@undefineds.co/xpod 0.4.18 → 0.4.19

package/config/components-ignore.json

@@ -1,32 +1,20 @@
 [
   "ActivityEmitter",
-  "assertPublicProbeTarget",
-  "base64ByteLength",
   "BaseQuintStore",
   "ClaudeAuthenticationError",
   "CliCommandError",
   "CodeBuddyAuthError",
-  "createPinnedHeadProbeRequest",
-  "createPodOwnershipNodeAccessResolver",
   "DisabledSparqlFeatureError",
   "Error",
   "InvalidRelaySessionRequestError",
   "InvalidTunnelTokenError",
-  "isPublicIpAddress",
   "LEGACY_DERIVED_INDEX_CONSUMER_ID",
   "LOG_FILE_PATTERN",
   "NodeRouteSourceNotFoundError",
-  "normalizeContext",
   "Omit",
-  "P2P_DATA_PLANE_LIMITS",
-  "P2PDataPlaneAbortError",
-  "P2PDataPlaneLimitError",
   "P2PSessionExpiredError",
   "P2PSessionNotFoundError",
   "P2PSignalingRequestError",
-  "registerDeviceNotificationRuntime",
-  "resolveCurrentLogFile",
-  "resolveLogFilePattern",
   "SearchApiError",
   "SolidFsConflictError",
   "SolidFsNotFoundError",
@@ -35,5 +23,12 @@
   "UnsupportedSparqlQueryError",
   "VectorApiError",
   "WaitingRunnerError",
-  "XPOD_P2P_ACCEPT_HEADER"
+  "assertPublicProbeTarget",
+  "createPinnedHeadProbeRequest",
+  "createPodOwnershipNodeAccessResolver",
+  "isPublicIpAddress",
+  "normalizeContext",
+  "registerDeviceNotificationRuntime",
+  "resolveCurrentLogFile",
+  "resolveLogFilePattern"
 ]

package/dist/api/ai-gateway/pod/HostedPodRoute.d.ts

@@ -25,3 +25,10 @@ export declare function resolveHostedPodRoute(input: {
  * request stays bound to the URL the caller named.
  */
 export declare function createHostedPodRouteTransport(transport: typeof fetch, route: HostedPodRoute | undefined): Promise<typeof fetch>;
+/**
+ * Compiled single-file runtimes unpack their packages into a cache directory and resolve that
+ * archive themselves, so a bare specifier is not part of their module map: the import fails with
+ * `Cannot find module` and the AI gateway answers 500. The extracted package is a real file, so
+ * load it through its own URL when the specifier cannot be resolved.
+ */
+export declare function resolveStagedLocalRouteFetch(): string | undefined;

package/dist/api/ai-gateway/pod/HostedPodRoute.js

@@ -1,7 +1,34 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveHostedPodRoute = resolveHostedPodRoute;
 exports.createHostedPodRouteTransport = createHostedPodRouteTransport;
+exports.resolveStagedLocalRouteFetch = resolveStagedLocalRouteFetch;
+const node_fs_1 = require("node:fs");
+const path = __importStar(require("node:path"));
+const node_url_1 = require("node:url");
 const bootstrap_1 = require("../../../runtime/bootstrap");
 /**
  * The route that reaches this deployment's hosted Pods from inside the API sidecar.
@@ -42,6 +69,46 @@ async function importSolidLocalRouteFetch() {
     // The API runtime is CommonJS while solid-sdk is intentionally ESM-only. Keep the package
     // boundary and load the SDK without TypeScript lowering import() to require().
     const dynamicImport = new Function('specifier', 'return import(specifier)');
-    return dynamicImport('@undefineds.co/solid-sdk/local-route-fetch');
+    const specifier = '@undefineds.co/solid-sdk/local-route-fetch';
+    try {
+        return await dynamicImport(specifier);
+    }
+    catch (error) {
+        const staged = resolveStagedLocalRouteFetch();
+        if (!staged)
+            throw error;
+        return dynamicImport(staged);
+    }
+}
+/**
+ * Compiled single-file runtimes unpack their packages into a cache directory and resolve that
+ * archive themselves, so a bare specifier is not part of their module map: the import fails with
+ * `Cannot find module` and the AI gateway answers 500. The extracted package is a real file, so
+ * load it through its own URL when the specifier cannot be resolved.
+ */
+function resolveStagedLocalRouteFetch() {
+    const cacheRoot = process.env.XPOD_BUN_SINGLE_CACHE_DIR?.trim();
+    if (!cacheRoot)
+        return undefined;
+    const relative = path.join('node_modules', '@undefineds.co', 'solid-sdk', 'dist', 'local-route-fetch.js');
+    const candidates = [path.join(cacheRoot, relative)];
+    try {
+        for (const entry of (0, node_fs_1.readdirSync)(cacheRoot)) {
+            candidates.push(path.join(cacheRoot, entry, relative));
+        }
+    }
+    catch {
+        // A missing or unreadable cache root just means there is nothing to fall back to.
+    }
+    for (const candidate of candidates) {
+        try {
+            if ((0, node_fs_1.statSync)(candidate).isFile())
+                return (0, node_url_1.pathToFileURL)(candidate).href;
+        }
+        catch {
+            continue;
+        }
+    }
+    return undefined;
 }
 //# sourceMappingURL=HostedPodRoute.js.map

