sentinelayer-cli 0.46.4 → 0.48.0

package/src/session/attachment-summary.js

@@ -0,0 +1,77 @@
+// Display metadata only. The files command resolves pointers when asked to fetch.
+import { containsSecret } from "./redact.js";
+import { sessionMessageRoutingEvent } from "./message-edits.js";
+
+const MAX_VISIBLE_ATTACHMENTS = 5;
+
+function displayText(value, fallback = "") {
+  if (typeof value !== "string") return fallback;
+  const text = value.replace(/[\p{Cc}\p{Cf}]/gu, " ").replace(/\s+/g, " ").trim();
+  if (containsSecret(text) || /\w+:\/\/|\bbearer\s+\S+/i.test(text)) return fallback;
+  return Array.from(text.replace(/[\[\]`<>]/g, "")).slice(0, 255).join("") || fallback;
+}
+
+function commandId(value) {
+  return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,119}$/.test(value)
+    && !value.includes("..") && !containsSecret(value) ? value : "";
+}
+
+function pointerAttachmentId(pointer, sessionId) {
+  if (typeof pointer !== "string" || !sessionId) return "";
+  const match = /^\/api\/v1\/sessions\/([^/]+)\/attachments\/([^/?#]+)$/.exec(pointer);
+  return match && match[1] === sessionId ? commandId(match[2]) : "";
+}
+
+function fileSize(value) {
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) return "";
+  if (value < 1024) return `${value} B`;
+  const units = ["KB", "MB", "GB", "TB", "PB"];
+  let size = value / 1024;
+  let unit = 0;
+  while (size >= 1024 && unit < units.length - 1) {
+    size /= 1024;
+    unit += 1;
+  }
+  return `${size.toFixed(size < 10 ? 1 : 0)} ${units[unit]}`;
+}
+
+export function formatAttachmentSummary(event = {}) {
+  const session = event?.sessionId || event?.session_id;
+  event = sessionMessageRoutingEvent(event);
+  const payload = event?.payload || {};
+  const attachments = Array.isArray(payload.attachments) ? payload.attachments : [];
+  const sourceSessionId = commandId(session || event?.sessionId || event?.session_id);
+  const sessionId = sourceSessionId || "<sessionId>";
+  const summaries = attachments.slice(0, MAX_VISIBLE_ATTACHMENTS).map((attachment) => {
+    const item = attachment && typeof attachment === "object" ? attachment : {};
+    const details = [`${displayText(item.kind, "file")} ${displayText(item.filename, "unnamed")}`];
+    const size = fileSize(item.sizeBytes ?? item.size_bytes);
+    if (size) details.push(size);
+    if (typeof item.sha256 === "string" && /^[a-f\d]{64}$/i.test(item.sha256)) {
+      details.push(`sha256 ${item.sha256.slice(0, 8).toLowerCase()}…`);
+    }
+    const status = item.removed === true ? "removed" : displayText(item.status);
+    if (status) details.push(`status ${status}`);
+    const marker = `[attachment: ${details.join(", ")}]`;
+    if (item.removed === true) return marker;
+    const attachmentId = commandId(item.attachmentId || item.attachment_id || item.id
+      || pointerAttachmentId(item.pointer, sourceSessionId));
+    const fetch = attachmentId.length >= 8
+      ? `sl session files get ${sessionId} ${attachmentId}`
+      : `sl session files ${sessionId}`;
+    return `${marker} (fetch: ${fetch})`;
+  });
+  if (attachments.length > MAX_VISIBLE_ATTACHMENTS) {
+    summaries.push(`+${attachments.length - MAX_VISIBLE_ATTACHMENTS} more`);
+  }
+  return summaries.join(" ");
+}
+
+export function appendAttachmentSummary(text, event) {
+  return [text, formatAttachmentSummary(event)].filter(Boolean).join(" ");
+}
+
+export function withAttachmentSummary(event) {
+  const attachmentSummary = formatAttachmentSummary(event);
+  return attachmentSummary ? { ...event, attachmentSummary } : event;
+}

