@jc_stack/ez-agents 0.1.0-beta.13 → 0.1.0-beta.19

package/src/host-executor.ts

@@ -1,3 +1,4 @@
+import { redactFailure } from './failure.js'
 import { RunStore } from './runs.js'
 import { Tasks } from './tasks.js'
 import { requireOwnerExecution } from './execution-authority.js'
@@ -12,10 +13,10 @@ import { taskWorkspace } from './task-workspace.js'
 import { packageVersion } from './version.js'
 import { installedPluginVersions } from './software-status.js'
 
-export type HostBinding = { name: string; workspace: string; controlDir: string; binDir: string; toolsHome?: string }
+export type HostBinding = { name: string; workspace: string; controlDir: string; binDir: string; toolsHome?: string; sharedWorkspace?: string }
 export type HostInstallation = { cli: string; agents: HostBinding[] }
 
-export const serveHostExecutor = async (installation: HostInstallation, signal: AbortSignal) => {
+export const serveHostExecutor = async (installation: HostInstallation, signal: AbortSignal, launch = startExecutorJob) => {
   resolveExecutor(installation.cli)
   if (new Set(installation.agents.map(a=>a.workspace)).size !== installation.agents.length ||
       new Set(installation.agents.map(a=>a.controlDir)).size !== installation.agents.length)
@@ -24,9 +25,13 @@ export const serveHostExecutor = async (installation: HostInstallation, signal:
   const busy = new Set<string>()
   const tasks = new Set<Promise<void>>()
   const locks: string[] = []
+  const sharedWorkspaces = new Map<HostBinding, string>()
+  const catalog = (agent: HostBinding) => readModels(undefined, undefined, path.join(agent.controlDir, 'cli', 'codex'))
   try {
     for (const agent of installation.agents) {
       if (![agent.workspace,agent.controlDir,agent.binDir].every(path.isAbsolute)) throw new Error('Host bindings require absolute paths')
+      if (agent.sharedWorkspace && !path.isAbsolute(agent.sharedWorkspace)) throw new Error('Shared workspace requires an absolute path')
+      if (agent.sharedWorkspace) sharedWorkspaces.set(agent, await realpath(agent.sharedWorkspace))
       if (agent.toolsHome) {
         if (!path.isAbsolute(agent.toolsHome)) throw new Error('Plugin registry binding requires an absolute path')
         const config=JSON.parse(await readFile(path.join(agent.toolsHome,'config.json'),'utf8'))
@@ -39,7 +44,7 @@ export const serveHostExecutor = async (installation: HostInstallation, signal:
       catch(error) { if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error }
       await writeFile(lock,JSON.stringify({pid:process.pid}),{mode:0o600,flag:'wx'})
       locks.push(lock)
-      await writeFile(path.join(directory,'models.json'),JSON.stringify(await readModels()),{mode:0o600})
+      await writeFile(path.join(directory,'models.json'),JSON.stringify(await catalog(agent)),{mode:0o600})
       // A host crash is terminal for a claimed job. Never replay an action.
       for (const file of await readdir(directory)) if (file.endsWith('.running.json')) {
         const base=path.join(directory,file.slice(0,-13))
@@ -58,8 +63,8 @@ export const serveHostExecutor = async (installation: HostInstallation, signal:
       const parent=Number(process.env.EZ_HOST_SUPERVISOR_PID)
       if(parent) { try { process.kill(parent,0) } catch { break } }
       if(Date.now()-catalogAt>30000){
-        const models=JSON.stringify(await readModels())
         for(const agent of installation.agents){
+          const models=JSON.stringify(await catalog(agent))
           const file=path.join(agent.controlDir,'host-executor/models.json')
           await writeFile(file+'.tmp',models,{mode:0o600});await rename(file+'.tmp',file)
         }
@@ -74,14 +79,15 @@ export const serveHostExecutor = async (installation: HostInstallation, signal:
           const id=file.slice(0,-13)
           let run
           try {
-            run = id.startsWith('r_schedule_') ? await new RunStore(agent.controlDir).get(id) : null
