@tianshu-ai/tianshu 0.3.0

package/packages/server/dist/chat/messages.js

@@ -0,0 +1,341 @@
+// Per-tenant message persistence helpers.
+//
+// PR #21 implements the simplest possible "endless conversation" semantics
+// promised by ADR-0001 §5:
+//   - one active session per user at any time
+//   - all messages live forever in the messages table
+//   - compact / search_history come later
+//
+// Everything is synchronous (better-sqlite3) to keep the call sites
+// readable. Indexes on (user_id, status) and (session_id, created_at)
+// keep the hot paths fast.
+import { randomUUID } from "node:crypto";
+/**
+ * Create a fresh `kind="worker"` session, owned by the requesting
+ * user. Each task gets its own worker session so the message
+ * history is bounded to one task's worth of work — this lets the
+ * UI show "What did Worker X do for task T?" cleanly without a
+ * bunch of unrelated turns leaking in.
+ *
+ * `parentSessionId` is the `kind='user'` session that requested
+ * the worker (i.e. the orchestrator chat the user is talking to).
+ * It's stored so a future `/admin/sessions` view can render the
+ * worker session as a child of the user session.
+ */
+export function createWorkerSession(ctx, args) {
+    const id = `session_${randomUUID()}`;
+    const now = Date.now();
+    ctx.db
+        .prepare(`INSERT INTO sessions
+         (id, user_id, parent_id, status, kind, worker_role, title, created_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)
+        .run(id, args.userId, args.parentSessionId ?? null, "active", "worker", args.workerRole ?? null, args.title ?? null, now);
+    return {
+        id,
+        userId: args.userId,
+        parentId: args.parentSessionId ?? null,
+        status: "active",
+        kind: "worker",
+        title: args.title ?? null,
+        createdAt: now,
+    };
+}
+/** Mark a session archived (status='archived', ended_at=now). Used
+ *  when a worker session finishes so it doesn't keep showing up as
+ *  active in admin tooling. */
+export function archiveSession(ctx, sessionId) {
+    ctx.db
+        .prepare(`UPDATE sessions SET status = 'archived', ended_at = ? WHERE id = ?`)
+        .run(Date.now(), sessionId);
+}
+/** Look up the user's currently-active session, creating one on demand. */
+export function ensureActiveSession(ctx, userId) {
+    const existing = ctx.db
+        .prepare(`SELECT id, user_id, parent_id, status, kind, title, created_at
+       FROM sessions
+       WHERE user_id = ? AND status = 'active' AND kind = 'user'
+       ORDER BY created_at DESC
+       LIMIT 1`)
+        .get(userId);
+    if (existing) {
+        return rowToSession(existing);
+    }
+    const id = `session_${randomUUID()}`;
+    const now = Date.now();
+    ctx.db
+        .prepare(`INSERT INTO sessions (id, user_id, status, kind, created_at)
+       VALUES (?, ?, ?, ?, ?)`)
+        .run(id, userId, "active", "user", now);
+    return {
+        id,
+        userId,
+        parentId: null,
+        status: "active",
+        kind: "user",
+        title: null,
+        createdAt: now,
+    };
+}
+export function appendMessage(ctx, session, msg) {
+    const id = `msg_${randomUUID()}`;
+    const now = Date.now();
+    ctx.db
+        .prepare(`INSERT INTO messages (id, session_id, role, content, created_at)
+       VALUES (?, ?, ?, ?, ?)`)
+        .run(id, session.id, msg.role, msg.content, now);
+    return { id, sessionId: session.id, role: msg.role, content: msg.content, createdAt: now };
+}
+/**
+ * Persist a structured pi-ai Message (assistant w/ tool calls,
+ * toolResult, etc.). The full Message JSON goes into `content` and
+ * the row's role tracks the pi-ai role mapping (`toolResult` →
+ * `"tool"` so the existing role union covers it).
+ *
+ * Mirrors the closed-source repo's pattern of stuffing the entire
+ * AgentMessage JSON into a single column — keeps the schema simple
+ * and lets us re-hydrate the agent's exact message shape on resume.
