claude-flow 3.62.0 → 3.63.1

package/v3/@claude-flow/cli/dist/src/services/managed-memory-worker.js

@@ -0,0 +1,161 @@
+/** Fixed child entry. Native dependency loading must never move into the MCP parent. */
+import { existsSync, lstatSync, mkdirSync, realpathSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { pathToFileURL } from 'node:url';
+import { createRequire } from 'node:module';
+const NAMESPACE = 'managed-workflow-evidence';
+const HASH = /^[a-f0-9]{64}$/;
+const UUID = /^[a-f0-9-]{36}$/;
+const TYPES = ['code-review', 'migration', 'research', 'test-generation', 'implementation', 'other'];
+function requestOf(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw) || Buffer.byteLength(JSON.stringify(raw)) > 80_000)
+        throw new Error('invalid-request');
+    const r = raw;
+    const keys = r.operation === 'index' ? ['v', 'requestId', 'operation', 'id', 'value', 'taskType'] : ['v', 'requestId', 'operation', 'taskType', 'allowedIds'];
+    if (r.v !== 1 || typeof r.requestId !== 'string' || !UUID.test(r.requestId) || !['index', 'recall'].includes(String(r.operation)) || Object.keys(r).length !== keys.length || Object.keys(r).some(k => !keys.includes(k)) || !TYPES.includes(String(r.taskType)))
+        throw new Error('invalid-request');
+    if (r.operation === 'index' && (typeof r.id !== 'string' || !HASH.test(r.id) || typeof r.value !== 'string' || Buffer.byteLength(r.value) > 8192))
+        throw new Error('invalid-request');
+    if (r.operation === 'recall' && (!Array.isArray(r.allowedIds) || r.allowedIds.length > 500 || r.allowedIds.some(id => typeof id !== 'string' || !HASH.test(id))))
+        throw new Error('invalid-request');
+    return r;
+}
+const validRow = (row, key) => !!row && row.key === key && row.namespace === NAMESPACE && typeof row.content === 'string' && Buffer.byteLength(row.content) <= 8192;
+/** Pure operation seam for host tests. Serialized callers cannot supply an adapter. */
+export async function executeManagedMemory(raw, adapter, dbPath, beforeWrite) {
+    const r = requestOf(raw);
+    if (r.operation === 'index') {
+        const existing = await adapter.getEntry({ key: r.id, namespace: NAMESPACE, dbPath });
+        if (!existing?.success)
+            throw new Error('backend-unavailable');
+        if (existing.found) {
+            if (!validRow(existing.entry, r.id) || existing.entry.content !== r.value)
+                throw new Error('conflicting-index');
+            return { v: 1, requestId: r.requestId, ok: true, operation: 'index', durable: true, hasEmbedding: existing.entry.hasEmbedding === true };
+        }
+        await beforeWrite?.();
+        const result = await adapter.storeEntry({ key: r.id, namespace: NAMESPACE, value: r.value, tags: ['managed-workflow', r.taskType], generateEmbeddingFlag: true, upsert: false, requireNative: true, appendOnly: true, dbPath, provenanceType: 'system_observation' });
+        if (!result?.success || result.persistWarning)
+            throw new Error('persistence-unconfirmed');
+        // Observe the exact durable row after the append. Neither success nor a
+        // signed local ledger alone establishes that the native row exists.
