negotium 0.19.2 → 0.20.0

package/dist/hosted-agent.js

@@ -26,6 +26,7 @@ import {
   RUN_DIR,
   SESSION_COMM_SERVER,
   SESSION_WORKSPACE_DIR,
+  SUPPORTED_AGENTS,
   SYSTEM_HEALTH_SERVER,
   TASK_SERVER,
   TOKEN_STATS_SERVER,
@@ -41,7 +42,7 @@ import {
   logger,
   resolveFallbackAgent,
   resolveTopicWorkspaceDir
-} from "./chunk-55dd0xw7.js";
+} from "./chunk-ad6xqvqy.js";
 import {
   __require
 } from "./chunk-2mx7fq49.js";
@@ -260,12 +261,248 @@ function referencesRuntimeSecretStorage(value) {
   return false;
 }
 
+// ../../packages/core/src/agents/explicit-agent-switch.ts
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function agentAliases(agent) {
+  switch (agent) {
+    case "codex":
+      return [
+        "codex",
+        "\uCF54\uB371\uC2A4",
+        "gpt-6-luna",
+        "gpt-6-sol",
+        "gpt-5.6-luna",
+        "gpt-5.6-terra",
+        "gpt-5.6-sol",
+        "gpt-6-astra"
+      ];
+    case "claude":
+      return ["claude", "\uD074\uB85C\uB4DC", "sonnet", "opus", "fable"];
+    case "maestro":
+      return [
+        "maestro",
+        "\uB9C8\uC5D0\uC2A4\uD2B8\uB85C",
+        "\uBA54\uC2A4\uD2B8\uB85C",
+        "deepseek",
+        "deepseek-pro",
+        "kimi",
+        "kimi-pro",
+        "kimi-k3",
+        "kimi-code",
+        "kimi-k2.7-code",
+        "\uB525\uC2DC\uD06C",
+        "\uD0A4\uBBF8"
+      ];
+  }
+}
+function hasExplicitAgentSwitchRequest(prompt, agent) {
+  if (!prompt?.trim())
+    return false;
+  const text = prompt.toLowerCase().replace(/\s+/g, " ").trim();
+  const target = `(?:${agentAliases(agent).map(escapeRegExp).join("|")})`;
+  const switchVerb = "(?:\uBC14\uAFD4|\uBC14\uAFD4\uC918|\uBCC0\uACBD|\uBCC0\uACBD\uD574|\uC804\uD658|\uC804\uD658\uD574|\uC124\uC815|\uC124\uC815\uD574|\uC368\uC918|\uC0AC\uC6A9|\uAC00|switch|change|set|use)";
+  const switchSubject = "(?:agent|runtime|model|\uC5D0\uC774\uC804\uD2B8|\uB7F0\uD0C0\uC784|\uBAA8\uB378)";
+  return [
+    new RegExp(`^/(?:agent|runtime)\\s+${target}(?:\\s|$)`, "iu"),
+    new RegExp(`${target}\\s*(?:\uB85C|\uC73C\uB85C)\\s*.{0,16}${switchVerb}`, "iu"),
+    new RegExp(`${switchSubject}.{0,24}${target}.{0,24}${switchVerb}`, "iu"),
+    new RegExp(`${switchVerb}.{0,24}${switchSubject}.{0,24}${target}`, "iu"),
+    new RegExp(`(?:switch|change|set|use).{0,24}${target}`, "iu")
+  ].some((pattern) => pattern.test(text));
+}
+function explicitAgentSwitchTargets(prompt) {
+  if (!prompt?.trim())
+    return [];
+  return SUPPORTED_AGENTS.filter((agent) => hasExplicitAgentSwitchRequest(prompt, agent));
+}
+
 // ../../packages/core/src/mcp/runtime-spec.ts
 import { createHash, createHmac, timingSafeEqual } from "crypto";
+
+// ../../packages/core/src/runtime/actor-topic-scope.ts
+var ACTOR_TOPIC_SCOPE_LIMITS = Object.freeze({
+  maxIdsPerList: 200,
+  maxIdLength: 128,
+  maxSerializedBytes: 8 * 1024
+});
+var SCOPE_KEYS = ["visibleNodeTopicIds", "ownedNodeTopicIds"];
