@awiki/dsh-plugin 0.3.11-rc.1 → 0.3.11-rc.2

package/lib/types/index.js

@@ -34,7 +34,7 @@ var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn,
 };
 export { registerAwikiLoopbackRpc } from "./settings-transport.js";
 import { registerAwikiSettingsTransport } from "./settings-transport.js";
-import { registrationHandleLocalPart, shortHandleInviteRequired } from "./registration-policy.js";
+import { registrationHandleLocalPart } from "./registration-policy.js";
 import { decodeDesktopDistribution } from "./desktop-distribution.js";
 /** Unified AWiki identity, messaging, attachment, Remote, and model-tool service. */
 import { Context } from '@deepseek-ai/cordis';
@@ -49,10 +49,12 @@ import { AwikiExternalHttpAuthError, createAwikiExternalHttpAuth, externalHttpAu
 import { AwikiIntegrationClient } from "./integration-client.js";
 import { clearLegacySentMailCache } from "./legacy-sent-mail-cache.js";
 import { AwikiMailListClient } from "./mail-list-client.js";
+import { AwikiMailAttachmentClient, MAIL_HTTP_UPLOAD_MAX_BYTES } from "./mail-attachment-client.js";
 import { AwikiSdkError, downloadedAttachment } from "./sdk-adapter.js";
 import { failedMailRecoveryObservability, fencedMailRecoveryObservability, successfulMailRecoveryObservability, } from "./mail-recovery-observability.js";
+import { standardBase64Syntax } from "./base64.js";
 import { registerAwikiTools } from "./tools.js";
-import { mailInboxRequest, mailMarkReadRequest, mailReadRequest, mailSendRequest, } from "./mail.js";
+import { MAIL_ATTACHMENT_SERVICE_MAX_BYTES, MAIL_ATTACHMENT_SERVICE_MAX_COUNT, MAIL_ATTACHMENT_SERVICE_TOTAL_MAX_BYTES, mailAttachmentDownloadRequest, mailInboxRequest, mailMarkReadRequest, mailReadRequest, mailSendRequest, } from "./mail.js";
 import { AwikiSettingsSchema, validateAwikiSettings, } from "./settings.js";
 import { AWIKI_SETTINGS_NAMESPACE, DEFAULT_AWIKI_DOMAIN, normalizeAwikiDomain } from "./domain.js";
 import { AWIKI_DEFAULT_BUILTIN_TENANT, } from "./builtin-tenant-config.js";
@@ -99,6 +101,9 @@ export const Config = z.object({
     allowInsecureLoopbackForTesting: z.boolean().default(false),
     stateRoot: z.string(),
     attachmentMaxBytes: z.number().default(DEFAULT_ATTACHMENT_MAX_BYTES),
+    mailAttachmentMaxCount: z.number().default(MAIL_ATTACHMENT_SERVICE_MAX_COUNT),
+    mailAttachmentMaxBytes: z.number().default(MAIL_ATTACHMENT_SERVICE_MAX_BYTES),
+    mailAttachmentTotalMaxBytes: z.number().default(MAIL_ATTACHMENT_SERVICE_TOTAL_MAX_BYTES),
     imageAttachmentCacheMaxBytes: z.number().default(DEFAULT_IMAGE_ATTACHMENT_CACHE_MAX_BYTES),
     pollIntervalMs: z.number().default(DEFAULT_POLL_INTERVAL_MS),
     realtimeEnabled: z.boolean().default(true),
@@ -122,6 +127,7 @@ const FAILURE_CODES = new Set([
     'device-rejoin-required',
     'identity-recovery-required',
     'conflict',
+    'state-in-use',
     'rate-limited',
     'group-membership-required',
     'group-identity-stale',
@@ -160,6 +166,7 @@ const FAILURE_MESSAGES = {
     'device-rejoin-required': 'This device credential was revoked and must join the Handle again.',
     'identity-recovery-required': 'The local AWiki identity must be recovered before it can be used again.',
     'conflict': 'The AWiki operation conflicts with current state.',
+    'state-in-use': 'AWiki data is already open in another client.',
     'rate-limited': 'The AWiki service rate-limited the request.',
     'group-membership-required': 'The active AWiki identity is not a member of this group.',
     'group-identity-stale': 'The AWiki group identity binding is still recovering.',
@@ -339,6 +346,24 @@ function resolveConfig(ctx, config) {
     if (!Number.isSafeInteger(attachmentMaxBytes) || attachmentMaxBytes < 1) {
         throw new TypeError('awiki: attachmentMaxBytes must be a positive safe integer');
     }
+    const mailAttachmentMaxCount = config.mailAttachmentMaxCount ?? MAIL_ATTACHMENT_SERVICE_MAX_COUNT;
+    if (!Number.isSafeInteger(mailAttachmentMaxCount)
+        || mailAttachmentMaxCount < 0
+        || mailAttachmentMaxCount > MAIL_ATTACHMENT_SERVICE_MAX_COUNT) {
+        throw new TypeError('awiki: mailAttachmentMaxCount must be an integer from 0 through 10');
+    }
+    const mailAttachmentMaxBytes = config.mailAttachmentMaxBytes ?? MAIL_ATTACHMENT_SERVICE_MAX_BYTES;
