@moxxy/cli 0.8.1 → 0.9.0

package/dist/bin.js

@@ -194,6 +194,14 @@ var init_log = __esm({
       listeners = /* @__PURE__ */ new Set();
       clearListeners = /* @__PURE__ */ new Set();
       now;
+      /**
+       * Seq of the FIRST event this log holds. 0 for an authoring log; a mirror
+       * primed by a partial attach replay (runner protocol v6 `replay.start`)
+       * rebases to the first replayed seq so `ingest`'s contiguity gate lines up
+       * with the runner's stream instead of expecting history we never received.
+       * `seq === base + index` for every held event.
+       */
+      base = 0;
       constructor(seed = [], opts = {}) {
         this.now = opts.now ?? Date.now;
         for (const e3 of seed)
@@ -202,13 +210,18 @@ var init_log = __esm({
       get length() {
         return this.events.length;
       }
+      /** Seq of the first held event (see {@link rebase}). */
+      get baseSeq() {
+        return this.base;
+      }
       at(seq) {
-        if (seq < 0 || seq >= this.events.length)
+        const index = seq - this.base;
+        if (index < 0 || index >= this.events.length)
           return void 0;
-        return this.events[seq];
+        return this.events[index];
       }
-      slice(from = 0, to = this.events.length) {
-        return this.events.slice(from, to);
+      slice(from = 0, to = this.base + this.events.length) {
+        return this.events.slice(Math.max(0, from - this.base), Math.max(0, to - this.base));
       }
       ofType(type) {
         return this.events.filter((e3) => e3.type === type);
@@ -220,7 +233,7 @@ var init_log = __esm({
         return [...this.events];
       }
       async append(partial) {
-        const event = materializeEvent(partial, this.events.length, this.now);
+        const event = materializeEvent(partial, this.base + this.events.length, this.now);
         this.events.push(event);
         const snapshot = [...this.listeners];
         for (const fn of snapshot) {
@@ -245,7 +258,7 @@ var init_log = __esm({
        * Not for normal authoring; use {@link append} for that.
        */
       ingest(event) {
-        if (event.seq !== this.events.length)
+        if (event.seq !== this.base + this.events.length)
           return;
         this.events.push(event);
         const snapshot = [...this.listeners];
@@ -271,8 +284,25 @@ var init_log = __esm({
        * Safe to call only when no turn is in flight — callers should abort
        * their AbortController and await any pending runTurn() first.
        */
+      /**
+       * Start this (empty) log at `seq` instead of 0. A mirror primed by a
+       * PARTIAL attach replay (`replay: 'none'` / `{ tail }`) calls this with the
+       * runner's announced first seq so {@link ingest}'s contiguity gate accepts
+       * the stream. Only valid while empty — rebasing held events would detach
+       * their seqs from their indices.
+       */
+      rebase(seq) {
+        if (this.events.length > 0) {
+          throw new Error(`EventLog.rebase(${seq}): log already holds ${this.events.length} events`);
+        }
+        if (!Number.isInteger(seq) || seq < 0) {
+          throw new Error(`EventLog.rebase(${seq}): seq must be a non-negative integer`);
+        }
+        this.base = seq;
+      }
       clear() {
         this.events.length = 0;
+        this.base = 0;
         const snapshot = [...this.clearListeners];
         for (const fn of snapshot) {
           try {
@@ -466,9 +496,10 @@ async function runChildTurn(args) {
     return resolved.failure;
   const { strategy, strategyName } = resolved;
   const toolRegistry = spec.allowedTools && spec.allowedTools.length > 0 ? buildFilteredToolRegistry(parentSession.tools, new Set(spec.allowedTools)) : parentSession.tools;
+  const childModel = await resolveChildModel(rt3, spec, label3, childSessionId);
   const childLog = new EventLog();
-  const spawner = createSubagentSpawner(rt3);
-  const childCtx = buildChildContext(rt3, spec, childSessionId, childTurnId, toolRegistry, childLog, spawner);
+  const spawner = createSubagentSpawner({ ...rt3, parentModel: childModel });
+  const childCtx = buildChildContext(rt3, spec, childModel, childSessionId, childTurnId, toolRegistry, childLog, spawner);
   const capture = await executeChildLoop({
     rt: rt3,
     spec,
@@ -600,12 +631,24 @@ async function resolveStrategy(parentSession, parentTurnId, label3, childSession
