@rexvane/piweb 0.3.16 → 0.3.17

package/src/lib/growth-rounds.ts

@@ -1,84 +0,0 @@
-import type { GrowthStep } from "./types";
-
-export interface GrowthRound {
-	/** 真实用户轮次；不会因没有文件改动而跳号。 */
-	id: number;
-	startedAt: number;
-	first: GrowthStep | null;
-	/** 此轮结束时可用的最后一张快照；无改动轮沿用前一张。 */
-	last: GrowthStep | null;
-	steps: GrowthStep[];
-	/** 相邻两轮终点的 tree；第一轮从 prompt 前的基线开始。 */
-	fromTree: string | null;
-	toTree: string | null;
-	/** 旧会话可能在启用生长账本前已发生，不能假装它是零改动。 */
-	recorded: boolean;
-}
-
-/** 兼容没有消息时间戳的调用者：按账本里的 turn 标记分组。 */
-function ledgerRounds(steps: GrowthStep[]): GrowthRound[] {
-	const rounds: GrowthRound[] = [];
-	let current: GrowthStep[] = [];
-	const flush = () => {
-		if (!current.length) return;
-		const first = current[0];
-		const last = current[current.length - 1];
-		rounds.push({ id: rounds.length + 1, startedAt: first.ts, first, last, steps: current, fromTree: first.parent, toTree: last.tree, recorded: true });
-		current = [];
-	};
-	for (const [index, step] of steps.entries()) {
-		if (index === 0 && step.initial) continue;
-		if (step.kind === "baseline") {
-			flush();
-			continue;
-		}
-		if (step.kind === "external" || step.kind === "manual") flush();
-		current.push(step);
-		if (step.kind === "turn" || step.kind === "external" || step.kind === "manual") flush();
-	}
-	flush();
-	return rounds;
-}
-
-/** 轮数以持久会话的用户消息为准；快照只负责证明这一轮的前后树与差异。 */
-export function buildGrowthRounds(steps: GrowthStep[], turnStarts?: number[]): GrowthRound[] {
-	if (turnStarts === undefined) return ledgerRounds(steps);
-	if (!turnStarts.length) return [];
-	const starts: number[] = [];
-	for (const value of turnStarts) {
-		const previous = starts[starts.length - 1];
-		starts.push(Number.isFinite(value) ? Math.max(value, previous === undefined ? value : previous + 0.001) : (previous ?? 0) + 0.001);
-	}
-	const ordered = [...steps].sort((a, b) => a.ts - b.ts || a.seq - b.seq);
-	const rounds: GrowthRound[] = [];
-	let cursor = 0;
-	let before: GrowthStep | null = null;
-	let previousEnd: GrowthStep | null = null;
-	for (let index = 0; index < starts.length; index += 1) {
-		const start = starts[index];
-		const end = starts[index + 1] ?? Infinity;
-		while (cursor < ordered.length && ordered[cursor].ts < start) before = ordered[cursor++];
-		const atStart = before;
-		const current: GrowthStep[] = [];
-		while (cursor < ordered.length && ordered[cursor].ts < end) {
-			const step = ordered[cursor++];
-			if (step.kind !== "baseline") current.push(step);
-			before = step;
-		}
-		const first = current[0] ?? null;
-		const last: GrowthStep | null = current[current.length - 1] ?? (atStart && (!previousEnd || atStart.ts > previousEnd.ts) ? atStart : previousEnd);
-		const fromTree = previousEnd?.tree ?? atStart?.tree ?? first?.parent ?? null;
-		rounds.push({
-			id: index + 1,
-			startedAt: start,
-			first,
-			last,
-			steps: current,
-			fromTree,
-			toTree: last?.tree ?? null,
-			recorded: current.length > 0 && fromTree !== null && !first?.initial,
-		});
-		previousEnd = last;
-	}
-	return rounds;
-}

