@livedesk/hub 0.1.43 → 0.1.45

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.43",
+  "version": "0.1.45",
   "description": "LiveDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",

package/src/agents/agent-result-enrichment.js

@@ -0,0 +1,66 @@
+const DEFAULT_MAX_STATUS_AGE_MS = 30_000;
+
+function asRecord(value) {
+  return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+
+function cpuUsageRatio(value) {
+  return typeof value === 'number' && Number.isFinite(value) && value >= 0 && value <= 1
+    ? value
+    : null;
+}
+
+function positiveInteger(value) {
+  const number = Number(value);
+  return Number.isSafeInteger(number) && number > 0 ? number : null;
+}
+
+function statusAgeMs(device, now) {
+  const sampledAt = Date.parse(String(device?.lastStatusAt || ''));
+  return Number.isFinite(sampledAt) ? Math.max(0, now - sampledAt) : null;
+}
+
+export function enrichAgentTaskResults({
+  operation,
+  results,
+  devices,
+  now = Date.now(),
+  maxStatusAgeMs = DEFAULT_MAX_STATUS_AGE_MS
+} = {}) {
+  const sourceResults = Array.isArray(results) ? results : [];
+  if (operation !== 'system.health') return sourceResults;
+
+  const devicesById = new Map(
+    (Array.isArray(devices) ? devices : []).map(device => [String(device?.deviceId || ''), device])
+  );
+
+  return sourceResults.map(result => {
+    if (!result || result.status !== 'completed') return result;
+    const data = asRecord(result.data);
+    const device = devicesById.get(String(result.deviceId || ''));
+    const status = asRecord(device?.status);
+    const statusCpu = asRecord(status.cpu);
+    const directRatio = cpuUsageRatio(data.cpuUsageRatio);
+    const latestRatio = cpuUsageRatio(statusCpu.usageRatio);
+    const latestAgeMs = statusAgeMs(device, now);
+    const useLatestStatus = directRatio === null
+      && latestRatio !== null
+      && latestAgeMs !== null
+      && latestAgeMs <= Math.max(0, Number(maxStatusAgeMs) || DEFAULT_MAX_STATUS_AGE_MS);
+    const cores = positiveInteger(data.cores) || positiveInteger(statusCpu.cores);
+    const nextData = { ...data };
+
+    if (cores !== null) nextData.cores = cores;
+    if (directRatio !== null) {
+      nextData.cpuUsageRatio = directRatio;
+      nextData.cpuUsageSource = 'system-health-task';
+    } else if (useLatestStatus) {
+      nextData.cpuUsageRatio = latestRatio;
+      nextData.cpuUsageSource = 'latest-client-status';
+      nextData.cpuUsageSampleAgeMs = latestAgeMs;
+      nextData.cpuUsageSampledAt = String(device.lastStatusAt);
+    }
+
+    return { ...result, data: nextData };
+  });
+}

package/src/agents/codex-agent-runtime.js

@@ -728,8 +728,10 @@ export function createCodexAgentRuntime({
       'Never use arbitrary MCP servers, change permissions, forge approvals, request credentials, or invent a tool result.',
       `The Hub has fixed this run to permission mode ${permissionPolicy?.mode || 'ask'} and enforces the policy independently of your instructions.`,
       'Use only the selected connected device IDs below. If the Hub asks for user approval, wait for that approval result and do not work around it.',
-      'You may perform multiple safe read-only checks when the request requires a sequence. For example, find Clients missing a named process, then check a related service only on those Clients.',
-      `Selected device IDs: ${JSON.stringify(deviceIds)}`,
+      'You may perform multiple safe read-only checks when the request requires a sequence. For example, find Clients missing a named process, then check a related service only on those Clients.',
+      'If one read-only result omits a fact the user requested, do not treat that missing field as proof that the fact is unavailable. Try another applicable registered LiveDesk read-only tool.',
+      'If only a high-risk registered tool such as livedesk.run_command can obtain the missing fact, use it only when necessary, one selected device per call, and let the Hub approval policy ask the user. If approval is denied or no applicable tool exists, explain that exact limit.',
+      `Selected device IDs: ${JSON.stringify(deviceIds)}`,
       'Return a concise Korean or English summary grounded only in tool results. Do not invent results.',
       `User request: ${safeText(instruction, 4000)}`
     ].join('\n');

package/src/console-relay.js

@@ -107,9 +107,10 @@ export function createHubConsoleRelay(options = {}) {
   let lastError = relayUrl instanceof URL ? '' : relayUrl === '' ? '' : 'invalid-relay-url';
   let droppedBinaryMessages = 0;
 
