@stage-labs/metro 0.1.0-beta.262 → 0.1.0-beta.264

package/dist/runtime-install.js

@@ -1,7 +1,7 @@
 import { spawnSync } from 'node:child_process';
 import { copyFileSync, cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { join } from 'node:path';
+import { dirname, join } from 'node:path';
 import { localStations } from './local.js';
 import { STORE_ENTRY, daemonEntry, findBun, runtimeDir } from './runtime.js';
 const MANIFEST_FILE = 'stations.json';
@@ -24,6 +24,7 @@ export function readManifest(path) {
     return {
         core: ranges(raw.core),
         stations: Object.fromEntries(Object.entries(stations).map(([name, deps]) => [name, ranges(deps)])),
+        ...(raw.patchedDependencies === undefined ? {} : { patchedDependencies: ranges(raw.patchedDependencies) }),
     };
 }
 export function dependenciesFor(manifest, stations) {
@@ -32,7 +33,19 @@ export function dependenciesFor(manifest, stations) {
         Object.assign(out, manifest.stations[station] ?? {});
     return Object.fromEntries(Object.entries(out).sort(([a], [b]) => a.localeCompare(b)));
 }
-const packageText = (deps) => `${JSON.stringify({ name: 'metro-runtime', private: true, dependencies: deps }, null, 2)}\n`;
+function packageText(deps, patches) {
+    const patchedDependencies = Object.fromEntries(Object.entries(deps).flatMap(([name, version]) => {
+        const key = `${name}@${version}`;
+        const path = patches[key];
+        return path === undefined ? [] : [[key, path]];
+    }));
+    return `${JSON.stringify({
+        name: 'metro-runtime',
+        private: true,
+        dependencies: deps,
+        ...(Object.keys(patchedDependencies).length === 0 ? {} : { patchedDependencies }),
+    }, null, 2)}\n`;
+}
 export function readOrNull(path) {
     try {
         return readFileSync(path, 'utf8');
@@ -63,8 +76,8 @@ function syncSources(sources, store) {
         writeFileSync(join(store, 'runtime.json'), stamp);
     return true;
 }
-export function installDependencies(store, deps, bun, log) {
-    const wanted = packageText(deps);
+export function installDependencies(store, deps, bun, log, patches = {}) {
+    const wanted = packageText(deps, patches);
     const marker = join(store, 'node_modules', '.metro-installed');
     if (existsSync(marker) && readOrNull(join(store, 'package.json')) === wanted)
         return false;
@@ -92,6 +105,10 @@ export function prepareRuntime(opts = {}) {
         });
     mkdirSync(join(store, 'trains'), { recursive: true });
     syncSources(sources, store);
-    installDependencies(store, dependenciesFor(manifest, localStations(opts.agents)), opts.bun ?? findBun(), log);
+    for (const path of Object.values(manifest.patchedDependencies ?? {})) {
+        mkdirSync(dirname(join(store, path)), { recursive: true });
+        copyFileSync(join(sources, path), join(store, path));
+    }
+    installDependencies(store, dependenciesFor(manifest, localStations(opts.agents)), opts.bun ?? findBun(), log, manifest.patchedDependencies);
     return { dir: store, entry: daemonEntry(store), trains: join(store, 'trains'), manifest: manifestPath };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.262",
+  "version": "0.1.0-beta.264",
   "description": "The metro command line: run your agent on this machine, relaying its chat channels and connectors to Claude Code.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.262",
+  "version": "0.1.0-beta.264",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, and the standing rules loaded at each session start. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/marketplace/plugin/bin/policy.mjs

