shennian 0.3.1 → 0.3.2

package/dist/src/room/managed-room-session.d.ts

@@ -0,0 +1,143 @@
+import type { RoomActivationMode, RoomBindingStatus, RoomRuntimeAdapter } from '@shennian/wire';
+export type ManagedRoomSessionAgent = 'codex' | 'claude' | 'workbuddy';
+export type ManagedRoomSessionInput = {
+    inviteUrl: string;
+    agent: ManagedRoomSessionAgent;
+    workDir: string;
+    alias: string;
+    mode?: RoomActivationMode;
+    modelId?: string;
+};
+export type ManagedRoomSessionPhase = 'initialized' | 'session_created' | 'native_session_ready' | 'session_registered' | 'joined';
+export type ManagedRoomSessionFailureStage = 'validate_input' | 'create_session' | 'wait_for_native_session' | 'register_session' | 'join_room';
+type NormalizedInput = Required<Pick<ManagedRoomSessionInput, 'inviteUrl' | 'agent' | 'workDir' | 'alias' | 'mode'>> & {
+    modelId: string | null;
+};
+export type ManagedRoomSessionRegistration = {
+    registryKey: string;
+};
+export type ManagedRoomJoinResult = {
+    outcome: 'joined' | 'pending_approval';
+    room: {
+        id: string;
+        name: string;
+        webUrl: string;
+    };
+    binding: {
+        id: string;
+        agentIdentityId: string;
+        agentMembershipId: string | null;
+        status: RoomBindingStatus;
+        activationMode: RoomActivationMode;
+    };
+    idempotent: boolean;
+};
+export type ManagedRoomSessionOperation = {
+    schemaVersion: 1;
+    operationId: string;
+    inputFingerprint: string;
+    input: NormalizedInput;
+    runtimeAdapter: RoomRuntimeAdapter;
+    phase: ManagedRoomSessionPhase;
+    nianSessionId: string | null;
+    sourceSessionKey: string | null;
+    hostProcessIdentity: string | null;
+    registryKey: string | null;
+    result: ManagedRoomJoinResult | null;
+    createdAt: string;
+    updatedAt: string;
+};
+export interface ManagedRoomSessionOperationStore {
+    load(operationId: string): ManagedRoomSessionOperation | null;
+    save(operation: ManagedRoomSessionOperation): void;
+}
+export type ManagedRoomSessionDependencies = {
+    operations: ManagedRoomSessionOperationStore;
+    /**
+     * Must be idempotent for creationKey. A successful call followed by a daemon
+     * crash may be repeated before the operation record reaches disk.
+     */
+    createManagedSession(input: {
+        creationKey: string;
+        agent: ManagedRoomSessionAgent;
+        workDir: string;
+        modelId: string | null;
+        initialMessage: string;
+    }): Promise<{
+        nianSessionId: string;
+    }>;
+    /** Resolves only the native Session created for nianSessionId; never a recent Session. */
+    waitForNativeSession(input: {
+        nianSessionId: string;
+        runtimeAdapter: RoomRuntimeAdapter;
+        timeoutMs: number;
+    }): Promise<{
+        sourceSessionKey: string;
+        hostProcessIdentity: string;
+    }>;
+    /** Persists the trusted observation and exact managed Session Registry record. */
+    registerManagedSession(input: {
+        nianSessionId: string;
+        runtimeAdapter: RoomRuntimeAdapter;
+        sourceSessionKey: string;
+        hostProcessIdentity: string;
+        workDir: string;
+        capabilities: {
+            canIdentifySession: true;
+            canBindAutomatically: true;
+            canOpenEmbeddedRoomPage: false;
+            canResumeIdleSession: true;
+            canActivateWhileHostOpen: true;
+        };
+    }): Promise<ManagedRoomSessionRegistration>;
+    /**
+     * Uses daemon-owned machine credentials internally. Public callers never
+     * supply Room, Binding, Identity, native Session, or machine credential IDs.
+     */
+    joinRegisteredSession(input: {
+        bindingIntentId: string;
+        registryKey: string;
+        inviteUrl: string;
+        agentAlias: string;
+        activationMode: RoomActivationMode;
+        activationCapability: 'managed';
+    }): Promise<ManagedRoomJoinResult>;
+    allowedInviteOrigins?: string[];
+    nativeSessionTimeoutMs?: number;
+    now?: () => Date;
+};
+export declare class ManagedRoomSessionError extends Error {
+    readonly code: string;
+    readonly stage: ManagedRoomSessionFailureStage;
+    readonly operationId: string | null;
+    readonly phase: ManagedRoomSessionPhase;
+    readonly nianSessionId: string | null;
+    constructor(code: string, message: string, stage: ManagedRoomSessionFailureStage, operationId: string | null, phase: ManagedRoomSessionPhase, nianSessionId: string | null);
+}
+export declare class ManagedRoomSessionOrchestrator {
+    private readonly deps;
+    private readonly mutexTails;
+    constructor(deps: ManagedRoomSessionDependencies);
+    execute(operationId: string, rawInput: ManagedRoomSessionInput): Promise<{
+        operationId: string;
+        phase: 'joined';
+        nianSessionId: string;
+        result: ManagedRoomJoinResult;
+    }>;
+    private executeExclusive;
+    private save;
+}
+export declare class InMemoryManagedRoomSessionOperationStore implements ManagedRoomSessionOperationStore {
+    private readonly records;
+    load(operationId: string): ManagedRoomSessionOperation | null;
+    save(operation: ManagedRoomSessionOperation): void;
+}
+/** Private per-operation files allow daemon restart recovery without one operation overwriting another. */
+export declare class FileManagedRoomSessionOperationStore implements ManagedRoomSessionOperationStore {
+    readonly directory: string;
+    constructor(directory: string);
+    load(operationId: string): ManagedRoomSessionOperation | null;
+    save(operation: ManagedRoomSessionOperation): void;
+    private filePath;
+}
+export {};

