negotium 0.1.11 → 0.1.13

package/dist/rollout.js

@@ -10,7 +10,7 @@ import {
   repairPoisonedRollout,
   writeClaudeRollout,
   writeCodexRollout
-} from "./chunk-gz12qcf0.js";
+} from "./chunk-a9y2rwxf.js";
 
 // src/rollout.ts
 import { fileURLToPath } from "url";

package/dist/runtime/cron/store.ts

@@ -137,7 +137,30 @@ interface TableColumnRow {
 
 let schemaReady = false;
 
-export type CronDatabase = Pick<typeof defaultDb, "exec" | "query" | "transaction">;
+export interface CronDatabaseStatement {
+  get(...params: any[]): unknown;
+  all(...params: any[]): unknown[];
+  run(...params: any[]): CronDatabaseRunResult;
+}
+
+export interface CronDatabaseRunResult {
+  changes: number | bigint;
+  lastInsertRowid?: number | bigint;
+}
+
+export interface CronDatabaseTransaction<Result> {
+  (): Result;
+  deferred?: () => Result;
+  immediate?: () => Result;
+  exclusive?: () => Result;
+}
+
+/** Structural SQLite surface accepted from Bun, Node, or an embedding host. */
+export interface CronDatabase {
+  exec(sql: string): unknown;
+  query(sql: string): CronDatabaseStatement;
+  transaction<Result>(fn: () => Result): CronDatabaseTransaction<Result>;
+}
 
 let db: CronDatabase = defaultDb;
 

package/dist/runtime/src/application/submit-user-message.ts

@@ -12,6 +12,8 @@ export interface SubmitUserMessageParams {
   allowAutoContinue?: boolean;
   /** Adapter capability: only Otium should enable visual panel tools. */
   visualTools?: boolean;
+  /** Adapter capability: Otium and Telegram may enable file delivery. */
+  fileDeliveryTools?: boolean;
   onDispatched?: (queryId: string) => void;
   /** Override used by remote hosts and deterministic tests. */
   startTurn?: (params: StartAiTurnParams) => string | null;
@@ -44,6 +46,7 @@ export function submitUserMessage(params: SubmitUserMessageParams): SubmitUserMe
     prompt: params.text,
     allowAutoContinue: params.allowAutoContinue ?? true,
     visualTools: params.visualTools === true,
+    fileDeliveryTools: params.fileDeliveryTools === true,
     onDispatched: params.onDispatched,
   });
   return { message, queryId };

package/dist/runtime/src/index.ts

@@ -206,9 +206,16 @@ export {
   listBackgroundSessionsForUser,
   registerBackgroundSessionProvider,
 } from "#runtime/background-sessions";
+export type { DeliveryAckResult } from "#runtime/delivery-ack";
+export {
+  claimDeliveryAck,
+  prepareDeliveryAck,
+  resolveDeliveryAck,
+} from "#runtime/delivery-ack";
 export type { FileHooks, UploadAccess } from "#runtime/file-hooks";
 export {
   fileHooks,
+  resetFileHooks,
   resolveAttachmentByFileId,
   resolveUploadedFilePathByFileId,
   setFileHooks,

package/dist/runtime/src/mcp/runtime-spec.ts

@@ -30,6 +30,8 @@ export interface RuntimeMcpContext {
   autoContinue?: boolean;
   /** Capability minted by the adapter. Visual tools are absent unless true. */
   visualTools?: boolean;
+  /** Capability minted by the adapter. File-delivery tools are absent unless true. */
+  fileDeliveryTools?: boolean;
   peerBridge?: PeerRuntimeBridgeContext;
 }
 
@@ -83,6 +85,7 @@ function isRuntimeMcpContext(value: unknown): value is RuntimeMcpContext {
     (ctx.currentUserPrompt === undefined || typeof ctx.currentUserPrompt === "string") &&
     (ctx.autoContinue === undefined || typeof ctx.autoContinue === "boolean") &&
     (ctx.visualTools === undefined || typeof ctx.visualTools === "boolean") &&
+    (ctx.fileDeliveryTools === undefined || typeof ctx.fileDeliveryTools === "boolean") &&
     (ctx.peerBridge === undefined ||
       (typeof ctx.peerBridge.hubCellId === "string" &&
         typeof ctx.peerBridge.hostTopicId === "string" &&

