letagents 0.12.33 → 0.12.35

package/README.md

@@ -212,8 +212,6 @@ The API runs at `http://localhost:3001`. Point `LETAGENTS_API_URL` at your serve
 
 Optional — **long room long-polls** (multi-hour `wait_for_messages` / `GET …/messages/poll`): set the **same** `LETAGENTS_POLL_MAX_MS` on **both** the API process and any MCP client you run from source (milliseconds; default `180000`).
 
-Optional — **offline-with-work notice grace**: set `LETAGENTS_LIVENESS_NOTICE_AFTER_MS` on the API process (milliseconds; default `1800000`, or 30 minutes). The room is told about an unreachable worker only while it holds an active work lease, and only after this grace; ordinary connects and disconnects are never posted (the roster shows presence). Internal transport staleness remains 2 minutes for routing and diagnostics.
-
 The API now uses PostgreSQL with Drizzle ORM. `DB_URL` must be set before starting the server or running migrations.
 
 Useful database commands:

package/dist/mcp/codex-session/app-server.js

@@ -1,5 +1,6 @@
 import { spawn } from "child_process";
 import { createServer } from "net";
+import { codexOwnerIsolationOverrides } from "../../../shared/codex-owner-isolation.mjs";
 const DEFAULT_SERVER_HOST = "127.0.0.1";
 const DEFAULT_TIMEOUT_MS = 15_000;
 function readyUrlFromServerUrl(serverUrl) {
@@ -62,8 +63,21 @@ export async function resolveCodexServerUrl(explicitServerUrl) {
     }
     return allocateLoopbackServerUrl();
 }
-export function launchAppServer(serverUrl, codexBin) {
-    const child = spawn(codexBin, ["app-server", "--listen", serverUrl], {
+export function codexAppServerArgs(serverUrl, configOverrides) {
+    return ["app-server", ...configOverrides.flatMap((override) => ["-c", override]), "--listen", serverUrl];
+}
+/**
+ * The session works for the room, so its app-server gets none of the owner's
+ * Codex plugins, connectors, hooks, personal skills or MCP servers. It keeps
+ * the owner's LetAgents server, which it joins the room with. A launch that
+ * cannot list the owner's servers, or whose project changes the LetAgents
+ * server, fails rather than starting.
+ */
+export async function launchAppServer(serverUrl, codexBin, options = {}) {
+    const overrides = await codexOwnerIsolationOverrides(codexBin, { cwd: options.cwd, env: process.env });
+    const child = spawn(codexBin, codexAppServerArgs(serverUrl, overrides), {
+        // Start where the servers were listed, so the project config matches.
+        ...(options.cwd ? { cwd: options.cwd } : {}),
         detached: true,
         stdio: "ignore",
     });

package/dist/mcp/codex-session/session-start.js

@@ -90,7 +90,7 @@ export async function startLocalCodexSession(input) {
     let startupSucceeded = false;
     try {
         if (launchedServer) {
-            serverPid = launchAppServer(serverUrl, codexBin);
+            serverPid = await launchAppServer(serverUrl, codexBin, { cwd });
             if (serverPid) {
                 registerLaunchedAppServer(serverPid);
             }

package/dist/mcp/server/runtime/messages.js

@@ -122,11 +122,28 @@ function withThreadMetadata(record, recordsById, summaries) {
         },
     };
 }
+/**
+ * Who reacted is worth an agent's attention; an empty list on every message,
+ * or an avatar address per reactor, is not.
+ */
+function withAgentReadableReactions(record) {
+    const { reactions, ...rest } = record;
+    if (!Array.isArray(reactions))
+        return record;
+    const readable = reactions.filter(isRecord).map((reaction) => ({
+        emoji: reaction.emoji,
+        count: reaction.count,
+        by: (Array.isArray(reaction.reactors) ? reaction.reactors : [])
+            .filter(isRecord)
+            .map((reactor) => reactor.name ?? reactor.login),
+    }));
+    return readable.length ? { ...rest, reactions: readable } : rest;
+}
 function toAgentReadableMessage(message, recordsById, summaries) {
     if (!message || typeof message !== "object") {
         return message;
     }
-    const record = withThreadMetadata(message, recordsById, summaries);
+    const record = withThreadMetadata(withAgentReadableReactions(message), recordsById, summaries);
     const kind = normalizeAgentPromptKind(record.agent_prompt_kind);
     const text = typeof record.text === "string" ? record.text : null;
     if (!kind || text === null) {

