@myagentroam/node 0.11.37 → 0.11.38

package/dist/capabilities.js

@@ -8,7 +8,6 @@ const nodeAppVersion = typeof nodePackage.version === 'string' ? nodePackage.ver
 const runtimeCredentialCapability = () => ({
     apiVersion: 1,
     websocket: true,
-    fastMode: true,
     serviceTiers: ['auto', 'default', 'flex', 'priority', 'fast', 'ultrafast'],
     namespacedTools: true,
     responsesOptionalParameters: true,

package/dist/connector.js

@@ -1214,9 +1214,9 @@ export class NodeConnector {
             },
             connected: (payload) => {
                 this.usageOutbox?.connected(payload);
+                this.connectionLifecycle.connected();
                 for (const change of this.pendingSessionGroups.values())
                     this.send('session.group.changed', change);
-                this.connectionLifecycle.connected();
                 this.mailNotificationControl.setFeatures(payload);
             },
             close: (code, reason) => this.controlChannel.close(code, reason),

package/dist/control-outbound-scheduler.js

@@ -42,6 +42,9 @@ export class ControlOutboundScheduler {
         this.scheduleExpiry();
         this.schedule();
     }
+    resume() {
+        this.schedule();
+    }
     reset() {
         this.high.length = 0;
         this.normal.length = 0;

package/dist/hosting/hosted-conversation-node-service.js

@@ -936,7 +936,7 @@ function modelSummary(model, index) {
         defaultReasoningEffort: resolveMarAgentDefaultReasoningEffort(model.defaultReasoningEffort, model.reasoningEfforts),
         titleGeneration: model.titleGeneration,
         codeMode: model.codeMode,
-        ...(model.fastMode === true ? { fastMode: true } : {}),
+        ...(model.serviceTier === undefined ? {} : { serviceTier: model.serviceTier }),
         hostedWebSearch: model.hostedWebSearch,
         ...(model.responsesTransport === undefined
             ? {}

package/dist/runner/mar-agent/runtime-model-factory.js

@@ -68,9 +68,6 @@ export class MarAgentRuntimeModelFactory {
                     ...(configuration.serviceTier === undefined
                         ? {}
                         : { serviceTier: configuration.serviceTier }),
-                    ...(configuration.serviceTier === undefined && configuration.fastMode === true
-                        ? { fastMode: true }
-                        : {}),
                     hostedWebSearch: configuration.hostedWebSearch,
                     useResourceUrl: configuration.useResourceUrl,
                     ...(imageGeneration === undefined ? {} : { imageGeneration }),

package/dist/service/node-connection-lifecycle-service.js

@@ -30,6 +30,7 @@ export class NodeConnectionLifecycleService {
         const config = this.options.config();
         if (config === undefined)
             return;
+        const connection = this.options.control.connection();
         const registered = {
             serverUrl: config.serverUrl,
             allowedRoots: config.allowedRoots,
@@ -45,12 +46,14 @@ export class NodeConnectionLifecycleService {
         this.options.setConfig(registered);
         await saveNodeConfig(registered, this.options.configPath);
         await this.options.onRegistered?.();
-        this.connected();
+        if (connection !== undefined)
+            this.connected(connection);
     }
-    connected() {
+    connected(connection) {
+        if (!this.options.control.ready(this.options.capabilities(), connection))
+            return;
         if (this.heartbeat !== undefined)
             clearInterval(this.heartbeat);
-        this.options.control.send('capabilities', this.options.capabilities());
         this.options.terminal.connect();
         this.options.control.send('heartbeat', {});
         this.options.onConnected?.();

