@agent-team-foundation/first-tree-hub 0.14.9-alpha.302.1 → 0.14.9-alpha.303.1

package/dist/cli/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as cleanWorkspaces, A as printResults, B as ClientRuntime, C as migrateLocalAgentDirs, D as checkNodeVersion, E as checkClientConfig, G as removeLocalAgent, I as restartClientService, J as ClientOrgMismatchError, K as fail, L as startClientService, M as getClientServiceStatus, N as installClientService, O as checkServerReachable, P as isServiceSupported, Q as SessionRegistry, R as stopClientService, S as createApiNameResolver, T as checkBackgroundService, U as findStaleAliases, V as handleClientOrgMismatch, W as formatStaleReason, X as FirstTreeHubSDK, Y as ClientUserMismatchError, Z as SdkError, _ as loadOnboardState, a as declineUpdate, b as saveOnboardState, c as detectInstallMode, d as reconcileLocalRuntimeProviders, et as probeCapabilities, f as uploadClientCapabilities, g as formatCheckReport, h as promptMissingFields, i as createExecuteUpdate, j as reconcileAgentConfigs, k as checkWebSocket, l as fetchLatestVersion, m as promptAddAgent, nt as configureClientLoggerForService, o as promptUpdate, p as isInteractive, q as success, r as registerSaaSConnectCommand, s as PACKAGE_NAME, tt as applyClientLoggerConfig, u as installGlobalLatest, v as onboardCheck, w as checkAgentConfigs, x as runHomeMigration, y as onboardCreate } from "../saas-connect-qyBF4mzh.mjs";
+import { $ as cleanWorkspaces, A as printResults, B as ClientRuntime, C as migrateLocalAgentDirs, D as checkNodeVersion, E as checkClientConfig, G as removeLocalAgent, I as restartClientService, J as ClientOrgMismatchError, K as fail, L as startClientService, M as getClientServiceStatus, N as installClientService, O as checkServerReachable, P as isServiceSupported, Q as SessionRegistry, R as stopClientService, S as createApiNameResolver, T as checkBackgroundService, U as findStaleAliases, V as handleClientOrgMismatch, W as formatStaleReason, X as FirstTreeHubSDK, Y as ClientUserMismatchError, Z as SdkError, _ as loadOnboardState, a as declineUpdate, b as saveOnboardState, c as detectInstallMode, d as reconcileLocalRuntimeProviders, et as probeCapabilities, f as uploadClientCapabilities, g as formatCheckReport, h as promptMissingFields, i as createExecuteUpdate, j as reconcileAgentConfigs, k as checkWebSocket, l as fetchLatestVersion, m as promptAddAgent, nt as configureClientLoggerForService, o as promptUpdate, p as isInteractive, q as success, r as registerSaaSConnectCommand, s as PACKAGE_NAME, tt as applyClientLoggerConfig, u as installGlobalLatest, v as onboardCheck, w as checkAgentConfigs, x as runHomeMigration, y as onboardCreate } from "../saas-connect-AuYDI1jx.mjs";
 import { C as resolveConfigReadonly, S as resetConfigMeta, _ as initConfig, a as loadCredentials, b as readConfigFile, c as saveAgentConfig, d as DEFAULT_DATA_DIR, f as DEFAULT_HOME_DIR, g as getConfigValue, i as ensureFreshAdminToken, m as clientConfigSchema, p as agentConfigSchema, r as ensureFreshAccessToken, s as resolveServerUrl, u as DEFAULT_CONFIG_DIR, v as loadAgents, w as setConfigValue, x as resetConfig } from "../bootstrap-DdLoOQI5.mjs";
 import { a as print, n as CLI_USER_AGENT, o as setJsonMode, r as COMMAND_VERSION, t as cliFetch } from "../cli-fetch-BGVItZxo.mjs";
 import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-CKj6zuvQ.mjs";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as printResults, B as ClientRuntime, D as checkNodeVersion, E as checkClientConfig, F as resolveCliInvocation, H as rotateClientIdWithBackup, I as restartClientService, L as startClientService, M as getClientServiceStatus, N as installClientService, O as checkServerReachable, P as isServiceSupported, R as stopClientService, V as handleClientOrgMismatch, X as FirstTreeHubSDK, Z as SdkError, g as formatCheckReport, h as promptMissingFields, k as checkWebSocket, m as promptAddAgent, n as deriveHubUrlFromToken, p as isInteractive, t as HubUrlDerivationError, v as onboardCheck, w as checkAgentConfigs, x as runHomeMigration, y as onboardCreate, z as uninstallClientService } from "./saas-connect-qyBF4mzh.mjs";
