@yadsh/dsh-qa-surface 0.15.6 → 0.16.0

package/lib/chat-sharing/store.js

@@ -0,0 +1,193 @@
+import { SqliteDatabase } from "@yadsh/dsh-plugin-kit/sqlite";
+/** Separate schema: installing sharing does not upgrade the accounts CLI's DB. */
+export class QaChatSharingStore {
+    accounts;
+    storage;
+    constructor(filePath, accounts) {
+        this.accounts = accounts;
+        this.storage = new SqliteDatabase(filePath, [
+            {
+                version: 1,
+                up: `
+      CREATE TABLE grants (session_id TEXT NOT NULL, owner_id TEXT NOT NULL,
+        user_id TEXT NOT NULL, mode TEXT NOT NULL CHECK(mode IN ('read','collaborate')),
+        revision INTEGER NOT NULL, PRIMARY KEY(session_id,user_id));
+      CREATE TABLE authors (session_id TEXT NOT NULL, request_id TEXT NOT NULL,
+        user_id TEXT NOT NULL, display_name TEXT NOT NULL, grant_revision INTEGER,
+        PRIMARY KEY(session_id,request_id));
+      CREATE TABLE revisions (session_id TEXT PRIMARY KEY, revision INTEGER NOT NULL);
+    `,
+            },
+        ]);
+    }
+    access(token, sessionId) {
+        const accounts = this.accounts();
+        const actor = accounts.currentUser(token);
+        const ownerId = accounts.ownerIdOf(sessionId);
+        const owner = ownerId === undefined ? undefined : accounts.accountById(ownerId);
+        if (owner === undefined)
+            throw new Error("Chat access is unavailable.");
+        if (actor.id === owner.id)
+            return {
+                sessionId,
+                ownerId: owner.id,
+                ownerName: owner.displayName,
+                actorId: actor.id,
+                mode: "owner",
+                revision: 0,
+            };
+        const grant = this.storage.db
+            .prepare("SELECT mode, revision FROM grants WHERE session_id=? AND owner_id=? AND user_id=?")
+            .get(sessionId, owner.id, actor.id);
+        if (grant === undefined)
+            throw new Error("Chat access is unavailable.");
+        return {
+            sessionId,
+            ownerId: owner.id,
+            ownerName: owner.displayName,
+            actorId: actor.id,
+            mode: grant.mode,
+            revision: grant.revision,
+        };
+    }
+    owner(token, sessionId) {
+        const access = this.access(token, sessionId);
+        if (access.mode !== "owner")
+            throw new Error("This action requires the chat owner.");
+        return access;
+    }
+    write(token, sessionId) {
+        const access = this.access(token, sessionId);
+        if (access.mode === "read")
+            throw new Error("This chat is read-only.");
+        return access;
+    }
+    /** Exact address lookup after ownership, never an account directory. */
+    set(token, sessionId, email, mode) {
+        this.storage.transaction(() => {
+            const access = this.owner(token, sessionId);
+            if (mode !== null && mode !== "read" && mode !== "collaborate")
+                throw new Error("Invalid chat access mode.");
+            const user = this.accounts().findUser(email);
+            if (user === undefined ||
+                (mode !== null && this.accounts().accountById(user.id) === undefined) ||
+                user.id === access.ownerId)
+                throw new Error("The recipient account is unavailable.");
+            this.storage.db
+                .prepare(`INSERT INTO revisions VALUES (?,1)
+        ON CONFLICT(session_id) DO UPDATE SET revision=revision+1`)
+                .run(sessionId);
+            const { revision } = this.storage.db
+                .prepare("SELECT revision FROM revisions WHERE session_id=?")
+                .get(sessionId);
+            if (mode === null)
+                this.storage.db
+                    .prepare("DELETE FROM grants WHERE session_id=? AND user_id=?")
+                    .run(sessionId, user.id);
+            else
+                this.storage.db
+                    .prepare(`INSERT INTO grants VALUES (?,?,?,?,?)
+        ON CONFLICT(session_id,user_id) DO UPDATE SET owner_id=excluded.owner_id,
+        mode=excluded.mode, revision=excluded.revision`)
+                    .run(sessionId, access.ownerId, user.id, mode, revision);
+        });
+        return this.grants(token, sessionId);
+    }
+    grants(token, sessionId) {
+        const owner = this.owner(token, sessionId);
+        const rows = this.storage.db
+            .prepare("SELECT user_id,mode FROM grants WHERE session_id=? AND owner_id=?")
