(context.signal)
if (isMissingRemoteSessionPathError(error)) {
return null
}
throw error
}
}
export function remoteKiroSource(
remoteHome: string,
hostPlatform: RemoteHostPlatform,
kiroHomeDir?: string
): RemoteSessionSource {
return {
agent: 'kiro',
rootDir: kiroHomeDir
? joinRemotePath(hostPlatform, kiroHomeDir, 'sessions', 'cli')
: joinRemotePath(hostPlatform, remoteHome, '.kiro', 'sessions', 'cli'),
extensions: ['.json'],
filePredicate: isKiroSessionMetadataPath,
contentDependencyPath: kiroTranscriptPathForMetadata,
directoryPredicate: () => false,
parse: async (file, content, context) => {
const options = {
executionHostId: context.executionHostId,
executionHostPlatform: context.hostPlatform.os
}
try {
const lines = await readTranscriptLines(file.path, context)
return await parseKiroSessionContent(file, content, lines, context.hostPlatform.os, options)
} catch (error) {
// A transcript that vanished mid-stream leaves a valid metadata-only session.
if (!isMissingRemoteSessionPathError(error)) {
throw error
}
return parseKiroSessionContent(file, content, null, context.hostPlatform.os, options)
}
}
}
}
src/main/ai-vault/remote-session-scanner-kiro.test.ts
-61
View File
@@ -1,61 +0,0 @@
import { afterEach, describe, expect, it, vi } from 'vitest'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { MemoryRemoteProvider, jsonLines } from './remote-session-scanner-test-fixtures'
import { KIRO_FIXTURE_SESSION_ID } from './session-scanner-kiro-fixtures'
afterEach(() => vi.unstubAllEnvs())
describe('remote Kiro history', () => {
it.each([
['linux-x64', '/home/ada', '/srv/kiro'],
['win32-x64', 'C:/Users/Ada', 'D:/kiro']
] as const)(
'reads the %s execution host override, independent of the client',
async (platform, remoteHome, kiroHomeDir) => {
vi.stubEnv('KIRO_HOME', '/client/must-not-be-read')
const provider = new MemoryRemoteProvider()
const path = `${kiroHomeDir}/sessions/cli/${KIRO_FIXTURE_SESSION_ID}.json`
provider.addFile(path, JSON.stringify({ cwd: remoteHome, title: 'Remote Kiro' }), 10)
provider.addFile(
`${path}l`,
jsonLines([
{ kind: 'Prompt', data: { content: [{ kind: 'text', data: 'Read the file' }] } },
{ kind: 'AssistantMessage', data: { content: [{ kind: 'text', data: 'Done' }] } }
]),
11
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:kiro-host',
remoteHome,
kiroHomeDir,
hostPlatform: getRemoteHostPlatform(platform)
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
agent: 'kiro',
sessionId: KIRO_FIXTURE_SESSION_ID,
filePath: path,
messageCount: 2,
executionHostId: 'ssh:kiro-host'
})
}
)
it('keeps the remote default when the peer supplies no override', async () => {
vi.stubEnv('KIRO_HOME', '/client/must-not-be-read')
const provider = new MemoryRemoteProvider()
const path = `/home/ada/.kiro/sessions/cli/${KIRO_FIXTURE_SESSION_ID}.json`
provider.addFile(path, JSON.stringify({ cwd: '/home/ada', title: 'Remote Kiro' }), 10)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:kiro-host',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions[0]?.filePath).toBe(path)
})
})
src/main/ai-vault/remote-session-scanner-muse.test.ts
-67
View File
@@ -1,67 +0,0 @@
import { describe, expect, it } from 'vitest'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { MemoryRemoteProvider, jsonLines } from './remote-session-scanner-test-fixtures'
describe('scanRemoteAiVaultSessions muse', () => {
it('discovers Muse transcripts under the remote XDG sessions root', async () => {
const provider = new MemoryRemoteProvider()
const sessionDir = '/home/ada/.local/share/muse/sessions/2026/07/04/muse-remote'
provider.addFile(
`${sessionDir}/session.jsonl`,
jsonLines([
{
record_type: 'event',
payload_type: 'runtime.session.metadata',
recorded_at: 1780000000000000,
payload: { kind: 'metadata', record: { workspace_root: '/home/ada/repo' } }
},
{
record_type: 'event',
payload_type: 'runtime.user_intent.accepted',
recorded_at: 1780000001000000,
payload: {
intent_id: 'intent-remote',
refill_blocks: [{ kind: 'text', text: 'Remote muse title' }]
}
},
{
record_type: 'event',
payload_type: 'runtime.session',
recorded_at: 1780000002000000,
payload: {
kind: 'run',
run_id: 'run-remote',
event: {
kind: 'model_completed',
model: 'muse-spark-remote',
usage: { input_tokens: 3, output_tokens: 4 }
}
}
}
]),
40
)
// Sidecars next to the transcript must not list as sessions.
provider.addFile(`${sessionDir}/cli-abc.log`, 'log output', 41)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
executionHostId: 'ssh:dev-box',
executionHostPlatform: 'linux',
agent: 'muse',
sessionId: 'muse-remote',
title: 'Remote muse title',
model: 'muse-spark-remote',
filePath: `${sessionDir}/session.jsonl`
})
})
})
src/main/ai-vault/remote-session-scanner-omp-subagents.test.ts
-71
View File
@@ -1,71 +0,0 @@
import { describe, expect, it } from 'vitest'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { MemoryRemoteProvider, jsonLines } from './remote-session-scanner-test-fixtures'
describe('scanRemoteAiVaultSessions OMP subagent partitioning', () => {
it('excludes remote OMP artifact-dir transcripts and counts them on the parent', async () => {
const stem = '2026-05-01T10-00-00-000Z_cccccccc-dddd-4eee-8fff-000000000000'
const workspaceDir = '/home/ada/.omp/agent/sessions/home-app-85dfa2f0'
const provider = new MemoryRemoteProvider()
provider.addFile(
`${workspaceDir}/${stem}.jsonl`,
jsonLines([
{
type: 'session',
version: 3,
id: 'cccccccc-dddd-4eee-8fff-000000000000',
cwd: '/home/ada/repo',
timestamp: '2026-05-01T10:00:00.000Z'
},
{
type: 'message',
timestamp: '2026-05-01T10:00:01.000Z',
message: { role: 'user', content: 'Delegate some tasks' }
}
]),
70
)
for (const label of ['AuthAndPreflight', 'BitbucketDcApi']) {
provider.addFile(
`${workspaceDir}/${stem}/${label}.jsonl`,
jsonLines([
{
type: 'message',
timestamp: '2026-05-01T10:01:00.000Z',
message: { role: 'user', content: `${label} task prompt` }
}
]),
71
)
}
// A grandchild belongs to its own parent: neither a row nor a count here.
provider.addFile(
`${workspaceDir}/${stem}/AuthAndPreflight/Nested.jsonl`,
jsonLines([
{
type: 'message',
timestamp: '2026-05-01T10:02:00.000Z',
message: { role: 'user', content: 'Nested task prompt' }
}
]),
72
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
agent: 'omp',
sessionId: 'cccccccc-dddd-4eee-8fff-000000000000',
subagentTranscriptCount: 2,
filePath: `${workspaceDir}/${stem}.jsonl`
})
})
})
src/main/ai-vault/remote-session-scanner-opencode-source.ts
-149
View File
@@ -1,149 +0,0 @@
import type { AiVaultScanIssue } from '../../shared/ai-vault-types'
import { isOpenCodeV2DatabaseName } from '../../shared/opencode-database-name'
import { joinRemotePath } from '../ssh/ssh-remote-platform'
import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
import { isMissingRemoteSessionPathError } from './remote-session-file-stat'
import { discoverRemoteSourceCandidates } from './remote-session-scanner-discovery'
import { remotePathSegments } from './remote-session-scanner-source-parsers'
import type {
RemoteOpenCodeSessionReader,
RemoteScannerContext,
RemoteSessionSource
} from './remote-session-scanner-types'
import { recordSessionScanIssue } from './session-scan-issues'
import { restampAiVaultListResult } from './session-list-results'
import { splitOpenCodeSqliteCandidate } from './session-scanner-opencode-sqlite-paths'
import { errorMessage } from './session-scanner-values'
export function remoteOpenCodeSources(
reader: RemoteOpenCodeSessionReader | undefined,
candidateLimit: number
): RemoteSessionSource[] {
if (!reader) {
return []
}
let databasePaths: Promise<string[]> | undefined
return (['opencode', 'opencode2'] as const).map((agent) => {
const source: RemoteSessionSource = {
agent,
rootDir: reader.dataDirectory,
extensions: ['.json'],
parse: async () => null,
parseCandidate: async (file, context) => {
throwIfAiVaultScanCancelled(context.signal)
const candidate = splitOpenCodeSqliteCandidate(file.path)
const session = candidate
? await reader.parse({
...candidate,
platform: context.hostPlatform.os,
...(agent === 'opencode2' ? { agent } : {}),
signal: context.signal
})
: await reader.parseLegacy(file, context.hostPlatform.os)
throwIfAiVaultScanCancelled(context.signal)
if (!session) {
return null
}
const stamped = restampAiVaultListResult(
{ sessions: [session], issues: [], scannedAt: '' },
context.executionHostId
).sessions[0]
return stamped ? { ...stamped, executionHostPlatform: context.hostPlatform.os } : null
},
discover: async (context, issues) => {
databasePaths ??= discoverDatabasePaths(reader, context, issues)
const paths = await databasePaths
const ownPaths =
agent === 'opencode2'
? paths
: paths.filter(
(path) => !isOpenCodeV2DatabaseName(remotePathSegments(path).at(-1) ?? '')
)
const readIssues: AiVaultScanIssue[] = []
const candidates = await reader.list({
dbPaths: ownPaths,
limit: candidateLimit,
issues: readIssues,
...(agent === 'opencode2' ? { agent } : {}),
signal: context.signal
})
throwIfAiVaultScanCancelled(context.signal)
for (const issue of readIssues) {
recordSessionScanIssue(issues, { ...issue, executionHostId: context.executionHostId })
}
const files = candidates.map((candidate) => candidate.file)
if (agent === 'opencode2') {
return files
}
const legacy = await discoverRemoteSourceCandidates({
source: {
...source,
discover: undefined,
rootDir: joinRemotePath(
context.hostPlatform,
reader.dataDirectory,
'storage',
'session'
)
},
context,
issues
})
const ids = new Set(files.map((file) => splitOpenCodeSqliteCandidate(file.path)?.sessionId))
return [
...files,
...legacy
.filter(
({ file }) =>
!ids.has(
remotePathSegments(file.path)
.at(-1)
?.replace(/\.json$/, '')
)
)
.map(({ file }) => file)
]
}
}
return source
})
}
async function discoverDatabasePaths(
reader: RemoteOpenCodeSessionReader,
context: RemoteScannerContext,
issues: AiVaultScanIssue[]
): Promise<string[]> {
throwIfAiVaultScanCancelled(context.signal)
if (reader.databasePath === null) {
return []
}
try {
if (reader.databasePath !== undefined) {
const stat = await context.provider.stat(reader.databasePath)
return stat.type === 'file' || stat.type === 'symlink' ? [reader.databasePath] : []
}
const entries = await context.provider.readDir(reader.dataDirectory)
return entries
.filter(
(entry) =>
!entry.isDirectory &&
!entry.isSymlink &&
/^opencode(?:-[A-Za-z0-9_.-]+)?\.db$/.test(entry.name)
)
.map((entry) => joinRemotePath(context.hostPlatform, reader.dataDirectory, entry.name))
.sort()
} catch (error) {
throwIfAiVaultScanCancelled(context.signal)
if (!isMissingRemoteSessionPathError(error)) {
recordSessionScanIssue(issues, {
executionHostId: context.executionHostId,
agent: 'opencode',
kind: 'scope',
path: reader.databasePath ?? reader.dataDirectory,
message: errorMessage(error)
})
}
return []
}
}
src/main/ai-vault/remote-session-scanner-opencode.test.ts
-235
View File
@@ -1,235 +0,0 @@
import { beforeEach, describe, expect, it, vi } from 'vitest'
import type { AiVaultSession } from '../../shared/ai-vault-types'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { resetRemoteSessionParseCacheForTests } from './remote-session-parse-cache'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { MemoryRemoteProvider, jsonLines } from './remote-session-scanner-test-fixtures'
import type { RemoteOpenCodeSessionReader } from './remote-session-scanner-types'
import { createAccumulator, finalizeSession, updateTimeline } from './session-scanner-accumulator'
import {
buildOpenCodeSqliteCandidatePath,
splitOpenCodeSqliteCandidate
} from './session-scanner-opencode-sqlite-paths'
import type { FileWithMtime } from './session-scanner-types'
const remoteHome = '/home/ada'
const dataDirectory = `${remoteHome}/.local/share/opencode`
const hostPlatform = getRemoteHostPlatform('linux-x64')
const scanOptions = { remoteHome, hostPlatform, executionHostId: 'ssh:one' as const }
beforeEach(resetRemoteSessionParseCacheForTests)
function fixture() {
const sessions = new Map<string, AiVaultSession>()
const list: RemoteOpenCodeSessionReader['list'] = vi.fn(async (args) =>
[...sessions.values()]
.filter(
(session) =>
session.agent === (args.agent ?? 'opencode') && args.dbPaths.includes(session.filePath)
)
.sort((left, right) => Date.parse(right.modifiedAt) - Date.parse(left.modifiedAt))
.slice(0, args.limit)
.map((session) => ({
agent: session.agent,
codexHome: null,
file: file(
buildOpenCodeSqliteCandidatePath(session.filePath, session.sessionId),
Date.parse(session.modifiedAt)
)
}))
)
const parse: RemoteOpenCodeSessionReader['parse'] = vi.fn(
async (args) =>
sessions.get(
`${args.agent ?? 'opencode'}:${buildOpenCodeSqliteCandidatePath(args.dbPath, args.sessionId)}`
) ?? null
)
const parseLegacy = vi.fn(async (entry: FileWithMtime) =>
session('opencode', 'legacy', entry, '/home/ada/repo')
)
const provider = Object.assign(new MemoryRemoteProvider(), {
openCode: { dataDirectory, list, parse, parseLegacy }
})
const add = (
id: string,
mtime: number,
options: { agent?: 'opencode' | 'opencode2'; cwd?: string; dbName?: string } = {}
) => {
const agent = options.agent ?? 'opencode'
const dbPath = `${dataDirectory}/${options.dbName ?? 'opencode.db'}`
provider.addFile(dbPath, 'database', 1)
const path = buildOpenCodeSqliteCandidatePath(dbPath, id)
sessions.set(
`${agent}:${path}`,
session(agent, id, file(path, mtime), options.cwd ?? '/home/ada/other')
)
}
return { provider, add, list, parse, parseLegacy }
}
function file(path: string, mtimeMs: number): FileWithMtime {
return { path, mtimeMs, modifiedAt: new Date(mtimeMs).toISOString() }
}
function session(
agent: 'opencode' | 'opencode2',
sessionId: string,
entry: FileWithMtime,
cwd: string
): AiVaultSession {
const accumulator = createAccumulator({
agent,
file: { ...entry, path: splitOpenCodeSqliteCandidate(entry.path)?.dbPath ?? entry.path },
sessionId
})
accumulator.cwd = cwd
updateTimeline(accumulator, entry.modifiedAt)
const parsed = finalizeSession(accumulator, 'linux')
if (!parsed) {
throw new Error('Invalid fixture session')
}
return parsed
}
describe('remote OpenCode discovery', () => {
it('sorts database rows with file-backed agents before applying the global cap', async () => {
const { provider, add } = fixture()
add('older', 1000)
add('newest', 3000)
provider.addFile(
`${remoteHome}/.claude/projects/project/middle.jsonl`,
jsonLines([
{
sessionId: 'middle',
timestamp: new Date(2000).toISOString(),
type: 'user',
message: { content: 'middle' }
}
]),
2000
)
const read = vi.spyOn(provider, 'readFile')
const result = await scanRemoteAiVaultSessions({ ...scanOptions, provider, limit: 2 })
expect(result.issues).toEqual([])
expect(result.sessions.map((entry) => entry.sessionId)).toEqual(['newest', 'middle'])
expect(result.sessions[0]).toMatchObject({
executionHostId: 'ssh:one',
executionHostPlatform: 'linux',
id: `ssh:one:opencode:newest:${dataDirectory}/opencode.db`
})
expect(read.mock.calls.every(([path]) => !path.includes('.db#'))).toBe(true)
})
it('retains older scoped rows beyond the recent parse budget', async () => {
const { provider, add, list } = fixture()
for (let index = 0; index < 10; index++) {
add(`other-${index}`, 10000 + index)
}
add('scoped', 1000, { cwd: '/home/ada/repo/app' })
const result = await scanRemoteAiVaultSessions({
...scanOptions,
provider,
limit: 1,
scopePaths: ['/home/ada/repo']
})
expect(result.sessions.map((entry) => entry.sessionId)).toEqual(['other-9', 'scoped'])
expect(list).toHaveBeenCalledWith(expect.objectContaining({ limit: 1003 }))
})
it('drops stale legacy duplicates before limiting while keeping legacy-only history', async () => {
const { provider, add, parseLegacy } = fixture()
add('migrated', 2000)
provider.addFile(`${dataDirectory}/storage/session/project/migrated.json`, '{}', 9000)
provider.addFile(`${dataDirectory}/storage/session/project/legacy.json`, '{}', 1000)
const result = await scanRemoteAiVaultSessions({ ...scanOptions, provider, limit: 10 })
expect(result.sessions.map((entry) => entry.sessionId)).toEqual(['migrated', 'legacy'])
expect(parseLegacy).toHaveBeenCalledTimes(1)
expect(parseLegacy).toHaveBeenCalledWith(
expect.objectContaining({ path: expect.stringContaining('/legacy.json') }),
'linux'
)
})
it('keeps v1 and v2 identities separate in a shared database and parse cache', async () => {
const { provider, add, parse, list } = fixture()
add('same-id', 2000)
add('same-id', 2000, { agent: 'opencode2' })
add('beta', 1000, { agent: 'opencode2', dbName: 'opencode-next.db' })
const first = await scanRemoteAiVaultSessions({ ...scanOptions, provider })
const second = await scanRemoteAiVaultSessions({ ...scanOptions, provider })
expect(first.sessions.map((entry) => entry.agent).sort()).toEqual([
'opencode',
'opencode2',
'opencode2'
])
expect(second.sessions).toEqual(first.sessions)
expect(parse).toHaveBeenCalledTimes(3)
expect(list).toHaveBeenCalledWith(
expect.objectContaining({ dbPaths: [`${dataDirectory}/opencode.db`] })
)
expect(list).toHaveBeenCalledWith(
expect.objectContaining({
dbPaths: [`${dataDirectory}/opencode-next.db`, `${dataDirectory}/opencode.db`],
agent: 'opencode2'
})
)
})
it('invalidates cached database rows after updates and across hosts', async () => {
const { provider, add, parse } = fixture()
add('session', 1000)
await scanRemoteAiVaultSessions({ ...scanOptions, provider })
add('session', 2000)
const updated = await scanRemoteAiVaultSessions({ ...scanOptions, provider })
const other = await scanRemoteAiVaultSessions({
...scanOptions,
executionHostId: 'ssh:two',
provider
})
expect(parse).toHaveBeenCalledTimes(3)
expect(updated.sessions[0]?.modifiedAt).toBe(new Date(2000).toISOString())
expect(other.sessions[0]?.executionHostId).toBe('ssh:two')
})
it('propagates cancellation into the reader and does not cache cancelled parses', async () => {
const { provider, add, parse } = fixture()
add('session', 1000)
const controller = new AbortController()
provider.openCode.parse = async (args) => {
expect(args.signal).toBe(controller.signal)
controller.abort()
return parse(args)
}
await expect(
scanRemoteAiVaultSessions({ ...scanOptions, provider, signal: controller.signal })
).rejects.toMatchObject({ name: 'AbortError' })
provider.openCode.parse = parse
await scanRemoteAiVaultSessions({ ...scanOptions, provider })
expect(parse).toHaveBeenCalledTimes(2)
})
it('leaves legacy filesystem providers on their existing fallback', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(`${dataDirectory}/opencode.db`, 'database', 1000)
const result = await scanRemoteAiVaultSessions({ ...scanOptions, provider })
expect(result.sessions).toEqual([])
expect(result.issues).toEqual([])
expect(provider.readDirPaths).not.toContain(dataDirectory)
})
it('honors an explicitly configured database symlink without enumerating sibling databases', async () => {
const { provider, add, list } = fixture()
add('selected', 1000, { dbName: 'opencode-team.db' })
add('other', 2000)
const selected = `${dataDirectory}/opencode-team.db`
Object.assign(provider.openCode, { databasePath: selected })
const stat = provider.stat.bind(provider)
vi.spyOn(provider, 'stat').mockImplementation(async (path) =>
path === selected ? { type: 'symlink', size: 20, mtime: 1000, mtimeMs: 1000 } : stat(path)
)
const result = await scanRemoteAiVaultSessions({ ...scanOptions, provider })
expect(result.sessions.map((entry) => entry.sessionId)).toEqual(['selected'])
expect(list).toHaveBeenCalledWith(expect.objectContaining({ dbPaths: [selected] }))
expect(provider.readDirPaths).not.toContain(dataDirectory)
})
})
src/main/ai-vault/remote-session-scanner-source-parsers.ts
-80
View File
@@ -1,80 +0,0 @@
import type { AiVaultSession } from '../../shared/ai-vault-types'
import { parseMessageGraphSessionContent } from './session-scanner-graph-parsers'
import {
parseMuseSessionContent,
parseMuseSessionRemoteContent
} from './session-scanner-muse-parser'
import type { FileWithMtime } from './session-scanner-types'
import { normalizeAgentSessionsDir } from './session-scanner-values'
import type { RemoteSessionContent } from './remote-session-content-lines'
import type { RemoteParserOptions } from './remote-session-scanner-types'
export function parseMuseRemoteContent(
file: FileWithMtime,
content: RemoteSessionContent,
platform: NodeJS.Platform,
options: RemoteParserOptions,
signal?: AbortSignal
): Promise<AiVaultSession | null> {
if (typeof content === 'string') {
return Promise.resolve(parseMuseSessionContent(file, content, platform, options))
}
return parseMuseSessionRemoteContent(file, content, platform, options, signal)
}
export function piParser(
file: FileWithMtime,
content: RemoteSessionContent,
platform: NodeJS.Platform,
options: RemoteParserOptions,
signal?: AbortSignal
): Promise<AiVaultSession | null> {
return parseMessageGraphSessionContent('pi', file, content, platform, options, signal)
}
export function ompParser(
file: FileWithMtime,
content: RemoteSessionContent,
platform: NodeJS.Platform,
options: RemoteParserOptions,
signal?: AbortSignal
): Promise<AiVaultSession | null> {
return parseMessageGraphSessionContent('omp', file, content, platform, options, signal)
}
export function primeAgentParser(
file: FileWithMtime,
content: RemoteSessionContent,
platform: NodeJS.Platform,
options: RemoteParserOptions,
signal?: AbortSignal
): Promise<AiVaultSession | null> {
return parseMessageGraphSessionContent('prime-agent', file, content, platform, options, signal)
}
export function openClawParser(
file: FileWithMtime,
content: RemoteSessionContent,
platform: NodeJS.Platform,
options: RemoteParserOptions,
signal?: AbortSignal
): Promise<AiVaultSession | null> {
return parseMessageGraphSessionContent('openclaw', file, content, platform, options, signal)
}
export function remotePathSegments(path: string): string[] {
return path.replace(/\\/g, '/').split('/').filter(Boolean)
}
export function remotePiSessionsSegments(): string[] {
return normalizeAgentSessionsDir('/.pi/agent/sessions', '.pi').split('/').filter(Boolean)
}
export function remoteOmpSessionsSegments(): string[] {
return normalizeAgentSessionsDir('/.omp/agent/sessions', '.omp').split('/').filter(Boolean)
}
// Remote roots are POSIX regardless of the client platform.