package/src/session/edit-summary.js

@@ -0,0 +1,19 @@
+export function sessionMessageEditText(event = {}) {
+  const payload = event.payload || {};
+  const text = payload.message ?? payload.reply?.note ?? payload.event?.payload?.message;
+  return typeof text === "string" ? text : "";
+}
+
+export function formatEditSummary(event = {}) {
+  if ((event.event || event.type) !== "session_message_edited") return "";
+  const payload = event.payload || {};
+  const sequence = Number(payload.targetSequenceId ?? payload.reply?.targetSequenceId ?? payload.event?.sequenceId);
+  const target = Number.isSafeInteger(sequence) && sequence > 0 ? sequence : "?";
+  const kind = payload.targetActionId || payload.reply ? "edited reply under" : "edited";
+  return [`[${kind} #${target}]`, sessionMessageEditText(event).trim()].filter(Boolean).join(" ");
+}
+
+export function withEditSummary(event) {
+  const editSummary = formatEditSummary(event);
+  return editSummary ? { ...event, editSummary } : event;
+}

package/src/session/invitations.js

@@ -4,7 +4,7 @@ import path from "node:path";
 import process from "node:process";
 
 import { checkedTransport, credentialFor, credentialHmac, isAuthenticated, isCredential } from "../auth/credential-destinations.js";
-import { requestJsonMutation } from "../auth/http.js";
+import { requestJson, requestJsonMutation } from "../auth/http.js";
 import { resolveActiveAuthSession } from "../auth/service.js";
 import { renderCoordinationBulletList } from "./coordination-guidance.js";
 import { resolveSessionPaths } from "./paths.js";
@@ -12,8 +12,20 @@ import { urlPathSegment } from "../net/url-path.js";
 
 export const SESSION_INVITATION_ACCEPT_ROUTE_ID =
   "POST /api/v1/sessions/{session_id}/invitations/accept";
+export const PENDING_INVITATION_ACCEPT_ROUTE_ID =
+  "POST /api/v1/sessions/invitations/{invitation_id}/accept";
 export const SESSION_MUTATION_ORIGIN = "https://sentinelayer.com";
 
+export function throwIfPendingSessionInvitation(payload, status) {
+  if ((status !== 403 && status !== 404) || payload?.error?.code !== "INVITATION_PENDING") return;
+  const error = new Error(
+    "An invitation to this room is waiting. Run `sl session invitations list --json`, then `sl session invitations accept <invitationId>` using its invitationId.",
+  );
+  error.code = "INVITATION_PENDING";
+  error.status = status;
+  throw error;
+}
+
 function normalizeString(value) {
   return String(value || "").trim();
 }
@@ -85,6 +97,58 @@ export function createSessionMutationIdempotencyKey(operationName = "invitation-
   return `sl-cli-${operation}-${randomUUID()}`;
 }
 
