shennian 0.3.1 → 0.3.3

package/dist/src/room/jsonl-mirror.d.ts

@@ -0,0 +1,73 @@
+import type { RoomMessageView } from '@shennian/wire';
+type MirrorState = {
+    schemaVersion: 1;
+    roomId: string;
+    lastSyncedSequence: string;
+    messageCount: number;
+    lastError: string | null;
+    updatedAt: string;
+};
+export type RoomMirrorEvent = {
+    schemaVersion: 1;
+    roomId: string;
+    sequence: string;
+    messageId: string;
+    kind: RoomMessageView['kind'];
+    author: {
+        type: RoomMessageView['author']['principalType'];
+        membershipId: string;
+        ownerUserId: string;
+        displayName: string;
+        ownerDisplayName: string | null;
+    };
+    mentions: NonNullable<RoomMessageView['mentions']>;
+    text: string | null;
+    replyToMessageId: string | null;
+    attachments: RoomMessageView['attachments'];
+    createdAt: string;
+    editedAt: string | null;
+    deletedAt: string | null;
+    activationCause: RoomMessageView['activationCause'];
+};
+export declare class RoomJsonlMirrorError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare class RoomJsonlMirror {
+    readonly roomId: string;
+    readonly directory: string;
+    readonly metadataPath: string;
+    readonly messagesPath: string;
+    readonly statePath: string;
+    readonly attachmentsDirectory: string;
+    constructor(roomId: string, rootDirectory?: string);
+    append(input: {
+        messages: RoomMessageView[];
+        historyFromSequence: string;
+        roomName?: string | null;
+        now?: Date;
+    }): {
+        appended: number;
+        lastSyncedSequence: string;
+    };
+    rebuild(input: {
+        messages: RoomMessageView[];
+        historyFromSequence: string;
+        roomName?: string | null;
+        now?: Date;
+    }): MirrorState;
+    markAccessRevoked(now?: Date): void;
+    recordSyncError(code: string, now?: Date): void;
+    readState(): MirrorState;
+    search(input: {
+        query: string;
+        limit?: number;
+    }): RoomMirrorEvent[];
+    private ensureLayout;
+    private recoverPartialLine;
+    private reconcileStateFromMessages;
+    private readMetadata;
+    private writeMetadata;
+    private writeState;
+}
+export {};

package/dist/src/room/jsonl-mirror.js

@@ -0,0 +1,6 @@
+import p from"node:crypto";import n from"node:fs";import l from"node:path";import{StringDecoder as L}from"node:string_decoder";import{resolveShennianPath as k}from"../config/index.js";const C=/^[A-Za-z0-9_.:@-]{1,191}$/,w=2*1024*1024;class a extends Error{code;constructor(e,r){super(r),this.code=e,this.name="RoomJsonlMirrorError"}}class z{roomId;directory;metadataPath;messagesPath;statePath;attachmentsDirectory;constructor(e,r=k("rooms")){this.roomId=e,b(e,"room_id"),this.directory=l.join(r,e),this.metadataPath=l.join(this.directory,"metadata.json"),this.messagesPath=l.join(this.directory,"messages.jsonl"),this.statePath=l.join(this.directory,"state.json"),this.attachmentsDirectory=l.join(this.directory,"attachments"),this.ensureLayout(),this.recoverPartialLine(),this.reconcileStateFromMessages()}append(e){const r=u(e.historyFromSequence),o=this.readState(),i=BigInt(o.lastSyncedSequence),s=[];let c=i;for(const O of e.messages){const I=q(O,this.roomId),f=BigInt(I.sequence);if(!