@workerdeck/server 2.10.0 → 2.12.0

package/build/index.d.mts

@@ -1,7 +1,7 @@
 import { IncomingMessage, Server, ServerResponse } from "node:http";
 import { AttachmentInput, BridgeAnswer, BrowserBridgeExecutor, ClaudeAuthProbe, CostLedgerState, EngineAdapter, EngineSessionOptions, HostToolDefinition, LanguageModel, McpConnection, ParkedExecution, Runner, RunnerSnapshot, SessionRunnerConfig, ToolExecutionCall, ToolExecutionResult, ToolExecutor, ToolSet } from "@workerdeck/core";
 import { JobQueue, QueueAdapter } from "@workerdeck/queue";
-import { ByModel, CreateSessionRequest, JobEvent, MessageAttachment, ProfileEngine, ProfileInfo, ProfileSpend, ProfileUsage, ProviderConfig, SdkSessionSummary, ServerFrame, SessionCapability, SessionInfo, SessionNotification, SessionWebhookConfig } from "@workerdeck/protocol";
+import { ByModel, CreateSessionRequest, JobEvent, MessageAttachment, ModelRate, ProfileEngine, ProfileInfo, ProfileSpend, ProfileUsage, ProviderConfig, SdkSessionSummary, ServerFrame, SessionCapability, SessionInfo, SessionNotification, SessionWebhookConfig } from "@workerdeck/protocol";
 //#region src/services/bridge.d.ts
 type BridgeHubOptions = {
   timeoutMs?: number;
@@ -139,6 +139,14 @@ declare class SessionParkManager {
   close(): void;
 }
 //#endregion
+//#region src/services/peers.d.ts
+type PeerServiceOptions = {
+  enabled?: boolean;
+  maxMessageChars?: number;
+  perMinute?: number;
+  maxHops?: number;
+};
+//#endregion
 //#region src/services/profile-store.d.ts
 type ProfileStore = {
   list(): ProfileInfo[] | Promise<ProfileInfo[]>;
@@ -223,6 +231,7 @@ type WorkerServerOptions = {
   requireAvailableProfile?: boolean;
   listSdkSessions?: SdkSessionLister;
   queue?: QueueServerOptions;
+  peers?: PeerServiceOptions;
   notifications?: SessionNotificationOptions;
   bridge?: BridgeHubOptions;
   parking?: {
@@ -232,6 +241,9 @@ type WorkerServerOptions = {
     persistLive?: boolean;
     onError?: (error: unknown, context: ParkErrorContext) => void;
   };
+  pricing?: {
+    overrides?: Record<string, ModelRate>;
+  };
   spend?: {
     store?: SpendStore;
     monthlySubscriptionUsd?: Record<string, number>;

package/build/index.mjs

@@ -1,8 +1,8 @@
 import { createServer } from "node:http";
 import { WebSocketServer } from "ws";
-import { BrowserBridgeExecutor, SessionRunner, attachmentKind, checkClaudeAuth, createEngineSession, getEngineAdapter, normalizeMediaType } from "@workerdeck/core";
+import { BrowserBridgeExecutor, PEER_MESSAGE_MAX_CHARS, PEER_RECENT_DEFAULT, PEER_RECENT_MAX, SessionRunner, attachmentKind, checkClaudeAuth, createEngineSession, getEngineAdapter, installPeerDirectory, isSlashCommand, normalizeMediaType, peerDirectoryHandle, peerSummary, recentLines } from "@workerdeck/core";
 import { JobQueue } from "@workerdeck/queue";
-import { ENGINE_CAPABILITIES, PROTOCOL_VERSION, SHELL_COMMAND_MAX, costOfByModel, imagePartRef, isJobRun, mergeByModel, sessionState, subscriptionComparison, supportsPermissionMode } from "@workerdeck/protocol";
+import { ENGINE_CAPABILITIES, PEER_MENTION_MAX, PROTOCOL_VERSION, SHELL_COMMAND_MAX, costOfByModel, imagePartRef, isJobRun, mergeByModel, peerMentionKey, peerMentionSlug, scanPeerMentions, sessionState, setPricingOverrides, subscriptionComparison, supportsPermissionMode } from "@workerdeck/protocol";
 import { createHash, randomUUID } from "node:crypto";
 import { closeSync, constants, createReadStream, existsSync, fstatSync, ftruncateSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { constants as constants$1, homedir } from "node:os";
@@ -1027,7 +1027,8 @@ const EPHEMERAL_CONFIG_KEYS = [
 	"queryFn",
 	"historyFn",
 	"extraOptions",
-	"env"
+	"env",
+	"peers"
 ];
 function toDurableRecord(record) {
 	const config = { ...record.config };
@@ -1290,6 +1291,7 @@ const PROJECT_FILE = ".workerdeck.json";
 const MAX_PROJECT_FILE_BYTES = 65536;
 const MAX_NAME_CHARS = 80;
 const GLYPH_RE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
