@rubytech/create-maxy 1.0.885 → 1.0.887

package/payload/server/client-pool-M6NS5G2U.js

@@ -0,0 +1,34 @@
+import {
+  _evictAllForTest,
+  _poolSnapshotForTest,
+  acquireClient,
+  acquireOneShotClient,
+  evictClient,
+  getActiveClient,
+  interruptClient,
+  pushUserMessage,
+  pushUserToolResult,
+  recordCachedTokens,
+  recordCrash,
+  setInflight,
+  startIdleEvictTick,
+  stopIdleEvictTick
+} from "./chunk-IFMZ5I3E.js";
+import "./chunk-DOIAYD3J.js";
+import "./chunk-JSBRDJBE.js";
+export {
+  _evictAllForTest,
+  _poolSnapshotForTest,
+  acquireClient,
+  acquireOneShotClient,
+  evictClient,
+  getActiveClient,
+  interruptClient,
+  pushUserMessage,
+  pushUserToolResult,
+  recordCachedTokens,
+  recordCrash,
+  setInflight,
+  startIdleEvictTick,
+  stopIdleEvictTick
+};

package/payload/server/maxy-edge.js

@@ -16,11 +16,11 @@ import {
   streamActionEvents,
   vncLog,
   websockifyLog
-} from "./chunk-ZVO5ASQA.js";
+} from "./chunk-MOAY7KG2.js";
 import {
   LOG_DIR,
   WEBSOCKIFY_PORT
-} from "./chunk-NPKQWE3S.js";
+} from "./chunk-IFMZ5I3E.js";
 import "./chunk-ECAQVMRA.js";
 import "./chunk-DOIAYD3J.js";
 import "./chunk-JSBRDJBE.js";

