@awiki/dsh-plugin 0.3.7-dsh-test.20260831.2 → 0.3.10

package/lib/model-proxy-contract.js

@@ -37,7 +37,7 @@ function decodeModelProxyUsage(value) {
 	return usage.every((item) => item !== void 0) ? usage : void 0;
 }
 function decodeRechargeOrder(value) {
-	if (!isRecord(value) || typeof value.out_trade_no !== "string" || !Number.isSafeInteger(value.amount_cents) || ![
+	if (!isRecord(value) || containsPrivateIdentityOwner(value) || typeof value.out_trade_no !== "string" || !Number.isSafeInteger(value.amount_cents) || ![
 		"pending",
 		"paid",
 		"closed"
@@ -61,7 +61,7 @@ function decodeCloseRechargeResult(value) {
 	return isRecord(value) && value.closed === true ? { closed: true } : void 0;
 }
 function decodeAccount(value) {
-	if (!(isRecord(value) && typeof value.did === "string" && Number.isSafeInteger(value.balance_cents) && typeof value.balance === "string" && value.currency === "CNY" && typeof value.model_access_available === "boolean" && (value.model_access_reason === null || typeof value.model_access_reason === "string") && ["strict", "development_bypass"].includes(String(value.billing_mode)) && typeof value.payments_available === "boolean")) return void 0;
+	if (!(isRecord(value) && !containsPrivateIdentityOwner(value) && typeof value.did === "string" && Number.isSafeInteger(value.balance_cents) && typeof value.balance === "string" && value.currency === "CNY" && typeof value.model_access_available === "boolean" && (value.model_access_reason === null || typeof value.model_access_reason === "string") && ["strict", "development_bypass"].includes(String(value.billing_mode)) && typeof value.payments_available === "boolean")) return void 0;
 	return {
 		did: value.did,
 		balance_cents: value.balance_cents,
@@ -74,7 +74,7 @@ function decodeAccount(value) {
 	};
 }
 function decodeUsage(value) {
-	if (!(isRecord(value) && Number.isSafeInteger(value.id) && typeof value.endpoint === "string" && typeof value.model === "string" && Number.isSafeInteger(value.cache_hit_tokens) && Number.isSafeInteger(value.cache_miss_tokens) && Number.isSafeInteger(value.completion_tokens) && ["strict", "development_bypass"].includes(String(value.billing_mode)) && (value.calculated_cost_micros === null || Number.isSafeInteger(value.calculated_cost_micros)) && Number.isSafeInteger(value.charged_micros) && typeof value.estimated === "boolean" && typeof value.created_at === "string")) return void 0;
+	if (!(isRecord(value) && !containsPrivateIdentityOwner(value) && Number.isSafeInteger(value.id) && typeof value.endpoint === "string" && typeof value.model === "string" && Number.isSafeInteger(value.cache_hit_tokens) && Number.isSafeInteger(value.cache_miss_tokens) && Number.isSafeInteger(value.completion_tokens) && ["strict", "development_bypass"].includes(String(value.billing_mode)) && (value.calculated_cost_micros === null || Number.isSafeInteger(value.calculated_cost_micros)) && Number.isSafeInteger(value.charged_micros) && typeof value.estimated === "boolean" && typeof value.created_at === "string")) return void 0;
 	return {
 		id: value.id,
 		endpoint: value.endpoint,
@@ -89,6 +89,14 @@ function decodeUsage(value) {
 		created_at: value.created_at
 	};
 }
+function containsPrivateIdentityOwner(value) {
+	return [
+		"canonical_did",
+		"stable_subject_hash",
+		"path",
+		"proof"
+	].some((key) => key in value) || "did" in value && !("balance_cents" in value);
+}
 function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }

package/lib/provider.js

@@ -1,4 +1,4 @@
-import { t as RustSdkAdapter } from "./sdk-adapter-FGaOi8It.mjs";
+import { n as RustSdkAdapter } from "./sdk-adapter-CYcJH7sM.mjs";
 import { setTimeout } from "node:timers/promises";
 import { openImCoreNodeClient } from "@awiki/im-core-node";
 //#region lib/types/provider.js
@@ -44,7 +44,7 @@ async function apply(ctx) {
 					clientVersionInfo: {
 						product: "awiki-daemon",
 						release: "0815",
-						version: "0.1.91"
+						version: "0.1.93"
 					},
 					multiDeviceHandleRecoveryEnabled: true,
 					multiDeviceDeviceRevokeEnabled: true,
@@ -69,11 +69,14 @@ async function apply(ctx) {
 }
 async function waitForIdentityProvider(identity) {
 	const deadline = Date.now() + IDENTITY_PROVIDER_READY_TIMEOUT_MS;
-	while ((await identity.health()).status === "unavailable") {
+	while (!providerIsReady(await identity.health())) {
 		const remaining = deadline - Date.now();
 		if (remaining <= 0) throw new Error(`awiki: ANP Identity provider did not become ready within ${IDENTITY_PROVIDER_READY_TIMEOUT_MS}ms`);
 		await setTimeout(Math.min(IDENTITY_PROVIDER_READY_POLL_MS, remaining));
 	}
 }
+function providerIsReady(health) {
+	return health.status !== "unavailable" && health.providerProtocol !== void 0;
+}
 //#endregion
 export { apply, inject, name };

package/lib/{sdk-adapter-FGaOi8It.mjs → sdk-adapter-CYcJH7sM.mjs}

@@ -1,3 +1,105 @@
+//#region lib/types/mail-recovery-observability.js
+const MAIL_INGRESS_CLASSIFICATIONS = /* @__PURE__ */ new Set([
+	"reached",
+	"not_reached",
+	"unknown"
+]);
+const AUTH_STATUS_CLASSES = /* @__PURE__ */ new Set([
+	"accepted",
+	"rejected",
+	"dependency_unavailable",
+	"unknown"
+]);
+const MAIL_CLOSED_CLASSIFICATIONS = /* @__PURE__ */ new Set([
+	"success",
+	"authentication_rejected",
+	"dependency_unavailable",
+	"no_active_handle",
+	"multiple_active_handles",
+	"no_mailbox",
+	"owner_conflict",
+	"unknown"
+]);
+const STABLE_MACHINE_CODE = /^[a-z0-9](?:[a-z0-9._-]{0,126}[a-z0-9])?$/u;
+const CLOSED_FAILURE_TUPLES = /* @__PURE__ */ new Set([
+	"reached:rejected:authentication_rejected",
+	"reached:dependency_unavailable:dependency_unavailable",
+	"not_reached:dependency_unavailable:dependency_unavailable",
+	"reached:accepted:no_active_handle",
+	"reached:accepted:multiple_active_handles",
+	"reached:accepted:no_mailbox",
+	"reached:accepted:owner_conflict"
+]);
+function property(value, key) {
+	try {
+		return typeof value === "object" && value !== null ? value[key] : void 0;
+	} catch {
+		return;
+	}
+}
+function optionalProperty(value, key) {
+	try {
+		if (typeof value !== "object" || value === null || !(key in value)) return { status: "absent" };
+		return {
+			status: "present",
+			value: value[key]
+		};
+	} catch {
+		return { status: "unreadable" };
+	}
+}
+/** Copy only a complete upstream closed classification; arbitrary errors fail closed. */
+function mailRecoveryFailureFields(error) {
+	const ingress = property(error, "mail_ingress_classification");
+	const authStatus = property(error, "auth_status_class");
+	const closed = property(error, "mail_closed_classification");
+	const retryable = property(error, "retryable");
+	if (typeof ingress !== "string" || !MAIL_INGRESS_CLASSIFICATIONS.has(ingress) || typeof authStatus !== "string" || !AUTH_STATUS_CLASSES.has(authStatus) || typeof closed !== "string" || !MAIL_CLOSED_CLASSIFICATIONS.has(closed) || ingress === "unknown" || authStatus === "unknown" || closed === "unknown" || closed === "success" || typeof retryable !== "boolean") return void 0;