+export async function listPendingSessionInvitations({
+  targetPath = process.cwd(),
+  resolveAuthSession = resolveActiveAuthSession,
+  request = requestJson,
+} = {}) {
+  const auth = await resolveAuthSession({ cwd: targetPath, env: process.env, autoRotate: false });
+  if (!isAuthenticated(auth) || !auth?.apiUrl) {
+    throw new Error("Not authenticated. Run `sl auth login` first.");
+  }
+  const apiUrl = normalizeString(auth.apiUrl).replace(/\/+$/, "");
+  return checkedTransport(request)(`${apiUrl}/api/v1/sessions/invitations/pending`, {
+    method: "GET",
+    credential: await credentialFor(auth),
+  });
+}
+
+export async function acceptPendingSessionInvitation(invitationId, {
+  targetPath = process.cwd(),
+  idempotencyKey = "",
+  origin = SESSION_MUTATION_ORIGIN,
+  resolveAuthSession = resolveActiveAuthSession,
+  requestMutation = requestJsonMutation,
+} = {}) {
+  const normalizedInvitationId = typeof invitationId === "string" ? invitationId.trim() : "";
+  if (!normalizedInvitationId) throw new Error("invitation id is required.");
+  const invitationPath = `/api/v1/sessions/invitations/${urlPathSegment(normalizedInvitationId, { label: "invitationId" })}/accept`;
+  const auth = await resolveAuthSession({ cwd: targetPath, env: process.env, autoRotate: false });
+  if (!isAuthenticated(auth) || !auth?.apiUrl) {
+    throw new Error("Not authenticated. Run `sl auth login` first.");
+  }
+  const credential = await credentialFor(auth);
+  const resolvedIdempotencyKey = normalizeString(idempotencyKey)
+    || createSessionMutationIdempotencyKey("session-invite-accept");
+  const apiUrl = normalizeString(auth.apiUrl).replace(/\/+$/, "");
+  return checkedTransport(requestMutation)(
+    `${apiUrl}${invitationPath}`,
+    {
+      method: "POST",
+      operationName: "session.invitation_accept_by_id",
+      idempotencyKey: resolvedIdempotencyKey,
+      credential,
+      headers: createSessionMutationHeaders({
+        credential,
+        routeId: PENDING_INVITATION_ACCEPT_ROUTE_ID,
+        idempotencyKey: resolvedIdempotencyKey,
+        origin,
+      }),
+      body: {},
+    },
+  );
+}
+
 export async function acceptSessionInvitation(
   sessionId,
   {

package/src/session/mentions.js

@@ -21,6 +21,8 @@
  *    punctuation + cap length)
  */
 
+import { sessionMessageEditText } from "./edit-summary.js";
+
 // `@handle` is one or more identifier characters. We allow letters,
 // digits, `._-` so `@codex-1`, `@human-mrrcarter`, `@claude.verifier`
 // all work. Word boundary on the front avoids matching `you@example.com`.
@@ -97,20 +99,26 @@ export function enrichEventWithMentions(event) {
     : null;
   if (!payload) return event;
 
+  // An edit's immutable snapshot retains the original explicit audience.
+  const routingPayload = event.event === "session_message_edited"
+    ? { ...payload.event?.payload, ...payload }
+    : payload;
   // Already routed by an explicit caller — don't second-guess.
   const hasExplicitTo =
-    Array.isArray(payload.to) ||
-    Array.isArray(payload.recipients) ||
-    typeof payload.recipient === "string" ||
-    typeof payload.targetAgent === "string" ||
-    typeof payload.targetAgentId === "string";
+    Array.isArray(routingPayload.to) ||
+    Array.isArray(routingPayload.recipients) ||
+    typeof routingPayload.recipient === "string" ||
+    typeof routingPayload.targetAgent === "string" ||
+    typeof routingPayload.targetAgentId === "string";
 
   // We pull text from the standard fields the renderer already uses,
   // matching the priority in `Session.tsx:payloadText`.
-  const text = normalizeString(payload.message)
-    || normalizeString(payload.text)
-    || normalizeString(payload.detail)
-    || normalizeString(payload.title);
+  const text = event.event === "session_message_edited"
+    ? sessionMessageEditText(event)
+    : normalizeString(payload.message)
+      || normalizeString(payload.text)
+      || normalizeString(payload.detail)
+      || normalizeString(payload.title);
   if (!text) return event;
 
   const parsed = parseMentions(text);

package/src/session/message-edits.js

@@ -1,6 +1,7 @@
 import { createAgentEvent } from "../events/schema.js";
 import { enrichEventWithMentions } from "./mentions.js";
 import { sessionEventIdentityKeys } from "./event-identity.js";
+import { sessionMessageEditText } from "./edit-summary.js";
 