+import { A as printResults, B as ClientRuntime, D as checkNodeVersion, E as checkClientConfig, F as resolveCliInvocation, H as rotateClientIdWithBackup, I as restartClientService, L as startClientService, M as getClientServiceStatus, N as installClientService, O as checkServerReachable, P as isServiceSupported, R as stopClientService, V as handleClientOrgMismatch, X as FirstTreeHubSDK, Z as SdkError, g as formatCheckReport, h as promptMissingFields, k as checkWebSocket, m as promptAddAgent, n as deriveHubUrlFromToken, p as isInteractive, t as HubUrlDerivationError, v as onboardCheck, w as checkAgentConfigs, x as runHomeMigration, y as onboardCreate, z as uninstallClientService } from "./saas-connect-AuYDI1jx.mjs";
 import { i as ensureFreshAdminToken, n as AuthRefreshRateLimitedError, o as resolveAccessToken, r as ensureFreshAccessToken, s as resolveServerUrl, t as AuthRefreshFailedError } from "./bootstrap-DdLoOQI5.mjs";
 import { i as blank, s as status } from "./cli-fetch-BGVItZxo.mjs";
 import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-CKj6zuvQ.mjs";

package/dist/{saas-connect-qyBF4mzh.mjs → saas-connect-AuYDI1jx.mjs}

@@ -3880,6 +3880,34 @@ function isCanonicalDocLinkPath(path) {
 	const normalized = normalizeDocLinkPath(path);
 	return normalized !== null && normalized === path;
 }
+/**
+* Cross-agent workspace doc key.
+*
+* doc-preview snapshots from the SENDER's own workspace keep a bare,
+* base-relative key (`docs/foo.md`) — unchanged, zero-regression. A snapshot
+* of a file in ANOTHER agent's workspace needs a globally-unique key so web's
+* cache lookup is unambiguous: `<agentSlug>/<chatId>/<rel>`, i.e. the path
+* relative to the shared `workspaces/` common root (minus that root). Runtime
+* builds it when it snapshots a sibling-workspace file; web reconstructs the
+* same key from a scanned token to match the snapshot; server parses it to
+* re-check the owner is a chat participant. All three must agree, so the
+* build/parse logic lives here next to `normalizeDocLinkPath`.
+*
+* `chatId` scopes the key to a single chat: a `workspaces/<X>/<chatId>` dir
+* only exists when X has run a session in that chat, so the chatId segment is
+* the structural fence that keeps one chat from previewing another chat's
+* private workspace docs.
+*/
+function buildWorkspaceDocKey(agentSlug, chatId, rel) {
+	const slug = agentSlug.trim();
+	const chat = chatId.trim();
+	if (!slug || !chat || slug.includes("/") || chat.includes("/")) return null;
+	if (slug.startsWith(".") || chat.startsWith(".")) return null;
+	const relNorm = normalizeDocLinkPath(rel);
+	if (!relNorm) return null;
+	const key = `${slug}/${chat}/${relNorm}`;
+	return isCanonicalDocLinkPath(key) ? key : null;
+}
 const adapterPlatformSchema = z.enum([
 	"feishu",
 	"slack",
@@ -10192,38 +10220,7 @@ var Deduplicator = class {
 		return this.seen.size;
 	}
 };
-/**
-* Scan an outbound agent message for `.md` path mentions (inline markdown
-* links `[text](path.md)` AND bare `path.md` tokens) and turn each
-* safely-resolvable target into a snapshot of the file's contents at send
-* time.
-*
-* Resolution is constrained to `root`. A path resolves when its real target
-* is a regular `.md` file physically inside the worktree with no hidden
-* segment. Two written forms resolve:
-*   - workspace-relative (`docs/foo.md`, `./docs/foo.md`); and
-*   - **absolute paths that land inside `root`** (`<root>/docs/foo.md`).
-*     Web cannot map an absolute path back to a snapshot key (it does not
-*     know `root`), so for every resolved token whose written form is not
-*     already the canonical relative path, we **rewrite that span in the
-*     outbound text** to the canonical relative path (preserving any
-*     `:line[:col]` suffix). The caller sends `rewrittenText`, and web's
-*     unchanged re-scan then sees a relative token, matches the snapshot,
-*     and renders the preview link. This keeps web/server/schema untouched
-*     and is immune to server-side body rewrites (e.g. `@mention` prepend)
-*     because web re-scans rather than trusting byte offsets.