(f<=i)){if(f<=c)throw new a("room_mirror_sequence_order","Room mirror messages must be strictly ordered.");s.push(I),c=f}}const m=e.now??new Date;if(this.writeMetadata({schemaVersion:1,roomId:this.roomId,roomName:e.roomName?.trim()||this.readMetadata()?.roomName||null,historyFromSequence:r,access:"active",updatedAt:m.toISOString()}),s.length===0)return{appended:0,lastSyncedSequence:o.lastSyncedSequence};const d=s.map(v).join(""),S=l.join(this.directory,`.messages-batch-${process.pid}-${p.randomBytes(8).toString("hex")}.jsonl`);try{y(S,d,"wx"),_(S,this.roomId),$(this.messagesPath,d)}finally{try{n.unlinkSync(S)}catch{}}const g={schemaVersion:1,roomId:this.roomId,lastSyncedSequence:s.at(-1).sequence,messageCount:o.messageCount+s.length,lastError:null,updatedAt:m.toISOString()};return this.writeState(g),{appended:s.length,lastSyncedSequence:g.lastSyncedSequence}}rebuild(e){u(e.historyFromSequence);const r=e.messages.map(m=>q(m,this.roomId));x(r);const o=r.map(v).join(""),i=l.join(this.directory,`.messages-rebuild-${process.pid}-${p.randomBytes(8).toString("hex")}.jsonl`);try{y(i,o,"wx"),_(i,this.roomId),P(i,this.messagesPath)}finally{try{n.unlinkSync(i)}catch{}}const s=e.now??new Date;this.writeMetadata({schemaVersion:1,roomId:this.roomId,roomName:e.roomName?.trim()||null,historyFromSequence:e.historyFromSequence,access:"active",updatedAt:s.toISOString()});const c={schemaVersion:1,roomId:this.roomId,lastSyncedSequence:r.at(-1)?.sequence??"0",messageCount:r.length,lastError:null,updatedAt:s.toISOString()};return this.writeState(c),c}markAccessRevoked(e=new Date){const r=this.readMetadata();this.writeMetadata({schemaVersion:1,roomId:this.roomId,roomName:r?.roomName??null,historyFromSequence:r?.historyFromSequence??"1",access:"revoked",updatedAt:e.toISOString()})}recordSyncError(e,r=new Date){const o=this.readState();this.writeState({...o,lastError:e.replace(/[^a-z0-9_-]/gi,"_").slice(0,120)||"room_sync_failed",updatedAt:r.toISOString()})}readState(){return F(this.statePath,this.roomId)}search(e){const r=e.query.trim().toLocaleLowerCase(),o=e.limit??20;if(!r||r.length>200)throw new a("invalid_room_search_query","Invalid Room search query.");if(!Number.isInteger(o)||o<1||o>100)throw new a("invalid_room_search_limit","Invalid Room search limit.");const i=[];return R(this.messagesPath,s=>{const c=N(s,this.roomId);c.deletedAt||!D(c).toLocaleLowerCase().includes(r)||(i.push(c),i.length>o&&i.shift())}),i.reverse()}ensureLayout(){A(this.directory),A(this.attachmentsDirectory),n.existsSync(this.messagesPath)||y(this.messagesPath,"","wx")}recoverPartialLine(){const e=h(this.messagesPath);if(e.size===0)return;const r=n.openSync(this.messagesPath,"r+");try{const o=Buffer.alloc(1);if(n.readSync(r,o,0,1,e.size-1),o[0]===10)return;const i=64*1024;let s=e.size;for(;s>0;){const c=Math.min(i,s);s-=c;const m=Buffer.alloc(c);n.readSync(r,m,0,c,s);const d=m.lastIndexOf(10);if(d>=0){n.ftruncateSync(r,s+d+1),n.fsyncSync(r);return}}n.ftruncateSync(r,0),n.fsyncSync(r)}finally{n.closeSync(r)}}reconcileStateFromMessages(){const e=_(this.messagesPath,this.roomId),r=F(this.statePath,this.roomId);(r.lastSyncedSequence!==e.lastSequence||r.messageCount!==e.messageCount)&&this.writeState({...r,lastSyncedSequence:e.lastSequence,messageCount:e.messageCount,updatedAt:new Date().toISOString()})}readMetadata(){if(!n.existsSync(this.metadataPath))return null;h(this.metadataPath);const e=JSON.parse(n.readFileSync(this.metadataPath,"utf8"));if(e.schemaVersion!