aegis-desktop 0.8.21 → 0.8.23

package/lib/local/local.js

@@ -95,6 +95,12 @@ const DSML_RE_LEADER = /<\s*\/?\s*｜\s*(?:DSML\s*)?｜\s*(?:(?:tool|function)[_
 const DSML_RE_ANY_TAG = /<\s*\/?\s*｜\s*(?:DSML\s*)?｜\s*[A-Za-z_][A-Za-z0-9_]*[^>]{0,120}>/g;
 const DSML_RE_SKELETON = /<\s*\/?\s*(?:tool_calls|function_calls|invoke|parameter|param|reasoning)\b[^>]{0,120}>/gi;
 const DSML_RE_JSON_CALLS = /｜[ \t]*(?:tool|function)[_▁ ]*calls?[_▁ ]*begin[ \t]*｜([\s\S]*?)｜[ \t]*(?:tool|function)[_▁ ]*calls?[_▁ ]*end[ \t]*｜/gi;
+// The leader/closer halves of DSML_RE_JSON_CALLS above, split out so the hold
+// logic can detect "the leader arrived but its closer has not" — an arbitrary
+// JSON blob sits between them with no '<' or recognizable structure of its
+// own, so nothing else below would otherwise hold it back.
+const DSML_RE_JSON_CALLS_OPEN = /｜[ \t]*(?:tool|function)[_▁ ]*calls?[_▁ ]*begin[ \t]*｜/gi;
+const DSML_RE_JSON_CALLS_CLOSE = /｜[ \t]*(?:tool|function)[_▁ ]*calls?[_▁ ]*end[ \t]*｜/gi;
 const DSML_RE_ENVELOPE_TOKEN = /｜[ \t]?[A-Za-z0-9_▁]*[ \t]?｜/g;
 const DSML_RE_DRIFT_INVOKE = /<\s*｜\s*(?:DSML\s*)?｜\s*(?:invoke|call|tool_call)\b\s*([^>]*?)\s*>/gi;
 const DSML_RE_DRIFT_PARAM = /<\s*｜\s*(?:DSML\s*)?｜\s*(?:parameter|param|arg)\b\s*([^>]*?)\s*>/gi;
@@ -296,6 +302,17 @@ function dsmlUnterminated(s) {
 function dsmlHoldFrom(buf) {
   const tagStart = buf.search(/<\s*\/?\s*｜/);
   if (tagStart !== -1) return tagStart;
+  // The older JSON-array envelope (DSML_RE_JSON_CALLS): once its leader token
+  // has arrived, hold everything until the matching closer token lands. An
+  // arbitrary JSON blob sits between them with no '<' and no recognizable
+  // per-character structure, so without this check it streams straight
+  // through as visible prose the instant the leader's own closing '｜'
+  // arrives — the hold rule below only looks at ONE pipe token at a time and
+  // has no notion of "waiting for a second, different token later on".
+  const jsonOpenIdx = buf.search(DSML_RE_JSON_CALLS_OPEN);
+  if (jsonOpenIdx !== -1 && buf.slice(jsonOpenIdx).search(DSML_RE_JSON_CALLS_CLOSE) === -1) {
+    return jsonOpenIdx;
+  }
   const lt = DSML_RE_TRAILING_LT.exec(buf);
   if (lt) return lt.index;
   const openIdx = buf.indexOf('｜');

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "aegis-desktop",
   "productName": "AEGIS Desktop",
-  "version": "0.8.21",
+  "version": "0.8.23",
   "description": "Thin Electron host for AEGIS — a local chat UI over the shared client/aegis.js transport. Ships transport + UI only; engine logic stays server-side.",
   "author": {
     "name": "AEGIS Code",

package/vendor/aegis.js

@@ -100,6 +100,12 @@ const DSML_RE_LEADER = /<\s*\/?\s*｜\s*(?:DSML\s*)?｜\s*(?:(?:tool|function)[_
 const DSML_RE_ANY_TAG = /<\s*\/?\s*｜\s*(?:DSML\s*)?｜\s*[A-Za-z_][A-Za-z0-9_]*[^>]{0,120}>/g;
 const DSML_RE_SKELETON = /<\s*\/?\s*(?:tool_calls|function_calls|invoke|parameter|param|reasoning)\b[^>]{0,120}>/gi;
 const DSML_RE_JSON_CALLS = /｜[ \t]*(?:tool|function)[_▁ ]*calls?[_▁ ]*begin[ \t]*｜([\s\S]*?)｜[ \t]*(?:tool|function)[_▁ ]*calls?[_▁ ]*end[ \t]*｜/gi;
+// The leader/closer halves of DSML_RE_JSON_CALLS above, split out so the hold
+// logic can detect "the leader arrived but its closer has not" — an arbitrary
+// JSON blob sits between them with no '<' or recognizable structure of its
+// own, so nothing else below would otherwise hold it back.
+const DSML_RE_JSON_CALLS_OPEN = /｜[ \t]*(?:tool|function)[_▁ ]*calls?[_▁ ]*begin[ \t]*｜/gi;
+const DSML_RE_JSON_CALLS_CLOSE = /｜[ \t]*(?:tool|function)[_▁ ]*calls?[_▁ ]*end[ \t]*｜/gi;
 const DSML_RE_ENVELOPE_TOKEN = /｜[ \t]?[A-Za-z0-9_▁]*[ \t]?｜/g;
 const DSML_RE_DRIFT_INVOKE = /<\s*｜\s*(?:DSML\s*)?｜\s*(?:invoke|call|tool_call)\b\s*([^>]*?)\s*>/gi;
 const DSML_RE_DRIFT_PARAM = /<\s*｜\s*(?:DSML\s*)?｜\s*(?:parameter|param|arg)\b\s*([^>]*?)\s*>/gi;
@@ -301,6 +307,17 @@ function dsmlUnterminated(s) {
 function dsmlHoldFrom(buf) {
   const tagStart = buf.search(/<\s*\/?\s*｜/);
   if (tagStart !== -1) return tagStart;
+  // The older JSON-array envelope (DSML_RE_JSON_CALLS): once its leader token
+  // has arrived, hold everything until the matching closer token lands. An
+  // arbitrary JSON blob sits between them with no '<' and no recognizable
+  // per-character structure, so without this check it streams straight
+  // through as visible prose the instant the leader's own closing '｜'
+  // arrives — the hold rule below only looks at ONE pipe token at a time and
+  // has no notion of "waiting for a second, different token later on".
+  const jsonOpenIdx = buf.search(DSML_RE_JSON_CALLS_OPEN);
+  if (jsonOpenIdx !== -1 && buf.slice(jsonOpenIdx).search(DSML_RE_JSON_CALLS_CLOSE) === -1) {
+    return jsonOpenIdx;
+  }
   const lt = DSML_RE_TRAILING_LT.exec(buf);
   if (lt) return lt.index;
   const openIdx = buf.indexOf('｜');