+            .all(sessionId, owner.ownerId);
+        return rows.flatMap((row) => {
+            // Ownership was checked above. Disabled recipients stay in the owner's
+            // management list so their durable grants can still be revoked.
+            const user = this.accounts().accountById(row.user_id, true);
+            return user === undefined
+                ? []
+                : [
+                    {
+                        userId: user.id,
+                        email: user.email,
+                        displayName: user.displayName,
+                        mode: row.mode,
+                    },
+                ];
+        });
+    }
+    visible(token) {
+        const actor = this.accounts().currentUser(token);
+        const rows = this.storage.db
+            .prepare("SELECT session_id FROM grants WHERE user_id=?")
+            .all(actor.id);
+        const ids = new Set([
+            ...this.accounts().ownedSessionIds(token),
+            ...rows.map((row) => row.session_id),
+        ]);
+        return [...ids].flatMap((id) => {
+            try {
+                return [this.access(token, id)];
+            }
+            catch {
+                return [];
+            }
+        });
+    }
+    revalidate(token, previous) {
+        const current = this.access(token, previous.sessionId);
+        if (current.actorId !== previous.actorId ||
+            current.ownerId !== previous.ownerId ||
+            current.mode !== previous.mode ||
+            current.revision !== previous.revision)
+            throw new Error("Chat access changed during the operation.");
+        return current;
+    }
+    recordAuthor(token, access, requestId) {
+        this.revalidate(token, access);
+        const actor = this.accounts().currentUser(token);
+        this.storage.db
+            .prepare("INSERT INTO authors VALUES (?,?,?,?,?)")
+            .run(access.sessionId, requestId, actor.id, actor.displayName, access.mode === "owner" ? null : access.revision);
+    }
+    authors(token, sessionId) {
+        this.access(token, sessionId);
+        return this.storage.db
+            .prepare(`SELECT request_id AS requestId, user_id AS userId,
+      display_name AS displayName FROM authors WHERE session_id=?`)
+            .all(sessionId);
+    }
+    requestActor(sessionId, requestId) {
+        return this.storage.db
+            .prepare("SELECT user_id AS userId, grant_revision AS revision FROM authors WHERE session_id=? AND request_id=?")
+            .get(sessionId, requestId);
+    }
+    /** Copy only immutable attribution for the native prefix, never memberships. */
+    forkAuthors(sourceId, targetId, requests) {
+        this.storage.transaction(() => {
+            for (const request of new Set(requests))
+                this.storage.db
+                    .prepare(`INSERT INTO authors
+        SELECT ?,request_id,user_id,display_name,NULL FROM authors WHERE session_id=? AND request_id=?`)
+                    .run(targetId, sourceId, request);
+        });
+    }
+    dropSession(id) {
+        this.storage.transaction(() => {
+            this.storage.db.prepare("DELETE FROM grants WHERE session_id=?").run(id);
+            this.storage.db.prepare("DELETE FROM authors WHERE session_id=?").run(id);
+            this.storage.db
+                .prepare(`INSERT INTO revisions VALUES (?,1)
+        ON CONFLICT(session_id) DO UPDATE SET revision=revision+1`)
+                .run(id);
+        });
+    }
+    actorStillAllowed(sessionId, userId, revision) {
+        const ownerId = this.accounts().ownerIdOf(sessionId);
+        return (this.accounts().accountById(userId) !== undefined &&
+            ownerId !== undefined &&
+            this.accounts().accountById(ownerId) !== undefined &&
+            this.storage.db
+                .prepare("SELECT 1 FROM grants WHERE session_id=? AND owner_id=? AND user_id=? AND mode='collaborate' AND revision=?")
