@robota-sdk/agent-session 3.2.1 → 3.2.3

package/dist/node.d.cts

@@ -8,7 +8,7 @@ interface IEncodedSession {
   readonly stored: Uint8Array;
   readonly text: string;
 }
-/** What a record's stored bytes are to a migration that seals what is still plain (#3679). */
+/** What a record's stored bytes are to a migration that seals what is still plain. */
 type TStoredSessionMigrationState =
 /** Not sealed framing: whatever it holds — a valid, corrupt, unsupported or bare record. */
 'plain' |
@@ -188,7 +188,7 @@ declare const SESSION_CLAIMS_DIRECTORY = "claims";
 /** How a {@link NodeSessionStore} is built. */
 interface INodeSessionStoreOptions extends ISessionStoreOptions {
   /**
-   * An ancestor of the store's directory the HOST also owns, tightened along with it (SEC-020).
+   * An ancestor of the store's directory the HOST also owns, tightened along with it.
    * Optional because this adapter does not interpret its base directory as a trusted root and must
    * not guess that a parent belongs to the product — which of them do is composition's knowledge.
    * Left out, a store root that already exists keeps whatever mode it was given: the leaf is made
@@ -228,7 +228,7 @@ declare class NodeSessionStore implements IInteractiveSessionStore {
   /** Whether session `id` may have a writer now (`IInteractiveSessionStore.hasWriter`). */
   hasWriter(id: string): boolean;
   /**
-   * Ensure the storage directory exists AND that only its owner can enter it (SEC-020).
+   * Ensure the storage directory exists AND that only its owner can enter it.
    *
    * The `existsSync` guard this replaces is the whole defect. It skipped the case that matters: a
    * directory some earlier version, a shared CI checkout, or another local user left at a wider
@@ -240,10 +240,10 @@ declare class NodeSessionStore implements IInteractiveSessionStore {
   /**
    * Absolute path to a session's JSON file.
    *
-   * SEC-006: every public method routes through here, so validating the id at this one point covers
+   * Every public method routes through here, so validating the id at this one point covers
    * `save` (write), `load` (read), and `delete` (unlink) at once.
    *
-   * Issue #2240: `assertSafeSessionId` is the guard, and it is sound — no separator, no `.`/`..`
+   * `assertSafeSessionId` is the guard, and it is sound — no separator, no `.`/`..`
    * can pass it. But it is a regex reject behind a helper, which static analysis does not model as
    * a path sanitizer, so `js/path-injection` re-opened on `load` every time this function changed
    * length. The containment check below is the shape such tools DO recognise: the resolved path
@@ -252,14 +252,14 @@ declare class NodeSessionStore implements IInteractiveSessionStore {
    */
   private filePath;
   /**
-   * Persist a session record to disk atomically (CORE-019).
+   * Persist a session record to disk atomically.
    * Creates the storage directory if needed.
    *
    * Bytes go to a same-directory temp file first, then move into place with rename —
    * a crash mid-write can therefore never leave a truncated JSON where the previous
    * record used to be. Same-directory is load-bearing: cross-device rename is a copy.
    *
-   * SEC-020: the atomic write now comes from `writeOwnerOnlyFile`, which carries the mode from the
+   * The atomic write now comes from `writeOwnerOnlyFile`, which carries the mode from the
    * moment the temp file is created. The hand-rolled version here wrote it at the umask's default
    * and let `rename` carry that mode to the final path, so every record was 0644 — and even setting
    * the mode after the write would leave a window in which the full transcript was world-readable
@@ -326,7 +326,7 @@ declare class NodeSessionStore implements IInteractiveSessionStore {
    * The outcome for one directory entry, without letting a bad NAME throw out of `list`.
    *
    * `load` validates the id, because an id reaching it is a caller's value and a malformed one is a
-   * bug or an attack (SEC-006). A name read out of the directory is neither: the store did not
+   * bug or an attack. A name read out of the directory is neither: the store did not
    * choose it, and one file it cannot use as an id must not take the whole listing down with it.
    * Routing `list` through `load` made exactly that happen — a single `my session.json` in the
    * sessions directory threw, and the resume picker went with it.