package/dist/api/chatkit/pod-store.js

@@ -714,6 +714,9 @@ class PodChatKitStore {
         return {
             id: record.id || '',
             task: record.task || undefined,
+            delivery: record.delivery || undefined,
+            trigger: record.trigger || undefined,
+            input: record.input || undefined,
             thread: record.thread || '',
             workspace: record.workspace || '',
             status: (record.status || 'queued'),
@@ -1246,6 +1249,12 @@ class PodChatKitStore {
             createdAt: new Date(item.created_at * 1000).toISOString(),
         };
         await db.insert(schema_1.Message).values(messageRecord);
+        // Chat membership is the authoritative wake roster. Task surfaces have no Chat
+        // roster and fail closed; message mentions and request metadata cannot grant it.
+        const chat = this.serverGroupReconcilerService && role === schema_1.MessageRole.USER && reconcilerOwner === 'server'
+            && resolvedThread.commandKind === 'chat'
+            ? await db.findById(schema_1.Chat, this.buildChatResourceId(resolvedThread.surfaceId))
+            : undefined;
         await this.reconcileGroupUserMessage({
             thread: resolvedThread.thread,
             triggerMessage: this.resolveDataResource(itemResourceId, context),
@@ -1254,6 +1263,7 @@ class PodChatKitStore {
             content,
             reconcilerOwner,
             mentions,
+            participants: (0, reconciler_1.normalizeAgentUris)(chat?.participants),
         });
         // Track this ID to avoid cache timing issues in saveItem
         this.recentlyCreatedIds.add(item.id);
@@ -1271,6 +1281,7 @@ class PodChatKitStore {
                 content: input.content,
                 reconcilerOwner: input.reconcilerOwner,
                 mentions: input.mentions,
+                participants: input.participants,
             });
         }
         catch (error) {
@@ -1461,6 +1472,9 @@ WHERE { ${deletePatterns.join(' ')} }
         const existing = await db.findById(schema_2.Run, run.id);
         const values = {
             task: run.task || null,
+            delivery: run.delivery || null,
+            trigger: run.trigger || null,
+            input: run.input || null,
             thread: run.thread,
             workspace: run.workspace,
             status: run.status,

package/dist/api/container/common.js

@@ -1,11 +1,12 @@
 "use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCommonServices = registerCommonServices;
+const MatrixEventJournal_1 = require("../matrix/MatrixEventJournal");
 /**
  * 共享服务注册
  *
  * cloud 和 local 模式都需要的服务
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerCommonServices = registerCommonServices;
 const awilix_1 = require("awilix");
 const node_crypto_1 = require("node:crypto");
 const global_logger_factory_1 = require("global-logger-factory");
@@ -575,9 +576,11 @@ function registerCommonServices(container) {
                 redisUrl: config.redisUrl,
             });
         }).singleton(),
-        matrixStore: (0, awilix_1.asFunction)(({ config, serverGroupReconcilerService }) => {
+        matrixStore: (0, awilix_1.asFunction)(({ config, db, ownerPodAccess, serverGroupReconcilerService }) => {
             return new matrix_1.PodMatrixStore({
                 serverGroupReconcilerService,
+                podAccess: ownerPodAccess,
+                journal: new MatrixEventJournal_1.SqlMatrixEventJournal(db),
                 serverName: (() => {
                     try {
                         return new URL(process.env.CSS_BASE_URL ?? '').host || undefined;