+        const stored = await adapter.getEntry({ key: r.id, namespace: NAMESPACE, dbPath });
+        if (!stored?.success || !stored.found || !validRow(stored.entry, r.id) || stored.entry.content !== r.value)
+            throw new Error('persistence-unconfirmed');
+        return { v: 1, requestId: r.requestId, ok: true, operation: 'index', durable: true, hasEmbedding: stored.entry.hasEmbedding === true };
+    }
+    const result = await adapter.searchEntries({ query: `managed workflow ${r.taskType}`, namespace: NAMESPACE, limit: 20, threshold: 0, dbPath });
+    if (!result?.success || !Array.isArray(result.results))
+        return { v: 1, requestId: r.requestId, ok: true, operation: 'recall', available: false, rows: [] };
+    const allowed = new Set(r.allowedIds), seen = new Set();
+    const rows = [];
+    for (const hit of result.results.slice(0, 20)) {
+        if (!hit || hit.namespace !== NAMESPACE || typeof hit.key !== 'string' || !HASH.test(hit.key) || !allowed.has(hit.key) || seen.has(hit.key) || !Number.isFinite(hit.score) || hit.score < -1 || hit.score > 1)
+            continue;
+        seen.add(hit.key);
+        const hydrated = await adapter.getEntry({ key: hit.key, namespace: NAMESPACE, dbPath });
+        if (hydrated?.success && hydrated.found && validRow(hydrated.entry, hit.key))
+            rows.push({ key: hit.key, namespace: NAMESPACE, score: hit.score, content: hydrated.entry.content });
+    }
+    return { v: 1, requestId: r.requestId, ok: true, operation: 'recall', available: true, rows };
+}
+function databasePath() {
+    const root = realpathSync(process.cwd()), dir = join(root, '.swarm');
+    if (!existsSync(dir))
+        mkdirSync(dir, { mode: 0o700 });
+    if (lstatSync(dir).isSymbolicLink() || !lstatSync(dir).isDirectory())
+        throw new Error('backend-unavailable');
+    const path = join(dir, 'memory.db');
+    if (existsSync(path) && (lstatSync(path).isSymbolicLink() || !lstatSync(path).isFile()))
+        throw new Error('backend-unavailable');
+    return path;
+}
+async function loadNative(dbPath) {
+    // Transformers.js does not consistently honor the Python offline env flags.
+    // Configure the exact module identity AgentDB loads, before registry init.
+    const require = createRequire(import.meta.url);
+    const memoryEntry = require.resolve('@claude-flow/memory');
+    const agentEntry = createRequire(memoryEntry).resolve('agentdb');
+    const owner = createRequire(agentEntry);
+    for (const name of ['@huggingface/transformers', '@xenova/transformers']) {
+        let path;
+        try {
+            path = owner.resolve(name);
+        }
+        catch {
+            continue;
+        }
+        const modulePath = pathToFileURL(path).href;
+        const model = await import(modulePath);
+        if (model.env)
+            model.env.allowRemoteModels = false;
+    }
+    const js = new URL('../memory/memory-bridge.js', import.meta.url);
+    const moduleUrl = existsSync(fileURLToPath(js)) ? js : new URL('../memory/memory-bridge.ts', import.meta.url);
+    // Deliberately nonliteral import: targeted boundary builds do not pull the
+    // optional native dependency graph into the parent compilation.