package/dist/runtime/src/mcp/session-comm/server.ts

@@ -566,7 +566,7 @@ if (!isReplyOnly) {
 
       if (currentDepth + 1 > MAX_TELL_DEPTH) {
         return mcpError(
-          `Error: depth 한도 도달 (현재 ${currentDepth}, 최대 ${MAX_TELL_DEPTH}). 더 이상 tell_session 체인을 만들 수 없습니다.`,
+          `Error: depth limit reached (current ${currentDepth}, max ${MAX_TELL_DEPTH}). Cannot build any more tell_session chains.`,
         );
       }
 

package/dist/runtime/src/platform/config.ts

@@ -353,10 +353,10 @@ export const PDFTOTEXT_BIN = envText("PDFTOTEXT_BIN") ?? "pdftotext";
 
 // Max tell_session relay depth from origin user. ask_session forks reset to
 // depth=0, so this only caps tell_session chains. Override via MAX_TELL_DEPTH
-// (positive int); defaults to 3 when unset or invalid.
+// (positive int); defaults to 20 when unset or invalid.
 const _envMaxTellDepth = Number.parseInt(process.env.MAX_TELL_DEPTH ?? "", 10);
 export const MAX_TELL_DEPTH =
-  Number.isInteger(_envMaxTellDepth) && _envMaxTellDepth > 0 ? _envMaxTellDepth : 3;
+  Number.isInteger(_envMaxTellDepth) && _envMaxTellDepth > 0 ? _envMaxTellDepth : 20;
 
 /** Codex CLI auth file. 호출 시점에 env를 읽는다 — 테스트가 런타임에
  *  NEGOTIUM_CODEX_AUTH_FILE을 바꾸므로 모듈 로드 상수로 만들면 안 된다. */

package/dist/runtime/src/platform/mcp-config.ts

@@ -186,6 +186,7 @@ export interface RuntimeMcpBuildContext {
   bgBashPort?: number;
   autoContinue?: boolean;
   visualTools?: boolean;
+  fileDeliveryTools?: boolean;
   silent?: boolean;
   peerBridge?: PeerRuntimeBridgeContext;
 }
@@ -298,6 +299,7 @@ const MCP_CATALOG: Record<string, RuntimeMcpCatalogEntry> = {
       currentUserPrompt,
       autoContinue,
       visualTools,
+      fileDeliveryTools,
       peerBridge,
     }) {
       if (!topicId || !agent) return null;
@@ -312,6 +314,7 @@ const MCP_CATALOG: Record<string, RuntimeMcpCatalogEntry> = {
         currentUserPrompt,
         autoContinue,
         visualTools,
+        fileDeliveryTools,
         peerBridge,
       });
     },
@@ -663,6 +666,7 @@ export function getManagerMcpServers(opts: {
   playwrightCapability?: string;
   autoContinue?: boolean;
   visualTools?: boolean;
+  fileDeliveryTools?: boolean;
 }) {
   if (!opts.topicId) {
     throw new Error("getManagerMcpServers: private General topicId is required");
@@ -682,6 +686,7 @@ export function getManagerMcpServers(opts: {
     playwrightCapability: opts.playwrightCapability,
     autoContinue: opts.autoContinue,
     visualTools: opts.visualTools,
+    fileDeliveryTools: opts.fileDeliveryTools,
   });
 }
 
@@ -706,6 +711,7 @@ export function getForumMcpServers(opts: {
   bgBashPort?: number;
   autoContinue?: boolean;
   visualTools?: boolean;
+  fileDeliveryTools?: boolean;
   depth?: number;
   enabled?: string[] | null;
   extra?: Record<string, unknown>;
@@ -731,6 +737,7 @@ export function getForumMcpServers(opts: {
     bgBashPort,
     autoContinue,
     visualTools,
+    fileDeliveryTools,
     peerBridge,
   } = opts;
 
@@ -760,6 +767,7 @@ export function getForumMcpServers(opts: {
       bgBashPort,
       autoContinue,
       visualTools,
+      fileDeliveryTools,
       silent,
       peerBridge,
     },
@@ -787,6 +795,7 @@ export function getCronMcpServers(opts: {
   playwrightPort?: number;
   playwrightCapability?: string;
   visualTools?: boolean;
+  fileDeliveryTools?: boolean;
 }) {
   return buildScope("cron", {
     userId: opts.userId,
@@ -802,6 +811,7 @@ export function getCronMcpServers(opts: {
     playwrightCapability: opts.playwrightCapability,
     autoContinue: false,
     visualTools: opts.visualTools,
+    fileDeliveryTools: opts.fileDeliveryTools,
   });
 }
 