package/dist/src/room/managed-room-session.js

@@ -0,0 +1,3 @@
+import S from"node:crypto";import a from"node:fs";import y from"node:path";class h extends Error{code;stage;operationId;phase;nianSessionId;constructor(i,o,t,r,n,s){super(o),this.code=i,this.stage=t,this.operationId=r,this.phase=n,this.nianSessionId=s,this.name="ManagedRoomSessionError"}}const j=/^[A-Za-z0-9_-]{8,96}$/,R=/^[A-Za-z0-9_.:@/-]{1,512}$/,w=/^[a-f0-9]{64}$/,k=/^[A-Za-z0-9_-]{43}$/,D=new Set(["inviteUrl","agent","workDir","alias","mode","modelId"]),K=new Set(["codex","claude","workbuddy"]),N=new Set(["auto_follow","mention_only","paused"]),P=["https://shennian.net"],$=3e4;class B{deps;mutexTails=new Map;constructor(i){this.deps=i}async execute(i,o){_(i);let t;const r=this.mutexTails.get(i)??Promise.resolve(),n=new Promise(l=>{t=l}),s=r.then(()=>n);this.mutexTails.set(i,s),await r;try{return await this.executeExclusive(i,o)}finally{t(),this.mutexTails.get(i)===s&&this.mutexTails.delete(i)}}async executeExclusive(i,o){let t;try{t=I(o,this.deps.allowedInviteOrigins??P)}catch(s){throw m(s,"validate_input",i,null)}const r=b(t);let n=this.deps.operations.load(i);if(n&&n.inputFingerprint!==r)throw new h("managed_room_operation_conflict","This operation ID was already used with different inputs.","validate_input",i,n.phase,n.nianSessionId);if(!n){const s=(this.deps.now?.()??new Date).toISOString();n={schemaVersion:1,operationId:i,inputFingerprint:r,input:t,runtimeAdapter:v(t.agent),phase:"initialized",nianSessionId:null,sourceSessionKey:null,hostProcessIdentity:null,registryKey:null,result:null,createdAt:s,updatedAt:s},this.save(n)}if(n.phase==="joined")return E(n);if(n.phase==="initialized")try{const s=await this.deps.createManagedSession({creationKey:`room-managed-session:${i}`,agent:t.agent,workDir:t.workDir,modelId:t.modelId,initialMessage:U()});c(s.nianSessionId,"nian_session_id"),n.nianSessionId=s.nianSessionId,n.phase="session_created",this.save(n)}catch(s){throw m(s,"create_session",i,n)}if(n.phase==="session_created")try{const s=await this.deps.waitForNativeSession({nianSessionId:n.nianSessionId,runtimeAdapter:n.runtimeAdapter,timeoutMs:this.deps.nativeSessionTimeoutMs??$});A(s.sourceSessionKey),c(s.hostProcessIdentity,"host_process_identity"),n.sourceSessionKey=s.sourceSessionKey,n.hostProcessIdentity=s.hostProcessIdentity,n.phase="native_session_ready",this.save(n)}catch(s){throw m(s,"wait_for_native_session",i,n)}if(n.phase==="native_session_ready")try{const s=await this.deps.registerManagedSession({nianSessionId:n.nianSessionId,runtimeAdapter:n.runtimeAdapter,sourceSessionKey:n.sourceSessionKey,hostProcessIdentity:n.hostProcessIdentity,workDir:t.workDir,capabilities:{canIdentifySession:!0,canBindAutomatically:!0,canOpenEmbeddedRoomPage:!1,canResumeIdleSession:!0,canActivateWhileHostOpen:!0}});if(!w.test(s.registryKey))throw u("registry_key");n.registryKey=s.registryKey,n.phase="session_registered",this.save(n)}catch(s){throw m(s,"register_session",i,n)}if(n.phase==="session_registered")try{n.result=await this.deps.joinRegisteredSession({bindingIntentId:`room-managed-session-join:${i}`,registryKey:n.registryKey,inviteUrl:t.inviteUrl,agentAlias:t.alias,activationMode:t.mode,activationCapability:"managed"}),O(n.result),n.phase="joined",this.save(n)}catch(s){throw m(s,"join_room",i,n)}return E(n)}save(i){i.updatedAt=(this.deps.now?.()??new Date).toISOString(),this.deps.operations.save(g(i))}}class G{records=new Map;load(i){const o=this.records.get(i);return o?g(o):null}save(i){this.records.set(i.operationId,g(i))}}class Z{directory;constructor(i){this.directory=i}load(i){_(i);const o=this.filePath(i);try{const t=a.lstatSync(o);if(!t.isFile()||t.isSymbolicLink())throw p();process.platform!=="win32"&&(t.mode&63)!==0&&a.chmodSync(o,384);const r=JSON.parse(a.readFileSync(o,"utf8"));return M(r,i),g(r)}catch(t){if(t.code==="ENOENT")return null;throw t}}save(i){_(i.operationId),M(i,i.operationId),a.mkdirSync(this.directory,{recursive:!0,mode:448});const o=a.lstatSync(this.directory);if(!o.isDirectory()||o.isSymbolicLink())throw p();process.platform!=="win32"&&a.chmodSync(this.directory,448);const t=this.filePath(i.operationId),r=`${t}.tmp-${process.pid}-${S.randomBytes(6).toString("hex")}`;try{if(a.writeFileSync(r,`${JSON.stringify(i,null,2)}
+`,{encoding:"utf8",mode:384,flag:"wx"}),process.platform!=="win32"&&a.chmodSync(r,384),process.platform==="win32"&&a.existsSync(t)){const n=a.lstatSync(t);if(!n.isFile()||n.isSymbolicLink())throw p();a.unlinkSync(t)}a.renameSync(r,t)}finally{try{a.unlinkSync(r)}catch{}}}filePath(i){return y.join(this.directory,`${i}.json`)}}function I(e,i){(!e||typeof e!="object"||Array.isArray(e))&&d("input");const o=e;Object.keys(o).find(T=>!D.has(T))&&d("unsupported_field");const r=o.agent;(typeof r!="string"||!K.has(r))&&d("agent");const n=f(o.workDir,"work_dir",4096);(!y.isAbsolute(n)||y.normalize(n)!==n)&&d("work_dir");const s=f(o.alias,"alias",80),l=o.mode??"auto_follow";(typeof l!="string"||!N.has(l))&&d("mode");const x=o.modelId==null?null:f(o.modelId,"model_id",191);return{inviteUrl:F(o.inviteUrl,i),agent:r,workDir:n,alias:s,mode:l,modelId:x}}function F(e,i){const o=f(e,"invite_url",2048);let t;try{t=new URL(o)}catch{d("invite_url")}(!new Set(i.map(l=>new URL(l).origin)).has(t.origin)||t.username||t.password||t.search||t.hash)&&d("invite_url");const n=t.pathname.split("/").filter(Boolean),s=n.at(-1);return(!s||!k.test(s)||n.at(-2)!=="join")&&d("invite_url"),t.toString()}function f(e,i,o){typeof e!="string"&&d(i);const t=e.trim();return(!t||t.length>o||/[\0\r\n]/.test(t))&&d(i),t}function _(e){if(!j.test(e))throw new h("invalid_managed_room_operation_id","Managed Room operation ID is invalid.","validate_input",null,"initialized",null)}function v(e){return e==="claude"?"claude_code":e}function b(e){return S.createHash("sha256").update(JSON.stringify(e),"utf8").digest("hex")}function c(e,i){if(!R.test(e))throw u(i)}function A(e){if(!e||e.length>1024||/[\0\r\n]/.test(e))throw u("source_session_key")}function O(e){if(c(e.room?.id,"room_id"),c(e.binding?.id,"binding_id"),c(e.binding?.agentIdentityId,"agent_identity_id"),e.binding.agentMembershipId!==null&&c(e.binding.agentMembershipId,"agent_membership_id"),e.outcome!=="joined"&&e.outcome!=="pending_approval")throw u("join_outcome");if(e.outcome==="joined"&&e.binding.status!=="active"&&e.binding.status!=="paused"||e.outcome==="pending_approval"&&e.binding.status!=="pending_approval"||e.binding.status==="pending_approval"&&e.binding.agentMembershipId!==null||(e.binding.status==="active"||e.binding.status==="paused")&&e.binding.agentMembershipId===null)throw u("join_binding_state")}function U(){return["\u8FD9\u662F\u4E00\u4E2A\u7531\u795E\u5FF5\u521B\u5EFA\u7684\u53D7\u7BA1 Agent \u5BF9\u8BDD\u3002","\u8BF7\u5148\u4FDD\u6301\u7A7A\u95F2\uFF1B\u795E\u5FF5\u6B63\u5728\u4E3A\u8BE5\u7CBE\u786E\u5BF9\u8BDD\u5EFA\u7ACB\u7FA4\u804A\u8FDE\u63A5\uFF0C\u5B8C\u6210\u540E\u4F1A\u53D1\u9001\u540E\u7EED\u6D88\u606F\u3002"].join(`
+`)}function E(e){if(!e.nianSessionId||!e.result||e.phase!=="joined")throw u("operation_state");return{operationId:e.operationId,phase:"joined",nianSessionId:e.nianSessionId,result:g(e.result)}}function m(e,i,o,t){if(e instanceof h)return e;const r=e&&typeof e=="object"&&"code"in e&&typeof e.code=="string"?e.code:`managed_room_${i}_failed`;return new h(r,`Managed Room Session failed during ${i}. The created conversation was preserved for retry.`,i,o,t?.phase??"initialized",t?.nianSessionId??null)}function d(e){throw new h(`invalid_managed_room_${e}`,`Managed Room Session ${e} is invalid.`,"validate_input",null,"initialized",null)}function u(e){return Object.assign(new Error(`Managed Room dependency returned an invalid ${e}.`),{code:`invalid_managed_room_${e}`})}function M(e,i){if(!e||e.schemaVersion!==1||e.operationId!==i||!/^[a-f0-9]{64}$/.test(e.inputFingerprint)||!["initialized","session_created","native_session_ready","session_registered","joined"].includes(e.phase)||!e.input||v(e.input.agent)!==e.runtimeAdapter)throw p();const o=I(e.input,[new URL(e.input.inviteUrl).origin]);if(b(o)!==e.inputFingerprint||(e.nianSessionId!==null&&c(e.nianSessionId,"nian_session_id"),e.sourceSessionKey!==null&&A(e.sourceSessionKey),e.hostProcessIdentity!==null&&c(e.hostProcessIdentity,"host_process_identity"),e.registryKey!==null&&!w.test(e.registryKey)))throw p();e.result!==null&&O(e.result)}function p(){return Object.assign(new Error("Managed Room Session operation store is unsafe or corrupt."),{code:"unsafe_managed_room_operation_store"})}function g(e){return JSON.parse(JSON.stringify(e))}export{Z as FileManagedRoomSessionOperationStore,G as InMemoryManagedRoomSessionOperationStore,h as ManagedRoomSessionError,B as ManagedRoomSessionOrchestrator};

package/dist/src/room/mirror-sync-service.d.ts

@@ -0,0 +1,33 @@
+import { HttpRoomActionClient } from './room-action-client.js';
+import { RoomJsonlMirror } from './jsonl-mirror.js';
+import { RoomSessionRegistry, type RoomSessionRegistration } from './session-registry.js';
+import type { RoomMessageView } from '@shennian/wire';
+type Mirror = Pick<RoomJsonlMirror, 'append' | 'markAccessRevoked' | 'readState' | 'recordSyncError'>;
+type Timer = ReturnType<typeof setTimeout>;
+export declare class RoomMirrorSyncService {
+    private readonly deps;
+    private timer;
+    private running;
+    private started;
+    constructor(deps: {
+        registry: RoomSessionRegistry;
+        actionClient: Pick<HttpRoomActionClient, 'status' | 'read'>;
+        getMachineCredentials: () => {
+            machineToken?: string;
+        };
+        mirrorFactory?: (roomId: string) => Mirror;
+        initialDelayMs?: number;
+        intervalMs?: number;
+        maxPagesPerRun?: number;
+        setTimeout?: (handler: () => void, delayMs: number) => Timer;
+        clearTimeout?: (timer: Timer) => void;
+        onMessages?: (roomId: string, messages: RoomMessageView[], registrations: RoomSessionRegistration[]) => Promise<void>;
+    });
+    start(): void;
+    stop(): void;
+    runOnce(): Promise<void>;
+    private syncRoom;
+    private pullPages;
+    private arm;
+}
+export {};

