letagents 0.12.20 → 0.12.22

package/dist/mcp/local-state/local-chat.js

@@ -1,8 +1,10 @@
+import { captureLocalSupervisedRouting, ensureLocalSupervisedRoutingSchema, runLocalSupervisedMessageWrite } from "../../../shared/local-supervised-routing.mjs";
 import { createRequire } from "node:module";
 import { mkdir, readFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
-import { withWorkerStateFence } from "../worker-call-context.js";
+import { withWorkerStateFence, currentWorkerCall } from "../worker-call-context.js";
+import { ensureLocalWorkLeaseSchema, readLocalWorkLeases, assertLocalTaskLeaseMutation, assertLocalWorkLeaseWorker, claimLocalWorkLease, changeLocalWorkLease } from "../../../shared/local-work-leases.mjs";
 import { ensureLocalThreadRoutingProjectionSchemaAsync, getLocalThreadRoutingAgentKeysForRoots, projectLocalThreadRoutingMessage, runLocalSqliteWriteTransactionAsync, scheduleLocalThreadRoutingBackfill, } from "../../../shared/sqlite-thread-routing.mjs";
 import { MESSAGE_SENDER_MAX_CODE_POINTS, MESSAGE_SENDER_MAX_UTF8_BYTES, POSTGRES_INTEGER_MAX, isMessageSenderWithinBounds, parseAccountAgentRoutingEnvelope, parsePositivePgIntegerScopedId, } from "../../../shared/message-contracts.mjs";
 const localImportedRoutingAuthority = Symbol("localImportedRoutingAuthority");
@@ -176,6 +178,7 @@ async function initializeDb() {
         database.exec("PRAGMA foreign_keys = ON");
         database.exec("PRAGMA busy_timeout = 5000");
         await runLocalSqliteWriteTransactionAsync(database, () => {
+            ensureLocalSupervisedRoutingSchema(database);
             database.exec(`
     CREATE TABLE IF NOT EXISTS local_chat_room_sequences (
       room_id TEXT PRIMARY KEY,
@@ -285,6 +288,7 @@ async function initializeDb() {
             addColumnIfMissing(database, "local_tasks", "review_agent_key", "TEXT");
             addColumnIfMissing(database, "local_tasks", "review_agent_session_id", "TEXT");
             addColumnIfMissing(database, "local_tasks", "review_updated_at", "TEXT");
+            ensureLocalWorkLeaseSchema(database);
             database.exec(`
     CREATE UNIQUE INDEX IF NOT EXISTS local_chat_messages_sync_key_idx
       ON local_chat_messages (room_id, sync_key)
@@ -527,7 +531,7 @@ export async function addLocalChatMessage(roomId, input) {
         }
     }
     const timestamp = new Date().toISOString();
-    const row = await runLocalSqliteWriteTransactionAsync(database, () => withWorkerStateFence(() => {
+    const row = await runLocalSupervisedMessageWrite(database, trimmedRoomId, threadRootNumber, () => withWorkerStateFence(() => {
         const number = allocateLocalMessageNumber(database, trimmedRoomId);
         const insertedRow = {
             room_id: trimmedRoomId,
@@ -559,6 +563,7 @@ export async function addLocalChatMessage(roomId, input) {
       `)
             .run(insertedRow.room_id, insertedRow.number, insertedRow.reply_to_number, insertedRow.thread_root_number, insertedRow.sender, insertedRow.text, insertedRow.agent_prompt_kind, insertedRow.source, insertedRow.publisher_agent_key, insertedRow.publisher_agent_session_id, insertedRow.timestamp);
         projectLocalThreadRoutingMessage(database, insertedRow);
+        captureLocalSupervisedRouting(database, insertedRow);
         return insertedRow;
     }));
     return {
@@ -658,7 +663,7 @@ function allocateLocalTaskId(database, roomId) {
         .run(roomId);
     return `task_${number}`;
 }
-function mapTaskRow(row) {
+function mapTaskRow(row, database) {
     const reviewLeaseId = typeof row.review_lease_id === "string" && row.review_lease_id.trim()
         ? row.review_lease_id
         : null;
@@ -675,27 +680,28 @@ function mapTaskRow(row) {
         pr_url: typeof row.pr_url === "string" ? row.pr_url : null,
         workflow_artifacts: parseJsonArray(row.workflow_artifacts_json, []),
         workflow_refs: parseJsonArray(row.workflow_refs_json, []),
-        active_leases: reviewLeaseId
-            ? [
-                {
-                    id: reviewLeaseId,
-                    kind: "review",
-                    holder_label: typeof row.review_holder_label === "string"
-                        ? row.review_holder_label
-                        : null,
-                    agent_key: typeof row.review_agent_key === "string"
-                        ? row.review_agent_key
-                        : null,
-                    agent_session_id: typeof row.review_agent_session_id === "string"
-                        ? row.review_agent_session_id
