@decibelsystems/tools 2.1.2 → 2.1.3

package/dist/agentCommands.d.ts

@@ -0,0 +1,11 @@
+export declare const ORG_ID: string;
+/**
+ * Settle a command from an SDK ack (POST /agents/commands/ack). The SDK ran
+ * onCommand and reports done|failed (+ optional result/error). We write it back to
+ * Core via service_role, org-scoped. Returns false if Supabase is unconfigured.
+ * Only 'done'|'failed' are accepted from an ack (the SDK can't set other states).
+ */
+export declare function settleCommandFromAck(id: string, status: 'done' | 'failed', result?: Record<string, unknown> | null, error?: string | null): Promise<boolean>;
+/** Start the command dispatcher loop. Returns a stop function. No-ops if Supabase unconfigured. */
+export declare function startCommandDispatcher(): () => void;
+//# sourceMappingURL=agentCommands.d.ts.map

package/dist/agentCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentCommands.d.ts","sourceRoot":"","sources":["../src/agentCommands.ts"],"names":[],"mappings":"AAyCA,eAAO,MAAM,MAAM,QAAuE,CAAC;AAoO3F;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACvC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,mGAAmG;AACnG,wBAAgB,sBAAsB,IAAI,MAAM,IAAI,CAcnD"}

package/dist/agentCommands.js

@@ -0,0 +1,267 @@
+// ============================================================================
+// Agent-command dispatcher — HQ → agent control surface (Plan D, v1)
+// ============================================================================
+// The inverse of agentPresence: HQ (org admin) WRITES commands into
+// hq.agent_commands under RLS; this daemon picks up pending commands targeted at
+// sessions IT hosts and dispatches them, writing status/result back via
+// SERVICE_ROLE. v1 kinds (Ben-scoped, allowlisted): 'message' + 'request_status'.
+// No shell, no lifecycle. Contract co-designed with decibel-hq (hq.agent_commands
+// migration + cancel RPC + expire sweep). EPIC-0033.
+//
+// SAFETY: a 'message' is delivered to the target peer as untrusted-channel DATA
+// (via the claude-peers broker) — it is NOT an auto-executed instruction. The
+// daemon only transports it.
+//
+// ⚠️ LOAD-BEARING CROSS-ORG INVARIANT (per HQ /security-review):
+//   target_session_key / target_host are FREE TEXT on hq.agent_commands — HQ does
+//   NOT bind them to a same-org live session (keys churn). The ENTIRE cross-org
+//   targeting defense therefore rests on THIS query: it MUST filter on org_id
+//   FIRST (the org this daemon is authorized to serve), with target_host ==
+//   own hostname + target_session_key ∈ live registry as defense-in-depth.
+//   An org-A admin can write a row naming an org-B peer's guessable session_key,
+//   but that row carries org_id=A; as long as org-B's daemon only ever dispatches
+//   rows scoped to org B's org_id, the A-row never reaches B. DO NOT refactor this
+//   to key purely on (host, session_key) ignoring org_id — that opens cross-org
+//   targeting on a shared host.
+//
+// Other boundaries:
+//   - host-match: only dispatch commands whose target_host == this host.
+//   - expiry: skip expires_at < now; also call the DB sweep each cycle.
+//   - poll every 5s (robust; realtime is HQ's status view, not our pickup path).
+// ============================================================================
+import { createClient } from '@supabase/supabase-js';
+import { log } from './config.js';
+import { withRetryResult } from './supabaseRetry.js';
+import { enqueueCommand } from './agentInbox.js';
+import { resolveHost } from './agentPresence.js';
+const BROKER_URL = `http://127.0.0.1:${process.env.CLAUDE_PEERS_PORT ?? '7899'}`;
+// Exported so the HTTP inbox endpoints (httpServer.ts) org-scope drainCommands to
+// the same org this daemon serves — keeps the org-id-first invariant on the read path.