+function idList(value, name) {
+  if (!Array.isArray(value))
+    return `${name} must be an array of topic ids`;
+  if (value.length > ACTOR_TOPIC_SCOPE_LIMITS.maxIdsPerList) {
+    return `${name} has ${value.length} ids; at most ${ACTOR_TOPIC_SCOPE_LIMITS.maxIdsPerList} are allowed`;
+  }
+  const ids = new Set;
+  for (const item of value) {
+    if (typeof item !== "string")
+      return `${name} must contain only strings`;
+    const id = item.trim();
+    if (!id)
+      return `${name} must not contain empty ids`;
+    if (id.length > ACTOR_TOPIC_SCOPE_LIMITS.maxIdLength) {
+      return `${name} contains an id longer than ${ACTOR_TOPIC_SCOPE_LIMITS.maxIdLength} characters`;
+    }
+    ids.add(id);
+  }
+  return [...ids];
+}
+function validateActorTopicScope(value) {
+  if (value === undefined)
+    return { ok: true, scope: undefined };
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return {
+      ok: false,
+      error: "actorTopicScope must be { visibleNodeTopicIds: string[], ownedNodeTopicIds: string[] }"
+    };
+  }
+  const proto = Object.getPrototypeOf(value);
+  if (proto !== Object.prototype && proto !== null) {
+    return { ok: false, error: "actorTopicScope must be a plain object" };
+  }
+  const keys = Object.keys(value);
+  const unknown = keys.filter((key) => !SCOPE_KEYS.includes(key));
+  if (unknown.length || keys.length !== SCOPE_KEYS.length) {
+    return {
+      ok: false,
+      error: unknown.length ? `actorTopicScope has unexpected key(s): ${unknown.join(", ")}` : "actorTopicScope must have both visibleNodeTopicIds and ownedNodeTopicIds"
+    };
+  }
+  const record = value;
+  const visible = idList(record.visibleNodeTopicIds, "actorTopicScope.visibleNodeTopicIds");
+  if (typeof visible === "string")
+    return { ok: false, error: visible };
+  const owned = idList(record.ownedNodeTopicIds, "actorTopicScope.ownedNodeTopicIds");
+  if (typeof owned === "string")
+    return { ok: false, error: owned };
+  const scope = { visibleNodeTopicIds: visible, ownedNodeTopicIds: owned };
+  const bytes = Buffer.byteLength(JSON.stringify(scope), "utf-8");
+  if (bytes > ACTOR_TOPIC_SCOPE_LIMITS.maxSerializedBytes) {
+    return {
+      ok: false,
+      error: `actorTopicScope is ${bytes} bytes serialized; at most ${ACTOR_TOPIC_SCOPE_LIMITS.maxSerializedBytes} are allowed`
+    };
+  }
+  return { ok: true, scope };
+}
+function encodeActorTopicScopeArg(scope) {
+  const validated = validateActorTopicScope(scope);
+  if (!validated.ok)
+    throw new Error(validated.error);
+  if (!validated.scope)
+    throw new Error("actorTopicScope is required");
+  return Buffer.from(JSON.stringify(validated.scope), "utf-8").toString("base64url");
+}
+
+// ../../packages/core/src/runtime/remote-session-grant.ts
+var REMOTE_SESSION_GRANT_LIMITS = Object.freeze({
+  maxHubUrlLength: 512,
+  maxCapabilityLength: 2 * 1024,
+  capabilityPrefix: "rsc1."