package/dist/src/room/mirror-sync-service.js

@@ -0,0 +1 @@
+import{RoomActionHttpError as m}from"./room-action-client.js";import{RoomJsonlMirror as h}from"./jsonl-mirror.js";class S{deps;timer=null;running=!1;started=!1;constructor(e){this.deps=e}start(){this.started||(this.started=!0,this.arm(this.deps.initialDelayMs??0))}stop(){this.started=!1,this.timer&&(this.deps.clearTimeout??clearTimeout)(this.timer),this.timer=null}async runOnce(){if(this.running)return;const e=this.deps.getMachineCredentials().machineToken?.trim();if(e){this.running=!0;try{const i=l(this.deps.registry.list());for(const[r,o]of i)await this.syncRoom(r,o,e)}finally{this.running=!1}}}async syncRoom(e,i,r){const o=(this.deps.mirrorFactory??(t=>new h(t)))(e),u=i.filter(t=>t.binding&&(t.binding.status==="active"||t.binding.status==="paused"));if(u.length===0){i.some(t=>t.binding?.status==="detached")&&!i.some(t=>t.binding?.status==="pending_approval")&&o.markAccessRevoked();return}let a=0,c=null;for(const t of u){const d=t.binding,g={machineToken:r,roomId:e,bindingId:d.bindingId};try{const s=await this.deps.actionClient.status(g);if(this.deps.registry.setBinding({registryKey:t.registryKey,bindingId:s.bindingId,roomId:s.roomId,agentIdentityId:s.agentIdentityId,agentMembershipId:s.agentMembershipId,status:s.status,activationMode:s.activationMode}),s.status==="detached"){a+=1;continue}if(s.status==="pending_approval")continue;c??=g}catch(s){if(p(s)){this.deps.registry.detachBinding(t.registryKey),a+=1;continue}o.recordSyncError(f(s));return}}if(c){const t=i.map(d=>this.deps.registry.getByRegistryKey(d.registryKey)??d);await this.pullPages(o,c,e,t);return}a===u.length&&o.markAccessRevoked()}async pullPages(e,i,r,o){const u=this.deps.maxPagesPerRun??100;let a=e.readState().lastSyncedSequence;for(let c=0;c<u;c+=1){const t=await this.deps.actionClient.read({...i,afterSequence:a,limit:100}),d=e.append({messages:t.messages,historyFromSequence:t.historyFromSequence,roomName:t.roomName});if(this.deps.onMessages&&await this.deps.onMessages(r,t.messages,o),!t.hasMore)return;if(d.lastSyncedSequence===a)throw new m("room_sync_no_progress","Room mirror synchronization made no progress.");a=d.lastSyncedSequence}}arm(e){if(!this.started||this.timer)return;const i=this.deps.setTimeout??setTimeout;this.timer=i(()=>{this.timer=null,this.runOnce().catch(()=>{}).finally(()=>{this.started&&this.arm(this.deps.intervalMs??5e3)})},e),this.timer.unref?.()}}function l(n){const e=new Map;for(const i of n){if(!i.binding||i.lifecycleState==="closed")continue;const r=e.get(i.binding.roomId)??[];r.push(i),e.set(i.binding.roomId,r)}return e}function p(n){return n instanceof m&&(n.code==="room_binding_unavailable"||n.code==="room_action_http_403")}function f(n){return n instanceof m?n.code:"room_sync_failed"}export{S as RoomMirrorSyncService};

package/dist/src/room/operator-ipc.d.ts

@@ -0,0 +1,11 @@
+import type { DaemonIpcHandler } from '../daemon-ipc/server.js';
+import type { RoomSessionRegistry } from './session-registry.js';
+import type { HttpRoomActionClient } from './room-action-client.js';
+export declare function createRoomOperatorIpcHandlers(input: {
+    registry: Pick<RoomSessionRegistry, 'list'>;
+    actionClient: Pick<HttpRoomActionClient, 'createOperatorRoom'>;
+    getMachineCredentials: () => {
+        machineId?: string;
+        machineToken?: string;
+    };
+}): Record<string, DaemonIpcHandler>;

package/dist/src/room/operator-ipc.js

@@ -0,0 +1 @@
+import{DaemonIpcError as r}from"../daemon-ipc/protocol.js";function w(e){return{"room-operator.inspect":n=>{const o=u(n),t=e.getMachineCredentials(),i=t.machineId?.trim(),l=!!(i&&t.machineToken?.trim()),c=i?e.registry.list().filter(s=>s.machineId===i):[],m=c.filter(s=>s.binding!==null),d=h(m);return a(o==="status"?{source:"local_registry",signedIn:l,registeredSessions:c.length,boundSessions:m.length,rooms:d.length}:{source:"local_registry",complete:!1,rooms:d})},"room-operator.create":async n=>{const o=f(n),t=e.getMachineCredentials();if(!t.machineId?.trim()||!t.machineToken?.trim())throw new r("cli_not_signed_in","Sign in to the Shennian CLI first.");try{return a(await e.actionClient.createOperatorRoom({machineToken:t.machineToken,name:o}))}catch(i){throw g(i)}}}}function a(e){return JSON.parse(JSON.stringify(e))}function u(e){if(!e||Array.isArray(e)||typeof e!="object")throw new r("invalid_params","Room operator parameters are required.");const n=e;if(Object.keys(n).length!==1||n.action!=="status"&&n.action!=="list")throw new r("invalid_params","Room operator action is invalid.");return n.action}function f(e){if(!e||Array.isArray(e)||typeof e!="object")throw new r("invalid_params","Room operator parameters are required.");const n=e;if(Object.keys(n).length!==1||typeof n.name!="string")throw new r("invalid_params","Room operator create parameters are invalid.");const o=n.name.trim();if(!o||o.length>80)throw new r("invalid_params","Room name must contain 1 to 80 characters.");return o}function g(e){return e&&typeof e=="object"&&"code"in e&&typeof e.code=="string"&&"message"in e&&typeof e.message=="string"?new r(e.code,e.message):new r("room_operator_failed","Shennian Room operator action failed.")}function h(e){const n=new Map;for(const o of e){const t=o.binding;if(!t)continue;const i=n.get(t.roomId)??{sessions:0,runtimes:new Set,statuses:new Set,modes:new Set};i.sessions+=1,i.runtimes.add(o.runtimeAdapter),i.statuses.add(t.status),i.modes.add(t.activationMode),n.set(t.roomId,i)}return[...n.entries()].sort(([o],[t])=>o.localeCompare(t)).map(([o,t])=>({roomId:o,sessions:t.sessions,runtimes:[...t.runtimes].sort(),bindingStatuses:[...t.statuses].sort(),activationModes:[...t.modes].sort()}))}export{w as createRoomOperatorIpcHandlers};

package/dist/src/room/pending-authorized-actions.d.ts

@@ -0,0 +1,69 @@
+export type AuthorizedActionStatus = 'waiting_user' | 'approved' | 'executing' | 'completed' | 'failed' | 'expired';
+export type JsonValue = null | boolean | number | string | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export type PendingAuthorizedAction = {
+    schemaVersion: 1;
+    id: string;
+    loginIntentId: string;
+    publicLoginUrl: string;
+    actionType: string;
+    canonicalActionPayload: JsonValue;
+    actionPayloadHash: string;
+    idempotencyKey: string;
+    deviceSecretHash: string;
+    status: AuthorizedActionStatus;
+    expiresAt: string;
+    createdAt: string;
+    updatedAt: string;
+    browserOpenedAt?: string;
+    approvedAt?: string;
+    executingAt?: string;
+    completedAt?: string;
+    failedAt?: string;
+    errorCode?: string;
+    result?: JsonValue;
+};
+type CreatePendingActionInput = {
+    id?: string;
+    loginIntentId: string;
+    publicLoginUrl: string;
+    actionType: string;
+    actionPayload: JsonValue;
+    idempotencyKey: string;
+    deviceSecret: string;
+    expiresAt: string;
+    now?: Date;
+};
+export declare class PendingAuthorizedActionError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function canonicalizeActionPayload(value: JsonValue): string;
+export declare function hashActionPayload(value: JsonValue): string;
+export declare function hashPendingDeviceSecret(secret: string): string;
+export declare class PendingAuthorizedActionStore {
+    readonly directory: string;
+    constructor(rootDir?: string);
+    create(input: CreatePendingActionInput): PendingAuthorizedAction;
+    get(id: string): PendingAuthorizedAction | null;
+    list(): PendingAuthorizedAction[];
+    findByIdempotencyKey(idempotencyKey: string): PendingAuthorizedAction | null;
+    listRecoverable(now?: Date): PendingAuthorizedAction[];
+    readDeviceSecret(id: string): string;
+    markApproved(id: string, now?: Date): PendingAuthorizedAction;
+    markBrowserOpened(id: string, now?: Date): PendingAuthorizedAction;
+    markExecuting(id: string, now?: Date): PendingAuthorizedAction;
+    markCompleted(id: string, result: JsonValue, now?: Date): PendingAuthorizedAction;
+    markFailed(id: string, errorCode: string, now?: Date): PendingAuthorizedAction;
+    private transition;
+    private update;
+    private ensureDirectory;
+    private recordPath;
+    private secretPath;
+    private writeRecord;
+    private writeSecret;
+    private atomicWrite;
+    private removeSecret;
+}
+export {};