package/src/lib/managed-niubash.ts

@@ -1,231 +0,0 @@
-import crypto from "node:crypto";
-import fs from "node:fs";
-import * as nodeModule from "node:module";
-import path from "node:path";
-import { createBashToolDefinition, type ToolDefinition } from "@earendil-works/pi-coding-agent";
-import { APP_ROOT } from "./app-root";
-
-const DISTRIBUTION_VERSION = "1.1.4-piweb.0";
-const NIUBASH_VERSION = "1.1.4";
-const SOURCE_REPOSITORY = "https://github.com/unixwin/niubash";
-const SOURCE_TAG = "v1.1.4";
-
-const PACKAGE_BY_ARCH = {
-	x64: {
-		packageName: "@rexvane/piweb-niubash-win32-x64",
-		directory: "piweb-niubash-win32-x64",
-		asset: "niubash-v1.1.4-win-x64.zip",
-		assetSha256: "9f543634288a316f7ed8e5a76ff794eca402cb21e74b8f8a551daffafde162f5",
-		machine: 0x8664,
-	},
-	arm64: {
-		packageName: "@rexvane/piweb-niubash-win32-arm64",
-		directory: "piweb-niubash-win32-arm64",
-		asset: "niubash-v1.1.4-win-arm64.zip",
-		assetSha256: "77e98ba8d7f6be70c35388bcc28bdbc883c06bcaafffbe186a88788ad32ccf00",
-		machine: 0xaa64,
-	},
-} as const;
-
-const LICENSE_HASHES = {
-	"NIUBASH.txt": "1290aae99e71239ee3154e7847830e49e7a36c758fa6d659d73fa752dc9f81c8",
-	"RUBASH.txt": "e426a75a20633f3088da22aef61a5a44d06f1f884c600f6011d00702c3989079",
-	"WINUXCMD.txt": "8ffc4ed56f5e6ab8183a7ece2e3aa6ea4800b0a4e8170d11bd60856f2dd760f3",
-} as const;
-
-export type SupportedArch = keyof typeof PACKAGE_BY_ARCH;
-
-type PackageExport = {
-	schema?: unknown;
-	packageName?: unknown;
-	distributionVersion?: unknown;
-	niubashVersion?: unknown;
-	platform?: unknown;
-	arch?: unknown;
-	runtimeDir?: unknown;
-	shellPath?: unknown;
-	manifestPath?: unknown;
-};
-
-type LoadedPackage = { entryPath: string; value: unknown };
-
-/**
- * npm 安装（全局或本地）普通情况下由 Node 解析：npm 会把可选包提升到任意祖先
- * node_modules，所以解析必须从包自己的 package.json 出发。仓库检出（开发 / CI /
- * 发布前的 runtime 准备）没有安装这一步，此时按约定找 platform-packages/<dir>——
- * 这与平台包发布后的目录布局一一对应，不引入第二套解析规则。
- */
-export function resolveManagedNiubashPackageEntry(packageName: string, arch: SupportedArch, root = APP_ROOT): LoadedPackage {
-	// 必须通过命名空间调用。webpack 会改写从 node:module 具名导入的 createRequire：
-	// 参数不是字符串字面量时把调用擦掉，运行时变成对 undefined 调用 resolve。
-	const loadPackage = nodeModule.createRequire(path.join(root, "package.json"));
-	const resolveEntry = loadPackage.resolve.bind(loadPackage);
-	try {
-		const entryPath = resolveEntry(packageName);
-		return { entryPath, value: loadPackage(packageName) };
-	} catch (error) {
-		const checkoutEntry = path.join(root, "platform-packages", PACKAGE_BY_ARCH[arch].directory, "index.cjs");
-		if (fs.existsSync(checkoutEntry)) return { entryPath: checkoutEntry, value: loadPackage(checkoutEntry) };
-		throw error;
-	}
-}
-
-export type ManagedNiubashRuntime = {
-	packageName: string;
-	distributionVersion: string;
-	niubashVersion: string;
-	arch: SupportedArch;
-	runtimeDir: string;
-	shellPath: string;
-};
-
-export type ManagedNiubashResolveOptions = {
-	platform?: string;
-	arch?: string;
-	/** Base for package resolution; tests and the prepare script point it at a checkout root. */
-	root?: string;
-	loadPackage?: (packageName: string, arch: SupportedArch) => LoadedPackage;
-	warn?: (message: string) => void;
-};
-
-function sha256File(filename: string): string {
-	return crypto.createHash("sha256").update(fs.readFileSync(filename)).digest("hex");
-}
-
-function readJson(filename: string): any {
-	const stat = fs.statSync(filename);
-	if (!stat.isFile() || stat.size > 2 * 1024 * 1024) throw new Error(`${path.basename(filename)} is missing or too large`);
-	return JSON.parse(fs.readFileSync(filename, "utf8"));
-}
-
-function samePath(left: string, right: string): boolean {
-	const a = path.resolve(left);
-	const b = path.resolve(right);
-	return process.platform === "win32" ? a.toLowerCase() === b.toLowerCase() : a === b;
-}
-
-function peMachine(filename: string): number {
-	const data = fs.readFileSync(filename);
-	if (data.length < 64 || data[0] !== 0x4d || data[1] !== 0x5a) throw new Error(`${path.basename(filename)} is not a PE executable`);
-	const offset = data.readUInt32LE(0x3c);
-	if (offset + 6 > data.length || data.toString("ascii", offset, offset + 4) !== "PE\0\0") {
-		throw new Error(`${path.basename(filename)} has an invalid PE header`);
-	}
-	return data.readUInt16LE(offset + 4);
-}
-
-function validatePackage(loaded: LoadedPackage, arch: SupportedArch): ManagedNiubashRuntime {
-	const expected = PACKAGE_BY_ARCH[arch];
-	if (!loaded.value || typeof loaded.value !== "object") throw new Error(`${expected.packageName} has no runtime export`);
-	const exported = loaded.value as PackageExport;
-	const packageRoot = path.dirname(path.resolve(loaded.entryPath));
-	const runtimeDir = path.join(packageRoot, "runtime");
-	const shellPath = path.join(runtimeDir, "niu.exe");
-	const manifestPath = path.join(packageRoot, "runtime-manifest.json");
-
-	const checks: Array<[unknown, unknown, string]> = [
-		[exported.schema, 1, "export schema"],
-		[exported.packageName, expected.packageName, "export package name"],
-		[exported.distributionVersion, DISTRIBUTION_VERSION, "export distribution version"],
-		[exported.niubashVersion, NIUBASH_VERSION, "export niubash version"],
-		[exported.platform, "win32", "export platform"],
-		[exported.arch, arch, "export architecture"],
-	];
-	for (const [actual, wanted, label] of checks) {
-		if (actual !== wanted) throw new Error(`${label} mismatch`);