@@ -450,7 +450,7 @@ declare class StoredPayloads {
    */
   open(stored: Uint8Array, maxBytes: number, ownerId: string | undefined, relativePath: string): Uint8Array;
 }
-/** What a stored sidecar is to a migration that seals what is still plain in place (#3679). */
+/** What a stored sidecar is to a migration that seals what is still plain in place. */
 type TStoredPayloadMigrationState = 'plain' | 'sealed' | 'does-not-open' | 'newer-format';
 /**
  * Where a sidecar of session `ownerId` stands: decided by whether it opens for that session, never by
@@ -542,7 +542,7 @@ interface IMigrateSessionLogsOptions {
   readonly sealer: IArtifactSealer;
   /** `false` plans: everything is read and counted exactly as a run would, and nothing is written. */
   readonly apply: boolean;
-  /** An ancestor of the directory the host also owns, tightened along with it (SEC-020). */
+  /** An ancestor of the directory the host also owns, tightened along with it. */
   readonly ownedRoot?: string;
   /** Runs before each sidecar replace and each log replace; throwing stops the migration there. */
   readonly beforeCommit?: () => void;
@@ -736,7 +736,7 @@ declare class NodeToolResultSpillStore implements IToolResultSpillStore {
 /** 64 KiB: a few hundred prompts per block — enough for the first frame, small enough to yield often. */
 declare const DEFAULT_PROMPT_HISTORY_BLOCK_BYTES: number;
 interface INodePromptHistoryFileOptions extends ISessionStoreOptions {
-  /** An ancestor of the file the host also owns, tightened along with the directory (SEC-020). */
+  /** An ancestor of the file the host also owns, tightened along with the directory. */
   readonly ownedRoot?: string;
   /** Test seam: the read block size in bytes. */
   readonly blockBytes?: number;
@@ -776,7 +776,7 @@ interface ICompactPromptHistoryOptions {
    * replaces nothing.
    */
   readonly sealer: IArtifactSealer;
-  /** An ancestor of the file the host also owns, tightened along with the directory (SEC-020). */
+  /** An ancestor of the file the host also owns, tightened along with the directory. */
   readonly ownedRoot?: string;
   /**
    * Runs once the new file is written and flushed, just before it replaces the history. Throwing

package/dist/node.d.ts

@@ -8,7 +8,7 @@ interface IEncodedSession {
   readonly stored: Uint8Array;
   readonly text: string;
 }
-/** What a record's stored bytes are to a migration that seals what is still plain (#3679). */
+/** What a record's stored bytes are to a migration that seals what is still plain. */
 type TStoredSessionMigrationState =
 /** Not sealed framing: whatever it holds — a valid, corrupt, unsupported or bare record. */
 'plain' |
@@ -188,7 +188,7 @@ declare const SESSION_CLAIMS_DIRECTORY = "claims";
 /** How a {@link NodeSessionStore} is built. */
 interface INodeSessionStoreOptions extends ISessionStoreOptions {
   /**
-   * An ancestor of the store's directory the HOST also owns, tightened along with it (SEC-020).
+   * An ancestor of the store's directory the HOST also owns, tightened along with it.
    * Optional because this adapter does not interpret its base directory as a trusted root and must
    * not guess that a parent belongs to the product — which of them do is composition's knowledge.
    * Left out, a store root that already exists keeps whatever mode it was given: the leaf is made
@@ -228,7 +228,7 @@ declare class NodeSessionStore implements IInteractiveSessionStore {
   /** Whether session `id` may have a writer now (`IInteractiveSessionStore.hasWriter`). */
   hasWriter(id: string): boolean;
   /**
-   * Ensure the storage directory exists AND that only its owner can enter it (SEC-020).
+   * Ensure the storage directory exists AND that only its owner can enter it.
    *
    * The `existsSync` guard this replaces is the whole defect. It skipped the case that matters: a
    * directory some earlier version, a shared CI checkout, or another local user left at a wider
@@ -240,10 +240,10 @@ declare class NodeSessionStore implements IInteractiveSessionStore {
   /**
    * Absolute path to a session's JSON file.
    *
-   * SEC-006: every public method routes through here, so validating the id at this one point covers
+   * Every public method routes through here, so validating the id at this one point covers
    * `save` (write), `load` (read), and `delete` (unlink) at once.