@@ -36,7 +36,7 @@ function targets(snap, name, input) {
   if (Array.isArray(snap.ungated) && snap.ungated.includes(name)) return [];
   const account = text(input.account);
   const line = text(input[LINE_FIELD[name] ?? 'line']);
-  if (line) return fromLine(line, name in LINE_FIELD ? '' : account);
+  if (line) return fromLine(line, name in LINE_FIELD || name === 'list_members' ? '' : account);
   const owners = isRecord(snap.owners) ? snap.owners : {};
   const station = (STATION_ARG.has(name) ? text(input.station) : text(owners[name])) || (account ? stationOfAccount(snap, account) : undefined);
   if (!station) return [];

package/runtime/node_modules/@metro-labs/core/src/events.ts

@@ -85,7 +85,51 @@ export interface BufferedEvent {
   event: MetroEvent;
 }
 
-const BUS_BUFFER_MAX = 500;
+export const BUS_BUFFER_MAX = 500;
+
+export interface RunEventMetadata {
+  isPrivate?: boolean;
+  senderVerified?: boolean;
+  mentionsSelf?: boolean;
+  replyToSelf?: boolean;
+  emoji?: string;
+  removed?: boolean;
+  targetId?: string;
+  attachmentCount?: number;
+  attachmentTypes?: ('image' | 'video' | 'audio' | 'file')[];
+  attachmentStatus?: 'saved' | 'failed';
+  attachmentFor?: string;
+}
+
+export interface RunEvent {
+  id: string;
+  seq: number;
+  ts: string;
+  kind: StructuredEvent['type'];
+  direction: 'inbound' | 'outbound' | 'system';
+  agentId: string;
+  station: string;
+  accountId: string | null;
+  line: string;
+  lineName?: string;
+  from?: string;
+  fromName?: string;
+  fromDisplayName?: string;
+  to?: string;
+  text?: string;
+  truncated: boolean;
+  messageId?: string;
+  replyTo?: string;
+  metadata: RunEventMetadata;
+}
+
+export interface RunEventsPage {
+  events: RunEvent[];
+  cursor: string;
+  hasMore: boolean;
+  reset: boolean;
+  retention: { capacity: number; oldestAt: string | null; oldestSeq: number | null };
+}
 
 const listeners = new Set<BusListener>();
 const buffer: BufferedEvent[] = [];

package/runtime/node_modules/@metro-labs/core/src/stations/train-boot.ts

@@ -1,4 +1,4 @@
-import { errMsg } from '../log.js';
+import { errMsg, logFatalSync } from '../log.js';
 import { readCalls } from '../protocol.js';
 import { TrainError } from '../train-error.js';
 import type { CallMsg } from './station-runtime.js';
@@ -18,12 +18,33 @@ export interface ClientTrain<A extends { id: string }, C> {
   loadAccounts: () => A[];
   createClient: (account: A) => C;
   startInbound: (client: C) => Promise<void>;
+  disconnectClient?: (client: C) => Promise<void>;
   makeHandleCall: (clientFor: (accountId: string) => C) => (msg: CallMsg) => Promise<void>;
 }
 
 export function runClientTrain<A extends { id: string }, C>(train: ClientTrain<A, C>): void {
   const clients = new Map<string, C>();
+  let stopping = false;
+  if (train.disconnectClient) {
+    const disconnect = train.disconnectClient;
+    const shutdown = (): void => {
+      if (stopping) return;
+      stopping = true;
+      process.stdin.pause();
+      Promise.allSettled([...clients.values()].map(async (client) => { await disconnect(client); })).then((results) => {
+        const errors = results.flatMap((result) => result.status === 'rejected' ? [errMsg(result.reason)] : []);
+        if (errors.length) logFatalSync({ station: train.station, errors }, 'train: shutdown failed');
+        process.exit(errors.length ? 1 : 0);
+      }).catch((err: unknown) => {
+        logFatalSync({ station: train.station, err: errMsg(err) }, 'train: shutdown failed');
+        process.exit(1);
+      });
+    };
+    process.on('SIGTERM', shutdown);
+    process.on('SIGINT', shutdown);
+  }
   const clientFor = (accountId: string): C => {
+    if (stopping) throw new TrainError('train_stopping', `${train.station} is shutting down`);
     const known = clients.get(accountId);
     if (known !== undefined) return known;
     const account = train.accounts.get(accountId);

package/runtime/node_modules/@metro-labs/daemon/src/agents/map.ts

@@ -16,6 +16,8 @@ export function setAgentMap(map: AgentMap, names: AgentNameMap): void {
   agentNames = names;
 }
 