+                .get(sessionId, ownerId, userId, revision) !== undefined);
+    }
+}
+//# sourceMappingURL=store.js.map

package/lib/chat-sharing/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/chat-sharing/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAS9D,kFAAkF;AAClF,MAAM,OAAO,kBAAkB;IAIV,QAAQ;IAHlB,OAAO,CAAiB;IACjC,YACE,QAAgB,EACC,QAA0B;wBAA1B,QAAQ;QAEzB,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE;YAC1C;gBACE,OAAO,EAAE,CAAC;gBACV,EAAE,EAAE;;;;;;;;KAQP;aACE;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,SAAiB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,KAAK,GACT,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;YACvB,OAAO;gBACL,SAAS;gBACT,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,KAAK,CAAC,WAAW;gBAC5B,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aAC1B,OAAO,CACN,mFAAmF,CACpF;aACA,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CACgB,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACxE,OAAO;YACL,SAAS;YACT,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,KAAK,CAAC,WAAW;YAC5B,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,SAAiB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,SAAiB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,GAAG,CACD,KAAa,EACb,SAAiB,EACjB,KAAa,EACb,IAAuB;QAEvB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,aAAa;gBAC5D,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7C,IACE,IAAI,KAAK,SAAS;gBAClB,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC;gBACrE,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,OAAO;gBAE1B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,OAAO,CACN;kEACwD,CACzD;iBACA,GAAG,CAAC,SAAS,CAAC,CAAC;YAClB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;iBACjC,OAAO,CAAC,mDAAmD,CAAC;iBAC5D,GAAG,CAAC,SAAS,CAAyB,CAAC;YAC1C,IAAI,IAAI,KAAK,IAAI;gBACf,IAAI,CAAC,OAAO,CAAC,EAAE;qBACZ,OAAO,CAAC,qDAAqD,CAAC;qBAC9D,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;;gBAE3B,IAAI,CAAC,OAAO,CAAC,EAAE;qBACZ,OAAO,CACN;;uDAE2C,CAC5C;qBACA,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,SAAiB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aACzB,OAAO,CACN,mEAAmE,CACpE;aACA,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAG5B,CAAC;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1B,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC5D,OAAO,IAAI,KAAK,SAAS;gBACvB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,IAAI,EAAE,GAAG,CAAC,IAAI;qBACf;iBACF,CAAC;QACR,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aACzB,OAAO,CAAC,+CAA+C,CAAC;aACxD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAwC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;YAClB,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;YACzC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;SACrC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,QAAsB;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvD,IACE,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACpC,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACpC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAC9B,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;YAEtC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,MAAoB,EAAE,SAAiB;QACjE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,EAAE;aACZ,OAAO,CAAC,wCAAwC,CAAC;aACjD,GAAG,CACF,MAAM,CAAC,SAAS,EAChB,SAAS,EACT,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,WAAW,EACjB,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CACjD,CAAC;IACN,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,SAAiB;QACtC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE;aACnB,OAAO,CACN;kEAC0D,CAC3D;aACA,GAAG,CAAC,SAAS,CAA8B,CAAC;IACjD,CAAC;IAED,YAAY,CACV,SAAiB,EACjB,SAAiB;QAEjB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE;aACnB,OAAO,CACN,uGAAuG,CACxG;aACA,GAAG,CAAC,SAAS,EAAE,SAAS,CAC8B,CAAC;IAC5D,CAAC;IAED,gFAAgF;IAChF,WAAW,CACT,QAAgB,EAChB,QAAgB,EAChB,QAA2B;QAE3B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,EAAE;qBACZ,OAAO,CACN;uGAC2F,CAC5F;qBACA,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,OAAO,CACN;kEACwD,CACzD;iBACA,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CACf,SAAiB,EACjB,MAAc,EACd,QAAgB;QAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,CACL,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,SAAS;YACjD,OAAO,KAAK,SAAS;YACrB,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS;YAClD,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,OAAO,CACN,4GAA4G,CAC7G;iBACA,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,SAAS,CAC3D,CAAC;IACJ,CAAC;CACF"}