+    const modulePath = moduleUrl.href;
+    const bridge = await import(modulePath);
+    const registry = await bridge.getControllerRegistry(dbPath);
+    const agentdb = registry?.getAgentDB?.(), db = agentdb?.database;
+    if (!db || agentdb.isWasm === true || typeof db.inTransaction !== 'boolean' || typeof db.transaction !== 'function' || db.memory !== false || typeof db.name !== 'string' || resolve(db.name) !== resolve(dbPath))
+        throw new Error('backend-unavailable');
+    return { getEntry: bridge.bridgeGetEntry, searchEntries: bridge.bridgeSearchEntries, storeEntry: bridge.bridgeStoreEntry };
+}
+if (typeof process.send === 'function' && process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+    let busy = false;
+    let idle;
+    let adapter;
+    let pendingGrant;
+    const ask = (id, phase) => new Promise(resolve => {
+        pendingGrant = { id, grant: phase === 'ready' ? 'execute' : 'write', resolve };
+        process.send?.({ v: 1, requestId: id, phase });
+    });
+    process.once('disconnect', () => process.exit(0));
+    process.on('message', async (value) => {
+        if (value && typeof value === 'object' && 'grant' in value) {
+            const message = value;
+            if (Object.keys(message).length === 3 && message.v === 1 && message.requestId === pendingGrant?.id && message.grant === pendingGrant?.grant) {
+                const grant = pendingGrant;
+                pendingGrant = undefined;
+                grant?.resolve();
+            }
+            return;
+        }
+        if (idle)
+            clearTimeout(idle);
+        let request;
+        try {
+            request = requestOf(value);
+        }
+        catch {
+            process.send?.({ v: 1, ok: false, error: 'invalid-request' });
+            return;
+        }
+        if (busy) {
+            process.send?.({ v: 1, requestId: request.requestId, ok: false, error: 'worker-busy' });
+            return;
+        }
+        busy = true;
+        try {
+            const path = databasePath();
+            adapter ??= loadNative(path);
+            const native = await adapter;
+            await ask(request.requestId, 'ready');
+            const result = await executeManagedMemory(request, native, path, () => ask(request.requestId, 'before-write'));
+            if (Buffer.byteLength(JSON.stringify(result)) > 200_000)
+                throw new Error('result-limit');
+            process.send?.(result);
+        }
+        catch {
+            // Upstream errors may carry prompts, SQL, paths or credentials.
+            process.send?.({ v: 1, requestId: request.requestId, ok: false, error: 'native-operation-unavailable' });
+        }
+        finally {
+            busy = false;
+            idle = setTimeout(() => process.exit(0), 5000);
+        }
+    });
+}
+//# sourceMappingURL=managed-memory-worker.js.map

package/v3/@claude-flow/cli/dist/src/services/managed-run-collector.d.ts

@@ -0,0 +1,93 @@
+import { type ManagedEvent } from './managed-workflows.js';
+export type ManagedSessionFacts = {
+    status?: string;
+    budget?: {
+        max_list_cost?: {
+            amount?: string;
+            currency?: string;
+        };
+    };
+    usage?: {
+        list_cost?: {
+            amount?: string;
+            currency?: string;
+        };
+    };
+};
+export type ManagedCollectorTransport = {
+    readEvents: (since?: string) => Promise<ManagedEvent[]>;
+    readSession: () => Promise<ManagedSessionFacts>;
+};
+type Phase = {
+    id: string;
+    name: string;
+    status: string;
+};
+type Thread = {
+    id: string;
+    runId: string | null;
+    status: string;
+    phaseId?: string;
+};
+export type ManagedRunSnapshot = {
+    sessionId: string;
+    status: string;
+    stopReason: string | null;
+    budgetCents: number | null;
+    listCostCents: number | null;
+    providerFinished: boolean;
+    workersInspected: false;
+    acceptancePassed: false;
+    verification: 'unverified';
+    runs: Array<{
+        id: string;
+        status: string;
+        result?: string;
+        phases: Phase[];
+    }>;
+    threads: Thread[];
+    threadOffset: number;
+    threadCount: number;
+    threadCounts: {
+        running: number;
+        ended: number;
+        failed: number;
+        idle: number;
+    };
+    blockedEventIds: string[];
+    observedFailures: number;
+    updatedMs: number;
+};
+export type ManagedCollection = {
+    events: ManagedEvent[];
+    snapshot: ManagedRunSnapshot;
+};