+export const knownAgentIds = (): string[] => Object.keys(agentNames);
+
 export function setAllowlistMap(map: AllowlistMap): void {
   allowlistMap = map;
 }

package/runtime/node_modules/@metro-labs/daemon/src/mcp/policy-gate.ts

@@ -13,9 +13,9 @@ type ChannelTarget = Extract<PolicyTarget, { kind: 'channel' }>;
 
 export const UNGATED = new Set<string>(['list_accounts', 'create_upload']);
 
-function fromLine(line: string, override: string | undefined): ChannelTarget[] {
+function fromLine(line: string, override = ''): ChannelTarget[] {
   const acct = accountFromLine(line);
-  return acct === undefined ? [] : [{ kind: 'channel', station: acct.station, account: override ?? acct.accountId }];
+  return acct === undefined ? [] : [{ kind: 'channel', station: acct.station, account: override || acct.accountId }];
 }
 
 function channelTargets(name: string, a: Record<string, unknown>): ChannelTarget[] {
@@ -26,7 +26,7 @@ function channelTargets(name: string, a: Record<string, unknown>): ChannelTarget
   }
   const account = str(a.account);
   const line = str(a.line);
-  if (line) return fromLine(line, account || undefined);
+  if (line) return fromLine(line, name === 'list_members' ? undefined : account);
   const station = stationForTool(name, a) ?? (account ? stationOfAccount(account) : undefined);
   if (station === undefined) return [];
   if (account) return [{ kind: 'channel', station, account }];