+export const ORG_ID = process.env.DECIBEL_ORG_ID || '1cb79e24-e06f-46c9-8a22-5ee025ffb0f4';
+const POLL_MS = 5_000;
+const ALLOWED_KINDS = new Set(['message', 'request_status']);
+// Ben-scoped staged rollout: the FIRST run dispatches request_status ONLY so he can
+// watch a read-only round-trip before any message reaches a live agent. 'message'
+// dispatch stays held (rows left pending → they expire) until DECIBEL_ENABLE_AGENT_MESSAGES=1.
+const MESSAGES_ENABLED = process.env.DECIBEL_ENABLE_AGENT_MESSAGES === '1';
+function serviceClient() {
+    const url = process.env.SUPABASE_URL;
+    const key = process.env.SUPABASE_SERVICE_KEY;
+    if (!url || !key)
+        return null;
+    return createClient(url, key, {
+        auth: { persistSession: false, autoRefreshToken: false },
+        db: { schema: 'hq' },
+    });
+}
+async function brokerListPeers() {
+    try {
+        const res = await fetch(`${BROKER_URL}/list-peers`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ requester_id: 'decibel-daemon', scope: 'machine' }),
+            signal: AbortSignal.timeout(2000),
+        });
+        if (!res.ok)
+            return [];
+        return (await res.json());
+    }
+    catch {
+        return [];
+    }
+}
+/** Send a peer message via the claude-peers broker. Returns ok + optional error. */
+async function brokerSend(to, message) {
+    try {
+        const res = await fetch(`${BROKER_URL}/send-message`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            // Broker contract: {from_id, to_id, text} (claude-peers broker.ts:280,
+            // shared/types.ts:59 — confirmed line-by-line by the claude-peers owner).
+            // from_id="decibel-daemon": a plainly NON-privileged relay label. Deliberately
+            // NOT "system" — a "system" sender reads to the receiving agent as a trusted/
+            // privileged directive, the OPPOSITE of the required posture (an HQ command is
+            // untrusted-channel DATA, not an auto-executed instruction). Human provenance
+            // rides in `text` ("HQ · <issuer>: ..."). FK is off in the broker so any
+            // from_id delivers; if FK is ever enabled, register decibel-daemon then.
+            body: JSON.stringify({ from_id: 'decibel-daemon', to_id: to, text: message }),
+            signal: AbortSignal.timeout(3000),
+        });
+        const body = (await res.json().catch(() => ({})));
+        return { ok: body.ok === true, error: body.error ?? (res.ok ? undefined : `HTTP ${res.status}`) };
+    }
+    catch (e) {
+        return { ok: false, error: e instanceof Error ? e.message : String(e) };
+    }
+}
+const TERMINAL = new Set(['done', 'failed', 'cancelled', 'expired']);
+async function settle(client, id, patch) {
+    // Stamp completed_at on terminal transitions so HQ can show completion timing.
+    if (typeof patch.status === 'string' && TERMINAL.has(patch.status) && !('completed_at' in patch)) {
+        patch = { ...patch, completed_at: new Date().toISOString() };
+    }
+    // org_id-scoped settle too — never update a row outside our authorized org.
+    const { error } = await client.from('agent_commands').update(patch).eq('id', id).eq('org_id', ORG_ID);
+    if (error)
+        log(`Commands: settle ${id} failed: ${error.message}`);
+}
+async function dispatchOne(client, cmd, peers, sdkSessions) {
+    // Defensive expiry + kind allowlist (DB also enforces, belt-and-suspenders).
+    if (cmd.expires_at && Date.parse(cmd.expires_at) < Date.now())
+        return;
+    if (!ALLOWED_KINDS.has(cmd.kind)) {
+        await settle(client, cmd.id, { status: 'failed', error: `unsupported kind '${cmd.kind}'` });
+        return;
+    }
+    // Staged rollout: hold 'message' until explicitly enabled. Leave the row pending
+    // (untouched) so it simply expires — do NOT settle, so it can dispatch later if
+    // messages are enabled before it expires.
+    if (cmd.kind === 'message' && !MESSAGES_ENABLED)
+        return;
+    const peer = peers.find((p) => p.id === cmd.target_session_key);
+    const isSdkSession = !peer && sdkSessions.has(cmd.target_session_key);
+    // Target not (yet) resolvable as either a broker peer OR a known SDK session.