package/payload/server/server.js

@@ -76,7 +76,7 @@ import {
   vncLog,
   waitForExit,
   writeChromiumWrapper
-} from "./chunk-ZVO5ASQA.js";
+} from "./chunk-MOAY7KG2.js";
 import {
   CDP_PORT,
   COMMERCIAL_MODE,
@@ -91,6 +91,7 @@ import {
   completeGrantSetup,
   consumeWantsPriorConversation,
   emitMissingOnResolve,
+  fingerprintSessionKey,
   getAccountIdForSession,
   getActiveClient,
   getAgentNameForSession,
@@ -116,7 +117,7 @@ import {
   sigtermFlushStreamLogs,
   unregisterSession,
   validateSession
-} from "./chunk-NPKQWE3S.js";
+} from "./chunk-IFMZ5I3E.js";
 import {
   CLOUDFLARE_TASK_DIAGNOSTICS,
   appendCloudflareSteps,
@@ -7017,7 +7018,8 @@ async function resolveUserIdentity(accountId, userId) {
 async function createAdminSession(accountId, thinkingView, userId, userName, role, avatar) {
   const account = resolveAccount();
   const effectiveThinkingView = thinkingView ?? account?.config.thinkingView ?? "default";
-  const cacheKey = userId ? mintAdminSessionToken({ accountId, userId }) : crypto.randomUUID();
+  const signedSessionToken = userId ? mintAdminSessionToken({ accountId, userId }) : crypto.randomUUID();
+  const cacheKey = fingerprintSessionKey(signedSessionToken);
   registerSession(cacheKey, "admin", accountId, void 0, userId, userName, role);
   if (userId) setWantsPriorConversation(cacheKey);
   let onboardingComplete = true;
@@ -7053,7 +7055,7 @@ async function createAdminSession(accountId, thinkingView, userId, userName, rol
   console.log(`[session] ${(/* @__PURE__ */ new Date()).toISOString()} admin session created: userId=${userId ?? "\u2013"} userName=${userName ?? "\u2013"} accountId=${accountId} conversationId=${initialConversationId ?? "unbound"} cacheKey=${cacheKey.slice(0, 8)}`);
   console.log(`[admin-session] role=${role ?? "null"} cacheKey=${cacheKey.slice(0, 8)} phase=create eager-ensured=${initialConversationId ? "true" : "false"}`);
   return {
-    session_key: cacheKey,
+    session_key: signedSessionToken,
     agent_id: "admin",
     userId,
     userName,
@@ -7067,8 +7069,12 @@ async function createAdminSession(accountId, thinkingView, userId, userName, rol
 }
 var app10 = new Hono();
 app10.get("/", async (c) => {
-  const cacheKey = c.req.query("session_key");
-  if (!cacheKey || !validateSession(cacheKey, "admin").ok) {
+  const signedSessionToken = c.req.query("session_key");
+  if (!signedSessionToken) {
+    return c.json({ error: "Invalid or expired admin session" }, 401);
+  }
+  const cacheKey = fingerprintSessionKey(signedSessionToken);
+  if (!validateSession(cacheKey, "admin", signedSessionToken).ok) {
     return c.json({ error: "Invalid or expired admin session" }, 401);
   }
   const accountId = getAccountIdForSession(cacheKey);
@@ -7104,7 +7110,7 @@ app10.get("/", async (c) => {
     }
   }
   return c.json({
-    session_key: cacheKey,
+    session_key: signedSessionToken,
     agent_id: "admin",
     userId: restoredUserId,
     userName: restoredUserName,
@@ -7474,7 +7480,7 @@ var app11 = new Hono();
 app11.post("/cancel", requireAdminSession, async (c) => {
   const session_key = c.var.cacheKey;
   try {
-    const { interruptClient: interruptClient2 } = await import("./client-pool-QUMX7OUT.js");
+    const { interruptClient: interruptClient2 } = await import("./client-pool-M6NS5G2U.js");
     await interruptClient2(session_key);
     return c.json({ ok: true });
   } catch (err) {
@@ -8633,13 +8639,14 @@ app18.post("/new", requireAdminSession, async (c) => {
   if (!accountId || !userId) {
     return c.json({ error: "Session missing account or user context" }, 400);
   }
-  const newCacheKey = crypto2.randomUUID();
+  const newSignedSessionToken = crypto2.randomUUID();
+  const newCacheKey = fingerprintSessionKey(newSignedSessionToken);
   const userName = getUserNameForSession(oldCacheKey);
   registerSession(newCacheKey, "admin", accountId, void 0, userId, userName);
   const previousConversationId = clearSessionHistory(oldCacheKey);
   unregisterSession(oldCacheKey);
   console.log(`[session] ${(/* @__PURE__ */ new Date()).toISOString()} session reset for new conversation: oldCacheKey=${oldCacheKey.slice(0, 8)}\u2026 newCacheKey=${newCacheKey.slice(0, 8)}\u2026 previousConversationId=${previousConversationId?.slice(0, 8) ?? "none"}\u2026 newConversationId=deferred`);
-  return c.json({ session_key: newCacheKey, conversationId: null });
+  return c.json({ session_key: newSignedSessionToken, conversationId: null });
 });
 app18.post("/switch", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -8649,11 +8656,12 @@ app18.post("/switch", requireAdminSession, async (c) => {
     return c.json({ error: "Session missing account or user context" }, 400);
   }
   const body = await c.req.json().catch(() => ({}));
-  const targetCacheKey = typeof body.target_session_key === "string" ? body.target_session_key : "";