package/lib/chat-sharing/transport.js

@@ -0,0 +1,274 @@
+import { SessionId } from "@deepseek-ai/dsh-session/types";
+/** Durable access is checked before and after asynchronous reads and per frame. */
+export class QaChatTransport {
+    ctx;
+    store;
+    admit;
+    participantPolicy;
+    locks = new Map();
+    constructor(ctx, store, admit, participantPolicy) {
+        this.ctx = ctx;
+        this.store = store;
+        this.admit = admit;
+        this.participantPolicy = participantPolicy;
+    }
+    async list(token, signal) {
+        this.store().visible(token);
+        const value = await this.ctx.sessionController.list({}, signal);
+        const allowed = new Set(this.store()
+            .visible(token)
+            .map((item) => item.sessionId));
+        const owned = new Set(this.store()
+            .visible(token)
+            .filter((item) => item.mode === "owner")
+            .map((item) => item.sessionId));
+        for (let count = 0; count < value.items.length; count++) {
+            let changed = false;
+            for (const item of value.items)
+                if (item.origin === "subagent" &&
+                    item.parentSessionId !== undefined &&
+                    owned.has(String(item.parentSessionId)) &&
+                    !owned.has(String(item.sessionId))) {
+                    owned.add(String(item.sessionId));
+                    allowed.add(String(item.sessionId));
+                    changed = true;
+                }
+            if (!changed)
+                break;
+        }
+        return {
+            items: value.items.filter((item) => allowed.has(String(item.sessionId))),
+        };
+    }
+    async page(token, request, signal) {
+        const access = await this.addressAccess(token, request.address, signal);
+        const value = await this.ctx.sessionController.page(request, signal);
+        this.store().revalidate(token, access);
+        return {
+            ...value,
+            records: value.records.map((record) => this.signRecord(token, access.sessionId, record)),
+        };
+    }
+    async search(token, request, signal) {
+        await this.list(token, signal);
+        const value = await this.ctx.sessionController.search(request, signal);
+        const allowed = new Set((await this.list(token, signal)).items.map((item) => String(item.sessionId)));
+        return {
+            items: value.items.filter((item) => allowed.has(String(item.sessionId))),
+            hasMore: false,
+        };
+    }
+    async projections(token, id, signal) {
+        const access = await this.sessionAccess(token, id, signal);
+        const value = await this.ctx.sessionController.projections({ sessionId: SessionId(id) }, signal);
+        this.store().revalidate(token, access);
+        return value;
+    }
+    async *follow(token, request, signal) {
+        const access = await this.addressAccess(token, request.address, signal);
+        const id = access.sessionId;
+        const abort = new AbortController();
+        const onAbort = () => abort.abort(signal.reason);
+        signal.addEventListener("abort", onAbort, { once: true });
+        if (signal.aborted)
+            onAbort();
+        const poll = setInterval(() => {
+            try {
+                this.store().revalidate(token, access);
+            }
+            catch (error) {
+                abort.abort(error);
+            }
+        }, 250);
+        poll.unref();
+        try {
+            for await (const frame of this.ctx.sessionController.follow(request, abort.signal)) {
+                this.store().revalidate(token, access);
+                yield frame.type === "snapshot"
+                    ? {
+                        ...frame,
+                        records: frame.records.map((record) => this.signRecord(token, id, record)),
+                    }
+                    : frame.type === "event"
+                        ? this.signRecord(token, id, frame)
+                        : frame;
+            }
+        }
+        finally {
+            clearInterval(poll);
+            signal.removeEventListener("abort", onAbort);
+            abort.abort();
+        }
+    }
+    async *control(token, signal) {
+        // Polling a bounded catalog also surfaces grants/revocations on idle chats.
+        // No native Host-wide baseline or delta is exposed to a QA account.
