@gajae-code/coding-agent 0.11.6 → 0.11.7

package/src/session/blob-store.ts

@@ -5,6 +5,18 @@ import { isEnoent, logger } from "@gajae-code/utils";
 
 const BLOB_PREFIX = "blob:sha256:";
 
+/**
+ * Owner-only permissions for on-disk blob directories and files.
+ *
+ * Blob stores can live inside a managed session scope (e.g. the resident-cache
+ * `EphemeralBlobStore` created on the explicit session path). The managed-tree
+ * snapshot fails closed unless every descendant is owner-only, so blobs and
+ * their directories MUST be created 0700/0600 rather than inheriting a
+ * group/other-readable mode from the process umask.
+ */
+const BLOB_DIR_MODE = 0o700;
+const BLOB_FILE_MODE = 0o600;
+
 export interface BlobPutResult {
 	hash: string;
 	path: string;
@@ -113,6 +125,7 @@ export class BlobStore {
 		};
 
 		await Bun.write(blobPath, data);
+		await fsp.chmod(blobPath, BLOB_FILE_MODE);
 		return result;
 	}
 
@@ -131,8 +144,8 @@ export class BlobStore {
 				return `${BLOB_PREFIX}${hash}`;
 			},
 		};
-		fs.mkdirSync(this.dir, { recursive: true });
-		fs.writeFileSync(blobPath, data);
+		fs.mkdirSync(this.dir, { recursive: true, mode: BLOB_DIR_MODE });
+		fs.writeFileSync(blobPath, data, { mode: BLOB_FILE_MODE });
 		return result;
 	}
 
@@ -147,7 +160,7 @@ export class BlobStore {
 		const hash = sha256Hex(data);
 		const blobPath = path.join(this.dir, hash);
 		const result = makeBlobPutResult(hash, blobPath, data.byteLength);
-		fs.mkdirSync(this.dir, { recursive: true });
+		fs.mkdirSync(this.dir, { recursive: true, mode: BLOB_DIR_MODE });
 
 		if (fs.existsSync(blobPath)) {
 			verifyBlobFileSync(hash, blobPath);
@@ -156,7 +169,7 @@ export class BlobStore {
 
 		const tempPath = uniqueTempBlobPath(this.dir, hash);
 		try {
-			const fd = fs.openSync(tempPath, "wx");
+			const fd = fs.openSync(tempPath, "wx", BLOB_FILE_MODE);
 			try {
 				fs.writeFileSync(fd, data);
 				fs.fsyncSync(fd);
@@ -274,7 +287,7 @@ export class EphemeralBlobStore extends BlobStore {
 	constructor(dir: string) {
 		super(dir);
 		fs.rmSync(dir, { recursive: true, force: true });
-		fs.mkdirSync(dir, { recursive: true });
+		fs.mkdirSync(dir, { recursive: true, mode: BLOB_DIR_MODE });
 	}
 
 	#cachePut(hash: string, data: Buffer): void {
@@ -333,7 +346,7 @@ export class EphemeralBlobStore extends BlobStore {
 		this.#bufferCache.clear();
 		this.#bufferCacheBytes = 0;
 		fs.rmSync(this.dir, { recursive: true, force: true });
-		fs.mkdirSync(this.dir, { recursive: true });
+		fs.mkdirSync(this.dir, { recursive: true, mode: BLOB_DIR_MODE });
 	}
 
 	dispose(): void {

package/src/session/btw-contract.ts

@@ -0,0 +1,59 @@
+export const BTW_MAX_CONTEXT_TURNS = 12;
+export const BTW_MAX_CONTEXT_UTF8_BYTES = 64 * 1024;
+export const BTW_MAX_QUESTION_UTF8_BYTES = 16 * 1024;
+export const BTW_MAX_ANSWER_UTF8_BYTES = 32 * 1024;
+export const BTW_MAX_ERROR_UTF8_BYTES = 4 * 1024;
+export const BTW_STREAM_IDLE_TIMEOUT_MS = 30_000;
+export const BTW_STREAM_TOTAL_TIMEOUT_MS = 120_000;
+
+export interface BtwTextExchange {
+	question: string;
+	answer: string;
+}
+
+export function utf8ByteLength(text: string): number {
+	return Buffer.byteLength(text, "utf8");
+}
+
+export function truncateUtf8(text: string, maxBytes: number): string {
+	if (utf8ByteLength(text) <= maxBytes) return text;
+	let bytes = 0;
+	let result = "";
+	for (const character of text) {
+		const characterBytes = utf8ByteLength(character);
+		if (bytes + characterBytes > maxBytes) break;
+		result += character;
+		bytes += characterBytes;
+	}
+	return result;
+}
+
+export function sanitizeBtwError(text: string): string {
+	const sanitized = text
+		.replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g, " ")
+		.replace(/[\u202A-\u202E\u2066-\u2069]/g, "")
+		.replace(/\s+/g, " ")
+		.trim();
+	return truncateUtf8(sanitized || "Side-chat request failed.", BTW_MAX_ERROR_UTF8_BYTES);
+}
+export function exchangeUtf8Bytes(exchange: BtwTextExchange): number {
+	return utf8ByteLength(exchange.question) + utf8ByteLength(exchange.answer);
+}
+
+export function boundBtwExchanges(exchanges: readonly BtwTextExchange[]): BtwTextExchange[] {
+	const bounded: BtwTextExchange[] = [];
+	let totalBytes = 0;
+	for (let index = exchanges.length - 1; index >= 0 && bounded.length < BTW_MAX_CONTEXT_TURNS; index -= 1) {
+		const exchange = exchanges[index];
+		if (!exchange) continue;
+		const normalized = {
+			question: truncateUtf8(exchange.question, BTW_MAX_QUESTION_UTF8_BYTES),
+			answer: truncateUtf8(exchange.answer, BTW_MAX_ANSWER_UTF8_BYTES),
+		};
+		const bytes = exchangeUtf8Bytes(normalized);
+		if (bytes > BTW_MAX_CONTEXT_UTF8_BYTES - totalBytes) break;
+		bounded.unshift(normalized);
+		totalBytes += bytes;
+	}
+	return bounded;
+}