chainlesschain 0.163.5 → 0.163.7

package/src/lib/file-lines.js

@@ -1,7 +1,64 @@
 import { closeSync, fstatSync, openSync, readSync } from "node:fs";
-import { StringDecoder } from "node:string_decoder";
 
 const DEFAULT_CHUNK_SIZE = 64 * 1024;
+export const DEFAULT_MAX_FILE_LINE_BYTES = 16 * 1024 * 1024;
+export const FILE_LINE_TOO_LARGE_CODE = "CC_FILE_LINE_TOO_LARGE";
+
+function normalizeMaxLineBytes(value) {
+  const parsed = Number(value);
+  if (!Number.isSafeInteger(parsed) || parsed <= 0) {
+    throw new TypeError("maxLineBytes must be a positive safe integer");
+  }
+  return parsed;
+}
+
+function normalizeChunkSize(value) {
+  const parsed = Number(value);
+  if (!Number.isSafeInteger(parsed) || parsed <= 0) {
+    throw new TypeError("chunkSize must be a positive safe integer");
+  }
+  return parsed;
+}
+
+export function assertFileLineByteLength(
+  byteLength,
+  {
+    maxLineBytes = DEFAULT_MAX_FILE_LINE_BYTES,
+    code = FILE_LINE_TOO_LARGE_CODE,
+    lineNo = null,
+    direction = null,
+    label = "File line",
+  } = {},
+) {
+  const actualBytes = Number(byteLength);
+  const maxBytes = normalizeMaxLineBytes(maxLineBytes);
+  if (!Number.isSafeInteger(actualBytes) || actualBytes < 0) {
+    throw new TypeError("byteLength must be a non-negative safe integer");
+  }
+  if (actualBytes <= maxBytes) return actualBytes;
+  const error = new Error(`${label} exceeded the ${maxBytes}-byte limit`);
+  error.code = code;
+  error.actualBytes = actualBytes;
+  error.maxBytes = maxBytes;
+  if (Number.isSafeInteger(lineNo) && lineNo > 0) error.lineNo = lineNo;
+  if (direction) error.direction = direction;
+  throw error;
+}
+
+function assertLineByteLength(byteLength, options, details) {
+  return assertFileLineByteLength(byteLength, {
+    maxLineBytes: options.maxLineBytes,
+    code: options.lineTooLargeCode,
+    label: options.lineLabel,
+    ...details,
+  });
+}
+
+function joinedLineBuffer(parts, byteLength) {
+  if (parts.length === 0) return Buffer.alloc(0);
+  if (parts.length === 1) return parts[0];
+  return Buffer.concat(parts, byteLength);
+}
 