+    // DON'T permanently fail it — a session that registers in the split-second after
+    // the command was issued would otherwise be lost on the first tick. Leave it
+    // 'pending' so the next tick re-checks; the DB expiry sweep terminates it (→
+    // 'expired') if the target never appears. (Race fix found via SDK e2e 2026-06-15.)
+    if (!peer && !isSdkSession) {
+        return; // leave pending; retried next tick, expires if truly absent
+    }
+    // SDK-runtime target (registered via /agents/register, NOT a claude-peers peer):
+    // it has no broker transport, so we don't resolve/deliver here. Enqueue it for the
+    // SDK to poll + ack (which settles the Core row). Mark 'delivered' so HQ sees
+    // pickup; the SDK ack flips it to done/failed. (request_status is treated the same
+    // way for SDK sessions — the SDK answers it via onCommand and acks with a result.)
+    if (isSdkSession) {
+        await settle(client, cmd.id, { status: 'delivered', delivered_at: new Date().toISOString() });
+        enqueueCommand(cmd.target_session_key, {
+            id: cmd.id,
+            org_id: cmd.org_id,
+            kind: cmd.kind,
+            payload: cmd.payload ?? {},
+            enqueued_at: Date.now(),
+        });
+        return;
+    }
+    // From here, peer is a live broker session. Mark delivered (picked up).
+    await settle(client, cmd.id, { status: 'delivered', delivered_at: new Date().toISOString() });
+    if (cmd.kind === 'request_status') {
+        await settle(client, cmd.id, {
+            status: 'done',
+            result: { summary: peer.summary || null, cwd: peer.cwd || null, last_seen: peer.last_seen, status: 'active' },
+        });
+        return;
+    }
+    // kind === 'message'
+    const text = cmd.payload?.text;
+    if (!text) {
+        await settle(client, cmd.id, { status: 'failed', error: 'message payload missing text' });
+        return;
+    }
+    const label = cmd.payload?.from_label ? `${cmd.payload.from_label}: ` : '';
+    const r = await brokerSend(cmd.target_session_key, `${label}${text}`);
+    if (r.ok) {
+        await settle(client, cmd.id, { status: 'done', result: { delivered: true } });
+    }
+    else {
+        await settle(client, cmd.id, { status: 'failed', error: r.error || 'broker send failed' });
+    }
+}
+async function tick(client) {
+    const host = resolveHost();
+    // DB-side sweep: flip pending->expired where past expiry (idempotent, service_role).
+    try {
+        await client.rpc('expire_stale_agent_commands');
+    }
+    catch { /* RPC optional/non-fatal */ }
+    // Pending commands for OUR org (primary cross-org filter — see invariant above),
+    // targeted at sessions THIS daemon hosts. withRetryResult smooths transient
+    // "fetch failed" blips (issue 2026-06-13) before giving up for this tick.
+    const { data, error } = await withRetryResult(() => client
+        .from('agent_commands')
+        .select('id,org_id,target_session_key,target_host,kind,payload,expires_at,status')
+        .eq('org_id', ORG_ID)
+        .eq('status', 'pending')
+        .eq('target_host', host), 'commands.poll');
+    if (error) {
+        log(`Commands: poll failed: ${error.message}`);
+        return;
+    }
+    const pending = (data ?? []);
+    if (pending.length === 0)
+        return;
+    // SDK runtimes hosting on this box (live, non-claude-code sessions): commands
+    // targeting these route to the in-daemon inbox for the SDK to poll+ack, instead
+    // of failing as "not found in live registry". org-id-first + host-match preserved.
+    const sdkSessions = await loadSdkSessions(client, host);
+    const peers = await brokerListPeers();
+    for (const cmd of pending) {
+        try {
+            await dispatchOne(client, cmd, peers, sdkSessions);
+        }
+        catch (e) {
+            log(`Commands: dispatch ${cmd.id} error: ${e instanceof Error ? e.message : String(e)}`);
+            await settle(client, cmd.id, { status: 'failed', error: 'dispatch exception' }).catch(() => { });
+        }
+    }
+}
+/**
+ * Live SDK-runtime session_keys this daemon hosts (org + host scoped, runtime not
+ * claude-code, status active). These receive commands via the inbox, not the broker.
