@alfe.ai/claude-code-host 0.1.12 → 0.1.14

package/dist/host-config.cjs

@@ -3,9 +3,9 @@ let _alfe_ai_chat = require("@alfe.ai/chat");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
 let node_os = require("node:os");
+let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 let node_readline = require("node:readline");
-let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 let _alfe_ai_config = require("@alfe.ai/config");
 //#region src/child-env.ts
@@ -925,6 +925,7 @@ const MAX_IDENTIFIER_CHARS = 512;
 const MAX_MEMORY_CONTEXT_CHARS = 64 * 1024;
 const MAX_CLAUDE_SESSION_IDS = 1e3;
 const MAX_IDEMPOTENCY_KEYS = 1e4;
+const MAX_IDEMPOTENCY_RESULT_BYTES = 8 * 1024 * 1024;
 const SHUTDOWN_GRACE_MS = 3e3;
 function asRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -1122,12 +1123,10 @@ var ClaudeCodeHost = class {
 	/** Alfe sessionId → claude session id map (mirrors ~/.alfe/claude-code/sessions.json). */
 	claudeSessionIds = /* @__PURE__ */ new Map();
 	claudeSessionsPath;
-	/** RPC sessionKey → currently RUNNING request id (for chat.abort targeting). */
+	/** Session → one running turn's wire identity and owned child. */
 	runningTurns = /* @__PURE__ */ new Map();
-	/** idempotencyKey → settled request id, for E3 duplicate-RPC dedupe. */
-	seenIdempotencyKeys = /* @__PURE__ */ new Map();
-	/** RPC sessionKey → resolved SessionDriver so chat.abort can SIGINT the child. */
-	activeDriverBySession = /* @__PURE__ */ new Map();
+	/** Process-local admission/result replay. In-flight records are never evicted. */
+	agentOperations = /* @__PURE__ */ new Map();
 	claudeSessionSave = Promise.resolve();
 	stopping = false;
 	stopPromise = null;
@@ -1166,7 +1165,10 @@ var ClaudeCodeHost = class {
 		if (this.stopPromise) return this.stopPromise;
 		this.stopping = true;
 		this.queues.stop();
-		for (const driver of this.activeDriverBySession.values()) driver.abort();
+		for (const { driver, cancellation } of this.runningTurns.values()) {
+			cancellation.abort();
+			driver.abort();
+		}
 		this.chat.stop();
 		this.stopPromise = (async () => {
 			let timer;
@@ -1204,7 +1206,7 @@ var ClaudeCodeHost = class {
 					await this.handleSessionsGet(req);
 					return;
 				case "runtime.activity":
-					this.chat.sendResponse(req.id, true, { active: this.activeDriverBySession.size > 0 });
+					this.chat.sendResponse(req.id, true, { active: this.runningTurns.size > 0 });
 					return;
 				default:
 					this.chat.sendResponse(req.id, false, { message: `Unknown method: ${req.method}` });
@@ -1221,29 +1223,63 @@ var ClaudeCodeHost = class {
 		const sessionKey = params.sessionKey;
 		const idem = params.idempotencyKey;
 		if (idem) this.pruneIdempotency();
-		if (idem && this.seenIdempotencyKeys.has(idem)) {
-			this.chat.sendResponse(req.id, true, { sessionKey });
+		const fingerprint = (0, node_crypto.createHash)("sha256").update(JSON.stringify(params)).digest("hex");
+		const existing = idem ? this.agentOperations.get(idem) : void 0;
+		if (existing) {
+			if (existing.fingerprint !== fingerprint) throw new Error("Idempotency key already belongs to a different agent request");
+			if (existing.outcome) this.deliverAgentOutcome(req.id, existing.outcome);
+			else {
+				const outcome = await existing.completion;
+				this.chat.sendResponse(req.id, outcome.ok, outcome.payload);
+			}
 			return;
 		}
-		const claimedAt = idem ? Date.now() : void 0;
-		if (idem && claimedAt !== void 0) this.seenIdempotencyKeys.set(idem, claimedAt);
+		let resolveCompletion;
+		const operation = {
+			fingerprint,
+			completion: new Promise((resolve) => {
+				resolveCompletion = resolve;
+			}),
+			resultBytes: 0
+		};
+		if (idem) this.agentOperations.set(idem, operation);
+		const complete = (outcome) => {
+			if (operation.outcome) return;
+			operation.outcome = outcome;
+			operation.settledAt = Date.now();
+			operation.resultBytes = Buffer.byteLength(JSON.stringify(outcome), "utf-8");
+			this.deliverAgentOutcome(req.id, outcome);
+			resolveCompletion(outcome);
+			if (idem) this.pruneIdempotency();
+		};
 		const coalesceKey = params.coalesce === "replace" ? sessionKey : void 0;
 		try {
-			await this.queues.enqueue(sessionKey, () => this.runAgentTurn(req, params), coalesceKey ? {
+			await this.queues.enqueue(sessionKey, () => this.runAgentTurn(req, params, complete), coalesceKey ? {
 				coalesceKey,
 				onSuperseded: () => {
-					this.chat.sendResponse(req.id, true, {
-						superseded: true,
-						sessionKey
+					complete({
+						ok: true,
+						payload: {
+							superseded: true,
+							sessionKey
+						}
 					});
 				}
 			} : void 0);
 		} catch (error) {
-			if (idem && this.seenIdempotencyKeys.get(idem) === claimedAt) this.seenIdempotencyKeys.delete(idem);
-			throw error;
+			const message = error instanceof Error ? error.message : String(error);
+			this.log.error(`[claude-host] agent operation failed: ${message}`);
