@barryfan2045/dsh-matrix 0.1.0

package/dist/bridge/pipeline.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Bridge pipeline core - the single test seam (spec: Testing Decisions).
+ *
+ * T1 tracer scope: trust gate + per-room session lazily + prompt/steer +
+ * turn-complete reply with 4000-char chunking, serialized per room.
+ * T3 adds the turn-control command table (/stop /queue /interrupt /last)
+ * between the trust gate and the prompt/steer split (src/bridge/turn-commands.ts).
+ * Later tickets extend this file (attachments, questions, groups).
+ * T2 adds the auth stage: static ∪ runtime trust list, DM challenge flow for
+ * strangers, and the admin command table (/trusted, /revoke).
+ * Later tickets extend this file (turn control, attachments, questions, groups).
+ */
+import type { IncomingMessage, Logger } from '../types.ts';
+import type { Transport } from '../ports/transport.ts';
+import type { Backend } from '../ports/backend.ts';
+import type { TurnStreamSource } from '../ports/streaming.ts';
+import type { AuthStore } from '../auth/store.ts';
+import type { ChallengeEngine } from '../auth/challenge.ts';
+/** Matrix text message hard limit; split replies beneath it. */
+export declare const MAX_CHUNK = 4000;
+/** 会话被占用时的第一次通知(单点文案,便于以后统一改口吻/多语言)。 */
+export declare const SESSION_BUSY_NOTICE: string;
+/**
+ * 重试预算耗尽后的可操作说明(US42:失败不许静默)。
+ *
+ * `waitedMs` 是桥真正花掉的**重试窗口**(retries × 每次间隔),不是墙上时钟:
+ * 实测里通知本身还要走一次 Matrix 发送(约 4 秒),那不属于重试。宁可如实说
+ * 重试了多久,也不要印一个凑出来的数字。
+ */
+export declare function sessionBusyGiveUpReply(waitedMs: number): string;
+/** 默认重试节奏:每 5 秒一次,共 12 次 = 60 秒重试窗口。 */
+export declare const SESSION_BUSY_RETRY_MS = 5000;
+export declare const SESSION_BUSY_RETRIES = 12;
+export interface BridgeAuthDeps {
+    store: AuthStore;
+    challenge: ChallengeEngine;
+}
+export interface BridgeDeps {
+    transport: Transport;
+    backend: Backend;
+    logger: Logger;
+    /** Static trust list from the row config (boot snapshot). */
+    trustedUsers: Iterable<string>;
+    /** Runtime trust + challenge engine (T2). */
+    auth: BridgeAuthDeps;
+    workdir: string;
+    /** Reply chunk ceiling (default MAX_CHUNK). */
+    maxChunk?: number;
+    /**
+     * T4 hook (kept structurally narrow so parallel tickets stay out of the
+     * route table): when present and it claims a line, the pipeline hands the
+     * message over AFTER the trust gate and never creates a session or a
+     * prompt for it. The implementation lives in agent-commands.ts.
+     */
+    /**
+     * T4 hook (kept structurally narrow so parallel tickets stay out of the
+     * route table): when present and it claims a line, the pipeline hands the
+     * message over AFTER the trust gate and never creates a session or a
+     * prompt for it. The implementation lives in agent-commands.ts.
