@agent-native/core 0.93.0 → 0.94.1

package/dist/application-state/store.d.ts

@@ -1,5 +1,11 @@
 import type { StoreWriteOptions } from "../settings/store.js";
 export declare function appStateGet(sessionId: string, key: string): Promise<Record<string, unknown> | null>;
+/**
+ * Read several application-state keys for one session in a single SQL query.
+ * Missing keys are returned as `null` so callers can preserve the requested
+ * shape without issuing one fallback query per key.
+ */
+export declare function appStateGetMany(sessionId: string, keys: readonly string[]): Promise<Record<string, Record<string, unknown> | null>>;
 export declare function appStatePut(sessionId: string, key: string, value: Record<string, unknown>, options?: StoreWriteOptions): Promise<void>;
 export declare function appStateDelete(sessionId: string, key: string, options?: StoreWriteOptions): Promise<boolean>;
 export declare function appStateList(sessionId: string, keyPrefix: string): Promise<Array<{

package/dist/application-state/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/application-state/store.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAyF9D,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAgBzC;AAED,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC,CAWjE;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAsBjB"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/application-state/store.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAyF9D,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAgBzC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAsBzD;AAED,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC,CAWjE;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAsBjB"}

package/dist/application-state/store.js

@@ -98,6 +98,37 @@ export async function appStateGet(sessionId, key) {
         throw err;
     }
 }
+/**
+ * Read several application-state keys for one session in a single SQL query.
+ * Missing keys are returned as `null` so callers can preserve the requested
+ * shape without issuing one fallback query per key.
+ */
+export async function appStateGetMany(sessionId, keys) {
+    const uniqueKeys = [...new Set(keys)];
+    const values = {};
+    for (const key of uniqueKeys)
+        values[key] = null;
+    if (uniqueKeys.length === 0)
+        return values;
+    try {
+        await ensureTable();
+        const client = getDbExec();
+        const placeholders = uniqueKeys.map(() => "?").join(", ");
+        const { rows } = await client.execute({
+            sql: `SELECT key, value FROM application_state WHERE session_id = ? AND key IN (${placeholders})`,
+            args: [sessionId, ...uniqueKeys],
+        });
+        for (const row of rows) {
+            values[row.key] = JSON.parse(row.value);
+        }
+        return values;
+    }
+    catch (err) {
+        if (isConnectionError(err))
+            return values;
+        throw err;
+    }
+}
 export async function appStatePut(sessionId, key, value, options) {
     await ensureTable();
     const client = getDbExec();

package/dist/application-state/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/application-state/store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,OAAO,GACR,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEtE,IAAI,YAAuC,CAAC;AAC5C,MAAM,gCAAgC,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,qEAAqE;AACrE,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG;;;;;uBAKD,OAAO,EAAE;;;OAGzB,CAAC;YAEF,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,mEAAmE;gBACnE,kEAAkE;gBAClE,6DAA6D;gBAC7D,kEAAkE;gBAClE,uEAAuE;gBACvE,oEAAoE;gBACpE,uEAAuE;gBACvE,uEAAuE;gBACvE,wEAAwE;gBACxE,uEAAuE;gBACvE,8CAA8C;gBAC9C,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;gBACxD,0EAA0E;gBAC1E,0EAA0E;gBAC1E,mEAAmE;gBACnE,MAAM,uBAAuB,CAAC,mBAAmB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;gBACnE,uEAAuE;gBACvE,gEAAgE;gBAChE,MAAM,iBAAiB,CACrB,0BAA0B,EAC1B,uFAAuF,CACxF,CAAC;gBACF,MAAM,iBAAiB,CACrB,2BAA2B,EAC3B,6FAA6F,CAC9F,CAAC;gBACF,OAAO;YACT,CAAC;YAED,qEAAqE;YACrE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,0EAA0E;YAC1E,0EAA0E;YAC1E,mEAAmE;YACnE,MAAM,uBAAuB,CAAC,mBAAmB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YACnE,sCAAsC;YACtC,wEAAwE;YACxE,yEAAyE;YACzE,qEAAqE;YACrE,qEAAqE;YACrE,oDAAoD;YACpD,KAAK,MAAM,GAAG,IAAI;gBAChB,uFAAuF;gBACvF,6FAA6F;aAC9F,EAAE,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,sDAAsD;YACtD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,sEAAsE;YAC3E,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,GAAW,EACX,KAA8B,EAC9B,OAA2B;IAE3B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,IACE,CAAC,eAAe,EAAE;QAClB,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,gCAAgC,EACxE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,4HAA4H,CAC5J,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC,yLAAyL;YAC3L,CAAC,CAAC,mGAAmG;QACvG,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;KAC/C,CAAC,CAAC;IACH,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,GAAW,EACX,OAA2B;IAE3B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,gEAAgE;QACrE,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO;QAAE,