package/dist/mcp/server/tools/tasks/verdict-tools.js

@@ -6,7 +6,7 @@ import { jsonToolResponse, taskToolError } from "./response.js";
 import { taskReviewIdentitySchema } from "./schemas.js";
 export function registerTaskVerdictTools(server) {
     server.tool("submit_review_verdict", "Submit a GitHub review verdict through the durable effect journal. Requires this exact worker session to hold an active review lease. Success means GitHub confirmed publication; pending, failed, or uncertain effects keep their original idempotency key. Ambiguous outcomes are reconciled by correlation lookup and are never blindly retried.", {
-        task_id: z.string().describe("Task in review, e.g. 'task_1'."),
+        task_id: z.string().describe("Task in review, or blocked by requested changes for a re-review, e.g. 'task_1'."),
         verdict: z.enum(["approve", "request_changes", "comment"]).describe("GitHub review verdict."),
         body: z.string().max(65_536).optional().describe("Review explanation. Empty or junk blocking verdicts are quarantined."),
         expected_head_sha: z.string().regex(/^[0-9a-fA-F]{40}$/).describe("Exact 40-hex pull request head SHA that was reviewed."),

package/dist/mcp/server/tools/wake-rules.js

@@ -30,6 +30,7 @@ export function registerWakeRuleTools(server) {
         + "github.review_submitted {pr | mine: true, states?: [approved, changes_requested, commented]}; "
         + "github.pr_closed {pr | mine: true, merged_only?}. "
         + "`mine` means the branches and pull requests of tasks you are working on. Rules expire after 24 hours unless you set expires_at (at most 7 days). "
+        + "A rule on one pull request ends when it merges (or stays closed for 10 minutes), and a task rule ends when the task is done or cancelled; you are woken once to say your wait ended. "
         + "Adding the same rule twice returns the existing one. People see what you are waiting for and can cancel it.", {
         event: z.enum(WAKE_RULE_EVENTS),
         arguments: z.record(z.string(), z.unknown()).optional().describe("What exactly to wait for; see the event list above."),
@@ -58,7 +59,7 @@ export function registerWakeRuleTools(server) {
             return toolError(error);
         }
     });
-    server.tool("list_wake_rules", "List what agents in this room are waiting for, and wake rules that recently fired, expired or were cancelled. Check this on resume to see what you were waiting for.", { ...scope, agent_key: z.string().optional().describe("Only this agent’s rules.") }, async ({ room_id, agent_key }) => {
+    server.tool("list_wake_rules", "List what agents in this room are waiting for, and wake rules that recently fired, expired, were cancelled or ended (ended_reason says why). Check this on resume to see what you were waiting for.", { ...scope, agent_key: z.string().optional().describe("Only this agent’s rules.") }, async ({ room_id, agent_key }) => {
         try {
             const { target, local } = await roomTarget(room_id);
             if (local)

package/dist/shared/presence-change-channel.js

@@ -0,0 +1,2 @@
+/** Postgres NOTIFY channel written by the room_agent_presence_notify trigger (migration 0105). */
+export const PRESENCE_CHANGE_CHANNEL = "letagents_presence_changes";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "letagents",
-  "version": "0.12.33",
+  "version": "0.12.35",
   "description": "Let Agents Chat \u2014 MCP server for AI agent communication",
   "type": "module",
   "main": "dist/mcp/server.js",
@@ -70,7 +70,7 @@
       "esbuild": "^0.25.12"
     },
     "fast-uri": "3.1.8",
-    "hono": "4.13.5",
+    "hono": "4.13.8",
     "ip-address": "10.7.2"
   }
 }

package/shared/agent-branch.d.mts

@@ -0,0 +1,5 @@
+/** The part of a leased branch's name that names the agent. */
+export function agentBranchSegment(agentKey: string): string;
+export function leasedBranchRef(taskId: string, agentKey: string): string;
+/** True when `branch` is a branch LetAgents would lease to this agent, for any task. */
+export function isAgentBranch(branch: unknown, agentKey: unknown): boolean;

package/shared/agent-branch.mjs

@@ -0,0 +1,28 @@
+/**
+ * The branches LetAgents leases to an agent: `letagents/<task>/<agent>`. The
+ * server names a task's branch with this module, and the desktop uses it to
+ * tell an agent's own branches from every other branch.
+ */
+
+/** The part of a leased branch's name that names the agent. */
+export function agentBranchSegment(agentKey) {
+  const slug = agentKey
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9._-]+/g, "-")
+    .replace(/^-+|-+$/g, "")
+    .slice(0, 64);
+  return slug || "agent";
+}
+
+export function leasedBranchRef(taskId, agentKey) {
+  return `letagents/${taskId}/${agentBranchSegment(agentKey)}`;
+}
+
+/** True when `branch` is a branch LetAgents would lease to this agent, for any task. */
+export function isAgentBranch(branch, agentKey) {
+  if (typeof branch !== "string" || typeof agentKey !== "string" || !agentKey.trim()) return false;
+  const [prefix, task, agent, ...rest] = branch.split("/");
+  return prefix === "letagents" && rest.length === 0 && typeof task === "string" && /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(task)
+    && agent === agentBranchSegment(agentKey);
+}