+     */
+    commandRouter?: {
+        isCommand(text: string): boolean;
+        handle(text: string, ctx: {
+            roomId: string;
+            sender: string;
+        }): Promise<void>;
+    };
+    /**
+     * T5 挂点(最小侵入):trusted 之后、getSession 之前先问 intercept ——
+     * 返回 true 表示消息被挂起的提问/审批当作答案吃下,本轮流水线到此为止。
+     */
+    intercept?: (msg: IncomingMessage) => Promise<boolean>;
+    /**
+     * T12(US37)挂点:提权账本。装配层(手里有 ProjectMap 与持久层的地方)注入 ——
+     *  - revoke:按账本把该用户在所有记过账的房间降回普通成员;
+     *  - heal:启动对账(先降"已不可信"的,再给当前 trusted 补提)。
+     * 缺省 = 不做权限管理(逐条行为与 T12 之前完全一致)。
+     */
+    power?: {
+        revoke: (userId: string) => Promise<{
+            demoted: number;
+            failures: number;
+        }>;
+        heal: () => Promise<{
+            elevated: number;
+            demoted: number;
+            failures: number;
+        }>;
+    };
+    /**
+     * T12(US38)挂点:space 归集与头像自愈。装配层在**开启空间模式**时注入;
+     * 缺省 = 不建 space、不挂头像(逐条行为与 T12 之前一致)。
+     */
+    space?: {
+        heal: () => Promise<{
+            spaceCreated: boolean;
+            avatarsSet: number;
+            childrenAdded: number;
+            failures: number;
+        }>;
+    };
+    /**
+     * T7 挂点:按 DSH session id 取流式源(配置 streamReplies 开启时装配)。
+     * 缺省或返回 undefined = 回合完成一次性回帖(T1 行为,逐字节不变)。
+     */
+    turnStream?: (sessionId: string) => TurnStreamSource | undefined;
+    /** Injectable clock for the streaming edit throttle (tests); default Date.now. */
+    now?: () => number;
+    /** Streaming edit throttle window (ms); default 1500. */
+    streamThrottleMs?: number;
+    /**
+     * 会话被别的写句柄占用(DSH GUI 开着同一房间会话)时的重试节奏:
+     * 每次等 `sessionBusyRetryMs`(默认 SESSION_BUSY_RETRY_MS),最多
+     * `sessionBusyRetries` 次(默认 SESSION_BUSY_RETRIES)。测试注入 0 秒。
+     */
+    sessionBusyRetryMs?: number;
+    sessionBusyRetries?: number;
+    /** 可注入睡眠(测试用);缺省 = setTimeout。 */
+    sleep?: (ms: number) => Promise<void>;
+    /** T6 附件策略:单附件上限 MB(US28,默认 10)。 */
+    attachments?: {
+        maxMb?: number;
+    };
+    /**
+     * T9 多项目:房间 → cwd 解析。缺省恒返回 workdir(单项目模式逐条不变);
+     * 装配层在 multiProject 时组合 ProjectMap 得到每项目独立 cwd。
+     */
+    resolveCwd?: (roomId: string) => string | Promise<string>;
+    /**
+     * T9 多项目挂点(可选)。trusted 之后、命令表之前依次:收养管理房 →
+     * /pmctl 消费判定。缺省 = 单项目,不改变现有行为。
+     */
+    multiProject?: {
+        /** 管理房间收养(非消费):首条 trusted 私聊触发,幂等。 */
+        adoptRoom(msg: IncomingMessage): Promise<void>;
+        /** 该房是否已定管理房。 */
+        isManagementRoom(roomId: string): boolean;
+        /** /pmctl 家族;返回 true = 已消费(回执或执行过),pipeline 结束本轮。 */
+        handlePmctl(text: string, call: {
+            roomId: string;
+            sender: string;
+            isManagementRoom: boolean;
+        }, reply: (t: string) => Promise<void>): Promise<boolean>;
+    };
+}
+export interface Bridge {
+    start(): Promise<void>;
+    stop(): Promise<void>;
+}
+export declare function createBridge(deps: BridgeDeps): Bridge;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/bridge/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/bridge/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,KAAK,EAAE,OAAO,EAAmC,MAAM,qBAAqB,CAAA;AAEnF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAI7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EAAE,eAAe,EAA0B,MAAM,sBAAsB,CAAA;AAiBnF,gEAAgE;AAChE,eAAO,MAAM,SAAS,OAAO,CAAA;AAE7B,wCAAwC;AACxC,eAAO,MAAM,mBAAmB,QAEI,CAAA;AAEpC;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK/D;AAED,wCAAwC;AACxC,eAAO,MAAM,qBAAqB,OAAQ,CAAA;AAC1C,eAAO,MAAM,oBAAoB,KAAK,CAAA;AAEtC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAA;IAChB,SAAS,EAAE,eAAe,CAAA;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,SAAS,CAAA;IACpB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC9B,6CAA6C;IAC7C,IAAI,EAAE,cAAc,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH;;;;;OAKG;IACH,aAAa,CAAC,EAAE;QACd,