+			complete({
+				ok: false,
+				payload: { message }
+			});
 		}
 	}
-	async runAgentTurn(req, params) {
+	deliverAgentOutcome(requestId, outcome) {
+		if (outcome.notification) this.chat.notify("agent-message", outcome.notification);
+		this.chat.sendResponse(requestId, outcome.ok, outcome.payload);
+	}
+	async runAgentTurn(req, params, complete) {
 		const sessionKey = params.sessionKey;
 		const bareSessionId = params.conversationId ?? stripAgentPrefix(sessionKey);
 		const runId = params.idempotencyKey ?? req.id;
@@ -1260,11 +1296,15 @@ var ClaudeCodeHost = class {
 		const appendSystemPrompt = this.buildSystemPrompt(memoryContext, isVoice);
 		const claudeSessionId = this.claudeSessionIds.get(bareSessionId) ?? null;
 		const driver = this.makeDriver();
-		this.runningTurns.set(sessionKey, req.id);
-		this.activeDriverBySession.set(sessionKey, driver);
+		const cancellation = new AbortController();
+		this.runningTurns.set(sessionKey, {
+			runId,
+			driver,
+			cancellation
+		});
 		let result;
 		try {
-			result = await this.runWithResumeFallback(driver, bareSessionId, sessionKey, runId, {
+			result = await this.runWithResumeFallback(driver, bareSessionId, cancellation.signal, {
 				prompt: params.message,
 				claudeSessionId,
 				cwd: this.cfg.workspace,
@@ -1277,8 +1317,6 @@ var ClaudeCodeHost = class {
 			}, isVoice);
 		} finally {
 			this.runningTurns.delete(sessionKey);
-			this.activeDriverBySession.delete(sessionKey);
-			if (params.idempotencyKey) this.seenIdempotencyKeys.set(params.idempotencyKey, Date.now());
 		}
 		if (result.claudeSessionId && result.claudeSessionId !== claudeSessionId) {
 			this.rememberClaudeSessionId(bareSessionId, result.claudeSessionId);
@@ -1286,19 +1324,32 @@ var ClaudeCodeHost = class {
 		}
 		const activityRecords = collectTurnActivityRecords(result.emissions);
 		if (activityRecords.length) await appendActivity(bareSessionId, activityRecords);
-		if (result.aborted) return;
+		if (result.aborted) {
+			complete({
+				ok: true,
+				payload: { sessionKey }
+			});
+			return;
+		}
 		if (result.isError) {
-			this.chat.sendResponse(req.id, false, { message: result.errorMessage ?? "Claude Code turn failed" });
+			complete({
+				ok: false,
+				payload: { message: result.errorMessage ?? "Claude Code turn failed" }
+			});
 			return;
 		}
 		if (result.finalText) await addMessage(bareSessionId, "assistant", result.finalText);
-		if (result.finalText) this.chat.notify("agent-message", {
+		const notification = result.finalText ? {
 			conversationId: bareSessionId,
 			text: result.finalText,
 			sessionKey,
 			messageId: params.chatMessageId ?? req.id
+		} : void 0;
+		complete({
+			ok: true,
+			payload: { sessionKey },
+			...notification ? { notification } : {}
 		});
-		this.chat.sendResponse(req.id, true, { sessionKey });
 		try {
 			const messages = [{
 				role: "user",
@@ -1321,18 +1372,30 @@ var ClaudeCodeHost = class {
 	* Run a turn; on a `--resume` failure (stale/missing claude session id) start
 	* fresh and prepend the last-N stored messages so the model keeps context.
 	*/
-	async runWithResumeFallback(driver, bareSessionId, _sessionKey, _runId, baseParams, isVoice) {
+	async runWithResumeFallback(driver, bareSessionId, cancellation, baseParams, isVoice) {
+		const cancelled = () => cancellation.aborted || this.stopping;
+		const aborted = (result) => ({
+			claudeSessionId: result?.claudeSessionId ?? null,
+			emissions: result?.emissions ?? [],
+			isError: false,
+			finalText: "",
+			aborted: true
+		});
+		if (cancelled()) return aborted();
 		const first = await driver.runTurn(baseParams, isVoice ? "voice" : "chat");
-		if (!(baseParams.claudeSessionId !== null && first.isError && first.claudeSessionId === null && first.emissions.length === 0) || this.stopping) return first;
+		if (cancelled()) return aborted(first);
+		if (!(baseParams.claudeSessionId !== null && first.isError && first.claudeSessionId === null && first.emissions.length === 0) || first.aborted) return first;
 		this.log.warn(`[claude-host] --resume failed for ${bareSessionId}; starting a fresh claude session`);
 		this.claudeSessionIds.delete(bareSessionId);
 		const history = await this.buildHistoryPreamble(bareSessionId);
+		if (cancelled()) return aborted(first);
 		const freshPrompt = history ? `${history}\n\n---\n\n${baseParams.prompt}` : baseParams.prompt;
-		return driver.runTurn({
+		const fresh = await driver.runTurn({
 			...baseParams,
 			claudeSessionId: null,
 			prompt: freshPrompt
 		}, isVoice ? "voice" : "chat");
+		return cancelled() ? aborted(fresh) : fresh;
 	}
 	forwardEmission(runId, sessionKey, emission) {
 		if (emission.type === "chat-delta") {
@@ -1368,13 +1431,13 @@ var ClaudeCodeHost = class {
 		}
 	}
 	handleChatAbort(req) {
-		const { sessionKey } = req.params;
+		const { sessionKey, runId } = req.params;