package/vendor/platform.js

@@ -89,6 +89,24 @@ function defaultDirExists(dir) {
   }
 }
 
+/**
+ * Does this directory hold anything? Used only to break the OneDrive-vs-plain
+ * Desktop tie below — OneDrive routinely scaffolds an empty `OneDrive\Desktop`
+ * folder on install whether or not the user ever turned Desktop redirection
+ * on, so mere existence cannot tell a genuinely redirected Desktop apart from
+ * that empty placeholder. An unreadable/missing directory counts as empty
+ * rather than throwing, since the caller already confirmed it exists with
+ * `dirExists` and a race or permissions quirk here should not crash a
+ * best-effort path guess.
+ */
+function defaultDirNonEmpty(dir) {
+  try {
+    return fs.readdirSync(dir).length > 0;
+  } catch {
+    return false;
+  }
+}
+
 /** Read a text file; `null` for every failure (missing, unreadable, not text). */
 function defaultReadText(file) {
   try {
@@ -493,15 +511,17 @@ function hasPosixModes(options = {}) {
  *
  * macOS is the one host where `~/Desktop` is simply correct.
  *
- * Seams: `dirExists` (default: a real statSync isDirectory probe) and `readText`
- * (default: a real utf8 read, `null` on any failure), so all three branches are
- * exercised on one host.
+ * Seams: `dirExists` (default: a real statSync isDirectory probe), `dirNonEmpty`
+ * (default: a real readdirSync length check, used only to break the win32
+ * OneDrive-vs-plain tie below) and `readText` (default: a real utf8 read,
+ * `null` on any failure), so all three branches are exercised on one host.
  */
 function desktopDir(options = {}) {
   const { platform, env, win32, o } = seams(options);
   const P = win32 ? path.win32 : path.posix;
   const home = homeDir(options);
   const dirExists = typeof o.dirExists === 'function' ? o.dirExists : defaultDirExists;
+  const dirNonEmpty = typeof o.dirNonEmpty === 'function' ? o.dirNonEmpty : defaultDirNonEmpty;
   const readText = typeof o.readText === 'function' ? o.readText : defaultReadText;
 
   const candidates = [];
@@ -514,6 +534,31 @@ function desktopDir(options = {}) {
     if (oneDrive) push(P.join(oneDrive, 'Desktop'));
     if (home) push(P.join(home, 'OneDrive', 'Desktop'));
     if (home) push(P.join(home, 'Desktop'));
+    // OneDrive is tried first above — real folder redirection moves the live
+    // Desktop there and leaves the plain one empty, exactly as the module
+    // comment says. But OneDrive also scaffolds an empty `OneDrive\Desktop`
+    // on install whether redirection was ever turned on, and that empty
+    // placeholder must not outrank a Desktop the user is actually using —
+    // reported live: a write landed in an untouched `OneDrive\Desktop` while
+    // the populated plain Desktop sat right next to it. Demote every
+    // OneDrive candidate below the plain one only in that one unambiguous
+    // case (a OneDrive candidate exists but is empty, AND the plain Desktop
+    // exists and has something in it); every other combination — including
+    // "both empty", which is what a fresh profile and this file's own
+    // stubbed tests both look like — keeps the order above, since a guess is
+    // still owed and emptiness alone proves nothing there.
+    const plainDesktop = home ? P.join(home, 'Desktop') : '';
+    const plainIdx = candidates.indexOf(plainDesktop);
+    if (plainIdx > 0 && dirExists(plainDesktop) && dirNonEmpty(plainDesktop)) {
+      const oneDriveCandidates = candidates.slice(0, plainIdx);
+      const allOneDriveEmpty = oneDriveCandidates.every(
+        (c) => !dirExists(c) || !dirNonEmpty(c)
+      );
+      if (allOneDriveEmpty) {
+        candidates.splice(plainIdx, 1);
+        candidates.unshift(plainDesktop);
+      }
+    }
   } else if (platform === 'darwin') {
     if (home) push(P.join(home, 'Desktop'));
   } else {