+const SHORTCODE_RE = /^[A-Z0-9]{2,5}$/;
 const DEFAULT_TTL_MS = 3e4;
 const SWEEP_ABOVE = 256;
 var ProjectInfoService = class {
@@ -1361,15 +1363,20 @@ function tryLoad(file, root) {
 	const raw = parsed;
 	const name = typeof raw.name === "string" && raw.name.trim() ? raw.name.trim().slice(0, MAX_NAME_CHARS) : basename(root);
 	const icon = classifyIcon(raw.icon, root);
+	const shortcode = classifyShortcode(raw.shortcode);
 	return {
 		project: {
 			name,
 			root,
-			...icon ? { icon: icon.wire } : {}
+			...icon ? { icon: icon.wire } : {},
+			...shortcode ? { shortcode } : {}
 		},
 		...icon?.resolved ? { icon: icon.resolved } : {}
 	};
 }
+function classifyShortcode(value) {
+	return typeof value === "string" && SHORTCODE_RE.test(value) ? value : void 0;
+}
 function classifyIcon(value, root) {
 	if (typeof value !== "string") return;
 	const declared = value.trim();
@@ -1806,7 +1813,8 @@ function attachClient(ctx, ws, runner, req, access) {
 		protocolVersion: PROTOCOL_VERSION,
 		session: ctx.projects.withProject(runner.info()),
 		replayingFrom: afterSeq,
-		...shellPermitted(ctx.shell, runner, access.operator) ? { shell: true } : {}
+		...shellPermitted(ctx.shell, runner, access.operator) ? { shell: true } : {},
+		...ctx.pricingOverrides ? { pricingOverrides: ctx.pricingOverrides } : {}
 	});
 	const unsubscribe = runner.subscribe((event) => send({
 		type: "event",
@@ -1846,13 +1854,15 @@ async function handleCommand(ctx, frame, runner, access) {
 	const { attachmentStore, bridge } = ctx;
 	switch (frame.type) {
 		case "user_message": {
+			const mentions = ctx.peers && !isSlashCommand(frame.text) ? await ctx.peers.mentions(runner.id, frame.text).catch(() => []) : [];
+			const options = mentions.length > 0 ? { mentions } : void 0;
 			if (!frame.attachmentIds?.length) {
-				runner.sendMessage(frame.text);
+				runner.sendMessage(frame.text, void 0, options);
 				return;
 			}
 			const resolved = attachmentStore.resolve(runner.id, frame.attachmentIds);
 			if (!resolved.ok) throw new Error(`unknown attachment(s): ${resolved.missing.join(", ")}`);
-			runner.sendMessage(frame.text, resolved.attachments);
+			runner.sendMessage(frame.text, resolved.attachments, options);
 			return;
 		}
 		case "permission_decision":
@@ -3030,6 +3040,182 @@ function createFileSpendStore(path, onError) {
 	};
 }
 //#endregion
+//#region src/services/peers.ts
+const DEFAULT_PER_MINUTE = 10;
+const DEFAULT_MAX_HOPS = 12;
+const WINDOW_MS = 6e4;
+function visible(from, to) {
+	return to.id !== from.id && scopeMatches(from.scope, to.scope);
+}
+function createPeerService(deps) {
+	const perMinute = deps.options?.perMinute ?? DEFAULT_PER_MINUTE;
+	const maxChars = deps.options?.maxMessageChars ?? PEER_MESSAGE_MAX_CHARS;
+	const maxHops = deps.options?.maxHops ?? DEFAULT_MAX_HOPS;
+	const sent = /* @__PURE__ */ new Map();
+	const inbound = /* @__PURE__ */ new Map();
+	const registry = () => {
+		const found = deps.refs.registry;
+		if (!found) throw new Error("peer messaging is not ready");
+		return found;
+	};
+	const allSessions = async () => {
+		const live = registry().list();
+		const dormant = await deps.refs.parking?.listInfo() ?? [];
+		return [...live, ...dormant].map((info) => deps.projects.withProject(info));
+	};
+	const infoOf = async (id) => {
+		const live = registry().get(id)?.info();
+		if (live) return deps.projects.withProject(live);
+		const record = await deps.refs.parking?.get(id);
+		return record ? deps.projects.withProject(record.info) : void 0;
+	};
+	const sender = async (from) => {
+		const info = await infoOf(from);
+		if (!info) throw new Error(`unknown sender session: ${from}`);
+		return info;
+	};
+	const underRateLimit = (from, to) => {
+		const key = `${from}->${to}`;
+		const now = Date.now();
+		const recent = (sent.get(key) ?? []).filter((at) => now - at < WINDOW_MS);
+		if (recent.length >= perMinute) {
+			sent.set(key, recent);
+			return false;
+		}
+		recent.push(now);