export function remotePrimeAgentSessionsSegments(): string[] {
return ['.prime', 'agent', 'sessions']
}
src/main/ai-vault/remote-session-scanner-sources.test.ts
-36
View File
@@ -1,36 +0,0 @@
import { describe, expect, it } from 'vitest'
import { getRemoteHostPlatform, type RemoteHostPlatform } from '../ssh/ssh-remote-platform'
import type { RelayPlatform } from '../ssh/relay-protocol'
import { remoteSessionSources } from './remote-session-scanner-sources'
function devinRootDirs(relayPlatform: RelayPlatform, remoteHome: string): string[] {
const hostPlatform: RemoteHostPlatform = getRemoteHostPlatform(relayPlatform)
return remoteSessionSources(remoteHome, hostPlatform)
.filter((source) => source.agent === 'devin')
.map((source) => source.rootDir)
}
describe('remoteSessionSources devin transcripts root', () => {
it.each([
{
relayPlatform: 'win32-x64' as const,
remoteHome: 'C:/Users/dev',
expected: 'C:/Users/dev/AppData/Roaming/devin/cli/transcripts'
},
{
relayPlatform: 'linux-x64' as const,
remoteHome: '/home/dev',
expected: '/home/dev/.local/share/devin/cli/transcripts'
},
{
relayPlatform: 'darwin-arm64' as const,
remoteHome: '/Users/dev',
expected: '/Users/dev/.local/share/devin/cli/transcripts'
}
])('resolves $expected on $relayPlatform', ({ relayPlatform, remoteHome, expected }) => {
expect(devinRootDirs(relayPlatform, remoteHome)).toEqual([
expected,
expected.replace(/transcripts$/, 'agent_logs')
])
})
})
src/main/ai-vault/remote-session-scanner-sources.ts
-286
View File
@@ -1,286 +0,0 @@
import {
ANTIGRAVITY_HISTORY_ROOTS,
type AntigravitySessionOrigin
} from '../../shared/antigravity-session-origin'
import { parseQoderSessionContent } from './session-scanner-qoder-parser'
import { remoteSessionDocumentParsers } from './remote-session-document-parsers'
import type { RemoteSessionContent } from './remote-session-content-lines'
import type { AiVaultAgent, AiVaultSession } from '../../shared/ai-vault-types'
import type { RemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { joinRemotePath } from '../ssh/ssh-remote-platform'
import { parseAntigravitySessionContent } from './session-scanner-antigravity-parser'
import { isAntigravityTranscriptPath } from './session-scanner-antigravity-paths'
import { parseDroidSessionContent } from './session-scanner-droid-parser'
import { parseClaudeSessionContent } from './session-scanner-primary-parsers'
import { parseCodebuddySessionContent } from './session-scanner-codebuddy-parser'
import { parseGeminiSessionContent } from './session-scanner-gemini-parsers'
import { parseCopilotSessionContent } from './session-scanner-copilot-parser'
import { parseCursorSessionContent } from './session-scanner-cursor-parser'
import { parseHermesSessionContent } from './session-scanner-hermes-parser'
import { parseJcodeSessionContent } from './session-scanner-jcode-parser'
import { partitionSubagentTranscriptPaths } from './session-scanner-subagent-transcripts'
import { partitionOmpSubagentTranscriptPaths } from './session-scanner-omp-subagent-transcripts'
import {
ompParser,
openClawParser,
parseMuseRemoteContent,
piParser,
primeAgentParser,
remoteOmpSessionsSegments,
remotePathSegments,
remotePiSessionsSegments,
remotePrimeAgentSessionsSegments
} from './remote-session-scanner-source-parsers'
import type { FileWithMtime } from './session-scanner-types'
import { openClawSessionDirectoryPredicate } from './openclaw-session-layout'
import { remoteCodexSources } from './remote-session-scanner-codex-sources'
import { remoteClineSource } from './remote-session-scanner-cline-source'
import { remoteKiroSource } from './remote-session-scanner-kiro-source'
import { remoteDevinSource } from './remote-session-scanner-devin-source'
import type {
RemoteParserOptions,
RemoteScannerContext,
RemoteSessionSource
} from './remote-session-scanner-types'
type RemoteContentParser<T = string> = (
file: FileWithMtime,
content: T,
platform: NodeJS.Platform,
options: RemoteParserOptions,
// Line-based parsers iterate cancellably; whole-document parsers ignore it.
signal?: AbortSignal
) => Promise<AiVaultSession | null> | AiVaultSession | null
export function remoteSessionSources(
remoteHome: string,
hostPlatform: RemoteHostPlatform,
includeAntigravityIdeSessions = false,
kiroHomeDir?: string
): RemoteSessionSource[] {
return [
...remoteCodexSources(remoteHome, hostPlatform),
{
...jsonlSource(
'claude',
remoteHome,
hostPlatform,
['.claude', 'projects'],
parseClaudeSessionContent
),
// The remote host owns the transcript disk, so the local readdir in the
// Claude parser is skipped; the walked listing supplies the sibling
// subagent counts instead. Partitioning also prunes the subagent
// transcripts themselves, which would otherwise list as phantom
// top-level sessions carrying the parent's sessionId.
partitionSubagentTranscripts: partitionSubagentTranscriptPaths
},
{
// The execution host owns CodeBuddy's transcripts, including subagent pruning.
...jsonlSource(
'codebuddy',
remoteHome,
hostPlatform,
['.codebuddy', 'projects'],
parseCodebuddySessionContent
),
partitionSubagentTranscripts: partitionSubagentTranscriptPaths
},
{
...jsonlSource(
'qoder',
remoteHome,
hostPlatform,
['.qoder', 'projects'],
parseQoderSessionContent
),
partitionSubagentTranscripts: partitionSubagentTranscriptPaths
},
...(includeAntigravityIdeSessions
? ANTIGRAVITY_HISTORY_ROOTS
: (['antigravity-cli'] as const)
).map((origin) => remoteAntigravitySource(remoteHome, hostPlatform, origin)),
source(
'gemini',
remoteHome,
hostPlatform,
['.gemini', 'tmp'],
['.json', '.jsonl'],
parseGeminiSessionContent
),
jsonlSource(
'copilot',
remoteHome,
hostPlatform,
['.copilot', 'session-state'],
parseCopilotSessionContent
),
jsonlSource(
'cursor',
remoteHome,
hostPlatform,
['.cursor', 'projects'],
parseCursorSessionContent,
(path) => remotePathSegments(path).includes('agent-transcripts')
),
remoteClineSource(remoteHome, hostPlatform),
remoteKiroSource(remoteHome, hostPlatform, kiroHomeDir),
source(
'hermes',
remoteHome,
hostPlatform,
['.hermes', 'sessions'],
['.json'],
parseHermesSessionContent
),
remoteDevinSource(remoteHome, hostPlatform),
remoteDevinSource(remoteHome, hostPlatform, 'agent_logs'),
source(
'jcode',
remoteHome,
hostPlatform,
['.jcode', 'sessions'],
['.json'],
parseJcodeSessionContent,
(path) => remotePathSegments(path).pop()?.startsWith('session_') === true
),
jsonlSource('pi', remoteHome, hostPlatform, remotePiSessionsSegments(), piParser),
{
...jsonlSource('omp', remoteHome, hostPlatform, remoteOmpSessionsSegments(), ompParser),
// Same posture as Claude above: OMP stores task-subagent transcripts in
// the session's same-named artifact dir; the walk supplies counts and the
// partition keeps the children out of the top-level list (#9330).
partitionSubagentTranscripts: partitionOmpSubagentTranscriptPaths
},
jsonlSource(
'prime-agent',
remoteHome,
hostPlatform,
remotePrimeAgentSessionsSegments(),
primeAgentParser
),
jsonlSource(
'muse',
remoteHome,
hostPlatform,
['.local', 'share', 'muse', 'sessions'],
parseMuseRemoteContent,
// Why: each session dir holds session.jsonl plus .log/.sqlite3 sidecars;
// match only the transcript (same predicate as local discovery).
(path) => remotePathSegments(path).at(-1) === 'session.jsonl'
),
jsonlSource(
'droid',
remoteHome,
hostPlatform,
['.factory', 'sessions'],
parseDroidSessionContent
),
jsonlSource(
'droid',
remoteHome,
hostPlatform,
['.factory', 'projects'],
parseDroidSessionContent
),
...remoteOpenClawSources(remoteHome, hostPlatform)
]
}
function remoteAntigravitySource(
remoteHome: string,
hostPlatform: RemoteHostPlatform,
origin: AntigravitySessionOrigin
): RemoteSessionSource {
const cliRoot = joinRemotePath(hostPlatform, remoteHome, '.gemini', origin)
const historyPath = joinRemotePath(hostPlatform, cliRoot, 'history.jsonl')
const parse = async (
file: FileWithMtime,
content: RemoteSessionContent,
context: RemoteScannerContext
) => {
const session = await parseAntigravitySessionContent(
file,
content,
context.hostPlatform.os,
parserOptions(context),
context.signal
)
return session ? context.antigravityWorkspaceResolver.enrich(session, historyPath) : null
}
return {
agent: 'antigravity',
rootDir: joinRemotePath(hostPlatform, cliRoot, 'brain'),
extensions: ['.jsonl'],
filePredicate: isAntigravityTranscriptPath,
fixedChildFileSegments: ['.system_generated', 'logs', 'transcript.jsonl'],
additionalFixedChildFileSegments: [['.system_generated', 'logs', 'transcript_full.jsonl']],
parse,
parseLines: parse
}
}
function source(
agent: AiVaultAgent,
remoteHome: string,
hostPlatform: RemoteHostPlatform,
segments: readonly string[],
extensions: readonly string[],
parseContent: RemoteContentParser,
filePredicate?: (path: string) => boolean,
directoryPredicate?: (name: string, depth: number) => boolean
): RemoteSessionSource {
return {
agent,
rootDir: joinRemotePath(hostPlatform, remoteHome, ...segments),
extensions,
filePredicate,
directoryPredicate,
...remoteSessionDocumentParsers(agent),
parse: (file, content, context) =>
Promise.resolve(
parseContent(file, content, context.hostPlatform.os, parserOptions(context), context.signal)
)
}
}
function jsonlSource(
agent: AiVaultAgent,
remoteHome: string,
hostPlatform: RemoteHostPlatform,
segments: readonly string[],
parseContent: RemoteContentParser<RemoteSessionContent>,
filePredicate?: (path: string) => boolean
): RemoteSessionSource {
return {
...source(agent, remoteHome, hostPlatform, segments, ['.jsonl'], parseContent, filePredicate),
parseLines: (file, lines, context) =>
Promise.resolve(
parseContent(file, lines, context.hostPlatform.os, parserOptions(context), context.signal)
)
}
}
function remoteOpenClawSources(
remoteHome: string,
hostPlatform: RemoteHostPlatform
): RemoteSessionSource[] {
return ['.openclaw', '.clawdbot'].map((rootName) => ({
...jsonlSource(
'openclaw',
remoteHome,
hostPlatform,
[rootName, 'agents'],
openClawParser,
(path) => remotePathSegments(path).includes('sessions')
),
directoryPredicate: openClawSessionDirectoryPredicate
}))
}
function parserOptions(context: RemoteScannerContext): RemoteParserOptions {
return {
executionHostId: context.executionHostId,
executionHostPlatform: context.hostPlatform.os
}
}
src/main/ai-vault/remote-session-scanner.test.ts
-823
View File
@@ -1,823 +0,0 @@
import { describe, expect, it } from 'vitest'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { MemoryRemoteProvider, jsonLines } from './remote-session-scanner-test-fixtures'
import { primeAgentFixture } from './session-scanner-prime-agent-fixtures'
describe('scanRemoteAiVaultSessions', () => {
it('indexes Cline manifests on the SSH-owned disk without messages-file phantoms', async () => {
const provider = new MemoryRemoteProvider()
const sessionId = '1786466194549_xrzrl'
const sessionDir = `/home/ada/.cline/data/sessions/${sessionId}`
provider.addFile(
`${sessionDir}/${sessionId}.json`,
JSON.stringify({
version: 1,
session_id: sessionId,
started_at: '2026-08-11T16:36:34.551Z',
provider: 'deepseek',
model: 'deepseek-v4-flash',
cwd: '/home/ada/repo'
}),
10
)
provider.addFile(
`${sessionDir}/${sessionId}.messages.json`,
JSON.stringify({
version: 1,
updated_at: '2026-08-11T16:38:00.000Z',
sessionId,
messages: [
{
role: 'user',
content: [{ type: 'text', text: 'Fix remote Cline history' }]
}
]
}),
11
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
agent: 'cline',
sessionId,
title: 'Fix remote Cline history',
cwd: '/home/ada/repo',
executionHostId: 'ssh:dev-box',
executionHostPlatform: 'linux',
filePath: `${sessionDir}/${sessionId}.json`
})
})
it('indexes and resumes Cline sessions from a Windows SSH host', async () => {
const provider = new MemoryRemoteProvider()
const sessionId = '1786466194549_xrzrl'
const sessionDir = `C:/Users/Ada/.cline/data/sessions/${sessionId}`
provider.addFile(
`${sessionDir}/${sessionId}.json`,
JSON.stringify({
session_id: sessionId,
started_at: '2026-08-11T16:36:34.551Z',
cwd: 'C:/repo/app'
}),
10
)
provider.addFile(
`${sessionDir}/${sessionId}.messages.json`,
JSON.stringify({
updated_at: '2026-08-11T16:38:00.000Z',
messages: [{ role: 'user', content: [{ type: 'text', text: 'Fix Windows history' }] }]
}),
11
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:win-box',
remoteHome: 'C:/Users/Ada',
hostPlatform: getRemoteHostPlatform('win32-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
agent: 'cline',
sessionId,
executionHostPlatform: 'win32',
filePath: `${sessionDir}/${sessionId}.json`,
resumeCommand: `cmd /d /s /c "cd /d ""C:/repo/app"" && cline --id ""${sessionId}"""`
})
})
it('parses remote default and Orca-managed Codex homes with SSH host ids', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(
'/home/ada/.codex/session_index.jsonl',
jsonLines([{ id: 'default-session', thread_name: 'Indexed remote title' }]),
1
)
provider.addFile(
'/home/ada/.codex/sessions/2026/07/04/default.jsonl',
jsonLines([
{
timestamp: '2026-07-04T01:00:00.000Z',
type: 'session_meta',
payload: { id: 'default-session', cwd: '/home/ada/repo' }
},
{
timestamp: '2026-07-04T01:00:01.000Z',
type: 'response_item',
payload: {
type: 'message',
role: 'user',
content: [{ type: 'text', text: 'Fallback default title' }]
}
}
]),
10
)
provider.addFile(
'/home/ada/.local/share/orca/codex-runtime-home/home/sessions/runtime.jsonl',
jsonLines([
{
timestamp: '2026-07-04T02:00:00.000Z',
type: 'session_meta',
payload: { id: 'runtime-session', cwd: '/home/ada/runtime-repo' }
},
{
timestamp: '2026-07-04T02:00:01.000Z',
type: 'response_item',
payload: {
type: 'message',
role: 'user',
content: [{ type: 'text', text: 'Managed remote title' }]
}
}
]),
20
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64'),
limit: 1,
unlimited: true
})
expect(result.issues).toEqual([])
expect(result.sessions.map((session) => session.title)).toEqual([
'Managed remote title',
'Indexed remote title'
])
expect(new Set(result.sessions.map((session) => session.id)).size).toBe(2)
expect(result.sessions.every((session) => session.executionHostId === 'ssh:dev-box')).toBe(true)
expect(result.sessions.every((session) => session.executionHostPlatform === 'linux')).toBe(true)
expect(
result.sessions.find((session) => session.sessionId === 'default-session')
).toMatchObject({
codexHome: '/home/ada/.codex',
resumeCommand:
"cd '/home/ada/repo' && CODEX_HOME='/home/ada/.codex' codex resume 'default-session'"
})
expect(
result.sessions.find((session) => session.sessionId === 'runtime-session')
).toMatchObject({
codexHome: '/home/ada/.local/share/orca/codex-runtime-home/home',
resumeCommand:
"cd '/home/ada/runtime-repo' && CODEX_HOME='/home/ada/.local/share/orca/codex-runtime-home/home' codex resume 'runtime-session'"
})
})
it('collapses a bridged rollout present in both remote Codex homes to one row', async () => {
const provider = new MemoryRemoteProvider()
const rolloutName = 'rollout-2026-07-04T10-00-00-019f0000-1111-7222-8333-444444444444.jsonl'
const transcript = codexTranscript({
sessionId: '019f0000-1111-7222-8333-444444444444',
title: 'Bridged both-homes session',
cwd: '/home/ada/repo',
timestamp: '2026-07-04T10:00:00.000Z'
})
// Same rollout name in both homes — the in-distro bridge/backfill hardlink.