+	const tuple = `${ingress}:${authStatus}:${closed}`;
+	if (!CLOSED_FAILURE_TUPLES.has(tuple)) return void 0;
+	const stableCode = optionalProperty(error, "auth_stable_machine_code");
+	if (stableCode.status === "unreadable" || stableCode.status === "present" && (typeof stableCode.value !== "string" || !STABLE_MACHINE_CODE.test(stableCode.value)) || stableCode.status === "present" && authStatus === "accepted") return void 0;
+	return {
+		mail_ingress_classification: ingress,
+		auth_status_class: authStatus,
+		...stableCode.status === "present" ? { auth_stable_machine_code: stableCode.value } : {},
+		retryable,
+		mail_closed_classification: closed
+	};
+}
+function successfulMailRecoveryObservability() {
+	return {
+		current_principal_matches_recovery: true,
+		request_generation_classification: "current",
+		mail_ingress_classification: "reached",
+		auth_status_class: "accepted",
+		retryable: false,
+		mail_closed_classification: "success"
+	};
+}
+function failedMailRecoveryObservability(error) {
+	return {
+		current_principal_matches_recovery: true,
+		request_generation_classification: "current",
+		...mailRecoveryFailureFields(error) ?? {
+			mail_ingress_classification: "unknown",
+			auth_status_class: "unknown",
+			retryable: false,
+			mail_closed_classification: "unknown"
+		}
+	};
+}
+function fencedMailRecoveryObservability(currentPrincipalMatchesRecovery, requestGenerationClassification) {
+	return {
+		current_principal_matches_recovery: currentPrincipalMatchesRecovery,
+		request_generation_classification: requestGenerationClassification,
+		mail_ingress_classification: currentPrincipalMatchesRecovery ? "unknown" : "not_reached",
+		auth_status_class: "unknown",
+		retryable: false,
+		mail_closed_classification: "unknown"
+	};
+}
+//#endregion
 //#region lib/types/sdk-adapter.js
 /** Rust IM Core adapter that copies native values into Host-owned public DTOs. */
 const GROUP_LOOKUP_LIMIT = 100;
@@ -17,7 +119,8 @@ const RUST_FAILURE_CODES = {
 	permission_denied: "forbidden",
 	group_not_member: "group-membership-required",
 	group_identity_stale: "group-identity-stale",
-	auth_revoked: "identity-recovery-required",
+	auth_revoked: "device-rejoin-required",
+	local_identity_recovery_required: "identity-recovery-required",
 	conflict: "conflict",
 	join_required: "handle-unavailable",
 	state_in_use: "conflict",
@@ -36,10 +139,16 @@ var AwikiSdkError = class extends Error {
 	code;
 	realtimeFailureCode;
 	name = "AwikiSdkError";
-	constructor(code, realtimeFailureCode) {
+	mail_ingress_classification;
+	auth_status_class;
+	auth_stable_machine_code;
+	retryable;
+	mail_closed_classification;
+	constructor(code, realtimeFailureCode, mailRecoveryFailure) {
 		super(`AWiki SDK operation failed: ${code}`);
 		this.code = code;
 		this.realtimeFailureCode = realtimeFailureCode;
+		if (mailRecoveryFailure !== void 0) Object.assign(this, mailRecoveryFailure);
 	}
 };
 function fail(code = "remote") {
@@ -57,13 +166,25 @@ const REALTIME_RETRY_WARNING_PRIORITY = [
 	"sync.retry.service_unavailable",
 	"sync.retry.local_state_unavailable"
 ];
-function realtimeSyncFailureCode(status, warnings) {
+function realtimeSyncFailureCode(status, warnings, errorCode) {
 	if (status === "retryable_failure") return REALTIME_RETRY_WARNING_PRIORITY.find((code) => warnings.includes(code)) ?? "sync.retryable_failure";
 	if (status === "recovery_required") return "sync.recovery_required";