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;QAChC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAC7E,CAAA;IACD;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACtD;;;;;OAKG;IACH,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;QAC1E,IAAI,EAAE,MAAM,OAAO,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAC7E,CAAA;IACD;;;OAGG;IACH,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,OAAO,CAAC;YAAE,YAAY,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAC5G,CAAA;IACD;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,gBAAgB,GAAG,SAAS,CAAA;IAChE,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,yDAAyD;IACzD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kCAAkC;IAClC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,oCAAoC;IACpC,WAAW,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAChC;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACzD;;;OAGG;IACH,YAAY,CAAC,EAAE;QACb,sCAAsC;QACtC,SAAS,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9C,iBAAiB;QACjB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;QACzC,qDAAqD;QACrD,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,OAAO,CAAA;SAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KACtJ,CAAA;CACF;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAidrD"}

package/dist/bridge/pipeline.js

@@ -0,0 +1,502 @@
+import { isSessionBusyError } from "../ports/backend.js";
+import { splitMessage } from "../formatting.js";
+import { createTurnResponder } from "./reply.js";
+import { handleTurnCommand, parseTurnCommand, TURN_COMMANDS } from "./turn-commands.js";
+import { executeAdminCommand, parseAdminCommand } from "../auth/admin-commands.js";
+import { createCommandRegistry } from "./commands.js";
+import { createGroupGate, isGroupMessage } from "./group-gate.js";
+import { createQuoteCache, extractUsername, toExcerpt } from "./quote-cache.js";
+import { MediaTooLargeError } from "../ports/attachments.js";
+import { attachmentKindFor, attachmentTooLargeReply, createAttachmentsLedger, downloadFailureReply, duplicateAttachmentReply, unsupportedTypeReply, } from "./attachments-ledger.js";
+/** Matrix text message hard limit; split replies beneath it. */
+export const MAX_CHUNK = 4000;
+/** 会话被占用时的第一次通知(单点文案,便于以后统一改口吻/多语言)。 */
+export const SESSION_BUSY_NOTICE = '⏳ 这个房间的会话正被 DSH GUI 占用(DSH 同一会话只允许一个写入口),消息还没送进 agent。'
+    + '我去重试,你在 GUI 里关掉这个会话的标签页后会自动继续。';
+/**
+ * 重试预算耗尽后的可操作说明(US42:失败不许静默)。
+ *
+ * `waitedMs` 是桥真正花掉的**重试窗口**(retries × 每次间隔),不是墙上时钟:
+ * 实测里通知本身还要走一次 Matrix 发送(约 4 秒),那不属于重试。宁可如实说
+ * 重试了多久,也不要印一个凑出来的数字。
+ */
+export function sessionBusyGiveUpReply(waitedMs) {
+    const secs = Math.round(waitedMs / 1000);
+    const lead = secs >= 1 ? `⚠️ 重试了 ${secs} 秒,` : '⚠️ ';
+    return `${lead}这个房间的会话仍被别人占用,这条消息没能进 agent。\n`
+        + '请在 DSH GUI 里关掉该房间会话的标签页(或退出 GUI),然后重新发一次。';
+}
+/** 默认重试节奏:每 5 秒一次,共 12 次 = 60 秒重试窗口。 */
+export const SESSION_BUSY_RETRY_MS = 5_000;
+export const SESSION_BUSY_RETRIES = 12;
+export function createBridge(deps) {
+    const { transport, backend, logger, auth } = deps;
+    const trusted = new Set(deps.trustedUsers);
+    const maxChunk = deps.maxChunk && deps.maxChunk > 0 ? deps.maxChunk : MAX_CHUNK;
+    let running = true;
+    let unsubscribe;
+    let unsubscribeJoin;
+    // T6: pending-attachment ledger, keyed room+sender (US25). Purely in-memory
+    // BY DESIGN — a bridge restart clears it (every save echoed a receipt).
+    const maxAttachBytes = Math.max(1, deps.attachments?.maxMb ?? 10) * 1024 * 1024;
+    const ledger = createAttachmentsLedger({ maxBytes: maxAttachBytes });
+    // --- T2 auth stage -------------------------------------------------------
+    // Runtime trust (challenge winners) unions with the static config list.
+    const isTrusted = (userId) => trusted.has(userId) || auth.store.get().trustedUsers.includes(userId);
+    // Admin = persisted adminUserId, else the config list's first entry.