provider.addFile(`/home/ada/.codex/sessions/2026/07/04/${rolloutName}`, transcript, 3_000)
provider.addFile(
`/home/ada/.local/share/orca/codex-runtime-home/home/sessions/2026/07/04/${rolloutName}`,
transcript,
3_000
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:build-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
// Remote lanes have not flipped to the real home: the managed runtime-home
// row stays canonical so resume keeps Orca-refreshed auth, as today.
expect(result.sessions[0]).toMatchObject({
sessionId: '019f0000-1111-7222-8333-444444444444',
codexHome: '/home/ada/.local/share/orca/codex-runtime-home/home'
})
})
it('parses non-Codex transcripts through the same remote scanner', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(
'/home/ada/.claude/projects/repo/claude-session.jsonl',
jsonLines([
{
sessionId: 'claude-session',
timestamp: '2026-07-04T04:00:00.000Z',
type: 'user',
message: { content: [{ type: 'text', text: 'Summarize the remote branch' }] }
},
{
sessionId: 'claude-session',
timestamp: '2026-07-04T04:00:01.000Z',
type: 'assistant',
message: { model: 'claude-opus-4', content: 'Sure.' }
}
]),
40
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
executionHostId: 'ssh:dev-box',
executionHostPlatform: 'linux',
agent: 'claude',
sessionId: 'claude-session',
title: 'Summarize the remote branch',
model: 'claude-opus-4',
filePath: '/home/ada/.claude/projects/repo/claude-session.jsonl'
})
})
it('discovers Prime Agent transcripts under the remote home sessions root', async () => {
const provider = new MemoryRemoteProvider()
const fixture = primeAgentFixture()
provider.addFile(
`/home/ada/.prime/agent/sessions/${fixture.fileName}`,
[...fixture.seedLines, ...fixture.appendLines].join('\n'),
40
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
executionHostId: 'ssh:dev-box',
executionHostPlatform: 'linux',
agent: 'prime-agent',
title: 'prime-agent seed question',
model: 'inference/big-model',
filePath: `/home/ada/.prime/agent/sessions/${fixture.fileName}`
})
})
it('parses only canonical Antigravity transcripts on SSH hosts', async () => {
const provider = new MemoryRemoteProvider()
const sessionId = 'aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee'
const logsDir = `/home/ada/.gemini/antigravity-cli/brain/${sessionId}/.system_generated/logs`
provider.addFile(
`${logsDir}/transcript.jsonl`,
jsonLines([
{
source: 'USER_EXPLICIT',
type: 'USER_INPUT',
created_at: '2026-07-15T11:39:10Z',
content: '<USER_REQUEST>Fix remote Antigravity history</USER_REQUEST>'
},
{
source: 'MODEL',
type: 'PLANNER_RESPONSE',
created_at: '2026-07-15T11:39:12Z',
content: 'Done'
}
]),
50
)
provider.addFile(`${logsDir}/transcript_full.jsonl`, 'duplicate', 51)
provider.addFile(
`/home/ada/.gemini/antigravity-cli/brain/${sessionId}/artifacts/task.jsonl`,
'not a transcript',
52
)
provider.addFile(
'/home/ada/.gemini/antigravity-cli/history.jsonl',
jsonLines([
{
display: 'Fix remote Antigravity history',
timestamp: Date.parse('2026-07-15T11:39:10.100Z'),
workspace: '/home/ada/project'
}
]),
53
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64'),
scopePaths: ['/home/ada/project']
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
executionHostId: 'ssh:dev-box',
executionHostPlatform: 'linux',
agent: 'antigravity',
sessionId,
title: 'Fix remote Antigravity history',
cwd: '/home/ada/project',
messageCount: 2,
resumeCommand: `agy --conversation '${sessionId}'`,
filePath: `${logsDir}/transcript.jsonl`
})
expect(
provider.readDirPaths.filter((path) =>
path.startsWith('/home/ada/.gemini/antigravity-cli/brain')
)
).toEqual(['/home/ada/.gemini/antigravity-cli/brain'])
})
it('ignores missing canonical Antigravity transcripts but reports other stat failures', async () => {
const provider = new MemoryRemoteProvider()
const brainDir = '/home/ada/.gemini/antigravity-cli/brain'
provider.addFile(`${brainDir}/missing-session/artifacts/task.jsonl`, 'artifact', 1)
const deniedTranscript = `${brainDir}/denied-session/.system_generated/logs/transcript.jsonl`
provider.addFile(deniedTranscript, 'unreadable', 2)
provider.failStat(
deniedTranscript,
new Error(`EACCES: permission denied, stat '${deniedTranscript}'`)
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.sessions).toEqual([])
expect(result.issues).toEqual([
expect.objectContaining({
agent: 'antigravity',
path: deniedTranscript,
message: expect.stringContaining('EACCES')
})
])
})
it('reports non-missing fixed and recursive remote directory failures', async () => {
const provider = new MemoryRemoteProvider()
const brainDir = '/home/ada/.gemini/antigravity-cli/brain'
const claudeProjectDir = '/home/ada/.claude/projects/repo'
provider.addFile(`${claudeProjectDir}/session.jsonl`, 'unreadable', 1)
provider.failReadDir(brainDir, new Error(`EACCES: permission denied, scandir '${brainDir}'`))
provider.failReadDir(
claudeProjectDir,
new Error(`ECONNRESET: connection lost while reading '${claudeProjectDir}'`)
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.sessions).toEqual([])
expect(result.issues).toEqual(
expect.arrayContaining([
expect.objectContaining({
agent: 'antigravity',
kind: 'host',
path: brainDir,
message: expect.stringContaining('EACCES')
}),
expect.objectContaining({
agent: 'claude',
kind: 'host',
path: claudeProjectDir,
message: expect.stringContaining('ECONNRESET')
})
])
)
expect(result.issues).toHaveLength(2)
})
it('keeps missing optional remote directories silent', async () => {
const provider = new MemoryRemoteProvider()
const brainDir = '/home/ada/.gemini/antigravity-cli/brain'
provider.failReadDir(brainDir, new Error(`ENOENT: no such directory, scandir '${brainDir}'`))
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.sessions).toEqual([])
expect(result.issues).toEqual([])
})
it('excludes Claude subagent transcripts from remote scans', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(
'/home/ada/.claude/projects/repo/claude-session.jsonl',
jsonLines([
{
sessionId: 'claude-session',
timestamp: '2026-07-04T04:00:00.000Z',
type: 'user',
message: { content: [{ type: 'text', text: 'Spawn a Task' }] }
}
]),
40
)
provider.addFile(
'/home/ada/.claude/projects/repo/claude-session/subagents/agent-abc123.jsonl',
jsonLines([
{
sessionId: 'claude-session',
isSidechain: true,
agentId: 'abc123',
timestamp: '2026-07-04T04:01:00.000Z',
type: 'user',
message: { content: [{ type: 'text', text: 'Subagent task prompt' }] }
}
]),
41
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
// Only the parent session surfaces; the subagent transcript would carry
// the parent's sessionId and list as a phantom top-level row.
expect(result.sessions.map((session) => session.filePath)).toEqual([
'/home/ada/.claude/projects/repo/claude-session.jsonl'
])
})
it('counts remote sibling subagent transcripts for zero-turn Claude sessions', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(
'/home/ada/.claude/projects/repo/lost-session.jsonl',
jsonLines([{ type: 'mode', mode: 'default', sessionId: 'lost-session' }]),
50
)
provider.addFile(
'/home/ada/.claude/projects/repo/lost-session/subagents/agent-a.jsonl',
jsonLines([{ type: 'user', message: { role: 'user', content: 'Subtask A' } }]),
51
)
provider.addFile(
'/home/ada/.claude/projects/repo/lost-session/subagents/agent-b.jsonl',
jsonLines([{ type: 'user', message: { role: 'user', content: 'Subtask B' } }]),
52
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
// Subagent transcripts must not surface as standalone sessions; they only
// contribute recoverable signal to their zero-turn parent.
expect(result.sessions).toHaveLength(1)
expect(result.sessions[0]).toMatchObject({
agent: 'claude',
sessionId: 'lost-session',
messageCount: 0,
subagentTranscriptCount: 2,
filePath: '/home/ada/.claude/projects/repo/lost-session.jsonl'
})
})
it('counts remote subagent siblings for Claude sessions with real turns', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(
'/home/ada/.claude/projects/repo/live-session.jsonl',
jsonLines([
{
sessionId: 'live-session',
type: 'user',
message: { content: [{ type: 'text', text: 'Do the thing' }] }
}
]),
60
)
provider.addFile(
'/home/ada/.claude/projects/repo/live-session/subagents/agent-a.jsonl',
jsonLines([{ type: 'user', message: { role: 'user', content: 'Subtask' } }]),
61
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(1)
// The walk listing supplies the count for every session (the row badge),
// not only zero-turn recoverable ones.
expect(result.sessions[0]).toMatchObject({
sessionId: 'live-session',
messageCount: 1,
subagentTranscriptCount: 1
})
})
it('builds resume commands with the remote host platform', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(
'C:/Users/Ada/.codex/sessions/win.jsonl',
jsonLines([
{
timestamp: '2026-07-04T03:00:00.000Z',
type: 'session_meta',
payload: { id: 'win-session', cwd: 'C:/repo/app' }
},
{
timestamp: '2026-07-04T03:00:01.000Z',
type: 'response_item',
payload: {
type: 'message',
role: 'user',
content: [{ type: 'text', text: 'Windows remote title' }]
}
}
]),
30
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:win-box',
remoteHome: 'C:/Users/Ada',
hostPlatform: getRemoteHostPlatform('win32-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions[0]?.executionHostPlatform).toBe('win32')
expect(result.sessions[0]?.resumeCommand).toBe(
'cmd /d /s /c "cd /d ""C:/repo/app"" && set ""CODEX_HOME=C:/Users/Ada/.codex"" && codex resume ""win-session"""'
)
})
it('loads Antigravity workspace history with Windows remote paths', async () => {
const provider = new MemoryRemoteProvider()
const sessionId = 'dddddddd-eeee-4fff-8aaa-bbbbbbbbbbbb'
provider.addFile(
`C:/Users/Ada/.gemini/antigravity-cli/brain/${sessionId}/.system_generated/logs/transcript.jsonl`,
jsonLines([
{
source: 'USER_EXPLICIT',
type: 'USER_INPUT',
created_at: '2026-07-15T11:39:10.000Z',
content: '<USER_REQUEST>Windows Antigravity title</USER_REQUEST>'
}
]),
30
)
provider.addFile(
'C:/Users/Ada/.gemini/antigravity-cli/history.jsonl',
jsonLines([
{
display: 'Windows Antigravity title',
timestamp: Date.parse('2026-07-15T11:39:10.100Z'),
workspace: 'C:/repo/app'
}
]),
31
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:win-box',
remoteHome: 'C:/Users/Ada',
hostPlatform: getRemoteHostPlatform('win32-x64')
})
expect(result.issues).toEqual([])
expect(result.sessions[0]).toMatchObject({
agent: 'antigravity',
sessionId,
cwd: 'C:/repo/app',
executionHostPlatform: 'win32'
})
})
it('continues past skipped candidates to fill the remote scan limit', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(
'/home/ada/.codex/sessions/worker.jsonl',
codexTranscript({
sessionId: 'worker-session',
title: 'Internal worker',
cwd: '/home/ada/repo',
timestamp: '2026-07-04T04:00:00.000Z',
threadSource: 'agent'
}),
40
)
provider.addFile(
'/home/ada/.codex/sessions/user.jsonl',
codexTranscript({
sessionId: 'user-session',
title: 'Visible user session',
cwd: '/home/ada/repo',
timestamp: '2026-07-04T03:00:00.000Z'
}),
30
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64'),
limit: 1
})
expect(result.issues).toEqual([])
expect(result.sessions.map((session) => session.sessionId)).toEqual(['user-session'])
})
it('keeps scoped remote sessions even when they are older than the recency cap', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(
'/home/ada/.codex/sessions/other.jsonl',
codexTranscript({
sessionId: 'other-session',
title: 'Other workspace',
cwd: '/home/ada/other',
timestamp: '2026-07-04T05:00:00.000Z'
}),
50
)
provider.addFile(
'/home/ada/.codex/sessions/scoped.jsonl',
codexTranscript({
sessionId: 'scoped-session',
title: 'Scoped workspace',
cwd: '/home/ada/repo/app',
timestamp: '2026-07-04T01:00:00.000Z'
}),
10
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64'),
limit: 1,
scopePaths: ['/home/ada/repo']
})
expect(result.issues).toEqual([])
expect(result.sessions.map((session) => session.sessionId)).toEqual([
'other-session',
'scoped-session'
])
})
it('keeps looking past newer out-of-scope candidates during scoped backfill', async () => {
const provider = new MemoryRemoteProvider()
for (const [sessionId, mtimeMs, hour] of [
['other-newest', 50, '05'],
['other-newer', 40, '04']
] as const) {
provider.addFile(
`/home/ada/.codex/sessions/${sessionId}.jsonl`,
codexTranscript({
sessionId,
title: sessionId,
cwd: '/home/ada/other',
timestamp: `2026-07-04T${hour}:00:00.000Z`
}),
mtimeMs
)
}
provider.addFile(
'/home/ada/.codex/sessions/scoped.jsonl',
codexTranscript({
sessionId: 'scoped-session',
title: 'Scoped workspace',
cwd: '/home/ada/repo',
timestamp: '2026-07-04T01:00:00.000Z'
}),
10
)
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64'),
limit: 1,
scopePaths: ['/home/ada/repo']
})
expect(result.issues).toEqual([])
expect(result.sessions.map((session) => session.sessionId)).toEqual([
'other-newest',
'scoped-session'
])
})
it('caps scoped backfill at the requested limit', async () => {
const provider = new MemoryRemoteProvider()
provider.addFile(
'/home/ada/.codex/sessions/other.jsonl',
codexTranscript({
sessionId: 'other-session',
title: 'Other workspace',
cwd: '/home/ada/other',
timestamp: '2026-07-04T05:00:00.000Z'
}),
50
)
for (const [sessionId, mtimeMs] of [
['newer-scoped', 30],
['older-scoped', 20]
] as const) {
provider.addFile(
`/home/ada/.codex/sessions/${sessionId}.jsonl`,
codexTranscript({
sessionId,
title: sessionId,
cwd: '/home/ada/repo',
timestamp: `2026-07-04T0${mtimeMs / 10}:00:00.000Z`
}),
mtimeMs
)
}
const result = await scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64'),
limit: 1,
scopePaths: ['/home/ada/repo']
})
expect(result.sessions.map((session) => session.sessionId)).toEqual([
'other-session',
'newer-scoped'
])
})
})
function codexTranscript(args: {
sessionId: string
title: string
cwd: string
timestamp: string
threadSource?: string
}): string {
return jsonLines([
{
timestamp: args.timestamp,
type: 'session_meta',
payload: {
id: args.sessionId,
cwd: args.cwd,
...(args.threadSource ? { thread_source: args.threadSource } : {})
}
},
{
timestamp: args.timestamp.replace(':00.000Z', ':01.000Z'),
type: 'response_item',
payload: {
type: 'message',
role: 'user',
content: [{ type: 'text', text: args.title }]
}
}
])
}
src/main/ai-vault/remote-session-scanner.ts
-328
View File
@@ -1,328 +0,0 @@
import {
candidateFileTime,
prioritizeAntigravityTranscriptCandidates
} from './antigravity-transcript-candidates'
import { readRemoteAntigravityIndex } from './antigravity-index-reader'
import { parseRemoteSessionTranscript } from './remote-session-transcript-read'
import { BinarySessionTranscriptError } from './remote-session-content-lines'
import type {
AiVaultListResult,
AiVaultScanIssue,
AiVaultSession
} from '../../shared/ai-vault-types'
import { isPathInsideOrEqual } from '../../shared/cross-platform-path'
import type { ExecutionHostId } from '../../shared/execution-host'
import { setImmediate as yieldToEventLoop } from 'node:timers/promises'
import type { RemoteHostPlatform } from '../ssh/ssh-remote-platform'
import {
codexRolloutHardlinkIdentity,
dedupeCodexRolloutFileAliases
} from './codex-session-root-dedup'
import { ScannedSessionCollection, dedupeScannedSessions } from './session-root-dedup'
import {
parseRemoteSessionFileCached,
remoteSessionCandidateKey,
remoteSessionParseHostKey
} from './remote-session-parse-cache'
import { remoteCodexIndexedTitleReader } from './remote-session-scanner-codex-index'
import { discoverRemoteSourceCandidates } from './remote-session-scanner-discovery'
import { remoteSessionSources } from './remote-session-scanner-sources'
import type {
RemoteScannerContext,
RemoteSessionCandidate,
RemoteSessionFilesystemProvider
} from './remote-session-scanner-types'
import { sessionSortTime } from './session-scanner-accumulator'
import { createAntigravityWorkspaceResolver } from './session-scanner-antigravity-history'
import { errorMessage } from './session-scanner-values'
import { mapRemoteScanBatches } from './remote-session-scan-batching'
import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
import { recordSessionScanIssue } from './session-scan-issues'
import { canStopParsingSessions } from './session-scan-cutoff'
import { refreshCodexTitleFromIndex } from './session-scanner-codex-cached-title'
import { limitRemoteScanFilesystemConcurrency } from './remote-session-scan-concurrency'
import { aiVaultScanLimit } from '../../shared/ai-vault-session-depth'
import { remoteOpenCodeSources } from './remote-session-scanner-opencode-source'
const REMOTE_SCAN_CONCURRENCY = 8
const REMOTE_PARSE_CANDIDATE_MULTIPLIER = 2
// Remote scope membership is only known after a transcript is read, so the scope
// backfill carries its own ceiling on remote reads instead of borrowing the
// recency cap — under the cap, newer out-of-scope files ate the scope budget and
// silently dropped older in-scope sessions the scope contract guarantees.