-	}
-	if (typeof exported.runtimeDir !== "string" || !samePath(exported.runtimeDir, runtimeDir)) throw new Error("runtime directory escapes its package");
-	if (typeof exported.shellPath !== "string" || !samePath(exported.shellPath, shellPath)) throw new Error("shell path escapes its package");
-	if (typeof exported.manifestPath !== "string" || !samePath(exported.manifestPath, manifestPath)) throw new Error("manifest path escapes its package");
-
-	const packageInfo = readJson(path.join(packageRoot, "package.json"));
-	if (packageInfo.name !== expected.packageName || packageInfo.version !== DISTRIBUTION_VERSION) throw new Error("package identity mismatch");
-	if (packageInfo.os?.length !== 1 || packageInfo.os[0] !== "win32") throw new Error("package OS restriction mismatch");
-	if (packageInfo.cpu?.length !== 1 || packageInfo.cpu[0] !== arch) throw new Error("package CPU restriction mismatch");
-
-	const manifest = readJson(manifestPath);
-	if (manifest.schema !== 1
-		|| manifest.source?.repository !== SOURCE_REPOSITORY
-		|| manifest.source?.tag !== SOURCE_TAG
-		|| manifest.source?.asset !== expected.asset
-		|| manifest.source?.sha256 !== expected.assetSha256) {
-		throw new Error("runtime provenance mismatch");
-	}
-	if (!manifest.files || typeof manifest.files !== "object" || Array.isArray(manifest.files)) throw new Error("runtime file manifest is missing");
-	const files = Object.entries(manifest.files) as Array<[string, unknown]>;
-	if (files.length < 300 || files.length > 1000) throw new Error(`runtime file count is invalid (${files.length})`);
-	for (const [relative, digest] of files) {
-		if (!relative || relative.includes("\\") || path.posix.isAbsolute(relative) || /^[A-Za-z]:/.test(relative) || relative.split("/").includes("..")) {
-			throw new Error(`unsafe runtime path: ${relative}`);
-		}
-		if (typeof digest !== "string" || !/^[a-f0-9]{64}$/.test(digest)) throw new Error(`invalid runtime hash: ${relative}`);
-		const filename = path.join(runtimeDir, ...relative.split("/"));
-		if (!fs.statSync(filename).isFile()) throw new Error(`runtime file is missing: ${relative}`);
-		if (sha256File(filename) !== digest) throw new Error(`runtime file failed integrity check: ${relative}`);
-	}
-	for (const required of ["niu.exe", "winuxcmd/usr/bin/winuxcmd.exe", "bundles/oh-my-niu/bundle.toml"]) {
-		if (!(required in manifest.files)) throw new Error(`runtime file is missing: ${required}`);
-	}
-	for (const executable of [shellPath, path.join(runtimeDir, "winuxcmd", "usr", "bin", "winuxcmd.exe")]) {
-		if (peMachine(executable) !== expected.machine) throw new Error(`${path.basename(executable)} architecture mismatch`);
-	}
-	for (const [name, digest] of Object.entries(LICENSE_HASHES)) {
-		if (sha256File(path.join(packageRoot, "licenses", name)) !== digest) throw new Error(`license integrity check failed: ${name}`);
-	}
-
-	return Object.freeze({
-		packageName: expected.packageName,
-		distributionVersion: DISTRIBUTION_VERSION,
-		niubashVersion: NIUBASH_VERSION,
-		arch,
-		runtimeDir,
-		shellPath,
-	});
-}
-
-function reasonOf(error: unknown, packageName: string): string {
-	if ((error as NodeJS.ErrnoException | undefined)?.code === "MODULE_NOT_FOUND") return `${packageName} is not installed`;
-	return error instanceof Error ? error.message : String(error);
-}
-
-/** Resolve and fully validate the platform package. Failures deliberately fall back to Pi's normal Bash. */
-export function resolveManagedNiubash(options: ManagedNiubashResolveOptions = {}): ManagedNiubashRuntime | null {
-	const platform = options.platform ?? process.platform;
-	const arch = options.arch ?? process.arch;
-	if (platform !== "win32") return null;
-	const expected = PACKAGE_BY_ARCH[arch as SupportedArch];
-	if (!expected) {
-		(options.warn ?? console.warn)(`[piweb] Managed niubash does not support Windows ${arch}; using Pi's configured/default Bash.`);
-		return null;
-	}
-	const supported = arch as SupportedArch;
-	try {
-		const loaded = options.loadPackage
-			? options.loadPackage(expected.packageName, supported)
-			: resolveManagedNiubashPackageEntry(expected.packageName, supported, options.root);
-		return validatePackage(loaded, supported);
-	} catch (error) {
-		(options.warn ?? console.warn)(
-			`[piweb] Managed niubash is unavailable (${reasonOf(error, expected.packageName)}); using Pi's configured/default Bash. `
-			+ "Reinstall @rexvane/piweb to restore the bundled Windows shell (`npm run prepare:niubash` in a checkout).",
-		);
-		return null;
-	}
-}
-
-const globalForManagedNiubash = globalThis as typeof globalThis & {
-	__piWebManagedNiubash?: { resolved: ManagedNiubashRuntime | null };
-};
-
-function defaultRuntime(): ManagedNiubashRuntime | null {
-	if (!globalForManagedNiubash.__piWebManagedNiubash) {
-		globalForManagedNiubash.__piWebManagedNiubash = { resolved: resolveManagedNiubash() };
-	}
-	return globalForManagedNiubash.__piWebManagedNiubash.resolved;
-}
-
-/** Same-name custom tool intentionally replaces Pi's built-in bash only inside PiWeb sessions. */
-export function createManagedNiubashTools(cwd: string, options?: ManagedNiubashResolveOptions): ToolDefinition[] {
-	const runtime = options ? resolveManagedNiubash(options) : defaultRuntime();
-	return runtime ? [createBashToolDefinition(cwd, { shellPath: runtime.shellPath }) as ToolDefinition] : [];
-}