+    if (!Number.isSafeInteger(mailAttachmentMaxBytes)
+        || mailAttachmentMaxBytes < 1
+        || mailAttachmentMaxBytes > MAIL_ATTACHMENT_SERVICE_MAX_BYTES) {
+        throw new TypeError('awiki: mailAttachmentMaxBytes must be a positive safe integer no greater than 10 MiB');
+    }
+    const mailAttachmentTotalMaxBytes = config.mailAttachmentTotalMaxBytes ?? MAIL_ATTACHMENT_SERVICE_TOTAL_MAX_BYTES;
+    if (!Number.isSafeInteger(mailAttachmentTotalMaxBytes)
+        || mailAttachmentTotalMaxBytes < mailAttachmentMaxBytes
+        || mailAttachmentTotalMaxBytes > MAIL_ATTACHMENT_SERVICE_TOTAL_MAX_BYTES) {
+        throw new TypeError('awiki: mailAttachmentTotalMaxBytes must cover one attachment and not exceed 18 MiB');
+    }
     const imageAttachmentCacheMaxBytes = config.imageAttachmentCacheMaxBytes ?? DEFAULT_IMAGE_ATTACHMENT_CACHE_MAX_BYTES;
     if (!Number.isSafeInteger(imageAttachmentCacheMaxBytes)
         || imageAttachmentCacheMaxBytes < minimumImageAttachmentCacheMaxBytes(attachmentMaxBytes)) {
@@ -384,6 +409,9 @@ function resolveConfig(ctx, config) {
         allowInsecureLoopbackForTesting,
         stateRoot,
         attachmentMaxBytes,
+        mailAttachmentMaxCount,
+        mailAttachmentMaxBytes,
+        mailAttachmentTotalMaxBytes,
         imageAttachmentCacheMaxBytes,
         pollIntervalMs,
         realtimeEnabled,
@@ -738,7 +766,7 @@ function decodeAttachment(bytesBase64, maxBytes) {
     const maxEncoded = Math.ceil(maxBytes / 3) * 4;
     if (bytesBase64.length > maxEncoded)
         return { ok: false, error: failure('attachment-too-large') };
-    if (bytesBase64.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u.test(bytesBase64)) {
+    if (bytesBase64.length % 4 !== 0 || !standardBase64Syntax(bytesBase64)) {
         return { ok: false, error: failure('invalid-request') };
     }
     const bytes = Uint8Array.from(Buffer.from(bytesBase64, 'base64'));
@@ -812,6 +840,7 @@ let AwikiService = (() => {
     let _readMail_decorators;
     let _markMailRead_decorators;
     let _sendMail_decorators;
+    let _downloadMailAttachment_decorators;
     let _clearLocalData_decorators;
     return class AwikiService extends _classSuper {
         static {
@@ -876,6 +905,7 @@ let AwikiService = (() => {
             _readMail_decorators = [Remote];
             _markMailRead_decorators = [Remote];
             _sendMail_decorators = [Remote];
+            _downloadMailAttachment_decorators = [Remote];
             _clearLocalData_decorators = [Remote];
             __esDecorate(this, null, _getConfig_decorators, { kind: "method", name: "getConfig", static: false, private: false, access: { has: obj => "getConfig" in obj, get: obj => obj.getConfig }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _getIntegration_decorators, { kind: "method", name: "getIntegration", static: false, private: false, access: { has: obj => "getIntegration" in obj, get: obj => obj.getIntegration }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -937,6 +967,7 @@ let AwikiService = (() => {
             __esDecorate(this, null, _readMail_decorators, { kind: "method", name: "readMail", static: false, private: false, access: { has: obj => "readMail" in obj, get: obj => obj.readMail }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _markMailRead_decorators, { kind: "method", name: "markMailRead", static: false, private: false, access: { has: obj => "markMailRead" in obj, get: obj => obj.markMailRead }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _sendMail_decorators, { kind: "method", name: "sendMail", static: false, private: false, access: { has: obj => "sendMail" in obj, get: obj => obj.sendMail }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _downloadMailAttachment_decorators, { kind: "method", name: "downloadMailAttachment", static: false, private: false, access: { has: obj => "downloadMailAttachment" in obj, get: obj => obj.downloadMailAttachment }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _clearLocalData_decorators, { kind: "method", name: "clearLocalData", static: false, private: false, access: { has: obj => "clearLocalData" in obj, get: obj => obj.clearLocalData }, metadata: _metadata }, null, _instanceExtraInitializers);