 	if (status === "auth_revoked") return "sync.auth_revoked";
-	if (status === "blocked") return "sync.blocked";
+	if (status === "blocked") {
+		if (errorCode === "sync.client_upgrade_required") return "sync.blocked.client_upgrade_required";
+		if (errorCode === "device_reprovision_required") return "sync.blocked.device_reprovision_required";
+		if (errorCode === "server_repair_required") return "sync.blocked.server_repair_required";
+		if (errorCode === "sync.snapshot_item_too_large" || errorCode === "sync.snapshot_required_state_too_large") return "sync.blocked.snapshot_capacity";
+		if (errorCode === "sync.invalid_request") return "sync.blocked.invalid_request";
+		if (errorCode === "sync.invalid_cursor") return "sync.blocked.invalid_cursor";
+		return errorCode === void 0 ? "sync.blocked" : "sync.blocked.other";
+	}
 	return "sync.unexpected_status";
 }
+function syncResultErrorCode(result) {
+	if (!("errorCode" in result)) return void 0;
+	return typeof result.errorCode === "string" ? result.errorCode : void 0;
+}
 function mapError(error, ambiguousSend = false) {
 	if (error instanceof AwikiSdkError) throw error;
 	let code = "remote";
@@ -73,7 +194,7 @@ function mapError(error, ambiguousSend = false) {
 			if (value.name === "ImCoreNodeError" && typeof value.code === "string") code = ambiguousSend && (value.code === "timeout" || value.code === "transport_unavailable") ? "delivery-unknown" : RUST_FAILURE_CODES[value.code] ?? "remote";
 		}
 	} catch {}
-	fail(code);
+	throw new AwikiSdkError(code, void 0, mailRecoveryFailureFields(error));
 }
 function safeInteger(value, minimum = 0) {
 	if (!/^(?:0|[1-9]\d*)$/u.test(value)) fail();
@@ -341,7 +462,30 @@ function externalHttpAttempt(value) {
 }
 /** Adapt the Rust Node bridge to the frozen Host provider interface. */
 var RustSdkAdapter = class {
+	trustedUserPresenceSupported = process.platform === "darwin" && process.arch === "x64";
 	client;
+	refreshingDisplayPeers = /* @__PURE__ */ new Set();
+	scheduleDisplayRefresh(client, peers) {
+		if (this.disposal !== void 0) return;
+		const pending = [...new Set(peers)].filter((peer) => peer.startsWith("did:") && !this.refreshingDisplayPeers.has(peer)).slice(0, 100);
+		if (pending.length === 0) return;
+		for (const peer of pending) this.refreshingDisplayPeers.add(peer);
+		client.refreshDisplayProfiles({ peers: pending }).catch(() => void 0).finally(() => {
+			for (const peer of pending) this.refreshingDisplayPeers.delete(peer);
+		});
+	}
+	getDisplayProfiles(peers) {
+		return this.run(async (client) => {
+			const profiles = await client.hydrateDisplayProfiles({ peers });
+			this.scheduleDisplayRefresh(client, peers);
+			return profiles.flatMap((profile) => profile.did === void 0 ? [] : [{
+				did: profile.did,
+				cacheHit: profile.cacheHit,
+				...profile.handle === void 0 ? {} : { handle: profile.handle },
+				...profile.displayName === void 0 ? {} : { displayName: profile.displayName }
+			}]);
+		});
+	}
 	attachmentConversations = /* @__PURE__ */ new Map();
 	disposal;
 	realtime;
@@ -373,16 +517,18 @@ var RustSdkAdapter = class {
 	}
 	async displayableMessages(client, values) {
 		const messages = values.filter(displayableMessage);
-		const peers = [...new Set(messages.filter((message) => message.conversationKind === "group" && !message.outgoing && message.senderHandle === void 0 && message.senderDisplayName === void 0).map((message) => message.senderDid))];