const REMOTE_SCOPE_PARSE_CANDIDATE_LIMIT = 1000
export async function scanRemoteAiVaultSessions(args: {
provider: RemoteSessionFilesystemProvider
executionHostId: ExecutionHostId
remoteHome: string
kiroHomeDir?: string
hostPlatform: RemoteHostPlatform
includeAntigravityIdeSessions?: boolean
limit?: number
unlimited?: boolean
scopePaths?: readonly string[]
signal?: AbortSignal
}): Promise<AiVaultListResult> {
throwIfAiVaultScanCancelled(args.signal)
const limit = aiVaultScanLimit(args)
const issues: AiVaultScanIssue[] = []
// One ceiling for the whole scan: discovery walks, stats and transcript reads
// all queue behind it instead of multiplying into a nested fan-out.
const provider = limitRemoteScanFilesystemConcurrency(args.provider)
const context: RemoteScannerContext = {
provider,
executionHostId: args.executionHostId,
hostPlatform: args.hostPlatform,
signal: args.signal,
titleCaches: new Map(),
antigravityWorkspaceResolver: createAntigravityWorkspaceResolver((path) =>
readRemoteAntigravityIndex(provider, path, args.signal)
)
}
const discoveredCandidates = dedupeCodexRolloutFileAliases(
(
await mapRemoteScanBatches(
[
...remoteSessionSources(
args.remoteHome,
args.hostPlatform,
args.includeAntigravityIdeSessions,
args.kiroHomeDir
),
...remoteOpenCodeSources(
provider.openCode,
limit * REMOTE_PARSE_CANDIDATE_MULTIPLIER +
(args.scopePaths?.length ? REMOTE_SCOPE_PARSE_CANDIDATE_LIMIT + 1 : 0)
)
],
REMOTE_SCAN_CONCURRENCY,
(source) => discoverRemoteSourceCandidates({ source, context, issues }),
args.signal
)
)
.flat()
.sort((left, right) => right.file.mtimeMs - left.file.mtimeMs),
{
isCodex: (candidate) => candidate.source.agent === 'codex',
getFilePath: (candidate) => candidate.file.path,
getCodexHome: (candidate) => candidate.source.codexHome ?? null,
getHardlinkIdentity: (candidate) => codexRolloutHardlinkIdentity(candidate.file)
}
)
const candidates = prioritizeAntigravityTranscriptCandidates(
discoveredCandidates,
(candidate) => candidate.source.agent === 'antigravity'
)
const parsed = await parseRemoteSessionCandidates({
candidates: candidates.slice(0, limit * REMOTE_PARSE_CANDIDATE_MULTIPLIER),
context,
issues,
limit
})
const parsedSessions = dedupeScannedSessions(parsed.sessions)
const cappedSessions = parsedSessions
.sort((left, right) => sessionSortTime(right) - sessionSortTime(left))
.slice(0, limit)
const scopePaths = normalizeRemoteScopePaths(args.scopePaths ?? [])
const parsedScopeSessions = parsedSessions.filter((session) =>
isRemoteSessionInScope(session, scopePaths)
)
const extraScopeSessions = await scanRemoteInScopeSessions({
candidates,
context,
issues,
scopePaths,
limit,
alreadyParsedCandidateKeys: parsed.parsedCandidateKeys
})
const scopeSessions = dedupeScannedSessions([...parsedScopeSessions, ...extraScopeSessions])
.sort((left, right) => sessionSortTime(right) - sessionSortTime(left))
.slice(0, limit)
return {
sessions: mergeRemoteSessions(cappedSessions, scopeSessions),
issues,
scannedAt: new Date().toISOString()
}
}
async function parseRemoteSessionCandidates(args: {
candidates: readonly RemoteSessionCandidate[]
context: RemoteScannerContext
issues: AiVaultScanIssue[]
limit: number
}): Promise<{ sessions: AiVaultSession[]; parsedCandidateKeys: Set<string> }> {
const sessions = new ScannedSessionCollection()
const parsedCandidateKeys = new Set<string>()
let index = 0
while (index < args.candidates.length) {
if (
canStopParsingSessions(sessions, args.limit, candidateFileTime(args.candidates[index]?.file))
) {
break
}
const remaining = args.candidates.length - index
const needed = Math.max(args.limit - sessions.size, 1)
const batchSize = Math.min(REMOTE_SCAN_CONCURRENCY, needed, remaining)
const batch = args.candidates.slice(index, index + batchSize)
for (const candidate of batch) {
parsedCandidateKeys.add(remoteSessionCandidateKey(candidate))
}
throwIfAiVaultScanCancelled(args.context.signal)
const results = await Promise.all(
batch.map((candidate) => parseRemoteSessionCandidate(candidate, args.context, args.issues))
)
for (const session of results) {
if (session) {
sessions.add(session)
}
}
index += batchSize
await yieldToEventLoop()
}
// The loop can terminate on the yield after its final batch, so re-check
// rather than letting a cancelled scan return a partial parse as a success.
throwIfAiVaultScanCancelled(args.context.signal)
return { sessions: [...sessions.values()], parsedCandidateKeys }
}
async function scanRemoteInScopeSessions(args: {
candidates: readonly RemoteSessionCandidate[]
context: RemoteScannerContext
issues: AiVaultScanIssue[]
scopePaths: readonly string[]
limit: number
alreadyParsedCandidateKeys: ReadonlySet<string>
}): Promise<AiVaultSession[]> {
if (args.scopePaths.length === 0) {
return []
}
const candidates = args.candidates.filter(
(candidate) => !args.alreadyParsedCandidateKeys.has(remoteSessionCandidateKey(candidate))
)
const bound = Math.min(candidates.length, REMOTE_SCOPE_PARSE_CANDIDATE_LIMIT)
const sessions: AiVaultSession[] = []
let index = 0
// Keep reading newest-first until the scope has its requested number of
// sessions; out-of-scope candidates no longer end the search.
while (index < bound && sessions.length < args.limit) {
const batchEnd = Math.min(index + REMOTE_SCAN_CONCURRENCY, bound)
const results = await mapRemoteScanBatches(
candidates.slice(index, batchEnd),
REMOTE_SCAN_CONCURRENCY,
(candidate) => parseRemoteSessionCandidate(candidate, args.context, args.issues),
args.context.signal
)
sessions.push(
...results.filter(
(session): session is AiVaultSession =>
isAiVaultSession(session) && isRemoteSessionInScope(session, args.scopePaths)
)
)
index = batchEnd
}
if (index < candidates.length && sessions.length < args.limit) {
recordSessionScanIssue(args.issues, {
executionHostId: args.context.executionHostId,
agent: 'codex',
kind: 'scope',
path: 'Agent Session History scan',
message: `Only the ${REMOTE_SCOPE_PARSE_CANDIDATE_LIMIT} most recent remote transcripts were checked for this workspace; older sessions may be missing.`
})
}
return sessions
}
async function parseRemoteSessionCandidate(
candidate: RemoteSessionCandidate,
context: RemoteScannerContext,
issues: AiVaultScanIssue[]
): Promise<AiVaultSession | null> {
try {
throwIfAiVaultScanCancelled(context.signal)
// The read is inside the cached parse: an unchanged transcript must not be
// pulled off the remote disk at all, which is the whole cost of #13753.
const session = await parseRemoteSessionFileCached({
candidate,
hostKey: remoteSessionParseHostKey(context),
parse: () => parseRemoteSessionTranscript(candidate, context),
refreshReusedSession: reusedCodexTitleRefresh(candidate, context)
})
throwIfAiVaultScanCancelled(context.signal)
// Mirror the local rule: every session carries its sibling subagent
// transcript count (row badge; recoverable signal at zero turns). The
// walk listing supplies it — the parser can't readdir a remote disk.
const subagentTranscriptCount = candidate.subagentTranscriptCount ?? 0
if (session && subagentTranscriptCount > 0) {
return { ...session, subagentTranscriptCount }
}
return session
} catch (err) {
throwIfAiVaultScanCancelled(context.signal)
if (err instanceof BinarySessionTranscriptError) {
return null
}
recordSessionScanIssue(issues, {
executionHostId: context.executionHostId,
agent: candidate.source.agent,
path: candidate.file.path,
message: errorMessage(err)
})
return null
}
}
// Codex thread names live in `<CODEX_HOME>/session_index.jsonl`, not the
// rollout, and are written after it — so a transcript-keyed cache hit would
// pin the fallback title forever. Local counterpart:
// session-scanner-parse-cache.ts's reuse path.
function reusedCodexTitleRefresh(
candidate: RemoteSessionCandidate,
context: RemoteScannerContext
): ((session: AiVaultSession) => Promise<AiVaultSession>) | undefined {
const codexHome = candidate.source.agent === 'codex' ? candidate.source.codexHome : undefined
if (!codexHome) {
return undefined
}
const readIndexedTitle = remoteCodexIndexedTitleReader(codexHome, context)
return (session) => refreshCodexTitleFromIndex(session, readIndexedTitle)
}
function mergeRemoteSessions(
cappedSessions: AiVaultSession[],
scopeSessions: AiVaultSession[]
): AiVaultSession[] {
if (scopeSessions.length === 0) {
return cappedSessions
}
const byId = new Map<string, AiVaultSession>()
for (const session of cappedSessions) {
byId.set(session.id, session)
}
for (const session of scopeSessions) {
byId.set(session.id, session)
}
return [...byId.values()].sort((left, right) => sessionSortTime(right) - sessionSortTime(left))
}
function isRemoteSessionInScope(session: AiVaultSession, scopePaths: readonly string[]): boolean {
const cwd = session.cwd
return Boolean(cwd && scopePaths.some((scopePath) => isPathInsideOrEqual(scopePath, cwd)))
}
function normalizeRemoteScopePaths(scopePaths: readonly string[]): string[] {
return scopePaths.map((scopePath) => scopePath.trim()).filter(Boolean)
}
function isAiVaultSession(session: AiVaultSession | null): session is AiVaultSession {
return Boolean(session)
}
src/main/ai-vault/remote-session-sidecar-observation.test.ts
-84
View File
@@ -1,84 +0,0 @@
import { describe, expect, it } from 'vitest'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { MemoryRemoteProvider } from './remote-session-scanner-test-fixtures'
import { resetRemoteSessionParseCacheForTests } from './remote-session-parse-cache'
describe('remote sidecar observations', () => {
const sessionId = '1786466194549_sidecar'
const sessionDir = `/home/ada/.cline/data/sessions/${sessionId}`
const messagesPath = `${sessionDir}/${sessionId}.messages.json`
function addCline(provider: MemoryRemoteProvider, firstPrompt: string): void {
provider.addFile(
`${sessionDir}/${sessionId}.json`,
JSON.stringify({
version: 1,
session_id: sessionId,
started_at: '2026-08-11T16:36:34.551Z',
cwd: '/home/ada/repo'
}),
10
)
provider.addFile(
messagesPath,
JSON.stringify({
version: 1,
updated_at: '2026-08-11T16:38:00.000Z',
sessionId,
messages: [{ role: 'user', content: [{ type: 'text', text: firstPrompt }] }]
}),
11
)
}
const scan = (provider: MemoryRemoteProvider): ReturnType<typeof scanRemoteAiVaultSessions> =>
scanRemoteAiVaultSessions({
provider,
executionHostId: 'ssh:dev-box',
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64')
})
it('re-parses when a messages-file stat fails rather than serving the cached row', async () => {
resetRemoteSessionParseCacheForTests()
const provider = new MemoryRemoteProvider()
addCline(provider, 'first prompt')
expect((await scan(provider)).sessions[0]).toMatchObject({ title: 'first prompt' })
// The sidecar changed underneath, and its stat now fails for a reason that
// is not "missing": nothing about it may be assumed, so the row is re-read.
addCline(provider, 'second prompt')
provider.failStat(
messagesPath,
Object.assign(new Error('permission denied'), { code: 'EACCES' })
)
const refused = await scan(provider)
expect(refused.sessions[0]).toMatchObject({ title: 'second prompt' })
expect(refused.issues.map((issue) => issue.path)).toContain(messagesPath)
})
it('treats a genuinely missing messages file as no sidecar, not as unknown', async () => {
resetRemoteSessionParseCacheForTests()
const provider = new MemoryRemoteProvider()
provider.addFile(
`${sessionDir}/${sessionId}.json`,
JSON.stringify({
version: 1,
session_id: sessionId,
started_at: '2026-08-11T16:36:34.551Z',
cwd: '/home/ada/repo'
}),
10
)
const first = await scan(provider)
const second = await scan(provider)
expect(first.issues).toEqual([])
expect(second.issues).toEqual([])
expect(second.sessions[0]?.sessionId).toBe(sessionId)
})
})
src/main/ai-vault/remote-session-stream-lifecycle.test.ts
-115
View File
@@ -1,115 +0,0 @@
import { describe, it, expect, vi } from 'vitest'
import { streamedSessionContentLines } from './remote-session-content-lines'
import { readStreamedSessionDocument } from './session-document-stream'
import { limitRemoteScanFilesystemConcurrency } from './remote-session-scan-concurrency'
describe('stream lifetime and retained document work', () => {
it('aborts a newline-free record at the byte ceiling and closes the source', async () => {
let closed = false
let reads = 0
async function* bytes() {
const chunk = Buffer.alloc(1024 * 1024, 'x')
try {
for (; reads < 100;) {
reads++
yield chunk
}
} finally {
closed = true
}
}
const lines = streamedSessionContentLines(bytes())
await expect(lines.next()).rejects.toThrow('record exceeds 10485760 byte limit')
expect(reads).toBe(11)
expect(closed).toBe(true)
})
it('releases the source when a line consumer finishes early', async () => {
let closed = false
async function* bytes() {
try {
yield Buffer.from('one\ntwo\n')
yield Buffer.from('three\n')
} finally {
closed = true
}
}
for await (const line of streamedSessionContentLines(bytes())) {
expect(line).toBe('one')
break
}
await vi.waitFor(() => expect(closed).toBe(true))
})
it('propagates disk failure and closes the source', async () => {
let closed = false
async function* bytes() {
try {
yield Buffer.from('one\n')
throw new Error('disk read failed')
} finally {
closed = true
}
}
await expect(
(async () => {
for await (const _ of streamedSessionContentLines(bytes())) {
/* consume */
}
})()
).rejects.toThrow('disk read failed')
expect(closed).toBe(true)
})
it('cancellation discards a document fold and releases its source', async () => {
const controller = new AbortController()
let closed = false
async function* bytes() {
try {
yield Buffer.from('{"messages":[{"role":"user"}')
controller.abort()
yield Buffer.from(']}')
} finally {
closed = true
}
}
await expect(
readStreamedSessionDocument({
bytes: bytes(),
arrayKey: 'messages',
fields: [],
create: () => ({ count: 0 }),
consume: (state) => {
state.count++
},
signal: controller.signal
})
).rejects.toThrow()
expect(closed).toBe(true)
})
it('holds one filesystem slot for the stream lifetime and releases it on return', async () => {
let entered = 0
async function* bytes() {
entered++
yield Buffer.from('a')
yield Buffer.from('b')
}
const provider = limitRemoteScanFilesystemConcurrency(
{
readDir: async () => [],
readFile: async () => ({ content: '', isBinary: false }),
stat: async () => ({ size: 0, type: 'file', mtime: 0 }),
readTranscriptBytes: bytes
},
1
)
const first = provider.readTranscriptBytes!('/one')[Symbol.asyncIterator](),
second = provider.readTranscriptBytes!('/two')[Symbol.asyncIterator]()
await first.next()
const pending = second.next()
await Promise.resolve()
expect(entered).toBe(1)
await first.return!()
await pending
expect(entered).toBe(2)
await second.return!()
})
})
src/main/ai-vault/remote-session-transcript-read.ts
-52
View File
@@ -1,52 +0,0 @@
import { streamedSessionContentLines } from './remote-session-content-lines'
import { throwIfAiVaultScanCancelled } from './ai-vault-scan-cancellation'
import type { RemoteSessionCandidate, RemoteScannerContext } from './remote-session-scanner-types'
import type { AiVaultSession } from '../../shared/ai-vault-types'
const LEGACY_SESSION_TEXT_LIMIT_BYTES = 10 * 1024 * 1024
export async function parseRemoteSessionTranscript(
candidate: RemoteSessionCandidate,
context: RemoteScannerContext
): Promise<AiVaultSession | null> {
if (candidate.source.parseCandidate) {
return candidate.source.parseCandidate(candidate.file, context)
}
const sidecar = candidate.file.sidecar
const exceedsWholeReadLimit =
(candidate.file.sizeBytes ?? 0) > LEGACY_SESSION_TEXT_LIMIT_BYTES ||
(typeof sidecar === 'object' && sidecar.sizeBytes > LEGACY_SESSION_TEXT_LIMIT_BYTES)
if (
exceedsWholeReadLimit &&
candidate.source.parseDocument &&
!candidate.file.path.endsWith('.jsonl') &&
context.provider.readTranscriptBytes
) {
return candidate.source.parseDocument(
candidate.file,
context.provider.readTranscriptBytes(candidate.file.path, context.signal),
context
)
}
if (
exceedsWholeReadLimit &&
candidate.file.path.endsWith('.jsonl') &&
candidate.source.parseLines &&
context.provider.readTranscriptBytes
) {
return candidate.source.parseLines(
candidate.file,
streamedSessionContentLines(
context.provider.readTranscriptBytes(candidate.file.path, context.signal),
context.signal
),
context
)
}
const read = await context.provider.readFile(candidate.file.path)
throwIfAiVaultScanCancelled(context.signal)
if (read.isBinary) {
return null
}
return await candidate.source.parse(candidate.file, read.content, context)
}
src/main/ai-vault/session-scanner-cutoff.test.ts
+40 -60
View File
@@ -2,9 +2,6 @@ import { mkdtemp, mkdir, rm, utimes, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { afterEach, describe, expect, it, vi } from 'vitest'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { MemoryRemoteProvider } from './remote-session-scanner-test-fixtures'
import { scanAiVaultSessions } from './session-scanner'