package/dist/service/node-control-channel.js

@@ -2,10 +2,15 @@ import WebSocket from 'ws';
 import { createEnvelope } from '@myagentroam/protocol';
 import { ControlOutboundScheduler } from '../control-outbound-scheduler.js';
 import { nodeConnectEndpoint } from '../connection/endpoints.js';
+const MAX_PREAUTH_FRAMES = 1024;
+const MAX_PREAUTH_BYTES = 8 * 1024 * 1024;
 export class NodeControlChannel {
     options;
     socket;
-    outbound = new ControlOutboundScheduler(() => this.socket, () => this.socket?.close(1013, 'NODE_CONTROL_BACKPRESSURE_TIMEOUT'));
+    authenticated = false;
+    preauthFrames = 0;
+    preauthBytes = 0;
+    outbound = new ControlOutboundScheduler(() => (this.authenticated ? this.socket : undefined), () => this.socket?.close(1013, 'NODE_CONTROL_BACKPRESSURE_TIMEOUT'));
     reconnectTimer;
     attempts = 0;
     constructor(options) {
@@ -25,20 +30,26 @@ export class NodeControlChannel {
         socket.once('open', () => {
             this.attempts = 0;
             if (config.nodeId !== undefined && config.credential !== undefined)
-                this.send('authenticate', { nodeId: config.nodeId, credential: config.credential });
+                socket.send(JSON.stringify(createEnvelope('authenticate', { nodeId: config.nodeId, credential: config.credential })));
             else if (config.registrationToken !== undefined)
-                this.send('register', {
+                socket.send(JSON.stringify(createEnvelope('register', {
                     registrationToken: config.registrationToken,
                     capabilities: this.options.capabilities()
-                });
+                })));
             else
                 socket.close(4000, 'NODE_CREDENTIAL_MISSING');
         });
-        socket.on('message', (raw) => this.options.onMessage(raw.toString()));
+        socket.on('message', (raw) => {
+            if (this.socket === socket)
+                this.options.onMessage(raw.toString());
+        });
         socket.once('close', (code, reason) => {
             if (this.socket !== socket)
                 return;
             this.socket = undefined;
+            this.authenticated = false;
+            this.preauthFrames = 0;
+            this.preauthBytes = 0;
             this.outbound.reset();
             const reasonText = reason.toString();
             this.options.onClose(code, reasonText);
@@ -48,7 +59,22 @@ export class NodeControlChannel {
         socket.once('error', () => undefined);
     }
     connected() {
-        return this.socket?.readyState === WebSocket.OPEN;
+        return this.authenticated && this.socket?.readyState === WebSocket.OPEN;
+    }
+    connection() {
+        return this.socket;
+    }
+    ready(capabilities, connection = this.socket) {
+        if (connection === undefined ||
+            connection !== this.socket ||
+            this.socket?.readyState !== WebSocket.OPEN)
+            return false;
+        this.socket.send(JSON.stringify(createEnvelope('capabilities', capabilities)));
+        this.authenticated = true;
+        this.preauthFrames = 0;
+        this.preauthBytes = 0;
+        this.outbound.resume();
+        return true;
     }
     close(code, reason) {
         this.socket?.close(code, reason);
@@ -60,13 +86,28 @@ export class NodeControlChannel {
         this.outbound.reset();
         this.socket?.close();
         this.socket = undefined;
+        this.authenticated = false;
+        this.preauthFrames = 0;
+        this.preauthBytes = 0;
     }
     send(type, payload, replyTo) {
         this.sendEnvelope(createEnvelope(type, payload, { ...(replyTo === undefined ? {} : { replyTo }) }));
     }
     sendEnvelope(envelope) {
-        if (!this.connected())
+        if (this.socket?.readyState !== WebSocket.OPEN)
             return;
+        if (!this.authenticated) {
+            // ready() sends the latest capability snapshot; an older queued snapshot
+            // must not overwrite it after authentication.
+            if (envelope.type === 'capabilities')
+                return;
+            this.preauthFrames++;
+            this.preauthBytes += Buffer.byteLength(JSON.stringify(envelope));
+            if (this.preauthFrames > MAX_PREAUTH_FRAMES || this.preauthBytes > MAX_PREAUTH_BYTES) {
+                this.socket.close(1013, 'NODE_CONTROL_PREAUTH_BACKPRESSURE');
+                return;
+            }
+        }
         this.outbound.enqueue(envelope, envelope.type === 'workbench.event' ? 'normal' : 'high');
     }
     scheduleReconnect() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myagentroam/node",
-  "version": "0.11.37",
+  "version": "0.11.38",
   "description": "MyAgentRoam Node runtime CLI.",
   "license": "Apache-2.0 AND GPL-2.0-or-later",
   "type": "module",
@@ -38,10 +38,10 @@
     "sharp": "0.35.5",
     "ws": "^8.21.3",
     "zod": "4.4.3",
-    "@myagentroam/agent": "0.11.37",
-    "@myagentroam/protocol": "0.11.37",
-    "@myagentroam/code-navigation": "0.11.0",
-    "@myagentroam/marctl": "0.11.3"
+    "@myagentroam/agent": "0.11.38",
+    "@myagentroam/code-navigation": "0.11.1",
+    "@myagentroam/marctl": "0.11.3",
+    "@myagentroam/protocol": "0.11.38"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"