+		const peers = [...new Set(messages.filter((message) => message.conversationKind === "group" && !message.outgoing).map((message) => message.senderDid))];
 		if (peers.length === 0) return [...messages];
 		const profiles = await client.hydrateDisplayProfiles({ peers });
+		this.scheduleDisplayRefresh(client, peers);
 		const byDid = /* @__PURE__ */ new Map();
 		for (const profile of profiles) if (profile.did !== void 0) byDid.set(profile.did, profile);
 		return messages.map((message) => {
 			const profile = byDid.get(message.senderDid);
-			if (profile === void 0) return message;
+			if (profile === void 0 || !profile.cacheHit) return message;
+			const { senderDisplayName: _snapshot, ...rest } = message;
 			return {
-				...message,
+				...rest,
 				...profile.handle === void 0 ? {} : { senderHandle: profile.handle },
 				...profile.displayName === void 0 ? {} : { senderDisplayName: profile.displayName }
 			};
@@ -515,7 +661,7 @@ var RustSdkAdapter = class {
 			...value.peerPersonaId === void 0 ? {} : { peerPersonaId: value.peerPersonaId },
 			...value.did === void 0 ? {} : { did: value.did },
 			...value.credentialDid === void 0 ? {} : { credentialDid: value.credentialDid },
-			...value.handle === void 0 ? {} : { handle: value.handle },
+			...(profile?.handle ?? value.handle) === void 0 ? {} : { handle: profile?.handle ?? value.handle },
 			...profile?.displayName === void 0 ? {} : { displayName: profile.displayName },
 			...value.role === void 0 ? {} : { role: value.role },
 			...value.status === void 0 ? {} : { status: value.status },
@@ -564,8 +710,12 @@ var RustSdkAdapter = class {
 	listenerSyncNow(reason) {
 		return this.run(async (client) => {
 			const result = await client.syncNow({ reason });
-			if (result.status === "idle" || result.status === "changed") return;
-			throw new AwikiSdkError(result.status === "auth_revoked" ? "identity-recovery-required" : "network", realtimeSyncFailureCode(result.status, result.warnings));
+			if (result.status === "idle" || result.status === "changed") return {
+				pagesFetched: uint32(result.pagesFetched),
+				messagesHydrated: uint32(result.messagesHydrated),
+				olderHistoryExcluded: boolean(result.olderHistoryExcluded)
+			};
+			throw new AwikiSdkError(result.status === "auth_revoked" ? "device-rejoin-required" : "network", realtimeSyncFailureCode(result.status, result.warnings, syncResultErrorCode(result)));
 		});
 	}
 	listenerStartRealtime() {
@@ -705,6 +855,7 @@ var RustSdkAdapter = class {
 	listLocalDeviceJoinRequests() {
 		return this.run(async (client) => (await client.listLocalDeviceJoinRequests()).map((value) => ({
 			joinSessionId: required(value.joinSessionId),
+			protocolDeviceId: required(value.protocolDeviceId),
 			candidateKeyFingerprint: required(value.candidateKeyFingerprint),
 			issuedAt: required(value.issuedAt),
 			expiresAt: required(value.expiresAt),
@@ -747,6 +898,35 @@ var RustSdkAdapter = class {
 			});
 		});
 	}
+	confirmUserPresence(reason) {
+		return this.run((client) => client.confirmUserPresence({ reason }));
+	}
+	prepareRootKeyTransfer(deviceId) {
+		return this.run(async (client) => {
+			const value = await client.prepareRootKeyTransfer({ recipientDeviceId: deviceId });
+			return {
+				authorizationHandle: required(value.authorizationHandle),
+				recipient: {
+					did: required(value.recipient.did),
+					deviceId: required(value.recipient.deviceId),
+					registryVersion: required(value.recipient.registryVersion)