+            run = await new RunStore(agent.controlDir).get(id)
             if(id.startsWith('r_schedule_') && !run?.scheduled) throw new Error('Missing scheduled run')
           } catch {
             await appendFile(path.join(directory,id+'.events'),JSON.stringify({stream:'exit',code:1})+'\n',{mode:0o600})
             await rm(path.join(directory,file))
             continue
           }
-          const lane=run?.scheduled ? agent.name+':'+id : agent.name
+          const sharedWorkspace=sharedWorkspaces.get(agent)
+          const lane=run?.replyOnly ? 'reply:'+agent.name : sharedWorkspace ? 'workspace:'+sharedWorkspace : run?.scheduled ? agent.name+':'+id : agent.name
           if(busy.has(lane) || (run?.scheduled && [...busy].filter(k=>k.startsWith(agent.name+':')).length>=4)) continue
           const base=path.join(directory,id)
           await rename(base+'.request.json',base+'.running.json')
@@ -103,11 +109,11 @@ export const serveHostExecutor = async (installation: HostInstallation, signal:
               const opts=request.options as ExecutorOptions
               const cli = opts.cli || installation.cli
               resolveExecutor(cli)
-              if (cli !== installation.cli) await validateSelection({id:'selected',name:'Selected model',cli,model:opts.model,effort:opts.effort},await readModels())
-              const options:ExecutorOptions={workspace:run?.scheduled ? await taskWorkspace(agent.workspace,id) : agent.workspace,controlDir:agent.controlDir,binDir:agent.binDir,toolsHome:agent.toolsHome,cli,
-                runId:path.basename(base),timeoutMs:0,
-                sessionId:opts.sessionId,isResume:opts.isResume,eventSource:opts.eventSource,model:opts.model,effort:opts.effort}
-              job=await startExecutorJob(request.texts,options)
+              if (cli !== installation.cli) await validateSelection({id:'selected',name:'Selected model',cli,model:opts.model,effort:opts.effort},await catalog(agent))
+              const options:ExecutorOptions={workspace:run?.scheduled ? await taskWorkspace(agent.workspace,id) : agent.workspace,controlDir:agent.controlDir,binDir:agent.binDir,toolsHome:agent.toolsHome,sharedWorkspace,cli,
+                runId:path.basename(base),timeoutMs:0,repairEnabled:opts.repairEnabled,
+                sessionId:opts.sessionId,isResume:opts.isResume,eventSource:opts.eventSource,model:opts.model,effort:opts.effort,codexAutoCompactTokens:opts.codexAutoCompactTokens}
+              job=await launch(request.texts,options)
               active.set(lane,job.child)
               await writeFile(base+'.process.json',JSON.stringify({pid:job.child.pid}),{mode:0o600})
               if(signal.aborted)terminateJob(job.child)
@@ -115,11 +121,14 @@ export const serveHostExecutor = async (installation: HostInstallation, signal:
               job.child.stderr?.on('data',chunk=>emit({stream:'stderr',text:chunk.toString()}))
               cancellation=setInterval(()=>{void readFile(base+'.cancel').then(()=>terminateJob(job!.child)).catch(()=>{})},250)
               const code=await new Promise<number>(resolve=>job!.child.once('close',code=>resolve(code??1)))
+              if (cancellation) clearInterval(cancellation)
+              await job.cleanup()
+              job = undefined
               emit({stream:'exit',code})
-            } catch { emit({stream:'stderr',text:'Host CLI execution failed\n'}); emit({stream:'exit',code:1}) }
+            } catch (error) { emit({stream:'stderr',text:'Host CLI execution failed: '+redactFailure(error instanceof Error ? error.message : 'Unknown error')+'\n'}); emit({stream:'exit',code:1}) }
             finally {
               if(cancellation)clearInterval(cancellation)
-              await job?.cleanup()
+              await job?.cleanup().catch(() => {})
               await writes
               await rm(base+'.running.json',{force:true})
               await rm(base+'.process.json',{force:true})