 function recordRead(ioMetrics, bytes) {
   if (!ioMetrics || typeof ioMetrics !== "object") return;
@@ -13,7 +70,8 @@ function recordRead(ioMetrics, bytes) {
 /**
  * Stream UTF-8 lines from a file without loading the whole file. The final
  * unterminated fragment is yielded with `terminated:false`, which lets callers
- * distinguish a crash tail from a normal record.
+ * distinguish a crash tail from a normal record. Records are assembled as raw
+ * byte slices and checked before any Buffer.concat or UTF-8 decode.
  */
 export function* iterateFileLinesSync(
   filePath,
@@ -21,35 +79,81 @@ export function* iterateFileLinesSync(
     chunkSize = DEFAULT_CHUNK_SIZE,
     includeEmpty = false,
     ioMetrics = null,
+    maxLineBytes = DEFAULT_MAX_FILE_LINE_BYTES,
+    lineTooLargeCode = FILE_LINE_TOO_LARGE_CODE,
+    lineLabel = "File line",
   } = {},
 ) {
+  const lineOptions = {
+    maxLineBytes: normalizeMaxLineBytes(maxLineBytes),
+    lineTooLargeCode,
+    lineLabel,
+  };
+  const buffer = Buffer.allocUnsafe(
+    Math.min(normalizeChunkSize(chunkSize), lineOptions.maxLineBytes),
+  );
   const fd = openSync(filePath, "r");
-  const decoder = new StringDecoder("utf8");
-  const buffer = Buffer.allocUnsafe(Math.max(1024, chunkSize));
-  let pending = "";
+  let pendingParts = [];
+  let pendingBytes = 0;
   let lineNo = 0;
   try {
     for (;;) {
-      const bytes = readSync(fd, buffer, 0, buffer.length, null);
-      if (bytes === 0) break;
-      recordRead(ioMetrics, bytes);
-      pending += decoder.write(buffer.subarray(0, bytes));
-      let newline;
-      while ((newline = pending.indexOf("\n")) >= 0) {
-        let line = pending.slice(0, newline);
-        if (line.endsWith("\r")) line = line.slice(0, -1);
-        pending = pending.slice(newline + 1);
+      const bytesRead = readSync(fd, buffer, 0, buffer.length, null);
+      if (bytesRead === 0) break;
+      recordRead(ioMetrics, bytesRead);
+      let start = 0;
+      let newline = buffer.indexOf(0x0a, start);
+      while (newline >= 0 && newline < bytesRead) {
+        const segment = buffer.subarray(start, newline);
+        const lineByteLength = pendingBytes + segment.length;
         lineNo += 1;
-        if (includeEmpty || line.length > 0) {
-          yield { line, lineNo, terminated: true };
+        assertLineByteLength(lineByteLength, lineOptions, {
+          lineNo,
+          direction: "forward",
+        });
+        let lineBytes = joinedLineBuffer(
+          segment.length > 0 ? [...pendingParts, segment] : pendingParts,
+          lineByteLength,
+        );
+        if (lineBytes.length > 0 && lineBytes[lineBytes.length - 1] === 0x0d) {
+          lineBytes = lineBytes.subarray(0, lineBytes.length - 1);
+        }
+        if (includeEmpty || lineBytes.length > 0) {
+          yield {
+            line: lineBytes.toString("utf8"),
+            lineNo,
+            terminated: true,
+          };
         }
+        pendingParts = [];
+        pendingBytes = 0;
+        start = newline + 1;
+        newline = buffer.indexOf(0x0a, start);
       }
+
+      const trailing = buffer.subarray(start, bytesRead);
+      const nextPendingBytes = pendingBytes + trailing.length;
+      assertLineByteLength(nextPendingBytes, lineOptions, {
+        lineNo: lineNo + 1,
+        direction: "forward",
+      });
+      if (trailing.length > 0) pendingParts.push(Buffer.from(trailing));
+      pendingBytes = nextPendingBytes;
     }
-    pending += decoder.end();
-    if (pending.length > 0 || includeEmpty) {
+
+    if (pendingBytes > 0 || includeEmpty) {
       lineNo += 1;
-      if (includeEmpty || pending.length > 0) {
-        yield { line: pending, lineNo, terminated: false };
+      assertLineByteLength(pendingBytes, lineOptions, {
+        lineNo,
+        direction: "forward",
+      });
+      if (includeEmpty || pendingBytes > 0) {
+        const pending = joinedLineBuffer(pendingParts, pendingBytes);
+        yield {
+          line: pending.toString("utf8"),
+          lineNo,
+          terminated: false,
+        };
       }
     }
   } finally {
@@ -68,36 +172,57 @@ export function* iterateFileLinesReverseSync(
     chunkSize = DEFAULT_CHUNK_SIZE,
     includeEmpty = false,
     ioMetrics = null,