+    const adminId = () => auth.store.get().adminUserId ?? [...trusted][0];
+    const commands = createCommandRegistry();
+    const registerAdmin = (name) => {
+        commands.register(name, async ({ msg, respond }) => {
+            const parsed = parseAdminCommand(msg.text);
+            if (!parsed || parsed.name !== name)
+                return;
+            const reply = executeAdminCommand(parsed, {
+                store: auth.store,
+                sender: msg.sender,
+                roomId: msg.roomId,
+                isTrusted: (u) => isTrusted(u),
+                isAdmin: (u) => adminId() !== undefined && u === adminId(),
+                notify: (m) => logger.info(m),
+            });
+            await respond(reply);
+            // A revoked user must re-enter the challenge flow cleanly: drop any
+            // stale challenge state kept for them.
+            if (name === 'revoke' && parsed.name === 'revoke' && parsed.target) {
+                auth.challenge.reset(parsed.target);
+                // T12(US37):把权限也收回来 —— 只降账本里我们提过的房间,绝不碰管理员
+                // 在别处手工给的权限。失败只提示,不回滚信任变更(信任该撤就撤)。
+                const power = deps.power;
+                if (power) {
+                    try {
+                        const stripped = await power.revoke(parsed.target);
+                        if (stripped.demoted > 0 || stripped.failures > 0) {
+                            await transport.notify(msg.roomId, `🔻 已在 ${stripped.demoted} 个房间降回普通成员` +
+                                (stripped.failures > 0 ? `(${stripped.failures} 处失败,下次启动重试)` : ''));
+                        }
+                    }
+                    catch (error) {
+                        logger.warn('revoke 降级失败:', error instanceof Error ? error.message : error);
+                    }
+                }
+            }
+        });
+    };
+    registerAdmin('trusted');
+    registerAdmin('revoke');
+    // T8: group toggle commands. /enable is trusted-level, /disable and
+    // /channels admin-only — the permission ladder lives in admin-commands.
+    const registerGroup = (name) => {
+        commands.register(name, async ({ msg, respond }) => {
+            const parsed = parseAdminCommand(msg.text);
+            if (!parsed || parsed.name !== name)
+                return;
+            const reply = executeAdminCommand(parsed, {
+                store: auth.store,
+                sender: msg.sender,
+                roomId: msg.roomId,
+                isTrusted: (u) => isTrusted(u),
+                isAdmin: (u) => adminId() !== undefined && u === adminId(),
+                notify: (m) => logger.info(m),
+            });
+            await respond(reply);
+        });
+    };
+    registerGroup('channels');
+    registerGroup('enable');
+    registerGroup('disable');
+    // T8: group room policy + reply-quote excerpt ring (memory-bounded).
+    const groupGate = createGroupGate({ store: auth.store });
+    const quoteCache = createQuoteCache();
+    /** US33: prepend the cached quote of a reply-to target to the model text. */
+    function promptTextFor(msg) {
+        if (!msg.replyTo)
+            return msg.text;
+        const quote = quoteCache.lookup(msg.roomId, msg.replyTo.eventId);
+        if (!quote)
+            return msg.text; // cache miss: silent downgrade
+        return `「${quote.username}: ${quote.excerpt}」\n${msg.text}`;
+    }
+    /** Auth decisions for a stranger's DM (T2). Group senders go through the
+     *  group gate in handleIncoming instead (T8). True = message consumed. */
+    async function handleUntrusted(msg) {
+        const code = auth.challenge.submitCode(msg.sender, msg.text);
+        const outcome = code.kind !== 'none' ? code : auth.challenge.gateDm(msg.sender);
+        switch (outcome.kind) {
+            case 'authenticated':
+                await transport.send(msg.roomId, '✅ 认证成功!现在可以正常对话了。');
+                break;
+            case 'expired':
+                await transport.send(msg.roomId, '⏱️ 验证码已过期,随便发条消息即可领取新码。');
+                break;
+            case 'wrong':
+                await transport.send(msg.roomId, `❌ 验证码错误,还剩 ${outcome.attemptsLeft} 次机会。`);
+                break;
+            case 'locked': {
+                const mins = Math.ceil(outcome.retryInMs / 60_000);
+                await transport.send(msg.roomId, `🚫 连续 3 次错误,锁定 ${mins} 分钟后再试。`);
+                break;
+            }
+            case 'challenged':
+                await transport.send(msg.roomId, outcome.prompt);
+                break;
+            case 'pending':
+                await transport.notify(msg.roomId, '⏳ 挑战进行中:请把日志里的 6 位验证码发过来(2 分钟有效)。');
+                break;
+            case 'trusted':
+                break; // fall through to normal processing below
+        }
+        return outcome.kind !== 'trusted';
+    }
+    /**
+     * T6 media intake (US25-28): declared-size pre-check → download → real-size
+     * re-check (ledger.save) → receipt per item. Failures are receipted, never
+     * swallowed (US42); the message itself still does not wake the agent.