+export declare const COLLECTOR_LIMITS: {
+    readonly sessions: 6;
+    readonly events: 10000;
+    readonly bytes: 16000000;
+    readonly shownThreads: 60;
+    readonly staleMs: 300000;
+};
+/** This cache is an observation aid. Cached facts never authorize an action. */
+export declare class ManagedRunCollector {
+    private readonly states;
+    private readonly now;
+    private readonly ttlMs;
+    constructor(options?: {
+        now?: () => number;
+        ttlMs?: number;
+    });
+    /** Singleflight includes event and session reads; a failed refresh is never cached as success. */
+    refresh(sessionId: string, transport: ManagedCollectorTransport): Promise<ManagedCollection>;
+    /** Pure observation, suitable for disk snapshot publication. Never invokes a transport. */
+    snapshots(): ManagedRunSnapshot[];
+    /** A local worker page only. Aggregate counts and observation timestamp do not change. */
+    page(sessionId: string, threadOffset?: number): ManagedRunSnapshot | undefined;
+    /** A collector doing work cannot be forgotten midflight. No remote work is interrupted. */
+    forget(sessionId: string): boolean;
+    private observe;
+}
+export declare const sharedManagedCollector: ManagedRunCollector;
+export {};
+//# sourceMappingURL=managed-run-collector.d.ts.map

package/v3/@claude-flow/cli/dist/src/services/managed-run-collector.js

@@ -0,0 +1,181 @@
+/** One explicit, bounded event collector per managed session. No background traffic. */
+import { isDeepStrictEqual } from 'node:util';
+import { eventPage, ManagedProgress } from './managed-workflows.js';
+export const COLLECTOR_LIMITS = { sessions: 6, events: 10_000, bytes: 16_000_000, shownThreads: 60, staleMs: 300_000 };
+const idOf = (v) => typeof v === 'string' && /^[A-Za-z0-9_-]{1,128}$/.test(v) ? v : undefined;
+const record = (v) => v && typeof v === 'object' && !Array.isArray(v) ? v : undefined;
+const clone = (v) => JSON.parse(JSON.stringify(v));
+const cents = (v) => {
+    const r = record(v);
+    return r && (r.currency === undefined || r.currency === 'USD') && typeof r.amount === 'string' && /^(?:0|[1-9][0-9]{0,8})$/.test(r.amount) ? Number(r.amount) : null;
+};
+const phaseName = (v, fallback) => {
+    if (typeof v !== 'string')
+        return fallback;
+    if (/sk-|ghp_|github_pat_|hf_|npm_|xox|AKIA|AIza|Bearer|PRIVATE KEY|password|secret|credential|[A-Za-z0-9_=-]{24,}|token["']?\s*[:=]/i.test(v))
+        return '[redacted phase]';
+    return v.replace(/[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u202a-\u202e\u2060-\u206f]/g, '').slice(0, 80) || fallback;
+};
+/** This cache is an observation aid. Cached facts never authorize an action. */
+export class ManagedRunCollector {
+    states = new Map();
+    now;
+    ttlMs;
+    constructor(options = {}) {
+        this.now = options.now ?? Date.now;
+        this.ttlMs = options.ttlMs ?? 1000;
+        if (!Number.isFinite(this.ttlMs) || this.ttlMs < 0 || this.ttlMs > 60_000)
+            throw new Error('Invalid collector TTL');
+    }
+    /** Singleflight includes event and session reads; a failed refresh is never cached as success. */
+    refresh(sessionId, transport) {
+        if (!idOf(sessionId))
+            return Promise.reject(new Error('Invalid managed session ID'));
+        let state = this.states.get(sessionId);
+        if (!state) {
+            if (this.states.size >= COLLECTOR_LIMITS.sessions) {
+                const oldest = [...this.states.entries()].filter(([, s]) => !s.flight && (this.now() - s.lastUsed >= COLLECTOR_LIMITS.staleMs || ['idle', 'terminated', 'error'].includes(s.result?.snapshot.status ?? 'unknown'))).sort((a, b) => a[1].lastUsed - b[1].lastUsed)[0];
+                if (!oldest)
+                    return Promise.reject(new Error('Managed collector session limit reached'));
+                this.states.delete(oldest[0]);
+            }
+            state = { events: new Map(), bytes: 0, progress: new ManagedProgress(), threads: new Map(), phases: new Map(), blocked: new Set(), session: {}, lastRead: -Infinity, lastUsed: this.now() };
+            this.states.set(sessionId, state);
+        }
+        state.lastUsed = this.now();
+        if (state.flight)
+            return state.flight.then(clone);
+        if (state.result && this.now() - state.lastRead < this.ttlMs)
+            return Promise.resolve(clone(state.result));
+        const s = state;
+        // Start transport in a microtask so reentrant callers also see the flight.