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,SAAiB;IAEjB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,yFAAyF;QAC9F,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,EAAE,GAAG,CAAC,GAAa;QACtB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAe,CAAC;KACvC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,SAAiB,EACjB,OAA2B;IAE3B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,uCAAuC;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,kFAAkF;QACvF,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;KAC/C,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,8EAA8E;QACnF,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;KAC/C,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,kBAAkB,CAAC,GAAG,CAAC,GAAa,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC","sourcesContent":["import {\n  getDbExec,\n  isLocalDatabase,\n  isConnectionError,\n  isPostgres,\n  intType,\n} from \"../db/client.js\";\nimport { ensureIndexExists, ensureTableExists } from \"../db/ddl-guard.js\";\nimport { widenIntColumnsToBigInt } from \"../db/widen-columns.js\";\nimport type { StoreWriteOptions } from \"../settings/store.js\";\nimport { emitAppStateChange, emitAppStateDelete } from \"./emitter.js\";\n\nlet _initPromise: Promise<void> | undefined;\nconst MAX_HOSTED_APP_STATE_VALUE_BYTES = 1024 * 1024;\n\n// Escapes LIKE wildcards (`%`, `_`) and the escape char itself so a caller's\n// literal prefix is matched verbatim. Used with `ESCAPE '!'` in prefix queries\n// below; without this, a prefix such as `user_settings` would treat `_` as a\n// single-char wildcard and over-match (e.g. delete `userXsettings`).\nfunction escapeLike(s: string): string {\n  return s.replace(/[!%_]/g, (match) => `!${match}`);\n}\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      const createSql = `\n        CREATE TABLE IF NOT EXISTS application_state (\n          session_id TEXT NOT NULL,\n          key TEXT NOT NULL,\n          value TEXT NOT NULL,\n          updated_at ${intType()} NOT NULL,\n          PRIMARY KEY (session_id, key)\n        )\n      `;\n\n      if (isPostgres()) {\n        // Hot path: the `application_state` table and its poll indexes are\n        // virtually always already present in production. Issuing `CREATE\n        // TABLE`/ `CREATE INDEX` still takes a lock that, in a fresh\n        // background-worker process behind a concurrent connection on the\n        // shared Neon DB, can block ~indefinitely (ACCESS EXCLUSIVE for CREATE\n        // TABLE; a write-blocking SHARE lock for CREATE INDEX). The ensure*\n        // wrappers probe `information_schema`/`pg_indexes` first (plain reads,\n        // no lock) and run DDL ONLY for what is actually missing, bounded by a\n        // transaction-scoped `lock_timeout`. If a swallowed lock-timeout leaves\n        // the schema still missing they RE-PROBE and THROW rather than letting\n        // init memoize success against absent schema.\n        await ensureTableExists(\"application_state\", createSql);\n        // Older deployments created `updated_at` as 32-bit `INTEGER`; on Postgres\n        // the `Date.now()` written by appStatePut() on every turn overflows int4.\n        // Widen it in place (no-op once done / on fresh BIGINT databases).\n        await widenIntColumnsToBigInt(\"application_state\", [\"updated_at\"]);\n        // Indexes for the two hot poll paths. Probe pg_indexes first (no lock)\n        // and skip the SHARE-locking CREATE INDEX when already present.\n        await ensureIndexExists(\n          \"app_state_updated_at_idx\",\n          `CREATE INDEX IF NOT EXISTS app_state_updated_at_idx ON application_state (updated_at)`,\n        );\n        await ensureIndexExists(\n          \"app_state_key_updated_idx\",\n          `CREATE INDEX IF NOT EXISTS app_state_key_updated_idx ON application_state (key, updated_at)`,\n        );\n        return;\n      }\n\n      // SQLite (local dev): no lock problem — keep the original behaviour.\n      await client.execute(createSql);\n      // Older deployments created `updated_at` as 32-bit `INTEGER`; on Postgres\n      // the `Date.now()` written by appStatePut() on every turn overflows int4.\n      // Widen it in place (no-op once done / on fresh BIGINT databases).\n      await widenIntColumnsToBigInt(\"application_state\", [\"updated_at\"]);\n      // Indexes for the two hot poll paths:\n      //  - `SELECT … WHERE updated_at > ?` (watermark scan, every poll cycle)\n      //  - `SELECT … WHERE key = ? … ORDER BY updated_at ASC` (marker lookups)\n      // Both are dialect-agnostic (no DESC/partial/PG-only syntax) so they\n      // apply identically on SQLite and Postgres. IF NOT EXISTS makes them\n      // idempotent across restarts on existing databases.\n      for (const ddl of [\n        `CREATE INDEX IF NOT EXISTS app_state_updated_at_idx ON application_state (updated_at)`,\n        `CREATE INDEX IF NOT EXISTS app_state_key_updated_idx ON application_state (key, updated_at)`,\n      ]) {\n        try {\n          await client.execute(ddl);\n        } catch {\n          // Index already exists or the dialect rejected a duplicate.