-                        : null,
-                    status: "active",
-                    updated_at: typeof row.review_updated_at === "string"
-                        ? row.review_updated_at
-                        : null,
-                },
-            ]
-            : [],
+        active_leases: [...readLocalWorkLeases(database, String(row.room_id), String(row.task_id))
+                .map(lease => ({ ...lease, holder_label: lease.actor_label })), ...(reviewLeaseId
+                ? [
+                    {
+                        id: reviewLeaseId,
+                        kind: "review",
+                        holder_label: typeof row.review_holder_label === "string"
+                            ? row.review_holder_label
+                            : null,
+                        agent_key: typeof row.review_agent_key === "string"
+                            ? row.review_agent_key
+                            : null,
+                        agent_session_id: typeof row.review_agent_session_id === "string"
+                            ? row.review_agent_session_id
+                            : null,
+                        status: "active",
+                        updated_at: typeof row.review_updated_at === "string"
+                            ? row.review_updated_at
+                            : null,
+                    },
+                ]
+                : [])],
         created_at: String(row.created_at || ""),
         updated_at: String(row.updated_at || ""),
     };
@@ -759,7 +765,7 @@ export async function listLocalTasks(roomId, options = {}) {
       ORDER BY created_at ASC
     `)
         .all(...params)
-        .map(mapTaskRow);
+        .map(row => mapTaskRow(row, database));
     return { tasks, has_more: false };
 }
 export async function listLocalActiveTaskOwnerLeases(roomId) {
@@ -805,60 +811,111 @@ export async function getLocalTask(roomId, taskId) {
     const row = database
         .prepare("SELECT * FROM local_tasks WHERE room_id = ? AND task_id = ?")
         .get(roomId, taskId);
-    return row ? mapTaskRow(row) : null;
+    return row ? mapTaskRow(row, database) : null;
 }
 export async function updateLocalTask(roomId, taskId, patch) {
-    const current = await getLocalTask(roomId, taskId);
-    if (!current)
-        throw new Error("Task not found.");
-    const nextStatus = patch.skip_transition_validation === true
-        ? typeof patch.status === "string" && patch.status.trim()
-            ? patch.status.trim()
-            : current.status
-        : resolveLocalTaskStatus(current.status, patch.status);
-    const assigneeAgentKey = patch.assignee_agent_key === undefined
-        ? current.assignee_agent_key
-        : typeof patch.assignee_agent_key === "string"
-            ? patch.assignee_agent_key
-            : null;
-    const assigneeAgentInstanceId = patch.assignee_agent_key === undefined
-        ? current.assignee_agent_instance_id
-        : assigneeAgentKey && typeof patch.assignee_agent_instance_id === "string"
-            ? patch.assignee_agent_instance_id
-            : assigneeAgentKey && typeof patch.actor_instance_id === "string"
-                ? patch.actor_instance_id
-                : null;
-    const assigneeAgentSessionId = patch.assignee_agent_key === undefined
-        ? current.assignee_agent_session_id
-        : assigneeAgentKey && typeof patch.assignee_agent_session_id === "string"
-            ? patch.assignee_agent_session_id
-            : assigneeAgentKey && typeof patch.agent_session_id === "string"
-                ? patch.agent_session_id
+    const database = await getDb();
+    let observed = readLocalWorkLeases(database, roomId, taskId)[0] ?? null;
+    return runLocalSqliteWriteTransactionAsync(database, () => withWorkerStateFence(() => {
+        let row = database.prepare("SELECT * FROM local_tasks WHERE room_id=? AND task_id=?").get(roomId, taskId);
+        if (!row)
+            throw new Error("Task not found.");
+        if (patch.expected_no_work_lease === true && readLocalWorkLeases(database, roomId, taskId).length) {
+            throw new Error("The task lease changed. Refresh the task before trying again.");
+        }
+        const caller = currentWorkerCall();
+        const worker = caller?.agent_key ? {
+            agent_key: caller.agent_key, session_id: caller.session_id, actor_label: caller.actor_label || caller.agent_key,
+            agent_instance_id: caller.agent_instance_id,