     }
   };
 }
-function buildChildContext(rt3, spec, childSessionId, childTurnId, toolRegistry, childLog, spawner) {
-  const { parentSession, parentSignal, parentModel } = rt3;
+async function resolveChildModel(rt3, spec, label3, childSessionId) {
+  const { parentSession, parentTurnId, parentModel } = rt3;
+  const requested = spec.model;
+  if (requested === void 0 || requested === parentModel)
+    return parentModel;
+  const models = parentSession.providers.getActive().models;
+  if (models.length > 0 && !models.some((m3) => m3.id === requested)) {
+    await emitSubagentWarning(parentSession, parentTurnId, label3, childSessionId, `unknown model "${requested}" \u2014 falling back to parent model "${parentModel}"`);
+    return parentModel;
+  }
+  return requested;
+}
+function buildChildContext(rt3, spec, model, childSessionId, childTurnId, toolRegistry, childLog, spawner) {
+  const { parentSession, parentSignal } = rt3;
   return {
     sessionId: childSessionId,
     turnId: childTurnId,
-    model: spec.model ?? parentModel,
+    model,
     ...spec.systemPrompt !== void 0 ? { systemPrompt: spec.systemPrompt } : {},
     provider: parentSession.providers.getActive(),
     tools: toolRegistry,
@@ -674,6 +717,7 @@ async function* runTurn(session, prompt, opts = {}) {
   const turnId = opts.turnId ?? session.startTurn().turnId;
   const provider = session.providers.getActive();
   const model = opts.model ?? provider.models[0]?.id ?? "default";
+  session.lastResolvedModel = model;
   const queue = [];
   const waiters = [];
   let done = false;
@@ -3023,6 +3067,11 @@ var init_session = __esm({
       elisionSettings = null;
       /** Lazy tool loading toggle, from `config.context.lazyTools`. Default off. */
       lazyTools = false;
+      /**
+       * Model id resolved by the most recent `runTurn()` (see SessionRuntime).
+       * Last-writer-wins for concurrent turns; null until the first turn runs.
+       */
+      lastResolvedModel = null;
       /**
        * Live runtime capabilities the host installs on a local Session (see
        * SessionLike). A RemoteSession leaves them undefined. Declared here — rather
@@ -3638,7 +3687,7 @@ The body is the instructions for future invocations. Keep it under 30 lines. Num
 });
 async function synthesizeSkill(session, intent, scope, opts = {}) {
   const provider = session.providers.getActive();
-  const model = opts.model ?? provider.models[0]?.id ?? "claude-sonnet-4-6";
+  const model = opts.model ?? session.lastResolvedModel ?? provider.models[0]?.id ?? "default";
   const draft = await draftSkill(provider, model, intent, session.signal);
   const baseDir = scope === "project" ? opts.projectDir ?? defaultProjectSkillsDir(session.cwd) : opts.userDir ?? defaultUserSkillsDir();
   await promises.mkdir(baseDir, { recursive: true });
@@ -134325,13 +134374,14 @@ async function createWebSocketTransportServer(opts) {
   const host = opts.host ?? "127.0.0.1";
   const maxConnections = opts.maxConnections ?? DEFAULT_MAX_CONNECTIONS;
   let currentToken = opts.authToken;
+  let currentAllowedOrigins = opts.allowedOrigins ?? [];
   let connections = 0;
   const wss = new import_websocket_server.default({
     host,
     port: opts.port,
     maxPayload: opts.maxPayloadBytes ?? 64 * 1024 * 1024,
     verifyClient: (info) => {
-      if (!checkWsOrigin(info.req, opts.allowedOrigins)) {
+      if (!checkWsOrigin(info.req, currentAllowedOrigins)) {
         console.warn(`[moxxy] ws bridge: rejected browser-origin upgrade (Origin: ${String(info.req.headers.origin)})`);
         return false;
       }
@@ -134371,6 +134421,9 @@ async function createWebSocketTransportServer(opts) {
       for (const client of wss.clients)
         client.terminate();
     },
+    setAllowedOrigins(origins) {
+      currentAllowedOrigins = [...origins];
+    },
     clientCount() {
       return connections;
     },
@@ -134704,7 +134757,7 @@ function isRunnerUp(socketPath = runnerSocketPath()) {
 
 // ../runner/dist/server.js
 init_dist();
-var RUNNER_PROTOCOL_VERSION = 5;
+var RUNNER_PROTOCOL_VERSION = 6;
 var MIN_COMPATIBLE_PROTOCOL_VERSION = 1;
 var RunnerMethod = {
   /** client->server: handshake; returns the initial info snapshot. */
@@ -134779,7 +134832,14 @@ var RunnerNotification = {
    * clear: post-reset events restart at seq 0, which a seq-contiguous
    * mirror only accepts from an empty log.
