@myagentroam/node 0.9.70 → 0.9.72

package/dist/capabilities.js

@@ -11,7 +11,7 @@ const runtimeCredentialCapability = () => ({
     httpVersions: ['1.1', '2']
 });
 const workspaceDirectTransferCapability = () => ({
-    apiVersion: 2,
+    apiVersion: 3,
     transport: true,
     upload: true,
     download: true,

package/dist/connector.js

@@ -1401,7 +1401,6 @@ export class NodeConnector {
                     const upload = await this.workspaceUploadService.createDirect(workspace, {
                         path: descriptor.resource.path,
                         size: descriptor.size,
-                        sha256: descriptor.sha256,
                         overwrite: descriptor.overwrite === true,
                         ...(descriptor.composerAttachment === undefined
                             ? {}
@@ -1410,7 +1409,7 @@ export class NodeConnector {
                     return {
                         offset: upload.receivedBytes,
                         write: (bytes) => this.workspaceUploadService.writeDirect(upload.uploadId, bytes),
-                        complete: (size, sha256) => this.workspaceUploadService.completeDirect(upload.uploadId, size, sha256),
+                        complete: (size) => this.workspaceUploadService.completeDirect(upload.uploadId, size),
                         cancel: () => this.workspaceUploadService.cancel(upload.uploadId)
                     };
                 },

package/dist/service/direct-transfer-service.js

@@ -275,7 +275,6 @@ export class DirectTransferService {
     async channelMessage(transfer, data) {
         const descriptor = transfer.command.transfer;
         const expectedSize = transferredSize(descriptor);
-        const expectedSha256 = transferredSha256(descriptor);
         if (descriptor.direction === 'DOWNLOAD') {
             if (typeof data !== 'string')
                 throw new Error('DIRECT_FRAME_INVALID');
@@ -285,8 +284,7 @@ export class DirectTransferService {
             this.emit(transfer.command.directSessionId, {
                 type: 'direct.complete',
                 directSessionId: transfer.command.directSessionId,
-                size: expectedSize,
-                sha256: expectedSha256
+                size: expectedSize
             });
             await this.removeTransfer(transfer);
             return;
@@ -295,15 +293,14 @@ export class DirectTransferService {
             const control = directDataControlFrameSchema.parse(JSON.parse(data));
             if (control.type !== 'COMPLETE' || transfer.upload === undefined)
                 throw new Error('DIRECT_FRAME_INVALID');
-            if (control.size !== descriptor.size || control.sha256 !== descriptor.sha256)
+            if (control.size !== descriptor.size)
                 throw new Error('DIRECT_INTEGRITY_FAILED');
-            await transfer.upload.complete(control.size, control.sha256);
+            await transfer.upload.complete(control.size);
             transfer.uploadCommitted = true;
             this.emit(transfer.command.directSessionId, {
                 type: 'direct.complete',
                 directSessionId: transfer.command.directSessionId,
-                size: control.size,
-                sha256: control.sha256
+                size: control.size
             });
             await this.removeTransfer(transfer);
             return;
@@ -332,7 +329,6 @@ export class DirectTransferService {
             throw new Error('DIRECT_DOWNLOAD_UNAVAILABLE');
         const source = await this.options.openDownload(descriptor);
         const expectedSize = transferredSize(descriptor);
-        const expectedSha256 = transferredSha256(descriptor);
         transfer.channel?.send(JSON.stringify({ type: 'ACK', offset: source.offset }));
         this.emit(transfer.command.directSessionId, {
             type: 'direct.opened',
@@ -350,7 +346,7 @@ export class DirectTransferService {
                 const end = Math.min(chunk.byteLength, offset + 256 * 1024);
                 channel.send(chunk.buffer.slice(chunk.byteOffset + offset, chunk.byteOffset + end));
             }
-        transfer.channel?.send(JSON.stringify({ type: 'COMPLETE', size: expectedSize, sha256: expectedSha256 }));
+        transfer.channel?.send(JSON.stringify({ type: 'COMPLETE', size: expectedSize }));
     }
     async waitForSendCapacity(transfer, channel) {
         if (channel.readyState !== 'open')
@@ -433,11 +429,6 @@ function transferredSize(descriptor) {
         ? descriptor.range.length
         : descriptor.size;
 }
-function transferredSha256(descriptor) {
-    return descriptor.direction === 'DOWNLOAD' && descriptor.range !== undefined
-        ? descriptor.range.sha256
-        : descriptor.sha256;
-}
 function openFrameSessionId(data) {
     if (typeof data !== 'string')
         return undefined;