 		let aborted = false;
-		const driver = sessionKey ? this.activeDriverBySession.get(sessionKey) : void 0;
-		if (sessionKey && driver) {
-			driver.abort();
-			const runningReqId = this.runningTurns.get(sessionKey);
-			if (runningReqId) this.chat.sendResponse(runningReqId, true, { sessionKey });
+		const active = sessionKey ? this.runningTurns.get(sessionKey) : void 0;
+		const matchesRun = runId === void 0 || typeof runId === "string" && runId.length > 0 && runId.length <= 256 && active?.runId === runId;
+		if (sessionKey && active && matchesRun) {
+			active.cancellation.abort();
+			active.driver.abort();
 			aborted = true;
 		}
 		this.chat.sendResponse(req.id, true, { aborted });
@@ -1477,11 +1540,14 @@ var ClaudeCodeHost = class {
 	}
 	pruneIdempotency() {
 		const cutoff = Date.now() - 10 * 6e4;
-		for (const [k, ts] of this.seenIdempotencyKeys) if (ts < cutoff) this.seenIdempotencyKeys.delete(k);
-		while (this.seenIdempotencyKeys.size >= MAX_IDEMPOTENCY_KEYS) {
-			const oldest = this.seenIdempotencyKeys.keys().next().value;
-			if (!oldest) break;
-			this.seenIdempotencyKeys.delete(oldest);
+		let resultBytes = 0;
+		for (const [key, operation] of this.agentOperations) if (operation.settledAt !== void 0 && operation.settledAt < cutoff) this.agentOperations.delete(key);
+		else resultBytes += operation.resultBytes;
+		for (const [key, operation] of this.agentOperations) {
+			if (this.agentOperations.size < MAX_IDEMPOTENCY_KEYS && resultBytes <= MAX_IDEMPOTENCY_RESULT_BYTES) break;
+			if (operation.settledAt === void 0) continue;
+			this.agentOperations.delete(key);
+			resultBytes -= operation.resultBytes;
 		}
 	}
 };

package/dist/host-config.js

@@ -3,9 +3,9 @@ import { ChatServiceClient, resolveAlfeChat } from "@alfe.ai/chat";
 import { mkdir, readFile, readdir, rename, stat, unlink, writeFile } from "node:fs/promises";
 import { basename, dirname, join } from "node:path";
 import { homedir } from "node:os";
+import { createHash, randomUUID } from "node:crypto";
 import { spawn } from "node:child_process";
 import { createInterface } from "node:readline";
-import { randomUUID } from "node:crypto";
 import { existsSync } from "node:fs";
 import { resolveConfig } from "@alfe.ai/config";
 //#region src/child-env.ts
@@ -925,6 +925,7 @@ const MAX_IDENTIFIER_CHARS = 512;
 const MAX_MEMORY_CONTEXT_CHARS = 64 * 1024;
 const MAX_CLAUDE_SESSION_IDS = 1e3;
 const MAX_IDEMPOTENCY_KEYS = 1e4;
+const MAX_IDEMPOTENCY_RESULT_BYTES = 8 * 1024 * 1024;
 const SHUTDOWN_GRACE_MS = 3e3;
 function asRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -1122,12 +1123,10 @@ var ClaudeCodeHost = class {
 	/** Alfe sessionId → claude session id map (mirrors ~/.alfe/claude-code/sessions.json). */
 	claudeSessionIds = /* @__PURE__ */ new Map();
 	claudeSessionsPath;
-	/** RPC sessionKey → currently RUNNING request id (for chat.abort targeting). */
+	/** Session → one running turn's wire identity and owned child. */
 	runningTurns = /* @__PURE__ */ new Map();
-	/** idempotencyKey → settled request id, for E3 duplicate-RPC dedupe. */
-	seenIdempotencyKeys = /* @__PURE__ */ new Map();
-	/** RPC sessionKey → resolved SessionDriver so chat.abort can SIGINT the child. */
-	activeDriverBySession = /* @__PURE__ */ new Map();
+	/** Process-local admission/result replay. In-flight records are never evicted. */
+	agentOperations = /* @__PURE__ */ new Map();
 	claudeSessionSave = Promise.resolve();
 	stopping = false;
 	stopPromise = null;
@@ -1166,7 +1165,10 @@ var ClaudeCodeHost = class {
 		if (this.stopPromise) return this.stopPromise;
 		this.stopping = true;
 		this.queues.stop();
-		for (const driver of this.activeDriverBySession.values()) driver.abort();
+		for (const { driver, cancellation } of this.runningTurns.values()) {
+			cancellation.abort();
+			driver.abort();
+		}
 		this.chat.stop();
 		this.stopPromise = (async () => {
 			let timer;
@@ -1204,7 +1206,7 @@ var ClaudeCodeHost = class {
 					await this.handleSessionsGet(req);
 					return;
 				case "runtime.activity":
-					this.chat.sendResponse(req.id, true, { active: this.activeDriverBySession.size > 0 });
+					this.chat.sendResponse(req.id, true, { active: this.runningTurns.size > 0 });
 					return;
 				default:
 					this.chat.sendResponse(req.id, false, { message: `Unknown method: ${req.method}` });
@@ -1221,29 +1223,63 @@ var ClaudeCodeHost = class {
 		const sessionKey = params.sessionKey;
 		const idem = params.idempotencyKey;
 		if (idem) this.pruneIdempotency();
-		if (idem && this.seenIdempotencyKeys.has(idem)) {
-			this.chat.sendResponse(req.id, true, { sessionKey });
+		const fingerprint = createHash("sha256").update(JSON.stringify(params)).digest("hex");
+		const existing = idem ? this.agentOperations.get(idem) : void 0;
+		if (existing) {
+			if (existing.fingerprint !== fingerprint) throw new Error("Idempotency key already belongs to a different agent request");