+ */
+export function appendAgentMessage(ctx, session, msg) {
+    const id = `msg_${randomUUID()}`;
+    const now = Date.now();
+    const role = msg.role === "toolResult" ? "tool" : msg.role;
+    const content = JSON.stringify(msg);
+    ctx.db
+        .prepare(`INSERT INTO messages (id, session_id, role, content, created_at)
+       VALUES (?, ?, ?, ?, ?)`)
+        .run(id, session.id, role, content, now);
+    return { id, sessionId: session.id, role, content, createdAt: now };
+}
+/**
+ * Re-hydrate persisted rows into the structured pi-ai Message log
+ * the agent loop expects. Plain-text rows (role=user with non-JSON
+ * content, the legacy form) are upgraded into pi-ai UserMessage/
+ * AssistantMessage shells.
+ */
+/**
+ * Re-hydrate persisted rows from a SPECIFIC session into the
+ * structured pi-ai Message log. Use this for the LLM hot path so
+ * compacted (=archived) parent sessions don't bleed back into the
+ * agent's context. The wider `loadAgentHistory(userId)` overload
+ * exists for compatibility and now wraps this one against the
+ * user's active session.
+ */
+export function loadAgentHistoryForSession(ctx, sessionId, defaults) {
+    const rows = listMessagesForSession(ctx, sessionId);
+    const out = [];
+    for (const r of rows) {
+        const parsed = tryParseMessage(r.content);
+        if (parsed &&
+            (parsed.role === "user" ||
+                parsed.role === "assistant" ||
+                parsed.role === "toolResult")) {
+            out.push(parsed);
+            continue;
+        }
+        if (r.role === "user") {
+            out.push({
+                role: "user",
+                content: [{ type: "text", text: r.content }],
+                timestamp: r.createdAt,
+            });
+        }
+        else if (r.role === "assistant") {
+            out.push({
+                role: "assistant",
+                content: [{ type: "text", text: r.content }],
+                api: defaults.api,
+                provider: defaults.provider,
+                model: defaults.model,
+                usage: zeroUsage(),
+                stopReason: "stop",
+                timestamp: r.createdAt,
+            });
+        }
+    }
+    return { messages: out, rows };
+}
+export function loadAgentHistory(ctx, userId, defaults) {
+    const rows = listMessagesForUser(ctx, userId);
+    const out = [];
+    for (const r of rows) {
+        const parsed = tryParseMessage(r.content);
+        if (parsed && (parsed.role === "user" || parsed.role === "assistant" || parsed.role === "toolResult")) {
+            out.push(parsed);
+            continue;
+        }
+        // Legacy plain-text row (PR #21a and earlier).
+        if (r.role === "user") {
+            out.push({
+                role: "user",
+                content: [{ type: "text", text: r.content }],
+                timestamp: r.createdAt,
+            });
+        }
+        else if (r.role === "assistant") {
+            out.push({
+                role: "assistant",
+                content: [{ type: "text", text: r.content }],
+                api: defaults.api,
+                provider: defaults.provider,
+                model: defaults.model,
+                usage: zeroUsage(),
+                stopReason: "stop",
+                timestamp: r.createdAt,
+            });
+        }
+        // tool / system rows that aren't structured JSON are dropped —
+        // they predate persistence support and have nothing to replay.
+    }
+    return out;
+}
+function tryParseMessage(content) {
+    if (!content || content[0] !== "{")
+        return null;
+    try {
+        const obj = JSON.parse(content);
+        if (obj &&
+            typeof obj === "object" &&
+            typeof obj.role === "string" &&
+            (obj.role === "user" || obj.role === "assistant" || obj.role === "toolResult")) {
+            return obj;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+function zeroUsage() {
+    return {
+        input: 0,
+        output: 0,
+        cacheRead: 0,
+        cacheWrite: 0,
+        totalTokens: 0,
+        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
+    };
+}
+/** Return the user's full conversation, chronological. PR #21 keeps it simple. */
+/** Per-session, chronological. Used by the chat hot path (which
+ *  must not pull in messages from compacted parent sessions). */
+export function listMessagesForSession(ctx, sessionId) {
+    return ctx.db
+        .prepare(`SELECT id, session_id, role, content, created_at
+       FROM messages
+       WHERE session_id = ?