@@ -827,6 +837,7 @@ export function getMcpServersForQuery(opts: AgentQueryOptions): Record<string, u
       playwrightPort: opts.playwrightPort,
       playwrightCapability: opts.playwrightCapability,
       visualTools: opts.visualTools,
+      fileDeliveryTools: opts.fileDeliveryTools,
     });
   }
   if (opts.sessionType === "dm" || opts.sessionType === "ephemeral") {
@@ -852,6 +863,7 @@ export function getMcpServersForQuery(opts: AgentQueryOptions): Record<string, u
       playwrightCapability: opts.playwrightCapability,
       autoContinue: opts.autoContinue,
       visualTools: opts.visualTools,
+      fileDeliveryTools: opts.fileDeliveryTools,
     });
   }
   return getForumMcpServers({
@@ -869,6 +881,7 @@ export function getMcpServersForQuery(opts: AgentQueryOptions): Record<string, u
     bgBashPort: opts.bgBashPort,
     autoContinue: opts.autoContinue,
     visualTools: opts.visualTools,
+    fileDeliveryTools: opts.fileDeliveryTools,
     depth: opts.depth,
     enabled: opts.mcpEnabled,
     extra: opts.mcpExtra,

package/dist/runtime/src/prompts/builders.ts

@@ -156,12 +156,15 @@ export interface SessionSystemPromptOpts {
   canSpawnSubagents?: boolean;
   /** True only when the current adapter renders Otium visual cards. */
   visualTools?: boolean;
+  /** True only when the current adapter can deliver files to its chat. */
+  fileDeliveryTools?: boolean;
 }
 
 function buildRuntimeToolSection(
   agentKind: AgentKind,
   canSpawnSubagents = false,
   visualTools = false,
+  fileDeliveryTools = false,
 ): string {
   const runtimeNamespace = "mcp__runtime";
   const taskNamespace = "mcp__task";
@@ -222,6 +225,14 @@ function buildRuntimeToolSection(
         "Visual HTML runs in a sandbox. Use inline CSS/JS only; local buttons, tabs, filters, forms with preventDefault, canvas, and SVG interactions are supported. External navigation, scripts, network fetches, form posts, popups, and parent-window access are blocked.",
       ]
     : [];
+  const fileDeliverySection = fileDeliveryTools
+    ? [
+        "",
+        "## File Delivery",
+        `To send a file to the user, save it under your working directory and call the ${sendFileTool} with { file_path: "<absolute path>" }.`,
+        "It appears as a downloadable attachment in the chat and returns success. Never claim file delivery is unavailable after a successful call.",
+      ]
+    : [];
 
   const shared = [
     "",
@@ -237,10 +248,7 @@ function buildRuntimeToolSection(
     taskToolLine,
     "Use this shared task store for plans, task progress, and checklist updates. It is visible across claude/codex/maestro turns and drives the live task panel.",
     nativeTaskPolicyLine,
-    "",
-    "## File Delivery",
-    `To send a file to the user, save it under your working directory and call the ${sendFileTool} with { file_path: "<absolute path>" }.`,
-    "It appears as a downloadable attachment in the chat and returns success. Never claim file delivery is unavailable after a successful call.",
+    ...fileDeliverySection,
     "",
     "## Session Communication",
     "The session-comm MCP server is the only cross-topic messaging surface. Its canonical tools are `list_sessions`, `peek_session`, `tell_session`, `ask_session`, and `abort_session`.",
@@ -292,7 +300,13 @@ export function buildTopicSystemPrompt(opts: SessionSystemPromptOpts): string {
       TOPIC_TITLE: opts.topicTitle,
       WORKSPACE_CWD: opts.workspaceCwd,
       UPLOADS_DIR: uploadsDir,
-    }) + buildRuntimeToolSection(opts.agentKind, opts.canSpawnSubagents, opts.visualTools);
+    }) +
+    buildRuntimeToolSection(
+      opts.agentKind,
+      opts.canSpawnSubagents,
+      opts.visualTools,
+      opts.fileDeliveryTools,
+    );
   if (opts.description?.trim()) {
     prompt += `\n\n## Topic-Specific Instructions\n${opts.description.trim()}`;
   }
@@ -307,7 +321,7 @@ export function buildChannelSystemPrompt(opts: SessionSystemPromptOpts): string
       TOPIC_TITLE: opts.topicTitle,
       WORKSPACE_CWD: opts.workspaceCwd,
       UPLOADS_DIR: uploadsDir,
-    }) + buildRuntimeToolSection(opts.agentKind, false, opts.visualTools)
+    }) + buildRuntimeToolSection(opts.agentKind, false, opts.visualTools, opts.fileDeliveryTools)
   );
 }
 

