`GET /api/session?limit=5000` 500s (`err_de187102`) when a session path contains a URL

[johnbubak]

Description

Description

GET /api/session?limit=5000&order=desc crashes with HTTP 500 (err_de187102), leaving the web UI session list completely empty.

Interestingly, limit=1000 returns 200 OK.

Log output (~/.local/share/opencode/log/opencode.log):

EffectDrizzleQueryError: Failed query: select ... from "session" order by "session"."time_created" desc, "session"."id" desc limit ?
params: 5000 (cause: Cause([Fail(Error: Path is not absolute: http://localhost:3333/L2hvbWUvamFuL3Byb2plY3RzL2hpcHBvY2FjdHVz/session/ses_13416c6c1ffeuwjo0B1mxirCjT)]))

Cause

An older session row in SQLite had a client URL stored in path/directory instead of a local filesystem path (likely from an old web copy-paste/fork action).

Because queries are ordered time_created DESC:

• limit=1000 never touched that older row -> returned 200.
• limit=5000 reached the corrupt row -> Drizzle isAbsolute(path) check failed -> crashed the whole query.

Suggested fix

Catch/ignore isAbsolute failures during session list hydration instead of blowing up the entire query for a single bad row.

Workaround for affected users

# Find bad entries:
sqlite3 ~/.local/share/opencode/opencode.db "SELECT id, path FROM session WHERE path LIKE 'http%';"

# Fix path (decode base64 part of the URL):
sqlite3 ~/.local/share/opencode/opencode.db "UPDATE session SET path='/path/to/project', directory='/path/to/project' WHERE id='<session_id>';"

Plugins

No response

OpenCode version

No response

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

Linux CachyOS

Terminal

COSMIC Terminal

[argszero]

I'd like to work on this.

Confirmed the failure path before claiming:

• packages/core/src/database/path.ts — directoryColumn.fromDriver (used by session.directory, see packages/core/src/session/sql.ts:33) calls the local absolute() helper, which throws Path is not absolute: <value> for any stored value that is neither absolute nor a Windows storage path.
• Because that happens during row decoding, one legacy row whose directory holds a client URL (e.g. http://localhost:3333/L2hvbWUv..., left by an old web fork/copy action) fails the whole select ... from "session" order by "time_created" desc ... limit ? statement, so limit=5000 500s while limit=1000 never reaches the row — exactly the behaviour and log you posted.

The same file already carves out an exception for legacy data (directoryColumn keeps an empty directory readable while still validating every real value), so I plan to follow that precedent rather than introduce a new policy: keep the write side (toDriver) strict, tolerate a non-absolute stored value on read instead of aborting the entire query, and add a regression test that lists sessions while a corrupt row is present.

I'll open a PR against dev once I have the test passing.

[argszero]

Opened #50511 for this. The stored value is no longer validated on read — Drizzle decodes row by row, so one such value aborted the whole select ... from "session" order by "time_created" desc limit ?, which is why limit=1000 returned 200 while limit=5000 returned 500.

The write path is unchanged and still rejects a non-path directory, so a value like this cannot be stored again. Verified with packages/core/test/session-list.test.ts: with packages/core/src/database/path.ts reverted, the list case fails with the reported EffectDrizzleQueryError; with the fix, packages/core is 1100 pass / 0 fail.