\n        }\n      }\n    })().catch((err) => {\n      // Retry init on the next call after a failed startup.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nexport async function appStateGet(\n  sessionId: string,\n  key: string,\n): Promise<Record<string, unknown> | null> {\n  try {\n    await ensureTable();\n    const client = getDbExec();\n    const { rows } = await client.execute({\n      sql: `SELECT value FROM application_state WHERE session_id = ? AND key = ?`,\n      args: [sessionId, key],\n    });\n    if (rows.length === 0) return null;\n    return JSON.parse(rows[0].value as string);\n  } catch (err) {\n    // Transient WS / connection drops (Neon serverless) — caller polls every\n    // 2s and will see the value on the next tick. Swallow rather than 500.\n    if (isConnectionError(err)) return null;\n    throw err;\n  }\n}\n\nexport async function appStatePut(\n  sessionId: string,\n  key: string,\n  value: Record<string, unknown>,\n  options?: StoreWriteOptions,\n): Promise<void> {\n  await ensureTable();\n  const client = getDbExec();\n  const serialized = JSON.stringify(value);\n  if (\n    !isLocalDatabase() &&\n    Buffer.byteLength(serialized, \"utf8\") > MAX_HOSTED_APP_STATE_VALUE_BYTES\n  ) {\n    throw new Error(\n      `application_state value \"${key}\" is too large for hosted SQL storage. Store large files, base64, or blobs in file storage and write only a URL or handle.`,\n    );\n  }\n  await client.execute({\n    sql: isPostgres()\n      ? `INSERT INTO application_state (session_id, key, value, updated_at) VALUES (?, ?, ?, ?) ON CONFLICT (session_id, key) DO UPDATE SET value=EXCLUDED.value, updated_at=EXCLUDED.updated_at`\n      : `INSERT OR REPLACE INTO application_state (session_id, key, value, updated_at) VALUES (?, ?, ?, ?)`,\n    args: [sessionId, key, serialized, Date.now()],\n  });\n  emitAppStateChange(key, options?.requestSource, sessionId);\n}\n\nexport async function appStateDelete(\n  sessionId: string,\n  key: string,\n  options?: StoreWriteOptions,\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const result = await client.execute({\n    sql: `DELETE FROM application_state WHERE session_id = ? AND key = ?`,\n    args: [sessionId, key],\n  });\n  const deleted = result.rowsAffected > 0;\n  if (deleted) emitAppStateDelete(key, options?.requestSource, sessionId);\n  return deleted;\n}\n\nexport async function appStateList(\n  sessionId: string,\n  keyPrefix: string,\n): Promise<Array<{ key: string; value: Record<string, unknown> }>> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT key, value FROM application_state WHERE session_id = ? AND key LIKE ? ESCAPE '!'`,\n    args: [sessionId, escapeLike(keyPrefix) + \"%\"],\n  });\n  return rows.map((row) => ({\n    key: row.key as string,\n    value: JSON.parse(row.value as string),\n  }));\n}\n\nexport async function appStateDeleteByPrefix(\n  sessionId: string,\n  keyPrefix: string,\n  options?: StoreWriteOptions,\n): Promise<number> {\n  await ensureTable();\n  const client = getDbExec();\n\n  // Get keys first so we can emit events\n  const { rows } = await client.execute({\n    sql: `SELECT key FROM application_state WHERE session_id = ? AND key LIKE ? ESCAPE '!'`,\n    args: [sessionId, escapeLike(keyPrefix) + \"%\"],\n  });\n\n  if (rows.length === 0) return 0;\n\n  const result = await client.execute({\n    sql: `DELETE FROM application_state WHERE session_id = ? AND key LIKE ? ESCAPE '!'`,\n    args: [sessionId, escapeLike(keyPrefix) + \"%\"],\n  });\n\n  for (const row of rows) {\n    emitAppStateDelete(row.key as string, options?.requestSource, sessionId);\n  }\n\n  return result.rowsAffected;\n}\n"]}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/application-state/store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,OAAO,GACR,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEtE,IAAI,YAAuC,CAAC;AAC5C,MAAM,gCAAgC,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,qEAAqE;AACrE,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG;;;;;uBAKD,OAAO,EAAE;;;OAGzB,CAAC;YAEF,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,mEAAmE;gBACnE,kEAAkE;gBAClE,6DAA6D;gBAC7D,kEAAkE;gBAClE,uEAAuE;gBACvE,oEAAoE;gBACpE,uEAAuE;gBACvE,uEAAuE;gBACvE,wEAAwE;gBACxE,uEAAuE;gBACvE,8CAA8C;gBAC9C,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;gBACxD,0EAA0E;gBAC1E,0EAA0E;gBAC1E,mEAAmE;gBACnE,MAAM,uBAAuB,CAAC,mBAAmB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;gBACnE,uEAAuE;gBACvE,gEAAgE;gBAChE,MAAM,iBAAiB,CACrB,0BAA0B,EAC1B,uFAAuF,CACxF,CAAC;gBACF,MAAM,iBAAiB,CACrB,2BAA2B,EAC3B,6FAA6F,CAC9F,CAAC;gBACF,OAAO;YACT,CAAC;YAED,qEAAqE;YACrE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,0EAA0E;YAC1E,0EAA0E;YAC1E,mEAAmE;YACnE,MAAM,uBAAuB,CAAC,mBAAmB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YACnE,sCAAsC;YACtC,wEAAwE;YACxE,yEAAyE;YACzE,qEAAqE;YACrE,qEAAqE;YACrE,oDAAoD;YACpD,KAAK,MAAM,GAAG,IAAI;gBAChB,uFAAuF;gBACvF,6FAA6F;aAC9F,EAAE,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,sDAAsD;YACtD,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,sEAAsE;YAC3E,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,IAAuB;IAEvB,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAmD,EAAE,