← Files Portable ResumeARCHIVED FILE
skills/.portable-resume/runtime/portable_resume/adapters/antigravity.py
47.3 KB · Oct 2, 2026 · 00:33 UTC
"""Fail-closed reader for Antigravity CLI session stores.
Primary lane: ``brain/<id>/.system_generated/logs/transcript.jsonl`` when it
contains records (legacy + live step streams).
CLI product lane (#248): many installs leave ``transcript.jsonl`` as a
zero-byte placeholder. Durable content then lives in:
- ``history.jsonl`` (workspace + user display prompts + conversationId)
- ``brain/<id>/.system_generated/messages/*.json`` (visible agent messages)
The optional ``brain/index.json`` is a bounded discovery hint only: an absent,
private, corrupt, or stale index never fabricates a session and never blocks an
exact ID/path lookup.
"""
from __future__ import annotations
import json
import os
import re
from dataclasses import replace
from datetime import datetime, timedelta, timezone
from typing import Any, Iterable, Mapping
from .base import CapabilityReport, ResolvedRef
from ..bounds import DEFAULT_BOUNDS, ReadBudget
from ..diagnostics import DiagnosticError
from ..model import Query, Session, SessionSummary, Turn
from ..paths import canonical_root, canonicalize_cwd, is_within, require_regular_no_symlinks, same_cwd
from ..sanitize import sanitize_turn_record
from ..snapshot import stable_read_bytes, stable_scan_lines
FORMAT_ID = "antigravity-transcript-jsonl-v1"
INDEX_FORMAT = "antigravity-index-v1"
CLI_MESSAGES_WARNING = "W_CLI_MESSAGES_LANE"
_ID = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]{0,1023}$")
_FILTERED_TYPES = frozenset(
{
"system",
"developer",
"thought",
"thinking",
"reasoning",
"control",
"internal",
"policy",
}
)
_BINARY_TYPES = frozenset({"image", "audio", "video", "attachment", "binary"})
class _DuplicateKey(ValueError):
pass
def _object(pairs: list[tuple[str, Any]]) -> dict[str, Any]:
result: dict[str, Any] = {}
for key, value in pairs:
if key in result:
raise _DuplicateKey(key)
result[key] = value
return result
def _loads(data: bytes, *, index: bool = False) -> Any:
try:
value = json.loads(data.decode("utf-8"), object_pairs_hook=_object)
except (UnicodeDecodeError, json.JSONDecodeError, _DuplicateKey, RecursionError) as error:
raise DiagnosticError("E_UNSUPPORTED_FORMAT" if index else "E_CORRUPT_RECORD", source="antigravity") from error
_bounded_shape(value)
return value
def _bounded_shape(value: Any, depth: int = 0) -> None:
if depth > 32:
raise DiagnosticError.limit_exceeded()
if isinstance(value, Mapping):
if len(value) > 512:
raise DiagnosticError.limit_exceeded()
for item in value.values():
_bounded_shape(item, depth + 1)
elif isinstance(value, list):
if len(value) > DEFAULT_BOUNDS.scanned_records:
raise DiagnosticError.limit_exceeded()
for item in value:
_bounded_shape(item, depth + 1)
def _session_id(value: object) -> str:
if not isinstance(value, str) or _ID.fullmatch(value) is None or value in {".", ".."}:
raise DiagnosticError("E_CORRUPT_RECORD", source="antigravity", provider=FORMAT_ID)
return value
def _rfc3339(value: object) -> str | None:
if not isinstance(value, str):
return None
try:
parsed = datetime.fromisoformat(value.replace("Z", "+00:00"))
except ValueError:
return None
if parsed.tzinfo is None:
return None
return parsed.isoformat(timespec="seconds").replace("+00:00", "Z")
def _epoch_ms_to_rfc3339(value: object) -> str | None:
"""Convert history.jsonl millisecond (or second) timestamps to RFC3339 Z."""
if isinstance(value, bool):
return None
if isinstance(value, (int, float)):
number = float(value)
elif isinstance(value, str) and value.isdigit():
number = float(value)
else:
return None
# History uses millisecond epochs (≈1e12+); seconds stay below that.
if number > 1e12:
number /= 1000.0
try:
return datetime.fromtimestamp(number, timezone.utc).isoformat(timespec="seconds").replace(
"+00:00", "Z"
)
except (OverflowError, OSError, ValueError):
return None
def _min_rfc3339(left: str | None, right: str | None) -> str | None:
if left is None:
return right
if right is None:
return left
return left if left <= right else right
def _max_rfc3339(left: str | None, right: str | None) -> str | None:
if left is None:
return right
if right is None:
return left
return left if left >= right else right
def _eligible(summary: SessionSummary, query: Query) -> bool:
if query.cwd is not None and (summary.cwd is None or not same_cwd(summary.cwd, query.cwd)):
return False
ref = query.ref.strip() if query.ref else None
if ref == summary.session_id:
return True
if ref and os.path.isabs(ref) and summary.source_path is not None:
if canonicalize_cwd(ref) == canonicalize_cwd(summary.source_path):
return True
minutes = query.within_min if query.within_min is not None else DEFAULT_BOUNDS.listing_age_minutes
if minutes is not None and minutes <= 0:
return True
if summary.updated_at is None:
return False
try:
updated = datetime.fromisoformat(summary.updated_at.replace("Z", "+00:00"))
except ValueError:
return False
return updated >= datetime.now(timezone.utc) - timedelta(minutes=minutes)
def _session_from(summary: SessionSummary, turns: Iterable[Turn], warnings: Iterable[str]) -> Session:
values = tuple(turns)
return Session(
source=summary.source,
session_id=summary.session_id,
source_path=summary.source_path,
title=summary.title,
cwd=summary.cwd,
branch=summary.branch,
created_at=summary.created_at,
updated_at=summary.updated_at,
source_repo_root=summary.source_repo_root,
last_user_request=next((turn.content for turn in reversed(values) if turn.role == "user"), None),
last_assistant_action=next((turn.content for turn in reversed(values) if turn.role == "assistant"), None),
turns=values,
warnings=tuple(dict.fromkeys((*summary.warnings, *warnings))),
)
class AntigravityAdapter:
key = "antigravity"
def __init__(self, *, root: str | None = None, read_hook: Any = None):
self._configured_root = root
self._read_hook = read_hook
def _root(self, query: Query, *, required: bool = False) -> str | None:
candidate = query.source_root or self._configured_root or os.path.expanduser("~/.gemini/antigravity-cli")
if not os.path.isdir(candidate):
if required:
raise DiagnosticError("E_CAPABILITY_UNAVAILABLE", source=self.key)
return None
return canonical_root(candidate)
def _brain(self, root: str) -> str:
direct = os.path.join(root, ".system_generated", "logs", "transcript.jsonl")
if os.path.isfile(direct):
return os.path.dirname(root)
brain = root if os.path.basename(root) == "brain" else os.path.join(root, "brain")
if os.path.islink(brain):
raise DiagnosticError.unsafe_path()
return brain
def approved_roots(self, query: Query) -> tuple[str, ...]:
root = self._root(query)
return (root,) if root is not None else ()
def _index_path(self, brain: str) -> str:
return os.path.join(brain, "index.json")
def _read_index(self, brain: str, root: str) -> tuple[list[Mapping[str, Any]] | None, bool]:
path = self._index_path(brain)
if not is_within(path, root) or os.path.islink(path):
return None, True
if not os.path.isfile(path):
return None, True
try:
read = stable_read_bytes(path, root=root, budget=None, hook=self._read_hook)
value = _loads(read.data, index=True)
if not isinstance(value, Mapping) or value.get("format") != INDEX_FORMAT:
return None, True
entries = value.get("conversations")
if not isinstance(entries, list) or not all(isinstance(item, Mapping) for item in entries):
return None, True
return entries, False
except DiagnosticError as error:
# Oversized/corrupt optional index must not block exact-path recovery (#15).
if error.code in {
"E_UNSUPPORTED_FORMAT",
"E_CORRUPT_RECORD",
"E_SOURCE_BUSY",
"E_LIMIT_EXCEEDED",
}:
return None, True
raise
@staticmethod
def _conversation_path(brain: str, session_id: str) -> str:
return os.path.join(brain, session_id, ".system_generated", "logs", "transcript.jsonl")
@staticmethod
def _messages_dir(brain: str, session_id: str) -> str:
return os.path.join(brain, session_id, ".system_generated", "messages")
@staticmethod
def _history_path(root: str) -> str:
return os.path.join(root, "history.jsonl")
def _session_has_messages(self, brain: str, session_id: str, root: str) -> bool:
messages = self._messages_dir(brain, session_id)
if os.path.islink(messages) or not is_within(messages, root) or not os.path.isdir(messages):
return False
try:
with os.scandir(messages) as entries:
for entry in entries:
if entry.is_file(follow_symlinks=False) and entry.name.endswith(".json"):
return True
except OSError:
return False
return False
def _load_history_hints(self, root: str, budget: ReadBudget | None = None) -> dict[str, dict[str, Any]]:
"""Bounded read of CLI history.jsonl → per-session cwd / timestamps / user lines."""