+			if (existing.outcome) this.deliverAgentOutcome(req.id, existing.outcome);
+			else {
+				const outcome = await existing.completion;
+				this.chat.sendResponse(req.id, outcome.ok, outcome.payload);
+			}
 			return;
 		}
-		const claimedAt = idem ? Date.now() : void 0;
-		if (idem && claimedAt !== void 0) this.seenIdempotencyKeys.set(idem, claimedAt);
+		let resolveCompletion;
+		const operation = {
+			fingerprint,
+			completion: new Promise((resolve) => {
+				resolveCompletion = resolve;
+			}),
+			resultBytes: 0
+		};
+		if (idem) this.agentOperations.set(idem, operation);
+		const complete = (outcome) => {
+			if (operation.outcome) return;
+			operation.outcome = outcome;
+			operation.settledAt = Date.now();
+			operation.resultBytes = Buffer.byteLength(JSON.stringify(outcome), "utf-8");
+			this.deliverAgentOutcome(req.id, outcome);
+			resolveCompletion(outcome);
+			if (idem) this.pruneIdempotency();
+		};
 		const coalesceKey = params.coalesce === "replace" ? sessionKey : void 0;
 		try {
-			await this.queues.enqueue(sessionKey, () => this.runAgentTurn(req, params), coalesceKey ? {
+			await this.queues.enqueue(sessionKey, () => this.runAgentTurn(req, params, complete), coalesceKey ? {
 				coalesceKey,
 				onSuperseded: () => {
-					this.chat.sendResponse(req.id, true, {
-						superseded: true,
-						sessionKey
+					complete({
+						ok: true,
+						payload: {
+							superseded: true,
+							sessionKey
+						}
 					});
 				}
 			} : void 0);
 		} catch (error) {
-			if (idem && this.seenIdempotencyKeys.get(idem) === claimedAt) this.seenIdempotencyKeys.delete(idem);
-			throw error;
+			const message = error instanceof Error ? error.message : String(error);
+			this.log.error(`[claude-host] agent operation failed: ${message}`);
+			complete({
+				ok: false,
+				payload: { message }
+			});
 		}
 	}
-	async runAgentTurn(req, params) {
+	deliverAgentOutcome(requestId, outcome) {
+		if (outcome.notification) this.chat.notify("agent-message", outcome.notification);
+		this.chat.sendResponse(requestId, outcome.ok, outcome.payload);
+	}
+	async runAgentTurn(req, params, complete) {
 		const sessionKey = params.sessionKey;
 		const bareSessionId = params.conversationId ?? stripAgentPrefix(sessionKey);
 		const runId = params.idempotencyKey ?? req.id;
@@ -1260,11 +1296,15 @@ var ClaudeCodeHost = class {
 		const appendSystemPrompt = this.buildSystemPrompt(memoryContext, isVoice);
 		const claudeSessionId = this.claudeSessionIds.get(bareSessionId) ?? null;
 		const driver = this.makeDriver();
-		this.runningTurns.set(sessionKey, req.id);
-		this.activeDriverBySession.set(sessionKey, driver);
+		const cancellation = new AbortController();
+		this.runningTurns.set(sessionKey, {
+			runId,
+			driver,
+			cancellation
+		});
 		let result;
 		try {
-			result = await this.runWithResumeFallback(driver, bareSessionId, sessionKey, runId, {
+			result = await this.runWithResumeFallback(driver, bareSessionId, cancellation.signal, {
 				prompt: params.message,
 				claudeSessionId,
 				cwd: this.cfg.workspace,
@@ -1277,8 +1317,6 @@ var ClaudeCodeHost = class {
 			}, isVoice);
 		} finally {
 			this.runningTurns.delete(sessionKey);
-			this.activeDriverBySession.delete(sessionKey);
-			if (params.idempotencyKey) this.seenIdempotencyKeys.set(params.idempotencyKey, Date.now());
 		}
 		if (result.claudeSessionId && result.claudeSessionId !== claudeSessionId) {
 			this.rememberClaudeSessionId(bareSessionId, result.claudeSessionId);
@@ -1286,19 +1324,32 @@ var ClaudeCodeHost = class {
 		}
 		const activityRecords = collectTurnActivityRecords(result.emissions);
 		if (activityRecords.length) await appendActivity(bareSessionId, activityRecords);
-		if (result.aborted) return;
+		if (result.aborted) {
+			complete({
+				ok: true,
+				payload: { sessionKey }
+			});
+			return;
+		}
 		if (result.isError) {
-			this.chat.sendResponse(req.id, false, { message: result.errorMessage ?? "Claude Code turn failed" });
+			complete({
+				ok: false,
+				payload: { message: result.errorMessage ?? "Claude Code turn failed" }
+			});
 			return;
 		}
 		if (result.finalText) await addMessage(bareSessionId, "assistant", result.finalText);
-		if (result.finalText) this.chat.notify("agent-message", {
+		const notification = result.finalText ? {
 			conversationId: bareSessionId,
 			text: result.finalText,
 			sessionKey,
 			messageId: params.chatMessageId ?? req.id
+		} : void 0;
+		complete({
+			ok: true,
+			payload: { sessionKey },
+			...notification ? { notification } : {}
 		});
-		this.chat.sendResponse(req.id, true, { sessionKey });
 		try {
 			const messages = [{
 				role: "user",
@@ -1321,18 +1372,30 @@ var ClaudeCodeHost = class {
 	* Run a turn; on a `--resume` failure (stale/missing claude session id) start
 	* fresh and prepend the last-N stored messages so the model keeps context.