package/dist/src/room/pending-authorized-actions.js

@@ -0,0 +1,3 @@
+import d from"node:crypto";import c from"node:fs";import m from"node:path";import{resolveShennianPath as b}from"../config/index.js";const u=/^[A-Za-z0-9_-]{8,128}$/,w=/^[a-z][a-z0-9_.-]{0,63}$/,S=/^[a-f0-9]{64}$/,f=new Set(["completed","failed","expired"]);class r extends Error{code;constructor(e,t){super(t),this.code=e,this.name="PendingAuthorizedActionError"}}function I(i){return l(i)}function _(i){return d.createHash("sha256").update(I(i),"utf8").digest("hex")}function v(i){return d.createHash("sha256").update(i,"utf8").digest("hex")}class k{directory;constructor(e=b("runtime","pending-authorized-actions")){this.directory=e}create(e){if(y(e.loginIntentId,"loginIntentId"),O(e.publicLoginUrl,e.loginIntentId),!w.test(e.actionType))throw new r("invalid_action_type","Invalid authorized action type.");if(!e.idempotencyKey.trim()||e.idempotencyKey.length>191)throw new r("invalid_idempotency_key","Invalid idempotency key.");if(e.deviceSecret.length<32||e.deviceSecret.length>256)throw new r("invalid_device_secret","Invalid device secret.");const t=new Date(e.expiresAt);if(!Number.isFinite(t.getTime()))throw new r("invalid_expiry","Invalid authorization expiry.");this.ensureDirectory();const n=x(e.actionPayload),o=_(n),a=this.list().find(p=>p.idempotencyKey===e.idempotencyKey);if(a){if(a.actionType!==e.actionType||a.actionPayloadHash!==o)throw new r("idempotency_payload_conflict","The idempotency key is already bound to a different action.");return a}const s=(e.now??new Date).toISOString(),h=e.id??d.randomUUID();y(h,"id");const g={schemaVersion:1,id:h,loginIntentId:e.loginIntentId,publicLoginUrl:e.publicLoginUrl,actionType:e.actionType,canonicalActionPayload:n,actionPayloadHash:o,idempotencyKey:e.idempotencyKey,deviceSecretHash:v(e.deviceSecret),status:"waiting_user",expiresAt:t.toISOString(),createdAt:s,updatedAt:s};this.writeSecret(h,e.deviceSecret);try{this.writeRecord(g)}catch(p){throw this.removeSecret(h),p}return g}get(e){y(e,"id");try{const t=this.recordPath(e),n=c.lstatSync(t);if(!n.isFile()||n.isSymbolicLink())throw new r("unsafe_pending_action","Pending action is not a regular file.");return A(JSON.parse(c.readFileSync(t,"utf8")))}catch(t){if(N(t))return null;throw t instanceof r?t:new r("corrupt_pending_action","Pending authorized action is corrupt.")}}list(){return this.ensureDirectory(),c.readdirSync(this.directory).filter(e=>e.endsWith(".json")&&!e.includes(".tmp-")).map(e=>this.get(e.slice(0,-5))).filter(e=>e!==null).sort((e,t)=>e.createdAt.localeCompare(t.createdAt))}findByIdempotencyKey(e){return this.list().find(t=>t.idempotencyKey===e)??null}listRecoverable(e=new Date){const t=[];for(const n of this.list())if(!f.has(n.status)){if(new Date(n.expiresAt)<=e){this.update(n.id,{status:"expired",errorCode:"authorization_expired"},e),this.removeSecret(n.id);continue}t.push(n)}return t}readDeviceSecret(e){const t=this.get(e);if(!t||f.has(t.status))throw new r("pending_action_unavailable","Pending action is unavailable.");let n;try{const o=this.secretPath(e),a=c.lstatSync(o);if(!a.isFile()||a.isSymbolicLink())throw new r("unsafe_device_secret","Device authorization secret is not a regular file.");n=c.readFileSync(o,"utf8").trim()}catch(o){throw o instanceof r?o:new r("device_secret_missing","Device authorization secret is missing.")}if(!$(n,t.deviceSecretHash))throw new r("device_secret_mismatch","Device authorization secret is invalid.");return n}markApproved(e,t=new Date){return this.transition(e,["waiting_user","approved"],"approved",{approvedAt:t.toISOString()},t)}markBrowserOpened(e,t=new Date){const n=this.get(e);if(!n)throw new r("pending_action_not_found","Pending action not found.");return n.browserOpenedAt||n.status!=="waiting_user"?n:this.update(e,{browserOpenedAt:t.toISOString()},t)}markExecuting(e,t=new Date){const n=this.transition(e,["approved"],"executing",{executingAt:t.toISOString()},t);return this.removeSecret(e),n}markCompleted(e,t,n=new Date){const o=this.transition(e,["executing","completed"],"completed",{completedAt:n.toISOString(),result:t,errorCode:void 0},n);return this.removeSecret(e),o}markFailed(e,t,n=new Date){const o=this.transition(e,["waiting_user","approved","executing","failed"],"failed",{failedAt:n.toISOString(),errorCode:t.slice(0,120)},n);return this.removeSecret(e),o}transition(e,t,n,o,a){const s=this.get(e);if(!s)throw new r("pending_action_not_found","Pending action not found.");if(!t.includes(s.status))throw new r("invalid_pending_action_transition",`Cannot transition ${s.status} to ${n}.`);return s.status===n&&f.has(n)?s:this.update(e,{...o,status:n},a)}update(e,t,n){const o=this.get(e);if(!o)throw new r("pending_action_not_found","Pending action not found.");const a=A({...o,...t,id:o.id,updatedAt:n.toISOString()});return this.writeRecord(a),a}ensureDirectory(){c.mkdirSync(this.directory,{recursive:!0,mode:448}),process.platform!=="win32"&&c.chmodSync(this.directory,448)}recordPath(e){return m.join(this.directory,`${e}.json`)}secretPath(e){return m.join(this.directory,`${e}.secret`)}writeRecord(e){this.atomicWrite(this.recordPath(e.id),`${JSON.stringify(e,null,2)}
+`)}writeSecret(e,t){this.atomicWrite(this.secretPath(e),`${t}
+`)}atomicWrite(e,t){this.ensureDirectory();const n=`${e}.tmp-${process.pid}-${d.randomBytes(6).toString("hex")}`;try{c.writeFileSync(n,t,{encoding:"utf8",mode:384,flag:"wx"}),process.platform!=="win32"&&c.chmodSync(n,384),c.renameSync(n,e),process.platform!=="win32"&&c.chmodSync(e,384)}finally{try{c.unlinkSync(n)}catch{}}}removeSecret(e){try{c.unlinkSync(this.secretPath(e))}catch{}}}function l(i){if(i===null||typeof i=="boolean"||typeof i=="string")return JSON.stringify(i);if(typeof i=="number"){if(!Number.isFinite(i))throw new r("invalid_action_payload","Numbers must be finite.");return JSON.stringify(i)}if(Array.isArray(i))return`[${i.map(l).join(",")}]`;if(typeof i!="object")throw new r("invalid_action_payload","Action payload must be JSON.");const e=Object.getPrototypeOf(i);if(e!==Object.prototype&&e!==null)throw new r("invalid_action_payload","Action payload must be plain JSON.");return`{${Object.keys(i).sort().map(t=>`${JSON.stringify(t)}:${l(i[t])}`).join(",")}}`}function x(i){return JSON.parse(l(i))}function y(i,e){if(!u.test(i))throw new r(`invalid_${e}`,`Invalid ${e}.`)}function A(i){if(!i||typeof i!="object")throw new r("corrupt_pending_action","Pending action must be an object.");const e=i;if(e.schemaVersion!==1||typeof e.id!="string"||!u.test(e.id)||typeof e.loginIntentId!="string"||!u.test(e.loginIntentId)||typeof e.publicLoginUrl!="string"||!P(e.publicLoginUrl,e.loginIntentId)||typeof e.actionType!="string"||!w.test(e.actionType)||typeof e.idempotencyKey!="string"||!e.idempotencyKey||typeof e.actionPayloadHash!="string"||!S.test(e.actionPayloadHash)||typeof e.deviceSecretHash!="string"||!S.test(e.deviceSecretHash)||!["waiting_user","approved","executing","completed","failed","expired"].includes(e.status??"")||typeof e.expiresAt!="string"||!Number.isFinite(new Date(e.expiresAt).getTime())||typeof e.createdAt!="string"||typeof e.updatedAt!="string")throw new r("corrupt_pending_action","Pending action has invalid fields.");if(e.browserOpenedAt!==void 0&&(typeof e.browserOpenedAt!="string"||!Number.isFinite(new Date(e.browserOpenedAt).getTime())))throw new r("corrupt_pending_action","Pending action has invalid browser state.");if(_(e.canonicalActionPayload)!==e.actionPayloadHash)throw new r("action_payload_tampered","Pending action payload hash mismatch.");return e}function O(i,e){if(!P(i,e))throw new r("invalid_public_login_url","Invalid Shennian authorization URL.")}function P(i,e){try{const t=new URL(i);return t.pathname!==`/authorize/${e}`||t.search||t.hash?!1:t.protocol==="https:"&&(t.hostname==="shennian.net"||t.hostname.endsWith(".shennian.net"))?!0:t.protocol==="http:"&&D(t.hostname)}catch{return!1}}function D(i){return i==="127.0.0.1"||i==="localhost"||i==="::1"||/^10\./.test(i)||/^192\.168\./.test(i)||/^172\.(1[6-9]|2\d|3[0-1])\./.test(i)}function $(i,e){const t=Buffer.from(v(i),"hex"),n=Buffer.from(e,"hex");return t.length===n.length&&d.timingSafeEqual(t,n)}function N(i){return typeof i=="object"&&i!==null&&"code"in i&&i.code==="ENOENT"}export{r as PendingAuthorizedActionError,k as PendingAuthorizedActionStore,I as canonicalizeActionPayload,_ as hashActionPayload,v as hashPendingDeviceSecret};