+    maxLineBytes = DEFAULT_MAX_FILE_LINE_BYTES,
+    lineTooLargeCode = FILE_LINE_TOO_LARGE_CODE,
+    lineLabel = "File line",
   } = {},
 ) {
+  const lineOptions = {
+    maxLineBytes: normalizeMaxLineBytes(maxLineBytes),
+    lineTooLargeCode,
+    lineLabel,
+  };
+  const readChunkSize = Math.min(
+    normalizeChunkSize(chunkSize),
+    lineOptions.maxLineBytes,
+  );
   const fd = openSync(filePath, "r");
-  const size = fstatSync(fd).size;
-  let endsWithNewline = false;
-  if (size > 0) {
-    const last = Buffer.allocUnsafe(1);
-    const bytes = readSync(fd, last, 0, 1, size - 1);
-    recordRead(ioMetrics, bytes);
-    endsWithNewline = last[0] === 0x0a;
-  }
-  let position = size;
-  let carry = Buffer.alloc(0);
+  let carryParts = [];
+  let carryBytes = 0;
   let isPhysicalTail = true;
   try {
+    const size = fstatSync(fd).size;
+    let endsWithNewline = false;
+    if (size > 0) {
+      const last = Buffer.allocUnsafe(1);
+      const bytesRead = readSync(fd, last, 0, 1, size - 1);
+      recordRead(ioMetrics, bytesRead);
+      endsWithNewline = last[0] === 0x0a;
+    }
+
+    let position = size;
     while (position > 0) {
-      const length = Math.min(Math.max(1024, chunkSize), position);
+      const length = Math.min(readChunkSize, position);
       position -= length;
       const chunk = Buffer.allocUnsafe(length);
-      const bytes = readSync(fd, chunk, 0, length, position);
-      recordRead(ioMetrics, bytes);
-      const combined = Buffer.concat([chunk, carry]);
-      let end = combined.length;
-      for (let index = combined.length - 1; index >= 0; index -= 1) {
-        if (combined[index] !== 0x0a) continue;
-        let bytes = combined.subarray(index + 1, end);
-        if (bytes.length > 0 && bytes[bytes.length - 1] === 0x0d) {
-          bytes = bytes.subarray(0, bytes.length - 1);
+      const bytesRead = readSync(fd, chunk, 0, length, position);
+      recordRead(ioMetrics, bytesRead);
+      let end = bytesRead;
+      for (let index = bytesRead - 1; index >= 0; index -= 1) {
+        if (chunk[index] !== 0x0a) continue;
+        const segment = chunk.subarray(index + 1, end);
+        const lineByteLength = segment.length + carryBytes;
+        assertLineByteLength(lineByteLength, lineOptions, {
+          direction: "reverse",
+        });
+        let lineBytes = joinedLineBuffer(
+          segment.length > 0 ? [segment, ...carryParts] : carryParts,
+          lineByteLength,
+        );
+        if (lineBytes.length > 0 && lineBytes[lineBytes.length - 1] === 0x0d) {
+          lineBytes = lineBytes.subarray(0, lineBytes.length - 1);
         }
-        const line = bytes.toString("utf8");
+        const line = lineBytes.toString("utf8");
         const terminated = isPhysicalTail ? endsWithNewline : true;
         // A file ending in "\n" produces one empty physical-tail slice. Skip
         // it without changing the termination status of the real last line.
@@ -105,16 +230,27 @@ export function* iterateFileLinesReverseSync(
           yield { line, terminated };
           isPhysicalTail = false;
         }
+        carryParts = [];
+        carryBytes = 0;
         end = index;
       }
-      carry = combined.subarray(0, end);
+
+      const prefix = chunk.subarray(0, end);
+      const nextCarryBytes = prefix.length + carryBytes;
+      assertLineByteLength(nextCarryBytes, lineOptions, {
+        direction: "reverse",
+      });
+      if (prefix.length > 0) carryParts.unshift(Buffer.from(prefix));
+      carryBytes = nextCarryBytes;
     }
-    if (carry.length > 0 || includeEmpty) {
-      let bytes = carry;
-      if (bytes.length > 0 && bytes[bytes.length - 1] === 0x0d) {
-        bytes = bytes.subarray(0, bytes.length - 1);
+
+    if (carryBytes > 0 || includeEmpty) {
+      assertLineByteLength(carryBytes, lineOptions, { direction: "reverse" });
+      let lineBytes = joinedLineBuffer(carryParts, carryBytes);
+      if (lineBytes.length > 0 && lineBytes[lineBytes.length - 1] === 0x0d) {
+        lineBytes = lineBytes.subarray(0, lineBytes.length - 1);
       }
-      const line = bytes.toString("utf8");
+      const line = lineBytes.toString("utf8");
       if (includeEmpty || line.length > 0) {
         yield { line, terminated: !isPhysicalTail };
       }