 	*/
-	async runWithResumeFallback(driver, bareSessionId, _sessionKey, _runId, baseParams, isVoice) {
+	async runWithResumeFallback(driver, bareSessionId, cancellation, baseParams, isVoice) {
+		const cancelled = () => cancellation.aborted || this.stopping;
+		const aborted = (result) => ({
+			claudeSessionId: result?.claudeSessionId ?? null,
+			emissions: result?.emissions ?? [],
+			isError: false,
+			finalText: "",
+			aborted: true
+		});
+		if (cancelled()) return aborted();
 		const first = await driver.runTurn(baseParams, isVoice ? "voice" : "chat");
-		if (!(baseParams.claudeSessionId !== null && first.isError && first.claudeSessionId === null && first.emissions.length === 0) || this.stopping) return first;
+		if (cancelled()) return aborted(first);
+		if (!(baseParams.claudeSessionId !== null && first.isError && first.claudeSessionId === null && first.emissions.length === 0) || first.aborted) return first;
 		this.log.warn(`[claude-host] --resume failed for ${bareSessionId}; starting a fresh claude session`);
 		this.claudeSessionIds.delete(bareSessionId);
 		const history = await this.buildHistoryPreamble(bareSessionId);
+		if (cancelled()) return aborted(first);
 		const freshPrompt = history ? `${history}\n\n---\n\n${baseParams.prompt}` : baseParams.prompt;
-		return driver.runTurn({
+		const fresh = await driver.runTurn({
 			...baseParams,
 			claudeSessionId: null,
 			prompt: freshPrompt
 		}, isVoice ? "voice" : "chat");
+		return cancelled() ? aborted(fresh) : fresh;
 	}
 	forwardEmission(runId, sessionKey, emission) {
 		if (emission.type === "chat-delta") {
@@ -1368,13 +1431,13 @@ var ClaudeCodeHost = class {
 		}
 	}
 	handleChatAbort(req) {
-		const { sessionKey } = req.params;
+		const { sessionKey, runId } = req.params;
 		let aborted = false;
-		const driver = sessionKey ? this.activeDriverBySession.get(sessionKey) : void 0;
-		if (sessionKey && driver) {
-			driver.abort();
-			const runningReqId = this.runningTurns.get(sessionKey);
-			if (runningReqId) this.chat.sendResponse(runningReqId, true, { sessionKey });
+		const active = sessionKey ? this.runningTurns.get(sessionKey) : void 0;
+		const matchesRun = runId === void 0 || typeof runId === "string" && runId.length > 0 && runId.length <= 256 && active?.runId === runId;
+		if (sessionKey && active && matchesRun) {
+			active.cancellation.abort();
+			active.driver.abort();
 			aborted = true;
 		}
 		this.chat.sendResponse(req.id, true, { aborted });
@@ -1477,11 +1540,14 @@ var ClaudeCodeHost = class {
 	}
 	pruneIdempotency() {
 		const cutoff = Date.now() - 10 * 6e4;
-		for (const [k, ts] of this.seenIdempotencyKeys) if (ts < cutoff) this.seenIdempotencyKeys.delete(k);
-		while (this.seenIdempotencyKeys.size >= MAX_IDEMPOTENCY_KEYS) {
-			const oldest = this.seenIdempotencyKeys.keys().next().value;
-			if (!oldest) break;
-			this.seenIdempotencyKeys.delete(oldest);
+		let resultBytes = 0;
+		for (const [key, operation] of this.agentOperations) if (operation.settledAt !== void 0 && operation.settledAt < cutoff) this.agentOperations.delete(key);
+		else resultBytes += operation.resultBytes;
+		for (const [key, operation] of this.agentOperations) {
+			if (this.agentOperations.size < MAX_IDEMPOTENCY_KEYS && resultBytes <= MAX_IDEMPOTENCY_RESULT_BYTES) break;
+			if (operation.settledAt === void 0) continue;
+			this.agentOperations.delete(key);
+			resultBytes -= operation.resultBytes;
 		}
 	}
 };

package/dist/index.d.cts

@@ -48,12 +48,18 @@ declare class AgentApiTransport {
    * @param extra.retry Whether to retry once on transient failures. Safe reads
    *   (GET/HEAD/OPTIONS) default to true; mutations default to false. Set true
    *   only when the endpoint's server-side contract is explicitly idempotent.
+   * @param extra.retryStatuses Narrow the HTTP statuses that trigger the retry
+   *   (default 500/502/503/504). Network errors and timeouts are always retried
+   *   when `retry` is on. Pass a subset when a status in the default set is a
+   *   deterministic answer for this endpoint (e.g. a 502 that means "upstream
+   *   denied", which a retry cannot change).
    * @param extra.signal Optional caller cancellation combined with the client's
    *   own timeout budget. Aborting either signal cancels the request.
    */
   request<T>(path: string, options?: RequestInit, extra?: {
     timeoutMs?: number;
     retry?: boolean;
+    retryStatuses?: ReadonlySet<number>;
     signal?: AbortSignal;
   }): Promise<T>;
 }
@@ -82,7 +88,37 @@ interface ConnectProviderAccounts {
   provider: string;
   accounts: ConnectProviderAccount[];
 }
+/**
+ * One AWS CLI profile an agent may use (`GET /agent/connect/aws/accounts`).
+ * `roleArn` is null for a connection's Direct identity. Carries no secret
+ * material; sessions are minted per call via `getAwsSession`.
+ */
+interface AwsProfile {
+  profile: string;
+  roleArn: string | null;
+  accountId: string;
+  region: string;
+  label: string | null;
+  connectionId: string;
+  accountIdentifier: string;
+  displayName: string | null;
+  connectedAt: string;
+}
+/** AWS CLI `credential_process` output (Version 1), as minted by Connect. */
+interface AwsSessionCredentials {
+  Version: 1;
+  AccessKeyId: string;
+  SecretAccessKey: string;
+  SessionToken: string;
+  /** ISO 8601 expiry. */
+  Expiration: string;
+}
 declare class ConnectCredentialsApi extends ApiBase {
+  /** Platform application identity for private, local Telegram login. Never expose this to tools. */
+  telegramGetApplication(): Promise<{
+    apiId: number;
+    apiHash: string;
+  }>;
   /**
    * Discover all active Connections visible to this agent for one provider.
    * Preserve the provider-specific credential projection without guessing a
@@ -476,7 +512,9 @@ declare class ConnectCredentialsApi extends ApiBase {
    * endpoint walks the agent's full visible scope chain to find a matching
    * connection (works for inherited team/project Microsoft connections).
    */
-  refreshMicrosoftAccountToken(accountIdentifier: string): Promise<{
+  refreshMicrosoftAccountToken(accountIdentifier: string, options?: {
+    connectionId?: string;
+  }): Promise<{
     accessToken: string;
     accessTokenExpiresAt: string;
     expiresAt: string;
@@ -691,12 +729,33 @@ declare class ConnectCredentialsApi extends ApiBase {
    * the fresh `accessJwt`) — callers typically ignore it and re-fetch via
    * `getSocialAccounts` for a consistent shape.