+});
+var GRANT_KEYS = ["hubUrl", "capability"];
+var LOOPBACK_HOSTS = new Set(["127.0.0.1", "::1", "[::1]", "localhost"]);
+function normalizeHubUrl(raw, name = "remoteSession.hubUrl") {
+  if (raw.length > REMOTE_SESSION_GRANT_LIMITS.maxHubUrlLength) {
+    return {
+      error: `${name} is longer than ${REMOTE_SESSION_GRANT_LIMITS.maxHubUrlLength} characters`
+    };
+  }
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return { error: `${name} must be an absolute URL` };
+  }
+  if (url.username || url.password) {
+    return { error: `${name} must not carry credentials` };
+  }
+  if (url.search || url.hash || raw.includes("?") || raw.includes("#")) {
+    return { error: `${name} must not carry a query or fragment` };
+  }
+  if (url.protocol === "http:") {
+    if (!LOOPBACK_HOSTS.has(url.hostname)) {
+      return { error: `${name} must be https:// or a loopback http:// origin` };
+    }
+  } else if (url.protocol !== "https:") {
+    return { error: `${name} must be https:// or a loopback http:// origin` };
+  }
+  return { url: url.toString().replace(/\/+$/, "") };
+}
+var MAX_REMOTE_SESSION_REPLY_TOKEN_LENGTH = REMOTE_SESSION_GRANT_LIMITS.maxCapabilityLength;
+function validateRemoteSessionGrant(value) {
+  if (value === undefined)
+    return { ok: true, grant: undefined };
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return { ok: false, error: "remoteSession must be { hubUrl: string, capability: string }" };
+  }
+  const proto = Object.getPrototypeOf(value);
+  if (proto !== Object.prototype && proto !== null) {
+    return { ok: false, error: "remoteSession must be a plain object" };
+  }
+  const keys = Object.keys(value);
+  const unknown = keys.filter((key) => !GRANT_KEYS.includes(key));
+  if (unknown.length || keys.length !== GRANT_KEYS.length) {
+    return {
+      ok: false,
+      error: unknown.length ? `remoteSession has unexpected key(s): ${unknown.join(", ")}` : "remoteSession must have both hubUrl and capability"
+    };
+  }
+  const record = value;
+  if (typeof record.hubUrl !== "string" || !record.hubUrl.trim()) {
+    return { ok: false, error: "remoteSession.hubUrl must be a non-empty string" };
+  }
+  const hubUrl = normalizeHubUrl(record.hubUrl.trim());
+  if ("error" in hubUrl)
+    return { ok: false, error: hubUrl.error };
+  if (typeof record.capability !== "string" || !record.capability.trim()) {
+    return { ok: false, error: "remoteSession.capability must be a non-empty string" };
+  }
+  const capability = record.capability.trim();
+  if (capability.length > REMOTE_SESSION_GRANT_LIMITS.maxCapabilityLength) {
+    return {
+      ok: false,
+      error: `remoteSession.capability is ${capability.length} characters; at most ${REMOTE_SESSION_GRANT_LIMITS.maxCapabilityLength} are allowed`
+    };
+  }
+  if (!capability.startsWith(REMOTE_SESSION_GRANT_LIMITS.capabilityPrefix)) {
+    return {
+      ok: false,
+      error: `remoteSession.capability must start with "${REMOTE_SESSION_GRANT_LIMITS.capabilityPrefix}"`
+    };
+  }
+  if (!/^rsc1\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(capability)) {
+    return { ok: false, error: "remoteSession.capability is malformed" };
+  }
+  return { ok: true, grant: { hubUrl: hubUrl.url, capability } };
+}