package/runtime/node_modules/@metro-labs/daemon/src/monitor/run-event.ts

@@ -0,0 +1,139 @@
+import { classifyEvent, userSelf, type BufferedEvent, type MetroEvent, type RunEvent, type RunEventMetadata } from '@metro-labs/core/events';
+import { isRecord } from '@metro-labs/core/is-record';
+import { Line } from '@metro-labs/core/lines';
+import { STATIONS } from '@metro-labs/core/station-names';
+import { accountFromLine, allowlistForLine, lineReceives, senderPermitted } from '../agents/map.js';
+import { eventInScope } from '../agents/scope.js';
+
+const TEXT_MAX = 8_000;
+const FIELD_MAX = 512;
+const LINE_MAX = 2_048;
+const ACCOUNT_STATIONS = new Set<string>(STATIONS);
+const KINDS = new Set(['msg', 'reply', 'react', 'edit', 'delete', 'system']);
+
+function safeText(value: unknown, max: number): string | undefined {
+  if (typeof value !== 'string') return undefined;
+  return value.slice(0, max).replace(/https?:\/\/[^\s<>"']+|\/(?:attach|api\/uploads|api\/webhooks|api\/threema)\/[^\s<>"']*/gi, (url) => /\/(?:attach|api\/uploads|api\/webhooks|api\/threema)\//i.test(url) ? '[private link]' : url).slice(0, max);
+}
+
+function validLine(line: string): boolean {
+  return typeof line === 'string' && line.length <= LINE_MAX && /^metro:\/\/[a-z][a-z0-9-]*\/[^\s?#]+$/.test(line) && !line.includes('//', 8) && !line.endsWith('/');
+}
+
+const isSelf = (line: string): boolean => line === userSelf();
+const isSynthetic = (payload: unknown): boolean => isRecord(payload) && (payload.contentType === 'attachmentSaved' || payload.contentType === 'attachmentFailed' || payload.contentType === 'transcript');
+
+function sameAccount(line: string, other: string): boolean {
+  if (!validLine(other)) return false;
+  const a = accountFromLine(line);
+  const b = accountFromLine(other);
+  return a !== undefined && b !== undefined && a.station === b.station && a.accountId === b.accountId;
+}
+
+function permittedTraffic(event: MetroEvent): boolean {
+  if (!isSelf(event.to) && !sameAccount(event.line, event.to)) return false;
+  const allowlist = allowlistForLine(event.line);
+  if (isSelf(event.from)) return !isSynthetic(event.payload) || senderPermitted(allowlist, '');
+  return sameAccount(event.line, event.from) && senderPermitted(allowlist, event.from, event.senderVerified);
+}
+
+function visible(event: MetroEvent, allowed: Set<string>): boolean {
+  if (!validLine(event.line) || !eventInScope(allowed, event.line) || !lineReceives(event.line)) return false;
+  const station = Line.station(event.line);
+  if (station !== event.station) return false;
+  if (!ACCOUNT_STATIONS.has(station)) return station === 'claude' && event.event?.type === 'system' && event.isPrivate !== true;
+  return permittedTraffic(event);
+}
+
+function attachmentType(value: unknown): 'image' | 'video' | 'audio' | 'file' {
+  if (!isRecord(value)) return 'file';
+  const mime = typeof value.mime === 'string' ? value.mime : value.contentType;
+  for (const kind of ['image', 'video', 'audio'] as const) {
+    if (value.kind === kind || (typeof mime === 'string' && mime.startsWith(`${kind}/`))) return kind;
+  }
+  return 'file';
+}
+
+function attachmentMetadata(payload: unknown): RunEventMetadata {
+  if (!isRecord(payload)) return {};
+  const saved = payload.contentType === 'attachmentSaved';
+  const failed = payload.contentType === 'attachmentFailed';
+  if (saved || failed) return {
+    attachmentCount: 1,
+    attachmentTypes: [attachmentType(payload)],
