@moxt-ai/mobius 0.0.29 → 0.0.30

package/dist/index.js

@@ -24951,6 +24951,18 @@ import { createHash, randomUUID } from "node:crypto";
 import { stat as stat3 } from "node:fs/promises";
 import { DatabaseSync as DatabaseSync3 } from "node:sqlite";
 var LOCAL_BOT_GRANT_LIFETIME_MILLISECONDS = 90 * 24 * 60 * 60 * 1e3;
+var identifier2 = external_exports.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/);
+var savedApprovalSchema = external_exports.object({
+  local_grant_id: identifier2,
+  bot_id: identifier2,
+  binding_id: identifier2,
+  binding_revision: external_exports.number().int().positive(),
+  agent_ref: identifier2,
+  workspace_ref: external_exports.string().min(1).max(2048),
+  revocation_epoch: external_exports.number().int().nonnegative(),
+  agent_identity_digest: external_exports.string().regex(/^[a-f0-9]{64}$/),
+  workspace_identity_digest: external_exports.string().regex(/^[a-f0-9]{64}$/)
+}).readonly();
 var LocalBotAuthorizationError = class extends Error {
   code;
   constructor(code, message, options = {}) {
@@ -25055,6 +25067,17 @@ function parseTargets(encoded) {
 }
 var LocalBotGrantStore = class {
   #database;
+  static containsBot = (path2, botId) => {
+    const database = new DatabaseSync3(path2, { readOnly: true });
+    try {
+      if (database.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'local_bot_grants'").get() === void 0) {
+        return false;
+      }
+      return database.prepare("SELECT local_grant_id FROM local_bot_grants WHERE bot_id = ? LIMIT 1").get(botId) !== void 0;
+    } finally {
+      database.close();
+    }
+  };
   constructor(path2) {
     this.#database = new DatabaseSync3(path2);
     this.#database.exec(`
@@ -25088,6 +25111,78 @@ var LocalBotGrantStore = class {
           ) STRICT;
         `);
   }
+  /** Only the local CLI may invoke this explicit approval transition. */
+  reapprove = async (botId, catalog, directories, bindingAuthorityId, now, signal) => {
+    signal.throwIfAborted();
+    if (!identifier2.safeParse(botId).success) {
+      throw new LocalBotAuthorizationError("invalid_request", "The Bot ID is invalid");
+    }
+    const row = this.#database.prepare("SELECT * FROM local_bot_grants WHERE bot_id = ? ORDER BY binding_revision DESC LIMIT 1").get(botId);
+    if (row === void 0) {
+      throw new LocalBotAuthorizationError("bot_not_found", "This machine has no saved approval for that Bot");
+    }
+    const parsed = savedApprovalSchema.safeParse(row);
+    if (!parsed.success) {
+      throw new LocalBotAuthorizationError("local_grant_invalid", "The saved Bot approval is invalid", {
+        cause: parsed.error
+      });
+    }
+    const saved = parsed.data;
+    const agent = catalog.find(saved.agent_ref);
+    if (!agent.capabilities.embeddedContextPrompt) {
+      throw new LocalBotAuthorizationError("binding_incompatible", "The local Agent cannot apply Bot context");
+    }
+    const [adapterUnchanged, agentUnchanged] = await Promise.all([
+      revalidateExecutable(agent.adapterIdentity),
+      revalidateExecutable(agent.agentIdentity)
+    ]);
+    signal.throwIfAborted();
+    if (!adapterUnchanged || !agentUnchanged) {
+      throw new LocalBotAuthorizationError(
+        "binding_incompatible",
+        "The local Agent executable changed before approval"
+      );
+    }
+    const workspacePath = await directories.resolve(bindingAuthorityId, saved.workspace_ref, signal);
+    const workspaceIdentityDigest = await workspaceDigest(workspacePath);
+    signal.throwIfAborted();
+    this.#database.exec("BEGIN IMMEDIATE");
+    try {
+      const result = this.#database.prepare(`UPDATE local_bot_grants
+                SET agent_identity_digest = ?, workspace_identity_digest = ?, workspace_path = ?,
+                    revoked_at = NULL, expires_at = ?, revocation_epoch = revocation_epoch + 1
+                WHERE local_grant_id = ? AND revocation_epoch = ?
+                    AND agent_identity_digest = ? AND workspace_identity_digest = ?
