@threadbase-sh/streamer 1.55.4 → 1.57.0

package/dist/index.d.cts

@@ -145,6 +145,11 @@ declare const FEATURE_FLAGS: readonly [{
     readonly description: string;
     readonly default: false;
     readonly env: "THREADBASE_FEATURE_LIVE_ACTIVITY_PUSH";
+}, {
+    readonly id: "e2ee";
+    readonly description: string;
+    readonly default: false;
+    readonly env: "THREADBASE_FEATURE_E2EE";
 }, {
     readonly id: "ptyHost";
     readonly description: string;

package/dist/index.d.ts

@@ -145,6 +145,11 @@ declare const FEATURE_FLAGS: readonly [{
     readonly description: string;
     readonly default: false;
     readonly env: "THREADBASE_FEATURE_LIVE_ACTIVITY_PUSH";
+}, {
+    readonly id: "e2ee";
+    readonly description: string;
+    readonly default: false;
+    readonly env: "THREADBASE_FEATURE_E2EE";
 }, {
     readonly id: "ptyHost";
     readonly description: string;

package/dist/index.js

@@ -464,6 +464,12 @@ var FEATURE_FLAGS = [
     default: false,
     env: "THREADBASE_FEATURE_LIVE_ACTIVITY_PUSH"
   },
+  {
+    id: "e2ee",
+    description: "Application-layer encryption between a paired device and this server, independent of TLS, so a tunnel or a LAN observer on the path carries ciphertext. Off by default: it is negotiated per device, never forced, because released mobile builds cannot be force-updated and a server that demanded it would break every one of them.",
+    default: false,
+    env: "THREADBASE_FEATURE_E2EE"
+  },
   {
     id: "ptyHost",
     description: "Keep live PTYs in a separate host process so a streamer restart can reconnect without restarting the agents. Off by default until cross-platform behavior is qualified.",
@@ -5734,6 +5740,25 @@ function describePushCapability(liveActivityEnabled, env = process.env) {
     liveActivityReason: describeMissingApnsCredentials(env) ?? "APNs credentials are set but the push token store is unavailable, so Live Activity push is disabled."
   };
 }
+var E2EE_PROTOCOL_VERSION = 1;
+var E2EE_SUPPORTED = false;
+function describeE2eeCapability(flagEnabled) {
+  const enabled = E2EE_SUPPORTED && flagEnabled;
+  const base = {
+    supported: E2EE_SUPPORTED,
+    enabled,
+    version: E2EE_PROTOCOL_VERSION,
+    required: false
+  };
+  if (enabled) return base;
+  return {
+    ...base,
+    // Always says why, including when `supported` is false. An operator who set
+    // the flag and saw nothing happen has exactly one question, and a field that
+    // goes absent in the case they hit is the field not answering it.
+    reason: E2EE_SUPPORTED ? "disabled by the e2ee feature flag \u2014 set THREADBASE_FEATURE_E2EE=1, --feature e2ee=true, or feature_flags: in server.yaml" : "this build carries the capability negotiation but not yet the handshake it gates"
+  };
+}
 var identityKeyFailureLogged = false;
 function describeServerIdentityKey() {
   try {
@@ -5788,7 +5813,11 @@ var createMiscRoutes = (deps) => {
       // learn it without re-scanning. Additive: absent means a server with no
       // readable identity key, which a client must read as "cannot verify this
       // server" — never as a reason to fail the rest of this response.
-      serverIdentityKey: describeServerIdentityKey()
+      serverIdentityKey: describeServerIdentityKey(),
+      // Whether to encrypt to this server. Additive, same contract as `push`:
+      // absent means an older server, which a client must read as "unknown" and
+      // resolve as today's plaintext path — never as a reason to fail.
+      e2ee: describeE2eeCapability(deps.featureFlagsConfig().values.e2ee)
     });
   });
   app.get("/api/profiles", (c) => c.json([]));
@@ -8242,6 +8271,7 @@ function readBody2(req) {
 // src/api/handlers/conversations.handlers.ts
 var SEARCH_OVERFETCH = 4;
 var SEARCH_MAX_SCAN = 1e3;
+var MAX_BYTES_CEILING = 32 * 1024 * 1024;
 var ConversationHandlers = class {
   constructor(deps) {
     this.deps = deps;
@@ -8647,7 +8677,7 @@ var ConversationHandlers = class {
     const total = filtered.length;
     const hasAnchor = url.searchParams.has("anchor_index");
     const hasAfter = url.searchParams.has("after_index");
-    const usePaging = url.searchParams.has("msg_limit") || url.searchParams.has("before_index") || hasAnchor || hasAfter;
+    const usePaging = url.searchParams.has("msg_limit") || url.searchParams.has("before_index") || url.searchParams.has("max_bytes") || hasAnchor || hasAfter;
     let slice = filtered;
     let fromIdx = 0;
     let messagePagination;
@@ -8769,6 +8799,28 @@ var ConversationHandlers = class {
         content
       };
     });
+    const requestedMaxBytes = intParam(url, "max_bytes", 0);
+    if (requestedMaxBytes > 0 && messagesPayload.length > 0) {
+      const budget = Math.min(requestedMaxBytes, MAX_BYTES_CEILING);
+      let used = 0;
+      let firstKept = messagesPayload.length - 1;
+      for (let i = messagesPayload.length - 1; i >= 0; i--) {
+        const size = Buffer.byteLength(JSON.stringify(messagesPayload[i]));
+        if (i < messagesPayload.length - 1 && used + size > budget) break;
+        used += size;
+        firstKept = i;
+      }
+      if (firstKept > 0) {
+        messagesPayload.splice(0, firstKept);
+        if (messagePagination) {
+          const newFrom = fromIdx + firstKept;
+          messagePagination.from_index = newFrom;
+          messagePagination.has_more_older = newFrom > 0;
+          messagePagination.next_before_index = newFrom > 0 ? newFrom : null;
+        }
+      }
+      if (messagePagination) messagePagination.served_bytes = used;
+    }
     const conv = conversation;
     const cachedConvMeta = this.cache?.getMetaById(id);
     const convProvider = coerceProviderForRunner(conv.provider ?? cachedConvMeta?.provider);