+    attachmentStatus: saved ? 'saved' : 'failed',
+    attachmentFor: safeText(payload.attachmentFor, FIELD_MAX),
+  };
+  if (!Array.isArray(payload.attachments) || payload.attachments.length === 0) return {};
+  return {
+    attachmentCount: payload.attachments.length,
+    attachmentTypes: [...new Set(payload.attachments.slice(0, 100).map(attachmentType))],
+  };
+}
+
+function reactionMetadata(event: MetroEvent): RunEventMetadata {
+  if (event.event?.type !== 'react') return {};
+  return {
+    emoji: safeText(event.event.emoji, 32),
+    ...(isRecord(event.payload) && typeof event.payload.removed === 'boolean' ? { removed: event.payload.removed } : {}),
+  };
+}
+
+function metadata(event: MetroEvent, system: boolean): RunEventMetadata {
+  const attachments = attachmentMetadata(event.payload);
+  if (system) return attachments;
+  const structured = event.event;
+  return {
+    ...attachments,
+    ...(typeof event.isPrivate === 'boolean' ? { isPrivate: event.isPrivate } : {}),
+    ...(typeof event.senderVerified === 'boolean' ? { senderVerified: event.senderVerified } : {}),
+    ...(typeof event.mentionsSelf === 'boolean' ? { mentionsSelf: event.mentionsSelf } : {}),
+    ...(typeof event.replyToSelf === 'boolean' ? { replyToSelf: event.replyToSelf } : {}),
+    ...reactionMetadata(event),
+    ...(structured !== undefined && 'targetId' in structured ? { targetId: safeText(structured.targetId, FIELD_MAX) } : {}),
+  };
+}
+
+function messageFields(event: MetroEvent, system: boolean): Partial<RunEvent> & { truncated: boolean } {
+  if (system) return { truncated: false };
+  return {
+    lineName: safeText(event.lineName, FIELD_MAX),
+    from: safeText(event.from, LINE_MAX),
+    fromName: safeText(event.fromName, FIELD_MAX),
+    fromDisplayName: safeText(event.fromDisplayName, FIELD_MAX),
+    to: safeText(event.to, LINE_MAX),
+    text: safeText(event.text, TEXT_MAX),
+    truncated: typeof event.text === 'string' && event.text.length > TEXT_MAX,
+  };
+}
+
+function validIdentity(event: MetroEvent): boolean {
+  return typeof event.id === 'string' && event.id.length <= FIELD_MAX
+    && typeof event.ts === 'string' && event.ts.length <= 64 && Number.isFinite(Date.parse(event.ts));
+}
+
+const replyId = (event: MetroEvent): string | undefined => event.replyTo ?? (event.event?.type === 'reply' ? event.event.replyTo : undefined);
+const accountId = (event: MetroEvent): string | null => ACCOUNT_STATIONS.has(event.station) ? accountFromLine(event.line)?.accountId ?? null : null;
+
+export function runEvent(entry: BufferedEvent, agentId: string): RunEvent | null {
+  const { event, busSeq } = entry;
+  if (!visible(event, new Set([agentId])) || !validIdentity(event)) return null;
+  const structured = event.event ?? classifyEvent(event);
+  if (!KINDS.has(structured.type)) return null;
+  const system = structured.type === 'system' || isSynthetic(event.payload);
+  return {
+    ...messageFields(event, system),
+    id: safeText(event.id, FIELD_MAX) ?? '',
+    seq: busSeq,
+    ts: new Date(event.ts).toISOString(),
+    kind: system ? 'system' : structured.type,
+    direction: system ? 'system' : isSelf(event.from) ? 'outbound' : 'inbound',
+    agentId,
+    station: event.station,
+    accountId: accountId(event),
+    line: event.line,
+    messageId: safeText(event.messageId, FIELD_MAX),
+    replyTo: safeText(replyId(event), FIELD_MAX),
+    metadata: metadata(event, system),
+  };
+}