==1||e.roomId!==this.roomId||e.access!=="active"&&e.access!=="revoked"||typeof e.historyFromSequence!="string")throw new a("corrupt_room_mirror_metadata","Room mirror metadata is corrupt.");return u(e.historyFromSequence),e}writeMetadata(e){M(this.metadataPath,e)}writeState(e){M(this.statePath,e)}}function q(t,e){if(t.roomId!==e)throw new a("room_mirror_room_mismatch","Room mirror message mismatch.");if(b(t.id,"message_id"),u(t.sequence),!t.author||!["human","agent"].includes(t.author.principalType))throw new a("invalid_room_mirror_message","Invalid Room message author.");const r=t.attachments.map(o=>{if(o.downloadRef!==`shennian-room-attachment:${o.attachmentId}`||!/^[a-f0-9]{64}$/.test(o.sha256)||!/^\d+$/.test(o.byteSize))throw new a("invalid_room_mirror_attachment","Invalid Room attachment metadata.");return{...o}});return{schemaVersion:1,roomId:e,sequence:t.sequence,messageId:t.id,kind:t.kind,author:{type:t.author.principalType,membershipId:t.author.membershipId,ownerUserId:t.author.ownerUserId,displayName:t.author.displayName,ownerDisplayName:t.author.ownerDisplayName??null},mentions:[...t.mentions??[]],text:t.text??null,replyToMessageId:t.replyToMessageId??null,attachments:r,createdAt:t.createdAt,editedAt:t.editedAt??null,deletedAt:t.deletedAt??null,activationCause:t.activationCause??null}}function v(t){const e=`${JSON.stringify(t)}
+`;if(Buffer.byteLength(e,"utf8")>w)throw new a("room_mirror_line_too_large","Room mirror event is too large.");return e}function x(t){let e=0n;const r=new Set;for(const o of t){const i=BigInt(o.sequence);if(i<=e||r.has(o.messageId))throw new a("room_mirror_sequence_order","Room mirror messages must be unique and strictly ordered.");e=i,r.add(o.messageId)}}function _(t,e){h(t);const r=[];return R(t,o=>r.push(N(o,e))),x(r),{lastSequence:r.at(-1)?.sequence??"0",messageCount:r.length}}function R(t,e){h(t);const r=n.openSync(t,"r"),o=Buffer.alloc(64*1024),i=new L("utf8");let s="";try{for(;;){const c=n.readSync(r,o,0,o.length,null);if(c===0)break;if(s+=i.write(o.subarray(0,c)),Buffer.byteLength(s,"utf8")>w+o.length)throw new a("room_mirror_line_too_large","Room mirror event is too large.");let m=s.indexOf(`
+`);for(;m>=0;){const d=s.slice(0,m);s=s.slice(m+1),d&&e(d),m=s.indexOf(`
+`)}}if(s+=i.end(),s)throw new a("corrupt_room_mirror","Room mirror has an incomplete line.")}finally{n.closeSync(r)}}function N(t,e){if(Buffer.byteLength(t,"utf8")>w)throw new a("room_mirror_line_too_large","Room mirror event is too large.");let r;try{r=JSON.parse(t)}catch{throw new a("corrupt_room_mirror","Room mirror JSONL is corrupt.")}const o=r;if(o.schemaVersion!==1||o.roomId!==e||typeof o.sequence!="string"||typeof o.messageId!="string")throw new a("corrupt_room_mirror","Room mirror event is invalid.");return u(o.sequence),o}function D(t){return[t.text,t.author.displayName,t.author.ownerDisplayName,...t.mentions.map(e=>e.displayName),...t.attachments.map(e=>e.name)].filter(e=>typeof e=="string").join(`