package/src/identity.ts

@@ -6,11 +6,16 @@ export const isOwner = (ctx: Pick<Context, 'from' | 'chat'>, owner: Owner | null
     owner &&
       ctx.from &&
       !ctx.from.is_bot &&
-      ctx.chat?.type === 'private' &&
-      ctx.from.id === owner.telegramUserId &&
-      ctx.chat.id === owner.telegramChatId,
+      (owner.kind === 'group'
+        ? ctx.chat?.type === 'group' || ctx.chat?.type === 'supergroup'
+        : ctx.chat?.type === 'private' && ctx.from.id === owner.telegramUserId) &&
+      ctx.chat?.id === owner.telegramChatId,
   )
 
+export const ownsRun = (owner: Owner | null, run: {telegramUserId: number; chatId: number}): boolean =>
+  Boolean(owner && Number.isSafeInteger(run.telegramUserId) && run.telegramUserId > 0 &&
+    run.chatId === owner.telegramChatId && (owner.kind === 'group' || run.telegramUserId === owner.telegramUserId))
+
 export const assertId = (id: string): string => {
   if (!/^[a-zA-Z0-9_-]+$/.test(id)) throw new Error('Invalid record identifier')
   return id

package/src/inbox.ts

@@ -2,6 +2,8 @@ import { mkdir, readFile, rename, writeFile } from 'node:fs/promises'
 import { join } from 'node:path'
 import type { Update } from 'grammy/types'
 import { isExecutionChoice, type ExecutionChoice } from './ai.js'
+import { isOwner } from './identity.js'
+import type { Owner } from './control-state.js'
 
 export type IncomingItem = {
   text: string
@@ -100,11 +102,13 @@ export class InboxStore {
         this.now() - first.receivedAt < 30000
       )
         return
-      const boundary = state.waiting.findIndex((e) => JSON.stringify(e.execution) !== JSON.stringify(first.execution))
+      const chatId = (update: Update) => update.message?.chat.id ?? update.callback_query?.message?.chat.id
+      const boundary = state.waiting.findIndex((e) => JSON.stringify(e.execution) !== JSON.stringify(first.execution) || chatId(e.update) !== chatId(first.update))
       const entries = state.waiting.splice(0, boundary < 0 ? 10 : Math.min(10, boundary))
       // Telegram albums contain at most ten items. Don't split one at the batch boundary.
       const album = entries.at(-1)?.update.message?.media_group_id
       while (album && state.waiting[0]?.update.message?.media_group_id === album &&
+        chatId(state.waiting[0].update) === chatId(first.update) &&
         JSON.stringify(state.waiting[0].execution) === JSON.stringify(first.execution))
         entries.push(state.waiting.shift()!)
       const batch: InboxBatch = { id: `tg_${first.update.update_id}`, entries, status: 'pending' }
@@ -135,7 +139,7 @@ export class InboxStore {
     })
   }
 
-  retryLatest(userId: number, chatId: number): Promise<string | undefined> {
+  retryLatest(userId: number, chatId: number, owner?: Owner | null): Promise<string | undefined> {
     return this.change((state) => {
       const batch = [...state.batches].reverse().find(
         (b) =>
@@ -144,7 +148,7 @@ export class InboxStore {
             const message = e.update.message || e.update.callback_query?.message
             const from = e.update.message?.from || e.update.callback_query?.from
             return (
-              from?.id === userId &&
+              owner?.kind === 'group' ? !e.update.message?.sender_chat && isOwner({from, chat: message?.chat}, owner) : from?.id === userId &&
               !from.is_bot &&
               message?.chat.type === 'private' &&
               message.chat.id === chatId