+function encodeRemoteSessionGrantArg(grant) {
+  const validated = validateRemoteSessionGrant(grant);
+  if (!validated.ok)
+    throw new Error(validated.error);
+  if (!validated.grant)
+    throw new Error("remoteSession is required");
+  return Buffer.from(JSON.stringify(validated.grant), "utf-8").toString("base64url");
+}
+
+// ../../packages/core/src/mcp/runtime-spec.ts
 var RUNTIME_MCP_KEY = "runtime";
 var RUNTIME_MCP_BASE_PATH = "/mcp/runtime";
 var TOKEN_TTL_MS = 4 * 60 * 60 * 1000;
 var CLAUDE_MCP_TOOL_TIMEOUT_MS = 600000;
+var MCP_URL_BUDGET_CHARS = 14 * 1024;
+
+class McpUrlBudgetExceededError extends Error {
+  surface;
+  urlLength;
+  constructor(surface, urlLength) {
+    super(`built-in MCP URL for "${surface}" is ${urlLength} characters; the transport allows at most ${MCP_URL_BUDGET_CHARS}`);
+    this.surface = surface;
+    this.urlLength = urlLength;
+    this.name = "McpUrlBudgetExceededError";
+  }
+}
 var runtimePort = NEGOTIUM_PORT;
 function encodeTokenPart(value) {
   return Buffer.from(JSON.stringify(value), "utf-8").toString("base64url");
@@ -291,18 +528,26 @@ function issueHostedMcpToken(surface, ctx) {
   return `${payloadPart}.${signTokenPayload(payloadPart)}`;
 }
 function buildRuntimeMcpSpec(agent, ctx) {
-  const token = issueRuntimeMcpToken(ctx);
   const base = `http://127.0.0.1:${runtimePort}${RUNTIME_MCP_BASE_PATH}`;
-  const query = `token=${encodeURIComponent(token)}`;
+  const query = `token=${encodeURIComponent(issueRuntimeMcpToken(ctx))}`;
+  const url = agent === "codex" ? `${base}/mcp?${query}` : `${base}/sse?${query}`;
+  assertMcpUrlWithinBudget(RUNTIME_MCP_KEY, url, ctx.topicId);
   if (agent === "codex")
-    return { url: `${base}/mcp?${query}` };
+    return { url };
   return {
     type: "sse",
-    url: `${base}/sse?${query}`,
+    url,
     timeout: CLAUDE_MCP_TOOL_TIMEOUT_MS,
     ...agent === "maestro" ? { lifecycle: "turn" } : {}
   };
 }
+function assertMcpUrlWithinBudget(surface, url, topicId) {
+  if (url.length <= MCP_URL_BUDGET_CHARS)
+    return;
+  const error = new McpUrlBudgetExceededError(surface, url.length);
+  logger.error({ topicId, surface, urlLength: url.length, budget: MCP_URL_BUDGET_CHARS }, "built-in MCP URL exceeds the transport budget; refusing to mint the token");
+  throw error;
+}
 function hostedMcpCacheIdentity(surface, ctx) {
   let semanticContext;
   switch (surface) {
@@ -333,6 +578,9 @@ function hostedMcpCacheIdentity(surface, ctx) {
     case "session-comm":
       semanticContext = {
         userId: ctx.userId,
+        actorUserId: ctx.actorUserId ?? null,
+        actorTopicScope: ctx.actorTopicScope ?? null,
+        remoteSession: ctx.remoteSession ?? null,
         topicTitle: ctx.topicTitle,
         topicId: ctx.topicId ?? null,
         subagentParentTopicId: ctx.subagentParentTopicId ?? null,
@@ -351,13 +599,15 @@ function buildHostedMcpSpec(agent, surface, ctx) {
   const token = issueHostedMcpToken(surface, ctx);
   const base = `http://127.0.0.1:${runtimePort}${RUNTIME_MCP_BASE_PATH}/${surface}`;
   const query = `token=${encodeURIComponent(token)}`;
+  const url = agent === "codex" ? `${base}/mcp?${query}` : `${base}/sse?${query}`;
+  assertMcpUrlWithinBudget(surface, url, ctx.topicId);
   if (agent === "codex")