+     */
+    async function handleMediaMessage(msg) {
+        for (const m of msg.media ?? []) {
+            // Cheap pre-check against the DECLARED size before spending a download
+            // (pi-courier AttachmentStore 同款;info.size 是提示,不是信任依据)。
+            if (m.size !== undefined && m.size > maxAttachBytes) {
+                await transport.send(msg.roomId, attachmentTooLargeReply(m.size, maxAttachBytes));
+                continue;
+            }
+            if (ledger.has(msg.roomId, msg.sender, m.mxc)) {
+                await transport.send(msg.roomId, duplicateAttachmentReply());
+                continue;
+            }
+            let downloaded;
+            try {
+                downloaded = await transport.downloadMedia(m.mxc, maxAttachBytes);
+            }
+            catch (error) {
+                const tooLarge = error instanceof MediaTooLargeError ? error : undefined;
+                await transport.send(msg.roomId, tooLarge
+                    ? attachmentTooLargeReply(tooLarge.bytes, tooLarge.maxBytes)
+                    : downloadFailureReply(error instanceof Error ? error.message : String(error)));
+                continue;
+            }
+            const item = {
+                mxc: m.mxc,
+                kind: attachmentKindFor(m.msgtype),
+                bytes: downloaded.bytes,
+                mimeType: downloaded.mimeType,
+                filename: downloaded.filename ?? m.filename ?? m.body,
+            };
+            // Real-byte cap re-check + dedup admission happen inside save(); the
+            // returned string is the room receipt (成功/拒绝/去重 三态文案)。
+            await transport.send(msg.roomId, ledger.save(msg.roomId, msg.sender, item));
+        }
+    }
+    // Per-room FIFO: each room's turns are processed one at a time, so two
+    // fast messages can never interleave their whenIdle/reply cycles.
+    const roomQueues = new Map();
+    // Matrix clients can redeliver the same event after a resync; process each
+    // event id exactly once (bounded ring, same spirit as pi-courier's seen-set).
+    const seenEvents = new Set();
+    const seenOrder = [];
+    function noteSeen(eventId) {
+        if (!eventId)
+            return true; // nothing to dedupe against - let it through
+        if (seenEvents.has(eventId))
+            return false;
+        seenEvents.add(eventId);
+        seenOrder.push(eventId);
+        if (seenOrder.length > 500) {
+            const drop = seenOrder.splice(0, seenOrder.length - 500);
+            for (const id of drop)
+                seenEvents.delete(id);
+        }
+        return true;
+    }
+    /**
+     * T12 重试分支:只在 `getSession` 已经撞上"写句柄被别人占着"之后才进来。
+     *
+     * DSH 一个会话同一时刻只允许一个写句柄。DSH GUI(或另一个桥实例)打开着
+     * 该房间会话时,resume 会抛 SessionBusyError —— 旧行为是 pipeline error
+     * 日志 + 静默吞消息,房间里什么都看不到(死机重启后 GUI 恢复标签页就踩中)。
+     * 现在:第一次占用就通知房间,按间隔重试,预算耗尽给出可操作说明。
+     *
+     * 成功路径刻意**不**经过这里:多包一层 async 会多一个微任务,把回合启动
+     * 推迟一拍,足以改变 steer/queue 的既有交错(实测带偏 T6 的 steer 用例)。
+     * 调用点直接 await 后端那一个 promise,零额外调度。
+     */
+    async function retryBusySession(roomId, cwd, cause) {
+        const retries = Math.max(0, deps.sessionBusyRetries ?? SESSION_BUSY_RETRIES);
+        const waitMs = Math.max(0, deps.sessionBusyRetryMs ?? SESSION_BUSY_RETRY_MS);
+        const sleep = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+        let noticed = false;
+        for (let attempt = 0;; attempt++) {
+            if (attempt >= retries) {
+                await transport.send(roomId, sessionBusyGiveUpReply(retries * waitMs));
+                throw cause; // 抛回原始错误:真会话 id 与报错链都留着,便于排查
+            }
+            if (!noticed) {
+                noticed = true;
+                await transport.notify(roomId, SESSION_BUSY_NOTICE);
+            }
+            logger.info(`room ${roomId} 会话被占用,第 ${attempt + 1}/${retries} 次重试(等 ${waitMs}ms)`);
+            await sleep(waitMs);
+            try {
+                return await backend.getSession(roomId, cwd);
+            }
+            catch (error) {
+                // 不是占用(真坏了)就立刻交出去,绝不拿重试掩盖真相。
+                if (!isSessionBusyError(error))
+                    throw error;
+            }
+        }
+    }
+    async function handleIncoming(msg) {
+        if (!running)
+            return;
+        // T6: media / unsupported payloads carry no text but must NOT be silent
+        // (pi-courier 票3 "消灭静默吞消息"); pure-empty lines still drop.