package/dist/runtime/src/query/active-rooms.ts

@@ -73,6 +73,8 @@ export interface DeferredInject {
   sessionType?: "dm" | "forum" | "ephemeral" | "manager" | "cron";
   /** Adapter-granted access to Otium's visual panel tools. */
   visualTools?: boolean;
+  /** Adapter-granted access to chat file-delivery tools. */
+  fileDeliveryTools?: boolean;
   /** Optional session owner; when present the topic's main session is not replaced. */
   onSessionId?: (sessionId: string) => void;
   /** Clear an externally-owned session after an unrecoverable expiry. */

package/dist/runtime/src/runtime/delivery-ack.ts

@@ -0,0 +1,112 @@
+/**
+ * Cross-process delivery acknowledgements for files rendered by an external
+ * channel adapter. Signals ride the durable RuntimeBus so the runtime MCP and
+ * adapter may live in separate processes (the default CLI topology).
+ */
+
+import { runtimeBus } from "#bus";
+
+export interface DeliveryAckResult {
+  ok: boolean;
+  error?: string;
+}
+
+interface DeliveryAckSignal {
+  kind: "delivery_ack";
+  messageId: string;
+  phase: "claimed" | "settled";
+  result?: DeliveryAckResult;
+}
+
+export interface DeliveryAckWaiter {
+  promise: Promise<DeliveryAckResult | null>;
+  cancel(): void;
+}
+
+function signalForMessage(payload: unknown, messageId: string): DeliveryAckSignal | null {
+  if (!payload || typeof payload !== "object") return null;
+  const value = payload as Partial<DeliveryAckSignal>;
+  if (
+    value.kind !== "delivery_ack" ||
+    value.messageId !== messageId ||
+    (value.phase !== "claimed" && value.phase !== "settled")
+  ) {
+    return null;
+  }
+  return value as DeliveryAckSignal;
+}
+
+/**
+ * Install the listener before publishing the attachment message. If no
+ * adapter claims the message within `claimTimeoutMs`, no external delivery
+ * surface was interested and the caller may keep the host-storage result.
+ * Once claimed, lack of a final result is a delivery failure, never success.
+ */
+export function prepareDeliveryAck(
+  messageId: string,
+  claimTimeoutMs: number,
+  deliveryTimeoutMs: number,
+): DeliveryAckWaiter {
+  let settled = false;
+  let claimed = false;
+  let finishPromise: (result: DeliveryAckResult | null) => void = () => {};
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  let unsubscribe = () => {};
+
+  const promise = new Promise<DeliveryAckResult | null>((resolve) => {
+    finishPromise = resolve;
+  });
+
+  unsubscribe = runtimeBus().subscribe((event) => {
+    if (event.type !== "ai-status") return;
+    const signal = signalForMessage(event.payload, messageId);
+    if (!signal) return;
+    if (signal.phase === "claimed") {
+      if (claimed || settled) return;
+      claimed = true;
+      if (timer) clearTimeout(timer);
+      timer = setTimeout(() => {
+        finish({ ok: false, error: "channel delivery confirmation timed out" });
+      }, deliveryTimeoutMs);
+      timer.unref?.();
+      return;
+    }
+    if (signal.result) finish(signal.result);
+  });
+
+  function finish(result: DeliveryAckResult | null): void {
+    if (settled) return;
+    settled = true;
+    if (timer) clearTimeout(timer);
+    unsubscribe();
+    finishPromise(result);
+  }
+
+  timer = setTimeout(() => finish(null), claimTimeoutMs);
+  timer.unref?.();
+
+  return { promise, cancel: () => finish(null) };
+}
+
+/** Announce that an adapter accepted this message for external delivery. */
+export function claimDeliveryAck(topicId: string, messageId: string): void {
+  runtimeBus().broadcastAiStatus(topicId, {
+    kind: "delivery_ack",
+    messageId,
+    phase: "claimed",
+  } satisfies DeliveryAckSignal);
+}
+
+/** Publish the adapter's one aggregated result for this message. */
+export function resolveDeliveryAck(
+  topicId: string,
+  messageId: string,
+  result: DeliveryAckResult,
+): void {
+  runtimeBus().broadcastAiStatus(topicId, {
+    kind: "delivery_ack",
+    messageId,
+    phase: "settled",
+    result,
+  } satisfies DeliveryAckSignal);
+}