+        while (!signal.aborted) {
+            const listing = await this.list(token, signal);
+            const projections = {};
+            for (const item of listing.items) {
+                try {
+                    const value = await this.projections(token, String(item.sessionId), signal);
+                    if (value !== null)
+                        projections[String(item.sessionId)] = value;
+                }
+                catch {
+                    /* revoked between reads */
+                }
+            }
+            yield { type: "baseline", value: { projections } };
+            await new Promise((resolve) => {
+                const done = () => {
+                    clearTimeout(timer);
+                    signal.removeEventListener("abort", done);
+                    resolve();
+                };
+                const timer = setTimeout(done, 1000);
+                timer.unref();
+                signal.addEventListener("abort", done, { once: true });
+                if (signal.aborted)
+                    done();
+            });
+        }
+    }
+    /** Queue admission is serialized, rechecked after resume, and signed before insertion. */
+    async prompt(token, request, signal) {
+        return this.serial(String(request.sessionId), async () => {
+            const access = this.store().write(token, String(request.sessionId));
+            if (access.mode !== "owner" && request.mode !== "queue")
+                throw new Error("Only the owner may steer a chat.");
+            if (access.mode !== "owner" &&
+                request.content.some((part) => part.type === "text" && /^\s*\//u.test(part.text)))
+                throw new Error("Only the owner may run chat skills or commands.");
+            const prior = this.store().requestActor(access.sessionId, String(request.requestId));
+            if (prior !== undefined) {
+                if (prior.userId !== access.actorId)
+                    throw new Error("Prompt identity belongs to another participant.");
+                if (prior.revision !== null && prior.revision !== access.revision)
+                    throw new Error("Prompt access has changed.");
+            }
+            await this.admit(token, access.sessionId);
+            if (access.mode === "collaborate")
+                await this.participantPolicy?.(access.actorId, access.sessionId);
+            signal.throwIfAborted();
+            this.store().revalidate(token, access);
+            const session = this.ctx.sessions?.get(SessionId(access.sessionId));
+            const historicalRequest = session
+                ?.snapshotEvents()
+                .some((event) => event.type === "user/message" &&
+                "rpcId" in event.data.source &&
+                String(event.data.source.rpcId) === String(request.requestId));
+            const agent = this.ctx.agents?.get(SessionId(access.sessionId));
+            const pendingRequest = [
+                ...(agent?.inbox.nextTurn ?? []),
+                ...(agent?.inbox.nextStep ?? []),
+            ].some((message) => "rpcId" in message.source &&
+                String(message.source.rpcId) === String(request.requestId));
+            if (prior === undefined && (historicalRequest || pendingRequest)) {
+                if (access.mode !== "owner")
+                    throw new Error("Prompt identity belongs to the original author.");
+                return this.ctx.sessionController.prompt(request, signal);
+            }
+            if (prior === undefined)
+                this.store().recordAuthor(token, access, String(request.requestId));
+            const value = await this.ctx.sessionController.prompt(request, signal);
+            this.store().revalidate(token, access);
+            return value;
+        });
+    }
+    async attachment(token, request) {
+        const access = await this.sessionAccess(token, String(request.sessionId), new AbortController().signal);
+        const value = await this.ctx.sessionController.attachment(request);
+        this.store().revalidate(token, access);
+        return value;
+    }
+    async rename(token, request) {
+        return this.ownerOperation(token, String(request.sessionId), () => this.ctx.sessionController.rename(request));
+    }
+    async selectModel(token, request) {
+        return this.ownerOperation(token, String(request.sessionId), () => this.ctx.sessionController.selectModel(request));
+    }
+    async cancel(token, id) {
+        return this.ownerOperation(token, id, () => this.ctx.sessionController.cancel({ sessionId: SessionId(id) }));
+    }
+    async updateQueue(token, request) {
+        return this.ownerOperation(token, String(request.sessionId), () => this.ctx.sessionController.updateQueue(request));
+    }
+    async ownerOperation(token, id, operation) {
+        return this.serial(id, async () => {
+            const access = this.store().owner(token, id);
+            await this.admit(token, id);
+            this.store().revalidate(token, access);
+            return operation();
+        });
+    }
+    async serial(id, operation) {
+        const previous = this.locks.get(id) ?? Promise.resolve();
+        const next = previous.catch(() => undefined).then(operation);
+        this.locks.set(id, next);
+        try {
+            return await next;
+        }
+        finally {
+            if (this.locks.get(id) === next)
+                this.locks.delete(id);
+        }
+    }
+    async sessionAccess(token, id, signal) {
+        try {
+            return this.store().access(token, id);
+        }
+        catch {
+            // A delegated child carries no membership of its own. Resolve its
+            // authoritative lineage and require the root owner, never a participant.
+            this.store().visible(token);
+            const listing = await this.ctx.sessionController.list({}, signal);
+            const rows = new Map(listing.items.map((item) => [String(item.sessionId), item]));
+            const seen = new Set();
+            let current = id;
+            while (true) {
+                if (seen.has(current))
+                    throw new Error("Chat access is unavailable.");
+                seen.add(current);
+                const row = rows.get(current);
+                if (row?.origin !== "subagent" || row.parentSessionId === undefined)
+                    break;
+                current = String(row.parentSessionId);
+            }
+            if (current === id)
+                throw new Error("Chat access is unavailable.");
+            return this.store().owner(token, current);
+        }
+    }
+    async addressAccess(token, address, signal) {
+        const access = await this.sessionAccess(token, String(address.kind === "session"
+            ? address.sessionId
+            : address.parentSessionId), signal);
+        if (address.kind === "subagent" && access.mode !== "owner")
+            throw new Error("Only the root owner may inspect a delegated session.");
+        return access;
+    }
+    signRecord(token, id, record) {
+        if (record.event.type !== "user/message")
+            return record;
+        const data = record.event.data;
+        const source = data.source;
+        const author = this.store()
+            .authors(token, id)
+            .find((item) => item.requestId === source?.rpcId)?.displayName ??