-*
-* Anything that escapes the worktree (absolute path resolving OUTSIDE root,
-* `..` traversal, symlink pointing to a hidden segment inside or outside
-* root), hides (`.dotfile` / `.dotdir`, `.agent/`), or is missing is dropped
-* — the caller's message still goes through, the offending mention simply
-* stays plain text in the UI (and is left untouched in `rewrittenText`).
-*
-* The shared schema enforces canonical path form and the server re-validates
-* byte budgets + sha256 so a misbehaving runtime cannot lodge mismatched
-* data.
-*/
-async function buildMessageDocumentSnapshots(text, root) {
+async function buildMessageDocumentSnapshots(text, root, fence) {
 	const occurrences = collectDocPathOccurrences(text);
 	if (occurrences.length === 0) return {
 		docs: [],
@@ -10236,28 +10233,52 @@ async function buildMessageDocumentSnapshots(text, root) {
 		skipped: occurrences.length,
 		rewrittenText: text
 	};
-	const resolved = await Promise.all(occurrences.map(async (occ) => ({
-		...occ,
-		canonical: await canonicalizeWorkspacePath(rootReal, occ.writtenPath)
-	})));
+	const workspacesRootReal = fence ? await safeRealpath(fence.workspacesRoot) : null;
+	const resolved = await Promise.all(occurrences.map(async (occ) => {
+		const selfKey = await canonicalizeWorkspacePath(rootReal, occ.writtenPath);
+		if (selfKey) return {
+			...occ,
+			kind: "self",
+			key: selfKey,
+			file: null,
+			shortForm: ""
+		};
+		if (workspacesRootReal && fence && isAbsolute(occ.writtenPath)) {
+			const cross = await resolveCrossWorkspaceDoc(workspacesRootReal, fence, occ.writtenPath);
+			if (cross) return {
+				...occ,
+				kind: "cross",
+				key: cross.key,
+				file: cross.file,
+				shortForm: cross.shortForm
+			};
+		}
+		return {
+			...occ,
+			kind: null,
+			key: null,
+			file: null,
+			shortForm: ""
+		};
+	}));
 	const docs = [];
 	let totalBytes = 0;
 	let skipped = 0;
 	const seen = /* @__PURE__ */ new Set();
 	const snapshotted = /* @__PURE__ */ new Set();
 	for (const occ of resolved) {
-		const canonical = occ.canonical;
-		if (!canonical || !canonical.toLowerCase().endsWith(".md")) {
+		const key = occ.key;
+		if (!key || !key.toLowerCase().endsWith(".md")) {
 			skipped += 1;
 			continue;
 		}
-		if (seen.has(canonical)) continue;
-		seen.add(canonical);
+		if (seen.has(key)) continue;
+		seen.add(key);
 		if (docs.length >= 5) {
 			skipped += 1;
 			continue;
 		}
-		const file = await resolveWorkspaceFile(rootReal, canonical);
+		const file = occ.kind === "cross" ? occ.file : await resolveWorkspaceFile(rootReal, key);
 		if (!file) {
 			skipped += 1;
 			continue;
@@ -10280,23 +10301,36 @@ async function buildMessageDocumentSnapshots(text, root) {
 			}
 			const sha256 = createHash("sha256").update(content, "utf8").digest("hex");
 			docs.push({
-				path: canonical,
+				path: key,
 				sha256,
 				size,
 				content
 			});
 			totalBytes += size;
-			snapshotted.add(canonical);
+			snapshotted.add(key);
 		} catch {
 			skipped += 1;
 		}
 	}
+	const selfKeys = /* @__PURE__ */ new Set();
+	for (const occ of resolved) if (occ.kind === "self" && occ.key && snapshotted.has(occ.key)) selfKeys.add(occ.key);
 	const rewrites = [];
-	for (const occ of resolved) if (occ.canonical && isAbsolute(occ.writtenPath) && snapshotted.has(occ.canonical)) rewrites.push({
-		start: occ.start,
-		end: occ.end,
-		replacement: `${occ.canonical}${occ.lineSuffix}`
-	});
+	for (const occ of resolved) {
+		if (!occ.key || !snapshotted.has(occ.key)) continue;
+		if (occ.kind === "self" && isAbsolute(occ.writtenPath)) rewrites.push({
+			start: occ.start,
+			end: occ.end,
+			replacement: `${occ.key}${occ.lineSuffix}`
+		});
+		else if (occ.kind === "cross") {
+			const replacement = selfKeys.has(occ.shortForm) ? occ.key : occ.shortForm;
+			rewrites.push({
+				start: occ.start,
+				end: occ.end,
+				replacement: `${replacement}${occ.lineSuffix}`
+			});
+		}
+	}
 	return {
 		docs,
 		skipped,
@@ -10395,6 +10429,44 @@ async function canonicalizeWorkspacePath(rootReal, writtenPath) {
 	return normalizeDocLinkPath(relative(rootReal, real));
 }
 /**
+* Resolve an ABSOLUTE `.md` path that points into a DIFFERENT agent's
+* workspace under the shared common root. Returns the global snapshot key
+* `<ownerSlug>/<chatId>/<rel>`, the realpath'd file to read, and the short
+* `<ownerSlug>/<rel>` form to rewrite into the outbound text — or null when
+* the path is outside the common root, belongs to another chat, hides, is the
+* sender's own workspace (handled as a self path), is not a regular `.md`
+* file, or cannot be realpath'd.