+        // 媒体消息 caption 为空是常态:归一化为 "" 继续走(命令表对空文本不命中)。
+        const hasPayload = Boolean(msg.text?.trim()) || (msg.media?.length ?? 0) > 0 || Boolean(msg.unsupportedMsgtype);
+        if (!hasPayload)
+            return;
+        if (!msg.text)
+            msg = { ...msg, text: '' };
+        if (!noteSeen(msg.eventId))
+            return;
+        // T8/US33: every accepted message becomes quotable context (per room).
+        quoteCache.record(msg.roomId, msg.eventId, {
+            username: extractUsername(msg.sender),
+            excerpt: toExcerpt(msg.text),
+        });
+        // T8: group policy BEFORE everything else (US32). The gate also lets a
+        // trusted sender's /enable through while the room is still disabled.
+        const trustedNow = isTrusted(msg.sender);
+        if (isGroupMessage(msg)) {
+            const decision = groupGate.check(msg, trustedNow);
+            if (decision.action === 'silence')
+                return;
+            if (decision.action === 'enable-hint') {
+                await transport.notify(msg.roomId, decision.text);
+                return;
+            }
+            if (decision.action === 'reject-notice') {
+                await transport.notify(msg.roomId, `(dsh-matrix) 已忽略:${msg.sender} 不在 trustedUsers`);
+                return;
+            }
+        }
+        else if (!trustedNow) {
+            const consumed = await handleUntrusted(msg);
+            if (consumed)
+                return;
+        }
+        // T6 attachment stage (US25): media messages are downloaded, receipted
+        // and parked in the ledger HERE — they never wake the agent and never
+        // reach the command/prompt route. Their caption is not forwarded (the
+        // ledger waits for the sender's NEXT text message).
+        if (msg.media?.length) {
+            await handleMediaMessage(msg);
+            return;
+        }
+        if (msg.unsupportedMsgtype) {
+            await transport.send(msg.roomId, unsupportedTypeReply(msg.unsupportedMsgtype));
+            return;
+        }
+        // T9: trusted 之后先做管理房间收养(非消费),再判 /pmctl(消费即结束本轮)。
+        const mp = deps.multiProject;
+        if (mp) {
+            await mp.adoptRoom(msg);
+            const consumed = await mp.handlePmctl(msg.text, { roomId: msg.roomId, sender: msg.sender, isManagementRoom: mp.isManagementRoom(msg.roomId) }, (text) => transport.send(msg.roomId, text).then(() => undefined));
+            if (consumed)
+                return;
+        }
+        // Command table (T2: admin commands) BEFORE the prompt path.
+        const invocation = commands.match(msg.text);
+        if (invocation) {
+            await invocation.handler({
+                msg,
+                respond: (text) => transport.send(msg.roomId, text).then(() => undefined),
+            });
+            return;
+        }
+        // T4: slash lines belong to the command surface, never to the model —
+        // EXCEPT names owned by the T3 turn table (a hijacked /stop would settle
+        // as "unknown command" there). parseTurnCommand parses ANY slash, so the
+        // ownership check goes through the known-name set below.