path = self._history_path(root)
if os.path.islink(path) or not is_within(path, root) or not os.path.isfile(path):
return {}
hints: dict[str, dict[str, Any]] = {}
try:
for line in stable_scan_lines(
path,
root=root,
budget=budget,
charge_transcript=False,
hook=self._read_hook,
):
if not line.utf8_valid or not line.text.strip():
continue
try:
value = _loads(line.text.strip().encode("utf-8"), index=True)
except DiagnosticError:
continue
if not isinstance(value, Mapping):
continue
try:
session_id = _session_id(value.get("conversationId"))
except DiagnosticError:
continue
entry = hints.setdefault(
session_id,
{"cwd": None, "created_at": None, "updated_at": None, "user_lines": []},
)
workspace = value.get("workspace")
if isinstance(workspace, str) and workspace.strip():
try:
entry["cwd"] = canonicalize_cwd(workspace)
except DiagnosticError:
pass
stamp = _epoch_ms_to_rfc3339(value.get("timestamp"))
if stamp is not None:
if entry["created_at"] is None or stamp < entry["created_at"]:
entry["created_at"] = stamp
if entry["updated_at"] is None or stamp > entry["updated_at"]:
entry["updated_at"] = stamp
display = value.get("display")
kind = value.get("type")
if (
isinstance(display, str)
and display.strip()
and kind != "slash_command"
and not display.strip().startswith("/")
):
text = display.strip()
# Skip pure continue-nudges; keep substantive prompts for handoff.
if text in {"繼續", "继续", "continue", "Continue", "ok", "OK", "go", "GO"}:
# Still refresh timestamps via stamp above; do not store as a turn.
continue
# Keep a bounded tail of user displays for handoff.
lines: list[tuple[str | None, str]] = entry["user_lines"]
lines.append((stamp, text))
if len(lines) > 64:
entry["user_lines"] = lines[-64:]
entry["truncated"] = True
except DiagnosticError as error:
# Busy/unsafe history is optional enrichment; overflow must fail closed
# so empty-transcript recovery never silently drops every user prompt.
if error.code in {"E_SOURCE_BUSY", "E_UNSAFE_PATH"}:
return hints
raise
return hints
def _scan_brain_transcripts(self, brain: str, root: str) -> list[str]:
"""When index is missing, discover transcript paths under brain/<id>/…
Includes sessions whose transcript exists (even empty) when CLI messages
or a non-empty transcript are present (#248).
"""
if not os.path.isdir(brain) or os.path.islink(brain):
return []
if not is_within(brain, root):
return []
names: list[str] = []
try:
with os.scandir(brain) as entries:
for entry in entries:
if len(names) >= DEFAULT_BOUNDS.scanned_records:
# Returning a lexical prefix would make "latest"
# silently depend on directory order.
raise DiagnosticError.limit_exceeded()
names.append(entry.name)
except DiagnosticError:
raise
except OSError as error:
raise DiagnosticError.source_busy(provider=FORMAT_ID) from error
names.sort()
paths: list[str] = []
for name in names:
if name in {".", "..", "index.json"}:
continue
try:
session_id = _session_id(name)
except DiagnosticError:
continue
path = self._conversation_path(brain, session_id)
if os.path.islink(path) or not is_within(path, root):
continue
if not os.path.isfile(path):
# Messages-only session without transcript placeholder: still admit
# via a synthetic messages marker path handled in _read_transcript.
if self._session_has_messages(brain, session_id, root):
paths.append(path)
continue
# Prefer non-empty transcript; empty file only if messages exist.
try:
size = os.lstat(path).st_size
except OSError:
size = 0
if size > 0 or self._session_has_messages(brain, session_id, root):
paths.append(path)
# Newest transcript first so list/latest is not directory-name order.
def _mtime_key(p: str) -> float:
try:
return -os.lstat(p).st_mtime
except OSError:
# Fall back to messages dir mtime for missing empty placeholders.
sid = os.path.basename(os.path.dirname(os.path.dirname(os.path.dirname(p))))
try:
return -os.lstat(self._messages_dir(brain, sid)).st_mtime
except OSError:
return 0.0
paths.sort(key=lambda p: (_mtime_key(p), p))
return paths
def _direct_transcript(self, root: str, brain: str, query: Query) -> str | None:
direct_root = os.path.join(root, ".system_generated", "logs", "transcript.jsonl")
if os.path.isfile(direct_root):
return direct_root
ref = query.ref
if not ref:
return None
if os.path.isabs(ref):
path = ref
if os.path.isdir(path) and not os.path.islink(path):
path = os.path.join(path, ".system_generated", "logs", "transcript.jsonl")
if os.path.basename(path) != "transcript.jsonl":
return None
try:
safe, _ = require_regular_no_symlinks(path, root)
except DiagnosticError as error:
if error.code == "E_UNSAFE_PATH":
raise
return None
return safe
if _ID.fullmatch(ref) is None or ref in {"latest", ".", ".."}:
return None
path = self._conversation_path(brain, ref)
if os.path.isfile(path):