package/dist/src/room/room-action-client.d.ts

@@ -0,0 +1,208 @@
+import type { RoomActivationMode, RoomMessageView } from '@shennian/wire';
+type FetchLike = typeof fetch;
+type BindingTarget = {
+    machineToken: string;
+    roomId: string;
+    bindingId: string;
+};
+export type RemoteRoomAgentStatus = {
+    bindingId: string;
+    roomId: string;
+    agentIdentityId: string;
+    agentMembershipId: string | null;
+    status: 'pending_approval' | 'active' | 'paused' | 'detached';
+    activationMode: RoomActivationMode;
+    lastDeliveredSequence: string;
+    lastActivatedSequence: string;
+    room: {
+        name: string;
+        status: string;
+        lastSequence: string;
+    };
+};
+export type RemoteRoomJoinResult = {
+    outcome: 'joined' | 'pending_approval';
+    room: {
+        id: string;
+        name: string;
+        webUrl: string;
+    };
+    agentIdentity: {
+        id: string;
+        displayName: string;
+    };
+    binding: {
+        id: string;
+        roomId: string;
+        agentIdentityId: string;
+        agentMembershipId: string | null;
+        status: 'pending_approval' | 'active' | 'paused';
+        activationMode: RoomActivationMode;
+    };
+    joinRequestId?: string;
+    idempotent: boolean;
+};
+export type RemoteRoomAttachmentCapability = {
+    attachmentId: string;
+    roomId: string;
+    safeName: string;
+    mimeType: string;
+    byteSize: string;
+    sha256: string;
+    downloadUrl: string;
+    expiresAt: string;
+};
+export type RemoteRoomAttachmentUpload = {
+    attachment: {
+        id: string;
+        roomId: string;
+        name: string;
+        mimeType: string;
+        byteSize: string;
+        sha256: string;
+        status: 'pending' | 'uploaded';
+    };
+    upload: {
+        method: 'PUT';
+        url: string;
+        headers: Record<string, string>;
+        expiresAt: string;
+    };
+    idempotent: boolean;
+};
+export type RemoteRoomCreateResult = {
+    outcome: 'created';
+    room: {
+        id: string;
+        name: string;
+        visibility: 'private';
+        joinPolicy: 'approval';
+        webUrl: string;
+        inviteUrl: string;
+    };
+    agentIdentity: {
+        id: string;
+        displayName: string;
+    };
+    binding: {
+        id: string;
+        roomId: string;
+        agentIdentityId: string;
+        agentMembershipId: string;
+        status: 'active' | 'paused';
+        activationMode: RoomActivationMode;
+    };
+    idempotent: boolean;
+};
+export type RemoteOperatorRoomCreateResult = {
+    outcome: 'created';
+    room: {
+        id: string;
+        name: string;
+        visibility: 'private';
+        joinPolicy: 'approval';
+        webUrl: string;
+    };
+};
+export declare class RoomActionHttpError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare class HttpRoomActionClient {
+    private readonly fetchImpl;
+    private readonly baseUrl;
+    constructor(serverUrl: string, fetchImpl?: FetchLike);
+    createOperatorRoom(input: {
+        machineToken: string;
+        name: string;
+    }): Promise<RemoteOperatorRoomCreateResult>;
+    resolveNativeSession(input: {
+        machineToken: string;
+        runtimeAdapter: 'codex' | 'claude_code' | 'workbuddy';
+        sourceSessionKey: string;
+    }): Promise<{
+        nianSessionId: string;
+        created: boolean;
+    }>;
+    createRoom(input: {
+        machineToken: string;
+        bindingIntentId: string;
+        nianSessionId: string;
+        runtimeAdapter: 'codex' | 'claude_code' | 'workbuddy';
+        sessionRegistryKey: string;
+        name: string;
+        agentAlias: string;
+        activationCapability: 'managed' | 'idle_resume' | 'notify_only';
+        activationMode: RoomActivationMode;
+    }): Promise<RemoteRoomCreateResult>;
+    joinRoom(input: {
+        machineToken: string;
+        bindingIntentId: string;
+        nianSessionId: string;
+        runtimeAdapter: 'codex' | 'claude_code' | 'workbuddy';
+        sessionRegistryKey: string;
+        inviteToken: string;
+        message?: string;
+        agentAlias: string;
+        activationCapability: 'managed' | 'idle_resume' | 'notify_only';
+        activationMode: RoomActivationMode;
+    }): Promise<RemoteRoomJoinResult>;
+    status(target: BindingTarget): Promise<RemoteRoomAgentStatus>;
+    getAttachmentCapability(target: BindingTarget & {
+        attachmentId: string;
+    }): Promise<RemoteRoomAttachmentCapability>;
+    initializeAttachment(target: BindingTarget & {
+        clientUploadId: string;
+        name: string;
+        mediaKind: 'image' | 'audio' | 'file';
+        mimeType: string;
+        byteSize: number;
+        sha256: string;
+    }): Promise<RemoteRoomAttachmentUpload>;
+    completeAttachment(target: BindingTarget & {
+        attachmentId: string;
+    }): Promise<{
+        attachment: {
+            attachmentId: string;
+            mediaKind: 'image' | 'audio' | 'file';
+            name: string;
+            mimeType: string;
+            byteSize: string;
+            sha256: string;
+            status: 'ready';
+        };
+        idempotent: boolean;
+    }>;
+    read(target: BindingTarget & {
+        afterSequence: string;
+        limit: number;
+    }): Promise<{
+        messages: RoomMessageView[];
+        nextSequence: string;
+        hasMore: boolean;
+        historyFromSequence: string;
+        roomName: string;
+    }>;
+    send(target: BindingTarget & {
+        clientMessageId: string;
+        text: string;
+        mentionMembershipIds?: string[];
+        replyToMessageId?: string;
+        activationCauseMessageId?: string;
+        attachmentIds?: string[];
+    }): Promise<{
+        message: RoomMessageView;
+        idempotent: boolean;
+    }>;
+    mode(target: BindingTarget & {
+        activationMode: RoomActivationMode;
+    }): Promise<{
+        bindingId: string;
+        roomId: string;
+        status: 'active' | 'paused';
+        activationMode: RoomActivationMode;
+        idempotent: boolean;
+    }>;
+    private request;
+}
+export {};