+`)}function F(t,e){if(!n.existsSync(t))return{schemaVersion:1,roomId:e,lastSyncedSequence:"0",messageCount:0,lastError:null,updatedAt:new Date(0).toISOString()};h(t);const r=JSON.parse(n.readFileSync(t,"utf8"));if(r.schemaVersion!==1||r.roomId!==e||typeof r.lastSyncedSequence!="string"||!Number.isSafeInteger(r.messageCount)||r.messageCount<0)throw new a("corrupt_room_mirror_state","Room mirror state is corrupt.");return u(r.lastSyncedSequence),r}function u(t){if(!/^(0|[1-9]\d{0,19})$/.test(t))throw new a("invalid_room_sequence","Invalid Room sequence.");return t}function b(t,e){if(!C.test(t))throw new a(`invalid_${e}`,`Invalid ${e}.`)}function A(t){if(n.existsSync(t)){const e=n.lstatSync(t);if(!e.isDirectory()||e.isSymbolicLink())throw new a("unsafe_room_mirror_path","Unsafe Room mirror directory.")}else n.mkdirSync(t,{recursive:!0,mode:448});process.platform!=="win32"&&n.chmodSync(t,448)}function h(t){const e=n.lstatSync(t);if(!e.isFile()||e.isSymbolicLink())throw new a("unsafe_room_mirror_path","Unsafe Room mirror file.");return process.platform!=="win32"&&(e.mode&63)!==0&&n.chmodSync(t,384),e}function y(t,e,r){n.writeFileSync(t,e,{encoding:"utf8",mode:384,flag:r}),process.platform!=="win32"&&n.chmodSync(t,384)}function $(t,e){h(t);const r=n.openSync(t,"a");try{n.writeFileSync(r,e,"utf8"),n.fsyncSync(r)}finally{n.closeSync(r)}}function P(t,e){process.platform==="win32"&&n.existsSync(e)&&n.unlinkSync(e),n.renameSync(t,e),process.platform!=="win32"&&n.chmodSync(e,384)}function M(t,e){const r=`${t}.tmp-${process.pid}-${p.randomBytes(8).toString("hex")}`;try{y(r,`${JSON.stringify(e,null,2)}
+`,"wx"),P(r,t)}finally{try{n.unlinkSync(r)}catch{}}}export{z as RoomJsonlMirror,a as RoomJsonlMirrorError};

package/dist/src/room/managed-room-binding.d.ts

@@ -0,0 +1,42 @@
+import type { AgentType } from '@shennian/wire';
+import type { HttpRoomBindingClient } from './room-binding-client.js';
+import type { RoomSessionRegistry } from './session-registry.js';
+export type ManagedRoomBindInput = {
+    roomId: string;
+    agentIdentityId: string;
+    nianSessionId: string;
+    assignmentIntentId: string;
+    agentSessionId: string;
+    workDir: string;
+    agentType: AgentType;
+};
+export type ManagedRoomBinder = {
+    bind(input: ManagedRoomBindInput): Promise<{
+        binding: {
+            id: string;
+            roomId: string;
+            agentIdentityId: string;
+            agentMembershipId: string;
+            nianSessionId: string;
+            status: 'pending_approval' | 'active' | 'paused' | 'detached';
+            activationMode: 'auto_follow' | 'mention_only' | 'paused';
+        };
+        idempotent: boolean;
+    }>;
+};
+export declare class TrustedManagedRoomBinder implements ManagedRoomBinder {
+    private readonly deps;
+    constructor(deps: {
+        registry: RoomSessionRegistry;
+        bindingClient: Pick<HttpRoomBindingClient, 'create'>;
+        getMachineCredentials: () => {
+            machineId?: string;
+            machineToken?: string;
+        };
+        hostProcessIdentity: () => string;
+    });
+    bind(input: ManagedRoomBindInput): Promise<{
+        binding: import("./room-binding-client.js").RemoteRoomBinding;
+        idempotent: boolean;
+    }>;
+}

package/dist/src/room/managed-room-binding.js

@@ -0,0 +1 @@
