Function readTranscriptFromPaths

src/node/orpc/router.ts:4452–4503

(params: {
            workspaceId: string;
            chatPath?: string;
            /** Sealed pre-boundary history (chat-archive.jsonl) for live sessions. */
            chatArchivePath?: string;
            partialPath?: string;
            logLabel: string;
          })

          }

          const readTranscriptFromPaths = async (params: {
            workspaceId: string;
            chatPath?: string;
            /** Sealed pre-boundary history (chat-archive.jsonl) for live sessions. */
            chatArchivePath?: string;
            partialPath?: string;
            logLabel: string;
          }): Promise<MuxMessage[]> => {
            const workspaceSessionDir = context.config.getSessionDir(params.workspaceId);

            // Defense-in-depth: refuse path traversal from a corrupted index file.
            if (params.chatPath && !isPathInsideDir(workspaceSessionDir, params.chatPath)) {
              throw new Error("Refusing to read transcript outside workspace session dir");
            }
            if (
              params.chatArchivePath &&
              !isPathInsideDir(workspaceSessionDir, params.chatArchivePath)
            ) {
              throw new Error("Refusing to read transcript archive outside workspace session dir");
            }
            if (params.partialPath && !isPathInsideDir(workspaceSessionDir, params.partialPath)) {
              throw new Error("Refusing to read partial outside workspace session dir");
            }

            const partial = params.partialPath
              ? await readPartialJsonBestEffort(params.partialPath)
              : null;
            // Live sessions may have rotated sealed history into chat-archive.jsonl
            // (older rows), which precedes chat.jsonl (active epoch).
            const archivedMessages = params.chatArchivePath
              ? await readChatJsonlAllowMissing({
                  chatPath: params.chatArchivePath,
                  logLabel: `${params.logLabel} (archive)`,
                })
              : null;
            const messages = params.chatPath
              ? await readChatJsonlAllowMissing({
                  chatPath: params.chatPath,
                  logLabel: params.logLabel,
                })
              : null;

            // If we only archived partial.json (e.g. interrupted stream), still allow viewing.
            if (!messages && !archivedMessages && !partial) {
              throw new Error(`Transcript not found (missing ${params.logLabel})`);
            }

            return mergePartialIntoHistory(
              [...(archivedMessages ?? []), ...(messages ?? [])],
              partial
            );
          };

          let resolved: {
            workspaceId: string;