@tomflow/chatloop-extension 0.3.29 → 0.3.33

package/lib/session-file.mjs

@@ -0,0 +1,74 @@
+// Single-Mac durable session pointer. Extension Worker is the only admission/sending authority.
+// This file is a checked, minimal projection, not a second executor or task engine.
+import {openSync,closeSync,readFileSync,writeFileSync,renameSync,unlinkSync,lstatSync,existsSync,mkdirSync} from 'node:fs';
+import {homedir} from 'node:os';
+import {join,dirname} from 'node:path';
+import {randomUUID} from 'node:crypto';
+
+const ID=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const CHAT=/^[0-9a-f-]{12,}$/i;
+const PROJECT=/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;
+const PHASE=new Set(['STARTING','RESERVED','PENDING','WAITING_REPLY','WAITING_INTERVAL','DONE','BLOCKED','WALL_CLOCK_HOLD']);
+const fail=code=>Object.assign(Error(code),{code});
+export const sessionPath=()=>join(homedir(),'.chat-loop','session','active-session.json');
+const ensurePrivate=dir=>{
+  if(!existsSync(dir))mkdirSync(dir,{recursive:true,mode:0o700});
+  const st=lstatSync(dir);
+  if(!st.isDirectory()||st.isSymbolicLink()||(process.getuid&&st.uid!==process.getuid())||
+    (process.platform!=='win32'&&(st.mode&0o077)))throw fail('SESSION_DIRECTORY_UNTRUSTED');
+};
+const validate=r=>{
+  if(!r||typeof r!=='object'||Array.isArray(r)||
+    !ID.test(r.sessionId||'')||!PROJECT.test(r.projectId||'')||
+    !PHASE.has(r.phase)||!Number.isSafeInteger(r.generation)||r.generation<0||
+    !Number.isSafeInteger(r.updatedAt)||r.updatedAt<=0)
+    throw fail('SESSION_INVALID');
+  if(r.activeChatId!==null&&(typeof r.activeChatId!=='string'||!CHAT.test(r.activeChatId)))
+    throw fail('SESSION_CHAT_INVALID');
+  if(r.activeChatUrl!==null&&(typeof r.activeChatUrl!=='string'
+    || !/^https:\/\/chatgpt\.com\/(?:c\/[0-9a-f-]{12,}|g\/[^/]+\/c\/[0-9a-f-]{12,})$/i.test(r.activeChatUrl)))
+    throw fail('SESSION_CHAT_INVALID');
+  if((r.activeChatId===null)!==(r.activeChatUrl===null))
+    throw fail('SESSION_CHAT_INVALID');
+  if(r.activeChatUrl!==null&&!r.activeChatUrl.endsWith('/'+r.activeChatId))
+    throw fail('SESSION_CHAT_INVALID');
+  if(r.activeChatId===null&&r.phase==='WAITING_REPLY')throw fail('SESSION_CHAT_INVALID');
+  const keys=['sessionId','projectId','phase','generation','activeChatId','activeChatUrl','updatedAt'];
+  if(Object.keys(r).some(k=>!keys.includes(k)))throw fail('SESSION_EXTRA_FIELDS');
+  return Object.fromEntries(keys.map(k=>[k,r[k]]));
+};
+export function readSession(){
+  const file=sessionPath();
+  if(!existsSync(file))return null;
+  ensurePrivate(dirname(file));
+  const st=lstatSync(file);
+  if(!st.isFile()||st.isSymbolicLink()||(process.getuid&&st.uid!==process.getuid())
+    ||(process.platform!=='win32'&&(st.mode&0o077)))throw fail('SESSION_FILE_UNTRUSTED');
+  try{return validate(JSON.parse(readFileSync(file,'utf8')));}
+  catch(e){if(e.code)throw e;throw fail('SESSION_FILE_CORRUPT');}
+}
+export function writeSession(input){
+  const next=validate(input),file=sessionPath(),dir=dirname(file),lock=file+'.lock';
+  ensurePrivate(dir);
+  let fd;
+  try{fd=openSync(lock,'wx',0o600);}catch{throw fail('SESSION_CONCURRENT_UPDATE');}
+  try{
+    const old=readSession();
+    if(old&&old.sessionId!==next.sessionId&&old.phase!=='DONE')
+      throw fail('SESSION_ALREADY_ACTIVE');
+    if(old&&old.sessionId===next.sessionId){
+      if(next.generation<old.generation)throw fail('SESSION_STALE_GENERATION');
+      if(old.phase==='DONE'&&next.phase!=='DONE'||old.phase==='BLOCKED'
+        && !['BLOCKED','DONE'].includes(next.phase))
+        throw fail('SESSION_TERMINAL_LOCKED');
+      if(old.activeChatId!==null&&next.generation===old.generation&&
+        next.activeChatId!==null&&old.activeChatId!==next.activeChatId)
+        throw fail('SESSION_CHAT_CHANGED_WITHOUT_HANDOFF');
+    }
+    const temp=join(dir,'.active-session-'+randomUUID()+'.tmp');
+    try{writeFileSync(temp,JSON.stringify(next,null,2)+'\n',{flag:'wx',mode:0o600});
+      renameSync(temp,file);
+    }catch(e){try{unlinkSync(temp);}catch{}throw e;}
+    return next;
+  }finally{closeSync(fd);unlinkSync(lock);}
+}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@tomflow/chatloop-extension",
-  "version": "0.3.29",
+  "version": "0.3.33",
   "type": "module",
-  "description": "Chat Loop Extension package: six formal Action pages and its own native CLI bridge",
+  "description": "Chat Loop Extension package: nine formal Action pages and its own native CLI bridge",
   "bin": {
     "chatloop-extension": "bin/cli.mjs",
     "chat-loop-browser": "bin/cli.mjs"