package/dist/src/room/room-action-client.js

@@ -0,0 +1 @@
+class c extends Error{code;constructor(e,o){super(o),this.code=e,this.name="RoomActionHttpError"}}class j{fetchImpl;baseUrl;constructor(e,o=fetch){this.fetchImpl=o,this.baseUrl=e.replace(/\/+$/,"")}async createOperatorRoom(e){let o;try{o=await this.fetchImpl(`${this.baseUrl}/api/rooms/actions/operator/create`,{method:"POST",headers:{authorization:`Bearer ${e.machineToken}`,"content-type":"application/json"},body:JSON.stringify({name:e.name}),signal:AbortSignal.timeout(1e4)})}catch{throw new c("room_action_server_unavailable","Shennian Room service is unavailable.")}const t=await m(o);if(!o.ok)throw p(o.status,t);return I(t,e,this.baseUrl)}async resolveNativeSession(e){let o;try{o=await this.fetchImpl(`${this.baseUrl}/api/rooms/actions/resolve-session`,{method:"POST",headers:{authorization:`Bearer ${e.machineToken}`,"content-type":"application/json"},body:JSON.stringify({runtimeAdapter:e.runtimeAdapter,sourceSessionKey:e.sourceSessionKey}),signal:AbortSignal.timeout(1e4)})}catch{throw new c("room_action_server_unavailable","Shennian Room service is unavailable.")}const t=await m(o);if(!o.ok)throw p(o.status,t);(!t||typeof t!="object")&&a();const n=t;return(typeof n.nianSessionId!="string"||!/^[A-Za-z0-9_.:@/-]{1,512}$/.test(n.nianSessionId)||typeof n.created!="boolean")&&a(),n}async createRoom(e){let o;try{o=await this.fetchImpl(`${this.baseUrl}/api/rooms/actions/create`,{method:"POST",headers:{authorization:`Bearer ${e.machineToken}`,"content-type":"application/json"},body:JSON.stringify({bindingIntentId:e.bindingIntentId,nianSessionId:e.nianSessionId,runtimeAdapter:e.runtimeAdapter,sessionRegistryKey:e.sessionRegistryKey,name:e.name,agentAlias:e.agentAlias,activationCapability:e.activationCapability,activationMode:e.activationMode}),signal:AbortSignal.timeout(1e4)})}catch{throw new c("room_action_server_unavailable","Shennian Room service is unavailable.")}const t=await m(o);if(!o.ok)throw p(o.status,t);return g(t,e,this.baseUrl)}async joinRoom(e){let o;try{o=await this.fetchImpl(`${this.baseUrl}/api/rooms/actions/join`,{method:"POST",headers:{authorization:`Bearer ${e.machineToken}`,"content-type":"application/json"},body:JSON.stringify({bindingIntentId:e.bindingIntentId,nianSessionId:e.nianSessionId,runtimeAdapter:e.runtimeAdapter,sessionRegistryKey:e.sessionRegistryKey,inviteToken:e.inviteToken,message:e.message,agentAlias:e.agentAlias,activationCapability:e.activationCapability,activationMode:e.activationMode}),signal:AbortSignal.timeout(1e4)})}catch{throw new c("room_action_server_unavailable","Shennian Room service is unavailable.")}const t=await m(o);if(!o.ok)throw p(o.status,t);return v(t,e,this.baseUrl)}async status(e){const o=await this.request(e,"status");return b(o,e)}async getAttachmentCapability(e){const o=await this.request(e,`attachments/${encodeURIComponent(e.attachmentId)}/download-capability`);(!o||typeof o!="object")&&a();const t=o;return(t.attachmentId!==e.attachmentId||t.roomId!==e.roomId||typeof t.safeName!="string"||!S(t.safeName)||typeof t.mimeType!="string"||t.mimeType.length<1||t.mimeType.length>191||typeof t.byteSize!="string"||!d(t.byteSize)||typeof t.sha256!="string"||!/^[a-f0-9]{64}$/.test(t.sha256)||!h(t.downloadUrl)||typeof t.expiresAt!="string"||!Number.isFinite(Date.parse(t.expiresAt)))&&a(),t}async initializeAttachment(e){const o=await this.request(e,"attachments/init",{method:"POST",body:JSON.stringify({clientUploadId:e.clientUploadId,name:e.name,mediaKind:e.mediaKind,mimeType:e.mimeType,byteSize:e.byteSize,sha256:e.sha256})});(!o||typeof o!="object")&&a();const t=o,n=t.attachment,r=t.upload;return(!n||typeof n.id!="string"||n.roomId!==e.roomId||n.name.length<1||n.mimeType!==e.mimeType||n.byteSize!==String(e.byteSize)||n.sha256!==e.sha256||n.status!=="pending"&&n.status!=="uploaded"||!r||r.method!=="PUT"||!h(r.url)||!r.headers||r.headers["content-type"]!==e.mimeType||r.headers["x-oss-meta-sha256"]!==e.sha256||typeof r.expiresAt!="string"||Date.parse(r.expiresAt)<=Date.now()||typeof t.idempotent!="boolean")&&a(),t}async completeAttachment(e){const o=await this.request(e,`attachments/${encodeURIComponent(e.attachmentId)}/complete`,{method:"POST"});(!o||typeof o!="object")&&a();const t=o;typeof t.idempotent!="boolean"&&a();const n=t.attachment;return(!n||n.attachmentId!==e.attachmentId||n.mediaKind!=="image"&&n.mediaKind!=="audio"&&n.mediaKind!=="file"||typeof n.name!="string"||typeof n.mimeType!="string"||typeof n.byteSize!="string"||!d(n.byteSize)||typeof n.sha256!="string"||!/^[a-f0-9]{64}$/.test(n.sha256)||n.status!=="ready")&&a(),{attachment:n,idempotent:t.idempotent}}async read(e){const o=new URLSearchParams({after:e.afterSequence,limit:String(e.limit)}),t=await this.request(e,`messages?${o}`);(!t||typeof t!="object")&&a();const n=t;return(!Array.isArray(n.messages)||typeof n.nextSequence!="string"||!d(n.nextSequence)||typeof n.hasMore!="boolean"||typeof n.historyFromSequence!="string"||!d(n.historyFromSequence)||typeof n.roomName!="string")&&a(),{messages:n.messages.map(s=>l(s,e.roomId)),nextSequence:n.nextSequence,hasMore:n.hasMore,historyFromSequence:n.historyFromSequence,roomName:n.roomName}}async send(e){const o=await this.request(e,"messages",{method:"POST",body:JSON.stringify({clientMessageId:e.clientMessageId,text:e.text,mentionMembershipIds:e.mentionMembershipIds,replyToMessageId:e.replyToMessageId,activationCauseMessageId:e.activationCauseMessageId,attachmentIds:e.attachmentIds})});(!o||typeof o!="object")&&a();const t=o;return typeof t.idempotent!="boolean"&&a(),{message:l(t.message,e.roomId),idempotent:t.idempotent}}async mode(e){const o=await this.request(e,"mode",{method:"PATCH",body:JSON.stringify({activationMode:e.activationMode})});(!o||typeof o!="object")&&a();const t=o;return(t.bindingId!==e.bindingId||t.roomId!==e.roomId||t.status!=="active"&&t.status!=="paused"||!f(t.activationMode)||t.activationMode!==e.activationMode||typeof t.idempotent!="boolean")&&a(),t}async request(e,o,t={}){let n;try{n=await this.fetchImpl(`${this.baseUrl}/api/rooms/${encodeURIComponent(e.roomId)}/bindings/${encodeURIComponent(e.bindingId)}/${o}`,{...t,headers:{authorization:`Bearer ${e.machineToken}`,...t.body?{"content-type":"application/json"}:{}},signal:AbortSignal.timeout(1e4)})}catch{throw new c("room_action_server_unavailable","Shennian Room service is unavailable.")}if(!n.ok){let r=`room_action_http_${n.status}`;try{const s=await n.json();typeof s.error=="string"&&/^[a-z0-9_-]{1,80}$/.test(s.error)&&(r=s.error)}catch{}throw new c(r,"Shennian Room action failed.")}try{return await n.json()}catch{a()}}}function b(i,e){(!i||typeof i!="object")&&a();const o=i,t=o.room;(o.bindingId!==e.bindingId||o.roomId!==e.roomId||typeof o.agentIdentityId!="string"||o.agentMembershipId!==null&&typeof o.agentMembershipId!="string"||o.status!=="pending_approval"&&o.status!=="active"&&o.status!=="paused"&&o.status!=="detached"||!f(o.activationMode)||typeof o.lastDeliveredSequence!="string"||!d(o.lastDeliveredSequence)||typeof o.lastActivatedSequence!="string"||!d(o.lastActivatedSequence)||!t||typeof t!="object")&&a(),(o.status==="pending_approval"&&o.agentMembershipId!==null||(o.status==="active"||o.status==="paused")&&typeof o.agentMembershipId!="string")&&a();const n=t;return(typeof n.name!="string"||typeof n.status!="string"||typeof n.lastSequence!="string"||!d(n.lastSequence))&&a(),o}function l(i,e){(!i||typeof i!="object")&&a();const o=i;if((typeof o.id!="string"||o.roomId!==e||typeof o.sequence!="string"||!d(o.sequence)||!o.author||typeof o.author.membershipId!="string"||!Array.isArray(o.attachments)||typeof o.createdAt!="string")&&a(),o.activationCause!=null){const t=o.activationCause;(typeof t.causeMessageId!="string"||typeof t.rootCauseMessageId!="string"||!Number.isInteger(t.hopCount)||t.hopCount<1||t.hopCount>32)&&a()}return o}function g(i,e,o){(!i||typeof i!="object")&&a();const t=i,n=t.room,r=t.agentIdentity,s=t.binding;return(t.outcome!=="created"||!n||typeof n.id!="string"||n.name!==e.name||n.visibility!=="private"||n.joinPolicy!=="approval"||!y(n.webUrl,o,`/spaces/${n.id}`)||!w(n.inviteUrl,o)||!r||typeof r.id!="string"||r.displayName!==e.agentAlias||!s||typeof s.id!="string"||s.roomId!==n.id||s.agentIdentityId!==r.id||typeof s.agentMembershipId!="string"||s.status!=="active"&&s.status!=="paused"||s.activationMode!==e.activationMode||typeof t.idempotent!="boolean")&&a(),t}function I(i,e,o){(!i||typeof i!="object")&&a();const t=i,n=t.room;return(t.outcome!=="created"||!n||typeof n.id!="string"||n.name!==e.name||n.visibility!=="private"||n.joinPolicy!=="approval"||!y(n.webUrl,o,`/spaces/${n.id}`))&&a(),t}function v(i,e,o){(!i||typeof i!="object")&&a();const t=i,n=t.room,r=t.agentIdentity,s=t.binding;return(t.outcome!=="joined"&&t.outcome!=="pending_approval"||!n||typeof n.id!="string"||typeof n.name!="string"||!y(n.webUrl,o,`/spaces/${n.id}`)||!r||typeof r.id!="string"||r.displayName!==e.agentAlias||!s||typeof s.id!="string"||s.roomId!==n.id||s.agentIdentityId!==r.id||s.activationMode!==e.activationMode||typeof t.idempotent!="boolean")&&a(),(t.outcome==="pending_approval"&&(s.status!=="pending_approval"||s.agentMembershipId!==null||typeof t.joinRequestId!="string")||t.outcome==="joined"&&(s.status!=="active"&&s.status!=="paused"||typeof s.agentMembershipId!="string"||t.joinRequestId!==void 0))&&a(),t}function d(i){return/^(0|[1-9]\d{0,19})$/.test(i)}function S(i){return i.length<=255&&i===i.trim()&&i!=="."&&i!==".."&&!/[\\/\0-\x1f\x7f]/.test(i)}function h(i){if(typeof i!="string")return!1;try{const e=new URL(i);return e.protocol==="https:"&&!e.username&&!e.password&&!e.hash}catch{return!1}}function f(i){return i==="auto_follow"||i==="mention_only"||i==="paused"}function a(){throw new c("invalid_room_action_response","Invalid Room action response.")}async function m(i){try{return await i.json()}catch{a()}}function p(i,e){let o=`room_action_http_${i}`;if(e&&typeof e=="object"){const t=e.error;typeof t=="string"&&/^[a-z0-9_-]{1,80}$/.test(t)&&(o=t)}return new c(o,"Shennian Room action failed.")}function y(i,e,o){return u(i,e,t=>t.pathname===o)}function w(i,e){return u(i,e,o=>/^\/spaces\/join\/[A-Za-z0-9_-]{43}$/.test(o.pathname))}function u(i,e,o){if(typeof i!="string")return!1;try{const t=new URL(i),n=new URL(e);return t.hostname===n.hostname&&(t.protocol==="https:"||n.protocol==="http:"&&t.protocol==="http:")&&!t.username&&!t.password&&!t.search&&!t.hash&&o(t)}catch{return!1}}export{j as HttpRoomActionClient,c as RoomActionHttpError};

