@wrongstack/core 0.287.0 → 0.291.0

package/dist/hq/index.js

@@ -14,13 +14,21 @@ var KNOWN_HQ_CLIENT_FRAME_TYPES = /* @__PURE__ */ new Set([
   "client.command_poll",
   "client.command_ack"
 ]);
-var HQ_CLIENT_KINDS = /* @__PURE__ */ new Set(["tui", "repl", "webui", "cli", "unknown"]);
+var HQ_CLIENT_KINDS = /* @__PURE__ */ new Set([
+  "tui",
+  "repl",
+  "webui",
+  "cli",
+  "mailbox",
+  "unknown"
+]);
 var HQ_WORKSPACE_KINDS = /* @__PURE__ */ new Set(["git", "directory", "unknown"]);
 var HQ_CLIENT_CAPABILITIES = /* @__PURE__ */ new Set([
   "telemetry.publish",
   "session.summary",
   "fleet.summary",
   "mailbox.summary",
+  "mailbox.serve",
   "control.receive"
 ]);
 var HQ_COMMAND_ACK_STATUSES = /* @__PURE__ */ new Set([
@@ -832,6 +840,23 @@ function summarizeHqToolArgs(value, options = {}) {
   return summary;
 }
 
+// src/coordination/mailbox-types.ts
+var SESSION_RECIPIENT_PREFIX = "@session:";
+function sessionRecipient(sessionId) {
+  const normalizedSessionId = sessionId.trim();
+  if (!normalizedSessionId) {
+    throw new TypeError('sessionId is required for the "@session" recipient');
+  }
+  return `${SESSION_RECIPIENT_PREFIX}${normalizedSessionId}`;
+}
+function normalizeRecipient(to, sessionId) {
+  const trimmed = to.trim();
+  const normalized = trimmed.toLowerCase();
+  if (normalized === "all") return "*";
+  if (normalized === "@session") return sessionRecipient(sessionId ?? "");
+  return trimmed;
+}
+
 // src/hq/mailbox-mapper.ts
 function previewText(value, maxLength, policy) {
   if (value === void 0 || value.length === 0) return void 0;
@@ -845,6 +870,15 @@ function previewText(value, maxLength, policy) {
 function readCount(message) {
   return Object.keys(message.readBy).length;
 }
+function classifyMailboxRecipient(to) {
+  if (to === "*" || to === "all") return { scope: "project" };
+  if (to.startsWith(SESSION_RECIPIENT_PREFIX)) {
+    const recipientSessionId = to.slice(SESSION_RECIPIENT_PREFIX.length);
+    if (recipientSessionId.length === 0) return { scope: "agent" };
+    return { scope: "session", recipientSessionId };
+  }
+  return { scope: "agent" };
+}
 function taskSummary(message) {
   if (message.taskContext === void 0) return void 0;
   const task = {
@@ -860,12 +894,15 @@ function mapMailboxMessageToHqSummary(message, options = {}) {
   const bodyPreview = previewText(message.body, previewLength, options.redactionPolicy);
   const outcomePreview = previewText(message.outcome, previewLength, options.redactionPolicy);
   const task = taskSummary(message);
+  const recipient = classifyMailboxRecipient(message.to);
   return {
     mailId: message.id,
     // unique UUID per message record, used for deduplication
     messageId: message.id,
     from: message.from,
     to: message.to,
+    scope: recipient.scope,
+    ...recipient.recipientSessionId !== void 0 ? { recipientSessionId: recipient.recipientSessionId } : {},