    */
-  SessionReset: "session.reset"
+  SessionReset: "session.reset",
+  /**
+   * Sent once, immediately before the attach-time replay loop (v6): the
+   * first seq this connection will replay/stream. The client rebases its
+   * (empty) mirror to `fromSeq` so a partial replay (`replay: 'none'` /
+   * `{ tail }`) ingests contiguously instead of dropping every event.
+   */
+  ReplayStart: "replay.start"
 };
 var attachmentSchema = z.object({
   kind: z.string(),
@@ -134790,14 +134850,22 @@ var attachmentSchema = z.object({
 var attachParamsSchema = z.object({
   protocolVersion: z.number(),
   role: z.string(),
-  sinceSeq: z.number().int().nonnegative().optional()
+  sinceSeq: z.number().int().nonnegative().optional(),
+  replay: z.union([
+    z.literal("full"),
+    z.literal("none"),
+    z.object({ tail: z.number().int().positive() })
+  ]).optional()
 });
 var runTurnParamsSchema = z.object({
   prompt: z.string(),
   model: z.string().optional(),
   systemPrompt: z.string().optional(),
   maxIterations: z.number().int().positive().optional(),
-  attachments: z.array(attachmentSchema).optional()
+  attachments: z.array(attachmentSchema).optional(),
+  // Bounded like the other id-bearing params so a hostile client can't stuff
+  // an arbitrary blob into every event of the turn.
+  turnId: z.string().min(1).max(120).optional()
 });
 var abortParamsSchema = z.object({ turnId: z.string() });
 var setResolverParamsSchema = z.object({
@@ -134945,7 +135013,11 @@ var RunnerServer = class {
     }
     client.role = params.role;
     client.attached = true;
-    for (const event of this.session.log.slice(0)) {
+    const replay = params.replay ?? "full";
+    const total = this.session.log.length;
+    const start = replay === "full" ? 0 : replay === "none" ? total : Math.max(0, total - replay.tail);
+    client.peer.notify(RunnerNotification.ReplayStart, { fromSeq: start });
+    for (const event of this.session.log.slice(start)) {
       client.peer.notify(RunnerNotification.Event, { event });
     }
     return {
@@ -134956,7 +135028,10 @@ var RunnerServer = class {
   }
   handleRunTurn(client, raw) {
     const params = runTurnParamsSchema.parse(raw);
-    const turnId = newTurnId();
+    const turnId = params.turnId ? asTurnId(params.turnId) : newTurnId();
+    if (this.turnControllers.has(turnId)) {
+      throw new Error(`turn id ${turnId} is already in flight \u2014 client-supplied turn ids must be unique`);
+    }
     const controller = new AbortController();
     this.turnControllers.set(turnId, { controller, owner: client });
     client.turns.add(turnId);
@@ -135361,6 +135436,10 @@ var RemoteSession = class {
     this.peer.on(RunnerNotification.InfoChanged, (params) => {
       this.info = params.info;
     });
+    this.peer.on(RunnerNotification.ReplayStart, (params) => {
+      const { fromSeq } = params;
+      this.mirror.rebase(fromSeq);
+    });
     this.peer.on(RunnerNotification.SessionReset, () => {
       this.mirror.clear();
     });
@@ -135404,11 +135483,12 @@ var RemoteSession = class {
     return new Set(this.info?.readyProviders ?? []);