+        s.flight = Promise.resolve().then(async () => {
+            const [events, session] = await Promise.all([transport.readEvents(s.progress.watermark()), transport.readSession()]);
+            if (!record(session))
+                throw new Error('Invalid managed session response');
+            const validated = eventPage({ data: events }).data;
+            const additions = [];
+            let bytes = s.bytes, total = s.events.size;
+            const batch = new Map();
+            for (const input of validated) {
+                const e = clone(input), previous = batch.get(e.id) ?? s.events.get(e.id);
+                if (previous?.processed_at && !isDeepStrictEqual(previous, e))
+                    throw new Error('Conflicting managed event replay');
+                if (previous && isDeepStrictEqual(previous, e))
+                    continue;
+                bytes += Buffer.byteLength(JSON.stringify(e)) - (previous ? Buffer.byteLength(JSON.stringify(previous)) : 0);
+                if (!previous)
+                    total++;
+                if (total > COLLECTOR_LIMITS.events || bytes > COLLECTOR_LIMITS.bytes)
+                    throw new Error('Managed collector event limit exceeded');
+                batch.set(e.id, e);
+            }
+            for (const e of batch.values())
+                additions.push(e);
+            s.progress.accept(additions);
+            s.bytes = bytes;
+            for (const e of additions) {
+                s.events.set(e.id, e);
+                if (e.processed_at)
+                    this.observe(s, e);
+            }
+            s.session = clone(session);
+            s.lastRead = this.now();
+            const p = s.progress.snapshot();
+            const threadCounts = { running: 0, ended: 0, failed: 0, idle: 0 };
+            for (const t of s.threads.values()) {
+                if (t.status === 'running')
+                    threadCounts.running++;
+                else if (t.status === 'failed')
+                    threadCounts.failed++;
+                else if (t.status === 'ended' || t.status === 'terminated')
+                    threadCounts.ended++;
+                else
+                    threadCounts.idle++;
+            }
+            const snapshot = {
+                sessionId, status: ['idle', 'running', 'rescheduling', 'terminated', 'error'].includes(session.status ?? '') ? session.status : p.status,
+                stopReason: p.stopReason === null || ['end_turn', 'budget_reached', 'requires_action'].includes(p.stopReason) ? p.stopReason : 'unknown', budgetCents: cents(session.budget?.max_list_cost), listCostCents: cents(session.usage?.list_cost) ?? cents(p.listCost),
+                providerFinished: p.finished && session.status !== 'running' && session.status !== 'rescheduling' && session.status !== 'terminated',
+                workersInspected: false, acceptancePassed: false, verification: 'unverified',
+                runs: p.workflowRuns.map(r => ({ ...r, phases: [...(s.phases.get(r.id)?.values() ?? [])] })),
+                threads: [...s.threads.values()].slice(0, COLLECTOR_LIMITS.shownThreads), threadOffset: 0, threadCount: s.threads.size, threadCounts,
+                blockedEventIds: [...s.blocked], observedFailures: Math.max(p.observedFailures, threadCounts.failed), updatedMs: s.lastRead,
+            };
+            s.result = { events: [...s.events.values()], snapshot };
+            return s.result;
+        }).finally(() => { s.flight = undefined; });
+        return s.flight.then(clone);
+    }
+    /** Pure observation, suitable for disk snapshot publication. Never invokes a transport. */
+    snapshots() { return [...this.states.values()].flatMap(s => s.result ? [clone(s.result.snapshot)] : []); }
+    /** A local worker page only. Aggregate counts and observation timestamp do not change. */
+    page(sessionId, threadOffset = 0) {