+            this.store().access(token, id).ownerName;
+        if (source === undefined)
+            return record;
+        return {
+            ...record,
+            event: {
+                ...record.event,
+                data: {
+                    ...data,
+                    source: { ...source, qaAuthor: author },
+                },
+            },
+        };
+    }
+}
+//# sourceMappingURL=transport.js.map

package/lib/chat-sharing/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/chat-sharing/transport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AA2B3D,mFAAmF;AACnF,MAAM,OAAO,eAAe;IAGP,GAAG;IACH,KAAK;IACL,KAAK;IACL,iBAAiB;IALnB,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC7D,YACmB,GAAY,EACZ,KAA+B,EAC/B,KAAsD,EACtD,iBAGI;mBANJ,GAAG;qBACH,KAAK;qBACL,KAAK;iCACL,iBAAiB;IAIjC,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,MAAmB;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,IAAI,CAAC,KAAK,EAAE;aACT,OAAO,CAAC,KAAK,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CACjC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,IAAI,CAAC,KAAK,EAAE;aACT,OAAO,CAAC,KAAK,CAAC;aACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;aACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CACjC,CAAC;QACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACxD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;gBAC5B,IACE,IAAI,CAAC,MAAM,KAAK,UAAU;oBAC1B,IAAI,CAAC,eAAe,KAAK,SAAS;oBAClC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBACvC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAClC,CAAC;oBACD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBAClC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBACpC,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,MAAM;QACtB,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAa,EACb,OAA2B,EAC3B,MAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO;YACL,GAAG,KAAK;YACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CACjD;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAa,EACb,OAA6B,EAC7B,MAAmB;QAEnB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CACvB,CACF,CAAC;QACF,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACxE,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAa,EACb,EAAU,EACV,MAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CACxD,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,EAC5B,MAAM,CACP,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CACX,KAAa,EACb,OAA6B,EAC7B,MAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CACzD,OAAO,EACP,KAAK,CAAC,MAAM,CACb,EAAE,CAAC;gBACF,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACvC,MAAM,KAAK,CAAC,IAAI,KAAK,UAAU;oBAC7B,CAAC,CAAC;wBACE,GAAG,KAAK;wBACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CACnC;qBACF;oBACH,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;wBACtB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC;wBACnC,CAAC,CAAC,KAAK,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,OAAO,CACZ,KAAa,EACb,MAAmB;QAEnB,4EAA4E;QAC5E,oEAAoE;QACpE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,WAAW,GAGb,EAAE,CAAC;YACP,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAClC,KAAK,EACL,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EACtB,MAAM,CACP,CAAC;oBACF,IAAI,KAAK,KAAK,IAAI;wBAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC;oBACP,2BAA2B;gBAC7B,CAAC;YACH,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,IAAI,GAAG,GAAG,EAAE;oBAChB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAC1C,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC;gBACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,IAAI,MAAM,CAAC,OAAO;oBAAE,IAAI,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,MAAM,CACV,KAAa,EACb,OAA6B,EAC7B,MAAmB;QAEnB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBACrD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,IACE,MAAM,CAAC,IAAI,KAAK,OAAO;gBACvB,OAAO,CAAC,OAAO,CAAC,IAAI,CAClB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5D;gBAED,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,CACrC,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CAAC;YACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO;oBACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;oBAC/D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;gBAC/B,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACnE,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACpE,MAAM,iBAAiB,GAAG,OAAO;gBAC/B,EAAE,cAAc,EAAE;iBACjB,IAAI,CACH,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,cAAc;gBAC7B,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM;gBAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAChE,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG;gBACrB,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;aACjC,CAAC,IAAI,CACJ,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,IAAI,OAAO,CAAC,MAAM;gBACzB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC7D,CAAC;YACF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,iBAAiB,IAAI,cAAc,CAAC,EAAE,CAAC;gBACjE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;oBACzB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,KAAK,KAAK,SAAS;gBACrB,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvE,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAa,EACb,OAAiC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CACrC,KAAK,EACL,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