package/dist/runtime/src/runtime/errors.ts

@@ -16,11 +16,11 @@ export function stringifyError(err: unknown): string {
 export function authRecoveryHint(agent: AgentKind): string {
   switch (agent) {
     case "claude":
-      return "Claude Code 로그인을 갱신해주세요";
+      return "Please refresh your Claude Code login";
     case "codex":
-      return "`codex login` 으로 다시 로그인해주세요 (~/.codex/auth.json)";
+      return "Please log in again with `codex login` (~/.codex/auth.json)";
     case "maestro":
-      return "DEEPSEEK_API_KEY 환경변수를 확인해주세요";
+      return "Please check the DEEPSEEK_API_KEY environment variable";
   }
 }
 
@@ -31,14 +31,14 @@ export function classifyAgentError(err: unknown, agent: AgentKind): string {
     typeof err === "object" && err !== null
       ? (err as Record<string, unknown>).constructor?.name
       : undefined;
-  if (ctor === "AuthenticationError") return `${name} 인증이 만료되었습니다. ${hint}. (401)`;
+  if (ctor === "AuthenticationError") return `${name} authentication expired. ${hint}. (401)`;
   if (ctor === "RateLimitError")
-    return `${name} 요청 한도를 초과했습니다. 잠시 후 다시 시도해주세요. (429)`;
+    return `${name} request limit exceeded. Please try again in a moment. (429)`;
   if (ctor === "InternalServerError") {
     const status = (err as Record<string, unknown>).status;
     return status === 529
-      ? `${name} 서버가 과부하 상태입니다. 잠시 후 다시 시도해주세요. (529)`
-      : `${name} 서버 오류가 발생했습니다. 잠시 후 다시 시도해주세요. (500)`;
+      ? `${name} server is overloaded. Please try again in a moment. (529)`
+      : `${name} server error occurred. Please try again in a moment. (500)`;
   }
 
   const s = stringifyError(err);
@@ -47,17 +47,17 @@ export function classifyAgentError(err: unknown, agent: AgentKind): string {
       s,
     )
   ) {
-    return `${name} 인증이 만료되었습니다. ${hint}. (401)`;
+    return `${name} authentication expired. ${hint}. (401)`;
   }
   if (/429|rate.limit/i.test(s))
-    return `${name} 요청 한도를 초과했습니다. 잠시 후 다시 시도해주세요. (429)`;
+    return `${name} request limit exceeded. Please try again in a moment. (429)`;
   if (/529|overloaded/i.test(s))
-    return `${name} 서버가 과부하 상태입니다. 잠시 후 다시 시도해주세요. (529)`;
+    return `${name} server is overloaded. Please try again in a moment. (529)`;
   if (/500|internal.server/i.test(s))
-    return `${name} 서버 오류가 발생했습니다. 잠시 후 다시 시도해주세요. (500)`;
+    return `${name} server error occurred. Please try again in a moment. (500)`;
 
   const snippet = s.length > 200 ? `${s.slice(0, 200)}...` : s;
-  return `${name} 오류: ${snippet}`;
+  return `${name} error: ${snippet}`;
 }
 