-    return { url: `${base}/mcp?${query}` };
-  const queryBound = surface === "session-comm" && (ctx.silent === true || ctx.peerBridge !== undefined);
+    return { url };
+  const queryBound = surface === "session-comm" && (ctx.silent === true || ctx.peerBridge !== undefined || ctx.remoteSession !== undefined);
   const lifecycle = queryBound ? "turn" : surface === "session-comm" ? "session" : "process";
   return {
     type: "sse",
-    url: `${base}/sse?${query}`,
+    url,
     timeout: CLAUDE_MCP_TOOL_TIMEOUT_MS,
     ...agent === "maestro" ? {
       lifecycle,
@@ -1126,6 +1376,9 @@ function initializeApiTopicsSchema() {
   if (!tableColumns("api_topics").has("subagent_report_mode")) {
     db.exec("ALTER TABLE api_topics ADD COLUMN subagent_report_mode TEXT NOT NULL DEFAULT 'auto'");
   }
+  if (!tableColumns("api_topics").has("derived_by_user_id")) {
+    db.exec("ALTER TABLE api_topics ADD COLUMN derived_by_user_id TEXT");
+  }
   if (!tableColumns("api_topics").has("memory_topic_id")) {
     db.exec("ALTER TABLE api_topics ADD COLUMN memory_topic_id TEXT");
   }
@@ -1217,6 +1470,7 @@ function rowToDto(r, participants = getTopicParticipants(r.id), tellTargets) {
     memoryTopicId: r.memory_topic_id ?? undefined,
     memoryKey: r.memory_key ?? undefined,
     isFork: r.is_fork !== 0,
+    ...r.derived_by_user_id ? { derivedByUserId: r.derived_by_user_id } : {},
     ...r.is_subagent !== 0 ? { isSubagent: true } : {},
     ...r.is_subagent !== 0 ? {
       subagentTellTargetIds: tellTargets ? tellTargets.get(r.id) ?? [] : listSubagentTellTargetIds(r.id)
@@ -1300,6 +1554,9 @@ function buildBuiltinMcpServer(surface, ctx, stdio) {
   const agent = ctx.agent ?? FALLBACK_AGENT;
   return buildHostedMcpSpec(agent, surface, {
     userId: ctx.userId,
+    ...ctx.actorUserId ? { actorUserId: ctx.actorUserId } : {},
+    ...ctx.actorTopicScope ? { actorTopicScope: ctx.actorTopicScope } : {},
+    ...surface === "session-comm" && ctx.remoteSession ? { remoteSession: ctx.remoteSession } : {},
     topicTitle: ctx.session,
     ...ctx.topicId ? { topicId: ctx.topicId } : {},
     ...ctx.queryId ? { queryId: ctx.queryId } : {},
@@ -1395,6 +1652,7 @@ var MCP_CATALOG = {
     build({
       userId,
       actorUserId,
+      actorTopicScope,
       session,
       topicId,
       queryId,
@@ -1410,16 +1668,18 @@ var MCP_CATALOG = {
     }) {
       if (!topicId || !agent)
         return null;
+      const switchTargets = explicitAgentSwitchTargets(currentUserPrompt);
       return buildRuntimeMcpSpec(agent, {
         userId,
         ...actorUserId ? { actorUserId } : {},
+        ...actorTopicScope ? { actorTopicScope } : {},
         topicId,
         topicTitle: session,
         queryId,
         cwd: cwd ?? resolveTopicWorkspaceDir(topicId),
         agent,
         model,
-        currentUserPrompt,
+        ...switchTargets.length ? { explicitAgentSwitchTargets: switchTargets } : {},
         autoContinue,
         visualTools,
         fileDeliveryTools,
@@ -1489,6 +1749,9 @@ var MCP_CATALOG = {
     build(ctx) {
       const {
         userId,
+        actorUserId,
+        actorTopicScope,
+        remoteSession,
         session,
         topicId,
         subagentParentTopicId,