package/dist/src/room/room-action-ipc.d.ts

@@ -0,0 +1,33 @@
+import type { DaemonIpcHandler } from '../daemon-ipc/server.js';
+import { RoomInvocationTokenAuthority } from './invocation-token.js';
+import type { RoomAttachmentCache } from './attachment-cache.js';
+import { HttpRoomActionClient } from './room-action-client.js';
+import { RoomSessionRegistry } from './session-registry.js';
+import type { RoomAttachmentUploader } from './attachment-upload.js';
+import type { RoomHostSessionObservationStore } from './host-session-observations.js';
+type RoomMirrorWriter = {
+    append(input: {
+        messages: Awaited<ReturnType<HttpRoomActionClient['read']>>['messages'];
+        historyFromSequence: string;
+        roomName?: string | null;
+    }): unknown;
+    markAccessRevoked(): void;
+    search(input: {
+        query: string;
+        limit?: number;
+    }): unknown;
+};
+export declare function createRoomActionIpcHandlers(input: {
+    authority: RoomInvocationTokenAuthority;
+    registry: RoomSessionRegistry;
+    actionClient: Pick<HttpRoomActionClient, 'createRoom' | 'joinRoom' | 'read' | 'send' | 'mode' | 'status'>;
+    getMachineCredentials: () => {
+        machineId?: string;
+        machineToken?: string;
+    };
+    mirrorFactory?: (roomId: string) => RoomMirrorWriter;
+    attachmentCache?: Pick<RoomAttachmentCache, 'materialize'>;
+    attachmentUploader?: Pick<RoomAttachmentUploader, 'upload'>;
+    observations?: RoomHostSessionObservationStore;
+}): Record<string, DaemonIpcHandler>;
+export {};

package/dist/src/room/room-action-ipc.js

@@ -0,0 +1 @@
+import{DaemonIpcError as a}from"../daemon-ipc/protocol.js";import{normalizeRoomActionParameters as R}from"./room-action-schema.js";function B(e){return{"room-action.execute":async o=>{const h=T(o),l=e.getMachineCredentials();if(!l.machineId?.trim()||!l.machineToken?.trim())throw new a("machine_not_authorized","This machine is not authorized yet.");const s=p(h.registryKey,"registryKey",64),A=p(h.invocationToken,"invocationToken",128),d=S(h.action),u=R(d,h.actionParameters);return e.registry.runExclusive(s,async()=>{let y;try{y=e.authority.consume({invocationToken:A,machineId:l.machineId,machineCredential:l.machineToken,registryKey:s,action:d,targetTool:"shennian_room",actionParameters:u})}catch(t){throw C(t)}const r=e.registry.getByRegistryKey(s),i=r?.binding;if(!r)throw new a("room_session_unavailable","The exact Agent session is unavailable.");if(d==="room.create"){if(i&&i.status!=="detached")throw new a("session_already_bound","This Agent session is already bound to a Room.");if(!y.bindingIntentId)throw new a("binding_intent_missing","Room create intent is missing.");const t=u,n=await e.actionClient.createRoom({machineToken:l.machineToken,bindingIntentId:y.bindingIntentId,nianSessionId:r.nianSessionId,runtimeAdapter:r.runtimeAdapter,sessionRegistryKey:s,name:t.name,agentAlias:t.agentAlias,activationCapability:_(r.capabilities),activationMode:t.activationMode});return e.registry.setBinding({registryKey:s,bindingId:n.binding.id,roomId:n.room.id,agentIdentityId:n.binding.agentIdentityId,agentMembershipId:n.binding.agentMembershipId,status:n.binding.status,activationMode:n.binding.activationMode}),g(n)}if(d==="room.join"){if(i&&i.status!=="detached")throw new a("session_already_bound","This Agent session is already bound to a Room.");if(!y.bindingIntentId)throw new a("binding_intent_missing","Room join intent is missing.");const t=u,n=await e.actionClient.joinRoom({machineToken:l.machineToken,bindingIntentId:y.bindingIntentId,nianSessionId:r.nianSessionId,runtimeAdapter:r.runtimeAdapter,sessionRegistryKey:s,inviteToken:k(t.inviteUrl),message:t.message,agentAlias:t.agentAlias,activationCapability:_(r.capabilities),activationMode:t.activationMode});return e.registry.setBinding({registryKey:s,bindingId:n.binding.id,roomId:n.room.id,agentIdentityId:n.binding.agentIdentityId,agentMembershipId:n.binding.agentMembershipId,status:n.binding.status,activationMode:n.binding.activationMode}),g(n)}if(!i)throw new a("room_not_bound","This Agent session is not bound to a Room.");if(d!=="room.status"&&(i.status==="detached"||i.status==="pending_approval"))throw new a(i.status==="pending_approval"?"room_binding_pending_approval":"room_binding_detached",i.status==="pending_approval"?"This Agent is waiting for Room approval.":"This Agent Room binding must be repaired before use.");const I={machineToken:l.machineToken,roomId:i.roomId,bindingId:i.bindingId};if(d==="room.status"){const t=await e.actionClient.status(I);e.registry.setBinding({registryKey:s,bindingId:t.bindingId,roomId:t.roomId,agentIdentityId:t.agentIdentityId,agentMembershipId:t.agentMembershipId,status:t.status,activationMode:t.activationMode}),t.status==="detached"&&e.mirrorFactory?.(t.roomId).markAccessRevoked();const n=e.registry.getByRegistryKey(s),c=n?.binding,m=e.observations?.getBySource(r);return g({...t,hostSession:{state:n?.lifecycleState??"closed",lastReportedEvent:m?.lastEventName??null,lastActiveAt:m?.lastActiveAt??null,lastIdleAt:m?.lastIdleAt??null,closedAt:m?.closedAt??null,closedConfirmed:m?.lifecycleState==="closed",activationCapability:_(r.capabilities)},localActivation:{queued:c?.activationQueue.length??0,inFlight:!!c?.activeActivation,pausedUntil:c?.loopBreaker.pausedUntil??null}})}if(d==="room.read"){const t=u;if(t.query){const b=e.mirrorFactory?.(i.roomId);if(!b)throw new a("room_mirror_unavailable","Room mirror is unavailable.");return g({source:"local_mirror",matches:b.search({query:t.query,limit:t.limit})})}const n=await e.actionClient.read({...I,afterSequence:t.afterSequence,limit:t.limit});e.mirrorFactory?.(i.roomId).append({messages:n.messages,historyFromSequence:n.historyFromSequence,roomName:n.roomName});const c=BigInt(n.nextSequence)>BigInt(i.lastDeliveredSequence)?n.nextSequence:i.lastDeliveredSequence;e.registry.advanceCursor({registryKey:s,cursor:"delivered",sequence:c});const m=[];for(const b of t.attachmentIds??[]){const v=n.messages.flatMap(w=>w.attachments).find(w=>w.attachmentId===b);if(!v||v.status!=="ready")throw new a("attachment_not_in_read_result","Requested attachment is not available in this read result.");if(!e.attachmentCache)throw new a("attachment_cache_unavailable","Room attachment cache is unavailable.");m.push({attachmentId:b,...await e.attachmentCache.materialize({...I,attachmentId:b,expected:{downloadRef:v.downloadRef,byteSize:v.byteSize,sha256:v.sha256}})})}return g({...n,materializedAttachments:m})}if(d==="room.send"){const t=u;let n;if(t.files?.length){const c=e.observations?.getBySource(r);if(!c?.workspacePath||!e.attachmentUploader)throw new a("room_attachment_upload_unavailable","The exact Agent workspace is unavailable for attachment upload.");n=await e.attachmentUploader.upload({...I,workspacePath:c.workspacePath,clientMessageId:t.clientMessageId,files:t.files})}return g(await e.actionClient.send({...I,clientMessageId:t.clientMessageId,text:t.text,mentionMembershipIds:t.mentionMembershipIds,replyToMessageId:t.replyToMessageId,attachmentIds:n,activationCauseMessageId:i.activeActivation?.causeMessageId}))}const M=u,f=await e.actionClient.mode({...I,...M});return e.registry.setBinding({registryKey:s,bindingId:i.bindingId,roomId:i.roomId,agentIdentityId:i.agentIdentityId,agentMembershipId:i.agentMembershipId,status:f.status,activationMode:f.activationMode}),g(f)})}}}function T(e){if(!e||Array.isArray(e)||typeof e!="object")throw new a("invalid_params","Room action parameters are required.");return e}function p(e,o,h){if(typeof e!="string"||!e.trim()||e.length>h)throw new a("invalid_params",`${o} is invalid.`);return e.trim()}function S(e){const o=p(e,"action",64);if(o!=="room.read"&&o!=="room.create"&&o!=="room.join"&&o!=="room.send"&&o!=="room.mode"&&o!=="room.status")throw new a("room_action_not_implemented","Room action is not available yet.");return o}function k(e){const o=new URL(e).pathname.split("/").at(-1);if(!o||!/^[A-Za-z0-9_-]{43}$/.test(o))throw new a("invalid_params","inviteUrl is invalid.");return o}function _(e){return e.canResumeIdleSession||e.canActivateWhileHostOpen?"idle_resume":"notify_only"}function C(e){return e&&typeof e=="object"&&"code"in e&&typeof e.code=="string"&&"message"in e&&typeof e.message=="string"?new a(e.code,e.message):new a("room_invocation_failed","Room invocation failed.")}function g(e){return JSON.parse(JSON.stringify(e))}export{B as createRoomActionIpcHandlers};