+        const turnParsed = parseTurnCommand(msg.text);
+        const router = deps.commandRouter;
+        if (router?.isCommand(msg.text) && !(turnParsed && TURN_COMMANDS.has(turnParsed.name))) {
+            await router.handle(msg.text, { roomId: msg.roomId, sender: msg.sender });
+            return;
+        }
+        // T5 挂点:挂起提问/审批的答案在此被吃下,不进入会话路径
+        if (await deps.intercept?.(msg))
+            return;
+        const cwd = deps.resolveCwd ? await deps.resolveCwd(msg.roomId) : deps.workdir;
+        // 成功路径与改动前逐微任务一致(直接 await 后端那一个 promise);
+        // 只有撞上"写句柄被占用"才转进重试分支。
+        let session;
+        try {
+            session = await backend.getSession(msg.roomId, cwd);
+        }
+        catch (error) {
+            if (!isSessionBusyError(error))
+                throw error;
+            session = await retryBusySession(msg.roomId, cwd, error);
+        }
+        // T3: turn-control commands run AFTER the trust gate and BEFORE the
+        // prompt/steer split. A running slash command must never be steered
+        // into the model; unknown slash names fall through (reply === undefined).
+        if (turnParsed && TURN_COMMANDS.has(turnParsed.name)) {
+            const commandReply = await handleTurnCommand(turnParsed.name, turnParsed.args, { session });
+            if (commandReply !== undefined) {
+                for (const chunk of splitMessage(commandReply, maxChunk)) {
+                    await transport.send(msg.roomId, chunk);
+                }
+                return;
+            }
+        }
+        if (session.isRunning()) {
+            // TUI Enter semantics: inject into the live turn.
+            session.steer(promptTextFor(msg));
+            await transport.notify(msg.roomId, '(dsh-matrix) 已 steer 进当前回合');
+            return;
+        }
+        // T7: the reply segment lands via the responder. Without a stream source
+        // this is byte-for-byte the T1 behavior (no placeholder; finalize sends the
+        // splitMessage chunks exactly like the old loop did).
+        const stream = deps.turnStream?.(session.id);
+        const responder = createTurnResponder({
+            transport,
+            roomId: msg.roomId,
+            maxChunk,
+            ...(stream ? { stream, sessionId: session.id } : {}),
+            ...(deps.now ? { now: deps.now } : {}),
+            ...(deps.streamThrottleMs !== undefined ? { throttleMs: deps.streamThrottleMs } : {}),
+        });
+        await responder.start();
+        try {
+            // T6 consumption — the ledger's ONLY consumer (US25: 下一条文本才带上).
+            // clear 在 prompt() 未抛错之后:发送失败时附件留在账本等重试(pi-courier 票1)。
+            const carried = ledger.peek(msg.roomId, msg.sender);
+            if (carried.length) {
+                session.prompt(promptTextFor(msg), carried);
+                ledger.clear(msg.roomId, msg.sender);
+            }
+            else {
+                session.prompt(promptTextFor(msg)); // T8: quoted excerpt joins the prompt
+            }
+            await session.whenIdle();
+        }
+        catch (error) {
+            responder.dispose(); // a dead turn must not keep editing the placeholder
+            // US42「失败不许静默」:回合失败必须让房间知道。这里原先只 rethrow,外层
+            // 仅 logger.error —— 用户那边是占位消息消失后一片安静,完全不知道出了什么事。
+            // 贴一行失败原因后再抛出:运维侧仍拿到完整堆栈,房间里也知道为什么没回答。
+            const detail = error instanceof Error ? error.message : String(error);
+            try {
+                await transport.send(msg.roomId, `❌ 回合失败:${detail || '未知错误'}`);
+            }
+            catch (sendError) {
+                logger.warn('失败提示回帖失败:', sendError instanceof Error ? sendError.message : sendError);
+            }
+            throw error;
+        }
+        // US42 的另一半:DSH 的回合可以以 `turn/end{reason.kind:'error'}` 收尾而
+        // 不抛错(prompt/whenIdle 照常 resolve),上面那个 catch 兜不住。这里在回合
+        // 结束后主动查一次:失败就撤掉占位并如实报原因,绝不静默。
+        const turnFailure = session.lastTurnFailure();
+        if (turnFailure) {
+            responder.dispose(); // 失败的回合不落定稿
+            try {
+                await transport.send(msg.roomId, `❌ 回合失败:${turnFailure}`);
+            }
+            catch (sendError) {
+                logger.warn('失败提示回帖失败:', sendError instanceof Error ? sendError.message : sendError);
+            }
+            return;
+        }
+        await responder.finalize(session.lastReply());
+    }
+    function enqueue(msg) {
+        logger.debug(`incoming: room=${msg.roomId} sender=${msg.sender} text="${msg.text.slice(0, 60)}"`);
+        // A room whose session is mid-turn needs NO queue: steering is an atomic
+        // inbox injection, and waiting behind the queue would make steer dead code
+        // (the turn is always finished by then). Non-turn paths inside
+        // handleIncoming (trust notice, dedupe) are side-effect-free per message.