+class a{deps;constructor(e){this.deps=e}async bind(e){const{machineId:t,machineToken:d}=this.deps.getMachineCredentials();if(!t||!d)throw new Error("Machine is not paired with Shennian.");const s=r(e.agentType),o=this.deps.registry.register({machineId:t,runtimeAdapter:s,sourceSessionKey:e.agentSessionId,nianSessionId:e.nianSessionId,hostProcessIdentity:this.deps.hostProcessIdentity(),capabilities:{canIdentifySession:!0,canBindAutomatically:!0,canOpenEmbeddedRoomPage:!1,canResumeIdleSession:!0,canActivateWhileHostOpen:!0}}),n=await this.deps.bindingClient.create({machineToken:d,bindingIntentId:e.assignmentIntentId,roomId:e.roomId,agentIdentityId:e.agentIdentityId,nianSessionId:e.nianSessionId,runtimeAdapter:s,sessionRegistryKey:o.registryKey,activationCapability:"managed",activationMode:"auto_follow"});return this.deps.registry.setBinding({registryKey:o.registryKey,bindingId:n.binding.id,roomId:n.binding.roomId,agentIdentityId:n.binding.agentIdentityId,agentMembershipId:n.binding.agentMembershipId,status:n.binding.status,activationMode:n.binding.activationMode}),n}}function r(i){if(i==="codex")return"codex";if(i==="claude")return"claude_code";if(i==="workbuddy"||i==="custom:workbuddy")return"workbuddy";throw new Error(`Agent ${i} does not support managed Room binding.`)}export{a as TrustedManagedRoomBinder};

package/dist/src/room/managed-room-session.d.ts

@@ -0,0 +1,143 @@
+import type { RoomActivationMode, RoomBindingStatus, RoomRuntimeAdapter } from '@shennian/wire';
+export type ManagedRoomSessionAgent = 'codex' | 'claude' | 'workbuddy';
+export type ManagedRoomSessionInput = {
+    inviteUrl: string;
+    agent: ManagedRoomSessionAgent;
+    workDir: string;
+    alias: string;
+    mode?: RoomActivationMode;
+    modelId?: string;
+};
+export type ManagedRoomSessionPhase = 'initialized' | 'session_created' | 'native_session_ready' | 'session_registered' | 'joined';
+export type ManagedRoomSessionFailureStage = 'validate_input' | 'create_session' | 'wait_for_native_session' | 'register_session' | 'join_room';
+type NormalizedInput = Required<Pick<ManagedRoomSessionInput, 'inviteUrl' | 'agent' | 'workDir' | 'alias' | 'mode'>> & {
+    modelId: string | null;
+};
+export type ManagedRoomSessionRegistration = {
+    registryKey: string;
+};
+export type ManagedRoomJoinResult = {
+    outcome: 'joined' | 'pending_approval';
+    room: {
+        id: string;
+        name: string;
+        webUrl: string;
+    };
+    binding: {
+        id: string;
+        agentIdentityId: string;
+        agentMembershipId: string | null;
+        status: RoomBindingStatus;
+        activationMode: RoomActivationMode;
+    };
+    idempotent: boolean;
+};
+export type ManagedRoomSessionOperation = {
+    schemaVersion: 1;
+    operationId: string;
+    inputFingerprint: string;
+    input: NormalizedInput;
+    runtimeAdapter: RoomRuntimeAdapter;
+    phase: ManagedRoomSessionPhase;
+    nianSessionId: string | null;
+    sourceSessionKey: string | null;
+    hostProcessIdentity: string | null;
+    registryKey: string | null;
+    result: ManagedRoomJoinResult | null;
+    createdAt: string;
+    updatedAt: string;
+};
+export interface ManagedRoomSessionOperationStore {
+    load(operationId: string): ManagedRoomSessionOperation | null;
+    save(operation: ManagedRoomSessionOperation): void;
+}
+export type ManagedRoomSessionDependencies = {
+    operations: ManagedRoomSessionOperationStore;
+    /**
+     * Must be idempotent for creationKey. A successful call followed by a daemon
+     * crash may be repeated before the operation record reaches disk.