+*
+* realpath runs BEFORE the containment check so an ancestor symlink cannot
+* fake "inside the common root" — same discipline as the self-path resolver.
+*/
+async function resolveCrossWorkspaceDoc(workspacesRootReal, fence, absPath) {
+	const real = await safeRealpath(absPath);
+	if (!real) return null;
+	const prefix = workspacesRootReal.endsWith(sep) ? workspacesRootReal : workspacesRootReal + sep;
+	if (!real.startsWith(prefix)) return null;
+	const segments = relative(workspacesRootReal, real).split(sep).filter((s) => s.length > 0 && s !== ".");
+	if (segments.length < 3) return null;
+	if (segments.some((s) => s.startsWith("."))) return null;
+	const [ownerSlug, segChatId, ...rest] = segments;
+	if (!ownerSlug || !segChatId) return null;
+	if (segChatId !== fence.chatId) return null;
+	if (ownerSlug === fence.selfSlug) return null;
+	const rel = rest.join("/");
+	const key = buildWorkspaceDocKey(ownerSlug, segChatId, rel);
+	if (!key || !key.toLowerCase().endsWith(".md")) return null;
+	try {
+		if (!(await stat(real)).isFile()) return null;
+	} catch {
+		return null;
+	}
+	return {
+		key,
+		file: real,
+		shortForm: `${ownerSlug}/${rel}`
+	};
+}
+/**
 * Resolve a canonical workspace-relative link target against `rootReal`.
 * Returns the real path of a regular `.md` file that is **physically** inside
 * the worktree AND whose real path contains no hidden segments. The second
@@ -10434,7 +10506,11 @@ function createResultSink(deps) {
 		let content = text;
 		const documentBasePath = await deps.getDocumentBasePath?.();
 		if (documentBasePath) try {
-			const { docs, skipped, rewrittenText } = await buildMessageDocumentSnapshots(text, documentBasePath);
+			const { docs, skipped, rewrittenText } = await buildMessageDocumentSnapshots(text, documentBasePath, deps.workspacesRoot && deps.selfSlug ? {
+				workspacesRoot: deps.workspacesRoot,
+				chatId: deps.chatId,
+				selfSlug: deps.selfSlug
+			} : void 0);
 			content = rewrittenText;
 			if (docs.length > 0) metadata.documentContext = documentContextSchema.parse({
 				kind: "snapshot",
@@ -11071,7 +11147,9 @@ var SessionManager = class {
 				this.currentTrigger.delete(chatId);
 			},
 			log,
-			getDocumentBasePath: () => this.resolveDocumentBasePath(log, chatId)
+			getDocumentBasePath: () => this.resolveDocumentBasePath(log, chatId),
+			workspacesRoot: dirname(this.config.handlerConfig.workspaceRoot),
+			selfSlug: basename(this.config.handlerConfig.workspaceRoot)
 		});
 		const envCtx = {
 			sdk: this.config.sdk,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-team-foundation/first-tree-hub",
-  "version": "0.14.9-alpha.302.1",
+  "version": "0.14.9-alpha.303.1",
   "type": "module",
   "description": "First Tree Hub — unified CLI for client and agent management",
   "exports": {