EACzB,IAAI,eAAe,EAAE,CAAC,MAAM,CAC7B,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAa,EACb,OAA6B;QAE7B,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAChE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAC3C,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,WAAW,CACf,KAAa,EACb,OAAkC;QAElC,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAChE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,CAChD,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,EAAU;QACpC,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,CACzC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAChE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,WAAW,CACf,KAAa,EACb,OAAkC;QAElC,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAChE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,CAChD,CAAC;IACJ,CAAC;IACO,KAAK,CAAC,cAAc,CAC1B,KAAa,EACb,EAAU,EACV,SAA+B;QAE/B,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,MAAM,CAAI,EAAU,EAAE,SAA2B;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACO,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,EAAU,EAAE,MAAmB;QACxE,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,yEAAyE;YACzE,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,CAC5D,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBACtE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC9B,IAAI,GAAG,EAAE,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS;oBACjE,MAAM;gBACR,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,OAAO,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACO,KAAK,CAAC,aAAa,CACzB,KAAa,EACb,OAAuB,EACvB,MAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CACrC,KAAK,EACL,MAAM,CACJ,OAAO,CAAC,IAAI,KAAK,SAAS;YACxB,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,OAAO,CAAC,eAAe,CAC5B,EACD,MAAM,CACP,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YACxD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,UAAU,CAChB,KAAa,EACb,EAAU,EACV,MAAyB;QAEzB,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO,MAAM,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAEzB,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,MAAM,GACV,IAAI,CAAC,KAAK,EAAE;aACT,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;aAClB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW;YAChE,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,OAAO;YACL,GAAG,MAAM;YACT,KAAK,EAAE;gBACL,GAAG,MAAM,CAAC,KAAK;gBACf,IAAI,EAAE;oBACJ,GAAG,IAAI;oBACP,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;iBACS;aACnD;SACF,CAAC;IACJ,CAAC;CACF"}

package/lib/chat-sharing/turn-guard.js

@@ -0,0 +1,154 @@
+import { SessionId } from "@deepseek-ai/dsh-session/types";
+/** A mixed batch receives the intersection, never the union, of actor rights. */
+export class QaChatTurnGuard {
+    ctx;
+    store;
+    policy;
+    enabled;
+    resourceSafe;
+    actors = new Map();
+    disposers = [];
+    constructor(ctx, store, policy, enabled = () => true, resourceSafe = () => false) {
+        this.ctx = ctx;
+        this.store = store;
+        this.policy = policy;
+        this.enabled = enabled;
+        this.resourceSafe = resourceSafe;
+        this.disposers.push(ctx.on("agent/inbox/inserted", ({ agent, message }) => {
+            if (!this.enabled())
+                return;
+            const requestId = message.source.rpcId;
+            if (requestId === undefined)
+                return;
+            const id = String(agent.session.id);
+            const actor = this.store().requestActor(id, requestId);
+            if (actor?.revision !== undefined &&
+                actor.revision !== null &&
+                !this.store().actorStillAllowed(id, actor.userId, actor.revision))
+                agent.inbox.remove(message.id);
+        }, { global: true }));
+        this.disposers.push(ctx.on("agent/pre-step", async ({ agent, turn }, next) => {
+            if (!this.enabled())
+                return next();
+            const decision = await next();
+            if (decision.kind === "reject")
+                return decision;
+            const id = String(agent.session.id);
+            const participants = this.actors.get(id)?.turn === turn
+                ? [...(this.actors.get(id)?.actors ?? [])]
+                : [];
+            const admitted = [...decision.messages];
+            for (const message of decision.messages) {
+                const source = message.source;
+                if (source.rpcId === undefined)
+                    continue;
+                const actor = this.store().requestActor(id, String(source.rpcId));
+                if (actor?.revision === null || actor === undefined)
+                    continue;
+                if (!this.store().actorStillAllowed(id, actor.userId, actor.revision)) {
+                    admitted.splice(admitted.indexOf(message), 1);
+                    continue;
+                }
+                if (participants.some((item) => item.userId === actor.userId &&
+                    item.revision === actor.revision))
+                    continue;
+                try {
+                    const ceiling = await this.policy(actor.userId, id);
+                    participants.push({
+                        userId: actor.userId,
+                        revision: actor.revision,
+                        // Grantable tools require their own activation. Sharing grants none.