import { isolatedScanRoots, jsonLines } from './session-scanner-test-fixtures'
@@ -15,63 +12,46 @@ afterEach(async () => {
})
describe('session scanner cutoff', () => {
it.each(['native', 'remote'] as const)(
'%s does not sort timestamps at every post-limit candidate',
async (host) => {
const count = 128
const limit = count / 2
const provider = new MemoryRemoteProvider()
const root = await mkdtemp(join(tmpdir(), 'orca-session-cutoff-'))
tempRoots.push(root)
const roots = isolatedScanRoots(root)
await mkdir(roots.codexSessionsDir, { recursive: true })
for (let index = 0; index < count; index++) {
const name = `rollout-session-${index}.jsonl`
const content = jsonLines([
{ type: 'session_meta', payload: { id: `session-${index}`, cwd: '/repo/folder' } },
{
type: 'event_msg',
timestamp: new Date(index).toISOString(),
payload: { type: 'user_message', message: 'Check this session' }
}
])
const mtime = 10_000 - index
if (host === 'native') {
const filePath = join(roots.codexSessionsDir, name)
await writeFile(filePath, content)
await utimes(filePath, new Date(mtime), new Date(mtime))
} else {
provider.addFile(`/home/ada/.codex/sessions/${name}`, content, mtime)
it('does not sort timestamps at every post-limit candidate', async () => {
const count = 128
const limit = count / 2
const root = await mkdtemp(join(tmpdir(), 'orca-session-cutoff-'))
tempRoots.push(root)
const roots = isolatedScanRoots(root)
await mkdir(roots.codexSessionsDir, { recursive: true })
for (let index = 0; index < count; index++) {
const name = `rollout-session-${index}.jsonl`
const content = jsonLines([
{ type: 'session_meta', payload: { id: `session-${index}`, cwd: '/repo/folder' } },
{
type: 'event_msg',
timestamp: new Date(index).toISOString(),
payload: { type: 'user_message', message: 'Check this session' }
}
}
let numericSorts = 0
const originalSort = Array.prototype.sort
vi.spyOn(Array.prototype, 'sort').mockImplementation(function (this: unknown[], compare) {
if (typeof this[0] === 'number') {
numericSorts++
}
return originalSort.call(this, compare)
})
const scan = () =>
host === 'native'
? scanAiVaultSessions({ ...roots, limit })
: scanRemoteAiVaultSessions({
provider,
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64'),
executionHostId: 'ssh:scan-cutoff',
limit
})
for (let pass = 0; pass < 2; pass++) {
numericSorts = 0
const result = await scan()
expect(result.issues).toEqual([])
expect(result.sessions.map((row) => row.sessionId)).toEqual(
Array.from({ length: limit }, (_, index) => `session-${count - index - 1}`)
)
expect(numericSorts).toBe(0)
}
])
const mtime = 10_000 - index
const filePath = join(roots.codexSessionsDir, name)
await writeFile(filePath, content)
await utimes(filePath, new Date(mtime), new Date(mtime))
}
)
let numericSorts = 0
const originalSort = Array.prototype.sort
vi.spyOn(Array.prototype, 'sort').mockImplementation(function (this: unknown[], compare) {
if (typeof this[0] === 'number') {
numericSorts++
}
return originalSort.call(this, compare)
})
const scan = () => scanAiVaultSessions({ ...roots, limit })
for (let pass = 0; pass < 2; pass++) {
numericSorts = 0
const result = await scan()
expect(result.issues).toEqual([])
expect(result.sessions.map((row) => row.sessionId)).toEqual(
Array.from({ length: limit }, (_, index) => `session-${count - index - 1}`)
)
expect(numericSorts).toBe(0)
}
})
})
src/main/ai-vault/session-scanner-dedup-batches.test.ts
+29 -91
View File
@@ -2,9 +2,6 @@ import { mkdtemp, mkdir, rm, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { afterEach, describe, expect, it, vi } from 'vitest'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { MemoryRemoteProvider } from './remote-session-scanner-test-fixtures'
import { scanAiVaultSessions } from './session-scanner'
import { isolatedScanRoots, jsonLines } from './session-scanner-test-fixtures'
@@ -15,96 +12,37 @@ afterEach(async () => {
})
describe('session scan batch deduplication', () => {
it.each(['native', 'remote'] as const)(
'%s does not rederive every retained rollout alias after each batch',
async (host) => {
const count = 128
const provider = new MemoryRemoteProvider()
const root = await mkdtemp(join(tmpdir(), 'orca-session-dedup-'))
tempRoots.push(root)
const roots = isolatedScanRoots(root)
await mkdir(roots.codexSessionsDir, { recursive: true })
for (let index = 0; index < count; index++) {
const name = `rollout-session-${index}.jsonl`
const content = jsonLines([
{ type: 'session_meta', payload: { id: `session-${index}`, cwd: '/repo/folder' } },
{ type: 'event_msg', payload: { type: 'user_message', message: 'Check this session' } }
])
if (host === 'native') {
await writeFile(join(roots.codexSessionsDir, name), content)
} else {
provider.addFile(`/home/ada/.codex/sessions/${name}`, content, count - index)
}
}
let aliasChecks = 0
const originalTest = RegExp.prototype.test
vi.spyOn(RegExp.prototype, 'test').mockImplementation(function (this: RegExp, value) {
if (this.source === '^rollout-.+\\.jsonl$') {
aliasChecks++
}
return originalTest.call(this, value)
})
const scan = () =>
host === 'native'
? scanAiVaultSessions({ ...roots, unlimited: true })
: scanRemoteAiVaultSessions({
provider,
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64'),
executionHostId: 'ssh:dedup-batches',
unlimited: true
})
for (let pass = 0; pass < 2; pass++) {
aliasChecks = 0
const result = await scan()
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(count)
expect(new Set(result.sessions.map((session) => session.sessionId)).size).toBe(count)
expect(aliasChecks).toBeLessThanOrEqual(count * 8)
}
}
)
it('replaces aliases across remote batches without consuming the unique-session budget', async () => {
const provider = new MemoryRemoteProvider()
const managedHome = '/home/ada/.local/share/orca/codex-runtime-home/home'
const content = (id: string) =>
jsonLines([
{ type: 'session_meta', payload: { id, cwd: '/repo/folder' } },
{ type: 'event_msg', payload: { type: 'user_message', message: 'Session' } }
it('does not rederive every retained rollout alias after each batch', async () => {
const count = 128
const root = await mkdtemp(join(tmpdir(), 'orca-session-dedup-'))
tempRoots.push(root)
const roots = isolatedScanRoots(root)
await mkdir(roots.codexSessionsDir, { recursive: true })
for (let index = 0; index < count; index++) {
const name = `rollout-session-${index}.jsonl`
const content = jsonLines([
{ type: 'session_meta', payload: { id: `session-${index}`, cwd: '/repo/folder' } },
{ type: 'event_msg', payload: { type: 'user_message', message: 'Check this session' } }
])
for (let index = 0; index < 8; index++) {
const name = `rollout-${index}.jsonl`
provider.addFile(`/home/ada/.codex/sessions/${name}`, content(`${index}`), 1000 - index)
provider.addFile(`${managedHome}/sessions/${name}`, content(`${index}`), 500 - index)
await writeFile(join(roots.codexSessionsDir, name), content)
}
provider.addFile('/home/ada/.codex/sessions/rollout-unique.jsonl', content('unique'), 100)
const tooOld = '/home/ada/.codex/sessions/rollout-too-old.jsonl'
provider.addFile(tooOld, content('too-old'), 50)
const reads = vi.spyOn(provider, 'readFile')
const result = await scanRemoteAiVaultSessions({
provider,
remoteHome: '/home/ada',
hostPlatform: getRemoteHostPlatform('linux-x64'),
executionHostId: 'ssh:batch-replacements',
limit: 9
let aliasChecks = 0
const originalTest = RegExp.prototype.test
vi.spyOn(RegExp.prototype, 'test').mockImplementation(function (this: RegExp, value) {
if (this.source === '^rollout-.+\\.jsonl$') {
aliasChecks++
}
return originalTest.call(this, value)
})
expect(result.issues).toEqual([])
expect(result.sessions.map((session) => session.sessionId)).toEqual([
'0',
'1',
'2',
'3',
'4',
'5',
'6',
'7',
'unique'
])
expect(result.sessions.slice(0, 8).every((session) => session.codexHome === managedHome)).toBe(
true
)
expect(reads).not.toHaveBeenCalledWith(tooOld)
const scan = () => scanAiVaultSessions({ ...roots, unlimited: true })
for (let pass = 0; pass < 2; pass++) {
aliasChecks = 0
const result = await scan()
expect(result.issues).toEqual([])
expect(result.sessions).toHaveLength(count)
expect(new Set(result.sessions.map((session) => session.sessionId)).size).toBe(count)
expect(aliasChecks).toBeLessThanOrEqual(count * 8)
}
})
})
src/main/ai-vault/session-scanner-devin-dedup.test.ts
-29
View File
@@ -2,9 +2,6 @@ import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { afterEach, expect, it, vi } from 'vitest'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { MemoryRemoteProvider } from './remote-session-scanner-test-fixtures'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { isolatedScanRoots } from './session-scanner-test-fixtures'
import { parseDevinSessionContent } from './session-scanner-devin-parser'
import { dedupeScannedSessions, ScannedSessionCollection } from './session-root-dedup'
@@ -45,32 +42,6 @@ it('lists a session in both default directories once and still fills the scan li
expect(unlimited.sessions.map((session) => session.sessionId)).toEqual(['same', 'other'])
})
it.each(['win32-x64', 'linux-x64'] as const)(
'deduplicates both remote directories on %s',
async (platform) => {
const provider = new MemoryRemoteProvider()
const windows = platform === 'win32-x64'
const home = windows ? 'C:/Users/ada' : '/home/ada'
const cliDir = `${home}/${windows ? 'AppData/Roaming' : '.local/share'}/devin/cli`
provider.addFile(`${cliDir}/transcripts/same.json`, transcript('same'), 10)
provider.addFile(`${cliDir}/agent_logs/devin-same.json`, transcript('same'), 20)
provider.addFile(
`${cliDir}/transcripts/other.json`,
transcript('other', '2026-09-18T00:00:00Z'),
5
)
const result = await scanRemoteAiVaultSessions({
provider,
remoteHome: home,
executionHostId: 'ssh:devin',
hostPlatform: getRemoteHostPlatform(platform),
limit: 2
})
expect(result.sessions.map((session) => session.sessionId)).toEqual(['same', 'other'])
expect(result.sessions[0].filePath).toBe(`${cliDir}/agent_logs/devin-same.json`)
}
)
function session(path: string) {
const parsed = parseDevinSessionContent(
{ path, mtimeMs: 100, sizeBytes: 1, modifiedAt: new Date(100).toISOString() },
src/main/ai-vault/session-scanner-qoder.test.ts
+1 -43
View File
@@ -1,16 +1,10 @@
import { readFile, mkdtemp, rm, stat } from 'node:fs/promises'
import { getRemoteHostPlatform } from '../ssh/ssh-remote-platform'
import { tmpdir } from 'node:os'
import { readFile, rm } from 'node:fs/promises'
import { join } from 'node:path'
import { afterEach, expect, it } from 'vitest'
import { AI_VAULT_AGENT_SOURCES } from './session-scanner-agent-sources'
import { isolatedScanRoots, writeJsonlFile } from './session-scanner-test-fixtures'
import { scanAiVaultSessions } from './session-scanner'
import {
createQoderSessionResumeState,
parseQoderSessionContent
} from './session-scanner-qoder-parser'
import { remoteSessionSources } from './remote-session-scanner-sources'
import { resetSessionParseCacheForTests } from './session-scanner-parse-cache'
import type { TranscriptMessage } from './session-transcript-consumers'
@@ -67,39 +61,3 @@ it('decodes a real generated and resumed Qoder 1.1.64 session for preview and se
cwd: '/tmp/qoder-proof'
})
})
it('discovers Qoder folder history and prunes nested workers on local, WSL, and SSH hosts', async () => {
const root = await mkdtemp(join(tmpdir(), 'orca-qoder-vault-'))
roots.push(root)
const options = isolatedScanRoots(root)
const path = join(options.qoderProjectsDir, 'folder', 'qoder-session.jsonl')
const records = [
{ type: 'workspace-directories', sessionId: 'qoder-session', directories: ['/tmp/folder'] },
{
type: 'user',
sessionId: 'qoder-session',
message: { role: 'user', content: 'Qoder folder proof' }
}
]
await writeJsonlFile(path, records)
await writeJsonlFile(
join(options.qoderProjectsDir, 'folder', 'qoder-session', 'subagents', 'worker.jsonl'),
records
)
const result = await scanAiVaultSessions({ ...options, wslHomeDirs: [] })
const sessions = result.sessions.filter((s) => s.agent === 'qoder')
expect(sessions).toHaveLength(1)
expect(sessions[0]).toMatchObject({ title: 'Qoder folder proof', cwd: '/tmp/folder' })
expect(AI_VAULT_AGENT_SOURCES.qoder?.rootDirs(options, ['/home/test'])).toContain(
join('/home/test', '.qoder', 'projects')
)
for (const platform of ['darwin-arm64', 'linux-x64', 'win32-x64'] as const) {
const source = remoteSessionSources(
platform === 'win32-x64' ? 'C:\\Users\\test' : '/home/test',
getRemoteHostPlatform(platform)
).find((s) => s.agent === 'qoder')
expect(source).toBeDefined()
expect(source?.partitionSubagentTranscripts).toBeDefined()
}
expect((await stat(path)).size).toBeGreaterThan(0)
})
src/main/ai-vault/session-scanner-unlimited-dedup.test.ts
+34 -66
View File
@@ -1,6 +1,5 @@
import { beforeEach, expect, it, vi } from 'vitest'
import type * as SessionDedup from './session-root-dedup'
import type * as RemoteSessionParseCache from './remote-session-parse-cache'
import type { AiVaultSession } from '../../shared/ai-vault-types'
const fixture = vi.hoisted((): { sessions: AiVaultSession[]; visits: number } => ({
@@ -28,16 +27,6 @@ vi.mock('./session-scanner-parse-cache', () => ({
}),
parseAgentSessionFileCached: async (candidate: { session: AiVaultSession }) => candidate.session
}))
vi.mock('./remote-session-scanner-sources', () => ({ remoteSessionSources: () => [{}] }))
vi.mock('./remote-session-scanner-discovery', () => ({
discoverRemoteSourceCandidates: async () => candidates()
}))
vi.mock('./remote-session-parse-cache', async (original) => ({
...(await original<typeof RemoteSessionParseCache>()),
remoteSessionParseHostKey: () => 'fixture',
parseRemoteSessionFileCached: async ({ candidate }: { candidate: { session: AiVaultSession } }) =>
candidate.session
}))
vi.mock('./session-root-dedup', async (original) => {
const actual = await original<typeof SessionDedup>()
return {
@@ -50,7 +39,6 @@ vi.mock('./session-root-dedup', async (original) => {
})
import { scanAiVaultSessions } from './session-scanner'
import { scanRemoteAiVaultSessions } from './remote-session-scanner'
import { ScannedSessionCollection, dedupeScannedSessions } from './session-root-dedup'
function candidates() {
@@ -93,62 +81,42 @@ beforeEach(() => {
fixture.visits = 0
})
for (const host of ['local', 'remote'] as const) {
const scan = (unlimited: boolean, limit?: number) =>
host === 'local'
? scanAiVaultSessions({ unlimited, limit })
: scanRemoteAiVaultSessions({
unlimited,
limit,
provider: { readDir: vi.fn(), readFile: vi.fn(), stat: vi.fn() },
executionHostId: 'local',
remoteHome: '/fixture',
hostPlatform: {
relayPlatform: 'linux-x64',
os: 'linux',
arch: 'x64',
pathFlavor: 'posix',
commandDialect: 'posix',
pathSeparator: '/',
pathDelimiter: ':'
}
})
const scan = (unlimited: boolean, limit?: number) => scanAiVaultSessions({ unlimited, limit })
it(`${host}: load-all processes deduplication linearly and retains late canonical aliases`, async () => {
fixture.sessions = Array.from({ length: 10000 }, (_, i) => session(i))
fixture.sessions[0] = {
...fixture.sessions[0]!,
codexHome: '/custom',
filePath: '/custom/rollout-0.jsonl'
}
fixture.sessions.push(session(0))
const expected = dedupeScannedSessions(fixture.sessions)
fixture.visits = 0
const started = performance.now()
const result = await scan(true)
process.stdout.write(
`${JSON.stringify({ host, candidates: fixture.sessions.length, scanMs: performance.now() - started, dedupVisits: fixture.visits })}\n`
)
expect(result.issues).toEqual([])
expect(result.sessions).toEqual(expected)
expect(fixture.visits).toBeLessThanOrEqual(fixture.sessions.length * 2)
}, 30000)
it('load-all processes deduplication linearly and retains late canonical aliases', async () => {
fixture.sessions = Array.from({ length: 10000 }, (_, i) => session(i))
fixture.sessions[0] = {
...fixture.sessions[0]!,
codexHome: '/custom',
filePath: '/custom/rollout-0.jsonl'
}
fixture.sessions.push(session(0))
const expected = dedupeScannedSessions(fixture.sessions)
fixture.visits = 0
const started = performance.now()
const result = await scan(true)
process.stdout.write(
`${JSON.stringify({ candidates: fixture.sessions.length, scanMs: performance.now() - started, dedupVisits: fixture.visits })}\n`
)
expect(result.issues).toEqual([])
expect(result.sessions).toEqual(expected)
expect(fixture.visits).toBeLessThanOrEqual(fixture.sessions.length * 2)
}, 30000)
it(`${host}: capped scans still fill the unique-session budget`, async () => {
fixture.sessions = [
session(0),
...Array.from({ length: 8 }, () => ({
...session(0),
filePath: '/custom/rollout-0.jsonl',
codexHome: '/custom'
})),
...Array.from({ length: 10 }, (_, i) => session(i + 1))
]
const result = await scan(false, 10)
expect(result.sessions).toHaveLength(10)
expect(new Set(result.sessions.map((row) => row.sessionId)).size).toBe(10)
})
}
it('capped scans still fill the unique-session budget', async () => {