+				},
+				expiresAt: required(value.expiresAt)
+			};
+		});
+	}
+	confirmAndSendRootKeyTransfer(authorizationHandle) {
+		return this.run(async (client) => {
+			const value = await client.confirmAndSendRootKeyTransfer({
+				authorizationHandle,
+				userPresenceConfirmed: true
+			});
+			return {
+				recipientDeviceId: required(value.recipientDeviceId),
+				acceptedAt: required(value.acceptedAt)
+			};
+		});
+	}
 	updateDisplayName(request) {
 		return this.run(async (client) => identity(await client.updateDisplayName(request.displayName)));
 	}
@@ -767,6 +947,7 @@ var RustSdkAdapter = class {
 			...value.previousDid === void 0 ? {} : { previousDid: value.previousDid },
 			currentDid: required(value.currentDid),
 			phase: value.phase,
+			allowedActions: [...value.allowedActions ?? []],
 			...value.failureCode === void 0 ? {} : { failureCode: value.failureCode },
 			retryable: boolean(value.retryable),
 			localOrdinaryDataWillMigrate: boolean(value.impact.localOrdinaryDataWillMigrate),
@@ -790,21 +971,18 @@ var RustSdkAdapter = class {
 	activateRecovery(request) {
 		return this.run(async (client) => this.recoveryProgress(await client.activateHandleRecovery(request)));
 	}
+	listPendingRecoveries() {
+		return this.run(async (client) => (await client.listPendingHandleRecoveryOperations()).map((value) => ({
+			operationId: required(value.operationId),
+			fullHandle: required(value.fullHandle)
+		})));
+	}
 	getRecoveryStatus(request) {
 		return this.run(async (client) => this.recoveryProgress(await client.getHandleRecoveryStatus(request)));
 	}
 	resumeRecovery(request) {
 		return this.run(async (client) => this.recoveryProgress(await client.resumeHandleRecovery(request)));
 	}
-	issueRecoveryAttestation(request) {
-		return this.run(async (client) => {
-			const value = await client.issueHandleRecoveryAttestation(request);
-			return {
-				attestation: required(value.attestation),
-				expiresAt: required(value.expiresAt)
-			};
-		});
-	}
 	discardRecovery(request) {
 		return this.run(async (client) => {
 			await client.discardHandleRecovery(request);
@@ -848,6 +1026,7 @@ var RustSdkAdapter = class {
 			});
 			const peers = [...new Set(value.items.flatMap((member) => member.did ?? member.handle ?? []))];
 			const profiles = peers.length === 0 ? [] : await client.hydrateDisplayProfiles({ peers });
+			this.scheduleDisplayRefresh(client, peers);
 			const byPeer = /* @__PURE__ */ new Map();
 			for (const [index, profile] of profiles.entries()) {
 				const requested = peers[index];
@@ -1012,6 +1191,16 @@ var RustSdkAdapter = class {
 	clearLocalData() {
 		return this.run((client) => client.clearLocalData());
 	}
+	retireDefaultIdentityForRejoin() {
+		return this.run((client) => {
+			const retire = client.retireDefaultIdentityForRejoin;
+			if (typeof retire !== "function") throw Object.assign(/* @__PURE__ */ new Error("device rejoin is unavailable in this IM Core build"), {
+				name: "AwikiSdkError",
+				code: "remote"
+			});
+			return retire.call(client);
+		});
+	}
 	dispose() {
 		this.disposal ??= this.client.then(async (client) => {
 			try {
@@ -1035,4 +1224,4 @@ function downloadedAttachment(value) {
 	};
 }
 //#endregion
-export { downloadedAttachment as n, RustSdkAdapter as t };
+export { fencedMailRecoveryObservability as a, failedMailRecoveryObservability as i, RustSdkAdapter as n, successfulMailRecoveryObservability as o, downloadedAttachment as r, AwikiSdkError as t };