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,UAAU;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE,6EAA6E,YAAY,GAAG;YACjG,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC;SACjC,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,GAAa,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;QAC1C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,GAAW,EACX,KAA8B,EAC9B,OAA2B;IAE3B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,IACE,CAAC,eAAe,EAAE;QAClB,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,gCAAgC,EACxE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,4HAA4H,CAC5J,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,EAAE,UAAU,EAAE;YACf,CAAC,CAAC,yLAAyL;YAC3L,CAAC,CAAC,mGAAmG;QACvG,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;KAC/C,CAAC,CAAC;IACH,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,GAAW,EACX,OAA2B;IAE3B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,gEAAgE;QACrE,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO;QAAE,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,SAAiB;IAEjB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,yFAAyF;QAC9F,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,EAAE,GAAG,CAAC,GAAa;QACtB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAe,CAAC;KACvC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,SAAiB,EACjB,OAA2B;IAE3B,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,uCAAuC;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,kFAAkF;QACvF,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;KAC/C,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,8EAA8E;QACnF,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;KAC/C,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,kBAAkB,CAAC,GAAG,CAAC,GAAa,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC","sourcesContent":["import {\n  getDbExec,\n  isLocalDatabase,\n  isConnectionError,\n  isPostgres,\n  intType,\n} from \"../db/client.js\";\nimport { ensureIndexExists, ensureTableExists } from \"../db/ddl-guard.js\";\nimport { widenIntColumnsToBigInt } from \"../db/widen-columns.js\";\nimport type { StoreWriteOptions } from \"../settings/store.js\";\nimport { emitAppStateChange, emitAppStateDelete } from \"./emitter.js\";\n\nlet _initPromise: Promise<void> | undefined;\nconst MAX_HOSTED_APP_STATE_VALUE_BYTES = 1024 * 1024;\n\n// Escapes LIKE wildcards (`%`, `_`) and the escape char itself so a caller's\n// literal prefix is matched verbatim. Used with `ESCAPE '!'` in prefix queries\n// below; without this, a prefix such as `user_settings` would treat `_` as a\n// single-char wildcard and over-match (e.g. delete `userXsettings`).\nfunction escapeLike(s: string): string {\n  return s.replace(/[!%_]/g, (match) => `!${match}`);\n}\n\nasync function ensureTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      const createSql = `\n        CREATE TABLE IF NOT EXISTS application_state (\n          session_id TEXT NOT NULL,\n          key TEXT NOT NULL,\n          value TEXT NOT NULL,\n          updated_at ${intType()} NOT NULL,\n          PRIMARY KEY (session_id, key)\n        )\n      `;\n\n      if (isPostgres()) {\n        // Hot path: the `application_state` table and its poll indexes are\n        // virtually always already present in production. Issuing `CREATE\n        // TABLE`/ `CREATE INDEX` still takes a lock that, in a fresh\n        // background-worker process behind a concurrent connection on the\n        // shared Neon DB, can block ~indefinitely (ACCESS EXCLUSIVE for CREATE\n        // TABLE; a write-blocking SHARE lock for CREATE INDEX). The ensure*\n        // wrappers probe `information_schema`/`pg_indexes` first (plain reads,\n        // no lock) and run DDL ONLY for what is actually missing, bounded by a\n        // transaction-scoped `lock_timeout`. If a swallowed lock-timeout leaves\n        // the schema still missing they RE-PROBE and THROW rather than letting\n        // init memoize success against absent schema.\n        await ensureTableExists(\"application_state\", createSql);\n        // Older deployments created `updated_at` as 32-bit `INTEGER`; on Postgres\n        // the `Date.now()` written by appStatePut() on every turn overflows int4.\n        // Widen it in place (no-op once done / on fresh BIGINT databases).\n        await widenIntColumnsToBigInt(\"application_state\", [\"updated_at\"]);\n        // Indexes for the two hot poll paths. Probe pg_indexes first (no lock)\n        // and skip the SHARE-locking CREATE INDEX when already present.\n        await ensureIndexExists(\n          \"app_state_updated_at_idx\",\n          `CREATE INDEX IF NOT EXISTS app_state_updated_at_idx ON application_state (updated_at)`,\n        );\n        await ensureIndexExists(\n          \"app_state_key_updated_idx\",\n          `CREATE INDEX IF NOT EXISTS app_state_key_updated_idx ON application_state (key, updated_at)`,\n        );\n        return;\n      }\n\n      // SQLite (local dev): no lock problem — keep the original behaviour.\n      await client.execute(createSql);\n      // Older deployments created `updated_at` as 32-bit `INTEGER`; on Postgres\n      // the `Date.now()` written by appStatePut() on every turn overflows int4.