    *
-   * Issue #2240: `assertSafeSessionId` is the guard, and it is sound — no separator, no `.`/`..`
+   * `assertSafeSessionId` is the guard, and it is sound — no separator, no `.`/`..`
    * can pass it. But it is a regex reject behind a helper, which static analysis does not model as
    * a path sanitizer, so `js/path-injection` re-opened on `load` every time this function changed
    * length. The containment check below is the shape such tools DO recognise: the resolved path
@@ -252,14 +252,14 @@ declare class NodeSessionStore implements IInteractiveSessionStore {
    */
   private filePath;
   /**
-   * Persist a session record to disk atomically (CORE-019).
+   * Persist a session record to disk atomically.
    * Creates the storage directory if needed.
    *
    * Bytes go to a same-directory temp file first, then move into place with rename —
    * a crash mid-write can therefore never leave a truncated JSON where the previous
    * record used to be. Same-directory is load-bearing: cross-device rename is a copy.
    *
-   * SEC-020: the atomic write now comes from `writeOwnerOnlyFile`, which carries the mode from the
+   * The atomic write now comes from `writeOwnerOnlyFile`, which carries the mode from the
    * moment the temp file is created. The hand-rolled version here wrote it at the umask's default
    * and let `rename` carry that mode to the final path, so every record was 0644 — and even setting
    * the mode after the write would leave a window in which the full transcript was world-readable
@@ -326,7 +326,7 @@ declare class NodeSessionStore implements IInteractiveSessionStore {
    * The outcome for one directory entry, without letting a bad NAME throw out of `list`.
    *
    * `load` validates the id, because an id reaching it is a caller's value and a malformed one is a
-   * bug or an attack (SEC-006). A name read out of the directory is neither: the store did not
+   * bug or an attack. A name read out of the directory is neither: the store did not
    * choose it, and one file it cannot use as an id must not take the whole listing down with it.
    * Routing `list` through `load` made exactly that happen — a single `my session.json` in the
    * sessions directory threw, and the resume picker went with it.
@@ -450,7 +450,7 @@ declare class StoredPayloads {
    */
   open(stored: Uint8Array, maxBytes: number, ownerId: string | undefined, relativePath: string): Uint8Array;
 }
-/** What a stored sidecar is to a migration that seals what is still plain in place (#3679). */
+/** What a stored sidecar is to a migration that seals what is still plain in place. */
 type TStoredPayloadMigrationState = 'plain' | 'sealed' | 'does-not-open' | 'newer-format';
 /**
  * Where a sidecar of session `ownerId` stands: decided by whether it opens for that session, never by
@@ -542,7 +542,7 @@ interface IMigrateSessionLogsOptions {
   readonly sealer: IArtifactSealer;
   /** `false` plans: everything is read and counted exactly as a run would, and nothing is written. */
   readonly apply: boolean;
-  /** An ancestor of the directory the host also owns, tightened along with it (SEC-020). */
+  /** An ancestor of the directory the host also owns, tightened along with it. */
   readonly ownedRoot?: string;
   /** Runs before each sidecar replace and each log replace; throwing stops the migration there. */
   readonly beforeCommit?: () => void;
@@ -736,7 +736,7 @@ declare class NodeToolResultSpillStore implements IToolResultSpillStore {
 /** 64 KiB: a few hundred prompts per block — enough for the first frame, small enough to yield often. */
 declare const DEFAULT_PROMPT_HISTORY_BLOCK_BYTES: number;
 interface INodePromptHistoryFileOptions extends ISessionStoreOptions {
-  /** An ancestor of the file the host also owns, tightened along with the directory (SEC-020). */
+  /** An ancestor of the file the host also owns, tightened along with the directory. */
   readonly ownedRoot?: string;
   /** Test seam: the read block size in bytes. */
   readonly blockBytes?: number;
@@ -776,7 +776,7 @@ interface ICompactPromptHistoryOptions {
    * replaces nothing.
    */
   readonly sealer: IArtifactSealer;
-  /** An ancestor of the file the host also owns, tightened along with the directory (SEC-020). */
+  /** An ancestor of the file the host also owns, tightened along with the directory. */
   readonly ownedRoot?: string;
   /**
    * Runs once the new file is written and flushed, just before it replaces the history. Throwing