+     */
+    createManagedSession(input: {
+        creationKey: string;
+        agent: ManagedRoomSessionAgent;
+        workDir: string;
+        modelId: string | null;
+        initialMessage: string;
+    }): Promise<{
+        nianSessionId: string;
+    }>;
+    /** Resolves only the native Session created for nianSessionId; never a recent Session. */
+    waitForNativeSession(input: {
+        nianSessionId: string;
+        runtimeAdapter: RoomRuntimeAdapter;
+        timeoutMs: number;
+    }): Promise<{
+        sourceSessionKey: string;
+        hostProcessIdentity: string;
+    }>;
+    /** Persists the trusted observation and exact managed Session Registry record. */
+    registerManagedSession(input: {
+        nianSessionId: string;
+        runtimeAdapter: RoomRuntimeAdapter;
+        sourceSessionKey: string;
+        hostProcessIdentity: string;
+        workDir: string;
+        capabilities: {
+            canIdentifySession: true;
+            canBindAutomatically: true;
+            canOpenEmbeddedRoomPage: false;
+            canResumeIdleSession: true;
+            canActivateWhileHostOpen: true;
+        };
+    }): Promise<ManagedRoomSessionRegistration>;
+    /**
+     * Uses daemon-owned machine credentials internally. Public callers never
+     * supply Room, Binding, Identity, native Session, or machine credential IDs.
+     */
+    joinRegisteredSession(input: {
+        bindingIntentId: string;
+        registryKey: string;
+        inviteUrl: string;
+        agentAlias: string;
+        activationMode: RoomActivationMode;
+        activationCapability: 'managed';
+    }): Promise<ManagedRoomJoinResult>;
+    allowedInviteOrigins?: string[];
+    nativeSessionTimeoutMs?: number;
+    now?: () => Date;
+};
+export declare class ManagedRoomSessionError extends Error {
+    readonly code: string;
+    readonly stage: ManagedRoomSessionFailureStage;
+    readonly operationId: string | null;
+    readonly phase: ManagedRoomSessionPhase;
+    readonly nianSessionId: string | null;
+    constructor(code: string, message: string, stage: ManagedRoomSessionFailureStage, operationId: string | null, phase: ManagedRoomSessionPhase, nianSessionId: string | null);
+}
+export declare class ManagedRoomSessionOrchestrator {
+    private readonly deps;
+    private readonly mutexTails;
+    constructor(deps: ManagedRoomSessionDependencies);
+    execute(operationId: string, rawInput: ManagedRoomSessionInput): Promise<{
+        operationId: string;
+        phase: 'joined';
+        nianSessionId: string;
+        result: ManagedRoomJoinResult;
+    }>;
+    private executeExclusive;
+    private save;
+}
+export declare class InMemoryManagedRoomSessionOperationStore implements ManagedRoomSessionOperationStore {
+    private readonly records;
+    load(operationId: string): ManagedRoomSessionOperation | null;
+    save(operation: ManagedRoomSessionOperation): void;
+}
+/** Private per-operation files allow daemon restart recovery without one operation overwriting another. */
+export declare class FileManagedRoomSessionOperationStore implements ManagedRoomSessionOperationStore {
+    readonly directory: string;
+    constructor(directory: string);
+    load(operationId: string): ManagedRoomSessionOperation | null;