fixture.sessions = [
session(0),
...Array.from({ length: 8 }, () => ({
...session(0),
filePath: '/custom/rollout-0.jsonl',
codexHome: '/custom'
})),
...Array.from({ length: 10 }, (_, i) => session(i + 1))
]
const result = await scan(false, 10)
expect(result.sessions).toHaveLength(10)
expect(new Set(result.sessions.map((row) => row.sessionId)).size).toBe(10)
})
it('incremental canonical selection preserves winner occurrence order, ties and repeated references', () => {
const collection = new ScannedSessionCollection()
src/main/git/git-network-safety-real-git.test.ts
-42
View File
@@ -4,7 +4,6 @@ import { join } from 'node:path'
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
import { runProcess } from '@orca/process-host'
import { quotePosixShell } from '../../shared/wsl-login-shell-command'
import { createGitHandlerRelay } from '../../relay/git-handler-test-harness'
import { gitExecFileAsync, gitSpawnAfterWindowsEnvironmentReady } from './runner'
let root = ''
@@ -73,25 +72,6 @@ async function expectIdentity(identity: string): Promise<void> {
}
describe('network SSH configuration with real Git', () => {
it.each(['native', 'relay'] as const)(
'%s honors repository SSH wrappers on ordinary fetches',
async (host) => {
await git(['config', 'core.sshCommand', sshCommand('configured identity')])
if (host === 'native') {
await expect(gitExecFileAsync(['fetch', 'origin'], { cwd: repo, env })).rejects.toThrow()
} else {
const { dispatcher, handler } = createGitHandlerRelay()
try {
await expect(
dispatcher.callRequest('git.fetch', { worktreePath: repo })
).rejects.toThrow()
} finally {
handler.dispose()
}
}
await expectIdentity('configured identity')
}
)
it('preserves command-line SSH configuration ahead of repository configuration', async () => {
await git(['config', 'core.sshCommand', sshCommand('repository')])
@@ -104,28 +84,6 @@ describe('network SSH configuration with real Git', () => {
await expectIdentity('command-line')
})
it.each(['native', 'relay'] as const)('%s preserves an explicit SSH command', async (host) => {
await git(['config', 'core.sshCommand', sshCommand('repository')])
const command = sshCommand('environment')
if (host === 'native') {
await expect(
gitExecFileAsync(['fetch', 'origin'], {
cwd: repo,
env: { ...env, GIT_SSH_COMMAND: command }
})
).rejects.toThrow()
} else {
vi.stubEnv('GIT_SSH_COMMAND', command)
const { dispatcher, handler } = createGitHandlerRelay()
try {
await expect(dispatcher.callRequest('git.fetch', { worktreePath: repo })).rejects.toThrow()
} finally {
handler.dispose()
}
}
await expectIdentity('environment')
})
it('honors configured global SSH wrappers for streaming clones from a folder', async () => {
await git(['config', '--global', 'core.sshCommand', sshCommand('clone identity')])
const child = await gitSpawnAfterWindowsEnvironmentReady(
src/main/git/source-control/blob-absence-real-git.test.ts
+65 -77
View File
@@ -1,36 +1,39 @@
import { readFile, unlink, utimes, writeFile } from 'node:fs/promises'
import { readFile, rm, unlink, utimes, writeFile } from 'node:fs/promises'
import { execFileSync } from 'node:child_process'
import { mkdtempSync } from 'node:fs'
import { tmpdir } from 'node:os'
import * as path from 'node:path'
import { afterEach, beforeEach, describe, expect, it } from 'vitest'
import { runProcess } from '@orca/process-host'
import { gitCommit, gitInit, type MockDispatcher } from '../../../relay/git-handler-test-setup'
import {
createGitHandlerRelay,
createGitTempDir,
removeGitTempDir
} from '../../../relay/git-handler-test-harness'
import type { GitHandler } from '../../../relay/git-handler'
import { isMissingGitBlobPath } from '../../../shared/git-blob-absence'
import { readGitBlobAtIndexPath } from './git-blob-read'
import { getDiff } from './file-diff'
import { invalidateGitReadCaches, settledDiffCache } from './git-read-cache-invalidation'
import { readWorktreeDiffStamp } from './worktree-diff-stamp'
function gitInit(dir: string): void {
execFileSync('git', ['init'], { cwd: dir, stdio: 'pipe' })
execFileSync('git', ['config', 'user.email', 'test@example.com'], { cwd: dir, stdio: 'pipe' })
execFileSync('git', ['config', 'user.name', 'Test User'], { cwd: dir, stdio: 'pipe' })
}
function gitCommit(dir: string, message: string): void {
execFileSync('git', ['add', '.'], { cwd: dir, stdio: 'pipe' })
execFileSync('git', ['commit', '-m', message, '--allow-empty'], { cwd: dir, stdio: 'pipe' })
}
describe('real Git missing paths and failed blob reads', () => {
let repo: string
let dispatcher: MockDispatcher
let handler: GitHandler
beforeEach(() => {
repo = createGitTempDir()
;({ dispatcher, handler } = createGitHandlerRelay())
repo = mkdtempSync(path.join(tmpdir(), 'orca-real-git-'))
gitInit(repo)
invalidateGitReadCaches()
})
afterEach(async () => {
handler.dispose()
invalidateGitReadCaches()
await removeGitTempDir(repo)
await rm(repo, { recursive: true, force: true })
})
async function git(args: string[], input?: string): Promise<string> {
@@ -39,75 +42,60 @@ describe('real Git missing paths and failed blob reads', () => {
return result.stdout
}
function diff(host: 'native' | 'relay', staged = false): Promise<unknown> {
return host === 'native'
? getDiff(repo, 'file.txt', staged)
: dispatcher.callRequest('git.diff', { worktreePath: repo, filePath: 'file.txt', staged })
function diff(staged = false): Promise<unknown> {
return getDiff(repo, 'file.txt', staged)
}
it.each(['native', 'relay'] as const)(
'does not substitute HEAD for a corrupt index blob on %s',
async (host) => {
await writeFile(path.join(repo, 'file.txt'), 'committed\n')
gitCommit(repo, 'initial')
await writeFile(path.join(repo, 'file.txt'), 'staged\n')
await git(['add', 'file.txt'])
const oid = (await git(['rev-parse', ':file.txt'])).trim()
await writeFile(path.join(repo, 'file.txt'), 'working\n')
const old = new Date(Date.now() - 10_000)
await Promise.all(
['.git/index', 'file.txt'].map((file) => utimes(path.join(repo, file), old, old))
)
const before = await readWorktreeDiffStamp(repo, 'file.txt', true)
await unlink(path.join(repo, '.git', 'objects', oid.slice(0, 2), oid.slice(2)))
expect(await readGitBlobAtIndexPath(repo, 'file.txt')).toMatchObject({
exists: false,
failed: true
})
it('does not substitute HEAD for a corrupt index blob', async () => {
await writeFile(path.join(repo, 'file.txt'), 'committed\n')
gitCommit(repo, 'initial')
await writeFile(path.join(repo, 'file.txt'), 'staged\n')
await git(['add', 'file.txt'])
const oid = (await git(['rev-parse', ':file.txt'])).trim()
await writeFile(path.join(repo, 'file.txt'), 'working\n')
const old = new Date(Date.now() - 10_000)
await Promise.all(
['.git/index', 'file.txt'].map((file) => utimes(path.join(repo, file), old, old))
)
const before = await readWorktreeDiffStamp(repo, 'file.txt', true)
await unlink(path.join(repo, '.git', 'objects', oid.slice(0, 2), oid.slice(2)))
expect(await readGitBlobAtIndexPath(repo, 'file.txt')).toMatchObject({
exists: false,
failed: true
})
expect(await diff(host)).toMatchObject({ originalContent: '', modifiedContent: 'working\n' })
if (host === 'native') {
expect(settledDiffCache.stats().entries).toBe(0)
}
await git(['hash-object', '-w', '--stdin'], 'staged\n')
const after = await readWorktreeDiffStamp(repo, 'file.txt', true)
expect(after?.value).toBe(before?.value)
expect(await diff()).toMatchObject({ originalContent: '', modifiedContent: 'working\n' })
expect(settledDiffCache.stats().entries).toBe(0)
await git(['hash-object', '-w', '--stdin'], 'staged\n')
const after = await readWorktreeDiffStamp(repo, 'file.txt', true)
expect(after?.value).toBe(before?.value)
expect(await diff(host)).toMatchObject({
originalContent: 'staged\n',
modifiedContent: 'working\n'
})
if (host === 'native') {
expect(settledDiffCache.stats().entries).toBe(1)
}
}
)
expect(await diff()).toMatchObject({
originalContent: 'staged\n',
modifiedContent: 'working\n'
})
expect(settledDiffCache.stats().entries).toBe(1)
})
it.each(['native', 'relay'] as const)(
'retains added paths on an unborn branch on %s',
async (host) => {
await writeFile(path.join(repo, 'file.txt'), 'new file\n')
await git(['add', 'file.txt'])
expect(await diff(host, true)).toMatchObject({
originalContent: '',
modifiedContent: 'new file\n'
})
}
)
it('retains added paths on an unborn branch', async () => {
await writeFile(path.join(repo, 'file.txt'), 'new file\n')
await git(['add', 'file.txt'])
expect(await diff(true)).toMatchObject({
originalContent: '',
modifiedContent: 'new file\n'
})
})
it.each(['native', 'relay'] as const)(
'retains additions absent from a valid HEAD tree on %s',
async (host) => {
await writeFile(path.join(repo, 'seed.txt'), 'seed\n')
gitCommit(repo, 'initial')
await writeFile(path.join(repo, 'file.txt'), 'new file\n')
await git(['add', 'file.txt'])
expect(await diff(host, true)).toMatchObject({
originalContent: '',
modifiedContent: 'new file\n'
})
}
)
it('retains additions absent from a valid HEAD tree', async () => {
await writeFile(path.join(repo, 'seed.txt'), 'seed\n')
gitCommit(repo, 'initial')
await writeFile(path.join(repo, 'file.txt'), 'new file\n')
await git(['add', 'file.txt'])
expect(await diff(true)).toMatchObject({
originalContent: '',
modifiedContent: 'new file\n'
})
})
it('recognizes actual index and tree absence without accepting corrupt objects', async () => {
await writeFile(path.join(repo, 'seed.txt'), 'seed\n')
src/main/git/source-control/bulk-pathspec-stdin.test.ts
-103
View File
@@ -1,103 +0,0 @@
import { readFile, writeFile } from 'node:fs/promises'
import * as path from 'node:path'
import { afterEach, beforeEach, describe, expect, it } from 'vitest'
import { runProcess } from '@orca/process-host'
import { gitCommit, gitInit, type MockDispatcher } from '../../../relay/git-handler-test-setup'
import {
createGitHandlerRelay,
createGitTempDir,
removeGitTempDir
} from '../../../relay/git-handler-test-harness'
import type { GitHandler } from '../../../relay/git-handler'
import { bulkStageFiles, bulkUnstageFiles } from './staging'
import { bulkDiscardChanges } from './discard-changes'
describe('bulk pathspec stdin on execution hosts', () => {
let repo: string
let dispatcher: MockDispatcher
let handler: GitHandler
beforeEach(() => {
repo = createGitTempDir()
;({ dispatcher, handler } = createGitHandlerRelay())
gitInit(repo)
})
afterEach(async () => {
handler.dispose()
await removeGitTempDir(repo)
})
async function changedFiles(staged: boolean): Promise<string[]> {
const result = await runProcess({
program: 'git',
args: ['diff', ...(staged ? ['--cached'] : []), '--name-only', '-z'],
cwd: repo
})
expect(result.code).toBe(0)
return result.stdout.split('\0').filter(Boolean).sort()
}
function mutate(
host: 'native' | 'relay',
action: 'stage' | 'unstage' | 'discard',
filePaths: string[]
): Promise<unknown> {
if (host === 'relay') {
const methods = {
stage: 'git.bulkStage',
unstage: 'git.bulkUnstage',
discard: 'git.bulkDiscard'
}
return dispatcher.callRequest(methods[action], { worktreePath: repo, filePaths })
}
const operations = {
stage: bulkStageFiles,
unstage: bulkUnstageFiles,
discard: bulkDiscardChanges
}
return operations[action](repo, filePaths)
}
it.each(['native', 'relay'] as const)(
'stages, unstages and discards over 100 literal paths on %s',
async (host) => {
const selected = Array.from({ length: 105 }, (_, index) => `file-${index}.txt`)
selected.push('[k]eep.log', 'space name.txt', '-option.txt')
if (process.platform !== 'win32') {
selected.push('line\nname.txt', ':(magic).txt', 'back\\slash.txt')
}
const allPaths = [...selected, 'keep.log']
await Promise.all(
allPaths.map((filePath) => writeFile(path.join(repo, filePath), 'original\n'))
)
gitCommit(repo, 'initial')
await Promise.all(
allPaths.map((filePath) => writeFile(path.join(repo, filePath), 'modified\n'))
)
await mutate(host, 'stage', [])
expect(await changedFiles(true)).toEqual([])
await mutate(host, 'stage', selected)
expect(await changedFiles(true)).toEqual([...selected].sort())
await mutate(host, 'unstage', [])
expect(await changedFiles(true)).toEqual([...selected].sort())
await mutate(host, 'unstage', selected)
expect(await changedFiles(true)).toEqual([])
await mutate(host, 'discard', [])
expect(await changedFiles(false)).toEqual([...allPaths].sort())
await mutate(host, 'discard', selected)
expect(await changedFiles(false)).toEqual(['keep.log'])
expect(await readFile(path.join(repo, 'keep.log'), 'utf8')).toBe('modified\n')
}
)
it.each(['native', 'relay'] as const)('rejects NUL path injection on %s', async (host) => {
await writeFile(path.join(repo, 'one.txt'), 'original\n')
gitCommit(repo, 'initial')
await writeFile(path.join(repo, 'one.txt'), 'modified\n')
await expect(mutate(host, 'stage', ['one.txt\0:(top)**'])).rejects.toThrow('NUL')
expect(await changedFiles(true)).toEqual([])
})
})
src/main/git/source-control/staging-discard-index-safety.test.ts
+36 -47
View File
@@ -1,38 +1,36 @@
import { readFile, writeFile } from 'node:fs/promises'
import { readFile, rm, writeFile } from 'node:fs/promises'
import { execFileSync } from 'node:child_process'
import { mkdtempSync } from 'node:fs'
import { tmpdir } from 'node:os'
import * as path from 'node:path'
import { afterEach, beforeEach, describe, expect, it } from 'vitest'
import { runProcess } from '@orca/process-host'
import { gitCommit, gitInit, type MockDispatcher } from '../../../relay/git-handler-test-setup'
import {
createGitHandlerRelay,
createGitTempDir,
removeGitTempDir
} from '../../../relay/git-handler-test-harness'
import type { GitHandler } from '../../../relay/git-handler'
import { bulkUnstageFiles, unstageFile } from './staging'
import { bulkDiscardChanges, discardChanges } from './discard-changes'
const modes = [
{ host: 'native', bulk: false },
{ host: 'native', bulk: true },
{ host: 'relay', bulk: false },
{ host: 'relay', bulk: true }
] as const
function gitInit(dir: string): void {
execFileSync('git', ['init'], { cwd: dir, stdio: 'pipe' })
execFileSync('git', ['config', 'user.email', 'test@example.com'], { cwd: dir, stdio: 'pipe' })
execFileSync('git', ['config', 'user.name', 'Test User'], { cwd: dir, stdio: 'pipe' })
}
function gitCommit(dir: string, message: string): void {
execFileSync('git', ['add', '.'], { cwd: dir, stdio: 'pipe' })
execFileSync('git', ['commit', '-m', message, '--allow-empty'], { cwd: dir, stdio: 'pipe' })
}
const modes = [{ bulk: false }, { bulk: true }] as const
describe('staging and discard preserve index authority', () => {
let repo: string
let dispatcher: MockDispatcher
let handler: GitHandler
beforeEach(() => {
repo = createGitTempDir()
;({ dispatcher, handler } = createGitHandlerRelay())
repo = mkdtempSync(path.join(tmpdir(), 'orca-real-git-'))
gitInit(repo)
})
afterEach(async () => {
handler.dispose()
await removeGitTempDir(repo)
await rm(repo, { recursive: true, force: true })
})
async function git(args: string[], input?: string): Promise<string> {
@@ -46,19 +44,13 @@ describe('staging and discard preserve index authority', () => {
action: 'unstage' | 'discard',
filePaths: string[]
): Promise<unknown> {
if (mode.host === 'relay') {
return dispatcher.callRequest(
`git.${mode.bulk ? (action === 'unstage' ? 'bulkUnstage' : 'bulkDiscard') : action}`,
{ worktreePath: repo, ...(mode.bulk ? { filePaths } : { filePath: filePaths[0] }) }
)
}
if (mode.bulk) {
return (action === 'unstage' ? bulkUnstageFiles : bulkDiscardChanges)(repo, filePaths)
}
return (action === 'unstage' ? unstageFile : discardChanges)(repo, filePaths[0])
}
it.each(modes)('preserves staged MM content during $host bulk=$bulk discard', async (mode) => {
it.each(modes)('preserves staged MM content during bulk=$bulk discard', async (mode) => {
await writeFile(path.join(repo, 'file.txt'), 'committed\n')
gitCommit(repo, 'initial')
await writeFile(path.join(repo, 'file.txt'), 'staged\n')
@@ -73,7 +65,7 @@ describe('staging and discard preserve index authority', () => {
expect(await git(['diff', '--cached', '--name-only'])).toBe('file.txt\n')
})
it.each(modes)('restores staged additions during $host bulk=$bulk AM discard', async (mode) => {
it.each(modes)('restores staged additions during bulk=$bulk AM discard', async (mode) => {
await writeFile(path.join(repo, 'initial.txt'), 'committed\n')
gitCommit(repo, 'initial')
await writeFile(path.join(repo, 'new.txt'), 'staged addition\n')
@@ -87,7 +79,7 @@ describe('staging and discard preserve index authority', () => {
expect(await git(['diff', '--name-only'])).toBe('')
})
it.each(modes)('unstages selected unborn paths on $host bulk=$bulk', async (mode) => {
it.each(modes)('unstages selected unborn paths on bulk=$bulk', async (mode) => {
await writeFile(path.join(repo, 'selected.txt'), 'selected\n')
await writeFile(path.join(repo, 'keep.txt'), 'keep\n')
await git(['add', '.'])