\n      // Widen it in place (no-op once done / on fresh BIGINT databases).\n      await widenIntColumnsToBigInt(\"application_state\", [\"updated_at\"]);\n      // Indexes for the two hot poll paths:\n      //  - `SELECT … WHERE updated_at > ?` (watermark scan, every poll cycle)\n      //  - `SELECT … WHERE key = ? … ORDER BY updated_at ASC` (marker lookups)\n      // Both are dialect-agnostic (no DESC/partial/PG-only syntax) so they\n      // apply identically on SQLite and Postgres. IF NOT EXISTS makes them\n      // idempotent across restarts on existing databases.\n      for (const ddl of [\n        `CREATE INDEX IF NOT EXISTS app_state_updated_at_idx ON application_state (updated_at)`,\n        `CREATE INDEX IF NOT EXISTS app_state_key_updated_idx ON application_state (key, updated_at)`,\n      ]) {\n        try {\n          await client.execute(ddl);\n        } catch {\n          // Index already exists or the dialect rejected a duplicate.\n        }\n      }\n    })().catch((err) => {\n      // Retry init on the next call after a failed startup.\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nexport async function appStateGet(\n  sessionId: string,\n  key: string,\n): Promise<Record<string, unknown> | null> {\n  try {\n    await ensureTable();\n    const client = getDbExec();\n    const { rows } = await client.execute({\n      sql: `SELECT value FROM application_state WHERE session_id = ? AND key = ?`,\n      args: [sessionId, key],\n    });\n    if (rows.length === 0) return null;\n    return JSON.parse(rows[0].value as string);\n  } catch (err) {\n    // Transient WS / connection drops (Neon serverless) — caller polls every\n    // 2s and will see the value on the next tick. Swallow rather than 500.\n    if (isConnectionError(err)) return null;\n    throw err;\n  }\n}\n\n/**\n * Read several application-state keys for one session in a single SQL query.\n * Missing keys are returned as `null` so callers can preserve the requested\n * shape without issuing one fallback query per key.\n */\nexport async function appStateGetMany(\n  sessionId: string,\n  keys: readonly string[],\n): Promise<Record<string, Record<string, unknown> | null>> {\n  const uniqueKeys = [...new Set(keys)];\n  const values: Record<string, Record<string, unknown> | null> = {};\n  for (const key of uniqueKeys) values[key] = null;\n  if (uniqueKeys.length === 0) return values;\n\n  try {\n    await ensureTable();\n    const client = getDbExec();\n    const placeholders = uniqueKeys.map(() => \"?\").join(\", \");\n    const { rows } = await client.execute({\n      sql: `SELECT key, value FROM application_state WHERE session_id = ? AND key IN (${placeholders})`,\n      args: [sessionId, ...uniqueKeys],\n    });\n    for (const row of rows) {\n      values[row.key as string] = JSON.parse(row.value as string);\n    }\n    return values;\n  } catch (err) {\n    if (isConnectionError(err)) return values;\n    throw err;\n  }\n}\n\nexport async function appStatePut(\n  sessionId: string,\n  key: string,\n  value: Record<string, unknown>,\n  options?: StoreWriteOptions,\n): Promise<void> {\n  await ensureTable();\n  const client = getDbExec();\n  const serialized = JSON.stringify(value);\n  if (\n    !isLocalDatabase() &&\n    Buffer.byteLength(serialized, \"utf8\") > MAX_HOSTED_APP_STATE_VALUE_BYTES\n  ) {\n    throw new Error(\n      `application_state value \"${key}\" is too large for hosted SQL storage. Store large files, base64, or blobs in file storage and write only a URL or handle.`,\n    );\n  }\n  await client.execute({\n    sql: isPostgres()\n      ? `INSERT INTO application_state (session_id, key, value, updated_at) VALUES (?, ?, ?, ?) ON CONFLICT (session_id, key) DO UPDATE SET value=EXCLUDED.value, updated_at=EXCLUDED.updated_at`\n      : `INSERT OR REPLACE INTO application_state (session_id, key, value, updated_at) VALUES (?, ?, ?, ?)`,\n    args: [sessionId, key, serialized, Date.now()],\n  });\n  emitAppStateChange(key, options?.requestSource, sessionId);\n}\n\nexport async function appStateDelete(\n  sessionId: string,\n  key: string,\n  options?: StoreWriteOptions,\n): Promise<boolean> {\n  await ensureTable();\n  const client = getDbExec();\n  const result = await client.execute({\n    sql: `DELETE FROM application_state WHERE session_id = ? AND key = ?`,\n    args: [sessionId, key],\n  });\n  const deleted = result.rowsAffected > 0;\n  if (deleted) emitAppStateDelete(key, options?.requestSource, sessionId);\n  return deleted;\n}\n\nexport async function appStateList(\n  sessionId: string,\n  keyPrefix: string,\n): Promise<Array<{ key: string; value: Record<string, unknown> }>> {\n  await ensureTable();\n  const client = getDbExec();\n  const { rows } = await client.execute({\n    sql: `SELECT key, value FROM application_state WHERE session_id = ? AND key LIKE ? ESCAPE '!'`,\n    args: [sessionId, escapeLike(keyPrefix) + \"%\"],\n  });\n  return rows.map((row) => ({\n    key: row.key as string,\n    value: JSON.parse(row.value as string),\n  }));\n}\n\nexport async function appStateDeleteByPrefix(\n  sessionId: string,\n  keyPrefix: string,\n  options?: StoreWriteOptions,\n): Promise<number> {\n  await ensureTable();\n  const client = getDbExec();\n\n  // Get keys first so we can emit events\n  const { rows } = await client.execute({\n    sql: `SELECT key FROM application_state WHERE session_id = ? AND key LIKE ? ESCAPE '!'`,\n    args: [sessionId, escapeLike(keyPrefix) + \"%\"],\n  });\n\n  if (rows.length === 0) return 0;\n\n  const result = await client.execute({\n    sql: `DELETE FROM application_state WHERE session_id = ? AND key LIKE ? ESCAPE '!'`,\n    args: [sessionId, escapeLike(keyPrefix) + \"%\"],\n  });\n\n  for (const row of rows) {\n    emitAppStateDelete(row.key as string, options?.requestSource, sessionId);\n  }\n\n  return result.rowsAffected;\n}\n"]}