+        if (!Number.isSafeInteger(threadOffset) || threadOffset < 0 || threadOffset >= COLLECTOR_LIMITS.events)
+            throw new Error('Invalid managed thread offset');
+        const state = this.states.get(sessionId);
+        if (!state?.result)
+            return undefined;
+        return { ...clone(state.result.snapshot), threadOffset, threads: clone([...state.threads.values()].slice(threadOffset, threadOffset + COLLECTOR_LIMITS.shownThreads)) };
+    }
+    /** A collector doing work cannot be forgotten midflight. No remote work is interrupted. */
+    forget(sessionId) {
+        const s = this.states.get(sessionId);
+        return s?.flight ? false : this.states.delete(sessionId);
+    }
+    observe(s, e) {
+        const runId = idOf(e.workflow_run_id);
+        if (runId && e.type === 'workflow_run.created' && Array.isArray(e.phases)) {
+            const phases = new Map();
+            for (const value of e.phases.slice(0, 100)) {
+                const phase = record(value), id = idOf(phase?.id);
+                if (id)
+                    phases.set(id, { id, name: phaseName(phase?.name, id), status: 'queued' });
+            }
+            s.phases.set(runId, phases);
+        }
+        if (runId && (e.type === 'workflow_run.phase_started' || e.type === 'workflow_run.phase_ended')) {
+            const id = idOf(e.workflow_run_phase_id);
+            if (id) {
+                const phases = s.phases.get(runId) ?? new Map();
+                if (phases.size < 100 || phases.has(id))
+                    phases.set(id, { id, name: phases.get(id)?.name ?? id, status: e.type.endsWith('started') ? 'running' : 'ended' });
+                s.phases.set(runId, phases);
+            }
+        }
+        const threadId = idOf(e.session_thread_id);
+        if (threadId && e.type.startsWith('session.thread_')) {
+            const t = s.threads.get(threadId) ?? { id: threadId, runId: runId ?? null, status: 'idle' };
+            if (runId)
+                t.runId = runId;
+            const phaseId = idOf(e.workflow_run_phase_id);
+            if (phaseId)
+                t.phaseId = phaseId;
+            if (e.type === 'session.thread_status_running')
+                t.status = 'running';
+            else if (e.type === 'session.thread_status_idle')
+                t.status = 'idle';
+            else if (e.type === 'session.thread_status_terminated')
+                t.status = e.error || t.status === 'failed' ? 'failed' : 'ended';
+            s.threads.set(threadId, t);
+        }
+        if (threadId && e.type === 'session.error') {
+            const t = s.threads.get(threadId) ?? { id: threadId, runId: runId ?? null, status: 'failed' };
+            t.status = 'failed';
+            s.threads.set(threadId, t);
+        }
+        const permission = typeof e.evaluated_permission === 'string' ? e.evaluated_permission : record(e.evaluated_permission)?.type;
+        if (permission === 'ask' || e.type === 'agent.custom_tool_use')
+            s.blocked.add(e.id);
+        const answered = idOf(e.tool_use_id) ?? idOf(e.custom_tool_use_id);
+        if (answered && ['user.tool_confirmation', 'user.custom_tool_result', 'user.tool_result'].includes(e.type))
+            s.blocked.delete(answered);
+        const stop = record(e.stop_reason);
+        if (stop?.type === 'requires_action' && Array.isArray(stop.event_ids))
+            for (const id of stop.event_ids)
+                if (idOf(id))
+                    s.blocked.add(id);
+    }
+}
+export const sharedManagedCollector = new ManagedRunCollector();
+//# sourceMappingURL=managed-run-collector.js.map

package/v3/@claude-flow/cli/dist/src/services/managed-run-store.d.ts

@@ -0,0 +1,52 @@
+import type { ManagedRunSnapshot } from './managed-run-collector.js';
+/** Other processes fail rather than poll twice. Never automatically steal a lease. */
+export declare function collectWithLease<T>(root: string, sessionId: string, action: () => Promise<T>, scope?: string): Promise<T>;
