letagents 0.12.10 → 0.12.12

package/dist/mcp/server/runtime/room-state.js

@@ -3,6 +3,8 @@ import { getStoredAgentIdentity, saveRoomSession, touchRoomSession, } from "../.
 import { getCanonicalRoomWebPath, } from "../../room-id.js";
 import { API_URL, getLetagentsToken } from "./api.js";
 import { AGENT_INSTANCE_UUID, currentAgentIdentity, currentAgentIdentityKey, } from "./identity.js";
+import { isSupervisedBoundedTurn } from "./worker-bearer.js";
+import { getCurrentSupervisedRoomAuthority, runWithSupervisedRoomAuthority, } from "./supervised-room-authority.js";
 let mcpServer = null;
 let sseClient = null;
 export let currentRoom = null;
@@ -85,6 +87,8 @@ export function toPublicRoomResponse(response, fallbackRoomId) {
 }
 export function rememberRoom(state, lastMessageId) {
     currentRoom = state;
+    if (isSupervisedBoundedTurn())
+        return state;
     saveRoomSession({
         room_id: state.room_id,
         project_id: state.project_id ?? null,
@@ -109,14 +113,56 @@ export function rememberRoom(state, lastMessageId) {
     return state;
 }
 export function touchCurrentRoom(lastMessageId) {
+    if (isSupervisedBoundedTurn())
+        return;
     if (!currentRoom) {
         return;
     }
     touchRoomSession(currentRoom.room_id, lastMessageId);
 }
 export function getTargetRoomId(roomId) {
+    if (isSupervisedBoundedTurn()) {
+        const exactRoomAuthority = getCurrentSupervisedRoomAuthority();
+        if (!exactRoomAuthority) {
+            throw new Error("The daemon-supervised tool has not received its exact room authority.");
+        }
+        if (roomId && roomId !== exactRoomAuthority) {
+            throw new Error(`The daemon-supervised tool is authorized for ${exactRoomAuthority}, not ${roomId}.`);
+        }
+        return exactRoomAuthority;
+    }
     return roomId || currentRoom?.room_id || null;
 }
+/** The last room authority returned by this process's exact daemon effect. */
+export { getCurrentSupervisedRoomAuthority } from "./supervised-room-authority.js";
+/** Public room metadata without inventing join provenance or locality. */
+export function toPublicCurrentRoomState() {
+    const exactRoomAuthority = getCurrentSupervisedRoomAuthority();
+    if (!exactRoomAuthority)
+        return toPublicRoomState(currentRoom);
+    return {
+        ...toPublicRoomState(toRoomState({ room_id: exactRoomAuthority, joined_via: "join_room" })),
+        joined_via: null,
+        is_local: null,
+    };
+}
+/**
+ * Bind only the in-memory default used by one supervised MCP process. The
+ * daemon response is the authority; this performs no join, storage, SSE, or
+ * repository inspection and can safely rebind after a durable room move.
+ */
+export function runWithCurrentSupervisedRoom(roomId, callback) {
+    if (!isSupervisedBoundedTurn()) {
+        throw new Error("Only a daemon-supervised bounded turn can bind supervisor room authority.");
+    }
+    const normalized = roomId.trim();
+    if (!normalized || normalized.length > 1_024 || /[\u0000-\u001f\u007f]/.test(normalized)) {
+        throw new Error("The daemon-supervised room authority is malformed.");
+    }
+    return runWithSupervisedRoomAuthority(normalized, callback);
+}
 export function getFallbackProjectId() {
+    if (isSupervisedBoundedTurn())
+        return null;
     return currentRoom?.project_id ?? null;
 }