package/dist/cli/code-agent-connector.d.ts

@@ -1,3 +1,4 @@
+import type { RemoteComputerCapabilities } from "../integrations/remote-types.js";
 export interface RemoteCodeAgentDeviceConfig {
     token: string;
     relayUrl?: string;
@@ -11,7 +12,15 @@ export interface RunCodeAgentConnectorOptions {
     signal?: AbortSignal;
     once?: boolean;
 }
+export interface LocalComputerBridgeConfig {
+    url: string;
+    token: string;
+    capabilities: RemoteComputerCapabilities;
+}
 export declare function remoteDeviceConfigPath(): string;
 export declare function loadRemoteCodeAgentDeviceConfig(configPath?: string): RemoteCodeAgentDeviceConfig | null;
 export declare function runCodeAgentConnector(options?: RunCodeAgentConnectorOptions): Promise<number>;
+export declare function loadLocalComputerBridgeConfig(env?: NodeJS.ProcessEnv): LocalComputerBridgeConfig | null;
+export declare function callLocalComputerBridgeTool(config: LocalComputerBridgeConfig, toolName: "computer_operation" | "computer_revoke_control", args: Record<string, unknown>, fetchImpl?: typeof fetch): Promise<unknown>;
+export declare function dispatchComputerOperationToLocalBridge(config: LocalComputerBridgeConfig | null, rawEnvelope: unknown, fetchImpl?: typeof fetch): Promise<Record<string, unknown>>;
 //# sourceMappingURL=code-agent-connector.d.ts.map

package/dist/cli/code-agent-connector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"code-agent-connector.d.ts","sourceRoot":"","sources":["../../src/cli/code-agent-connector.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA6BD,wBAAgB,sBAAsB,IAAI,MAAM,CAK/C;AAED,wBAAgB,+BAA+B,CAC7C,UAAU,SAA2B,GACpC,2BAA2B,GAAG,IAAI,CA0BpC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,MAAM,CAAC,CAmCjB"}
+{"version":3,"file":"code-agent-connector.d.ts","sourceRoot":"","sources":["../../src/cli/code-agent-connector.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAEV,0BAA0B,EAC3B,MAAM,iCAAiC,CAAC;AAoBzC,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,0BAA0B,CAAC;CAC1C;AAgCD,wBAAgB,sBAAsB,IAAI,MAAM,CAK/C;AAED,wBAAgB,+BAA+B,CAC7C,UAAU,SAA2B,GACpC,2BAA2B,GAAG,IAAI,CA0BpC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,MAAM,CAAC,CAmCjB;AAutBD,wBAAgB,6BAA6B,CAC3C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,yBAAyB,GAAG,IAAI,CA0BlC;AAED,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,yBAAyB,EACjC,QAAQ,EAAE,oBAAoB,GAAG,yBAAyB,EAC1D,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,OAAO,CAAC,CA+BlB;AAED,wBAAsB,sCAAsC,CAC1D,MAAM,EAAE,yBAAyB,GAAG,IAAI,EACxC,WAAW,EAAE,OAAO,EACpB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAqBlC"}

package/dist/cli/code-agent-connector.js

@@ -2,9 +2,14 @@ import { spawn } from "node:child_process";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import { assertValidComputerCommandEnvelope } from "../integrations/computer-supervision.js";
+import { serializeBoundedRemoteJson } from "../integrations/remote-json-safety.js";
 import { executeDenyCodeAgentApproval, executePendingCodeAgentApproval, } from "./code-agent-executor.js";
 import { appendCodeAgentTranscriptEvent, codeAgentRunTranscriptPath, codeAgentStoreRoot, createCodeAgentRunRecord, getCodeAgentRunRecord, listCodeAgentRunRecords, normalizeCodeAgentPermissionMode, queueCodeAgentFollowUp, updateCodeAgentRunRecord, } from "./code-agent-runs.js";
 const DEVICE_PATH_ENV = "AGENT_NATIVE_REMOTE_DEVICE_PATH";
+const COMPUTER_BRIDGE_URL_ENV = "AGENT_NATIVE_COMPUTER_BRIDGE_URL";
+const COMPUTER_BRIDGE_TOKEN_ENV = "AGENT_NATIVE_COMPUTER_BRIDGE_TOKEN";
+const COMPUTER_CAPABILITIES_ENV = "AGENT_NATIVE_COMPUTER_CAPABILITIES";
 const DEFAULT_POLL_INTERVAL_MS = 2_000;
 const MAX_POLL_INTERVAL_MS = 30_000;
 const MAX_TRANSCRIPT_EVENTS_PER_BATCH = 50;
@@ -73,6 +78,7 @@ class RemoteCodeAgentConnector {
     transcriptCursors = new Map();
     remoteRunIds = new Set();
     stopped = false;
+    computerBridge = loadLocalComputerBridgeConfig();
     constructor(config, relayUrl, output) {
         this.config = config;
         this.relayUrl = relayUrl;
@@ -115,6 +121,9 @@ class RemoteCodeAgentConnector {
         }
         finally {
             options.signal?.removeEventListener("abort", onAbort);
+            if (this.computerBridge) {
+                await callLocalComputerBridgeTool(this.computerBridge, "computer_revoke_control", { reason: "connector-stopped" }).catch(() => undefined);
+            }
         }
     }
     async pollOnce() {