+        } : null;
+        const supervised = worker ? assertLocalWorkLeaseWorker(database, roomId, worker) : false;
+        if (supervised && worker && patch.status === "assigned") {
+            if ((patch.assignee_agent_key != null && patch.assignee_agent_key !== worker.agent_key)
+                || (patch.assignee != null && patch.assignee !== worker.actor_label)) {
+                throw new Error("Use handoff_task_lease to assign work to another worker.");
+            }
+            observed = claimLocalWorkLease(database, roomId, taskId, worker);
+            row = database.prepare("SELECT * FROM local_tasks WHERE room_id=? AND task_id=?").get(roomId, taskId);
+        }
+        if (worker) {
+            assertLocalTaskLeaseMutation(database, row, worker, observed);
+            if ((supervised || observed) && ((patch.assignee !== undefined && patch.assignee !== row.assignee)
+                || (patch.assignee_agent_key !== undefined && patch.assignee_agent_key !== row.assignee_agent_key)
+                || (patch.assignee_agent_session_id !== undefined && patch.assignee_agent_session_id !== row.assignee_agent_session_id)
+                || (patch.assignee_agent_key !== undefined && patch.agent_session_id !== undefined && patch.agent_session_id !== row.assignee_agent_session_id)
+                || (patch.assignee_agent_instance_id !== undefined && patch.assignee_agent_instance_id !== row.assignee_agent_instance_id)
+                || (patch.assignee_agent_key !== undefined && patch.actor_instance_id !== undefined && patch.actor_instance_id !== row.assignee_agent_instance_id))) {
+                throw new Error("Use claim_task or handoff_task_lease to change task ownership.");
+            }
+        }
+        else if (observed || readLocalWorkLeases(database, roomId, taskId).length) {
+            throw new Error("A registered owning worker is required to update this leased task.");
+        }
+        const current = mapTaskRow(row, database);
+        const nextStatus = supervised && patch.status === "assigned" ? current.status
+            : patch.skip_transition_validation === true
+                ? typeof patch.status === "string" && patch.status.trim()
+                    ? patch.status.trim()
+                    : current.status
+                : resolveLocalTaskStatus(current.status, patch.status);
+        const assigneeAgentKey = patch.assignee_agent_key === undefined
+            ? current.assignee_agent_key
+            : typeof patch.assignee_agent_key === "string"
+                ? patch.assignee_agent_key
                 : null;
-    const workflowArtifacts = patch.workflow_artifacts === undefined
-        ? JSON.stringify(current.workflow_artifacts)
-        : JSON.stringify(Array.isArray(patch.workflow_artifacts) ? patch.workflow_artifacts : []);
-    const now = new Date().toISOString();
+        const assigneeAgentInstanceId = patch.assignee_agent_key === undefined || (worker && patch.assignee_agent_key === current.assignee_agent_key)
+            ? current.assignee_agent_instance_id
+            : assigneeAgentKey && typeof patch.assignee_agent_instance_id === "string"
+                ? patch.assignee_agent_instance_id
+                : assigneeAgentKey && typeof patch.actor_instance_id === "string"
+                    ? patch.actor_instance_id
+                    : null;
+        const assigneeAgentSessionId = patch.assignee_agent_key === undefined || (worker && patch.assignee_agent_key === current.assignee_agent_key)
+            ? current.assignee_agent_session_id
+            : assigneeAgentKey && typeof patch.assignee_agent_session_id === "string"
+                ? patch.assignee_agent_session_id
+                : assigneeAgentKey && typeof patch.agent_session_id === "string"
+                    ? patch.agent_session_id
+                    : null;
+        const workflowArtifacts = patch.workflow_artifacts === undefined
+            ? JSON.stringify(current.workflow_artifacts)
+            : JSON.stringify(Array.isArray(patch.workflow_artifacts) ? patch.workflow_artifacts : []);
+        const now = new Date().toISOString();
+        database
+            .prepare(`
+        UPDATE local_tasks
+        SET status = ?,
+            assignee = ?,
+            assignee_agent_key = ?,
+            assignee_agent_instance_id = ?,
+            assignee_agent_session_id = ?,
+            pr_url = ?,
+            workflow_artifacts_json = ?,
+            sync_dirty = 1,
+            updated_at = ?