 export function messageRevision(value = {}) {
   const revision = Number(value.messageRevision ?? value.message_revision ?? 1);
@@ -79,11 +80,11 @@ export function sessionMessageRoutingEvent(event = {}) {
   if (!snapshot) return event;
   const parentPayload = event.payload?.event?.payload || {};
   const payload = { ...parentPayload, ...snapshot.payload };
-  if (event.payload?.reply) payload.message = String(event.payload.reply.note ?? "");
+  payload.message = sessionMessageEditText(event);
   for (const key of ["to", "recipient", "recipients", "targetAgent", "targetAgentId", "broadcast", "mentions"]) {
     if (event.payload[key] !== undefined) payload[key] = event.payload[key];
   }
-  const routed = enrichEventWithMentions({ ...snapshot, agent: event.agent || snapshot.agent, payload });
-  if (routed.payload?.mentions?.broadcast?.length) routed.payload.broadcast = true;
-  return routed;
+  // Use the same recipient precedence as a new message. Broadcast mentions
+  // are metadata; only an explicit routing flag can widen the audience.
+  return enrichEventWithMentions({ ...snapshot, agent: event.agent || snapshot.agent, payload });
 }

package/src/session/preview.js

@@ -7,9 +7,12 @@
  */
 
 import { readStream } from "./stream.js";
+import { appendAttachmentSummary, formatAttachmentSummary } from "./attachment-summary.js";
+import { formatEditSummary } from "./edit-summary.js";
 
 const PREVIEW_EVENTS = new Set([
   "session_message",
+  "session_message_edited",
   "session_say",
   "agent_response",
   "session_observation",
@@ -45,14 +48,16 @@ export function pickLatestPreview(events = []) {
     const kind = String(event.event || event.type || "").trim();
     if (!kind || !PREVIEW_EVENTS.has(kind)) continue;
     const payload = event.payload && typeof event.payload === "object" ? event.payload : {};
+    const editSummary = formatEditSummary(event);
     const text =
+      editSummary ||
       payload.summary ||
       payload.message ||
       payload.response ||
       payload.alert ||
       payload.reason ||
       payload.text;
-    if (!text) continue;
+    if (!text && !formatAttachmentSummary(event)) continue;
     return {
       ts: event.ts || event.timestamp || null,
       agentId:
@@ -61,7 +66,10 @@ export function pickLatestPreview(events = []) {
         payload.agentId ||
         null,
       kind,
-      message: trim(text),
+      message: appendAttachmentSummary(trim(text), event),
+      ...(editSummary ? { editSummary, event } : {}),
+      ...(Array.isArray(payload.attachments) && payload.attachments.length
+        ? { attachments: payload.attachments } : {}),
     };
   }
   return { ts: null, agentId: null, kind: null, message: null };

package/src/session/recap.js

@@ -7,6 +7,7 @@ import { createAgentEvent } from "../events/schema.js";
 import { dedupeSessionEvents } from "./event-identity.js";
 import { resolveSessionPaths } from "./paths.js";
 import { readStream } from "./stream.js";
+import { appendAttachmentSummary, formatAttachmentSummary } from "./attachment-summary.js";
 import { getSession } from "./store.js";
 import { aggregateSessionUsage } from "./usage.js";
 
@@ -381,11 +382,11 @@ function summarizeRecentActivity(events = [], { forAgentId = "", limit = 2 } = {
     const message = normalizeString(
       payload.message || payload.response || payload.recap || payload.alert || payload.reason
     );
-    if (!message) {
+    if (!message && !formatAttachmentSummary(event)) {
       continue;
     }
     snippets.push(
-      `${agentId}${formatSequenceMarker(event)}: ${shortActivitySnippetText(message)}`,
+      `${agentId}${formatSequenceMarker(event)}: ${appendAttachmentSummary(shortActivitySnippetText(message), event)}`,
     );
     if (snippets.length >= Math.max(1, limit)) {
       break;