package/runtime/node_modules/@metro-labs/daemon/src/monitor/run-events.ts

@@ -0,0 +1,101 @@
+import { createHash, randomUUID } from 'node:crypto';
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { bufferedSince, BUS_BUFFER_MAX, currentBusSeq, type BufferedEvent, type RunEvent, type RunEventsPage } from '@metro-labs/core/events';
+import { ID_RE } from '@metro-labs/core/ids';
+import { ApiError } from '@metro-labs/http/api-error';
+import { sessionRoute } from '@metro-labs/http/api-http';
+import { accountEnabled, allowlistForAccount, knownAccounts, knownAgentIds } from '../agents/map.js';
+import { runEvent } from './run-event.js';
+
+const EPOCH = randomUUID();
+const DEFAULT_LIMIT = 100;
+const PAGE_BYTES_MAX = 1_000_000;
+const CURSOR_RE = /^([a-f0-9-]{36}):([a-f0-9]{64}):(0|[1-9]\d{0,15})$/;
+
+interface Cursor { epoch: string; policy: string; seq: number }
+interface Query { agentId: string; limit: number; cursor: Cursor | null }
+
+function cursorOf(raw: string | null): Cursor | null {
+  if (raw === null) return null;
+  const match = CURSOR_RE.exec(raw);
+  if (!match || !Number.isSafeInteger(Number(match[3]))) throw new ApiError('invalid run events cursor', 400);
+  return { epoch: match[1] ?? '', policy: match[2] ?? '', seq: Number(match[3]) };
+}
+
+function limitOf(raw: string | null): number {
+  if (raw === null) return DEFAULT_LIMIT;
+  const limit = Number(raw);
+  if (!/^[1-9]\d{0,2}$/.test(raw) || limit > BUS_BUFFER_MAX) throw new ApiError('limit must be between 1 and 500', 400);
+  return limit;
+}
+
+function queryOf(url: string): Query {
+  const params = new URL(url, 'http://localhost').searchParams;
+  for (const key of params.keys()) {
+    if (!['agent', 'limit', 'cursor'].includes(key) || params.getAll(key).length !== 1) throw new ApiError('invalid run events query', 400);
+  }
+  const agentId = params.get('agent') ?? '';
+  if (!ID_RE.test(agentId)) throw new ApiError('agent must be an agent id', 400);
+  return { agentId, limit: limitOf(params.get('limit')), cursor: cursorOf(params.get('cursor')) };
+}
+
+function policyOf(agentId: string, owner: string): string {
+  const accounts = knownAccounts().filter((account) => account.agentId === agentId).map(({ station, id }) => [
+    station, id, accountEnabled(station, id), allowlistForAccount(station, id) ?? [],
+  ]);
+  return createHash('sha256').update(JSON.stringify([owner, agentId, accounts])).digest('hex');
+}
+
+function bounded(events: RunEvent[], limit: number): RunEvent[] {
+  const rows: RunEvent[] = [];
+  let bytes = 0;
+  for (const event of events.slice(0, limit)) {
+    bytes += Buffer.byteLength(JSON.stringify(event)) + 1;
+    if (bytes > PAGE_BYTES_MAX) break;
+    rows.push(event);
+  }
+  return rows;
+}
+
+function resetNeeded(cursor: Cursor | null, policy: string, oldest: number, newest: number): boolean {
+  return cursor === null || cursor.epoch !== EPOCH || cursor.policy !== policy || cursor.seq < oldest - 1 || cursor.seq > newest;
+}
+
+function page(query: Query, owner: string): RunEventsPage {
+  const { agentId, limit, cursor } = query;
+  if (!knownAgentIds().includes(agentId)) throw new ApiError('no such agent', 404);
+  const policy = policyOf(agentId, owner);
+  const buffered = bufferedSince(0);
+  const newest = currentBusSeq();
+  const oldest = buffered[0]?.busSeq ?? newest + 1;
+  const reset = resetNeeded(cursor, policy, oldest, newest);
+  const visible = buffered.filter((entry) => reset || entry.busSeq > (cursor?.seq ?? newest)).flatMap((entry) => {
+    const event = runEvent(entry, agentId);
+    return event === null ? [] : [event];
+  });
+  const pending = reset ? visible.slice(-limit) : visible;
+  const events = bounded(pending, limit);
+  const hasMore = pending.length > events.length;
+  return {
+    events, cursor: `${EPOCH}:${policy}:${pageSeq(events, hasMore, newest)}`, hasMore, reset,
+    retention: retention(buffered, agentId),
+  };
+}
+
+const pageSeq = (events: RunEvent[], hasMore: boolean, newest: number): number => hasMore ? events.at(-1)?.seq ?? newest : newest;
+function retention(buffered: BufferedEvent[], agentId: string): RunEventsPage['retention'] {
+  let oldestAt: string | null = null;
+  for (const entry of buffered) {
+    const event = runEvent(entry, agentId);
+    if (event === null) continue;
+    oldestAt = event.ts;
+    break;
+  }
+  return { capacity: BUS_BUFFER_MAX, oldestAt, oldestSeq: buffered[0]?.busSeq ?? null };
+}
+
+export function handleRunEventsRequest(req: IncomingMessage, res: ServerResponse): boolean {
+  return sessionRoute(req, res, {
+    methods: { '/api/run/events': ['GET'] }, admin: false, label: 'run-events',
+  }, (session) => Promise.resolve(page(queryOf(req.url ?? ''), session.subject)));
+}

package/runtime/node_modules/@metro-labs/daemon/src/routes/session-apis.ts

@@ -22,6 +22,7 @@ import { handleSchedulesRequest } from '../agent-user/schedules-api.js';
 import { handleFilesRequest } from '../agent-user/files-api.js';
 import { handleVaultRequest } from '../vault/api.js';
 import { handleVoiceRequest } from '../voice/api.js';
+import { handleRunEventsRequest } from '../monitor/run-events.js';
 
 export interface SessionApis {
   agentApi?: AgentApiDeps;
@@ -50,6 +51,7 @@ export function handleSessionApis(
 ): boolean {
   const routes: (() => boolean)[] = [
     () => handleSessionApiRequest(req, res),
+    () => handleRunEventsRequest(req, res),
     () => handleApprovalsRequest(req, res),
     ...when(apis.connectorTransfers, (d) => d.handle(req, res)),
     ...when(apis.connectorApi, (d) => handleConnectorApiRequest(req, res, d)),