package/dist/api/container/routes.js

@@ -1,9 +1,4 @@
 "use strict";
-/**
- * 路由注册
- *
- * 根据容器中的服务注册 API 路由
- */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -31,6 +26,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerRoutes = registerRoutes;
 exports.resolveCloudSignalApiUrl = resolveCloudSignalApiUrl;
 exports.resolveLocalStorageProviderBaseUrl = resolveLocalStorageProviderBaseUrl;
+const MatrixPodResolver_1 = require("../matrix/MatrixPodResolver");
+const AgentWakeRuntimeService_1 = require("../reconciler/AgentWakeRuntimeService");
+const AgentWakeHandler_1 = require("../handlers/AgentWakeHandler");
 const EdgeNodeSignalHandler_1 = require("../handlers/EdgeNodeSignalHandler");
 const ReachabilityHandler_1 = require("../handlers/ReachabilityHandler");
 const NodeAccessResolver_1 = require("../../edge/reachability/NodeAccessResolver");
@@ -180,7 +178,12 @@ function registerSharedRoutes(container, server) {
     (0, ChatKitHandler_1.registerChatKitRoutes)(server, { chatKitService });
     (0, ChatKitV1Handler_1.registerChatKitV1Routes)(server, { store: chatKitStore });
     (0, RunHandler_1.registerRunRoutes)(server, { runStore: chatKitStore });
-    (0, MatrixHandler_1.registerMatrixRoutes)(server, { store: matrixStore });
+    const matrixPodResolver = (0, MatrixPodResolver_1.createMatrixPodResolver)(podLookupRepository);
+    (0, MatrixHandler_1.registerMatrixRoutes)(server, { store: matrixStore, resolvePodUrl: matrixPodResolver, baseUrl: process.env.CSS_BASE_URL });
+    (0, AgentWakeHandler_1.registerAgentWakeRoutes)(server, {
+        service: new AgentWakeRuntimeService_1.AgentWakeRuntimeService(container.resolve('serverGroupReconcilerService').getQueue(), matrixStore),
+        resolveContext: request => (0, MatrixPodResolver_1.resolveMatrixContext)(request, matrixPodResolver),
+    });
     (0, CoordinationHandler_1.registerCoordinationRoutes)(server, { clientReconcilerCoordinator });
     (0, InngestHandler_1.registerInngestRoutes)(server, {
         backend: runExecutionBackend,

package/dist/api/handlers/AgentWakeHandler.d.ts

@@ -0,0 +1,10 @@
+import type { ApiServer } from '../ApiServer';
+import type { AuthenticatedRequest } from '../middleware/AuthMiddleware';
+import type { MatrixStoreContext } from '../matrix/types';
+import type { AgentWakeRuntimeService } from '../reconciler/AgentWakeRuntimeService';
+export interface AgentWakeHandlerOptions {
+    service: AgentWakeRuntimeService;
+    resolveContext(request: AuthenticatedRequest): Promise<MatrixStoreContext>;
+}
+/** Xpod runtime contract; independent of the Matrix client-server route namespace. */
+export declare function registerAgentWakeRoutes(server: ApiServer, options: AgentWakeHandlerOptions): void;