+ */
+async function loadSdkSessions(client, host) {
+    const { data, error } = await withRetryResult(() => client
+        .from('agent_sessions')
+        .select('session_key,runtime,status')
+        .eq('org_id', ORG_ID)
+        .eq('host', host)
+        .eq('status', 'active')
+        .neq('runtime', 'claude-code'), 'commands.sdkSessions');
+    const set = new Set();
+    if (error)
+        log(`Commands: loadSdkSessions query error: ${error.message}`);
+    if (!error && data) {
+        for (const r of data)
+            set.add(r.session_key);
+    }
+    return set;
+}
+/**
+ * Settle a command from an SDK ack (POST /agents/commands/ack). The SDK ran
+ * onCommand and reports done|failed (+ optional result/error). We write it back to
+ * Core via service_role, org-scoped. Returns false if Supabase is unconfigured.
+ * Only 'done'|'failed' are accepted from an ack (the SDK can't set other states).
+ */
+export async function settleCommandFromAck(id, status, result, error) {
+    const client = serviceClient();
+    if (!client)
+        return false;
+    if (status !== 'done' && status !== 'failed')
+        return false;
+    const patch = { status };
+    if (result !== undefined && result !== null)
+        patch.result = result;
+    if (error !== undefined && error !== null)
+        patch.error = error;
+    await settle(client, id, patch);
+    return true;
+}
+/** Start the command dispatcher loop. Returns a stop function. No-ops if Supabase unconfigured. */
+export function startCommandDispatcher() {
+    const client = serviceClient();
+    if (!client) {
+        log('Commands: SUPABASE_URL/SERVICE_KEY not set — agent-command dispatcher disabled.');
+        return () => { };
+    }
+    log(`Commands: dispatcher started (5s poll of hq.agent_commands, host ${resolveHost()}, org ${ORG_ID}).`);
+    const run = () => {
+        tick(client).catch((e) => log(`Commands: tick error: ${e instanceof Error ? e.message : String(e)}`));
+    };
+    run();
+    const iv = setInterval(run, POLL_MS);
+    if (typeof iv.unref === 'function')
+        iv.unref();
+    return () => clearInterval(iv);
+}
+//# sourceMappingURL=agentCommands.js.map

package/dist/agentCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentCommands.js","sourceRoot":"","sources":["../src/agentCommands.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,qEAAqE;AACrE,+EAA+E;AAC/E,oEAAoE;AACpE,iFAAiF;AACjF,wEAAwE;AACxE,kFAAkF;AAClF,kFAAkF;AAClF,qDAAqD;AACrD,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,6BAA6B;AAC7B,EAAE;AACF,iEAAiE;AACjE,kFAAkF;AAClF,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,iFAAiF;AACjF,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,gCAAgC;AAChC,EAAE;AACF,oBAAoB;AACpB,yEAAyE;AACzE,wEAAwE;AACxE,iFAAiF;AACjF,+EAA+E;AAE/E,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,UAAU,GAAG,oBAAoB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,EAAE,CAAC;AACjF,kFAAkF;AAClF,uFAAuF;AACvF,MAAM,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,sCAAsC,CAAC;AAC3F,MAAM,OAAO,GAAG,KAAK,CAAC;AACtB,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC7D,oFAAoF;AACpF,kFAAkF;AAClF,+FAA+F;AAC/F,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,GAAG,CAAC;AAqB3E,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;QAC5B,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;QACxD,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KACrB,CAAC,CAAC;AACL,CAAC;AAGD,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,aAAa,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC1E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,UAAU,CAAC,EAAU,EAAE,OAAe;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,eAAe,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,uEAAuE;YACvE,0EAA0E;YAC1E,+EAA+E;YAC/E,8EAA8E;YAC9E,+EAA+E;YAC/E,8EAA8E;YAC9E,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC7E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAqC,CAAC;QACtF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACpG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAErE,KAAK,UAAU,MAAM,CAAC,MAAgB,EAAE,EAAU,EAAE,KAA8B;IAChF,+EAA+E;IAC/E,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,IAAI,KAAK,CAAC,EAAE,CAAC;QACjG,