package/runtime/node_modules/@metro-labs/daemon/src/stations/runtime-deps.ts

@@ -1,5 +1,5 @@
 import { spawnSync } from 'node:child_process';
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { log } from '@metro-labs/core/log';
 import { isRecord } from '@metro-labs/core/is-record';
@@ -11,6 +11,7 @@ const INSTALL_TIMEOUT_MS = 15 * 60_000;
 export interface RuntimeManifest {
   core: Record<string, string>;
   stations: Record<string, Record<string, string>>;
+  patchedDependencies?: Record<string, string>;
 }
 
 export interface RuntimeStore {
@@ -30,6 +31,7 @@ export function readManifest(path: string): RuntimeManifest {
   return {
     core: ranges(raw.core),
     stations: Object.fromEntries(Object.entries(stations).map(([name, deps]) => [name, ranges(deps)])),
+    ...(raw.patchedDependencies === undefined ? {} : { patchedDependencies: ranges(raw.patchedDependencies) }),
   };
 }
 
@@ -46,8 +48,21 @@ export function dependenciesFor(manifest: RuntimeManifest, stations: Iterable<st
   return Object.fromEntries(Object.entries(out).sort(([a], [b]) => a.localeCompare(b)));
 }
 
-const packageText = (deps: Record<string, string>): string =>
-  `${JSON.stringify({ name: 'metro-runtime', private: true, dependencies: deps }, null, 2)}\n`;
+function packageText(deps: Record<string, string>, patches: Record<string, string>): string {
+  const patchedDependencies = Object.fromEntries(
+    Object.entries(deps).flatMap(([name, version]) => {
+      const key = `${name}@${version}`;
+      const path = patches[key];
+      return path === undefined ? [] : [[key, path]];
+    }),
+  );
+  return `${JSON.stringify({
+    name: 'metro-runtime',
+    private: true,
+    dependencies: deps,
+    ...(Object.keys(patchedDependencies).length === 0 ? {} : { patchedDependencies }),
+  }, null, 2)}\n`;
+}
 
 function current(dir: string): string | null {
   try {
@@ -58,9 +73,10 @@ function current(dir: string): string | null {
 }
 
 export function installRuntime(store: RuntimeStore, stations: Iterable<string>): boolean {
-  const wanted = packageText(dependenciesFor(store.manifest, stations));
-  const installed = existsSync(join(store.dir, 'node_modules', '.metro-installed'));
-  if (installed && current(store.dir) === wanted) return false;
+  const wanted = packageText(dependenciesFor(store.manifest, stations), store.manifest.patchedDependencies ?? {});
+  const marker = join(store.dir, 'node_modules', '.metro-installed');
+  if (existsSync(marker) && current(store.dir) === wanted) return false;
+  rmSync(marker, { force: true });
   mkdirSync(store.dir, { recursive: true });
   writeFileSync(join(store.dir, 'package.json'), wanted);
   log.info({ dir: store.dir }, 'runtime: installing the channel SDKs this machine needs');
@@ -71,7 +87,7 @@ export function installRuntime(store: RuntimeStore, stations: Iterable<string>):
   });
   if (run.error !== undefined || run.status !== 0)
     throw new Error(`bun install failed in ${store.dir}: ${run.error?.message ?? `exit ${String(run.status)}`}`);
-  writeFileSync(join(store.dir, 'node_modules', '.metro-installed'), `${new Date().toISOString()}\n`);
+  writeFileSync(marker, `${new Date().toISOString()}\n`);
   return true;
 }
 

package/runtime/node_modules/@metro-labs/whatsapp/src/actions.ts

@@ -8,7 +8,7 @@ import {
   type StationHandler,
 } from '@metro-labs/core/stations/station-runtime';
 import { messagingAliases } from '@metro-labs/core/stations/messaging-normalize';
-import { accountFor, accounts, targetOf } from './accounts.js';
+import { accountFor, accounts, lineOf, targetOf } from './accounts.js';
 import { phoneNumberOf, senderLookup } from './resolve.js';
 import { assertImage, fieldsOf, parseProfileChange, type ProfileApplied } from '@metro-labs/core/stations/profile';
 import type { WAClient } from './client.js';
@@ -117,6 +117,35 @@ function makeSend(clientFor: ClientFor): StationHandler {
   };
 }
 