package/dist/api/handlers/AgentWakeHandler.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAgentWakeRoutes = registerAgentWakeRoutes;
+const readBoundedRequestBody_1 = require("./readBoundedRequestBody");
+const MatrixError_1 = require("../matrix/MatrixError");
+/** Xpod runtime contract; independent of the Matrix client-server route namespace. */
+function registerAgentWakeRoutes(server, options) {
+    for (const operation of ['claim', 'renew', 'complete', 'fail']) {
+        server.post(`/v1/agent-wakes/${operation}`, async (request, response) => {
+            try {
+                const context = await options.resolveContext(request);
+                const body = await readBody(request);
+                validate(body, operation);
+                const result = await options.service[operation](body, context);
+                response.writeHead(200, { 'Content-Type': 'application/json' });
+                response.end(JSON.stringify(result));
+            }
+            catch (error) {
+                const known = error instanceof MatrixError_1.MatrixError;
+                response.writeHead(known ? error.status : 500, { 'Content-Type': 'application/json' });
+                response.end(JSON.stringify({
+                    errcode: known ? error.errcode : 'M_UNKNOWN',
+                    error: known ? error.message : 'Agent runtime request failed',
+                }));
+            }
+        });
+    }
+}
+async function readBody(request) {
+    const chunks = await (0, readBoundedRequestBody_1.readBoundedRequestBody)(request, 65_536, 'Request exceeds 64 KiB');
+    try {
+        const value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        if (!value || typeof value !== 'object' || Array.isArray(value)) {
+            throw new Error('object required');
+        }
+        return value;
+    }
+    catch {
+        throw new MatrixError_1.MatrixError(400, 'M_BAD_JSON', 'JSON object required');
+    }
+}
+function validate(body, operation) {
+    const required = ['roomId', 'agent', 'runtimeId', ...(operation === 'claim' ? [] : ['id', 'fencingToken'])];
+    for (const field of required) {
+        if (typeof body[field] !== 'string' || !body[field].trim() || body[field].length > (field === 'runtimeId' ? 128 : 4096)) {
+            throw new MatrixError_1.MatrixError(400, 'M_BAD_JSON', `${field} must be a non-empty bounded string`);
+        }
+    }
+    if (body.leaseMs !== undefined && (typeof body.leaseMs !== 'number' || !Number.isSafeInteger(body.leaseMs) || body.leaseMs < 1000 || body.leaseMs > 300_000)) {
+        throw new MatrixError_1.MatrixError(400, 'M_BAD_JSON', 'leaseMs must be between 1000 and 300000');
+    }
+    if (operation === 'complete' && (typeof body.body !== 'string' || !body.body.trim())) {
+        throw new MatrixError_1.MatrixError(400, 'M_BAD_JSON', 'Completion requires body');
+    }
+    if ((body.handoffTo !== undefined && (typeof body.handoffTo !== 'string' || !body.handoffTo.trim())) ||
+        (body.evidence !== undefined && (!Array.isArray(body.evidence) || body.evidence.length > 100 || body.evidence.some(item => typeof item !== 'string' || !item.trim()))) ||
+        (body.retry !== undefined && typeof body.retry !== 'boolean') ||
+        (body.error !== undefined && typeof body.error !== 'string')) {
+        throw new MatrixError_1.MatrixError(400, 'M_BAD_JSON', 'Invalid completion or failure fields');
+    }
+}
+//# sourceMappingURL=AgentWakeHandler.js.map