@@ -130,6 +139,7 @@ class RemoteCodeAgentConnector {
                 "status",
                 "run-events",
             ],
+            computerCapabilities: this.computerBridge?.capabilities ?? {},
             activeRunIds: Array.from(this.remoteRunIds),
         });
         const commands = normalizeCommands(response);
@@ -156,6 +166,8 @@ class RemoteCodeAgentConnector {
                 return this.deny(command);
             case "stop":
                 return this.stop(command);
+            case "computer-operation":
+                return this.computerOperation(command);
             case "status":
                 return this.status(command);
             default:
@@ -165,6 +177,9 @@ class RemoteCodeAgentConnector {
                 };
         }
     }
+    async computerOperation(command) {
+        return dispatchComputerOperationToLocalBridge(this.computerBridge, command.params.envelope);
+    }
     createRun(command) {
         const prompt = firstTextValue(command.params.prompt, command.params.message, command.params.input);
         if (!prompt) {
@@ -307,13 +322,40 @@ class RemoteCodeAgentConnector {
         const result = await executeDenyCodeAgentApproval(runId);
         return { ok: true, runId, run: result ?? getCodeAgentRunRecord(runId) };
     }
-    stop(command) {
+    async stop(command) {
         const runId = firstStringValue(command.params.runId);
-        if (!runId)
-            return { ok: false, error: "Missing runId." };
+        const taskId = firstStringValue(command.params.taskId);
+        let revokeError;
+        if (this.computerBridge) {
+            try {
+                await callLocalComputerBridgeTool(this.computerBridge, "computer_revoke_control", { taskId, runId, reason: "remote-stop" });
+            }
+            catch (error) {
+                revokeError = error instanceof Error ? error.message : String(error);
+            }
+        }
+        else if (taskId || command.params.computer === true) {
+            revokeError = "Local authenticated computer bridge is unavailable.";
+        }
+        if (!runId) {
+            return taskId
+                ? {
+                    ok: !revokeError,
+                    taskId,
+                    revoked: !revokeError,
+                    error: revokeError,
+                }
+                : { ok: false, error: "Missing runId." };
+        }
         const run = getCodeAgentRunRecord(runId);
-        if (!run)
-            return { ok: false, error: `Run not found: ${runId}` };
+        if (!run) {
+            return {
+                ok: !revokeError && Boolean(this.computerBridge),
+                runId,
+                revoked: !revokeError && Boolean(this.computerBridge),
+                error: revokeError ?? `Run not found: ${runId}`,
+            };
+        }
         const active = activeRunners.get(runId);
         const pid = active?.child.pid ?? Number(run.metadata?.runnerPid);
         let killed = false;
@@ -359,7 +401,14 @@ class RemoteCodeAgentConnector {
                 stopError: killError,
             },
         });
-        return { ok: !killError, runId, run: updated, killed, error: killError };
+        return {
+            ok: !killError && !revokeError,
+            runId,
+            run: updated,
+            killed,
+            controlRevoked: !revokeError && Boolean(this.computerBridge),
+            error: revokeError ?? killError,
+        };
     }
     status(command) {
         const runId = firstStringValue(command.params.runId);
@@ -458,14 +507,26 @@ class RemoteCodeAgentConnector {
         }
     }
     async postCommandResult(command, result) {
+        let safeResult;
+        try {
+            safeResult = boundedConnectorResult(result);
+        }
+        catch (error) {
+            safeResult = {
+                ok: false,
+                error: error instanceof Error
+                    ? `Connector result rejected: ${error.message}`
+                    : "Connector result rejected as unsafe.",
+            };
+        }
         await this.postJson("/_agent-native/integrations/remote/result", {
             deviceId: this.config.deviceId,
             commandId: command.id,
             kind: command.kind,
-            ok: result.ok !== false,
-            status: result.ok === false ? "failed" : "completed",
-            result,
-            errorMessage: typeof result.error === "string" ? result.error : undefined,
+            ok: safeResult.ok !== false,
+            status: safeResult.ok === false ? "failed" : "completed",
+            result: safeResult,
+            errorMessage: typeof safeResult.error === "string" ? safeResult.error : undefined,
         });
     }
     async postJson(pathname, body) {
@@ -664,6 +725,147 @@ function normalizeRelayUrl(value) {
         return null;
     }
 }
+export function loadLocalComputerBridgeConfig(env = process.env) {
+    const rawUrl = firstStringValue(env[COMPUTER_BRIDGE_URL_ENV]);
+    const token = firstStringValue(env[COMPUTER_BRIDGE_TOKEN_ENV]);
+    const rawCapabilities = firstStringValue(env[COMPUTER_CAPABILITIES_ENV]);