+export declare function publishManagedSnapshot(root: string, snapshot: ManagedRunSnapshot): void;
+export type ControlAction = 'inspect' | 'interrupt' | 'terminate';
+/** Host settings are read again immediately before side effects, never from console facts. */
+export declare function executeManagedControl(input: Record<string, unknown>, deps: {
+    policy: () => {
+        enabled: boolean;
+        sessions: string[];
+    };
+    read: (sessionId: string) => Promise<{
+        status?: string;
+    }>;
+    inspect: (sessionId: string, offset: number) => Promise<unknown>;
+    interrupt: (sessionId: string) => Promise<unknown>;
+    terminate: (sessionId: string) => Promise<unknown>;
+}): Promise<{
+    success: boolean;
+    currentStatus: string | undefined;
+    snapshot: unknown;
+    cancellationConfirmed?: undefined;
+    interruptRequested?: undefined;
+    result?: undefined;
+} | {
+    success: boolean;
+    currentStatus: string;
+    cancellationConfirmed: boolean;
+    snapshot?: undefined;
+    interruptRequested?: undefined;
+    result?: undefined;
+} | {
+    success: boolean;
+    currentStatus: string | undefined;
+    interruptRequested: boolean;
+    cancellationConfirmed: boolean;
+    result: unknown;
+    snapshot?: undefined;
+} | {
+    success: boolean;
+    currentStatus: string | undefined;
+    cancellationConfirmed: boolean;
+    result: unknown;
+    snapshot?: undefined;
+    interruptRequested?: undefined;
+}>;
+/** Successful provider deletion is a session fact, never an acceptance verdict. */
+export declare function publishManagedTermination(root: string, sessionId: string, collector: {
+    page: (id: string) => ManagedRunSnapshot | undefined;
+    forget: (id: string) => boolean;
+}): void;
+//# sourceMappingURL=managed-run-store.d.ts.map

package/v3/@claude-flow/cli/dist/src/services/managed-run-store.js

@@ -0,0 +1,119 @@
+/** Bounded console projections and a fail-closed cross-process collector lease. */
+import { closeSync, constants, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+const flights = new Map();
+function folder(root) {
+    let p = resolve(root);
+    if (!lstatSync(p).isDirectory())
+        throw new Error('Invalid managed project root');
+    for (const name of ['.claude-flow', 'managed-workflows']) {
+        p = join(p, name);
+        if (!existsSync(p))
+            mkdirSync(p, { mode: 0o700 });
+        if (!lstatSync(p).isDirectory() || lstatSync(p).isSymbolicLink())
+            throw new Error('Managed snapshot directory must be regular');
+    }
+    return p;
+}
+/** Other processes fail rather than poll twice. Never automatically steal a lease. */
+export function collectWithLease(root, sessionId, action, scope = '') {
+    if (!/^sesn_[A-Za-z0-9]+$/.test(sessionId))
+        return Promise.reject(new Error('Invalid managed session ID'));
+    const path = join(folder(root), `${sessionId}.collector.lock`);
+    const pending = flights.get(path);
+    if (pending)
+        return pending.scope === scope ? pending.promise.then(v => structuredClone(v)) : Promise.reject(new Error('Managed collector belongs to another credential scope'));
+    let fd;
+    try {
+        fd = openSync(path, 'wx', 0o600);
+    }
+    catch {
+        return Promise.reject(new Error('Managed collector is leased by another process; inspect before recovering a stale lease'));
+    }
+    const flight = Promise.resolve().then(action).finally(() => { closeSync(fd); unlinkSync(path); flights.delete(path); });
+    flights.set(path, { scope, promise: flight });
+    return flight.then(v => structuredClone(v));
+}
+/** Read only the fixed, capped projection. It has no authorization role. */
+function previous(path) {
+    if (!existsSync(path))
+        return [];
+    if (!lstatSync(path).isFile() || lstatSync(path).isSymbolicLink())
+        throw new Error('Invalid managed snapshot file');