-  const sendRelay = payload => {
+  const sendRelay = (payload, bypassBackpressure = false) => {
     if (!relaySocket || relaySocket.readyState !== WebSocketImpl.OPEN) return false;
-    if (Number(relaySocket.bufferedAmount || 0) > MAX_RELAY_BUFFERED_BYTES) return false;
+    if (!bypassBackpressure
+      && Number(relaySocket.bufferedAmount || 0) > MAX_RELAY_BUFFERED_BYTES) return false;
     relaySocket.send(typeof payload === 'string' || Buffer.isBuffer(payload) ? payload : JSON.stringify(payload));
     return true;
   };
@@ -232,6 +233,7 @@ export function createHubConsoleRelay(options = {}) {
         if (!relaySocket || relaySocket.readyState !== WebSocketImpl.OPEN
           || Number(relaySocket.bufferedAmount || 0) > MAX_RELAY_BUFFERED_BYTES) {
           droppedBinaryMessages += 1;
+          closeLocalSocket(key, 1013, 'console-relay-backpressure');
           return;
         }
         const header = Buffer.from(`B${consoleId}${channelId}`, 'ascii');
@@ -246,7 +248,14 @@ export function createHubConsoleRelay(options = {}) {
     });
     socket.once('close', (code, reason) => {
       if (localSockets.get(key) === socket) localSockets.delete(key);
-      sendRelay({ type: 'ws-closed', consoleId, channelId, code, reason: String(reason || '').slice(0, 120) });
+      const closeReason = String(reason || '').slice(0, 120);
+      // Do not silently punch a hole in an H.264 GOP. A tiny terminal control
+      // message is allowed behind the already-bounded video backlog so the
+      // browser replaces only this logical lane and starts again on a key.
+      sendRelay(
+        { type: 'ws-closed', consoleId, channelId, code, reason: closeReason },
+        closeReason === 'console-relay-backpressure'
+      );
     });
     socket.once('error', error => {
       sendError(consoleId, channelId, error instanceof Error ? error.message : error, 'ws-error');

package/src/server.js

@@ -40,8 +40,9 @@ import { createAgentDeviceScope, resolveAgentTargetIds } from './agents/agent-de
 import { AgentRuntimeError } from './agents/agent-runtime-error.js';
 import { AGENT_PERMISSION_MODES, createAgentPermissionPolicy, evaluateAgentToolPermission, hashAgentPermissionPolicy } from './agents/agent-permissions.js';
 import { createAgentPermissionStore } from './agents/agent-permission-store.js';
-import { createAgentAuditStore } from './agents/agent-audit-store.js';
-import { getAgentToolDefinition } from './agents/agent-tool-registry.js';
+import { createAgentAuditStore } from './agents/agent-audit-store.js';
+import { getAgentToolDefinition } from './agents/agent-tool-registry.js';
+import { enrichAgentTaskResults } from './agents/agent-result-enrichment.js';
 import { LiveDeskSettingsStore, SettingsConflictError } from './settings/settings-store.js';
 import { effectiveDevicePolicy } from './settings/settings-schema.js';
 import { buildEffectiveDevicePolicy } from './settings/effective-device-policy.js';
@@ -1269,10 +1270,16 @@ async function dispatchAgentMcpTool(session, name, args = {}) {
       remoteHub.cancelTaskBatch(result.batchId);
       return { ok: false, error: 'cancelled-by-user', batchId: result.batchId };
     }
-    const batch = remoteHub.getTaskBatch(result.batchId);
-    if (!batch) return { ok: false, error: 'task-not-found', batchId: result.batchId };
-    if (!['queued', 'running'].includes(batch.status)) {
-      return {
+    const batch = remoteHub.getTaskBatch(result.batchId);
+    if (!batch) return { ok: false, error: 'task-not-found', batchId: result.batchId };
+    if (!['queued', 'running'].includes(batch.status)) {
+      const taskResults = enrichAgentTaskResults({
+        operation,
+        results: batch.results,
+        devices: remoteHub.listDevices({ includeDataUrl: false })
+          .filter(device => targetIds.includes(device.deviceId))
+      });
+      return {
         ok: true,
         batchId: result.batchId,
         operation,
@@ -1280,8 +1287,8 @@ async function dispatchAgentMcpTool(session, name, args = {}) {
         total: batch.total,
         completed: batch.completed,
         failed: batch.failed,
-        results: batch.results.map(item => ({ deviceId: item.deviceId, deviceName: item.deviceName, status: item.status, stage: item.stage, result: String(item.result || '').slice(0, 3000), data: item.data, error: String(item.error || '').slice(0, 500) }))
-      };
+        results: taskResults.map(item => ({ deviceId: item.deviceId, deviceName: item.deviceName, status: item.status, stage: item.stage, result: String(item.result || '').slice(0, 3000), data: item.data, error: String(item.error || '').slice(0, 500) }))
+      };
     }
     await delayAgentMcp(200);
   }