@@ -98,7 +90,7 @@ describe('staging and discard preserve index authority', () => {
expect(await readFile(path.join(repo, 'selected.txt'), 'utf8')).toBe('selected\n')
})
it.each(['native', 'relay'] as const)('unstages both rename paths on %s', async (host) => {
it('unstages both rename paths', async () => {
await writeFile(path.join(repo, 'old.txt'), 'rename content\n')
await writeFile(path.join(repo, 'keep.txt'), 'keep\n')
gitCommit(repo, 'initial')
@@ -106,32 +98,29 @@ describe('staging and discard preserve index authority', () => {
await writeFile(path.join(repo, 'keep.txt'), 'keep staged\n')
await git(['add', 'keep.txt'])
await mutate({ host, bulk: true }, 'unstage', ['new.txt', 'old.txt'])
await mutate({ bulk: true }, 'unstage', ['new.txt', 'old.txt'])
expect(await git(['diff', '--cached', '--name-only'])).toBe('keep.txt\n')
expect(await git(['ls-files', '-z'])).toBe('keep.txt\0old.txt\0')
expect(await readFile(path.join(repo, 'new.txt'), 'utf8')).toBe('rename content\n')
})
it.each(['native', 'relay'] as const)(
'discards a staged rename after unstaging both paths on %s',
async (host) => {
await writeFile(path.join(repo, 'old.txt'), 'rename content\n')
gitCommit(repo, 'initial')
await git(['mv', 'old.txt', 'new.txt'])
it('discards a staged rename after unstaging both paths', async () => {
await writeFile(path.join(repo, 'old.txt'), 'rename content\n')
gitCommit(repo, 'initial')
await git(['mv', 'old.txt', 'new.txt'])
await mutate({ host, bulk: true }, 'unstage', ['new.txt', 'old.txt'])
await mutate({ host, bulk: true }, 'discard', ['new.txt', 'old.txt'])
await mutate({ bulk: true }, 'unstage', ['new.txt', 'old.txt'])
await mutate({ bulk: true }, 'discard', ['new.txt', 'old.txt'])
expect(await git(['status', '--porcelain'])).toBe('')
expect(await readFile(path.join(repo, 'old.txt'), 'utf8')).toBe('rename content\n')
await expect(readFile(path.join(repo, 'new.txt'), 'utf8')).rejects.toMatchObject({
code: 'ENOENT'
})
}
)
expect(await git(['status', '--porcelain'])).toBe('')
expect(await readFile(path.join(repo, 'old.txt'), 'utf8')).toBe('rename content\n')
await expect(readFile(path.join(repo, 'new.txt'), 'utf8')).rejects.toMatchObject({
code: 'ENOENT'
})
})
it.each(modes)('rejects an unresolved conflict on $host bulk=$bulk', async (mode) => {
it.each(modes)('rejects an unresolved conflict on bulk=$bulk', async (mode) => {
await writeFile(path.join(repo, 'file.txt'), 'base\n')
gitCommit(repo, 'initial')
const blobs = await Promise.all(
src/main/git/status-branch-compare-real-ref.test.ts
+22 -58
View File
@@ -4,8 +4,6 @@ import { tmpdir } from 'node:os'
import * as path from 'node:path'
import { afterEach, describe, expect, it } from 'vitest'
import { getBranchCompare } from './status'
import { branchCompare } from '../../relay/git-handler-ops'
import { gitChangeListArgs, parseGitChangeList } from '../../shared/git-change-list'
const tempRoots: string[] = []
@@ -17,22 +15,12 @@ function git(repo: string, args: string[]): string {
}).trim()
}
function relayCompare(repo: string, baseRef: string) {
return branchCompare(
async (args, cwd) => ({ stdout: git(cwd, args), stderr: '' }),
repo,
baseRef,
async (mergeBase, headOid) =>
parseGitChangeList(git(repo, gitChangeListArgs(mergeBase, headOid)))
)
}
afterEach(async () => {
await Promise.all(tempRoots.splice(0).map((root) => rm(root, { recursive: true, force: true })))
})
describe('getBranchCompare real refs', () => {
it('reports equal commits as empty on native and relay despite staged and unstaged changes', async () => {
it('reports equal commits as empty despite staged and unstaged changes', async () => {
const repo = await mkdtemp(path.join(tmpdir(), 'orca-equal-branch-compare-'))
tempRoots.push(repo)
git(repo, ['init', '-q'])
@@ -46,37 +34,18 @@ describe('getBranchCompare real refs', () => {
git(repo, ['add', 'changes.txt'])
await writeFile(path.join(repo, 'changes.txt'), 'unstaged\n')
for (const result of await Promise.all([
getBranchCompare(repo, 'base'),
relayCompare(repo, 'base')
])) {
expect(result).toEqual({
summary: {
baseRef: 'base',
baseOid: oid,
compareRef: 'feature',
headOid: oid,
mergeBase: oid,
changedFiles: 0,
commitsAhead: 0,
commitsBehind: 0,
status: 'ready'
},
entries: []
})
}
})
it('keeps the merge-base failure for identical blob tips on the relay', async () => {
const repo = await mkdtemp(path.join(tmpdir(), 'orca-blob-branch-compare-'))
tempRoots.push(repo)
git(repo, ['init', '-q'])
await writeFile(path.join(repo, 'blob.txt'), 'not a commit\n')
const oid = git(repo, ['hash-object', '-w', 'blob.txt'])
await writeFile(path.join(repo, '.git', 'HEAD'), `${oid}\n`)
await expect(relayCompare(repo, oid)).resolves.toMatchObject({
summary: { headOid: oid, baseOid: oid, status: 'no-merge-base', mergeBase: null },
expect(await getBranchCompare(repo, 'base')).toEqual({
summary: {
baseRef: 'base',
baseOid: oid,
compareRef: 'feature',
headOid: oid,
mergeBase: oid,
changedFiles: 0,
commitsAhead: 0,
commitsBehind: 0,
status: 'ready'
},
entries: []
})
})
@@ -109,19 +78,14 @@ describe('getBranchCompare real refs', () => {
])
expect(rawOid).not.toBe(peeledOid)
for (const result of await Promise.all([
getBranchCompare(client, 'origin/tagbase'),
relayCompare(client, 'origin/tagbase')
])) {
expect(result.summary).toMatchObject({
baseOid: rawOid,
headOid: peeledOid,
mergeBase: peeledOid,
changedFiles: 0,
commitsAhead: 0,
commitsBehind: 0,
status: 'ready'
})
}
expect((await getBranchCompare(client, 'origin/tagbase')).summary).toMatchObject({
baseOid: rawOid,
headOid: peeledOid,
mergeBase: peeledOid,
changedFiles: 0,
commitsAhead: 0,
commitsBehind: 0,
status: 'ready'
})
})
})
src/main/git/status-branch-line-total-relay-parity.test.ts
-178
View File
@@ -1,178 +0,0 @@
/**
* Main and relay must publish the same `branchLineTotal` for the same fixture
* repo. Both call sites
* share `src/shared/git-branch-line-total.ts`; this is the test that catches one
* of them wiring it up differently — different flags, a different untracked
* source, a different completeness gate.
*/
import { execFile, execFileSync } from 'node:child_process'
import { mkdtemp, rm, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import * as path from 'node:path'
import { promisify } from 'node:util'
import { afterEach, beforeEach, describe, expect, it } from 'vitest'
import { getStatus } from './status'
import type { GitExec } from '../../relay/git-handler-ops'
import { getStatusOp } from '../../relay/git-handler-status-ops'
import type { RelayGitStreamExec } from '../../relay/git-stdout-stream'
import { invalidateGitBranchLineTotalInFlight } from '../../shared/git-branch-line-total'
import { clearGitStatusLineStatsCache } from '../../shared/git-status-line-stats-cache'
const execFileAsync = promisify(execFile)
// Fork point → working tree for the fixture below:
// tracked.txt +2 (branch commit only)
// partial.txt +1 (staged +2 then one of those lines removed unstaged)
// flip.txt 0 (added in the branch commit, removed again in the worktree)
// moved.txt 0 (pure rename)
// fresh.txt +3 (untracked)
// No fixture path here looks like test or generated code, so it is all source.
const EXPECTED_TOTAL = {
added: 6,
removed: 0,
test: { added: 0, removed: 0 },
generated: { added: 0, removed: 0 }
}
// Summing the per-area status rows instead would give this — the wrong answer
// the shared module exists to avoid.
const AREA_ROW_SUM = { added: 5, removed: 2 }
const relayGit: GitExec = async (args, cwd, opts) => {
const { stdout, stderr } = await execFileAsync('git', args, {
cwd,
encoding: 'utf8',
...(opts?.signal ? { signal: opts.signal } : {}),
...(opts?.timeout ? { timeout: opts.timeout } : {})
})
return { stdout, stderr }
}
const relayStreamGit: RelayGitStreamExec = async (args, cwd, options) => {
const { stdout } = await relayGit(args, cwd, {
disableOptionalLocks: options.disableOptionalLocks,
signal: options.signal
})
return { stoppedEarly: options.onStdout(stdout) === true }
}
function runFixtureGit(repo: string, args: string[]): string {
return execFileSync(
'git',
[
'-c',
'user.email=test@test.com',
'-c',
'user.name=Test',
'-c',
'commit.gpgSign=false',
...args
],
{ cwd: repo, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }
).trim()
}
/** Returns the merge-base OID the chip is measured against. */
async function seedParityFixture(repo: string): Promise<string> {
execFileSync('git', ['init', '-q', repo], { stdio: 'pipe' })
await writeFile(path.join(repo, 'tracked.txt'), 'a\nb\n')
await writeFile(path.join(repo, 'partial.txt'), 'one\ntwo\nthree\n')
await writeFile(path.join(repo, 'renamed.txt'), 'stable\n')
await writeFile(path.join(repo, 'flip.txt'), 'p\n')
runFixtureGit(repo, ['add', '.'])
runFixtureGit(repo, ['commit', '-m', 'base'])
const mergeBase = runFixtureGit(repo, ['rev-parse', 'HEAD'])
runFixtureGit(repo, ['checkout', '-q', '-b', 'feature'])
await writeFile(path.join(repo, 'tracked.txt'), 'a\nb\nc\nd\n')
await writeFile(path.join(repo, 'flip.txt'), 'p\nq\n')
runFixtureGit(repo, ['add', '-A'])
runFixtureGit(repo, ['commit', '-m', 'branch commit'])
runFixtureGit(repo, ['mv', 'renamed.txt', 'moved.txt'])
// Staged and unstaged hunks land on the same added lines, so an area sum
// double-counts them.
await writeFile(path.join(repo, 'partial.txt'), 'one\ntwo\nthree\nfoo\nbaz\n')
runFixtureGit(repo, ['add', 'partial.txt'])
await writeFile(path.join(repo, 'partial.txt'), 'one\ntwo\nthree\nfoo\n')
// The branch commit's line, taken back out in the worktree: net zero.
await writeFile(path.join(repo, 'flip.txt'), 'p\n')
await writeFile(path.join(repo, 'fresh.txt'), 'n1\nn2\nn3\n')
return mergeBase
}
function sumAreaRows(entries: readonly { added?: number; removed?: number }[]): {
added: number
removed: number
} {
let added = 0
let removed = 0
for (const entry of entries) {
added += entry.added ?? 0
removed += entry.removed ?? 0
}
return { added, removed }
}
describe('branch line total parity between main and relay', () => {
let repo: string
beforeEach(async () => {
clearGitStatusLineStatsCache()
invalidateGitBranchLineTotalInFlight()
repo = await mkdtemp(path.join(tmpdir(), 'branch-line-total-parity-'))
})
afterEach(async () => {
clearGitStatusLineStatsCache()
invalidateGitBranchLineTotalInFlight()
await rm(repo, { recursive: true, force: true })
})
it('produces identical totals for the same fixture repo', async () => {
const mergeBase = await seedParityFixture(repo)
const mainStatus = await getStatus(repo, { branchLineTotalMergeBase: mergeBase })
clearGitStatusLineStatsCache()
const relayStatus = await getStatusOp(relayGit, relayStreamGit, {
worktreePath: repo,
branchLineTotalMergeBase: mergeBase
})
expect(mainStatus.branchLineTotal).toEqual({ ...EXPECTED_TOTAL, mergeBase })
expect(relayStatus.branchLineTotal).toEqual(mainStatus.branchLineTotal)
// Both sides model the same worktree, so a parity pass on a mismatched
// entry list would be meaningless.
expect(relayStatus.entries.map((entry) => entry.path).sort()).toEqual(
mainStatus.entries.map((entry) => entry.path).sort()
)
})
it('agrees on a number no per-area row sum could produce', async () => {
const mergeBase = await seedParityFixture(repo)
const mainStatus = await getStatus(repo, { branchLineTotalMergeBase: mergeBase })
clearGitStatusLineStatsCache()
const relayStatus = await getStatusOp(relayGit, relayStreamGit, {
worktreePath: repo,
branchLineTotalMergeBase: mergeBase
})
expect(sumAreaRows(mainStatus.entries)).toEqual(AREA_ROW_SUM)
expect(sumAreaRows(relayStatus.entries as { added?: number; removed?: number }[])).toEqual(
AREA_ROW_SUM
)
expect(mainStatus.branchLineTotal).not.toMatchObject(AREA_ROW_SUM)
expect(relayStatus.branchLineTotal).toEqual(mainStatus.branchLineTotal)
})
it('omits the total on both sides when no merge base is requested', async () => {
await seedParityFixture(repo)
const mainStatus = await getStatus(repo)
clearGitStatusLineStatsCache()
const relayStatus = await getStatusOp(relayGit, relayStreamGit, { worktreePath: repo })
expect(Object.hasOwn(mainStatus, 'branchLineTotal')).toBe(false)
expect(Object.hasOwn(relayStatus, 'branchLineTotal')).toBe(false)
})
})
src/main/git/status-conflict-overlap.bench.test.ts
-250
View File
@@ -1,250 +0,0 @@
import { performance } from 'node:perf_hooks'
import { join } from 'node:path'
import { beforeEach, describe, expect, it, vi } from 'vitest'
import type * as NodeFsPromises from 'node:fs/promises'
import type * as GitRunner from './runner'
import type { GitExec } from '../../relay/git-handler-ops'
import type { RelayGitStreamExec } from '../../relay/git-stdout-stream'
const { gitStreamStdoutMock, readFileMock } = vi.hoisted(() => ({
gitStreamStdoutMock: vi.fn(),
readFileMock: vi.fn()
}))
vi.mock('node:fs/promises', async (importOriginal) => {
const actual = await importOriginal<typeof NodeFsPromises>()
return { ...actual, readFile: readFileMock }
})
vi.mock('./runner', async (importOriginal) => {
const actual = await importOriginal<typeof GitRunner>()
return { ...actual, gitStreamStdout: gitStreamStdoutMock }
})
import { getStatus } from './status'
import { getStatusOp } from '../../relay/git-handler-status-ops'
const BENCH_DELAY_MS = 25
const BENCH_SAMPLES = 31
const BENCH_WARMUPS = 5
const describeBench = process.env.ORCA_GIT_STATUS_OVERLAP_BENCH === '1' ? describe : describe.skip
type Deferred<T> = {
promise: Promise<T>
resolve: (value: T) => void
}
type BenchmarkResult = {
path: string
medianMs: number
p95Ms: number
minMs: number
maxMs: number
}
function deferred<T>(): Deferred<T> {
let resolve!: (value: T) => void
const promise = new Promise<T>((innerResolve) => {
resolve = innerResolve
})
return { promise, resolve }
}
function wait(delayMs: number): Promise<void> {
return new Promise((resolve) => setTimeout(resolve, delayMs))
}
function percentile(samples: number[], fraction: number): number {
const sorted = [...samples].sort((a, b) => a - b)
return sorted[Math.ceil(sorted.length * fraction) - 1]!
}
describe('git status conflict-read overlap', () => {
const relayGit: GitExec = async () => ({ stdout: '', stderr: '' })
beforeEach(() => {
readFileMock.mockReset()
gitStreamStdoutMock.mockReset()
readFileMock.mockResolvedValue('gitdir: /repo/.git/worktrees/feature\n')
gitStreamStdoutMock.mockResolvedValue({ stoppedEarly: false })
})
it('starts native status before conflict-marker I/O settles', async () => {
const markerRead = deferred<string>()
const statusStarted = deferred<void>()
readFileMock.mockReturnValue(markerRead.promise)
gitStreamStdoutMock.mockImplementation(async () => {
statusStarted.resolve()
return { stoppedEarly: false }
})
const resultPromise = getStatus('/repo')
await statusStarted.promise
expect(readFileMock).toHaveBeenCalledWith(join('/repo', '.git'), 'utf-8')
markerRead.resolve('gitdir: /repo/.git/worktrees/feature\n')
await expect(resultPromise).resolves.toMatchObject({
entries: [],
conflictOperation: 'unknown'
})
})
it('starts relay status before conflict-marker I/O settles', async () => {
const markerRead = deferred<string>()
const statusStarted = deferred<void>()
readFileMock.mockReturnValue(markerRead.promise)
const relayStreamGit: RelayGitStreamExec = async () => {
statusStarted.resolve()
return { stoppedEarly: false }
}
const resultPromise = getStatusOp(relayGit, relayStreamGit, { worktreePath: '/repo' })
await statusStarted.promise
expect(readFileMock).toHaveBeenCalledWith(join('/repo', '.git'), 'utf-8')
markerRead.resolve('gitdir: /repo/.git/worktrees/feature\n')
await expect(resultPromise).resolves.toMatchObject({
entries: [],
conflictOperation: 'unknown'
})
})
it('observes an early native status rejection while marker I/O remains pending', async () => {
const markerRead = deferred<string>()
readFileMock.mockReturnValue(markerRead.promise)
gitStreamStdoutMock.mockRejectedValue(new Error('status failed first'))
let settled = false
const resultPromise = getStatus('/repo').finally(() => {
settled = true
})
await Promise.resolve()
await Promise.resolve()
expect(settled).toBe(false)
markerRead.resolve('gitdir: /repo/.git/worktrees/feature\n')
await expect(resultPromise).resolves.toMatchObject({
entries: [],
conflictOperation: 'unknown'
})
})
it('keeps a synchronous native status failure fail-soft', async () => {
const statusError = new Error('status threw')
gitStreamStdoutMock.mockImplementation(() => {
throw statusError
})
await expect(getStatus('/repo')).resolves.toMatchObject({
entries: [],
conflictOperation: 'unknown'
})
})
it.each(['throw', 'reject'] as const)('keeps relay %s failures fail-soft', async (mode) => {
const statusError = new Error(`status ${mode}`)
const relayStreamGit = (() => {
if (mode === 'throw') {
throw statusError
}
return Promise.reject(statusError)
}) as RelayGitStreamExec
await expect(
getStatusOp(relayGit, relayStreamGit, { worktreePath: '/repo' })
).resolves.toMatchObject({ entries: [], conflictOperation: 'unknown' })
})
it('rethrows the original relay status failure after cancellation', async () => {
const controller = new AbortController()
const statusError = new Error('cancelled status')
const relayStreamGit: RelayGitStreamExec = async () => {
controller.abort(statusError)
throw statusError
}
await expect(
getStatusOp(
relayGit,
relayStreamGit,
{ worktreePath: '/repo' },
{ signal: controller.signal }
)
).rejects.toBe(statusError)
})
it('surfaces detector errors without waiting for a hung status read', async () => {
const statusStarted = deferred<void>()
const relayStreamGit: RelayGitStreamExec = () => {
statusStarted.resolve()
return new Promise(() => {})
}
const invalidPath = { toString: () => '/repo' }
const resultPromise = getStatusOp(relayGit, relayStreamGit, {
worktreePath: invalidPath
})
const rejection = expect(resultPromise).rejects.toThrow(TypeError)
await statusStarted.promise
await rejection
})
it('keeps detector errors ahead of concurrent status failures', async () => {
const statusError = new Error('status failed too')
const relayStreamGit = (() => {
throw statusError
}) as RelayGitStreamExec
const invalidPath = { toString: () => '/repo' }
const result = getStatusOp(relayGit, relayStreamGit, { worktreePath: invalidPath })
await expect(result).rejects.toBeInstanceOf(TypeError)
})
})
describeBench('git status conflict-read overlap benchmark', () => {
it('measures native and relay orchestration with matched independent latency', async () => {
readFileMock.mockImplementation(async () => {
await wait(BENCH_DELAY_MS)
return 'gitdir: /repo/.git/worktrees/feature\n'
})
gitStreamStdoutMock.mockImplementation(async () => {
await wait(BENCH_DELAY_MS)
return { stoppedEarly: false }
})
const relayGit: GitExec = async () => ({ stdout: '', stderr: '' })
const relayStreamGit: RelayGitStreamExec = async () => {
await wait(BENCH_DELAY_MS)
return { stoppedEarly: false }
}
const cases = [
{ name: 'native', run: () => getStatus('/repo') },
{
name: 'relay',
run: () => getStatusOp(relayGit, relayStreamGit, { worktreePath: '/repo' })
}
]
const results: BenchmarkResult[] = []
for (const benchmarkCase of cases) {
for (let index = 0; index < BENCH_WARMUPS; index += 1) {
await benchmarkCase.run()
}
const samples: number[] = []
for (let index = 0; index < BENCH_SAMPLES; index += 1) {
const startedAt = performance.now()
await benchmarkCase.run()
samples.push(performance.now() - startedAt)
}
results.push({
path: benchmarkCase.name,
medianMs: Number(percentile(samples, 0.5).toFixed(3)),
p95Ms: Number(percentile(samples, 0.95).toFixed(3)),
minMs: Number(Math.min(...samples).toFixed(3)),
maxMs: Number(Math.max(...samples).toFixed(3))
})
}
console.table(results)
expect(results).toHaveLength(2)
}, 10_000)
})
src/main/git/worktree-add.ts
-1
View File
@@ -253,7 +253,6 @@ async function performAddWorktree(
await persistWorktreeCreationBase(worktreePath, branch, effectiveBase, options)
}
// SSH parity: relay's addWorktreeOp (src/relay/git-handler-worktree-ops.ts) mirrors this — change both in lockstep.