             if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
@@ -1451,6 +1482,10 @@ let AwikiService = (() => {
                 value: {
                     pollIntervalMs: this.resolved.pollIntervalMs,
                     attachmentMaxBytes: this.resolved.attachmentMaxBytes,
+                    mailAttachmentMaxCount: this.resolved.mailAttachmentMaxCount,
+                    mailAttachmentMaxBytes: Math.min(this.resolved.mailAttachmentMaxBytes, MAIL_HTTP_UPLOAD_MAX_BYTES),
+                    mailAttachmentDownloadMaxBytes: this.resolved.mailAttachmentMaxBytes,
+                    mailAttachmentTotalMaxBytes: Math.min(this.resolved.mailAttachmentTotalMaxBytes, MAIL_HTTP_UPLOAD_MAX_BYTES),
                     handleRecoveryPhoneEnabled: capabilities.handleRecoveryPhoneEnabled,
                     ...capabilities.guestGatewayBaseUrl === undefined
                         ? {}
@@ -1716,13 +1751,6 @@ let AwikiService = (() => {
             }
         }
         async sendRegistrationOtp(request) {
-            if (shortHandleInviteRequired(request.handle)) {
-                const inspection = await this.inspectIdentityAccess({ handle: request.handle });
-                if (!inspection.ok)
-                    return inspection;
-                if (inspection.value.status === 'available')
-                    return { ok: false, error: failure('short-handle-invite-required') };
-            }
             this.pendingDeviceJoin = undefined;
             return this.run(async (client) => {
                 if (await this.selectDeviceJoinSession(client) !== null) {
@@ -1737,13 +1765,6 @@ let AwikiService = (() => {
          * @returns The new public identity or a closed failure.
          */
         async registerIdentity(request) {
-            if (shortHandleInviteRequired(request.handle)) {
-                const inspection = await this.inspectIdentityAccess({ handle: request.handle });
-                if (!inspection.ok)
-                    return inspection;
-                if (inspection.value.status === 'available')
-                    return { ok: false, error: failure('short-handle-invite-required') };
-            }
             this.pendingDeviceJoin = undefined;
             const result = await this.run(async (client) => {
                 if (await this.selectDeviceJoinSession(client) !== null) {
@@ -2444,7 +2465,7 @@ let AwikiService = (() => {
         }
         /** Return the deployment identity's public mailbox state. */
         getMailAccount() {
-            return this.run(client => client.getMailAccount());
+            return this.run(client => client.getMailAccount(), { bindMailOwner: true });
         }
         /** List one bounded mailbox page on explicit browser/tool demand. */
         async listMailInbox(request) {
@@ -2463,7 +2484,7 @@ let AwikiService = (() => {
                 if (this.sessionRevision !== requestGeneration)
                     throw new AwikiSdkError('network');
                 return page;
-            });
+            }, { bindMailOwner: true });
         }
         /** Read one bounded plain-text mail message. */
         async readMail(request) {
@@ -2474,22 +2495,39 @@ let AwikiService = (() => {
             catch {
                 return { ok: false, error: failure('invalid-request') };
             }
-            return this.run(client => client.readMail(normalized));
+            return this.run(client => client.readMail(normalized), { bindMailOwner: true });
         }
         /** Mark explicitly selected mail messages read. Browser callers require an explicit click. */
         markMailRead(request) {
-            return this.runValidatedMail(() => mailMarkReadRequest(request), (client, normalized) => client.markMailRead(normalized));
+            return this.runValidatedMail(() => mailMarkReadRequest(request), (client, normalized) => client.markMailRead(normalized), { bindMailOwner: true });
         }
-        /** Send one plain-text mail once. Browser callers require an explicit confirmation. */
+        /** Send one mail once. Browser callers require an explicit confirmation. */
         async sendMail(request) {
             let normalized;
             try {
-                normalized = mailSendRequest(request);