+       ORDER BY created_at ASC`)
+        .all(sessionId)
+        .map((r) => ({
+        id: r.id,
+        sessionId: r.session_id,
+        role: r.role,
+        content: r.content,
+        createdAt: r.created_at,
+    }));
+}
+export function listMessagesForUser(ctx, userId) {
+    return ctx.db
+        .prepare(`SELECT m.id, m.session_id, m.role, m.content, m.created_at
+       FROM messages m
+       JOIN sessions s ON m.session_id = s.id
+       WHERE s.user_id = ?
+       ORDER BY m.created_at ASC`)
+        .all(userId)
+        .map((r) => ({
+        id: r.id,
+        sessionId: r.session_id,
+        role: r.role,
+        content: r.content,
+        createdAt: r.created_at,
+    }));
+}
+/** Hard caps on page size. Server enforces; clients can request
+ *  smaller. The 500 ceiling is generous — most chat UIs render at
+ *  most ~50 at a time — but caps catastrophic misuse. */
+export const HISTORY_PAGE_DEFAULT = 100;
+export const HISTORY_PAGE_MAX = 500;
+/**
+ * Return the most recent `limit` messages for `userId`, optionally
+ * walking back from a `before` cursor (exclusive).
+ *
+ * The query trick: we sort DESC + LIMIT to pick the right slice,
+ * then reverse in JS so the public API stays oldest-first (the
+ * format the chat UI prepends / appends without re-sorting).
+ *
+ * `hasMore` is computed by asking for one extra row; if the DB
+ * returned `limit + 1`, there's more older content and we drop
+ * the spare. This is one round-trip with one index seek.
+ */
+export function listMessagesForUserPage(ctx, userId, opts = {}) {
+    const requested = Number.isFinite(opts.limit)
+        ? Math.max(1, Math.min(HISTORY_PAGE_MAX, Number(opts.limit)))
+        : HISTORY_PAGE_DEFAULT;
+    const probe = requested + 1;
+    // Resolve `before` to a (created_at, id) tuple so we can do a
+    // strict "older than" comparison that survives same-ms inserts.
+    // If `before` doesn't resolve to an existing row we ignore the
+    // cursor and return the latest page — stale ids come up when
+    // the user follows a deep link to a deleted message.
+    //
+    // Note we filter by `s.kind = 'user'` everywhere here. The chat
+    // UI is for the user's chat sessions only; worker sessions
+    // (kind='worker') belong to the workboard plugin's transcript
+    // surface and have their own viewer (`/tasks/:id/history`).
+    // Mixing them here used to surface empty assistant messages
+    // from worker LLM runs in the user's chat scrollback.
+    let cursor = null;
+    if (opts.before) {
+        const row = ctx.db
+            .prepare(`SELECT m.id, m.created_at FROM messages m
+         JOIN sessions s ON m.session_id = s.id
+         WHERE m.id = ? AND s.user_id = ? AND s.kind = 'user'`)
+            .get(opts.before, userId);
+        if (row)
+            cursor = { ts: row.created_at, id: row.id };
+    }
+    const rows = cursor
+        ? ctx.db
+            .prepare(`SELECT m.id, m.session_id, m.role, m.content, m.created_at
+           FROM messages m
+           JOIN sessions s ON m.session_id = s.id
+           WHERE s.user_id = ? AND s.kind = 'user'
+             AND (m.created_at < ?
+                  OR (m.created_at = ? AND m.id < ?))