+function makeRead(clientFor: ClientFor): StationHandler {
+  return async (id, args) => {
+    const { accountId, client, jid } = resolve(args, clientFor);
+    const page = await guard(() => client.read(jid, {
+      limit: typeof args.limit === 'number' ? args.limit : undefined,
+      before: str(args.before),
+      since: str(args.since),
+    }));
+    const messages = page.messages.map((row) => ({
+      id: row.messageId,
+      ts: row.timestamp,
+      ...(row.senderJid ? { from: lineOf(accountId, `user/${row.senderJid}`) } : {}),
+      self: row.fromMe,
+      text: row.text,
+      ...(row.truncated ? { truncated: true } : {}),
+      ...(row.attachments ? { attachments: row.attachments } : {}),
+    }));
+    respond(id, { result: { ...page, line: lineOf(accountId, jid), account: accountId, messages } });
+  };
+}
+
+function makeListMembers(clientFor: ClientFor): StationHandler {
+  return async (id, args) => {
+    const { client, jid } = resolve({ line: args.line }, clientFor);
+    const result = await guard(() => client.listMembers(jid, typeof args.limit === 'number' ? args.limit : undefined));
+    respond(id, { result });
+  };
+}
+
 function makeReact(clientFor: ClientFor): StationHandler {
   return async (id, args) => {
     const { accountId, client, jid } = resolve(args, clientFor);
@@ -208,6 +237,8 @@ export function makeHandleCall(
     handlers: {
       accounts: makeAccounts(clientFor),
       send: makeSend(clientFor),
+      read: makeRead(clientFor),
+      listMembers: makeListMembers(clientFor),
       react: makeReact(clientFor),
       typing: makeTyping(clientFor),
       edit: makeEdit(clientFor),

package/runtime/node_modules/@metro-labs/whatsapp/src/app-state.ts

@@ -0,0 +1,49 @@
+import { errMsg, log } from '@metro-labs/core/log';
+import { isPnUser, isLidUser, makeEventBuffer, processSyncAction, type BaileysEventEmitter, type Contact } from 'baileys';
+import type { History } from './history.js';
+import { baileysLogger } from './logger.js';
+
+interface AppStateHooks {
+  history: History;
+  current(): boolean;
+}
+
+export function supportsHistoryDeletion(processAction = processSyncAction): boolean {
+  const ev = makeEventBuffer(baileysLogger('history-support'));
+  const id = 'history-support@g.us';
+  const messageRange = { lastMessageTimestamp: 1 };
+  let received = 0;
+  ev.on('chats.clear', (event) => {
+    if (event.id === id && event.messageRange === messageRange) received++;
+  });
+  try {
+    for (const initial of [false, true]) {
+      for (const type of ['clearChat', 'deleteChat']) {
+        const value = type === 'clearChat' ? { clearChatAction: { messageRange } } : { deleteChatAction: { messageRange } };
+        const before = received;
+        processAction({ index: [type, id], syncAction: { value } }, ev, { id }, initial ? { accountSettings: { unarchiveChats: false } } : undefined);
+        if (received !== before + 1) return false;
+      }
+    }
+    return true;
+  } catch (err) {
+    log.warn({ err: errMsg(err) }, 'whatsapp: local history deletion support check failed');
+    return false;
+  }
+}
+
+export function noteHistoryContact(history: History, contact: Partial<Contact>): void {
+  const pn = contact.phoneNumber ?? (isPnUser(contact.id) ? contact.id : undefined);
+  const lid = contact.lid ?? (isLidUser(contact.id) ? contact.id : undefined);
+  if (pn && lid) history.alias(pn, lid);
+}
+
+export function bindAppState(ev: BaileysEventEmitter, hooks: AppStateHooks): void {
+  ev.on('lid-mapping.update', ({ pn, lid }) => {
+    if (hooks.current()) hooks.history.alias(pn, lid);
+  });
+  ev.on('chats.clear', ({ id, messageRange }) => {
+    if (!hooks.current()) return;
+    hooks.history.clearRange(id, messageRange ?? {});
+  });
+}