package/src/lib/llm-pricing.js

@@ -84,11 +84,6 @@ export const PRICE_TABLE = Object.freeze({
   ],
 });
 
-const round = (n, dp = 6) => {
-  const f = Math.pow(10, dp);
-  return Math.round((Number(n) + Number.EPSILON) * f) / f;
-};
-
 /**
  * Merge user-supplied price overrides (typically `config.llm.pricing`) onto the
  * built-in table. Override shape mirrors PRICE_TABLE:
@@ -221,22 +216,22 @@ export function estimateCost({
       rate: null,
     };
   }
-  const inputCost = round((Number(inputTokens) / 1e6) * rate.in);
-  const outputCost = round((Number(outputTokens) / 1e6) * rate.out);
-  const cacheReadCost = round(
-    (Number(cacheReadTokens) / 1e6) * rate.in * cacheReadMultiplier(provider),
-  );
-  const cacheCreationCost = round(
-    (Number(cacheCreationTokens) / 1e6) * rate.in * CACHE_WRITE_MULTIPLIER,
-  );
+  // Keep full IEEE-754 precision throughout authority and budget arithmetic.
+  // Rounding each component to six decimals lets a real sub-microdollar call
+  // become zero and can make a hard `maxUsd` gate pass incorrectly. Display
+  // surfaces may format these values, but safety decisions consume the raw sum.
+  const inputCost = (Number(inputTokens) / 1e6) * rate.in;
+  const outputCost = (Number(outputTokens) / 1e6) * rate.out;
+  const cacheReadCost =
+    (Number(cacheReadTokens) / 1e6) * rate.in * cacheReadMultiplier(provider);
+  const cacheCreationCost =
+    (Number(cacheCreationTokens) / 1e6) * rate.in * CACHE_WRITE_MULTIPLIER;
   return {
     inputCost,
     outputCost,
     cacheReadCost,
     cacheCreationCost,
-    totalCost: round(
-      inputCost + outputCost + cacheReadCost + cacheCreationCost,
-    ),
+    totalCost: inputCost + outputCost + cacheReadCost + cacheCreationCost,
     currency: "USD",
     matched: true,
     free: rate.pattern === "free",
@@ -280,7 +275,7 @@ export function priceRollup(aggregate, { table } = {}) {
   const unpriced = [];
   for (const row of byModel) {
     if (row.matched) {
-      totalCost = round(totalCost + row.cost);
+      totalCost += row.cost;
     } else if (row.totalTokens > 0) {
       unpriced.push({
         provider: row.provider,

package/src/lib/loop.js

@@ -86,17 +86,73 @@ export function summarizeLoopEvents(events) {
   let config = null;
   let completedIterations = 0;
   let lastExitCode = null;
+  const scheduled = new Map();
+  const completed = new Set();
+  let schedulerMigration = null;
   for (const e of events || []) {
     if (e?.type === "loop_config") {
-      config = e.data || null;
+      const migrationFence = e.data?.schedulerMigrationFence;
+      if (
+        migrationFence?.schemaVersion === 1 &&
+        migrationFence.state === "retired" &&
+        migrationFence.originalConfig &&
+        typeof migrationFence.originalConfig === "object" &&
+        !Array.isArray(migrationFence.originalConfig)
+      ) {
+        // New clients recover the original definition from the fence while an
+        // older client sees the intentionally empty operands and refuses to
+        // start. The source is restored by appending the original loop_config.
+        config = migrationFence.originalConfig;
+        schedulerMigration = migrationFence;
+      } else {
+        config = e.data || null;
+      }
+    } else if (
+      e?.type === "loop_iteration_scheduled" &&
+      Number.isSafeInteger(e.data?.n) &&
+      e.data.n > 0 &&
+      Number.isSafeInteger(e.data?.scheduledFor) &&
+      e.data.scheduledFor >= 0
+    ) {
+      scheduled.set(e.data.n, {
+        n: e.data.n,
+        scheduledFor: e.data.scheduledFor,
+      });
     } else if (e?.type === "loop_iteration") {
       completedIterations += 1;
+      if (Number.isSafeInteger(e.data?.n) && e.data.n > 0) {
+        completed.add(e.data.n);
+      }
       if (e.data && typeof e.data.exitCode !== "undefined") {
         lastExitCode = e.data.exitCode;
       }
+    } else if (e?.type === "loop_scheduler_migration") {
+      schedulerMigration = e.data || null;
+    }
+  }
+  const pendingIteration =
+    [...scheduled.values()]
+      .filter((entry) => !completed.has(entry.n))
+      .sort((a, b) => a.n - b.n)[0] || null;
+  return {
+    config,
+    completedIterations,
+    lastExitCode,
+    pendingIteration,
+    schedulerMigration,
+  };
+}
+
+/** Return durable terminal data for one loop iteration, if already recorded. */
+export function findLoopIterationResult(events, iteration) {
+  if (!Number.isSafeInteger(iteration) || iteration < 1) return null;
+  for (let index = (events || []).length - 1; index >= 0; index -= 1) {
+    const event = events[index];
+    if (event?.type === "loop_iteration" && event.data?.n === iteration) {
+      return event.data || null;
     }
   }
-  return { config, completedIterations, lastExitCode };
+  return null;
 }
 