+                    AND binding_revision = (SELECT MAX(binding_revision) FROM local_bot_grants WHERE bot_id = ?)`).run(
+        agentDigest(agent),
+        workspaceIdentityDigest,
+        workspacePath,
+        now + LOCAL_BOT_GRANT_LIFETIME_MILLISECONDS,
+        saved.local_grant_id,
+        saved.revocation_epoch,
+        saved.agent_identity_digest,
+        saved.workspace_identity_digest,
+        botId
+      );
+      if (result.changes !== 1) {
+        throw new LocalBotAuthorizationError(
+          "binding_not_approved",
+          "The Bot binding changed during approval; run the command again"
+        );
+      }
+      this.#database.prepare(`INSERT INTO audit_events (recorded_at, event, command_id, session_id, details_json)
+                VALUES (?, 'bot_binding_locally_reapproved', ?, '', ?)`).run(
+        new Date(now).toISOString(),
+        saved.binding_id,
+        JSON.stringify({ botId, bindingId: saved.binding_id, agentRef: saved.agent_ref })
+      );
+      this.#database.exec("COMMIT");
+    } catch (cause) {
+      this.#database.exec("ROLLBACK");
+      throw cause;
+    }
+    return { bindingId: saved.binding_id, workspacePath, agentRef: saved.agent_ref };
+  };
   approve = async (request, catalog, directories, bindingAuthorityId, now, signal) => {
     signal.throwIfAborted();
     const existing = this.#database.prepare(
@@ -31712,7 +31807,7 @@ async function executeSessionConfigure(publisher, socket, command, config2, dire
     reportOperationFailure(socket, command.requestId, command.sessionId, error61);
   }
 }
-async function executePrompt(outbox, publisher, command, config2, directories, audit, sessions, attemptId, timer, signal) {
+async function executePrompt(outbox, publisher, command, config2, directories, audit, sessions, attemptId, activateAttempt, timer, signal) {
   const activities = new CoalescingDaemonActivityPublisher(timer, (activity) => {
     publisher.recordAttempt(command.sessionId, encodeDaemonActivity(command, activity), attemptId);
   });
@@ -31741,6 +31836,7 @@ async function executePrompt(outbox, publisher, command, config2, directories, a
       }),
       attemptId
     );
+    activateAttempt();
     const attachments = await resolvePromptArtifacts(config2, command, signal);
     let stopReason;
     if (command.disposition === SessionPromptDisposition.Steer) {
@@ -31852,7 +31948,7 @@ function botExecutionAgent(agent, contextHandle, socketPath) {
     agent.capabilities
   );
 }
-async function executeBotPrompt(outbox, publisher, command, config2, directories, audit, sessions, grants, contexts, applicator, ipc, attemptId, timer, signal) {
+async function executeBotPrompt(outbox, publisher, command, config2, directories, audit, sessions, grants, contexts, applicator, ipc, attemptId, activateAttempt, timer, signal) {
   const activities = new CoalescingDaemonActivityPublisher(timer, (activity) => {
     publisher.recordAttempt(command.sessionId, encodeDaemonActivity(command, activity), attemptId);
   });
@@ -31933,6 +32029,7 @@ async function executeBotPrompt(outbox, publisher, command, config2, directories
         }),
         attemptId
       );
+      activateAttempt();
       const result = await sessions.runPrompt({
         additionalDirectories: resolved.additionalDirectories,
         agent,
@@ -32126,11 +32223,13 @@ async function runRelayConnection(config2, directories, audit, sessions, install
         }
         const turn = new ActiveDaemonTurn(command, receipt.attemptId);
         activeTurns.set(command.commandId, turn);
-        if (trackActiveAttempt) {
-          activeAttemptIds.set(command.sessionId, receipt.attemptId);
-        }
+        const activateAttempt = () => {
+          if (trackActiveAttempt) {
+            activeAttemptIds.set(command.sessionId, receipt.attemptId);
+          }
+        };
         try {
-          await execute(receipt.attemptId, turn.signal);
+          await execute(receipt.attemptId, activateAttempt, turn.signal);
         } finally {
           activeTurns.delete(command.commandId);
           if (activeAttemptIds.get(command.sessionId) === receipt.attemptId) {
@@ -32215,7 +32314,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
             delivery,
             command,
             true,
-            (attemptId, executionSignal) => executeBotPrompt(
+            (attemptId, activateAttempt, executionSignal) => executeBotPrompt(
               outbox,
               publisher,
               command,
@@ -32228,6 +32327,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
               applicator,
               ipc,
               attemptId,
+              activateAttempt,
               timer,
               executionSignal
             )
@@ -32240,7 +32340,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
             delivery,
             command,
             command.disposition !== SessionPromptDisposition.Steer,
-            (attemptId, executionSignal) => executePrompt(
+            (attemptId, activateAttempt, executionSignal) => executePrompt(
               outbox,
               publisher,
               command,
@@ -32249,6 +32349,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
               audit,
               sessions,
               attemptId,
+              activateAttempt,
               timer,
               executionSignal
             )
@@ -32750,7 +32851,6 @@ async function runRelayConnection(config2, directories, audit, sessions, install
             }
             const turn2 = new ActiveDaemonTurn(command2, receipt2.attemptId);
             activeTurns.set(command2.commandId, turn2);
-            activeAttemptIds.set(command2.sessionId, receipt2.attemptId);
             void executeBotPrompt(
               outbox,
               publisher,
@@ -32764,6 +32864,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
               applicator,
               ipc,
               receipt2.attemptId,
+              () => activeAttemptIds.set(command2.sessionId, receipt2.attemptId),
               timer,
               turn2.signal
             ).catch((error61) => {
@@ -32790,9 +32891,6 @@ async function runRelayConnection(config2, directories, audit, sessions, install
           }
           const turn = new ActiveDaemonTurn(command, receipt.attemptId);
           activeTurns.set(command.commandId, turn);
-          if (command.disposition !== SessionPromptDisposition.Steer) {
-            activeAttemptIds.set(command.sessionId, receipt.attemptId);
-          }
           void executePrompt(
             outbox,
             publisher,
@@ -32802,6 +32900,11 @@ async function runRelayConnection(config2, directories, audit, sessions, install
             audit,
             sessions,
             receipt.attemptId,
+            () => {
+              if (command.disposition !== SessionPromptDisposition.Steer) {
+                activeAttemptIds.set(command.sessionId, receipt.attemptId);
+              }
+            },
             timer,
             turn.signal
           ).catch((error61) => {