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/D,CAAC;IACD,4EAA4E;IAC5E,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtG,IAAI,KAAK;QAAE,GAAG,CAAC,oBAAoB,EAAE,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,MAAgB,EAChB,GAAe,EACf,KAAmB,EACnB,WAAwB;IAExB,6EAA6E;IAC7E,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO;IACtE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IAED,iFAAiF;IACjF,gFAAgF;IAChF,0CAA0C;IAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAExD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAEtE,8EAA8E;IAC9E,iFAAiF;IACjF,6EAA6E;IAC7E,6EAA6E;IAC7E,mFAAmF;IACnF,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3B,OAAO,CAAC,4DAA4D;IACtE,CAAC;IAED,iFAAiF;IACjF,mFAAmF;IACnF,8EAA8E;IAC9E,mFAAmF;IACnF,mFAAmF;IACnF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9F,cAAc,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACrC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAG,GAAG,CAAC,OAAmC,IAAI,EAAE;YACvD,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,wEAAwE;IACxE,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE9F,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE,OAAO,EAAE,IAAK,CAAC,OAAO,IAAI,IAAI,EAAE,GAAG,EAAE,IAAK,CAAC,GAAG,IAAI,IAAI,EAAE,SAAS,EAAE,IAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;SACjH,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAC1F,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,oBAAoB,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,MAAgB;IAClC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAE3B,qFAAqF;IACrF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAExC,iFAAiF;IACjF,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAC3C,GAAG,EAAE,CAAC,MAAM;SACT,IAAI,CAAC,gBAAgB,CAAC;SACtB,MAAM,CAAC,yEAAyE,CAAC;SACjF,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;SACpB,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;SACvB,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,EAC1B,eAAe,CAChB,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,0BAA0B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAiB,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,8EAA8E;IAC9E,gFAAgF;IAChF,mFAAmF;IACnF,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAExD,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,sBAAsB,GAAG,CAAC,EAAE,WAAW,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzF,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAAC,MAAgB,EAAE,IAAY;IAC3D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAC3C,GAAG,EAAE,CAAC,MAAM;SACT,IAAI,CAAC,gBAAgB,CAAC;SACtB,MAAM,CAAC,4BAA4B,CAAC;SACpC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;SACpB,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;SAChB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;SACtB,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,EAChC,sBAAsB,CACvB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,KAAK;QAAE,GAAG,CAAC,0CAA0C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAsC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAU,EACV,MAAyB,EACzB,MAAuC,EACvC,KAAqB;IAErB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,KAAK,GAA4B,EAAE,MAAM,EAAE,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;QAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/D,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,sBAAsB;IACpC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,iFAAiF,CAAC,CAAC;QACvF,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IACD,GAAG,CAAC,oEAAoE,WAAW,EAAE,SAAS,MAAM,IAAI,CAAC,CAAC;IAC1G,MAAM,GAAG,GAAG,GAAG,EAAE;QACf,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC;IACF,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,OAAQ,EAA6B,CAAC,KAAK,KAAK,UAAU;QAAG,EAA4B,CAAC,KAAK,EAAE,CAAC;IACtG,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;AACjC,CAAC"}

package/dist/agentInbox.d.ts

@@ -0,0 +1,37 @@
+export interface InboxCommand {
+    id: string;
+    org_id: string;
+    kind: string;
+    payload: Record<string, unknown>;
+    enqueued_at: number;
+}
+/**
+ * Enqueue a command for an SDK session to poll. Idempotent on command id. Also
+ * records the id→session ownership (for ack authorization). cmd.org_id is the
+ * owning org; drainCommands only returns commands whose org matches the caller's.