+                normalized = mailSendRequest(request, {
+                    maxCount: this.resolved.mailAttachmentMaxCount,
+                    maxBytes: Math.min(this.resolved.mailAttachmentMaxBytes, MAIL_HTTP_UPLOAD_MAX_BYTES),
+                    totalMaxBytes: Math.min(this.resolved.mailAttachmentTotalMaxBytes, MAIL_HTTP_UPLOAD_MAX_BYTES),
+                });
             }
             catch {
                 return { ok: false, error: failure('invalid-request') };
             }
-            return this.run(client => client.sendMail(normalized));
+            return this.run(client => normalized.attachments.length === 0
+                ? client.sendMail({ to: normalized.to, cc: normalized.cc, subject: normalized.subject, bodyText: normalized.bodyText })
+                : new AwikiMailAttachmentClient(this.activeClientOptions.mailServiceUrl, this.externalHttpAuth).send(normalized), { bindMailOwner: true });
+        }
+        /** Download one mail attachment only after an explicit browser action. */
+        async downloadMailAttachment(request) {
+            let normalized;
+            try {
+                normalized = mailAttachmentDownloadRequest(request);
+            }
+            catch {
+                return { ok: false, error: failure('invalid-request') };
+            }
+            return this.run(() => new AwikiMailAttachmentClient(this.activeClientOptions.mailServiceUrl, this.externalHttpAuth).download(normalized, this.resolved.mailAttachmentMaxBytes), { bindMailOwner: true });
         }
         /**
          * Permanently remove the exact SDK-owned local state after an explicit browser acknowledgement.
@@ -2844,6 +2882,7 @@ let AwikiService = (() => {
         async run(operation, options = {}) {
             try {
                 const generation = this.runtimeGeneration;
+                const revision = this.sessionRevision;
                 if (this.getUpdatePolicyStatus().restricted) {
                     return { ok: false, error: failure('client-version-unsupported') };
                 }
@@ -2853,7 +2892,23 @@ let AwikiService = (() => {
                 const provider = this.provider;
                 if (provider === undefined)
                     throw new ProviderUnavailableError();
+                const owner = options.bindMailOwner === true ? await provider.client.getIdentity() : undefined;
+                const assertMailSession = () => {
+                    if (options.bindMailOwner !== true)
+                        return;
+                    if (this.runtimeGeneration !== generation || this.provider !== provider || this.tenantSwitching) {
+                        throw new AwikiSdkError('conflict');
+                    }
+                    if (this.sessionRevision !== revision || this.signedOut === true)
+                        throw new ProviderUnavailableError();
+                    if (owner == null)
+                        throw new AwikiSdkError('not-registered');
+                    if (this.activeIdentityDid !== undefined && this.activeIdentityDid !== owner.did)
+                        throw new ProviderUnavailableError();
+                };
+                assertMailSession();
                 const value = await operation(provider.client);
+                assertMailSession();
                 if (this.runtimeGeneration !== generation || this.provider !== provider) {
                     return { ok: false, error: failure('conflict') };
                 }
@@ -2872,7 +2927,7 @@ let AwikiService = (() => {
             }
         }
         /** Validate mail input before entering the provider and preserve fixed public failures. */
-        runValidatedMail(validate, operation) {
+        runValidatedMail(validate, operation, options = {}) {
             let request;
             try {
                 request = validate();
@@ -2880,7 +2935,7 @@ let AwikiService = (() => {
             catch {
                 return Promise.resolve({ ok: false, error: failure('invalid-request') });
             }
-            return this.run(client => operation(client, request));
+            return this.run(client => operation(client, request), options);
         }
         /** Read and cache the private Host-owned session marker. */
         async isSignedOut() {