return path
# Exact id may only have messages lane (#248).
if self._session_has_messages(brain, ref, root):
return path
return None
def probe(self, query: Query) -> CapabilityReport:
root = self._root(query)
if root is None:
return CapabilityReport(self.key, None, "unavailable")
brain = self._brain(root)
entries, stale = self._read_index(brain, root)
evidence: list[str] = []
valid = 0
if entries is not None:
for entry in entries[: DEFAULT_BOUNDS.scanned_records]:
try:
session_id = _session_id(entry.get("id"))
except DiagnosticError:
stale = True
continue
if os.path.isfile(self._conversation_path(brain, session_id)):
valid += 1
else:
stale = True
if valid:
evidence.append("brain:index+transcript")
direct = self._direct_transcript(root, brain, query)
if direct is not None:
valid += 1
evidence.append("brain:exact-transcript")
history_path = self._history_path(root)
if os.path.isfile(history_path) and not os.path.islink(history_path):
evidence.append("cli:history.jsonl")
valid += 1
if os.path.isdir(brain) and not valid:
# Cheap existence probe for CLI messages lane without full scan.
try:
with os.scandir(brain) as entries:
for entry in list(entries)[: DEFAULT_BOUNDS.scanned_records]:
if entry.is_dir(follow_symlinks=False) and self._session_has_messages(
brain, entry.name, root
):
valid += 1
evidence.append("cli:messages")
break
except OSError:
pass
if not valid:
if os.path.isdir(brain):
return CapabilityReport(
self.key,
FORMAT_ID,
"partial",
root=root,
evidence=("brain:index-unavailable",),
warnings=("W_STALE_INDEX",),
)
return CapabilityReport(self.key, FORMAT_ID, "unsupported", root=root)
return CapabilityReport(
self.key,
FORMAT_ID,
"partial" if stale else "supported",
root=root,
evidence=tuple(dict.fromkeys(evidence)),
warnings=("W_STALE_INDEX",) if stale else (),
)
def list(self, query: Query, budget: ReadBudget) -> list[SessionSummary]:
root = self._root(query, required=True)
assert root is not None
brain = self._brain(root)
entries, stale = self._read_index(brain, root)
candidates: list[tuple[str, Mapping[str, Any] | None]] = []
if entries is not None:
if len(entries) > DEFAULT_BOUNDS.scanned_records:
raise DiagnosticError.limit_exceeded()
for entry in entries:
try:
session_id = _session_id(entry.get("id"))
except DiagnosticError:
stale = True
continue
path = self._conversation_path(brain, session_id)
if not os.path.isfile(path):
stale = True
continue
candidates.append((path, entry))
# Newest transcript first (index order is not authoritative for latest).
def _cand_mtime(item: tuple[str, Mapping[str, Any] | None]) -> float:
try:
return -os.lstat(item[0]).st_mtime
except OSError:
return 0.0
candidates.sort(key=lambda item: (_cand_mtime(item), item[0]))
elif not query.ref:
# No valid index: bounded directory discovery (Grok/Codex-style).
for path in self._scan_brain_transcripts(brain, root):
candidates.append((path, None))
direct = self._direct_transcript(root, brain, query)
if direct is not None and all(path != direct for path, _ in candidates):
candidates.append((direct, None))
output: list[SessionSummary] = []
scan_mode = entries is None and not query.ref
# History is optional enrichment for non-empty transcripts, but required
# for empty-transcript CLI recovery. Load once and reuse (no double charge).
# Overflow: fail closed only when some candidate needs the CLI fallback;
# otherwise keep listing authoritative non-empty transcripts (Codex P1).
needs_history = False
for cand_path, _cand_hint in candidates:
try:
if (not os.path.isfile(cand_path)) or os.lstat(cand_path).st_size == 0:
needs_history = True
break
except OSError:
needs_history = True
break
history_hints: dict[str, dict[str, Any]] = {}
try:
history_hints = self._load_history_hints(root, budget)
except DiagnosticError as error:
if error.code == "E_LIMIT_EXCEEDED" and not needs_history:
history_hints = {}
else:
raise
for path, hint in candidates:
try:
summary, _, warnings = self._read_transcript(
path,
root,
query,
budget,
include_turns=False,
hint=hint,
history_hints=history_hints,
)
except DiagnosticError as error:
# Live AGY transcripts may use a different schema; skip only when
# directory-scanning without a trusted index entry.
if scan_mode and error.code in {
"E_UNSUPPORTED_FORMAT",
"E_CORRUPT_RECORD",
"E_UNSAFE_PATH",
"E_LIMIT_EXCEEDED",
}:
continue
raise
hist = history_hints.get(summary.session_id)
merged = list(summary.warnings)
merged.extend(warnings)
if stale:
merged.append("W_STALE_INDEX")
cwd = summary.cwd
created_at = summary.created_at
updated_at = summary.updated_at
if hist is not None:
if cwd is None and isinstance(hist.get("cwd"), str):
cwd = hist["cwd"]
created_at = _min_rfc3339(created_at, hist.get("created_at"))
# Prefer the later of transcript/messages vs history activity.
updated_at = _max_rfc3339(updated_at, hist.get("updated_at"))
summary = SessionSummary(
source=summary.source,
session_id=summary.session_id,
source_path=summary.source_path,
title=summary.title,
cwd=cwd,
branch=summary.branch,
created_at=created_at,
updated_at=updated_at,
source_repo_root=summary.source_repo_root,
provider=summary.provider,
warnings=tuple(dict.fromkeys(merged)),
)
if _eligible(summary, query):
output.append(summary)
return output
def show(self, ref: ResolvedRef, query: Query, budget: ReadBudget) -> Session:
root = self._root(query, required=True)
assert root is not None
if ref.provider != FORMAT_ID:
raise DiagnosticError("E_UNSUPPORTED_FORMAT", source=self.key, provider=ref.provider)
if ref.source_path is None or not is_within(ref.source_path, root):
raise DiagnosticError.unsafe_path()
# Exact safe transcript path is authoritative (#15). Optional index is
# best-effort hint enrichment only — never required for show.
brain = self._brain(root)
hint: Mapping[str, Any] | None = None
stale = False
try:
entries, index_stale = self._read_index(brain, root)
stale = index_stale
if entries is not None:
for entry in entries:
if entry.get("id") != ref.session_id:
continue
if hint is not None:
stale = True
continue
expected = self._conversation_path(brain, ref.session_id)
if canonicalize_cwd(expected) == canonicalize_cwd(ref.source_path):
hint = entry
else:
stale = True
except DiagnosticError as error:
if error.code in {
"E_UNSUPPORTED_FORMAT",
"E_CORRUPT_RECORD",
"E_SOURCE_BUSY",
"E_LIMIT_EXCEEDED",
"E_UNSAFE_PATH",
}:
stale = True
else:
raise
summary, turns, warnings = self._read_transcript(
ref.source_path,
root,
query,
budget,
include_turns=True,
hint=hint,
history_hints=None,
)
if summary.session_id != ref.session_id:
raise DiagnosticError("E_CORRUPT_RECORD", source=self.key, provider=FORMAT_ID)
if stale:
warnings.append("W_STALE_INDEX")
return _session_from(summary, turns, warnings)
def _read_transcript(
self,
path: str,
root: str,
query: Query,
budget: ReadBudget,
*,
include_turns: bool,
hint: Mapping[str, Any] | None,
history_hints: Mapping[str, Mapping[str, Any]] | None = None,
) -> tuple[SessionSummary, list[Turn], list[str]]:
# Stream-reduce via stable_scan_lines; do not retain every outer record (#15).
# List path (include_turns=False) stops after session header and uses mtime.
warnings: list[str] = []
# transcript.jsonl -> logs -> .system_generated -> <conversation-id>
# Also accept messages-dir paths for messages-only sessions (#248).
if os.path.basename(path) == "messages" or path.replace("\\", "/").endswith(
"/.system_generated/messages"
):
path_id = os.path.basename(os.path.dirname(os.path.dirname(path)))
path_id = _session_id(path_id)
return self._read_cli_messages_lane(
path_id,
path,
root,
query,
budget,
include_turns=include_turns,
hint=hint,
prior_warnings=warnings,
history_hints=history_hints,
)
path_id = os.path.basename(os.path.dirname(os.path.dirname(os.path.dirname(path))))
path_id = _session_id(path_id)