+ */
+export declare function enqueueCommand(sessionKey: string, cmd: InboxCommand): void;
+/**
+ * Drain pending commands for a session (returns + removes them). Evicts stale
+ * first. Only returns commands belonging to `orgId` — a cross-org command (which
+ * should never be enqueued here given the dispatcher's org-first filter) is
+ * dropped, never delivered.
+ */
+export declare function drainCommands(sessionKey: string, orgId: string): InboxCommand[];
+/** Is this session_key one the inbox is tracking? (has pending commands) */
+export declare function hasInbox(sessionKey: string): boolean;
+/** Store (or replace) the capability token for a session. */
+export declare function setSessionToken(sessionKey: string, token: string): void;
+/** The capability token for a session, or undefined if none is registered. */
+export declare function getSessionToken(sessionKey: string): string | undefined;
+/** Forget a session's token (on 'ended' lifecycle). */
+export declare function dropSessionToken(sessionKey: string): void;
+/** The session_key a command id was enqueued for (for ack authorization). */
+export declare function ackOwnerOf(id: string): string | undefined;
+/** Forget an id→session ownership once the command has been acked/settled. */
+export declare function clearAckOwner(id: string): void;
+/** Total queued commands across all sessions (for /health + tests). */
+export declare function inboxDepth(): number;
+/** Test/shutdown helper — resets inboxes, tokens, and ack-owners. */
+export declare function clearInbox(): void;
+//# sourceMappingURL=agentInbox.d.ts.map

package/dist/agentInbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentInbox.d.ts","sourceRoot":"","sources":["../src/agentInbox.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;CACrB;AAyBD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAQ1E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE,CAK/E;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAGpD;AAMD,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEvE;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEtE;AAED,uDAAuD;AACvD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAEzD;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEzD;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAE9C;AAeD,uEAAuE;AACvE,wBAAgB,UAAU,IAAI,MAAM,CAInC;AAED,qEAAqE;AACrE,wBAAgB,UAAU,IAAI,IAAI,CAIjC"}

package/dist/agentInbox.js

@@ -0,0 +1,128 @@
+// ============================================================================
+// Agent command inbox — daemon-side delivery for SDK (non-broker) runtimes
+// ============================================================================
+// The HQ→agent command dispatcher (agentCommands.ts) delivers `message` to
+// claude-peers sessions via the broker, and answers `request_status` from the
+// broker's live registry. But SDK-registered runtimes (hermes/openclaw/codex/…
+// from @decibelsystems/tools/hq) aren't in the broker — they have no transport.
+//
+// This module bridges that gap WITHOUT giving the SDK any Supabase creds (the
+// "no service_role in untrusted hands" rule holds): the dispatcher ENQUEUES a
+// command targeting a known SDK session here; the SDK polls GET /agents/commands
+// + acks POST /agents/commands/ack (both localhost-only); the daemon settles the
+// hq.agent_commands row in Core via service_role on ack.
+//
+// IDENTITY — capability token, NOT a bare label (security review 2026-06-15):
+// session_key is a GUESSABLE label, so localhost-bind alone would let any
+// co-resident local runtime drain/ack ANOTHER runtime's commands (the SDK's whole
+// premise is several runtimes side-by-side). So the daemon mints a per-session
+// SECRET token at /agents/register, returns it to that one SDK process, and
+// requires it on poll + ack. session_key says "which inbox"; the token proves
+// "I'm the process that registered it." The org-id-first cross-org invariant is
+// preserved here too: InboxCommand carries org_id and drainCommands filters on it,
+// so even a token-authenticated poll only ever receives its own org's commands.
+// ============================================================================
+// session_key → its pending commands. In-memory: the daemon is the single
+// authority for sessions it hosts; a restart re-derives state from Core (pending
+// rows get re-dispatched on the next tick).
+const inboxes = new Map();
+// session_key → its per-session capability token (the secret an SDK must present
+// on poll/ack to prove it's the registrant). Minted by the HTTP register/heartbeat
+// handler; verified there too (timing-safe). Wiped on a daemon restart — the SDK's
+// next heartbeat re-mints, and it stores the fresh token from the response.