+           ORDER BY m.created_at DESC, m.id DESC
+           LIMIT ?`)
+            .all(userId, cursor.ts, cursor.ts, cursor.id, probe)
+        : ctx.db
+            .prepare(`SELECT m.id, m.session_id, m.role, m.content, m.created_at
+           FROM messages m
+           JOIN sessions s ON m.session_id = s.id
+           WHERE s.user_id = ? AND s.kind = 'user'
+           ORDER BY m.created_at DESC, m.id DESC
+           LIMIT ?`)
+            .all(userId, probe);
+    const hasMore = rows.length > requested;
+    const sliced = hasMore ? rows.slice(0, requested) : rows;
+    // Public API returns oldest-first.
+    sliced.reverse();
+    return {
+        hasMore,
+        messages: sliced.map((r) => ({
+            id: r.id,
+            sessionId: r.session_id,
+            role: r.role,
+            content: r.content,
+            createdAt: r.created_at,
+        })),
+    };
+}
+function rowToSession(r) {
+    return {
+        id: r.id,
+        userId: r.user_id,
+        parentId: r.parent_id,
+        status: r.status,
+        kind: r.kind,
+        title: r.title,
+        createdAt: r.created_at,
+    };
+}
+//# sourceMappingURL=messages.js.map

package/packages/server/dist/chat/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/chat/messages.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,2EAA2E;AAC3E,2BAA2B;AAC3B,8CAA8C;AAC9C,sDAAsD;AACtD,0CAA0C;AAC1C,EAAE;AACF,oEAAoE;AACpE,sEAAsE;AACtE,2BAA2B;AAE3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA2BzC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAkB,EAClB,IAKC;IAED,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE;SACH,OAAO,CAIN;;uCAEiC,CAClC;SACA,GAAG,CACF,EAAE,EACF,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,eAAe,IAAI,IAAI,EAC5B,QAAQ,EACR,QAAQ,EACR,IAAI,CAAC,UAAU,IAAI,IAAI,EACvB,IAAI,CAAC,KAAK,IAAI,IAAI,EAClB,GAAG,CACJ,CAAC;IACJ,OAAO;QACL,EAAE;QACF,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;QACtC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;QACzB,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED;;+BAE+B;AAC/B,MAAM,UAAU,cAAc,CAC5B,GAAkB,EAClB,SAAiB;IAEjB,GAAG,CAAC,EAAE;SACH,OAAO,CACN,oEAAoE,CACrE;SACA,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;AAChC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,GAAkB,EAAE,MAAc;IACpE,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE;SACpB,OAAO,CAYN;;;;eAIS,CACV;SACA,GAAG,CAAC,MAAM,CAAC,CAAC;IACf,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE;SACH,OAAO,CACN;8BACwB,CACzB;SACA,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO;QACL,EAAE;QACF,MAAM;QACN,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAkB,EAClB,OAAoB,EACpB,GAAmD;IAEnD,MAAM,EAAE,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE;SACH,OAAO,CAIN;8BACwB,CACzB;SACA,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAkB,EAClB,OAAoB,EACpB,GAAuD;IAEvD,MAAM,EAAE,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GACR,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,GAAG,CAAC,EAAE;SACH,OAAO,CAIN;8BACwB,CACzB;SACA,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3C,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAkB,EAClB,SAAiB,EACjB,QAIC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1C,IACE,MAAM;YACN,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;gBACrB,MAAM,CAAC,IAAI,KAAK,WAAW;gBAC3B,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,EAC/B,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC5C,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC5C,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,KAAK,EAAE,SAAS,EAAE;gBAClB,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAkB,EAClB,MAAc,EACd,QAIC;IAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;YACtG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,+CAA+C;QAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC5C,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC5C,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,KAAK,EAAE,SAAS,EAAE;gBAClB,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QACD,+DAA+D;QAC/D,+DAA+D;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;QACtD,IACE,GAAG;YACH,OAAO,GAAG,KAAK,QAAQ;YACvB,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAC5B,