package/dist/service/workspace-file-service.js

@@ -1,5 +1,4 @@
 import { tmpdir } from 'node:os';
-import { createHash } from 'node:crypto';
 import { isAbsolute, win32 } from 'node:path';
 import { listWorkspaceFiles, mutateWorkspaceFile, normalizeFilePreviewPath, readAllowedFileContentRange, readWorkspaceFileContentRange, readAllowedTextFile, readWorkspaceTextFile, writeWorkspaceTextFile, WorkspaceFileIndex } from '../workspace.js';
 const INDEX_CACHE_LIMIT = 8;
@@ -62,7 +61,9 @@ export class WorkspaceFileService {
     readDirect(workspace, input, workspacePath = workspace.path) {
         const service = this;
         return (async function* () {
-            const hash = createHash('sha256');
+            const initial = (await service.readContent(workspace, { path: input.path, offset: input.range?.offset ?? 0, limit: 1 }, workspacePath));
+            if (initial.size !== input.size || initial.sourceRevision !== input.revision)
+                throw new Error('DIRECT_FILE_REVISION_CHANGED');
             let offset = input.range?.offset ?? 0;
             const endOffset = input.range === undefined ? input.size : input.range.offset + input.range.length;
             while (offset < endOffset) {
@@ -74,7 +75,6 @@ export class WorkspaceFileService {
                 if (range.size !== input.size || range.sourceRevision !== input.revision)
                     throw new Error('DIRECT_FILE_REVISION_CHANGED');
                 const bytes = Buffer.from(range.contentBase64, 'base64');
-                hash.update(bytes);
                 offset += bytes.length;
                 if (bytes.length > 0)
                     yield bytes;
@@ -83,8 +83,7 @@ export class WorkspaceFileService {
                 if (range.nextOffset !== offset)
                     throw new Error('DIRECT_FILE_REVISION_CHANGED');
             }
-            const expectedHash = input.range?.sha256 ?? input.sha256;
-            if (offset !== endOffset || hash.digest('hex') !== expectedHash)
+            if (offset !== endOffset)
                 throw new Error('DIRECT_FILE_REVISION_CHANGED');
         })();
     }
@@ -92,15 +91,13 @@ export class WorkspaceFileService {
         if (input.offset !== undefined ||
             input.length !== undefined ||
             input.size !== undefined ||
-            input.sha256 !== undefined) {
+            input.revision !== undefined) {
             if (!Number.isSafeInteger(input.offset) ||
                 input.offset < 0 ||
                 !Number.isSafeInteger(input.length) ||
                 input.length < 1 ||
                 !Number.isSafeInteger(input.size) ||
                 input.size < 0 ||
-                typeof input.sha256 !== 'string' ||
-                !/^[a-f0-9]{64}$/u.test(input.sha256) ||
                 typeof input.revision !== 'string' ||
                 !/^[a-f0-9]{64}$/u.test(input.revision))
                 throw new Error('FILE_RANGE_INVALID');
@@ -117,37 +114,12 @@ export class WorkspaceFileService {
                 throw new Error('DIRECT_FILE_REVISION_CHANGED');
             return {
                 size: expectedSize,
-                sha256: input.sha256,
                 revision: input.revision,
-                range: {
-                    offset,
-                    length,
-                    sha256: createHash('sha256').update(bytes).digest('hex')
-                }
+                range: { offset, length }
             };
         }
-        const hash = createHash('sha256');
-        let offset = 0;
-        let size;
-        let revision;
-        while (true) {
-            const range = (await this.readContent(workspace, { ...input, offset, limit: 512 * 1024 }, workspacePath));
-            size ??= range.size;
-            revision ??= range.sourceRevision;
-            if (range.size !== size || range.sourceRevision !== revision)
-                throw new Error('DIRECT_FILE_REVISION_CHANGED');
-            const bytes = Buffer.from(range.contentBase64, 'base64');
-            hash.update(bytes);
-            offset += bytes.length;
-            if (range.nextOffset === null)
-                break;
-            if (range.nextOffset !== offset)
-                throw new Error('DIRECT_FILE_REVISION_CHANGED');
-        }
-        if (size === undefined || revision === undefined || offset !== size)
-            throw new Error('DIRECT_FILE_REVISION_CHANGED');
-        const sha256 = hash.digest('hex');
-        return { size, sha256, revision };
+        const metadata = (await this.readContent(workspace, { ...input, offset: 0, limit: 1 }, workspacePath));
+        return { size: metadata.size, revision: metadata.sourceRevision };
     }
     async write(workspace, input) {
         if (typeof input.path !== 'string' ||