+const sessionTokens = new Map();
+// command id → the session_key it was enqueued for, with a timestamp for TTL
+// eviction. The ack arrives AFTER drainCommands has already removed the command
+// from the inbox, so the inbox itself can't tell us who owns an acked id — this
+// map can. The ack handler maps id→session→token to authorize the settle.
+const ackOwners = new Map();
+// Drop inbox entries an SDK never polled, so a vanished runtime doesn't leak
+// memory. Slightly longer than the command expiry (5min) so a slow poller still
+// gets it; the dispatcher's expiry sweep settles the Core row regardless.
+const INBOX_TTL_MS = 6 * 60_000;
+const MAX_PER_SESSION = 100; // backstop against unbounded growth per session
+/**
+ * Enqueue a command for an SDK session to poll. Idempotent on command id. Also
+ * records the id→session ownership (for ack authorization). cmd.org_id is the
+ * owning org; drainCommands only returns commands whose org matches the caller's.
+ */
+export function enqueueCommand(sessionKey, cmd) {
+    const list = inboxes.get(sessionKey) ?? [];
+    if (list.some((c) => c.id === cmd.id))
+        return; // already queued (keep first owner)
+    list.push(cmd);
+    // Trim oldest if a session somehow accumulates a flood (shouldn't happen).
+    while (list.length > MAX_PER_SESSION)
+        list.shift();
+    inboxes.set(sessionKey, list);
+    ackOwners.set(cmd.id, { sessionKey, at: cmd.enqueued_at });
+}
+/**
+ * Drain pending commands for a session (returns + removes them). Evicts stale
+ * first. Only returns commands belonging to `orgId` — a cross-org command (which
+ * should never be enqueued here given the dispatcher's org-first filter) is
+ * dropped, never delivered.
+ */
+export function drainCommands(sessionKey, orgId) {
+    evictStale();
+    const list = inboxes.get(sessionKey) ?? [];
+    inboxes.delete(sessionKey);
+    return list.filter((c) => c.org_id === orgId);
+}
+/** Is this session_key one the inbox is tracking? (has pending commands) */
+export function hasInbox(sessionKey) {
+    const list = inboxes.get(sessionKey);
+    return !!list && list.length > 0;
+}
+// ---------------------------------------------------------------------------
+// Per-session capability tokens (proof-of-possession for poll/ack)
+// ---------------------------------------------------------------------------
+/** Store (or replace) the capability token for a session. */
+export function setSessionToken(sessionKey, token) {
+    sessionTokens.set(sessionKey, token);
+}
+/** The capability token for a session, or undefined if none is registered. */
+export function getSessionToken(sessionKey) {
+    return sessionTokens.get(sessionKey);
+}
+/** Forget a session's token (on 'ended' lifecycle). */
+export function dropSessionToken(sessionKey) {
+    sessionTokens.delete(sessionKey);
+}
+/** The session_key a command id was enqueued for (for ack authorization). */
+export function ackOwnerOf(id) {
+    return ackOwners.get(id)?.sessionKey;
+}
+/** Forget an id→session ownership once the command has been acked/settled. */
+export function clearAckOwner(id) {
+    ackOwners.delete(id);
+}
+/** Evict commands + ack-owners older than the TTL (the dispatcher/DB sweep handles Core-side). */
+function evictStale() {
+    const cutoff = Date.now() - INBOX_TTL_MS;
+    for (const [key, list] of inboxes) {
+        const kept = list.filter((c) => c.enqueued_at >= cutoff);
+        if (kept.length === 0)
+            inboxes.delete(key);
+        else if (kept.length !== list.length)
+            inboxes.set(key, kept);
+    }
+    for (const [id, owner] of ackOwners) {
+        if (owner.at < cutoff)
+            ackOwners.delete(id);
+    }
+}
+/** Total queued commands across all sessions (for /health + tests). */
+export function inboxDepth() {
+    let n = 0;
+    for (const list of inboxes.values())
+        n += list.length;
+    return n;
+}
+/** Test/shutdown helper — resets inboxes, tokens, and ack-owners. */
+export function clearInbox() {
+    inboxes.clear();
+    sessionTokens.clear();
+    ackOwners.clear();
+}
+//# sourceMappingURL=agentInbox.js.map