package/dist/api/handlers/AiGatewayManagementHandler.js

@@ -8,6 +8,7 @@ const GatewayPrincipal_1 = require("../ai-gateway/auth/GatewayPrincipal");
 const models_1 = require("../ai-gateway/models");
 const AiConnectionsServiceAccess_1 = require("../ai-gateway/service-access/AiConnectionsServiceAccess");
 const OwnerPodAccess_1 = require("../ai-gateway/pod/OwnerPodAccess");
+const PodAccessFailureResponse_1 = require("./PodAccessFailureResponse");
 const AiClientConfigurationService_1 = require("../service/AiClientConfigurationService");
 const errors_1 = require("../ai-gateway/errors");
 const EmbeddingModelPolicy_1 = require("../../ai/service/EmbeddingModelPolicy");
@@ -1248,6 +1249,12 @@ function normalizeStringList(value) {
     return [...new Set(value.map((item) => item.trim()))];
 }
 function sendCustomModelsError(response, error) {
+    // A Pod this caller cannot open has to answer with the code callers already act on
+    // (`service_access_missing`), not as an internal failure: the retry with the caller's own
+    // credential depends on reading it.
+    if ((0, PodAccessFailureResponse_1.sendPodAccessFailure)(response, error)) {
+        return;
+    }
     const message = error instanceof Error ? error.message : String(error);
     if (message === 'provider_not_available_in_deployment') {
         sendJson(response, 403, {
@@ -1292,6 +1299,12 @@ function sendCustomModelsError(response, error) {
     sendJson(response, 500, { error: 'Provider custom models update failed' });
 }
 function sendCredentialPoolError(response, error) {
+    // A Pod this caller cannot open has to answer with the code callers already act on
+    // (`service_access_missing`), not as an internal failure: the retry with the caller's own
+    // credential depends on reading it.
+    if ((0, PodAccessFailureResponse_1.sendPodAccessFailure)(response, error)) {
+        return;
+    }
     if (error instanceof errors_1.GatewayProtocolError) {
         const normalized = (0, errors_1.normalizeGatewayError)(error);
         sendJson(response, normalized.error.status, normalized);
@@ -1358,6 +1371,12 @@ function sendGatewayAccessKeyError(response, error) {
     sendJson(response, 500, { error: 'Gateway API Key operation failed' });
 }
 function sendLegacyProviderConnectError(response, error) {
+    // A Pod this caller cannot open has to answer with the code callers already act on
+    // (`service_access_missing`), not as an internal failure: the retry with the caller's own
+    // credential depends on reading it.
+    if ((0, PodAccessFailureResponse_1.sendPodAccessFailure)(response, error)) {
+        return;
+    }
     if (error instanceof errors_1.GatewayProtocolError) {
         const normalized = (0, errors_1.normalizeGatewayError)(error);
         sendJson(response, normalized.error.status, normalized);
@@ -1411,6 +1430,12 @@ function sendLegacyProviderConnectError(response, error) {
     sendJson(response, 500, { error: 'Provider Connect operation failed' });
 }
 function sendModelsError(response, error) {
+    // A Pod this caller cannot open has to answer with the code callers already act on
+    // (`service_access_missing`), not as an internal failure: the retry with the caller's own
+    // credential depends on reading it.
+    if ((0, PodAccessFailureResponse_1.sendPodAccessFailure)(response, error)) {
+        return;
+    }
     if (error instanceof models_1.ProviderModelsResponseError) {
         sendJson(response, 502, {
             error: 'provider_models_response_error',
@@ -1455,6 +1480,12 @@ function sendModelsError(response, error) {
     sendJson(response, 500, { error: 'Provider models lookup failed' });
 }
 function sendModelSelectionError(response, error) {
+    // A Pod this caller cannot open has to answer with the code callers already act on
+    // (`service_access_missing`), not as an internal failure: the retry with the caller's own
+    // credential depends on reading it.
+    if ((0, PodAccessFailureResponse_1.sendPodAccessFailure)(response, error)) {
+        return;
+    }
     if (error instanceof errors_1.GatewayProtocolError) {
         const normalized = (0, errors_1.normalizeGatewayError)(error);
         const details = safeModelSelectionErrorDetails(error.details);
@@ -1518,6 +1549,12 @@ function safeModelSelectionErrorDetails(details) {
     return publicSafeObject(details);
 }
 function sendQuotaError(response, error) {
+    // A Pod this caller cannot open has to answer with the code callers already act on
+    // (`service_access_missing`), not as an internal failure: the retry with the caller's own
+    // credential depends on reading it.
+    if ((0, PodAccessFailureResponse_1.sendPodAccessFailure)(response, error)) {
+        return;
+    }
     const message = error instanceof Error ? error.message : String(error);
     if (message === 'quota_credential_not_found') {
         sendJson(response, 404, { error: 'Provider credential not found for current identity' });
@@ -1672,6 +1709,12 @@ function publicConnectResult(value) {
         .map(([key, item]) => [key, publicConnectResult(item)]));
 }
 function sendAiConnectionsServiceAccessError(response, error) {
+    // A Pod this caller cannot open has to answer with the code callers already act on
+    // (`service_access_missing`), not as an internal failure: the retry with the caller's own
+    // credential depends on reading it.
+    if ((0, PodAccessFailureResponse_1.sendPodAccessFailure)(response, error)) {
+        return;
+    }
     if (error instanceof errors_1.GatewayProtocolError && error.status >= 400 && error.status < 500) {
         sendJson(response, error.status, {
             error: error.code,

package/dist/api/handlers/MatrixHandler.d.ts

@@ -2,6 +2,9 @@ import type { ApiServer } from '../ApiServer';
 import type { MatrixStore } from '../matrix/types';
 export interface MatrixHandlerOptions {
     store: MatrixStore;
+    baseUrl?: string;
+    /** Resolve and authorize the selected Pod from persisted ownership records. */
+    resolvePodUrl?: (webId: string, requestedPodUrl?: string) => Promise<string>;
 }
 /**
  * Register the Matrix Client-Server compatibility adapter.