package/shared/code-block.css

@@ -0,0 +1,193 @@
+/* ─── Shared Fenced Code Block & Syntax Highlighting Styles ─── */
+
+.fenced-code-block {
+  position: relative;
+  max-width: 100%;
+  margin: 0.75em 0;
+  padding: 0;
+  overflow: hidden;
+  border: 1px solid var(--border);
+  border-radius: var(--radius-md, 8px);
+  background: var(--code-bg, color-mix(in srgb, var(--bg) 88%, transparent));
+  color: var(--code-text, var(--text));
+  font-family: var(--font-mono);
+  font-size: 0.82rem;
+  line-height: 1.55;
+}
+
+.fenced-code-block-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 6px 12px;
+  background: var(--code-header-bg, color-mix(in srgb, var(--text) 4%, transparent));
+  border-bottom: 1px solid var(--border);
+  user-select: none;
+  font-family: var(--font-sans);
+  font-size: 0.75rem;
+  line-height: 1.2;
+}
+
+.fenced-code-block-lang {
+  color: var(--code-lang, var(--text-secondary));
+  font-weight: 500;
+  text-transform: lowercase;
+}
+
+.fenced-code-block-lang[data-lang]::before {
+  content: attr(data-lang);
+}
+
+.fenced-code-block-copy {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  margin-left: auto;
+  padding: 3px 8px;
+  border: 1px solid var(--border);
+  border-radius: var(--radius-sm, 4px);
+  background: var(--code-copy-bg, transparent);
+  color: var(--code-copy-text, var(--text-secondary));
+  font-family: var(--font-sans);
+  font-size: 0.72rem;
+  font-weight: 500;
+  line-height: 1.2;
+  cursor: pointer;
+  transition: color var(--duration-fast, 150ms) var(--ease-out, ease),
+              background var(--duration-fast, 150ms) var(--ease-out, ease),
+              border-color var(--duration-fast, 150ms) var(--ease-out, ease);
+}
+
+@media (hover: hover) and (pointer: fine) {
+  .fenced-code-block-copy:hover {
+    background: var(--accent-hover, rgba(255, 255, 255, 0.08));
+    color: var(--text);
+    border-color: var(--border-strong);
+  }
+}
+
+.fenced-code-block-copy:focus-visible {
+  outline: 2px solid var(--blue, #3b82f6);
+  outline-offset: 1px;
+}
+
+.fenced-code-block-copy::before {
+  content: "Copy";
+}
+
+.fenced-code-block-copy[data-copied="true"] {
+  color: var(--green-text, #4ade80);
+  border-color: color-mix(in srgb, var(--green-text, #4ade80) 40%, transparent);
+}
+
+.fenced-code-block-copy[data-copied="true"]::before {
+  content: "Copied";
+}
+
+.fenced-code-block-copy[data-copied="error"] {
+  color: var(--red-text, #f87171);
+  border-color: color-mix(in srgb, var(--red-text, #f87171) 40%, transparent);
+}
+
+.fenced-code-block-copy[data-copied="error"]::before {
+  content: "Failed";
+}
+
+/*
+ * Eleven different surfaces across desktop and web (e.g. chat messages, long message reader,
+ * board task inspector, thread panel, events view, markdown editor preview, agent inspector)
+ * define conflicting styles for `pre` with varying selector specificity.
+ * The `!important` declarations below ensure the fenced code block pre maintains a clean,
+ * borderless, transparent container with standard monospace sizing across all surfaces.
+ */
+.fenced-code-block pre {
+  margin: 0 !important;
+  padding: 10px 14px !important;
+  overflow-x: auto !important;
+  border: none !important;
+  border-radius: 0 !important;
+  background: transparent !important;
+  line-height: 1.55;
+  font-family: var(--font-mono);
+  font-size: 0.82rem;
+  white-space: pre;
+}
+
+.fenced-code-block code.fenced-code-block-content {
+  display: block;
+  padding: 0;
+  overflow-x: visible;
+  background: transparent;
+  color: inherit;
+  font-family: inherit;
+  font-size: inherit;
+  line-height: inherit;
+  white-space: pre;
+}
+
+/* ─── Syntax Highlighting Token Mappings ─── */
+.hljs-comment,
+.hljs-quote {
+  color: var(--code-comment, var(--text-secondary));
+  font-style: italic;
+}
+
+.hljs-keyword,
+.hljs-selector-tag,
+.hljs-subst {
+  color: var(--code-keyword, var(--task-assigned));
+}
+
+.hljs-string,
+.hljs-doctag,
+.hljs-regexp {
+  color: var(--code-string, var(--green-text));
+}
+
+.hljs-number,
+.hljs-literal {
+  color: var(--code-number, var(--amber-text));
+}
+
+.hljs-title,
+.hljs-title.function_,
+.hljs-title.class_,
+.hljs-section {
+  color: var(--code-function, var(--blue-text));
+}
+
+.hljs-variable,
+.hljs-template-variable,
+.hljs-attr,
+.hljs-attribute {
+  color: var(--code-variable, var(--task-in-review));
+}
+
+.hljs-type,
+.hljs-built_in,
+.hljs-name {
+  color: var(--code-type, var(--red-text));
+}
+
+.hljs-meta,
+.hljs-tag {
+  color: var(--code-comment, var(--text-secondary));
+}
+
+.hljs-addition {
+  color: var(--code-string, var(--green-text));
+  background-color: var(--green-dim, rgba(34, 197, 94, 0.12));
+}
+
+.hljs-deletion {
+  color: var(--code-type, var(--red-text));
+  background-color: var(--red-dim, rgba(239, 68, 68, 0.12));
+}
+
+.hljs-emphasis {
+  font-style: italic;
+}
+
+.hljs-strong {
+  font-weight: bold;
+}