package/dist/service/workspace-upload-service.js

@@ -1,5 +1,4 @@
-import { createHash, randomUUID } from 'node:crypto';
-import { createReadStream } from 'node:fs';
+import { randomUUID } from 'node:crypto';
 import { lstat, mkdir, open, readFile, rename, rm } from 'node:fs/promises';
 import { dirname, join, posix, resolve } from 'node:path';
 import { parseComposerAttachmentUpload, validComposerAttachmentName } from '../util/node-operation-parsers.js';
@@ -10,7 +9,6 @@ const MAX_ATTACHMENT_BYTES = 5 * 1024 * 1024;
 export class WorkspaceUploadService {
     state;
     onCompleted;
-    directHashes = new Map();
     constructor(state, onCompleted) {
         this.state = state;
         this.onCompleted = onCompleted;
@@ -114,7 +112,6 @@ export class WorkspaceUploadService {
                     mime: input.composerAttachment.mime
                 })
         });
-        this.directHashes.set(status.uploadId, input.sha256);
         return status;
     }
     async writeDirect(uploadId, bytes) {
@@ -125,19 +122,11 @@ export class WorkspaceUploadService {
         });
         return status.receivedBytes;
     }
-    async completeDirect(uploadId, size, sha256) {
+    async completeDirect(uploadId, size) {
         const upload = this.require(uploadId);
-        const expected = this.directHashes.get(uploadId);
-        if (size !== upload.size || sha256 !== expected)
-            throw new Error('UPLOAD_HASH_INVALID');
-        await upload.handle.sync();
-        const actual = await fileSha256(upload.temporaryPath);
-        if (actual !== expected) {
-            await this.cancel(uploadId);
-            throw new Error('UPLOAD_HASH_INVALID');
-        }
+        if (size !== upload.size)
+            throw new Error('UPLOAD_SIZE_INVALID');
         await this.complete(uploadId);
-        this.directHashes.delete(uploadId);
     }
     status(uploadId) {
         const upload = this.require(uploadId);
@@ -203,10 +192,8 @@ export class WorkspaceUploadService {
         if (typeof uploadId !== 'string')
             throw new Error('UPLOAD_NOT_FOUND');
         const active = this.state.uploads.get(uploadId);
-        if (active !== undefined) {
-            this.directHashes.delete(active.id);
+        if (active !== undefined)
             return this.remove(active);
-        }
         const attachment = this.state.composerAttachments.get(uploadId);
         if (attachment === undefined)
             throw new Error('UPLOAD_NOT_FOUND');
@@ -246,7 +233,6 @@ export class WorkspaceUploadService {
         for (const attachment of this.state.composerAttachments.values())
             await this.removeCompleted(attachment);
         this.state.composerAttachments.clear();
-        this.directHashes.clear();
     }
     require(id) {
         if (typeof id !== 'string')
@@ -258,7 +244,6 @@ export class WorkspaceUploadService {
     }
     async remove(upload) {
         this.state.uploads.delete(upload.id);
-        this.directHashes.delete(upload.id);
         clearTimeout(upload.timer);
         await upload.handle.close().catch(() => undefined);
         await rm(upload.temporaryPath, { force: true }).catch(() => undefined);
@@ -296,12 +281,6 @@ export class WorkspaceUploadService {
         };
     }
 }
-async function fileSha256(path) {
-    const hash = createHash('sha256');
-    for await (const chunk of createReadStream(path))
-        hash.update(chunk);
-    return hash.digest('hex');
-}
 async function safeDirectory(path) {
     const value = await lstat(path);
     if (!value.isDirectory() || value.isSymbolicLink())