     type: message.type,
     subject: previewText(message.subject, previewLength, options.redactionPolicy) ?? "",
     priority: message.priority,
@@ -951,7 +988,7 @@ var DEFAULT_RECONNECT_BASE_MS = 1e3;
 var DEFAULT_RECONNECT_MAX_MS = 3e4;
 var DEFAULT_DISCOVERY_POLL_MS = 5e3;
 var DEFAULT_MAX_QUEUED_MESSAGES = 2e3;
-var DEFAULT_COMMAND_POLL_INTERVAL_MS = 2e3;
+var DEFAULT_COMMAND_POLL_INTERVAL_MS = 500;
 var DEFAULT_COMMAND_POLL_LIMIT = 25;
 var DEFAULT_HEARTBEAT_INTERVAL_MS = 25e3;
 function defaultSocketFactory(url) {
@@ -1477,6 +1514,11 @@ function resolveWstackPaths(opts) {
     homeDir,
     configDir: globalRoot,
     globalConfig: path2.join(globalRoot, "config.json"),
+    profilesDir: path2.join(globalRoot, "profiles"),
+    profileConfig: (name) => {
+      const safe = name.replace(/[/\\:]/g, "_").replace(/\.\./g, "_");
+      return path2.join(globalRoot, "profiles", safe || "default", "config.json");
+    },
     secretsKey: path2.join(globalRoot, ".key"),
     globalMemory: path2.join(globalRoot, "memory.md"),
     globalSkills: path2.join(globalRoot, "skills"),
@@ -1671,7 +1713,7 @@ async function withFileLock(targetPath, fn, opts = {}) {
   const dir = path3.dirname(targetPath);
   await fs2.mkdir(dir, { recursive: true });
   const lockPath = path3.join(dir, `.${path3.basename(targetPath)}.lock`);
-  const timeoutMs = opts.timeoutMs ?? 5e3;
+  const timeoutMs = opts.timeoutMs ?? 15e3;
   const staleMs = opts.staleMs ?? 3e4;
   const started = Date.now();
   let handle;
@@ -1681,6 +1723,13 @@ async function withFileLock(targetPath, fn, opts = {}) {
       await handle.writeFile(`${process.pid}:${Date.now()}`);
       break;
     } catch (err) {
+      if (handle) {
+        await handle.close().catch(() => {
+        });
+        await fs2.unlink(lockPath).catch(() => {
+        });
+        handle = void 0;
+      }
       const code = err.code;
       if (code === "ENOENT") {
         await fs2.mkdir(dir, { recursive: true });
@@ -1964,11 +2013,6 @@ function serializeAckRecord(ack) {
   return JSON.stringify(ack) + "\n";
 }
 
-// src/coordination/mailbox-types.ts
-function normalizeRecipient(to) {
-  return to.trim().toLowerCase() === "all" ? "*" : to.trim();
-}
-
 // src/coordination/global-mailbox.ts
 var MAILBOX_FILE = "_mailbox.jsonl";
 var CLIENT_REGISTRY_FILE = "_mailbox.clients.json";
@@ -2097,9 +2141,9 @@ var GlobalMailbox = class {
     const msg = {
       id: randomUUID2(),
       from: input.from,
-      // "all" is an accepted spelling of the broadcast address — canonical
-      // form on disk is '*' so every query/checker matches it.
-      to: normalizeRecipient(input.to),
+      // "all" maps to project broadcast; "@session" is resolved against the
+      // sender's session before persistence so recipients can match it exactly.