    */
-  refreshSocialAccount(provider: string, accountIdentifier: string): Promise<{
+  refreshSocialAccount(provider: string, accountIdentifier: string, options?: {
+    connectionId?: string;
+  }): Promise<{
     accountIdentifier: string;
     accessToken: string;
     accessTokenExpiresAt: string;
     expiresAt: string;
   }>;
+  /**
+   * List the AWS CLI profiles visible to this agent across every in-scope AWS
+   * connection. Each entry names the `connectionId` + `profile` pair that
+   * {@link getAwsSession} mints a session for. Fields are selected explicitly;
+   * the wire row is never spread.
+   */
+  getAwsProfiles(): Promise<AwsProfile[]>;
+  /**
+   * Mint short-lived AWS session credentials for one profile of one AWS
+   * connection, in the AWS CLI `credential_process` (Version 1) shape. The
+   * server re-checks scope + active status on every call (403 otherwise; 404
+   * for an unknown profile; 403 `aws_access_denied` when AWS denies the
+   * assume, 502 on older servers). Minting has no persistent side effect, so
+   * one retry is safe, but only on genuinely transient failures (500/503/504
+   * and network errors): a denial is deterministic and a retry just doubles
+   * the latency of every failing `aws` call. The response is secret material:
+   * never log it.
+   */
+  getAwsSession(connectionId: string, profile: string): Promise<AwsSessionCredentials>;
 }
 //# sourceMappingURL=connect-credentials.d.ts.map
 //#endregion
@@ -1392,17 +1451,34 @@ declare class IdentityApi extends ApiBase {
     platformId: string;
     kind?: "user" | "agent" | "service" | "bot" | "workspace";
     displayName?: string;
+    /**
+     * Provider `email` only: the sender address, matched read-only against an
+     * existing identity's verified email contact. Ignored for other providers.
+     */
+    email?: string;
+    /**
+     * Provider `email` only: `true` when this agent verified the sender
+     * (SPF/DKIM/DMARC). Unverified email senders are never matched to an
+     * identity. Ignored for other providers.
+     */
+    emailVerified?: boolean;
   }): Promise<{
     identityId: string | null;
     status: string;
     created?: boolean;
     reason?: string;
     /**
-     * Flattened auriclabs permission strings for the resolved identity
-     * (scope-prefixed where applicable). Empty array on miss / org service
-     * outage — the runtime gate fails closed in that case.
+     * Flattened auriclabs permission strings that apply at the calling
+     * agent's own scope (`agent:<agentId>`, plus unscoped entries). A sender
+     * with no identity still receives the tenant's `principalKind="all"`
+     * grants. Empty when nothing applies, or when `permissionsUnavailable`.
      */
     permissions: string[];
+    /**
+     * `true` when the org service could not resolve permissions. The empty
+     * `permissions` is then an outage, not a denial: retry rather than deny.
+     */
+    permissionsUnavailable?: boolean;
   }>;
   searchIdentities(args?: {
     q?: string;
@@ -1632,6 +1708,48 @@ declare class WebhooksApi extends ApiBase {
 }
 //# sourceMappingURL=webhooks.d.ts.map
 //#endregion
+//#region src/domains/wallet.d.ts
+interface AgentWalletAccount {
+  connectionId: string;
+  chainType: "ethereum" | "solana";
+  address: string;
+}
+type AgentWalletTransferStatus = "pending_approval" | "processing" | "succeeded" | "rejected" | "failed";
+interface AgentWalletTransfer {
+  requestId: string;
+  agentId: string;
+  connectionId: string;
+  chainType: "ethereum" | "solana";
+  network: string;
+  fromAddress: string;
+  toAddress: string;
+  amount: string;
+  reason?: string;
+  status: AgentWalletTransferStatus;
+  providerStatus?: string;
+  providerActionId?: string;
+  failureReason?: string;
+  billingStatus: "unmetered" | "metered" | "failed";
+  createdAt: string;
+  updatedAt: string;
+  decidedAt?: string;
+}
+declare class WalletApi extends ApiBase {
+  listWalletAccounts(): Promise<AgentWalletAccount[]>;
+  /** Create a proposal only; a human approves it in the Alfe dashboard. */
+  requestWalletTransfer(input: {
+    connectionId: string;
+    chainType: "ethereum" | "solana";
+    network: "ethereum" | "base" | "arbitrum" | "optimism" | "solana";
+    fromAddress: string;
+    toAddress: string;
+    amount: string;
+    reason?: string;
+  }): Promise<AgentWalletTransfer>;
+  getWalletTransfer(requestId: string): Promise<AgentWalletTransfer>;
+}
+//# sourceMappingURL=wallet.d.ts.map
+//#endregion
 //#region src/domains/chat.d.ts
 declare class ChatApi extends ApiBase {
   ensureDirectConversation(identityId: string): Promise<{
@@ -2003,7 +2121,7 @@ declare class TeamsApi extends ApiBase {
 
 //#endregion
 //#region src/index.d.ts
-interface AgentApiClient extends SyncApi, IntegrationsApi, WorkspaceApi, ConnectCredentialsApi, TeamsApi, ChatApi, SecretsApi, IdentityApi, MemoryApi, SearchApi, KnowledgeApi, DatabaseApi, MobileApi, RemoteApi, SelfApi, VoiceApi, ImagesApi, WebhooksApi {}
+interface AgentApiClient extends SyncApi, IntegrationsApi, WorkspaceApi, ConnectCredentialsApi, TeamsApi, ChatApi, SecretsApi, IdentityApi, MemoryApi, SearchApi, KnowledgeApi, DatabaseApi, MobileApi, RemoteApi, SelfApi, VoiceApi, ImagesApi, WebhooksApi, WalletApi {}
 declare class AgentApiClient extends ApiBase {
   constructor(config: AgentApiClientConfig);
 }
@@ -2396,12 +2514,10 @@ declare class ClaudeCodeHost {
   /** Alfe sessionId → claude session id map (mirrors ~/.alfe/claude-code/sessions.json). */
   private readonly claudeSessionIds;
   private claudeSessionsPath;
-  /** RPC sessionKey → currently RUNNING request id (for chat.abort targeting). */
+  /** Session → one running turn's wire identity and owned child. */
   private readonly runningTurns;
-  /** idempotencyKey → settled request id, for E3 duplicate-RPC dedupe. */
-  private readonly seenIdempotencyKeys;
-  /** RPC sessionKey → resolved SessionDriver so chat.abort can SIGINT the child. */
-  private activeDriverBySession;
+  /** Process-local admission/result replay. In-flight records are never evicted. */
+  private readonly agentOperations;
   private claudeSessionSave;
   private stopping;
   private stopPromise;
@@ -2421,6 +2537,7 @@ declare class ClaudeCodeHost {
    */
   handleRequest(req: RpcRequest): Promise<void>;
   private handleAgent;
+  private deliverAgentOutcome;
   private runAgentTurn;
   /**
    * Run a turn; on a `--resume` failure (stale/missing claude session id) start

package/dist/index.d.ts

@@ -48,12 +48,18 @@ declare class AgentApiTransport {
    * @param extra.retry Whether to retry once on transient failures. Safe reads
    *   (GET/HEAD/OPTIONS) default to true; mutations default to false. Set true
    *   only when the endpoint's server-side contract is explicitly idempotent.