   }
   /** Handshake. Resolves once history has been replayed into the mirror. */
-  async attach(role, sinceSeq) {
+  async attach(role, sinceSeq, replay) {
     const result = await this.peer.request(RunnerMethod.Attach, {
       protocolVersion: RUNNER_PROTOCOL_VERSION,
       role,
-      sinceSeq
+      sinceSeq,
+      ...replay ? { replay } : {}
     });
     this.info = result.info;
     this.serverProtocolVersion = typeof result.protocolVersion === "number" ? result.protocolVersion : RUNNER_PROTOCOL_VERSION;
@@ -135463,7 +135543,11 @@ var RemoteSession = class {
       ...opts.model ? { model: opts.model } : {},
       ...opts.systemPrompt ? { systemPrompt: opts.systemPrompt } : {},
       ...opts.maxIterations ? { maxIterations: opts.maxIterations } : {},
-      ...opts.attachments && opts.attachments.length > 0 ? { attachments: opts.attachments } : {}
+      ...opts.attachments && opts.attachments.length > 0 ? { attachments: opts.attachments } : {},
+      // Pre-minted client turn id (v6) so per-turn event filters match. The
+      // reply's turnId stays authoritative: an older server ignores ours and
+      // mints its own.
+      ...opts.turnId ? { turnId: opts.turnId } : {}
     });
     const turnId = result.turnId;
     const stream = new TurnStream();
@@ -135758,7 +135842,7 @@ async function connectRemoteSession(opts = {}) {
   const transport = opts.transport ?? await connectWithRetry(socketPath, opts.connectRetries ?? 5);
   const session = new RemoteSession(transport);
   try {
-    await session.attach(opts.role ?? "client", opts.sinceSeq ?? 0);
+    await session.attach(opts.role ?? "client", opts.sinceSeq ?? 0, opts.replay);
     return session;
   } catch (err) {
     await maybeRecoverFromMismatch(err, socketPath, opts);
@@ -135914,6 +135998,17 @@ var REMOTE_ALLOWED_COMMANDS = /* @__PURE__ */ new Set([
   "session.setMode",
   "session.newSession",
   "session.runCommand",
+  // Multi-session conversations: list/create/switch/rename are conversation-
+  // scoped — the same trust class as `session.newSession` (already allowed),
+  // and what a paired phone needs to mirror the desktop's session list.
+  // `sessions.remove` is deliberately NOT here: it deletes on-disk state
+  // (the runner's session JSONL + the chat NDJSON transcript), a destructive
+  // host mutation in the same class as `desks.remove`, which is also
+  // host-only.
+  "sessions.list",
+  "sessions.create",
+  "sessions.setActive",
+  "sessions.rename",
   // Voice input (capability-probed; transcribe fails coded without a transcriber).
   "session.hasTranscriber",
   "session.transcribe",
@@ -136049,6 +136144,20 @@ var ipcInputSchemas = {
     id: z.string().min(1).max(256),
     name: z.string().min(1).max(200)
   }),
+  // Sessions: create/rename persist the name into the desks JSON (bound it
+  // like desks.create/rename); setActive spawns a runner and remove deletes
+  // the session's on-disk logs, so their ids are bounded too. These commands
+  // are also served to remote (WS) clients, so the bounds are load-bearing.