+      to: normalizeRecipient(input.to, input.senderSessionId),
       type: normalizeMailboxMessageType(input.type),
       subject: input.subject,
       body: input.body,
@@ -2109,6 +2153,7 @@ var GlobalMailbox = class {
       timestamp: now,
       replyTo: input.replyTo,
       taskContext: input.taskContext,
+      senderSessionId: input.senderSessionId,
       expiresAt: input.ttlMs !== void 0 ? new Date(Date.now() + input.ttlMs).toISOString() : void 0
     };
     const line = JSON.stringify(msg) + LINE_SEPARATOR;
@@ -2164,6 +2209,7 @@ var GlobalMailbox = class {
     for (const m of candidates) {
       if (q.to !== void 0 && m.to !== q.to && m.to !== "*") continue;
       if (q.from !== void 0 && m.from !== q.from) continue;
+      if (q.sessionId !== void 0 && m.senderSessionId !== q.sessionId) continue;
       if (q.unreadBy !== void 0 && q.unreadBy in m.readBy) continue;
       if (q.incompleteOnly && m.completed) continue;
       if (queryType !== void 0 && m.type !== queryType) continue;
@@ -2293,8 +2339,9 @@ var GlobalMailbox = class {
     if (updated.length > 0) this.publishHqMailboxSnapshot();
     return updated;
   }
-  async unreadCount(forAgentId) {
+  async unreadCount(forAgentId, sessionId) {
     const all = await this._readMessagesCached();
+    const scopedSessionRecipient = sessionId === void 0 ? void 0 : sessionRecipient(sessionId);
     let count = 0;
     if (this._recipientIndex !== null) {
       const indices = /* @__PURE__ */ new Set();
@@ -2302,6 +2349,10 @@ var GlobalMailbox = class {
       if (direct !== void 0) for (const i of direct) indices.add(i);
       const broadcasts = this._recipientIndex.get("*");
       if (broadcasts !== void 0) for (const i of broadcasts) indices.add(i);
+      if (scopedSessionRecipient !== void 0) {
+        const sessionBroadcasts = this._recipientIndex.get(scopedSessionRecipient);
+        if (sessionBroadcasts !== void 0) for (const i of sessionBroadcasts) indices.add(i);
+      }
       for (const i of indices) {
         const m = all[i];
         if (!(forAgentId in m.readBy) && !m.completed) count++;
@@ -2309,9 +2360,7 @@ var GlobalMailbox = class {
     } else {
       for (let i = 0; i < all.length; i++) {
         const m = all[i];
-        if ((m.to === forAgentId || m.to === "*") && !(forAgentId in m.readBy) && !m.completed) {
-          count++;
-        }
+        if ((m.to === forAgentId || m.to === "*" || m.to === scopedSessionRecipient) && !(forAgentId in m.readBy) && !m.completed) count++;
       }
     }
     return count;
@@ -2415,7 +2464,7 @@ var GlobalMailbox = class {
       toolCalls: 0,
       registeredAt: now,
       lastSeenAt: now,
-      pid: input.pid,
+      pid: input.pid ?? process.pid,
       source: input.source
     };
     await withFileLock(this.registryPath, async () => {
@@ -2447,7 +2496,7 @@ var GlobalMailbox = class {
         lastActivityAt: now,
         lastSeenAt: now,
         online: true,
-        pid: input.pid,
+        pid: input.pid ?? process.pid,
         ...input.source !== void 0 ? { source: input.source } : {}
       }
     });
@@ -2574,7 +2623,7 @@ var GlobalMailbox = class {
       source: input.source,
       registeredAt: now,
       lastSeenAt: now,
-      pid: input.pid
+      pid: input.pid ?? process.pid
     };
     await withFileLock(this.clientRegistryPath, async () => {
       const registry = await this._readClientRegistry({ fresh: true });
@@ -3084,6 +3133,48 @@ var GlobalMailbox = class {
   async _ensureRegistry() {
     await fsp.mkdir(path4.dirname(this.registryPath), { recursive: true });
   }
+  /** Minimal shape-check for a deserialized agent registry entry.