+		sent.set(key, recent);
+		return true;
+	};
+	const list = async (from) => {
+		const me = await sender(from);
+		return (await allSessions()).filter((info) => visible(me, info)).sort((a, b) => (b.lastActivityAt ?? b.createdAt) - (a.lastActivityAt ?? a.createdAt)).map(peerSummary);
+	};
+	const peek = async (from, sessionId, options) => {
+		const me = await sender(from);
+		const info = await infoOf(sessionId);
+		if (!info || !visible(me, info)) return;
+		const limit = Math.min(Math.max(options?.recent ?? PEER_RECENT_DEFAULT, 0), PEER_RECENT_MAX);
+		const runner = registry().get(sessionId);
+		const events = [];
+		if (runner && limit > 0) runner.subscribe((event) => events.push(event), 0, {
+			truncateResults: true,
+			imageRefs: true
+		})();
+		return {
+			...peerSummary(info),
+			live: runner !== void 0,
+			checklist: info.checklist,
+			pendingApprovals: runner ? runner.pendingApprovals.map((request) => request.title ?? request.toolName) : [],
+			recent: recentLines(events, limit)
+		};
+	};
+	const send = async (from, sessionId, text, options) => {
+		const me = await sender(from);
+		if (sessionId === from) return {
+			delivered: false,
+			reason: "that is this session"
+		};
+		if (text.length > maxChars) return {
+			delivered: false,
+			reason: `message is ${text.length} characters; the limit is ${maxChars}. Write it to a file and send the path.`
+		};
+		const target = await infoOf(sessionId);
+		if (!target || !visible(me, target)) return {
+			delivered: false,
+			reason: `no such session: ${sessionId}`
+		};
+		if (target.status === "closed" || target.status === "failed") return {
+			delivered: false,
+			reason: `session ${sessionId} is ${target.status}`
+		};
+		const hops = [...options?.hops ?? inbound.get(from) ?? [], from];
+		if (hops.length > maxHops) return {
+			delivered: false,
+			reason: `${hops.length} messages have passed between sessions without a person speaking; stop and ask your user before continuing.`
+		};
+		if (!underRateLimit(from, sessionId)) return {
+			delivered: false,
+			reason: `rate limit: at most ${perMinute} messages a minute to one session. Batch what you have to say.`
+		};
+		const runner = await deps.refs.parking?.ensureLive(sessionId) ?? registry().get(sessionId);
+		if (!runner) return {
+			delivered: false,
+			reason: `session ${sessionId} could not be woken`
+		};
+		const before = runner.info().status;
+		const origin = {
+			kind: "peer",
+			sessionId: from,
+			name: me.title,
+			engine: me.engine,
+			hops
+		};
+		try {
+			runner.sendMessage(text, void 0, { origin });
+		} catch (error) {
+			return {
+				delivered: false,
+				reason: error instanceof Error ? error.message : String(error)
+			};
+		}
+		inbound.set(sessionId, hops);
+		return {
+			delivered: true,
+			sessionId,
+			name: target.title,
+			queued: before === "running" || before === "awaiting_approval"
+		};
+	};
+	const mentions = async (from, text) => {
+		const tokens = scanPeerMentions(text);
+		if (tokens.length === 0) return [];
+		const rows = await list(from);
+		const byKey = /* @__PURE__ */ new Map();
+		const add = (key, row) => {
+			const held = byKey.get(key);
+			if (held) held.push(row);
+			else byKey.set(key, [row]);
+		};
+		for (const row of rows) {
+			add(peerMentionKey(peerMentionSlug(row.title, row.id)), row);
+			add(peerMentionKey(row.id), row);
+		}
+		const resolved = [];
+		const seen = /* @__PURE__ */ new Set();
+		for (const token of tokens) {
+			const key = peerMentionKey(token.body);
+			const exact = byKey.get(key);
+			const matches = exact ?? (key.length >= 4 ? rows.filter((row) => row.id.startsWith(key)) : []);
+			const target = matches[0];
+			if (!target || matches.length > 1 && !exact) continue;
+			if (seen.has(target.id)) continue;
+			seen.add(target.id);
+			const others = matches.slice(1, 4).map((row) => row.id);
+			resolved.push({
+				typed: token.body,
+				id: target.id,
+				name: target.title,