+   * @param extra.retryStatuses Narrow the HTTP statuses that trigger the retry
+   *   (default 500/502/503/504). Network errors and timeouts are always retried
+   *   when `retry` is on. Pass a subset when a status in the default set is a
+   *   deterministic answer for this endpoint (e.g. a 502 that means "upstream
+   *   denied", which a retry cannot change).
    * @param extra.signal Optional caller cancellation combined with the client's
    *   own timeout budget. Aborting either signal cancels the request.
    */
   request<T>(path: string, options?: RequestInit, extra?: {
     timeoutMs?: number;
     retry?: boolean;
+    retryStatuses?: ReadonlySet<number>;
     signal?: AbortSignal;
   }): Promise<T>;
 }
@@ -82,7 +88,37 @@ interface ConnectProviderAccounts {
   provider: string;
   accounts: ConnectProviderAccount[];
 }
+/**
+ * One AWS CLI profile an agent may use (`GET /agent/connect/aws/accounts`).
+ * `roleArn` is null for a connection's Direct identity. Carries no secret
+ * material; sessions are minted per call via `getAwsSession`.
+ */
+interface AwsProfile {
+  profile: string;
+  roleArn: string | null;
+  accountId: string;
+  region: string;
+  label: string | null;
+  connectionId: string;
+  accountIdentifier: string;
+  displayName: string | null;
+  connectedAt: string;
+}
+/** AWS CLI `credential_process` output (Version 1), as minted by Connect. */
+interface AwsSessionCredentials {
+  Version: 1;
+  AccessKeyId: string;
+  SecretAccessKey: string;
+  SessionToken: string;
+  /** ISO 8601 expiry. */
+  Expiration: string;
+}
 declare class ConnectCredentialsApi extends ApiBase {
+  /** Platform application identity for private, local Telegram login. Never expose this to tools. */
+  telegramGetApplication(): Promise<{
+    apiId: number;
+    apiHash: string;
+  }>;
   /**
    * Discover all active Connections visible to this agent for one provider.
    * Preserve the provider-specific credential projection without guessing a
@@ -476,7 +512,9 @@ declare class ConnectCredentialsApi extends ApiBase {
    * endpoint walks the agent's full visible scope chain to find a matching
    * connection (works for inherited team/project Microsoft connections).
    */
-  refreshMicrosoftAccountToken(accountIdentifier: string): Promise<{
+  refreshMicrosoftAccountToken(accountIdentifier: string, options?: {
+    connectionId?: string;
+  }): Promise<{
     accessToken: string;
     accessTokenExpiresAt: string;
     expiresAt: string;
@@ -691,12 +729,33 @@ declare class ConnectCredentialsApi extends ApiBase {
    * the fresh `accessJwt`) — callers typically ignore it and re-fetch via
    * `getSocialAccounts` for a consistent shape.
    */
-  refreshSocialAccount(provider: string, accountIdentifier: string): Promise<{
+  refreshSocialAccount(provider: string, accountIdentifier: string, options?: {
+    connectionId?: string;
+  }): Promise<{
     accountIdentifier: string;
     accessToken: string;
     accessTokenExpiresAt: string;
     expiresAt: string;
   }>;
+  /**
+   * List the AWS CLI profiles visible to this agent across every in-scope AWS
+   * connection. Each entry names the `connectionId` + `profile` pair that
+   * {@link getAwsSession} mints a session for. Fields are selected explicitly;
+   * the wire row is never spread.
+   */
+  getAwsProfiles(): Promise<AwsProfile[]>;
+  /**
+   * Mint short-lived AWS session credentials for one profile of one AWS
+   * connection, in the AWS CLI `credential_process` (Version 1) shape. The
+   * server re-checks scope + active status on every call (403 otherwise; 404
+   * for an unknown profile; 403 `aws_access_denied` when AWS denies the
+   * assume, 502 on older servers). Minting has no persistent side effect, so
+   * one retry is safe, but only on genuinely transient failures (500/503/504
+   * and network errors): a denial is deterministic and a retry just doubles
+   * the latency of every failing `aws` call. The response is secret material:
+   * never log it.
+   */
+  getAwsSession(connectionId: string, profile: string): Promise<AwsSessionCredentials>;
 }
 //# sourceMappingURL=connect-credentials.d.ts.map
 //#endregion
@@ -1392,17 +1451,34 @@ declare class IdentityApi extends ApiBase {
     platformId: string;
     kind?: "user" | "agent" | "service" | "bot" | "workspace";
     displayName?: string;
+    /**
+     * Provider `email` only: the sender address, matched read-only against an
+     * existing identity's verified email contact. Ignored for other providers.