package/shared/code-highlighting.d.mts

@@ -0,0 +1,109 @@
+export type CanonicalLanguage =
+  | 'javascript'
+  | 'typescript'
+  | 'python'
+  | 'bash'
+  | 'json'
+  | 'yaml'
+  | 'xml'
+  | 'css'
+  | 'sql'
+  | 'diff'
+  | 'rust'
+  | 'go'
+  | 'c'
+  | 'cpp'
+  | 'java'
+  | 'csharp'
+  | 'dockerfile'
+  | 'ruby'
+  | 'php'
+  | 'swift'
+  | 'kotlin'
+  | 'ini';
+
+export type LanguageAlias =
+  | 'js'
+  | 'jsx'
+  | 'mjs'
+  | 'cjs'
+  | 'ts'
+  | 'tsx'
+  | 'mts'
+  | 'cts'
+  | 'py'
+  | 'sh'
+  | 'zsh'
+  | 'shell'
+  | 'yml'
+  | 'html'
+  | 'xhtml'
+  | 'svg'
+  | 'rs'
+  | 'golang'
+  | 'c++'
+  | 'cc'
+  | 'hpp'
+  | 'h'
+  | 'cs'
+  | 'docker'
+  | 'rb'
+  | 'kt'
+  | 'kts'
+  | 'toml';
+
+export type CodeHighlightLanguage = CanonicalLanguage;
+
+export interface ResolvedLanguage {
+  canonical: CanonicalLanguage;
+  label: string;
+}
+
+export interface CodeHighlighterOptions {
+  highlight: (code: string, canonicalLanguage: CanonicalLanguage) => string;
+  now?: () => number;
+  maxBudgetMs?: number;
+  windowMs?: number;
+}
+
+export interface CodeHighlighter {
+  renderCodeBlock(code: string, rawTag?: string): string;
+  cache: CodeHighlightCache;
+  resolveLanguage(rawTag?: string): ResolvedLanguage | null;
+}
+
+export const CANONICAL_LANGUAGES: readonly CanonicalLanguage[];
+export const LANGUAGE_ALIASES: ReadonlyMap<string, CanonicalLanguage>;
+
+export const MAX_HIGHLIGHT_CHARS: number;
+export const MAX_HIGHLIGHT_LINES: number;
+export const MAX_HIGHLIGHT_LINE_LENGTH: number;
+export const MAX_CACHE_ENTRIES: number;
+export const MAX_CACHE_CHARS: number;
+
+export const DEFAULT_TIME_BUDGET_MS: number;
+export const DEFAULT_TIME_WINDOW_MS: number;
+
+export function escapeHtml(value: unknown): string;
+export function escapeAttribute(value: unknown): string;
+export function resolveLanguage(rawTag?: string): ResolvedLanguage | null;
+
+export class CodeHighlightCache {
+  constructor(maxEntries?: number, maxChars?: number);
+  get(key: string): string | undefined;
+  set(key: string, value: string): void;
+  clear(): void;
+  readonly size: number;
+  readonly totalChars: number;
+}
+
+export function createCodeHighlighter(options: CodeHighlighterOptions): CodeHighlighter;
+export function executeCodeBlockCopy(
+  button: HTMLButtonElement,
+  textToCopy: string | null,
+  copyFn: (text: string) => Promise<boolean> | boolean,
+  copyTimers?: WeakMap<HTMLButtonElement, number>
+): Promise<{ success: boolean; timerId: number | null }>;
+export function setupCodeBlockCopyListener(
+  copyFn: (text: string) => Promise<boolean> | boolean
+): () => void;