# Missing or zero-byte transcript → CLI messages/history lane before scan.
try:
size = os.lstat(path).st_size if os.path.lexists(path) else 0
missing = not os.path.isfile(path)
except OSError:
size = 0
missing = True
if missing or size == 0:
return self._read_cli_messages_lane(
path_id,
path,
root,
query,
budget,
include_turns=include_turns,
hint=hint,
prior_warnings=warnings,
history_hints=history_hints,
)
header: Mapping[str, Any] | None = None
turns: list[Turn] = []
created_values: list[str] = []
updated_values: list[str] = []
live_stream = False
saw_record = False
for line in stable_scan_lines(
path,
root=root,
budget=budget,
charge_transcript=True,
hook=self._read_hook,
):
if not line.utf8_valid:
if not line.terminated:
warnings.append("W_PARTIAL_TAIL")
break
raise DiagnosticError("E_CORRUPT_RECORD", source=self.key, provider=FORMAT_ID)
raw = line.text.strip()
if not raw:
continue
try:
value = _loads(raw.encode("utf-8"))
except DiagnosticError:
if not line.terminated:
warnings.append("W_PARTIAL_TAIL")
continue
raise
if not isinstance(value, Mapping):
raise DiagnosticError("E_CORRUPT_RECORD", source=self.key, provider=FORMAT_ID)
saw_record = True
record = value
kind = record.get("type")
if not isinstance(kind, str):
raise DiagnosticError("E_UNSUPPORTED_FORMAT", source=self.key, provider=FORMAT_ID)
raw_kind = kind
kind = kind.casefold()
timestamp = _rfc3339(record.get("timestamp")) or _rfc3339(record.get("created_at"))
if timestamp is not None:
created_values.append(timestamp)
updated_values.append(timestamp)
if kind == "session":
if header is not None:
raise DiagnosticError("E_CORRUPT_RECORD", source=self.key, provider=FORMAT_ID)
if _session_id(record.get("conversation_id")) != path_id:
raise DiagnosticError("E_CORRUPT_RECORD", source=self.key, provider=FORMAT_ID)
header = record
if not include_turns:
# List metadata: header + file mtime is enough (#15).
break
continue
# Live AGY step stream (uppercase USER_INPUT / PLANNER_RESPONSE / tools).
if kind == "user_input":
live_stream = True
content = record.get("content")
if not isinstance(content, str):
continue
if include_turns:
self._append_turn(
turns,
{"role": "user", "content": content, "timestamp": timestamp},
query,
budget,
warnings,
)
continue
if kind == "planner_response":
live_stream = True
content = record.get("content")
text = content if isinstance(content, str) else ""
if not text:
tools = record.get("tool_calls")
if isinstance(tools, list) and tools:
names = []
for tool in tools[:8]:
if isinstance(tool, Mapping) and isinstance(tool.get("name"), str):
names.append(tool["name"])
elif isinstance(tool, Mapping) and isinstance(tool.get("tool"), str):
names.append(tool["tool"])
text = f"planned inert foreign tool(s): {', '.join(names)}" if names else ""
if text and include_turns:
self._append_turn(
turns,
{"role": "assistant", "content": text, "timestamp": timestamp},
query,
budget,
warnings,
)
continue
if kind in {
"system_message",
"checkpoint",
"error_message",
"generic",
}:
live_stream = True
continue
if kind in {
"view_file",
"list_directory",
"grep_search",
"code_action",
"run_command",
"invoke_subagent",
}:
live_stream = True
content = record.get("content")
if include_turns and isinstance(content, str) and content.strip():
self._append_turn(
turns,
{
"role": "tool",
"content": content,
"tool_name": raw_kind,
"timestamp": timestamp,
},
query,
budget,
warnings,
)
continue
if kind in _FILTERED_TYPES:
continue
if kind in _BINARY_TYPES:
warnings.append("W_BINARY_OMITTED")
continue
if kind == "message":
role = record.get("role")
content = record.get("content")
if not isinstance(role, str) or role.casefold() not in {"user", "assistant", "system", "thought", "control"}:
raise DiagnosticError("E_UNSUPPORTED_FORMAT", source=self.key, provider=FORMAT_ID)
if role.casefold() in {"system", "thought", "control"}:
continue
if not isinstance(content, str):
raise DiagnosticError("E_CORRUPT_RECORD", source=self.key, provider=FORMAT_ID)
if include_turns:
self._append_turn(
turns,
{"role": role.casefold(), "content": content, "timestamp": timestamp},
query,
budget,
warnings,
)
continue
if kind == "tool":
output = record.get("output")
if not isinstance(output, str):
if output is None:
warnings.append("W_MISSING_BLOB")
continue
raise DiagnosticError("E_CORRUPT_RECORD", source=self.key, provider=FORMAT_ID)
if include_turns:
self._append_turn(
turns,
{
"role": "tool",
"content": output,
"tool_name": record.get("name") if isinstance(record.get("name"), str) else None,
"timestamp": timestamp,
},
query,
budget,
warnings,
)
continue
if live_stream:
# Unknown live step types: skip without failing the whole transcript.
continue
if any(key in record for key in ("role", "content", "message", "prompt", "output")):
raise DiagnosticError("E_UNSUPPORTED_FORMAT", source=self.key, provider=FORMAT_ID)
warnings.append("W_BROKEN_CHAIN")
if not saw_record:
# Empty/placeholder transcript.jsonl — try CLI history + messages (#248).
return self._read_cli_messages_lane(
path_id,
path,
root,
query,
budget,
include_turns=include_turns,
hint=hint,
prior_warnings=warnings,
history_hints=history_hints,
)
header_id = path_id
cwd: str | None = None
title: str | None = None
created_at: str | None = min(created_values) if created_values else None
updated_at: str | None = max(updated_values) if updated_values else None
# List metadata stops at the session header: never treat header created_at
# as freshness. Prefer transcript mtime so age filters / latest stay honest (#15).
if not include_turns or updated_at is None:
try:
mtime = os.lstat(path).st_mtime
stamp = datetime.fromtimestamp(mtime, timezone.utc).isoformat(
timespec="microseconds"
).replace("+00:00", "Z")
except OSError:
stamp = None
if stamp is not None:
if not include_turns or updated_at is None:
updated_at = stamp
if created_at is None:
created_at = stamp
if header is not None:
raw_cwd = header.get("cwd")
if isinstance(raw_cwd, str):
cwd = canonicalize_cwd(raw_cwd)
elif raw_cwd is not None:
raise DiagnosticError("E_CORRUPT_RECORD", source=self.key, provider=FORMAT_ID)
title = header.get("title") if isinstance(header.get("title"), str) else None
created_at = _rfc3339(header.get("created_at")) or created_at
# List mode: transcript mtime stays authoritative for freshness (#15).
if include_turns:
updated_at = _rfc3339(header.get("updated_at")) or updated_at
elif live_stream:
# Live streams lack a session header; path id is authoritative.
header = {"conversation_id": path_id}
if query.cwd:
try:
cwd = canonicalize_cwd(query.cwd)
except DiagnosticError:
cwd = None
title = f"antigravity:{path_id[:8]}"
if hint is not None:
if hint.get("id") != path_id:
warnings.append("W_STALE_INDEX")
if cwd is None and isinstance(hint.get("cwd"), str):
cwd = canonicalize_cwd(hint["cwd"])
elif cwd is not None and isinstance(hint.get("cwd"), str) and not same_cwd(cwd, hint["cwd"]):
warnings.append("W_STALE_INDEX")
if title is None and isinstance(hint.get("title"), str):
title = hint["title"]
created_at = created_at or _rfc3339(hint.get("created_at"))
if include_turns:
updated_at = updated_at or _rfc3339(hint.get("updated_at"))
if cwd is None:
warnings.append("W_STALE_INDEX")
summary = SessionSummary(
source=self.key,
session_id=header_id,
source_path=path,
title=title,
cwd=cwd,
created_at=created_at,
updated_at=updated_at,
provider=FORMAT_ID,
warnings=tuple(dict.fromkeys(warnings)),
)
return summary, turns, warnings
def _read_cli_messages_lane(
self,
session_id: str,
transcript_path: str,
root: str,
query: Query,
budget: ReadBudget,
*,
include_turns: bool,
hint: Mapping[str, Any] | None,
prior_warnings: list[str],
history_hints: Mapping[str, Mapping[str, Any]] | None = None,
) -> tuple[SessionSummary, list[Turn], list[str]]:
"""Recover session from history.jsonl + brain/*/messages when transcript is empty."""
warnings = list(prior_warnings)
warnings.append(CLI_MESSAGES_WARNING)
brain = self._brain(root)
messages_dir = self._messages_dir(brain, session_id)
has_messages = self._session_has_messages(brain, session_id, root)
# Prefer caller-supplied hints (list already scanned history once).
if history_hints is not None:
history = dict(history_hints.get(session_id) or {})
else:
history = dict(self._load_history_hints(root, budget).get(session_id) or {})
if history.pop("truncated", None):
warnings.append("W_TRUNCATED")
if not has_messages and not history:
raise DiagnosticError("E_UNSUPPORTED_FORMAT", source=self.key, provider=FORMAT_ID)
turns: list[Turn] = []
cwd: str | None = history.get("cwd") if isinstance(history.get("cwd"), str) else None
created_at: str | None = history.get("created_at")
updated_at: str | None = history.get("updated_at")
title: str | None = f"antigravity:{session_id[:8]}"
if include_turns:
# Collect history prompts + message-lane assistants, then order by
# persisted timestamps before assigning ordinals (Codex P1 #249).
pending: list[tuple[str, int, str, str | None, str]] = []
# sort key: (stamp or "", role_rank, source_order, role, content)
order = 0
for stamp, display in history.get("user_lines") or []:
pending.append((stamp or "", 0, f"{order:08d}", "user", display))
order += 1
created_at = _min_rfc3339(created_at, stamp)
updated_at = _max_rfc3339(updated_at, stamp)
if has_messages:
names: list[str] = []
try:
with os.scandir(messages_dir) as entries:
for entry in entries:
if len(names) >= DEFAULT_BOUNDS.scanned_records:
raise DiagnosticError.limit_exceeded()
if entry.is_file(follow_symlinks=False) and entry.name.endswith(".json"):
names.append(entry.name)
except DiagnosticError:
raise
except OSError as error:
raise DiagnosticError.source_busy(provider=FORMAT_ID) from error
def _msg_sort_key(name: str) -> tuple[float, str]:
path = os.path.join(messages_dir, name)
try:
return (os.lstat(path).st_mtime, name)
except OSError:
return (0.0, name)
for name in sorted(names, key=_msg_sort_key):
path = os.path.join(messages_dir, name)
if os.path.islink(path) or not is_within(path, root):
continue
try:
read = stable_read_bytes(path, root=root, budget=budget, hook=self._read_hook)
record = _loads(read.data)
except DiagnosticError as error:
if error.code in {
"E_UNSUPPORTED_FORMAT",
"E_CORRUPT_RECORD",
"E_LIMIT_EXCEEDED",
"E_SOURCE_BUSY",
}:
warnings.append("W_BROKEN_CHAIN")
continue
raise
if not isinstance(record, Mapping):
warnings.append("W_BROKEN_CHAIN")
continue
if record.get("hideFromUser") is True:
continue
content = record.get("content")
if not isinstance(content, str) or not content.strip():
continue
stamp = _rfc3339(record.get("timestamp"))
created_at = _min_rfc3339(created_at, stamp)
updated_at = _max_rfc3339(updated_at, stamp)
details = record.get("renderDetails")
if isinstance(details, Mapping) and isinstance(details.get("messageTitle"), str):
msg_title = details["messageTitle"].strip()
if msg_title and not msg_title.lower().startswith("wait for"):
content = f"{msg_title}\n\n{content}"
pending.append((stamp or "", 1, f"{order:08d}", "assistant", content))
order += 1
pending.sort(key=lambda item: (item[0], item[1], item[2]))
for stamp, _role_rank, _order, role, content in pending:
self._append_turn(
turns,
{"role": role, "content": content, "timestamp": stamp or None},
query,
budget,
warnings,
)
if not include_turns:
# Freshness: max(history activity, messages-dir mtime). Never drop a
# later messages lane when history already set updated_at.
try:
if has_messages:
mtime = os.lstat(messages_dir).st_mtime
stamp = datetime.fromtimestamp(mtime, timezone.utc).isoformat(
timespec="microseconds"
).replace("+00:00", "Z")
updated_at = _max_rfc3339(updated_at, stamp)
created_at = _min_rfc3339(created_at, stamp)
elif updated_at is None or created_at is None:
mtime = os.lstat(self._history_path(root)).st_mtime
stamp = datetime.fromtimestamp(mtime, timezone.utc).isoformat(
timespec="microseconds"
).replace("+00:00", "Z")
updated_at = _max_rfc3339(updated_at, stamp)
created_at = _min_rfc3339(created_at, stamp)
except OSError:
pass
if hint is not None:
if hint.get("id") != session_id:
warnings.append("W_STALE_INDEX")
if cwd is None and isinstance(hint.get("cwd"), str):
try:
cwd = canonicalize_cwd(hint["cwd"])
except DiagnosticError:
pass
if title is None and isinstance(hint.get("title"), str):
title = hint["title"]
if cwd is None:
warnings.append("W_STALE_INDEX")
if query.cwd:
try:
cwd = canonicalize_cwd(query.cwd)
except DiagnosticError:
pass
# Keep source_path as the transcript path when present so path-based show works;
# empty files still resolve via this fallback.
source_path = transcript_path if os.path.isfile(transcript_path) else messages_dir
summary = SessionSummary(
source=self.key,
session_id=session_id,
source_path=source_path,
title=title,
cwd=cwd,
created_at=created_at,
updated_at=updated_at,
provider=FORMAT_ID,
warnings=tuple(dict.fromkeys(warnings)),
)
return summary, turns, warnings
@staticmethod
def _append_turn(
turns: list[Turn],
record: Mapping[str, Any],
query: Query,
budget: ReadBudget,
warnings: list[str],
) -> None:
bounds = replace(DEFAULT_BOUNDS, tool_output_chars=query.max_tool_chars)
turn, found = sanitize_turn_record(record, ordinal=len(turns), bounds=bounds)
warnings.extend(found)
if turn is not None:
budget.consume_turns()
turns.append(turn)
ADAPTER = AntigravityAdapter()
def get_adapter() -> AntigravityAdapter:
return ADAPTER
SHA-256: 642305c8da9531e69b4e17f4f4b7323ffbde58ebdd392d48daf0086ce9b97071