+     */
+    email?: string;
+    /**
+     * Provider `email` only: `true` when this agent verified the sender
+     * (SPF/DKIM/DMARC). Unverified email senders are never matched to an
+     * identity. Ignored for other providers.
+     */
+    emailVerified?: boolean;
   }): Promise<{
     identityId: string | null;
     status: string;
     created?: boolean;
     reason?: string;
     /**
-     * Flattened auriclabs permission strings for the resolved identity
-     * (scope-prefixed where applicable). Empty array on miss / org service
-     * outage — the runtime gate fails closed in that case.
+     * Flattened auriclabs permission strings that apply at the calling
+     * agent's own scope (`agent:<agentId>`, plus unscoped entries). A sender
+     * with no identity still receives the tenant's `principalKind="all"`
+     * grants. Empty when nothing applies, or when `permissionsUnavailable`.
      */
     permissions: string[];
+    /**
+     * `true` when the org service could not resolve permissions. The empty
+     * `permissions` is then an outage, not a denial: retry rather than deny.
+     */
+    permissionsUnavailable?: boolean;
   }>;
   searchIdentities(args?: {
     q?: string;
@@ -1632,6 +1708,48 @@ declare class WebhooksApi extends ApiBase {
 }
 //# sourceMappingURL=webhooks.d.ts.map
 //#endregion
+//#region src/domains/wallet.d.ts
+interface AgentWalletAccount {
+  connectionId: string;
+  chainType: "ethereum" | "solana";
+  address: string;
+}
+type AgentWalletTransferStatus = "pending_approval" | "processing" | "succeeded" | "rejected" | "failed";
+interface AgentWalletTransfer {
+  requestId: string;
+  agentId: string;
+  connectionId: string;
+  chainType: "ethereum" | "solana";
+  network: string;
+  fromAddress: string;
+  toAddress: string;
+  amount: string;
+  reason?: string;
+  status: AgentWalletTransferStatus;
+  providerStatus?: string;
+  providerActionId?: string;
+  failureReason?: string;
+  billingStatus: "unmetered" | "metered" | "failed";
+  createdAt: string;
+  updatedAt: string;
+  decidedAt?: string;
+}
+declare class WalletApi extends ApiBase {
+  listWalletAccounts(): Promise<AgentWalletAccount[]>;
+  /** Create a proposal only; a human approves it in the Alfe dashboard. */
+  requestWalletTransfer(input: {
+    connectionId: string;
+    chainType: "ethereum" | "solana";
+    network: "ethereum" | "base" | "arbitrum" | "optimism" | "solana";
+    fromAddress: string;
+    toAddress: string;
+    amount: string;
+    reason?: string;
+  }): Promise<AgentWalletTransfer>;
+  getWalletTransfer(requestId: string): Promise<AgentWalletTransfer>;
+}
+//# sourceMappingURL=wallet.d.ts.map
+//#endregion
 //#region src/domains/chat.d.ts
 declare class ChatApi extends ApiBase {
   ensureDirectConversation(identityId: string): Promise<{
@@ -2003,7 +2121,7 @@ declare class TeamsApi extends ApiBase {
 
 //#endregion
 //#region src/index.d.ts
-interface AgentApiClient extends SyncApi, IntegrationsApi, WorkspaceApi, ConnectCredentialsApi, TeamsApi, ChatApi, SecretsApi, IdentityApi, MemoryApi, SearchApi, KnowledgeApi, DatabaseApi, MobileApi, RemoteApi, SelfApi, VoiceApi, ImagesApi, WebhooksApi {}
+interface AgentApiClient extends SyncApi, IntegrationsApi, WorkspaceApi, ConnectCredentialsApi, TeamsApi, ChatApi, SecretsApi, IdentityApi, MemoryApi, SearchApi, KnowledgeApi, DatabaseApi, MobileApi, RemoteApi, SelfApi, VoiceApi, ImagesApi, WebhooksApi, WalletApi {}
 declare class AgentApiClient extends ApiBase {
   constructor(config: AgentApiClientConfig);
 }
@@ -2396,12 +2514,10 @@ declare class ClaudeCodeHost {
   /** Alfe sessionId → claude session id map (mirrors ~/.alfe/claude-code/sessions.json). */
   private readonly claudeSessionIds;
   private claudeSessionsPath;
-  /** RPC sessionKey → currently RUNNING request id (for chat.abort targeting). */
+  /** Session → one running turn's wire identity and owned child. */
   private readonly runningTurns;
-  /** idempotencyKey → settled request id, for E3 duplicate-RPC dedupe. */
-  private readonly seenIdempotencyKeys;
-  /** RPC sessionKey → resolved SessionDriver so chat.abort can SIGINT the child. */
-  private activeDriverBySession;
+  /** Process-local admission/result replay. In-flight records are never evicted. */
+  private readonly agentOperations;
   private claudeSessionSave;
   private stopping;
   private stopPromise;
@@ -2421,6 +2537,7 @@ declare class ClaudeCodeHost {
    */
   handleRequest(req: RpcRequest): Promise<void>;
   private handleAgent;
+  private deliverAgentOutcome;
   private runAgentTurn;
   /**
    * Run a turn; on a `--resume` failure (stale/missing claude session id) start

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/claude-code-host",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "Chat bridge that makes a self-hosted Claude Code agent reachable from Alfe chat on the user's Claude subscription",
   "type": "module",
   "main": "./dist/index.js",
@@ -19,7 +19,7 @@
     "dist"
   ],
   "dependencies": {
-    "@alfe.ai/agent-api-client": "^0.19.0",
+    "@alfe.ai/agent-api-client": "^0.20.0",
     "@alfe.ai/chat": "^0.0.19",
     "@alfe.ai/config": "^0.4.1"
   },