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,EAC9E,CAAC;YACD,OAAO,GAAc,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO;QACL,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;QACZ,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,CAAC;QACd,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;KACrE,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF;iEACiE;AACjE,MAAM,UAAU,sBAAsB,CACpC,GAAkB,EAClB,SAAiB;IAEjB,OAAO,GAAG,CAAC,EAAE;SACV,OAAO,CAUN;;;+BAGyB,CAC1B;SACA,GAAG,CAAC,SAAS,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,IAAI,EAAE,CAAC,CAAC,IAA2B;QACnC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAkB,EAAE,MAAc;IACpE,OAAO,GAAG,CAAC,EAAE;SACV,OAAO,CAUN;;;;iCAI2B,CAC5B;SACA,GAAG,CAAC,MAAM,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,IAAI,EAAE,CAAC,CAAC,IAA2B;QACnC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;yDAEyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAUpC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAkB,EAClB,MAAc,EACd,OAA4C,EAAE;IAE9C,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,oBAAoB,CAAC;IACzB,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC;IAE5B,8DAA8D;IAC9D,gEAAgE;IAChE,+DAA+D;IAC/D,6DAA6D;IAC7D,qDAAqD;IACrD,EAAE;IACF,gEAAgE;IAChE,2DAA2D;IAC3D,8DAA8D;IAC9D,4DAA4D;IAC5D,4DAA4D;IAC5D,sDAAsD;IACtD,IAAI,MAAM,GAAsC,IAAI,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE;aACf,OAAO,CACN;;8DAEsD,CACvD;aACA,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG;YAAE,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM;QACjB,CAAC,CAAC,GAAG,CAAC,EAAE;aACH,OAAO,CAUN;;;;;;;mBAOS,CACV;aACA,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC;QACxD,CAAC,CAAC,GAAG,CAAC,EAAE;aACH,OAAO,CAUN;;;;;mBAKS,CACV;aACA,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,mCAAmC;IACnC,MAAM,CAAC,OAAO,EAAE,CAAC;IACjB,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,IAAI,EAAE,CAAC,CAAC,IAA2B;YACnC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,UAAU;SACxB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAQrB;IACC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,OAAO;QACjB,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,MAAM,EAAE,CAAC,CAAC,MAA+B;QACzC,IAAI,EAAE,CAAC,CAAC,IAA2B;QACnC,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC;AACJ,CAAC"}

package/packages/server/dist/chat/session-inbox.d.ts

@@ -0,0 +1,114 @@
+import type { TenantContext } from "../core/index.js";
+import type { InboxMessage, InboxMessageKind } from "@tianshu/plugin-sdk";
+/**
+ * Runs an inbox-driven background turn on an idle session. Wired
+ * by the host at startup via `bindIdleRunner` so this module
+ * stays free of `runPrompt` import (avoids a cycle:
+ * handler.ts → session-inbox.ts → handler.ts).
+ *
+ * Contract:
+ *   - Resolves *only after* the LLM turn has fully finished
+ *     (assistant message persisted, stream_end emitted).
+ *   - Throws on infrastructure errors so flushSessionInbox can
+ *     log them; LLM-internal errors (provider failure, etc.)
+ *     should already be surfaced via `stream_error` events from
+ *     the runner itself.
+ */
+export type IdleTurnRunner = (params: {
+    sessionId: string;
+    userId: string;
+    promptText: string;
+}) => Promise<void>;
+/**
+ * Host calls this once at startup to wire in the runner. We
+ * accept null to support test reset.
+ */
+export declare function bindIdleRunner(runner: IdleTurnRunner | null): void;
+export interface DeliveredMessage {
+    id: string;
+    createdAt: number;
+    message: InboxMessage;
+}
+/**
+ * Persist `message` for `targetSessionId` and arm a debounced
+ * flush to the live harness, if one is registered.
+ *
+ * We always write the DB row first so a process crash never
+ * loses a message — the `pending` row will be flushed on the
+ * next prompt regardless of what the live deliver does.
+ *
+ * The flush is debounced (FLUSH_DEBOUNCE_MS) and batched: when
+ * a parallel batch of tasks finishes within the window, the
+ * timer body drains ALL pending rows for the session and sends
+ * them as a single combined followUp. This is the difference
+ * between the agent seeing 4 separate "task done" prompts (and
+ * answering each in full) vs. one "4 tasks done" prompt it can
+ * acknowledge in one turn.