+  "sessions.create": z.object({
+    deskId: z.string().min(1).max(256).optional(),
+    name: z.string().min(1).max(200).optional()
+  }).optional(),
+  "sessions.setActive": z.object({ id: z.string().min(1).max(256) }),
+  "sessions.remove": z.object({ id: z.string().min(1).max(256) }),
+  "sessions.rename": z.object({
+    id: z.string().min(1).max(256),
+    name: z.string().min(1).max(200)
+  }),
   // Whitelist the fields a renderer may write — `version` is managed by
   // the main process; unknown keys are rejected (.strict()).
   "prefs.update": z.object({
@@ -136056,7 +136165,8 @@ var ipcInputSchemas = {
     clerkUserId: z.string().max(256).nullable().optional(),
     clerkDisplayName: z.string().max(256).nullable().optional(),
     signedInAt: z.number().nullable().optional(),
-    mobileGatewayEnabled: z.boolean().optional()
+    mobileGatewayEnabled: z.boolean().optional(),
+    theme: z.enum(["light", "dark", "system"]).optional()
   }).strict(),
   // Mobile-gateway control. Both no-arg variants pin the payload to "nothing"
   // so a hostile caller can't smuggle args; setEnabled is a strict boolean.
@@ -136444,14 +136554,41 @@ function isWildcardHost(host) {
   const h3 = host.trim().toLowerCase();
   return h3 === "0.0.0.0" || h3 === "::" || h3 === "[::]";
 }
+var VIRTUAL_IFACE = /^(?:utun|tun|tap|ppp|ipsec|wg|zt|ts|tailscale|vmnet|vnic|bridge|docker|veth|awdl|llw|ap|anpi)\d*$/i;
+function isLinkLocalV4(ip) {
+  return ip.startsWith("169.254.");
+}
+function isRfc1918(ip) {
+  if (ip.startsWith("10.") || ip.startsWith("192.168."))
+    return true;
+  const m3 = /^172\.(\d{1,3})\./.exec(ip);
+  return m3 !== null && Number(m3[1]) >= 16 && Number(m3[1]) <= 31;
+}
+function isCgnat(ip) {
+  const m3 = /^100\.(\d{1,3})\./.exec(ip);
+  return m3 !== null && Number(m3[1]) >= 64 && Number(m3[1]) <= 127;
+}
 function lanHost(fallback) {
-  for (const list of Object.values(os5__default.networkInterfaces())) {
+  let best = null;
+  for (const [name, list] of Object.entries(os5__default.networkInterfaces())) {
     for (const ni of list ?? []) {
-      if (ni.family === "IPv4" && !ni.internal)
-        return ni.address;
+      if (ni.family !== "IPv4" || ni.internal)
+        continue;
+      const virtual = VIRTUAL_IFACE.test(name);
+      let rank;
+      if (isLinkLocalV4(ni.address))
+        rank = 5;
+      else if (isRfc1918(ni.address))
+        rank = virtual ? 3 : 1;
+      else if (isCgnat(ni.address))
+        rank = 4;
+      else
+        rank = virtual ? 4 : 2;
+      if (!best || rank < best.rank)
+        best = { address: ni.address, rank };
     }
   }
-  return fallback;
+  return best?.address ?? fallback;
 }
 function advertisedHost(bindHost) {
   if (isWildcardHost(bindHost))
@@ -136467,6 +136604,20 @@ function buildConnectUrl(opts) {
   }
   return `ws://${opts.localHost}:${opts.port}/?t=${t2}`;
 }
+function connectUrlOrigin(url2) {
+  const u2 = new URL(url2);
+  const secure = u2.protocol === "wss:" || u2.protocol === "https:";
+  return `${secure ? "https" : "http"}://${u2.host}`;
+}
+function advertisedOrigins(bindHost, port) {
+  return [
+    .../* @__PURE__ */ new Set([
+      connectUrlOrigin(`ws://${advertisedHost(bindHost)}:${port}`),
+      `http://127.0.0.1:${port}`,
+      `http://localhost:${port}`
+    ])
+  ];
+}
 
 // ../plugin-channel-mobile/dist/tunnel.js
 function normalizeTunnelChoice(raw) {
@@ -136551,10 +136702,12 @@ var MobileChannel = class {
     this.host = host;
     host.register();
     host.wire();
+    const localOrigins = advertisedOrigins(this.bindHost, this.port);
     const server = await startWsBridge(bus, {
       port: this.port,
       host: this.bindHost,
       authToken: this.token,