 export function isSessionExpiredError(message: string): boolean {

package/dist/runtime/src/runtime/turn-runner.ts

@@ -946,6 +946,7 @@ function redispatchInject(inject: DeferredInject): void {
     sessionName: inject.sessionName,
     sessionType: inject.sessionType,
     visualTools: inject.visualTools,
+    fileDeliveryTools: inject.fileDeliveryTools,
     onSessionId: inject.onSessionId,
     onSessionReset: inject.onSessionReset,
     bridgeSessionFromHistory: inject.bridgeSessionFromHistory,
@@ -1221,6 +1222,8 @@ export interface AiTurnExecutionOptions {
   sessionType?: "dm" | "forum" | "ephemeral" | "manager" | "cron";
   /** Adapter-granted access to Otium's visual panel tools. Default-deny. */
   visualTools?: boolean;
+  /** Adapter-granted access to chat file-delivery tools. Default-deny. */
+  fileDeliveryTools?: boolean;
   /** Own this turn's provider session without replacing the topic's main session. */
   onSessionId?: (sessionId: string) => void;
   /** Clear the externally-owned provider session after recovery fails. */
@@ -1366,6 +1369,7 @@ function serializableUserTurnExecution(params: StartAiTurnParams): RuntimeUserTu
     sessionName: params.sessionName,
     sessionType: params.sessionType,
     visualTools: params.visualTools,
+    fileDeliveryTools: params.fileDeliveryTools,
     bridgeSessionFromHistory: params.bridgeSessionFromHistory,
     peerBridge: params.peerBridge,
     from: params.from,
@@ -1451,6 +1455,7 @@ async function drainOneDurableUserTurn(): Promise<void> {
       sessionName: execution?.sessionName,
       sessionType: execution?.sessionType,
       visualTools: execution?.visualTools,
+      fileDeliveryTools: execution?.fileDeliveryTools,
       bridgeSessionFromHistory: execution?.bridgeSessionFromHistory,
       peerBridge: execution?.peerBridge,
       from: execution?.from,
@@ -1555,6 +1560,7 @@ export function startAiTurn(params: StartAiTurnParams): string | null {
   const sessionName = params.sessionName ?? topic.title;
   const sessionType = params.sessionType;
   const visualTools = params.visualTools === true;
+  const fileDeliveryTools = params.fileDeliveryTools === true;
   const onSessionId = params.onSessionId;
   const onSessionReset = params.onSessionReset;
   const bridgeSessionFromHistory = params.bridgeSessionFromHistory === true;
@@ -1606,6 +1612,7 @@ export function startAiTurn(params: StartAiTurnParams): string | null {
       sessionName,
       sessionType,
       visualTools,
+      fileDeliveryTools,
       onSessionId,
       onSessionReset,
       bridgeSessionFromHistory,
@@ -1743,6 +1750,7 @@ export function startAiTurn(params: StartAiTurnParams): string | null {
           sessionName,
           sessionType,
           visualTools,
+          fileDeliveryTools,
           onSessionId,
           onSessionReset,
           bridgeSessionFromHistory,
@@ -1872,6 +1880,7 @@ export function startAiTurn(params: StartAiTurnParams): string | null {
     canSpawnSubagents:
       peerBridge?.canSpawnSubagents ?? (topicRecord?.kind === "agent" && !topicRecord.isSubagent),
     visualTools,
+    fileDeliveryTools,
   };
   const isManager = topicRecord?.kind === "manager";
   const isMentionOnlyChannel = topic.aiMode === "mention" && !isManager;
@@ -2063,6 +2072,7 @@ export function startAiTurn(params: StartAiTurnParams): string | null {
         wikiTopicId: memoryTopic.id,
         autoContinue: allowAutoContinue && !silent,
         visualTools,
+        fileDeliveryTools,
         peerBridge,
       });
     } finally {
@@ -2155,6 +2165,7 @@ export function startAiTurn(params: StartAiTurnParams): string | null {
           sessionName,
           sessionType,
           visualTools,
+          fileDeliveryTools,
           onSessionId,
           onSessionReset,
           bridgeSessionFromHistory,
@@ -2337,6 +2348,7 @@ export function triggerTopicAiTurn(
     sessionName: opts?.sessionName,
     sessionType: opts?.sessionType,
     visualTools: opts?.visualTools,
+    fileDeliveryTools: opts?.fileDeliveryTools,
     onSessionId: opts?.onSessionId,
     onSessionReset: opts?.onSessionReset,
     bridgeSessionFromHistory: opts?.bridgeSessionFromHistory,

package/dist/runtime/src/storage/api-messages.ts

@@ -118,7 +118,7 @@ export interface ApiMessageRow {
   rowid?: number;
 }
 
-type ApiMessageAppendHook = (msg: MessageDto) => void | Promise<void>;
+export type ApiMessageAppendHook = (msg: MessageDto) => void | Promise<void>;
 const appendHooks = new Set<ApiMessageAppendHook>();
 
 export interface AppendApiMessageOptions {
@@ -366,6 +366,11 @@ export interface MessagePage {
   hasMore: boolean;
 }
 