+        WHERE room_id = ? AND task_id = ?
+      `)
+            .run(nextStatus, patch.assignee === undefined ? current.assignee : patch.assignee || null, assigneeAgentKey, assigneeAgentInstanceId, assigneeAgentSessionId, patch.pr_url === undefined ? current.pr_url : patch.pr_url || null, workflowArtifacts, now, roomId, taskId);
+        return mapTaskRow(database.prepare("SELECT * FROM local_tasks WHERE room_id=? AND task_id=?").get(roomId, taskId), database);
+    }));
+}
+export async function changeLocalTaskWorkLease(roomId, taskId, input) {
     const database = await getDb();
-    await runLocalSqliteWriteTransactionAsync(database, () => withWorkerStateFence(() => database
-        .prepare(`
-      UPDATE local_tasks
-      SET status = ?,
-          assignee = ?,
-          assignee_agent_key = ?,
-          assignee_agent_instance_id = ?,
-          assignee_agent_session_id = ?,
-          pr_url = ?,
-          workflow_artifacts_json = ?,
-          sync_dirty = 1,
-          updated_at = ?
-      WHERE room_id = ? AND task_id = ?
-    `)
-        .run(nextStatus, patch.assignee === undefined ? current.assignee : patch.assignee || null, assigneeAgentKey, assigneeAgentInstanceId, assigneeAgentSessionId, patch.pr_url === undefined ? current.pr_url : patch.pr_url || null, workflowArtifacts, now, roomId, taskId)));
-    const updated = await getLocalTask(roomId, taskId);
-    if (!updated)
-        throw new Error("Task not found.");
-    return updated;
+    const observed = readLocalWorkLeases(database, roomId, taskId)[0];
+    if (!observed)
+        throw new Error("This task has no active work lease.");
+    return runLocalSqliteWriteTransactionAsync(database, () => withWorkerStateFence(() => {
+        const worker = currentWorkerCall();
+        if (!worker?.agent_key)
+            throw new Error("A registered owning worker is required to change this work lease.");
+        const result = changeLocalWorkLease(database, roomId, taskId, {
+            ...input, lease_id: input.lease_id ?? observed.id, epoch: input.epoch ?? observed.epoch,
+        }, {
+            agent_key: worker.agent_key, session_id: worker.session_id, actor_label: worker.actor_label || worker.agent_key,
+        });
+        const task = mapTaskRow(database.prepare("SELECT * FROM local_tasks WHERE room_id=? AND task_id=?").get(roomId, taskId), database);
+        return { action: input.action, task, ...result };
+    }));
 }
 export async function claimLocalTaskReviewLease(roomId, taskId, input) {
     const current = await getLocalTask(roomId, taskId);

package/dist/mcp/server/runtime/supervisor-bridge.js

@@ -1,3 +1,4 @@
+import { isLocalRoomApi, roomApiOrigin } from "../../../../shared/room-api-origin.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import { lstat, readFile, realpath } from "node:fs/promises";
 import { createConnection } from "node:net";
@@ -356,6 +357,9 @@ export async function borrowSupervisedWorkerCredential(session, env = process.en
 }
 function normalizedWorkerApiOrigin(env) {
     const apiUrl = env.LETAGENTS_API_URL?.trim() || "https://letagents.chat";
+    if (isLocalRoomApi(apiUrl) && env.LETAGENTS_SUPERVISED_BOUNDED_TURNS === "1"
+        && env.LETAGENTS_EXECUTION_PROFILE === "supervised_room_turn")
+        return apiUrl;
     let parsed;
     try {
         parsed = new URL(apiUrl);
@@ -452,7 +456,7 @@ function bindingRequestKey(session, coordinates, env) {
         session.session_id,
         session.room_id,
         tokenDigest,
-        new URL(env.LETAGENTS_API_URL?.trim() || "https://letagents.chat").origin,
