newmark-agent 0.5.4 → 0.5.7

package/dist/providers/provider-events.js

@@ -46,8 +46,14 @@ function providerStreamTimeoutError(timeoutMs) {
  * Read one SSE chunk with both user cancellation and an inactivity deadline.
  * Cancelling the reader is important: rejecting the race alone leaves the
  * provider socket alive and lets later requests accumulate behind it.
+ *
+ * timeoutMs defaults to 0 (no stream idle deadline), matching the request-
+ * level DEFAULT_PROVIDER_REQUEST_TIMEOUT_MS = 0 and the Android client's
+ * readTimeout(0) / SSE_IDLE_TIMEOUT_MS = 0L. A caller that still wants an
+ * inactivity cap passes an explicit positive value (the recovery verify
+ * passes 50ms to prove reader cancellation).
  */
-async function readProviderStreamChunk(reader, signal, timeoutMs = 30_000) {
+async function readProviderStreamChunk(reader, signal, timeoutMs = 0) {
     if (signal.aborted)
         throw providerAbortError(signal);
     let timer;
@@ -56,9 +62,14 @@ async function readProviderStreamChunk(reader, signal, timeoutMs = 30_000) {
         onAbort = () => reject(providerAbortError(signal));
         signal.addEventListener('abort', onAbort, { once: true });
     });
-    const timeoutPromise = new Promise((_, reject) => {
-        timer = setTimeout(() => reject(providerStreamTimeoutError(timeoutMs)), timeoutMs);
-    });
+    // timeoutMs <= 0 means no inactivity deadline (unlimited). setTimeout with
+    // 0 would fire on the next tick, so we only arm the timer for positive
+    // values and race a never-settling promise otherwise.
+    const timeoutPromise = timeoutMs > 0
+        ? new Promise((_, reject) => {
+            timer = setTimeout(() => reject(providerStreamTimeoutError(timeoutMs)), timeoutMs);
+        })
+        : new Promise(() => undefined);
     try {
         return await Promise.race([reader.read(), abortPromise, timeoutPromise]);
     }

package/dist/server.js

@@ -1298,6 +1298,27 @@ async function handleApi(req, res, body) {
                 mobileJson(res, await hostedConversationUiAction({ workspaceId, conversationId }, action, String(params.value || ''), params));
                 return;
             }
+            case '/api/queue-action': {
+                // Desktop-renderer queue mutations. The mobile endpoint requires a
+                // pairing token; the renderer shares the same process and is trusted,
+                // so it gets a dedicated unauthenticated route that reuses the same
+                // GUI runtime-pool queueAction path (update/delete/reorder/guide).
+                const params = JSON.parse(body || '{}');
+                const workspaceId = String(params.workspaceId || '');
+                const conversationId = String(params.conversationId || '');
+                const action = String(params.action || '');
+                const allowed = new Set(['queue_enqueue', 'queue_update', 'queue_delete', 'queue_reorder', 'queue_toggle_pause', 'queue_guide']);
+                if (!workspaceId || !conversationId || !allowed.has(action)) {
+                    jsonResponse(res, { error: 'workspaceId, conversationId, and a valid queue action are required' }, 400);
+                    return;
+                }
+                if (!hostedConversationUiAction) {
+                    jsonResponse(res, { error: 'This action requires the GUI-hosted runtime pool' }, 409);
+                    return;
+                }
+                jsonResponse(res, await hostedConversationUiAction({ workspaceId, conversationId }, action, String(params.value || ''), params));
+                return;
+            }
             case '/api/mobile/conversation-rename': {
                 const params = JSON.parse(body || '{}');
                 const workspaceId = String(params.workspaceId || '');