+export interface ListApiMessagesOptions {
+  cursor?: string | null;
+  limit?: number;
+}
+
 /**
  * List messages for a topic, NEWEST-FIRST by default (bug G).
  *
@@ -378,10 +383,7 @@ export interface MessagePage {
  * (the oldest id currently loaded) to fetch the page of messages *older* than
  * it. `hasMore` therefore means "there are older messages above this page".
  */
-export function listApiMessages(
-  topicId: string,
-  options?: { cursor?: string | null; limit?: number },
-): MessagePage {
+export function listApiMessages(topicId: string, options?: ListApiMessagesOptions): MessagePage {
   const limit = Math.max(1, Math.min(options?.limit ?? 50, 200));
 
   let anchorRowid: number | null = null;

package/dist/runtime/src/storage/api-topics.ts

@@ -370,11 +370,14 @@ function initializeApiTopicsSchema(): void {
   )
   WHERE browser_profile_owner IS NULL
 `);
+  db.exec(
+    "CREATE INDEX IF NOT EXISTS idx_api_topics_last_message ON api_topics(last_message_at DESC)",
+  );
 }
 
 registerStorageSchemaInitializer(initializeApiTopicsSchema, 20);
 
-interface TopicRow {
+export interface TopicRow {
   id: string;
   title: string;
   kind: string | null;
@@ -394,7 +397,7 @@ interface TopicRow {
   session_id: string | null;
 }
 
-interface TopicSessionLogContext {
+export interface TopicSessionLogContext {
   reason?: string;
   queryId?: string;
   agent?: AgentKind;

package/dist/runtime/src/storage/forum-db.ts

@@ -1 +1,4 @@
-export { storageDatabase as db } from "#storage/storage-host";
+import type { StorageDatabase } from "#storage/storage-contract";
+import { internalStorageDatabase } from "#storage/storage-host";
+
+export const db = internalStorageDatabase as unknown as StorageDatabase;

package/dist/runtime/src/storage/runtime-turn-requests.ts

@@ -20,6 +20,7 @@ export interface RuntimeUserTurnExecution {
   sessionName?: string;
   sessionType?: "dm" | "forum" | "ephemeral" | "manager" | "cron";
   visualTools?: boolean;
+  fileDeliveryTools?: boolean;
   bridgeSessionFromHistory?: boolean;
   peerBridge?: PeerRuntimeBridgeContext;
   from?: string;

package/dist/runtime/src/storage/session-asks.ts

@@ -39,21 +39,25 @@ export interface AskReplySource {
   contextId?: string;
 }
 
-interface AskKey {
+export interface PendingAskKey {
   userId: PendingAskUserId;
   from: string;
   to: string;
 }
 
-interface AskIdentity extends AskKey {
+export interface PendingAskIdentity extends PendingAskKey {
   requestId?: string;
 }
 
+type AskKey = PendingAskKey;
+type AskIdentity = PendingAskIdentity;
+
 function pendingAskDir(userId: PendingAskUserId): string {
   const rawUserId = String(userId);
-  const safeUserId = /^[A-Za-z0-9][A-Za-z0-9_.@-]{0,255}$/.test(rawUserId)
-    ? rawUserId
-    : `sha256-${createHash("sha256").update(rawUserId).digest("hex")}`;
+  const safeUserId =
+    /^[A-Za-z0-9][A-Za-z0-9_.@-]{0,255}$/.test(rawUserId) && !rawUserId.includes("..")
+      ? rawUserId
+      : `sha256-${createHash("sha256").update(rawUserId).digest("hex")}`;
   return join(resolveStorageSessionAsksDir(), safeUserId);
 }
 
@@ -135,6 +139,10 @@ function readPendingAskFile(path: string, fallback: AskKey): PendingAskRecord |
     }
     const parsed = JSON.parse(raw) as Partial<PendingAskRecord>;
     if (!parsed.requestId || !parsed.from || !parsed.to) return null;
+    if (parsed.userId !== undefined && String(parsed.userId) !== String(fallback.userId))
+      return null;
+    if (fallback.from && parsed.from !== fallback.from) return null;
+    if (fallback.to && parsed.to !== fallback.to) return null;
     const now = new Date().toISOString();
     return {
       // The directory selected by the caller is authoritative. Never let a