+    const fd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const buffer = Buffer.alloc(128_001);
+        const count = readSync(fd, buffer, 0, buffer.length, 0);
+        if (count > 128_000)
+            throw new Error('Managed snapshot exceeds limit');
+        const value = JSON.parse(buffer.subarray(0, count).toString('utf8'));
+        if (value.version !== 1 || !Array.isArray(value.sessions) || value.sessions.length > 6)
+            throw new Error('Invalid managed snapshot');
+        return value.sessions;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function publishManagedSnapshot(root, snapshot) {
+    const dir = folder(root), lockPath = join(dir, 'snapshot.lock');
+    const fd = openSync(lockPath, 'wx', 0o600), temp = join(dir, `${randomUUID()}.tmp`);
+    try {
+        const path = join(dir, 'snapshot.json');
+        const old = previous(path);
+        const sessions = [snapshot, ...old.filter(s => s.sessionId !== snapshot.sessionId)].slice(0, 6);
+        if (JSON.stringify(sessions) === JSON.stringify(old))
+            return;
+        const text = JSON.stringify({ version: 1, updatedMs: Date.now(), sessions });
+        if (Buffer.byteLength(text) > 128_000)
+            throw new Error('Managed snapshot exceeds limit');
+        const out = openSync(temp, 'wx', 0o600);
+        try {
+            writeFileSync(out, text);
+            fsyncSync(out);
+        }
+        finally {
+            closeSync(out);
+        }
+        renameSync(temp, path);
+    }
+    finally {
+        if (existsSync(temp))
+            unlinkSync(temp);
+        closeSync(fd);
+        unlinkSync(lockPath);
+    }
+}
+/** Host settings are read again immediately before side effects, never from console facts. */
+export async function executeManagedControl(input, deps) {
+    const sessionId = input.sessionId, action = input.action;
+    if (Object.keys(input).some(k => !['sessionId', 'action', 'threadOffset'].includes(k)) || typeof sessionId !== 'string' || !/^sesn_[A-Za-z0-9]+$/.test(sessionId) || !['inspect', 'interrupt', 'terminate'].includes(String(action)))
+        throw new Error('Invalid managed control request');
+    const offset = input.threadOffset ?? 0;
+    if (!Number.isSafeInteger(offset) || offset < 0 || offset >= 10_000 || (action !== 'inspect' && input.threadOffset !== undefined))
+        throw new Error('Invalid managed worker page');
+    const allowed = () => { const p = deps.policy(); return p.enabled && p.sessions.includes(sessionId); };
+    if (!allowed())
+        throw new Error('Host managed control policy denies this session');
+    const current = await deps.read(sessionId);
+    if (!current || !['idle', 'running', 'rescheduling', 'terminated'].includes(current.status ?? ''))
+        throw new Error('Unknown provider session state');
+    if (!allowed())
+        throw new Error('Host managed control policy changed before dispatch');
+    if (action === 'inspect')
+        return { success: true, currentStatus: current.status, snapshot: await deps.inspect(sessionId, offset) };
+    if (current.status === 'terminated')
+        return { success: true, currentStatus: 'terminated', cancellationConfirmed: true };
+    if (action === 'interrupt')
+        return { success: true, currentStatus: current.status, interruptRequested: true, cancellationConfirmed: false, result: await deps.interrupt(sessionId) };
+    return { success: true, currentStatus: current.status, cancellationConfirmed: true, result: await deps.terminate(sessionId) };
+}
+/** Successful provider deletion is a session fact, never an acceptance verdict. */
+export function publishManagedTermination(root, sessionId, collector) {
+    const snapshot = collector.page(sessionId);
+    if (snapshot)
+        publishManagedSnapshot(root, { ...snapshot, status: 'terminated', providerFinished: false, updatedMs: Date.now() });
+    collector.forget(sessionId);
+}
+//# sourceMappingURL=managed-run-store.js.map