+ */
+export declare function enqueue(ctx: TenantContext, targetSessionId: string, message: InboxMessage): Promise<string>;
+/**
+ * Atomically pop all pending messages for a session, oldest
+ * first, marking them as delivered.
+ *
+ * Used by the prompt path (handler.ts) where the rendered text
+ * is appended verbatim to the user's message and the agent sees
+ * it for sure. The active-harness flush path uses
+ * `drainPendingTentative` + `markDelivered` instead so a failed
+ * `harness.followUp` doesn't lose the rows.
+ */
+export declare function drainPending(ctx: TenantContext, sessionId: string): DeliveredMessage[];
+/**
+ * Read pending rows WITHOUT marking them delivered. Caller is
+ * responsible for `markDelivered(ids)` after the side-effect
+ * (e.g. `harness.followUp`) is confirmed to have succeeded.
+ *
+ * If the side-effect throws and we never call markDelivered, the
+ * next flush picks the rows up again — nothing is lost.
+ *
+ * The previous implementation drained-and-marked atomically,
+ * which lost rows when followUp succeeded but the surrounding
+ * turn never actually emitted the user message (T4 reproducer
+ * 2026-06-12: row marked delivered, content never reached the
+ * agent). With tentative + confirm, the worst case is a row
+ * delivered twice; that's vastly preferable to silent loss.
+ */
+export declare function drainPendingTentative(ctx: TenantContext, sessionId: string): DeliveredMessage[];
+/**
+ * Scan a freshly-persisted user message text for inbox markers
+ * and mark each matched row delivered. Called by the handler
+ * when pi emits message_end for a `user` role row — that's the
+ * one event that proves pi has actually consumed a followUp.
+ *
+ * Markers are emitted by `renderForPrompt` as
+ *   <inbox kind="..." id="inbox_...">
+ */
+export declare function markDeliveredFromMessage(ctx: TenantContext, text: string): void;
+/**
+ * Mark the given rows delivered. Idempotent: re-marking a row
+ * already delivered is a no-op (the WHERE clause filters by
+ * status='pending').
+ */
+export declare function markDelivered(ctx: TenantContext, ids: string[]): void;
+/**
+ * Render a list of drained messages into a single text block
+ * suitable for prepending to the user's next prompt.
+ *
+ * Empty input ⇒ empty string (callers can `${rendered}${userText}`
+ * unconditionally).
+ *
+ * Format intentionally uses XML-ish tags so the LLM can tell
+ * "messages addressed to me while I was idle" apart from the
+ * user's own input. The tags carry the kind so the agent has a
+ * hint about what to do:
+ *   - `task_done` is informational; brief acknowledge.
+ *   - `task_intervention_required` (post-008) means a worker
+ *     hit a failure / timeout and the orchestrator NEEDS the
+ *     main agent to pick: task_continue, task_retry_fresh,
+ *     task_extend_timeout, or task_abort. Don't just
+ *     acknowledge — act.
+ *   - `task_stalled` is the legacy spelling of the above.
+ */
+export declare function renderForPrompt(messages: DeliveredMessage[]): string;
+/** Test-only convenience: surface kinds for assertions. */
+export declare const KNOWN_KINDS: readonly InboxMessageKind[];
+//# sourceMappingURL=session-inbox.d.ts.map

package/packages/server/dist/chat/session-inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-inbox.d.ts","sourceRoot":"","sources":["../../src/chat/session-inbox.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AA4D7B;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAIpB;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAElE;AAWD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,aAAa,EAClB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,CAsBjB;AA8JD;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,aAAa,EAClB,SAAS,EAAE,MAAM,GAChB,gBAAgB,EAAE,CAmBpB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,aAAa,EAClB,SAAS,EAAE,MAAM,GAChB,gBAAgB,EAAE,CASpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,GACX,IAAI,CASN;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EAAE,GACZ,IAAI,CAYN;AAYD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAiCpE;AAID,2DAA2D;AAC3D,eAAO,MAAM,WAAW,EAAE,SAAS,gBAAgB,EAKlD,CAAC"}