+                        tools: new Set(ceiling.tools),
+                    });
+                }
+                catch {
+                    admitted.splice(admitted.indexOf(message), 1);
+                }
+            }
+            this.actors.set(id, { turn, actors: participants });
+            if (decision.messages.length > 0 && admitted.length === 0)
+                return { kind: "reject" };
+            if (participants.some((actor) => !this.store().actorStillAllowed(id, actor.userId, actor.revision)))
+                return { kind: "reject" };
+            return { ...decision, messages: admitted };
+        }, { global: true }));
+        this.disposers.push(ctx.tools.guard((execution) => {
+            if (execution.agent === undefined)
+                return undefined;
+            const actors = this.participants(execution.agent);
+            for (const actor of actors) {
+                const root = this.root(execution.agent);
+                if (!this.store().actorStillAllowed(root, actor.userId, actor.revision))
+                    return "Shared chat access was revoked.";
+                if (!actor.tools.has(execution.name))
+                    return "This tool is outside the participant's own permissions.";
+                // Personal filesystem, credentials and skill/command activation cannot
+                // be delegated just by typing a message into someone else's chat.
+                if (/^(?:read|write|edit|glob|grep|ls|bash|shell|exec|str_replace_editor|skill|skills_|command|delegate|subagent|agent_|document_|qa_file_delete)/u.test(execution.name))
+                    return "Shared participation does not grant the owner's filesystem or agent capabilities.";
+                // A tool name's permission ceiling cannot confine an arbitrary plugin
+                // body to published files. Unknown implementations fail closed until
+                // an independently audited stateless/resource-scoped adapter exists.
+                if (!this.resourceSafe(execution.name))
+                    return "This tool has no shared-chat resource boundary.";
+            }
+            return undefined;
+        }));
+        this.disposers.push(ctx.on("agent/request", async ({ agent }, next) => {
+            for (const actor of this.participants(agent)) {
+                if (!this.store().actorStillAllowed(this.root(agent), actor.userId, actor.revision))
+                    throw new Error("Shared chat access was revoked.");
+            }
+            return next();
+        }, { global: true }));
+        this.disposers.push(ctx.on("agent/disposed", ({ agent }) => this.actors.delete(String(agent.session.id)), { global: true }));
+    }
+    root(agent) {
+        let session = agent.session;
+        const seen = new Set();
+        while (session.header.origin === "subagent" &&
+            session.header.parentSession !== undefined) {
+            const id = String(session.id);
+            if (seen.has(id))
+                break;
+            seen.add(id);
+            const parent = this.ctx.sessions.get(session.header.parentSession);
+            if (parent === undefined)
+                break;
+            session = parent;
+        }
+        return String(session.id);
+    }
+    participants(agent) {
+        return this.actors.get(this.root(agent))?.actors ?? [];
+    }
+    collaborative(sessionId) {
+        return (this.actors.get(sessionId)?.actors.length ?? 0) > 0;
+    }
+    /** Called after permission mutation. Only a turn carrying stale input stops. */
+    revoke(sessionId) {
+        const agent = this.ctx.agents.get(SessionId(sessionId));
+        for (const message of [
+            ...(agent?.inbox.nextTurn ?? []),
+            ...(agent?.inbox.nextStep ?? []),
+        ]) {
+            const requestId = message.source.rpcId;
+            const actor = requestId === undefined
+                ? undefined
+                : this.store().requestActor(sessionId, requestId);
+            if (actor !== undefined &&
+                actor.revision !== null &&
+                !this.store().actorStillAllowed(sessionId, actor.userId, actor.revision))
+                agent?.inbox.remove(message.id);
+        }
+        const current = this.actors.get(sessionId);
+        if (current?.actors.some((actor) => !this.store().actorStillAllowed(sessionId, actor.userId, actor.revision)))
+            this.ctx.sessionController.cancel({ sessionId: SessionId(sessionId) });
+    }
+    dispose() {
+        for (const dispose of this.disposers.splice(0).reverse())
+            dispose();
+        this.actors.clear();
+    }
+}
+//# sourceMappingURL=turn-guard.js.map