+    save(operation: ManagedRoomSessionOperation): void;
+    private filePath;
+}
+export {};

package/dist/src/room/managed-room-session.js

@@ -0,0 +1,3 @@
+import S from"node:crypto";import a from"node:fs";import y from"node:path";class h extends Error{code;stage;operationId;phase;nianSessionId;constructor(i,o,t,r,n,s){super(o),this.code=i,this.stage=t,this.operationId=r,this.phase=n,this.nianSessionId=s,this.name="ManagedRoomSessionError"}}const j=/^[A-Za-z0-9_-]{8,96}$/,R=/^[A-Za-z0-9_.:@/-]{1,512}$/,w=/^[a-f0-9]{64}$/,k=/^[A-Za-z0-9_-]{43}$/,D=new Set(["inviteUrl","agent","workDir","alias","mode","modelId"]),K=new Set(["codex","claude","workbuddy"]),N=new Set(["auto_follow","mention_only","paused"]),P=["https://shennian.net"],$=3e4;class B{deps;mutexTails=new Map;constructor(i){this.deps=i}async execute(i,o){_(i);let t;const r=this.mutexTails.get(i)??Promise.resolve(),n=new Promise(l=>{t=l}),s=r.then(()=>n);this.mutexTails.set(i,s),await r;try{return await this.executeExclusive(i,o)}finally{t(),this.mutexTails.get(i)===s&&this.mutexTails.delete(i)}}async executeExclusive(i,o){let t;try{t=I(o,this.deps.allowedInviteOrigins??P)}catch(s){throw m(s,"validate_input",i,null)}const r=b(t);let n=this.deps.operations.load(i);if(n&&n.inputFingerprint!==r)throw new h("managed_room_operation_conflict","This operation ID was already used with different inputs.","validate_input",i,n.phase,n.nianSessionId);if(!n){const s=(this.deps.now?.()??new Date).toISOString();n={schemaVersion:1,operationId:i,inputFingerprint:r,input:t,runtimeAdapter:v(t.agent),phase:"initialized",nianSessionId:null,sourceSessionKey:null,hostProcessIdentity:null,registryKey:null,result:null,createdAt:s,updatedAt:s},this.save(n)}if(n.phase==="joined")return E(n);if(n.phase==="initialized")try{const s=await this.deps.createManagedSession({creationKey:`room-managed-session:${i}`,agent:t.agent,workDir:t.workDir,modelId:t.modelId,initialMessage:U()});c(s.nianSessionId,"nian_session_id"),n.nianSessionId=s.nianSessionId,n.phase="session_created",this.save(n)}catch(s){throw m(s,"create_session",i,n)}if(n.phase==="session_created")try{const s=await this.deps.waitForNativeSession({nianSessionId:n.nianSessionId,runtimeAdapter:n.runtimeAdapter,timeoutMs:this.deps.nativeSessionTimeoutMs??$});A(s.sourceSessionKey),c(s.hostProcessIdentity,"host_process_identity"),n.sourceSessionKey=s.sourceSessionKey,n.hostProcessIdentity=s.hostProcessIdentity,n.phase="native_session_ready",this.save(n)}catch(s){throw m(s,"wait_for_native_session",i,n)}if(n.phase==="native_session_ready")try{const s=await this.deps.registerManagedSession({nianSessionId:n.nianSessionId,runtimeAdapter:n.runtimeAdapter,sourceSessionKey:n.sourceSessionKey,hostProcessIdentity:n.hostProcessIdentity,workDir:t.workDir,capabilities:{canIdentifySession:!0,canBindAutomatically:!0,canOpenEmbeddedRoomPage:!1,canResumeIdleSession:!0,canActivateWhileHostOpen:!0}});if(!w.test(s.registryKey))throw u("registry_key");n.registryKey=s.registryKey,n.phase="session_registered",this.save(n)}catch(s){throw m(s,"register_session",i,n)}if(n.phase==="session_registered")try{n.result=await this.deps.joinRegisteredSession({bindingIntentId:`room-managed-session-join:${i}`,registryKey:n.registryKey,inviteUrl:t.inviteUrl,agentAlias:t.alias,activationMode:t.mode,activationCapability:"managed"}),O(n.result),n.phase="joined",this.save(n)}catch(s){throw m(s,"join_room",i,n)}return E(n)}save(i){i.updatedAt=(this.deps.now?.