// Why: --no-track leaves no upstream until first push; push.autoSetupRemote=true lets a plain
// `git push` create+set origin/<branch> (git >=2.37; older clients ignore it). `--local` on a
// linked worktree writes the shared common-dir config (whole repo) — intentional and idempotent,
src/main/git/worktree-rebase-update-refs-real-git.test.ts
+3 -7
View File
@@ -10,7 +10,6 @@ vi.mock('./local-repo-ref-maintenance', () => ({
}))
import { forceDeleteLocalBranch } from './worktree-branch-removal'
import { forceDeletePreservedRelayBranch } from '../../relay/git-handler-branch-cleanup'
const image = process.env.ORCA_GIT_COMPAT_IMAGE
const binary = process.env.ORCA_GIT_COMPAT_BINARY ?? 'git'
@@ -82,10 +81,10 @@ afterEach(async () => {
})
describe('rebase branch reservations with real Git', () => {
it.for(['native', 'relay'] as const)(
it.for(['native'] as const)(
'%s retains auxiliary branches reserved by a paused real rebase --update-refs',
{ timeout: 120_000 },
async (host, context) => {
async (_host, context) => {
await git(['worktree', 'add', '-q', '-b', 'feature', checkout])
await writeFile(join(checkout, 'first'), 'first\n')
await git(['add', 'first'], checkout)
@@ -117,10 +116,7 @@ describe('rebase branch reservations with real Git', () => {
/checked out|used by worktree/
)
const cleanupGit = vi.fn((args: string[], cwd: string) => git(args, cwd))
const remove = () =>
host === 'native'
? forceDeleteLocalBranch(repo, 'auxiliary', expected, cleanupGit)
: forceDeletePreservedRelayBranch(cleanupGit, repo, 'auxiliary', expected)
const remove = () => forceDeleteLocalBranch(repo, 'auxiliary', expected, cleanupGit)
await expect(remove()).rejects.toThrow('checked out in another worktree')
expect(cleanupGit.mock.calls.map(([args]) => args)).toEqual([
['worktree', 'list', '--porcelain']
src/main/git/worktree-safety-real-git.test.ts
+1 -164
View File
@@ -1,14 +1,9 @@
import { execFile } from 'node:child_process'
import { mkdir, mkdtemp, readFile, realpath, rm, writeFile } from 'node:fs/promises'
import { mkdir, mkdtemp, realpath, rm, writeFile } from 'node:fs/promises'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { promisify } from 'node:util'
import { afterEach, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest'
import { GitCapabilityCache } from '../../shared/git-capability-cache'
import { isWorktreeCreatePreparation } from '../../shared/worktree/create-preparation'
import { parseWorktreeList } from '../../shared/git-worktree-porcelain-parser'
import { annotateWorktreeLocksFromAdmin } from '../../shared/git-worktree-admin'
import type { GitExec } from '../../relay/git-handler-ops'
const { runner } = vi.hoisted(() => ({ runner: vi.fn() }))
vi.mock('./runner', () => ({
@@ -18,14 +13,8 @@ vi.mock('./runner', () => ({
}))
vi.mock('./status', () => ({ runWithGitReadCacheInvalidation: (run: () => unknown) => run() }))
import { removeWorktree } from './worktree-removal'
import { forceDeleteLocalBranch } from './worktree-branch-removal'
import { readWorktreeList } from './worktree-list-reader'
import { getBranchConflictKind, getBranchConflictKindViaExec } from './repo-branch-conflict'
import { clearGitCapabilityStateForTests } from './git-capability-state'
import { removeWorktreeOp } from '../../relay/git-handler-worktree-remove'
import { forceDeletePreservedRelayBranch } from '../../relay/git-handler-branch-cleanup'
import { readRelayWorktreeList } from '../../relay/git-handler-worktree-list'
const execFileAsync = promisify(execFile)
const image = process.env.ORCA_GIT_COMPAT_IMAGE
@@ -37,7 +26,6 @@ const dockerUser =
: []
let root = ''
let repo = ''
let checkout = ''
async function git(args: string[], cwd = repo): Promise<{ stdout: string; stderr: string }> {
return image
@@ -66,8 +54,6 @@ async function git(args: string[], cwd = repo): Promise<{ stdout: string; stderr
})
}
const relay: GitExec = (args, cwd) => git(args, cwd)
async function initializeRepo(cwd: string): Promise<void> {
await mkdir(cwd, { recursive: true })
await git(['init', '-q', '-b', 'main'], cwd).catch(() => git(['init', '-q'], cwd))
@@ -92,7 +78,6 @@ beforeAll(async () => {
beforeEach(async () => {
root = await realpath(await mkdtemp(join(tmpdir(), 'orca-worktree-safety-')))
repo = join(root, 'repo')
checkout = join(root, 'checkout')
await initializeRepo(repo)
clearGitCapabilityStateForTests()
runner.mockImplementation((args: string[], options: { cwd?: string }) => git(args, options.cwd))
@@ -103,99 +88,6 @@ afterEach(async () => {
})
describe('worktree safety with the real Git binary', () => {
it.each(['native', 'relay'] as const)(
'%s preserves unpublished submodule objects without implicit force',
async (host) => {
const origin = join(root, 'sub-origin')
await initializeRepo(origin)
await git(['-c', 'protocol.file.allow=always', 'submodule', 'add', origin, 'sub'])
await git(['commit', '-qam', 'submodule'])
await git(['worktree', 'add', '-q', '-b', 'feature', checkout])
await git(['-c', 'protocol.file.allow=always', 'submodule', 'update', '--init'], checkout)
const sub = join(checkout, 'sub')
await git(['checkout', '-qb', 'unpublished'], sub)
await writeFile(join(sub, 'local'), 'unpublished work\n')
await git(['add', 'local'], sub)
await git(
[
'-c',
'user.name=Safety',
'-c',
'user.email=safety@example.invalid',
'-c',
'commit.gpgSign=false',
'commit',
'-qm',
'local'
],
sub
)
const local = (await git(['rev-parse', 'HEAD'], sub)).stdout.trim()
await git(['checkout', '--detach', 'HEAD~1'], sub)
expect(
(await git(['status', '--porcelain', '--ignore-submodules=none'], checkout)).stdout
).toBe('')
const remove = (force: boolean) =>
host === 'native'
? removeWorktree(repo, checkout, force, {
deleteBranch: false,
knownRemovedWorktree: { branch: 'refs/heads/feature', head: '', locked: false }
})
: removeWorktreeOp(
relay,
{ worktreePath: checkout, force, deleteBranch: false },
new GitCapabilityCache()
)
await expect(remove(false)).rejects.toThrow(/submodules cannot be moved or removed/)
expect((await git(['cat-file', '-t', local], sub)).stdout.trim()).toBe('commit')
expect((await git(['worktree', 'list', '--porcelain'])).stdout).toContain(checkout)
await expect(remove(true)).resolves.toEqual({})
await expect(readFile(join(checkout, '.git'))).rejects.toThrow()
},
120_000
)
it.each(['native', 'relay'] as const)(
'%s reads preparation ownership from admin metadata on old porcelain',
async (host) => {
await git(['worktree', 'add', '-q', '--detach', checkout])
const reason = 'orca-create-preparation:v1:12345:retained'
await git(['worktree', 'lock', '--reason', reason, checkout])
const oldList = (await git(['worktree', 'list', '--porcelain'])).stdout
.split('\n')
.filter((line) => !line.startsWith('locked'))
.join('\n')
const capabilities = new GitCapabilityCache()
capabilities.rememberUnsupported('worktree-list-z')
runner.mockImplementation(async (args: string[], options: { cwd?: string }) => {
if (args[0] === 'worktree' && args[1] === 'list') {
if (args.includes('-z')) {
throw Object.assign(new Error("unknown switch `z'"), {
code: 129,
stderr: "error: unknown switch `z'"
})
}
return { stdout: oldList, stderr: '' }
}
return git(args, options.cwd)
})
const entries =
host === 'native'
? await readWorktreeList(repo)
: await readRelayWorktreeList((args, cwd) => runner(args, { cwd }), repo, capabilities)
const prepared = entries.find((entry) => entry.path === checkout)
expect(prepared).toMatchObject({ locked: true, lockReason: reason })
expect(prepared && isWorktreeCreatePreparation(prepared)).toBe(true)
await rm(checkout, { recursive: true })
const annotated = await annotateWorktreeLocksFromAdmin(repo, parseWorktreeList(oldList))
expect(annotated.find((entry) => entry.path === checkout)).toMatchObject({
locked: true,
lockReason: reason
})
},
90_000
)
it.each([
['feature', 'Feature'],
@@ -226,59 +118,4 @@ describe('worktree safety with the real Git binary', () => {
90_000
)
it.each(['native', 'relay'] as const)(
'%s retains detached branches reserved by rebase or bisect',
async (host) => {
await git(['worktree', 'add', '-q', '-b', 'feature', checkout])
const expected = (await git(['rev-parse', 'refs/heads/feature'])).stdout.trim()
await git(['checkout', '--detach'], checkout)
const gitDir = (await git(['rev-parse', '--absolute-git-dir'], checkout)).stdout.trim()
const remove = () =>
host === 'native'
? forceDeleteLocalBranch(repo, 'feature', expected, git)
: forceDeletePreservedRelayBranch(relay, repo, 'feature', expected)
for (const marker of ['rebase-merge/head-name', 'rebase-apply/head-name', 'BISECT_START']) {
const file = join(gitDir, ...marker.split('/'))
await mkdir(join(file, '..'), { recursive: true })
await writeFile(file, marker === 'BISECT_START' ? 'feature\n' : 'refs/heads/feature\n')
if (marker === 'BISECT_START') {
await writeFile(join(gitDir, 'BISECT_LOG'), '')
}
await expect(git(['branch', '-D', 'feature'])).rejects.toThrow(
/checked out|used by worktree/
)
await expect(remove()).rejects.toThrow('checked out in another worktree')
expect((await git(['rev-parse', 'refs/heads/feature'])).stdout.trim()).toBe(expected)
await rm(file)
if (marker === 'BISECT_START') {
await rm(join(gitDir, 'BISECT_LOG'))
}
}
await expect(remove()).resolves.toBeUndefined()
},
120_000
)
it.each(['native', 'relay'] as const)(
'%s restores a deleted ref when detached branch use starts during deletion',
async (host) => {
await git(['worktree', 'add', '-q', '-b', 'feature', checkout])
const expected = (await git(['rev-parse', 'refs/heads/feature'])).stdout.trim()
await git(['checkout', '--detach'], checkout)
const gitDir = (await git(['rev-parse', '--absolute-git-dir'], checkout)).stdout.trim()
const racingGit = async (args: string[], cwd: string) => {
const result = await git(args, cwd)
if (args[0] === 'update-ref' && args[1] === '-d') {
await writeFile(join(gitDir, 'BISECT_START'), 'feature\n')
}
return result
}
const remove = () =>
host === 'native'
? forceDeleteLocalBranch(repo, 'feature', expected, racingGit)
: forceDeletePreservedRelayBranch(racingGit, repo, 'feature', expected)
await expect(remove()).rejects.toThrow('checked out in another worktree')
expect((await git(['rev-parse', 'refs/heads/feature'])).stdout.trim()).toBe(expected)
},
90_000
)
})
src/main/hermes/hermes-config-comment-boundaries.test.ts
+1 -1
View File
@@ -3,7 +3,7 @@ import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { describe, expect, it, vi } from 'vitest'
import { parseDocument } from 'yaml'
import { createManagedHookLocalFilesystem } from '../agent-hooks/managed-hook-local-filesystem'
import { createManagedHookLocalFilesystem } from '../agent-hooks/managed-hook-local-filesystem.test-fixture'
import { disablePlugin, enablePlugin, updateConfigContent } from './hermes-config-yaml'
import { HermesHookService } from './hook-service'
src/main/hermes/hermes-config-remote-adapter.test.ts
+1 -1
View File
@@ -13,7 +13,7 @@ import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { afterEach, beforeEach, describe, expect, it } from 'vitest'
import { parse } from 'yaml'
import { createManagedHookLocalFilesystem } from '../agent-hooks/managed-hook-local-filesystem'
import { createManagedHookLocalFilesystem } from '../agent-hooks/managed-hook-local-filesystem.test-fixture'
import { HermesHookService } from './hook-service'
describe('Hermes remote installer through a local filesystem adapter (no SSH)', () => {
src/main/ipc/filesystem-quick-open-options.integration.test.ts
+12 -33
View File
@@ -2,22 +2,17 @@ import { mkdtemp, mkdir, writeFile, symlink, rm } from 'node:fs/promises'
import { writeFileSync } from 'node:fs'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { afterEach, beforeEach, expect, it } from 'vitest'
import { afterEach, expect, it } from 'vitest'
import type { Store } from '../persistence'
import { listQuickOpenFiles } from './filesystem-list-files'
import { listFilesWithRg } from '../../relay/fs-handler-list-files'
import { searchQuickOpenFilePaths } from './filesystem-search-file-paths'
import { bundledRipgrepCommand } from '../ripgrep/bundled-ripgrep-path'
import { configureRelayBundledRipgrep } from '../../relay/relay-bundled-ripgrep'
const fixtures: string[] = []
beforeEach(() => configureRelayBundledRipgrep(bundledRipgrepCommand()))
afterEach(async () => {
configureRelayBundledRipgrep(undefined)
await Promise.all(fixtures.splice(0).map((path) => rm(path, { recursive: true, force: true })))
})
it('honors inherited ignores, opt-in links, cycles, retargets and relay parity in real processes', async () => {
it('honors inherited ignores, opt-in links, cycles, and retargets in real processes', async () => {
const parent = await mkdtemp(join(tmpdir(), 'orca-quick-open-options-'))
fixtures.push(parent)
await mkdir(join(parent, '.git'))
@@ -53,8 +48,6 @@ it('honors inherited ignores, opt-in links, cycles, retargets and relay parity i
undefined,
options
)
const relay = await listFilesWithRg(root, [], options)
expect(local.sort()).toEqual(relay.sort())
expect(local.includes('ignored.txt')).toBe(options.includeIgnored)
expect(local.includes('linked/linked.md')).toBe(options.followSymlinks)
expect(local).not.toContain('cycle/apps/api/.env')
@@ -122,13 +115,6 @@ it('validates recent membership independently of top32, ignores, exclusions and
getSettings: () => ({}),
getFolderWorkspaces: () => []
} as unknown as Store
const top = await listFilesWithRg(root, [], {
searchQuery: 'file',
maxResults: 32,
includeIgnored: false
})
expect(top).toHaveLength(32)
expect(top).not.toContain('src/file059.ts')
const candidates = [
'src/file059.ts',
'deleted.ts',
@@ -148,17 +134,17 @@ it('validates recent membership independently of top32, ignores, exclusions and
undefined,
options
)
const relay = await listFilesWithRg(root, ['excluded'], {
...options,
maxResults: candidates.length
})
expect(local).toEqual(['src/file059.ts'])
expect(relay).toEqual(local)
const broad = await listFilesWithRg(root, ['excluded'], {
...options,
includeIgnored: true,
maxResults: candidates.length
})
const broad = await listQuickOpenFiles(
root,
store,
[join(root, 'excluded')],
undefined,
candidates.length,
undefined,
undefined,
{ ...options, includeIgnored: true }
)
expect(broad.sort()).toEqual(['ignored.ts', 'src/file059.ts'])
await mkdir(join(root, 'large'))
for (let index = 0; index < 20_020; index += 1) {
@@ -180,11 +166,4 @@ it('validates recent membership independently of top32, ignores, exclusions and
includeIgnored: false
})
).toEqual([missing])
expect(
await listFilesWithRg(root, [], {
candidatePaths: [missing],
includeIgnored: false,
maxResults: 1
})
).toEqual([missing])
}, 60_000)
src/main/ipc/worktree-push-target-cleanup.test.ts
-15
View File
@@ -1,5 +1,4 @@
import { describe, expect, it, vi, type Mock } from 'vitest'
import { validateGitExecArgs } from '../../relay/git-exec-validator'
import type { WorktreeMeta } from '../../shared/worktree/meta-types'
import type { GitPushTarget } from '../../shared/worktree/types'
import {
@@ -84,20 +83,6 @@ describe('cleanupUnusedWorktreePushTargetRemoteWithExec', () => {
expect(removeCalls(exec)).toEqual([['remote', 'remove', FORK_REMOTE]])
})
it('sends only argv the relay accepts, so SSH cleanup is not silently skipped', async () => {
const exec = makeExec()
await cleanupUnusedWorktreePushTargetRemoteWithExec(
REPO_PATH,
'repo-1::/wt/a',
forkTarget(),
storeOf({ 'repo-1::/wt/a': forkTarget() }),
exec
)
for (const [args] of exec.mock.calls) {
expect(() => validateGitExecArgs(args)).not.toThrow()
}
})
it('keeps a remote Orca did not create (remoteCreated falsy)', async () => {
const exec = makeExec()
await cleanupUnusedWorktreePushTargetRemoteWithExec(

Some files were not shown because too many files have changed in this diff Show More