 /** Default abortable sleep — resolves early if the signal aborts. */
@@ -187,7 +243,10 @@ export async function runLoop({
     if (untilExitZero && res.exitCode === 0) {
       return { iterations: i, stoppedBy: "exit-zero", results };
     }
-    if (untilRegex && untilRegex.test(res.output || "")) {
+    if (
+      untilRegex &&
+      (res.matchedUntil === true || untilRegex.test(res.output || ""))
+    ) {
       return { iterations: i, stoppedBy: "match", results };
     }
     if (maxIterations && i >= maxIterations) {

package/src/lib/permission-engine.js

@@ -91,6 +91,8 @@ export const PERMISSION_SCOPES = [
   "audit:write",
   "config:read",
   "config:write",
+  "automation:execute",
+  "automation:connector:*",
   "system:admin",
 ];
 
@@ -296,7 +298,7 @@ function _grantActive(expiresAt, nowMs) {
 /**
  * Get all roles and direct permissions for a user.
  */
-export function getUserPermissions(db, userDid) {
+export function getUserPermissions(db, userDid, { nowMs = Date.now() } = {}) {
   ensurePermissionTables(db);
 
   // Get active role grants
@@ -305,7 +307,6 @@ export function getUserPermissions(db, userDid) {
     .all(userDid);
 
   // Filter out expired grants
-  const nowMs = Date.now();
   const grants = allGrants.filter((g) => _grantActive(g.expires_at, nowMs));
 
   // Get direct permissions (not expired)
@@ -347,8 +348,8 @@ export function getUserPermissions(db, userDid) {
 /**
  * Check if a user has a specific permission.
  */
-export function checkPermission(db, userDid, permission) {
-  const userPerms = getUserPermissions(db, userDid);
+export function checkPermission(db, userDid, permission, options) {
+  const userPerms = getUserPermissions(db, userDid, options);
 
   // Admin wildcard
   if (userPerms.isAdmin) return true;
@@ -356,9 +357,15 @@ export function checkPermission(db, userDid, permission) {
   // Exact match
   if (userPerms.effectivePermissions.includes(permission)) return true;
 
-  // Wildcard match (e.g., "note:*" matches "note:read")
-  const [scope] = permission.split(":");
-  if (userPerms.effectivePermissions.includes(`${scope}:*`)) return true;
+  // Hierarchical wildcard match. In addition to `note:*`, this allows an
+  // explicitly narrow grant such as `automation:connector:*` to authorize
+  // `automation:connector:slack` without granting unrelated automation
+  // capabilities.
+  const segments = permission.split(":");
+  for (let length = segments.length - 1; length >= 1; length -= 1) {
+    const wildcard = `${segments.slice(0, length).join(":")}:*`;
+    if (userPerms.effectivePermissions.includes(wildcard)) return true;
+  }
 
   return false;
 }

package/src/lib/public-ide-capability-manifest.js

@@ -50,6 +50,7 @@ const VSCODE_COMMANDS = [
   "chainlesschain.session.prStatus",
   "chainlesschain.background.agents",
   "chainlesschain.sessions.workbench",
+  "chainlesschain.automation.center",
   "chainlesschain.remote.control",
   "chainlesschain.usage.show",
   "chainlesschain.plugins.manage",
@@ -101,6 +102,7 @@ const JETBRAINS_ACTIONS = [
   "chainlesschain.bg.Agents",
   "chainlesschain.remote.Control",
   "chainlesschain.sessions.Workbench",
+  "chainlesschain.automation.Center",
   "chainlesschain.usage.Show",
   "chainlesschain.artifacts.Browse",
   "chainlesschain.policy.Viewer",