+   *  Logs a warning and returns `false` for structurally invalid data
+   *  so a single corrupted entry doesn't break the entire registry. */
+  _parseAgentEntry(value) {
+    if (typeof value !== "object" || value === null) return null;
+    const v = value;
+    if (typeof v.agentId !== "string") return null;
+    if (typeof v.sessionId !== "string") return null;
+    const statuses = ["idle", "busy", "running", "streaming", "waiting_user", "error"];
+    const status = typeof v.status === "string" && statuses.includes(v.status) ? v.status : "idle";
+    return {
+      ...v,
+      agentId: v.agentId,
+      sessionId: v.sessionId,
+      name: typeof v.name === "string" ? v.name : v.agentId,
+      registeredAt: typeof v.registeredAt === "string" ? v.registeredAt : (/* @__PURE__ */ new Date(0)).toISOString(),
+      lastSeenAt: typeof v.lastSeenAt === "string" ? v.lastSeenAt : (/* @__PURE__ */ new Date(0)).toISOString(),
+      iterations: typeof v.iterations === "number" && Number.isFinite(v.iterations) ? v.iterations : 0,
+      toolCalls: typeof v.toolCalls === "number" && Number.isFinite(v.toolCalls) ? v.toolCalls : 0,
+      pid: typeof v.pid === "number" && Number.isFinite(v.pid) ? v.pid : 0,
+      status
+    };
+  }
+  /** Minimal shape-check for a deserialized client registry entry. */
+  _parseClientEntry(value) {
+    if (typeof value !== "object" || value === null) return null;
+    const v = value;
+    if (typeof v.clientId !== "string") return null;
+    if (typeof v.sessionId !== "string") return null;
+    const sources = ["repl", "tui", "webui", "http"];
+    const source = typeof v.source === "string" && sources.includes(v.source) ? v.source : "http";
+    return {
+      ...v,
+      clientId: v.clientId,
+      sessionId: v.sessionId,
+      name: typeof v.name === "string" ? v.name : v.clientId,
+      registeredAt: typeof v.registeredAt === "string" ? v.registeredAt : (/* @__PURE__ */ new Date(0)).toISOString(),
+      lastSeenAt: typeof v.lastSeenAt === "string" ? v.lastSeenAt : (/* @__PURE__ */ new Date(0)).toISOString(),
+      pid: typeof v.pid === "number" && Number.isFinite(v.pid) ? v.pid : 0,
+      source
+    };
+  }
   async _readRegistry(opts) {
     if (!opts?.fresh && this._registryCache && Date.now() - this._registryCacheAt < REGISTRY_CACHE_TTL_MS) {
       return new Map(this._registryCache);
@@ -3093,7 +3184,12 @@ var GlobalMailbox = class {
       const data = JSON.parse(raw);
       const map = /* @__PURE__ */ new Map();
       for (const [id, agent] of Object.entries(data)) {
-        map.set(id, agent);
+        const parsed = this._parseAgentEntry(agent);
+        if (parsed) {
+          map.set(id, parsed);
+        } else {
+          console.warn(JSON.stringify({ level: "warn", event: "mailbox.registry.invalid_agent", message: `Skipping malformed agent entry "${id}" in registry`, timestamp: (/* @__PURE__ */ new Date()).toISOString() }));
+        }
       }
       this._registryCache = map;
       this._registryCacheAt = Date.now();
@@ -3139,7 +3235,12 @@ var GlobalMailbox = class {
       const data = JSON.parse(raw);
       const map = /* @__PURE__ */ new Map();
       for (const [id, client] of Object.entries(data)) {
-        map.set(id, client);
+        const parsed = this._parseClientEntry(client);
+        if (parsed) {
+          map.set(id, parsed);
+        } else {
+          console.warn(JSON.stringify({ level: "warn", event: "mailbox.registry.invalid_client", message: `Skipping malformed client entry "${id}" in client registry`, timestamp: (/* @__PURE__ */ new Date()).toISOString() }));
+        }
       }
       this._clientRegistryCache = map;
       this._clientRegistryCacheAt = Date.now();
@@ -3276,7 +3377,23 @@ async function ensureHqFirstRunAuthFile(dataDir, opts = {}) {
   const file = hqAuthFilePath(dataDir);
   try {
     await fs3.access(file);
-    return { authFile: await readHqAuthFile(dataDir, opts), created: false };
+    const existing = await readHqAuthFile(dataDir, opts);
+    if (opts.password) {
+      const passwordUnchanged = existing.passwordHash !== void 0 && await verifyHqPassword(opts.password, existing.passwordHash);
+      if (!passwordUnchanged) {
+        const authFile2 = {
+          ...existing,
+          passwordHash: await hashHqPassword(opts.password),
+          // Rotating the cookie secret invalidates sessions created with the
+          // previous password. This matters when --password is used to
+          // recover or deliberately change an existing HQ installation.