+				engine: target.engine,
+				status: target.status,
+				cwd: target.cwd,
+				...others.length ? { ambiguousWith: others } : {}
+			});
+			if (resolved.length >= PEER_MENTION_MAX) break;
+		}
+		return resolved;
+	};
+	const watch = (runner) => runner.subscribe((event) => {
+		if (event.type === "user_message" && !event.origin && !event.synthetic && event.parentToolUseId == null && !event.replay) inbound.delete(runner.id);
+	}, runner.info().lastSeq);
+	return {
+		list,
+		peek,
+		send,
+		mentions,
+		watch
+	};
+}
+//#endregion
 //#region src/services/registry.ts
 var SessionRegistry = class {
 	#sessions = /* @__PURE__ */ new Map();
@@ -3209,7 +3395,11 @@ function createSessionFactory(deps) {
 			return engineOf(profile) === "claude" ? claudeSessionEnv(profile, process.env) : process.env;
 		}
 	};
-	const buildRunner = async (config, restore, id) => {
+	const buildRunner = async (built, restore, id) => {
+		const config = deps.peers ? {
+			...built,
+			peers: deps.peers
+		} : built;
 		const name = config.profile;
 		const profile = name !== void 0 ? profiles.get(name) : void 0;
 		if (name !== void 0 && !profile) throw new Error(`unknown profile: ${name}`);
@@ -3330,6 +3520,8 @@ function createWorkerServer(options = {}) {
 	const corsOrigins = options.cors?.origins.length ? new Set(options.cors.origins) : void 0;
 	const maxBodyBytes = options.maxBodyBytes ?? 1048576;
 	const adapterFor = (engine) => options.engines?.[engine ?? "claude"] ?? getEngineAdapter(engine);
+	const pricing = setPricingOverrides(options.pricing?.overrides);
+	if (pricing.dropped.length > 0) console.warn(`[workerdeck] Ignoring pricing.overrides for ${pricing.dropped.join(", ")}: each entry needs input, output, cacheWrite5m, cacheWrite1h and cacheRead in USD per million tokens`);
 	const profileDefaultModels = /* @__PURE__ */ new Map();
 	const profileUsage = new ProfileUsageTracker();
 	const spendLedger = new SpendLedger({
@@ -3375,6 +3567,13 @@ function createWorkerServer(options = {}) {
 		if (invalid) throw new Error(`createWorkerServer: ${invalid}`);
 	}
 	const refs = {};
+	const projects = new ProjectInfoService();
+	const peers = options.peers?.enabled === false ? void 0 : createPeerService({
+		refs,
+		projects,
+		options: options.peers
+	});
+	if (peers) installPeerDirectory(peers);
 	const factory = createSessionFactory({
 		adapterFor,
 		profiles,
@@ -3384,6 +3583,7 @@ function createWorkerServer(options = {}) {
 		disableBypassPermissions: options.disableBypassPermissions,
 		approvalTimeoutMs: options.approvalTimeoutMs,
 		requireApiKey: options.requireApiKey,
+		peers: peers ? peerDirectoryHandle() : void 0,
 		refs
 	});
 	const availability = new AvailabilityTracker({
@@ -3392,7 +3592,6 @@ function createWorkerServer(options = {}) {
 		adapterFor,
 		sessionEnvFor: factory.sessionEnvFor
 	});
-	const projects = new ProjectInfoService();
 	const notifier = new SessionNotifier({
 		...options.notifications,
 		decorateInfo: (info) => projects.withProject(info)
@@ -3405,7 +3604,8 @@ function createWorkerServer(options = {}) {
 			producedFiles.watch(runner),
 			profileUsage.watch(runner),
 			spendLedger.watch(runner),
-			shell?.watch(runner)
+			shell?.watch(runner),
+			peers?.watch(runner)
 		];
 		const profile = runner.info().profile;
 		if (profile) detachers.push(runner.subscribe((event) => {
@@ -3505,6 +3705,7 @@ function createWorkerServer(options = {}) {
 		factory,
 		registry,
 		parking,
+		peers,
 		bridge,
 		projects,
 		queue,
@@ -3514,7 +3715,8 @@ function createWorkerServer(options = {}) {
 		hostFilesWritable: options.hostFiles?.write === true,
 		maxHostFileBytes: options.hostFiles?.maxFileBytes ?? 1048576,
 		maxHostDirEntries: options.hostFiles?.maxEntries ?? 5e3,
-		shell
+		shell,
+		pricingOverrides: Object.keys(pricing.overrides).length > 0 ? pricing.overrides : void 0
 	};
 	const handleRequest = async (req, res) => {
 		const pathname = new URL(req.url ?? "/", "http://internal").pathname;