package/dist/service/workspace-workbench-service.js

@@ -251,7 +251,6 @@ export class WorkspaceWorkbenchService {
                 chunks: this.options.files.readDirect(workspace, {
                     path: descriptor.resource.path,
                     size: descriptor.size,
-                    sha256: descriptor.sha256,
                     revision: descriptor.revision,
                     ...(descriptor.range === undefined ? {} : { range: descriptor.range })
                 }, await this.fileRepository(workspace, input))
@@ -272,7 +271,6 @@ export class WorkspaceWorkbenchService {
         return {
             offset: descriptor.range?.offset ?? 0,
             chunks: (async function* () {
-                const hash = createHash('sha256');
                 let offset = descriptor.range?.offset ?? 0;
                 const rangeStart = descriptor.range?.offset ?? 0;
                 const rangeEnd = rangeStart + (descriptor.range?.length ?? descriptor.size);
@@ -281,7 +279,6 @@ export class WorkspaceWorkbenchService {
                     if (range.size !== descriptor.size)
                         throw new Error('DIRECT_FILE_REVISION_CHANGED');
                     const bytes = Buffer.from(range.contentBase64, 'base64');
-                    hash.update(bytes);
                     offset += bytes.length;
                     if (bytes.length > 0)
                         yield bytes;
@@ -290,8 +287,7 @@ export class WorkspaceWorkbenchService {
                     if (range.nextOffset !== offset)
                         throw new Error('DIRECT_FILE_REVISION_CHANGED');
                 }
-                const expectedHash = descriptor.range?.sha256 ?? descriptor.sha256;
-                if (offset !== rangeEnd || hash.digest('hex') !== expectedHash)
+                if (offset !== rangeEnd)
                     throw new Error('DIRECT_FILE_REVISION_CHANGED');
             })()
         };
@@ -304,7 +300,6 @@ export class WorkspaceWorkbenchService {
         if (input.offset !== undefined ||
             input.length !== undefined ||
             input.size !== undefined ||
-            input.sha256 !== undefined ||
             input.revision !== undefined) {
             if (!Number.isSafeInteger(input.offset) ||
                 input.offset < 0 ||
@@ -313,8 +308,6 @@ export class WorkspaceWorkbenchService {
                 input.length > 512 * 1024 ||
                 !Number.isSafeInteger(input.size) ||
                 input.size < 0 ||
-                typeof input.sha256 !== 'string' ||
-                !/^[a-f0-9]{64}$/u.test(input.sha256) ||
                 input.revision !== revision)
                 throw new Error('FILE_RANGE_INVALID');
             const offset = input.offset;
@@ -328,25 +321,12 @@ export class WorkspaceWorkbenchService {
                 throw new Error('DIRECT_FILE_REVISION_CHANGED');
             return {
                 size,
-                sha256: input.sha256,
                 revision,
-                range: {
-                    offset,
-                    length,
-                    sha256: createHash('sha256').update(bytes).digest('hex')
-                }
+                range: { offset, length }
             };
         }
         const content = await openGitHistoryFileContent(repository, input.commit, input.path, this.refs(input));
-        const hash = createHash('sha256');
-        let offset = 0;
-        for await (const bytes of content.chunks) {
-            hash.update(bytes);
-            offset += bytes.length;
-        }
-        if (offset !== content.size)
-            throw new Error('DIRECT_FILE_REVISION_CHANGED');
-        return { size: content.size, sha256: hash.digest('hex'), revision };
+        return { size: content.size, revision };
     }
     async diff(input) {
         if (typeof input.workspaceId !== 'string' ||

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myagentroam/node",
-  "version": "0.9.70",
+  "version": "0.9.72",
   "description": "MyAgentRoam Node runtime CLI.",
   "license": "Apache-2.0",
   "type": "module",
@@ -28,8 +28,8 @@
     "node-pty": "1.1.0",
     "ws": "^8.21.3",
     "zod": "4.4.3",
-    "@myagentroam/agent": "0.9.70",
-    "@myagentroam/protocol": "0.9.70"
+    "@myagentroam/agent": "0.9.72",
+    "@myagentroam/protocol": "0.9.72"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"