+          cookieSecret: mintHqCookieSecret()
+        };
+        await writeHqAuthFile(dataDir, authFile2);
+        return { authFile: await readHqAuthFile(dataDir, opts), created: false };
+      }
+    }
+    return { authFile: existing, created: false };
   } catch (err) {
     if (err.code !== "ENOENT") {
       opts.warn?.(`HQ auth file access failed at ${file}: ${err.message}`);
@@ -3518,6 +3635,49 @@ function createGlobalMailbox(options) {
   return new GlobalMailbox(options.projectDir, options.events, options.hqPublisher);
 }
 
+// src/hq/exposure.ts
+var HQ_CLI_DEFAULT_HOST = "0.0.0.0";
+var HqInsecureExposureError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "HqInsecureExposureError";
+  }
+};
+function isLoopbackHost(host) {
+  const normalized = host.trim().toLowerCase().replace(/^\[/, "").replace(/\]$/, "");
+  if (normalized === "localhost" || normalized === "::1") return true;
+  return /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(normalized);
+}
+function isOpenMode(input) {
+  return !input.hasBrowserTokens && !input.hasPassword;
+}
+function assessHqExposure(input) {
+  if (isLoopbackHost(input.host)) return { kind: "ok" };
+  if (isOpenMode(input)) {
+    const detail = `HQ is configured in open mode (no browser tokens and no password), so every request \u2014 including POST /api/command, which runs commands in your live sessions \u2014 is served unauthenticated. Binding that to ${input.host} exposes it to every peer on the network.`;
+    if (input.allowInsecure) {
+      return {
+        kind: "warn",
+        message: `${detail} Continuing because --insecure-open was passed.`
+      };
+    }
+    return {
+      kind: "refuse",
+      message: `${detail}
+
+Fix one of these, then retry:
+  \u2022 bind locally:        wstack hq --host 127.0.0.1
+  \u2022 mint a token:        wstack hq token create
+  \u2022 set a password:      wstack hq --password <value>
+  \u2022 accept the risk:     wstack hq --insecure-open`
+    };
+  }
+  return {
+    kind: "warn",
+    message: `HQ is bound to ${input.host} (all interfaces) without TLS. Access tokens travel in cleartext and appear in the URL query. Prefer --host 127.0.0.1 unless you intend HQ to be reachable from other machines.`
+  };
+}
+
 // src/hq/session-bridge.ts
 import * as fs5 from "node:fs";
 import * as fsp2 from "node:fs/promises";
@@ -4617,6 +4777,9 @@ var HqCommandAuditLog = class {
       this.onPersist?.(entry);
     }
   }
+  get(commandId) {
+    return this.entries.find((entry) => entry.commandId === commandId);
+  }
   /** Update only when the command belongs to the authenticated client. */
   updateForClient(commandId, clientId, patch) {
     const entry = this.entries.find(
@@ -4808,17 +4971,21 @@ function toAlertMessage(alert) {
 export {
   DEFAULT_HQ_REDACTION_POLICY,
   HQ_AUTH_FILE_VERSION,
+  HQ_CLI_DEFAULT_HOST,
   HQ_COMMAND_TYPES,
   HQ_PROTOCOL_VERSION,
   HQ_TRANSCRIPT_TEXT_CAP,
   HqAlertEngine,
   HqCommandAuditLog,
   HqEventLog,
+  HqInsecureExposureError,
   HqPublisher,
   HqSimpleLog,
   HqSnapshotStore,
   HqTimeseriesStore,
+  assessHqExposure,
   buildTranscriptFromEvents,
+  classifyMailboxRecipient,
   createGlobalMailbox,
   createHqEventEnvelope,
   createHqPersistence,
@@ -4833,6 +5000,8 @@ export {
   hashHqPassword,
   hqAuthFilePath,
   hqRuntimeFilePath,
+  isLoopbackHost,
+  isOpenMode,
   mapMailboxAgentToHqSummary,
   mapMailboxMessageToHqSummary,
   mapSessionEventToEntries,