package/dist/agentInbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentInbox.js","sourceRoot":"","sources":["../src/agentInbox.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,iFAAiF;AACjF,iFAAiF;AACjF,yDAAyD;AACzD,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,kFAAkF;AAClF,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,gFAAgF;AAChF,mFAAmF;AACnF,gFAAgF;AAChF,+EAA+E;AAU/E,0EAA0E;AAC1E,iFAAiF;AACjF,4CAA4C;AAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;AAElD,iFAAiF;AACjF,mFAAmF;AACnF,mFAAmF;AACnF,4EAA4E;AAC5E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,0EAA0E;AAC1E,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8C,CAAC;AAExE,6EAA6E;AAC7E,gFAAgF;AAChF,0EAA0E;AAC1E,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC;AAChC,MAAM,eAAe,GAAG,GAAG,CAAC,CAAC,gDAAgD;AAE7E;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,GAAiB;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,oCAAoC;IACnF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,2EAA2E;IAC3E,OAAO,IAAI,CAAC,MAAM,GAAG,eAAe;QAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,KAAa;IAC7D,UAAU,EAAE,CAAC;IACb,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,UAAkB;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,KAAa;IAC/D,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,OAAO,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,kGAAkG;AAClG,SAAS,UAAU;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACtC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,EAAE,GAAG,MAAM;YAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE;QAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC;IACtD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,aAAa,CAAC,KAAK,EAAE,CAAC;IACtB,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC"}

package/dist/agentPresence.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The daemon's host identity for presence + command targeting. Defaults to
+ * os.hostname() but is overridable via DECIBEL_PRESENCE_HOST — needed where the
+ * OS hostname isn't a stable/unique daemon identity (containers with shared
+ * hostnames, or two daemons on one machine, e.g. a rolling restart or a test
+ * harness). target_host on hq.agent_commands matches this, so it must be the same
+ * value the presence writer stamps. Shared by the dispatcher (agentCommands.ts).
+ */
+export declare function resolveHost(): string;
+export interface LocalAgentRegistration {
+    session_key: string;
+    runtime: string;
+    agent?: string | null;
+    cwd?: string | null;
+    summary?: string | null;
+    meta?: Record<string, unknown>;
+    status?: 'active' | 'ended';
+}
+/** Strip control chars/null bytes and cap length. Empty-after-clean → null. */
+export declare function sanitizeText(s: string | null | undefined, maxLen: number): string | null;
+/**
+ * Flatten meta to display-safe primitives: strings cleaned + capped, numbers/
+ * booleans/null kept, nested objects/arrays dropped (HQ typeof-guards numeric
+ * meta and renders strings as text). If the result still exceeds META_MAX_BYTES,
+ * drop it entirely — the caller re-adds the trusted last_action_at.
+ */
+export declare function sanitizeMeta(meta: Record<string, unknown> | undefined): Record<string, unknown>;
+/**
+ * Upsert a local-runtime session into hq.agent_sessions (register or heartbeat).
+ * Returns true on success, false if Supabase is unconfigured or the write failed.
+ * Reuses the presence writer's org config + cwd→project resolution.
+ */
+export declare function writeLocalAgentSession(reg: LocalAgentRegistration): Promise<boolean>;
+/** Start the presence writer loop. Returns a stop function. No-ops if Supabase unconfigured. */
+export declare function startPresenceWriter(): () => void;
+//# sourceMappingURL=agentPresence.d.ts.map

package/dist/agentPresence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentPresence.d.ts","sourceRoot":"","sources":["../src/agentPresence.ts"],"names":[],"mappings":"AAsBA;;;;;;;GAOG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAwHD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAG/B,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;CAC7B;AAmBD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIxF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAU/F;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuC1F;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,IAAI,MAAM,IAAI,CAchD"}