package/src/lib/runtime-activity.ts

@@ -1,27 +0,0 @@
-type ActivityKind = "session" | "swarm" | "tests";
-interface Registry { active: Map<symbol, ActivityKind>; maintenance: boolean }
-
-// Route bundles must share a process-wide gate, not separate module-local registries.
-const globals = globalThis as typeof globalThis & { __piwebRuntimeActivity?: Registry };
-const registry = globals.__piwebRuntimeActivity ??= { active: new Map(), maintenance: false };
-
-export class RuntimeBusyError extends Error {}
-
-export function beginActivity(kind: ActivityKind): () => void {
-  if (registry.maintenance) throw new RuntimeBusyError("update maintenance is active; wait for the release to finish");
-  const token = Symbol(kind);
-  registry.active.set(token, kind);
-  return () => { registry.active.delete(token); };
-}
-
-export function beginMaintenance(): () => void {
-  if (registry.maintenance || registry.active.size) {
-    throw new RuntimeBusyError("work is active; wait for sessions, swarms and tests to finish before entering the maintenance window");
-  }
-  registry.maintenance = true;
-  let released = false;
-  return () => {
-    if (!released) registry.maintenance = false;
-    released = true;
-  };
-}

package/src/lib/session-import/lock.ts

@@ -1,25 +0,0 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import lockfile from "proper-lockfile";
-
-const pending = new Map<string, Promise<void>>();
-
-export async function withImportLock<T>(agentDir: string, operation: () => Promise<T>): Promise<T> {
-  await fs.mkdir(agentDir, { recursive: true });
-  const real = await fs.realpath(agentDir);
-  const key = process.platform === "win32" ? real.toLowerCase() : real;
-  const previous = pending.get(key) ?? Promise.resolve();
-  const result = previous.then(async () => {
-    // Serialize the global provenance lookup and write, including across server processes.
-    const release = await lockfile.lock(path.join(real, "piweb-session-import"), {
-      realpath: false, stale: 120_000,
-      retries: { retries: 60, minTimeout: 100, maxTimeout: 500 },
-    });
-    try { return await operation(); }
-    finally { await release(); }
-  });
-  const settled = result.then(() => undefined, () => undefined);
-  pending.set(key, settled);
-  void settled.then(() => { if (pending.get(key) === settled) pending.delete(key); });
-  return result;
-}