-  if (!targetCacheKey) {
+  const targetSignedSessionToken = typeof body.target_session_key === "string" ? body.target_session_key : "";
+  if (!targetSignedSessionToken) {
     return c.json({ error: "target_session_key required" }, 400);
   }
-  const targetCheck = validateSession(targetCacheKey, "admin");
+  const targetCacheKey = fingerprintSessionKey(targetSignedSessionToken);
+  const targetCheck = validateSession(targetCacheKey, "admin", targetSignedSessionToken);
   if (!targetCheck.ok) {
     console.error(`[session-switch] reject reason=${targetCheck.reason} from=${cacheKey.slice(0, 8)} target=${targetCacheKey.slice(0, 8)}`);
     return c.json({ error: "Target session not registered or wrong agent type", code: targetCheck.reason }, 404);
@@ -8666,7 +8674,7 @@ app18.post("/switch", requireAdminSession, async (c) => {
   }
   const targetConversationId = getConversationIdForSession(targetCacheKey) ?? null;
   console.log(`[session-switch] from=${cacheKey.slice(0, 8)} to=${targetCacheKey.slice(0, 8)} targetConvId=${targetConversationId?.slice(0, 8) ?? "none"} accountId=${accountId.slice(0, 8)}`);
-  return c.json({ session_key: targetCacheKey, conversationId: targetConversationId });
+  return c.json({ session_key: targetSignedSessionToken, conversationId: targetConversationId });
 });
 app18.delete("/:id", requireAdminSession, async (c) => {
   const conversationId = c.req.param("id");
@@ -8685,13 +8693,14 @@ app18.delete("/:id", requireAdminSession, async (c) => {
 });
 app18.post("/:id/resume", async (c) => {
   const conversationId = c.req.param("id");
-  const cacheKey = c.req.query("session_key") ?? "";
-  if (!cacheKey) {
+  const signedSessionToken = c.req.query("session_key") ?? "";
+  if (!signedSessionToken) {
     console.error(`[session] middleware-reject status=400 code=session-missing reason="session_key required" path=${c.req.path}`);
     return c.json({ error: "session_key required", code: "session-missing" }, 400);
   }
+  const cacheKey = fingerprintSessionKey(signedSessionToken);
   let bridged = false;
-  let result = validateSession(cacheKey, "admin");
+  let result = validateSession(cacheKey, "admin", signedSessionToken);
   if (!result.ok) {
     if (result.reason === "session-not-registered") {
       const bridge = await tryCookieBridgeForConversation(c, cacheKey, conversationId);
@@ -8704,7 +8713,7 @@ app18.post("/:id/resume", async (c) => {
         return c.json({ error: "Invalid or expired admin session", code: "session-not-registered" }, 401);
       }
       bridged = true;
-      result = validateSession(cacheKey, "admin");
+      result = validateSession(cacheKey, "admin", signedSessionToken);
       if (!result.ok) {
         const tail = cacheKey.slice(0, 8);
         console.error(`[session] middleware-reject status=401 code=session-not-registered reason="post-bridge re-validate failed" path=${c.req.path} cacheKey=${tail}\u2026`);
@@ -12881,10 +12890,42 @@ async function verifyUserProfileConstraint() {
     await session.close();
   }
 }
+async function verifySessionKeyAdherence() {
+  const session = getSession();
+  try {
+    const convResult = await session.run(
+      `MATCH (c:Conversation) WHERE c.sessionKey IS NULL RETURN count(c) AS n`
+    );
+    const convNull = convResult.records[0]?.get("n")?.toNumber?.() ?? 0;
+    console.error(
+      `[migration-1007] adherence-check label=Conversation rows-with-null-sessionkey=${convNull}`
+    );
+    const msgResult = await session.run(
+      `MATCH (m:Message) WHERE m.sessionKey IS NULL RETURN count(m) AS n`
+    );
+    const msgNull = msgResult.records[0]?.get("n")?.toNumber?.() ?? 0;
+    console.error(
+      `[migration-1007] adherence-check label=Message rows-with-null-sessionkey=${msgNull}`
+    );
+    if (convNull > 0 || msgNull > 0) {
+      console.error(
+        `[migration-1007] adherence-check P0=true reason=null-sessionkey-on-boot \u2014 re-run seed-neo4j.sh`
+      );
+    }
+  } catch (err) {
+    console.error(
+      `[migration-1007] adherence-check verify failed: ${err instanceof Error ? err.message : String(err)}`
+    );
+  } finally {
+    await session.close();
+  }
+}
 function startGraphHealthTimer() {
   if (timer) return;
   verifyUserProfileConstraint().catch(() => {
   });
+  verifySessionKeyAdherence().catch(() => {
+  });
   runGraphHealthTick().catch(() => {
   });
   timer = setInterval(() => {
@@ -13213,7 +13254,8 @@ app39.post("/api/remote-auth/set-password", async (c) => {
   } catch {
     return c.json({ error: "Invalid request" }, 400);
   }
-  if (!body.session_key || !validateSession(body.session_key, "admin").ok) {
+  const cacheKey = body.session_key ? fingerprintSessionKey(body.session_key) : "";
+  if (!cacheKey || !validateSession(cacheKey, "admin", body.session_key).ok) {
     return c.json({ error: "Unauthorized" }, 401);
   }
   if (!body.password) {