+        const live = backend.peekSession(msg.roomId);
+        if (live?.isRunning()) {
+            void Promise.resolve().then(() => handleIncoming(msg)).catch((error) => logger.error('pipeline error:', error instanceof Error ? error.stack : error));
+            return;
+        }
+        const prev = roomQueues.get(msg.roomId) ?? Promise.resolve();
+        const next = prev
+            .then(() => handleIncoming(msg))
+            .catch((error) => logger.error('pipeline error:', error instanceof Error ? error.stack : error));
+        roomQueues.set(msg.roomId, next);
+        next.then(() => {
+            if (roomQueues.get(msg.roomId) === next)
+                roomQueues.delete(msg.roomId);
+        });
+    }
+    return {
+        async start() {
+            unsubscribe = transport.onIncoming((msg) => { enqueue(msg); });
+            // T8: one-time join hint for freshly-invited group rooms (US32).
+            unsubscribeJoin = transport.onRoomJoin?.((roomId, isGroup) => {
+                if (!running || !isGroup)
+                    return;
+                const hint = groupGate.joinHint(roomId);
+                if (hint) {
+                    void transport.notify(roomId, hint).catch((error) => logger.warn('join hint:', error));
+                }
+            });
+            await transport.start(logger);
+            // T12(US37):启动对账 —— 先把已经不在 trusted 里的人降掉并销账,再给当前
+            // trusted 补提。幂等,失败只记日志(权限是附加能力,不该拦住启动)。
+            if (deps.power) {
+                try {
+                    const healed = await deps.power.heal();
+                    if (healed.elevated > 0 || healed.demoted > 0 || healed.failures > 0) {
+                        logger.info(`T12 权限对账:补提 ${healed.elevated}、降级 ${healed.demoted}、失败 ${healed.failures}`);
+                    }
+                }
+                catch (error) {
+                    logger.warn('启动权限对账失败:', error instanceof Error ? error.message : error);
+                }
+            }
+            // T12(US38):space 归集 + 头像自愈(同样幂等、失败只记日志)。
+            if (deps.space) {
+                try {
+                    const healed = await deps.space.heal();
+                    if (healed.spaceCreated || healed.avatarsSet > 0 || healed.childrenAdded > 0 || healed.failures > 0) {
+                        logger.info(`T12 space 对账:建 space ${healed.spaceCreated ? '是' : '否'}、补头像 ${healed.avatarsSet}、挂房间 ${healed.childrenAdded}、失败 ${healed.failures}`);
+                    }
+                }
+                catch (error) {
+                    logger.warn('启动 space 对账失败:', error instanceof Error ? error.message : error);
+                }
+            }
+            logger.info(`🚀 dsh-matrix ready. trusted users: ${[...trusted].join(', ') || '(none!)'} (runtime list: ${auth.store.get().trustedUsers.length}, admin: ${adminId() ?? 'none'})`);
+        },
+        async stop() {
+            running = false;
+            // T13:把关闭过程写出来 —— 这段日志是判断"收到 SIGTERM 后插件到底有没有被
+            // dispose"的唯一依据(crypto 存储要在这一步被干净关闭,SQLite 才会把 WAL
+            // 合并回主库)。此前停止后主库仍 4KB、WAL 3.9MB,怀疑根本没走到这里。
+            logger.info('桥正在关闭:释放 Matrix 连接与 crypto 存储…');
+            unsubscribe?.();
+            unsubscribeJoin?.();
+            try {
+                await transport.stop();
+            }
+            catch (e) {
+                logger.warn('transport stop:', e);
+            }
+            try {
+                await backend.dispose();
+            }
+            catch (e) {
+                logger.warn('backend dispose:', e);
+            }
+            logger.info('桥已关闭');
+        },
+    };
+}
+//# sourceMappingURL=pipeline.js.map