+        roomApiOrigin(env.LETAGENTS_API_URL?.trim() || "https://letagents.chat"),
     ].join("\u0000");
 }
 async function verifyConfirmedBinding(session, coordinates, env, protocolVersion, timeoutMs) {

package/dist/mcp/server/runtime/worker-bearer.js

@@ -1,3 +1,4 @@
+import { isLocalRoomApi } from "../../../../shared/room-api-origin.mjs";
 import { getDaemonToolExecutionContext } from "./daemon-tool-context.js";
 export const LETAGENTS_AGENT_SESSION_BEARER_ENV = "LETAGENTS_AGENT_SESSION_BEARER";
 export const LETAGENTS_SUPERVISED_BOUNDED_TURNS_ENV = "LETAGENTS_SUPERVISED_BOUNDED_TURNS";
@@ -40,6 +41,8 @@ export function getWorkerBearerRuntime() {
     }
     try {
         const parsed = new URL(apiUrl);
+        if (isLocalRoomApi(apiUrl) && supervised && profile === "supervised_room_turn" && !bearer)
+            return { mode: "supervised" };
         if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
             throw new Error("unsupported protocol");
         }

package/dist/mcp/server/tools/tasks/api.js

@@ -1,5 +1,6 @@
 import { encodeRoomIdPath } from "../../../room-id.js";
 import { addLocalTask, apiCall, claimLocalTaskReviewLease, getLocalTask, isLocalRoomStorageEnabled, listLocalTasks, releaseLocalTaskReviewLease, resolveLocalRoomStorageIdentifiers, roomScopedApiCall, updateLocalTask, } from "../../runtime.js";
+import { changeLocalTaskWorkLease } from "../../../local-state/local-chat.js";
 export function taskCollectionRoomPath(roomId) {
     return `/rooms/${encodeRoomIdPath(roomId)}/tasks`;
 }
@@ -129,6 +130,17 @@ export async function postCanonicalTaskAction(roomId, taskId, actionPath, body)
                 released_lease: null,
             };
         }
+        if ((action === "handoff" || action === "release") && existingTask.active_leases?.some(lease => lease.kind === "work")) {
+            return await changeLocalTaskWorkLease(sqliteRoomId, taskId, {
+                action, lease_id: typeof body.lease_id === "string" ? body.lease_id : null,
+                target_actor_key: typeof body.target_actor_key === "string" ? body.target_actor_key : null,
+                target_actor_instance_id: typeof body.target_actor_instance_id === "string" ? body.target_actor_instance_id : null,
+                target_agent_session_id: typeof body.target_agent_session_id === "string" ? body.target_agent_session_id : null,
+            });
+        }
+        if ((action === "handoff" || action === "release") && body.lease_id) {
+            throw new Error("The task lease changed. Refresh the task before trying again.");
+        }
         if (action === "handoff") {
             const targetActorKey = typeof body.target_actor_key === "string" && body.target_actor_key.trim()
                 ? body.target_actor_key.trim()
@@ -141,6 +153,7 @@ export async function postCanonicalTaskAction(roomId, taskId, actionPath, body)
                 : null;
             const task = targetActorKey
                 ? await updateLocalTask(sqliteRoomId, taskId, {
+                    expected_no_work_lease: true,
                     ...(existingTask.status === "accepted" ? { status: "assigned" } : {}),
                     assignee: targetActorKey,
                     assignee_agent_key: targetActorKey,
@@ -158,6 +171,7 @@ export async function postCanonicalTaskAction(roomId, taskId, actionPath, body)
         if (action === "release") {
             const releasableStatuses = new Set(["assigned", "in_progress", "blocked", "in_review"]);
             const patch = {
+                expected_no_work_lease: true,
                 assignee: null,
                 assignee_agent_key: null,
             };