+    if (!rawUrl || !token || !rawCapabilities)
+        return null;
+    let url;
+    try {
+        url = new URL(rawUrl);
+    }
+    catch {
+        return null;
+    }
+    const host = url.hostname.toLowerCase();
+    if ((url.protocol !== "http:" && url.protocol !== "https:") ||
+        (host !== "localhost" && host !== "127.0.0.1" && host !== "[::1]")) {
+        return null;
+    }
+    try {
+        const value = JSON.parse(rawCapabilities);
+        const capabilities = normalizeComputerCapabilities(value);
+        if (!hasComputerCapability(capabilities))
+            return null;
+        return { url: url.toString(), token, capabilities };
+    }
+    catch {
+        return null;
+    }
+}
+export async function callLocalComputerBridgeTool(config, toolName, args, fetchImpl = fetch) {
+    const response = await fetchImpl(config.url, {
+        method: "POST",
+        headers: {
+            accept: "application/json, text/event-stream",
+            authorization: `Bearer ${config.token}`,
+            "content-type": "application/json",
+        },
+        body: JSON.stringify({
+            jsonrpc: "2.0",
+            id: `computer-bridge-${Date.now()}`,
+            method: "tools/call",
+            params: { name: toolName, arguments: args },
+        }),
+        signal: AbortSignal.timeout(30_000),
+    });
+    if (!response.ok) {
+        throw new Error(`Local computer bridge returned ${response.status}`);
+    }
+    const text = await response.text();
+    const payload = parseMcpResponse(text);
+    if (!isObject(payload)) {
+        throw new Error("Local computer bridge returned an invalid response");
+    }
+    if (payload.error) {
+        const error = isObject(payload.error) ? payload.error : {};
+        throw new Error(firstStringValue(error.message) ?? "Local computer bridge rejected call");
+    }
+    return boundedJsonValue(payload.result, "Local computer bridge result");
+}
+export async function dispatchComputerOperationToLocalBridge(config, rawEnvelope, fetchImpl = fetch) {
+    if (!config) {
+        throw new Error("Local authenticated computer bridge is unavailable.");
+    }
+    const envelope = await assertValidComputerCommandEnvelope(rawEnvelope);
+    const result = await callLocalComputerBridgeTool(config, "computer_operation", { envelope }, fetchImpl);
+    return boundedConnectorResult({
+        ok: true,
+        taskId: envelope.taskId,
+        runId: envelope.runId,
+        sequence: envelope.sequence,
+        idempotencyKey: envelope.idempotencyKey,
+        actionHash: envelope.approval.actionHash,
+        operationClass: envelope.operationClass,
+        bridgeResult: result,
+    });
+}
+function normalizeComputerCapabilities(value) {
+    if (!isObject(value))
+        return {};
+    const browser = isObject(value.browser) ? value.browser : null;
+    const desktop = isObject(value.desktop) ? value.desktop : null;
+    return {
+        ...(browser
+            ? {
+                browser: {
+                    observe: browser.observe === true,
+                    control: browser.control === true,
+                    provider: firstStringValue(browser.provider) ?? null,
+                    version: firstStringValue(browser.version) ?? null,
+                },
+            }
+            : {}),
+        ...(desktop
+            ? {
+                desktop: {
+                    observe: desktop.observe === true,
+                    control: desktop.control === true,
+                    accessibility: desktop.accessibility === true,
+                    screenCapture: desktop.screenCapture === true,
+                    provider: firstStringValue(desktop.provider) ?? null,
+                    version: firstStringValue(desktop.version) ?? null,
+                },
+            }
+            : {}),
+    };
+}
+function hasComputerCapability(capabilities) {
+    return Boolean(capabilities.browser?.observe ||
+        capabilities.browser?.control ||
+        capabilities.desktop?.observe ||
+        capabilities.desktop?.control);
+}
+function parseMcpResponse(text) {
+    const trimmed = text.trim();
+    if (!trimmed)
+        throw new Error("Local computer bridge returned no response");
+    if (!trimmed.startsWith("data:"))
+        return JSON.parse(trimmed);
+    const data = trimmed
+        .split(/\r?\n/)
+        .filter((line) => line.startsWith("data:"))
+        .map((line) => line.slice(5).trim())
+        .filter((line) => line && line !== "[DONE]")
+        .at(-1);
+    if (!data)
+        throw new Error("Local computer bridge returned no MCP result");
+    return JSON.parse(data);
+}
+function boundedJsonValue(value, label) {
+    return JSON.parse(serializeBoundedRemoteJson(value ?? null, {
+        label,
+        maxBytes: 128_000,
+    }));
+}
+function boundedConnectorResult(value) {
+    const parsed = boundedJsonValue(value, "Remote connector result");
+    if (!isObject(parsed)) {
+        throw new Error("Remote connector result must be an object");
+    }
+    return parsed;
+}
 function firstStringValue(...values) {
     for (const value of values) {
         if (typeof value !== "string")