package/dist/src/room/room-action-schema.d.ts

@@ -0,0 +1,3 @@
+import type { RoomInvocationAction } from './invocation-token.js';
+import type { JsonValue } from './pending-authorized-actions.js';
+export declare function normalizeRoomActionParameters(action: Exclude<RoomInvocationAction, 'room.bind'>, value: JsonValue | undefined): JsonValue;

package/dist/src/room/room-action-schema.js

@@ -0,0 +1 @@
+import{DaemonIpcError as p}from"../daemon-ipc/protocol.js";function I(t,n){const e=h(n);switch(t){case"room.status":return m(e,[]),{};case"room.read":{m(e,["afterSequence","limit","attachmentIds","query"]);const s=d(e.query,"query",200),r=e.afterSequence??"0",a=e.limit??50;(typeof r!="string"||!/^(0|[1-9]\d{0,19})$/.test(r))&&i("afterSequence"),(typeof a!="number"||!Number.isInteger(a)||a<1||a>100)&&i("limit");const c=u(e.attachmentIds,"attachmentIds",10);return s&&(e.afterSequence!=null||c)&&i("parameters"),s?{query:s,limit:a}:{afterSequence:r,limit:a,...c?{attachmentIds:c}:{}}}case"room.send":{m(e,["clientMessageId","text","files","mentionMembershipIds","replyToMessageId"]);const s=o(e.clientMessageId,"clientMessageId",191),r=d(e.text,"text",2e4),a=g(e.files,"files",10);!r&&!a&&i("parameters");const c=u(e.mentionMembershipIds,"mentionMembershipIds",20),l=d(e.replyToMessageId,"replyToMessageId",191);return{clientMessageId:s,text:r??"",...a?{files:a}:{},...c?{mentionMembershipIds:c}:{},...l?{replyToMessageId:l}:{}}}case"room.mode":return m(e,["activationMode"]),{activationMode:f(e.activationMode)};case"room.create":return m(e,["name","agentAlias","activationMode"]),{name:o(e.name,"name",80),agentAlias:o(e.agentAlias,"agentAlias",80),activationMode:f(e.activationMode??"auto_follow")};case"room.join":return m(e,["inviteUrl","agentAlias","message","activationMode"]),{inviteUrl:y(e.inviteUrl),agentAlias:o(e.agentAlias,"agentAlias",80),activationMode:f(e.activationMode??"auto_follow"),...d(e.message,"message",500)?{message:d(e.message,"message",500)}:{}}}}function g(t,n,e){return t==null?void 0:((!Array.isArray(t)||t.length<1||t.length>e)&&i(n),t.map(r=>((typeof r!="string"||!r.trim()||r.length>4096||/[\0\r\n]/.test(r))&&i(n),r.trim())))}function h(t){return t==null?{}:((Array.isArray(t)||typeof t!="object")&&i("parameters"),t)}function m(t,n){const e=new Set(n);Object.keys(t).some(s=>!e.has(s))&&i("parameters")}function o(t,n,e){return(typeof t!="string"||!t.trim()||t.length>e||/[\0\r]/.test(t))&&i(n),t.trim()}function d(t,n,e){if(!(t==null||t===""))return o(t,n,e)}function u(t,n,e){if(t==null)return;(!Array.isArray(t)||t.length>e)&&i(n);const s=t.map(r=>o(r,n,191));return new Set(s).size!==s.length&&i(n),s.length>0?s:void 0}function f(t){if(t==="auto"||t==="auto_follow")return"auto_follow";if(t==="mention"||t==="mention_only")return"mention_only";if(t==="paused")return"paused";i("activationMode")}function y(t){const n=o(t,"inviteUrl",2048);let e;try{e=new URL(n)}catch{i("inviteUrl")}return(e.protocol!=="https:"||e.hostname!=="shennian.net"||!/^\/spaces\/join\/[A-Za-z0-9_-]{43}$/.test(e.pathname)||e.username||e.password||e.search||e.hash)&&i("inviteUrl"),e.toString()}function i(t){throw new p("invalid_params",`${t} is invalid.`)}export{I as normalizeRoomActionParameters};

package/dist/src/room/room-authorized-action-executor.d.ts

@@ -0,0 +1,23 @@
+import type { AuthorizedActionExecutor } from './authorized-action-coordinator.js';
+import type { RoomHostSessionObservationStore } from './host-session-observations.js';
+import type { HttpRoomBindingClient } from './room-binding-client.js';
+import type { JsonValue, PendingAuthorizedAction } from './pending-authorized-actions.js';
+import type { RoomSessionRegistry } from './session-registry.js';
+type Credentials = {
+    machineId: string;
+    machineToken: string;
+};
+export declare class RoomAuthorizedActionExecutor implements AuthorizedActionExecutor {
+    private readonly deps;
+    constructor(deps: {
+        registry: RoomSessionRegistry;
+        observations: RoomHostSessionObservationStore;
+        actionClient: Pick<HttpRoomBindingClient, 'resolveNativeSession' | 'createRoom' | 'joinRoom'>;
+        getMachineCredentials: () => {
+            machineId?: string;
+            machineToken?: string;
+        };
+    });
+    execute(action: PendingAuthorizedAction, claimed?: Credentials): Promise<JsonValue>;
+}
+export {};