+      allowedOrigins: localOrigins,
       // Back-compat ONLY: the QR this channel prints embeds the token as `?t=`
       // (pairing payload); current apps strip it and authenticate via the
       // Sec-WebSocket-Protocol bearer entry, but older installed builds still
@@ -136569,6 +136722,7 @@ var MobileChannel = class {
       try {
         this.tunnel = await provider.open({ port: this.port, host: this.bindHost });
         tunnelUrl = this.tunnel.url;
+        server.setAllowedOrigins([...localOrigins, connectUrlOrigin(tunnelUrl)]);
         this.logger?.info?.("mobile tunnel open", { provider: provider.name, url: tunnelUrl });
       } catch (err) {
         this.logger?.warn?.("mobile tunnel failed; using the local URL", {
@@ -137300,7 +137454,7 @@ var agentSpecSchema = z$1.object({
   agentType: z$1.string().optional().describe('Named agent kind to spawn (e.g. "researcher", "code-reviewer"). Looked up in the agent registry contributed by installed plugins. Omit, or pass "default", for a generic tool-use agent. Unknown types fall back to default \u2014 the request never fails over a missing kind. List of currently-registered kinds is visible via the /agents command.'),
   label: z$1.string().max(60).optional().describe('Short label shown in progress events (e.g. "research-deps", "lint-fix-A").'),
   systemPrompt: z$1.string().optional().describe("Override the kind's system prompt. Use to set persona, constraints, or hand off upstream artifacts the child needs as context."),
-  model: z$1.string().optional().describe("Model id override; defaults to the kind's model, then the parent's."),
+  model: z$1.string().optional().describe("Model id override; defaults to the kind's model, then the parent's. Omit unless the user explicitly requested a specific model \u2014 do NOT invent model ids. Unknown ids fall back to the parent's model with a warning."),
   mode: z$1.string().optional().describe(`Loop strategy override. Valid values: "default", "goal", "research". OMIT for the kind's default \u2014 do NOT invent names.`),
   allowedTools: z$1.array(z$1.string()).optional().describe("Restrict the child to these tool names. Overrides the kind's allowlist if set.")
 });
@@ -143956,7 +144110,7 @@ function createTool(deps) {
       if (!provider) {
         throw new MoxxyError({ code: "PROVIDER_NOT_CONFIGURED", message: "workflow_create: no active provider to draft with." });
       }
-      const model = deps.draftModel ?? provider.models[0]?.id ?? "claude-sonnet-4-6";
+      const model = deps.draftModel ?? provider.models[0]?.id ?? "default";
       const drafted = await draftWorkflow(provider, model, intent, ctx.signal, {
         ...deps.listSkills ? { availableSkills: deps.listSkills() } : {},
         ...deps.listTools ? { availableTools: deps.listTools() } : {},
@@ -144847,7 +145001,7 @@ async function fireAfterWorkflowDependents(args) {
   }
 }
 function activeModel(session) {
-  return safeActiveProvider(session)?.models[0]?.id ?? "claude-sonnet-4-6";
+  return session.lastResolvedModel ?? safeActiveProvider(session)?.models[0]?.id ?? "default";
 }
 function safeActiveProvider(session) {
   try {
@@ -145356,6 +145510,15 @@ function scopedSessionView(session, allowedTools, triggerName) {
     get pluginHost() {
       return session.pluginHost;
     },
+    // Read-through AND write-through: runTurn records the resolved model on
+    // the session it was handed, and that must land on the real session, not
+    // this per-fire view.
+    get lastResolvedModel() {
+      return session.lastResolvedModel;
+    },
+    set lastResolvedModel(model) {
+      session.lastResolvedModel = model;
+    },
     startTurn: () => session.startTurn(),
     appContext: () => session.appContext()
   };