package/dist/mcp/server/runtime/rooms.js

@@ -9,6 +9,7 @@ import { ensureAgentIdentity, toPublicAgentIdentity, withAgentIdentity, } from "
 import { withJoinRoomAgentPrompt } from "./messages.js";
 import { syncRoomPresence } from "./presence.js";
 import { rememberRoom, toPublicRoomResponse, toRoomState, } from "./room-state.js";
+import { isSupervisedBoundedTurn, requireValidWorkerBearerRuntime } from "./worker-bearer.js";
 export function normalizeJoinSessionMode(value) {
     return String(value || "").trim().toLowerCase() === "live" ? "live" : "current";
 }
@@ -29,6 +30,9 @@ function parseGeneratedGitRefRoomIdentifier(identifier) {
     };
 }
 export async function joinRoomIdentifier(identifier, joinedVia, options = {}) {
+    if (isSupervisedBoundedTurn()) {
+        throw new Error("Room joins and creation are disabled during a daemon-supervised bounded turn.");
+    }
     const roomId = joinedVia === "join_code" ? normalizeInviteCode(identifier) : identifier.trim();
     if (joinedVia !== "join_code" && await isLocalRoomStorageEnabled(roomId)) {
         if (options.allowCreate === false && !getStoredRoomSession(roomId)) {
@@ -186,6 +190,9 @@ export async function joinRoomIdentifierWithoutImplicitGitRefCreate(identifier,
     }));
 }
 export async function createInviteRoom() {
+    if (isSupervisedBoundedTurn()) {
+        throw new Error("Room joins and creation are disabled during a daemon-supervised bounded turn.");
+    }
     const project = await apiCall("/projects", { method: "POST" });
     const roomId = typeof project.code === "string"
         ? project.code
@@ -253,8 +260,71 @@ export async function joinNamedRoom(name, sessionMode) {
         session_mode: sessionMode,
     });
 }
+function bindWorkerRoomFromContext() {
+    const configRoom = getRoomFromConfig();
+    if (configRoom) {
+        const gitContext = buildActiveGitRoomContext({
+            repoRoom: configRoom,
+            currentBranch: getGitCurrentBranch(),
+            defaultBranch: getGitDefaultBranch(),
+        });
+        const roomId = gitContext.activeRoom ?? configRoom;
+        return {
+            room: rememberRoom(toRoomState({
+                room_id: roomId,
+                display_name: roomId,
+                joined_via: "config",
+            })),
+            source: ".letagents.json",
+        };
+    }
+    const gitContext = getGitRoomContext();
+    if (gitContext.activeRoom) {
+        return {
+            room: rememberRoom(toRoomState({
+                room_id: gitContext.activeRoom,
+                display_name: gitContext.activeRoom,
+                joined_via: "git-remote",
+            })),
+            source: "git remote",
+        };
+    }
+    const savedCurrentRoom = getStoredCurrentRoom();
+    if (!savedCurrentRoom) {
+        return null;
+    }
+    return {
+        room: rememberRoom(toRoomState({
+            room_id: savedCurrentRoom.room_id,
+            project_id: savedCurrentRoom.project_id,
+            code: savedCurrentRoom.code,
+            display_name: savedCurrentRoom.display_name,
+            git_room: savedCurrentRoom.git_room,
+            joined_via: savedCurrentRoom.joined_via,
+        })),
+        source: "saved local room state",
+    };
+}
 export async function autoJoinFromContext() {
     try {
+        const workerRuntime = requireValidWorkerBearerRuntime();
+        if (workerRuntime.mode === "supervised") {
+            // The exact room may change after a durable daemon-owned room move.
+            // Bind it per tool effect from the supervisor response, never from
+            // ambient repository, persisted state, or launch-time environment.
+            console.error("ℹ️ Daemon-supervised bounded turn leaves room selection to its exact supervisor context.");
+            return;
+        }
+        if (workerRuntime.mode === "worker") {
+            const bound = bindWorkerRoomFromContext();
+            if (bound) {
+                console.error(`🏠 Bound worker bearer to room '${bound.room.room_id}' (from ${bound.source}; no join/create request).`);
+            }
+            else {
+                console.error("ℹ️ Worker bearer has no .letagents.json, git remote, or saved room to bind locally.");
+            }
+            return;
+        }
         const configRoom = getRoomFromConfig();
         if (configRoom) {
             const gitContext = buildActiveGitRoomContext({

package/dist/mcp/server/runtime/supervised-room-authority.js

@@ -0,0 +1,8 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+const exactRoomAuthority = new AsyncLocalStorage();
+export function getCurrentSupervisedRoomAuthority() {
+    return exactRoomAuthority.getStore() ?? null;
+}
+export function runWithSupervisedRoomAuthority(roomId, callback) {
+    return exactRoomAuthority.run(roomId, callback);
+}