@@ -1502,6 +1765,9 @@ var MCP_CATALOG = {
       const cronSessionId = topicId ? getRegisteredCronSession(topicId, effectiveAgent)?.sessionId : undefined;
       const args = [
         `--user-id=${userId}`,
+        ...actorUserId ? [`--actor-user-id=${actorUserId}`] : [],
+        ...actorTopicScope ? [`--actor-topic-scope=${encodeActorTopicScopeArg(actorTopicScope)}`] : [],
+        ...remoteSession ? [`--remote-session-grant=${encodeRemoteSessionGrantArg(remoteSession)}`] : [],
         `--topic=${session}`,
         ...topicId ? [`--topic-id=${topicId}`] : [],
         ...subagentParentTopicId ? [`--subagent-parent-topic-id=${subagentParentTopicId}`] : [],
@@ -1679,6 +1945,9 @@ function getManagerMcpServers(opts) {
   const topicId = opts.topicId;
   return buildScope("manager", {
     userId: opts.userId,
+    actorUserId: opts.actorUserId,
+    actorTopicScope: opts.actorTopicScope,
+    remoteSession: opts.remoteSession,
     session: opts.session ?? "General",
     topicId,
     queryId: opts.queryId,
@@ -1698,6 +1967,8 @@ function getForumMcpServers(opts) {
   const {
     userId,
     actorUserId,
+    actorTopicScope,
+    remoteSession,
     vaultUserId,
     session,
     topicId,
@@ -1731,6 +2002,8 @@ function getForumMcpServers(opts) {
   const base = buildScope("forum", {
     userId,
     actorUserId,
+    actorTopicScope,
+    remoteSession,
     vaultUserId,
     session,
     topicId,
@@ -1811,6 +2084,9 @@ function getMcpServersForQuery(opts) {
   if (opts.sessionType === "manager") {
     return hideProviderIntrospectionForOtium(mergeHostMcpServers(getManagerMcpServers({
       userId: opts.userId || "local",
+      actorUserId: opts.actorUserId,
+      actorTopicScope: opts.actorTopicScope,
+      remoteSession: opts.remoteSession,
       session: opts.session,
       topicId: opts.topicId,
       queryId: opts.queryId,
@@ -1829,6 +2105,8 @@ function getMcpServersForQuery(opts) {
   return hideProviderIntrospectionForOtium(getForumMcpServers({
     userId: opts.userId || "local",
     actorUserId: opts.actorUserId,
+    actorTopicScope: opts.actorTopicScope,
+    remoteSession: opts.remoteSession,
     vaultUserId: opts.vaultUserId,
     session: opts.session || "default",
     topicId: opts.topicId,
@@ -2726,7 +3004,7 @@ import { tmpdir } from "os";
 import { dirname as dirname5, join as join3 } from "path";
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.19.2";
+var NEGOTIUM_VERSION = "0.20.0";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 var moduleRequire = createRequire(import.meta.url);
@@ -3455,7 +3733,7 @@ async function createCodexVaultHookBridge(userId) {
     });
     restrictIpcEndpoint(socketPath);
     if (IS_WINDOWS2) {
-      const { BINARIES_DIR } = await import("./chunk-kkftbxh2.js");
+      const { BINARIES_DIR } = await import("./chunk-7he9nzfa.js");
       const cached = await ensureCodexWindowsWrapperExe(join5(BINARIES_DIR, "codex-hook-wrapper"));
       await copyFile(cached, wrapperPath);
       await writeFile2(join5(root, "codex-with-hooks.cfg"), [process.execPath, codexCliScriptPath(), socketPath, token].join(`
@@ -4769,4 +5047,4 @@ export {
   buildClaudeDisallowedTools
 };
 
-//# debugId=AE528B367B6FEEB064756E2164756E21
+//# debugId=977679FF27CBA61D64756E2164756E21