()??new Date).toISOString(),this.deps.operations.save(g(i))}}class G{records=new Map;load(i){const o=this.records.get(i);return o?g(o):null}save(i){this.records.set(i.operationId,g(i))}}class Z{directory;constructor(i){this.directory=i}load(i){_(i);const o=this.filePath(i);try{const t=a.lstatSync(o);if(!t.isFile()||t.isSymbolicLink())throw p();process.platform!=="win32"&&(t.mode&63)!==0&&a.chmodSync(o,384);const r=JSON.parse(a.readFileSync(o,"utf8"));return M(r,i),g(r)}catch(t){if(t.code==="ENOENT")return null;throw t}}save(i){_(i.operationId),M(i,i.operationId),a.mkdirSync(this.directory,{recursive:!0,mode:448});const o=a.lstatSync(this.directory);if(!o.isDirectory()||o.isSymbolicLink())throw p();process.platform!=="win32"&&a.chmodSync(this.directory,448);const t=this.filePath(i.operationId),r=`${t}.tmp-${process.pid}-${S.randomBytes(6).toString("hex")}`;try{if(a.writeFileSync(r,`${JSON.stringify(i,null,2)}
+`,{encoding:"utf8",mode:384,flag:"wx"}),process.platform!=="win32"&&a.chmodSync(r,384),process.platform==="win32"&&a.existsSync(t)){const n=a.lstatSync(t);if(!n.isFile()||n.isSymbolicLink())throw p();a.unlinkSync(t)}a.renameSync(r,t)}finally{try{a.unlinkSync(r)}catch{}}}filePath(i){return y.join(this.directory,`${i}.json`)}}function I(e,i){(!e||typeof e!="object"||Array.isArray(e))&&d("input");const o=e;Object.keys(o).find(T=>!D.has(T))&&d("unsupported_field");const r=o.agent;(typeof r!="string"||!K.has(r))&&d("agent");const n=f(o.workDir,"work_dir",4096);(!y.isAbsolute(n)||y.normalize(n)!==n)&&d("work_dir");const s=f(o.alias,"alias",80),l=o.mode??"auto_follow";(typeof l!="string"||!N.has(l))&&d("mode");const x=o.modelId==null?null:f(o.modelId,"model_id",191);return{inviteUrl:F(o.inviteUrl,i),agent:r,workDir:n,alias:s,mode:l,modelId:x}}function F(e,i){const o=f(e,"invite_url",2048);let t;try{t=new URL(o)}catch{d("invite_url")}(!new Set(i.map(l=>new URL(l).origin)).has(t.origin)||t.username||t.password||t.search||t.hash)&&d("invite_url");const n=t.pathname.split("/").filter(Boolean),s=n.at(-1);return(!s||!k.test(s)||n.at(-2)!=="join")&&d("invite_url"),t.toString()}function f(e,i,o){typeof e!="string"&&d(i);const t=e.trim();return(!t||t.length>o||/[\0\r\n]/.test(t))&&d(i),t}function _(e){if(!j.test(e))throw new h("invalid_managed_room_operation_id","Managed Room operation ID is invalid.","validate_input",null,"initialized",null)}function v(e){return e==="claude"?"claude_code":e}function b(e){return S.createHash("sha256").update(JSON.stringify(e),"utf8").digest("hex")}function c(e,i){if(!R.test(e))throw u(i)}function A(e){if(!e||e.length>1024||/[\0\r\n]/.test(e))throw u("source_session_key")}function O(e){if(c(e.room?.id,"room_id"),c(e.binding?.id,"binding_id"),c(e.binding?.agentIdentityId,"agent_identity_id"),e.binding.agentMembershipId!==null&&c(e.binding.agentMembershipId,"agent_membership_id"),e.outcome!=="joined"&&e.outcome!=="pending_approval")throw u("join_outcome");if(e.outcome==="joined"&&e.binding.status!=="active"&&e.binding.status!=="paused"||e.outcome==="pending_approval"&&e.binding.status!=="pending_approval"||e.binding.status==="pending_approval"&&e.binding.agentMembershipId!==null||(e.binding.status==="active"||e.binding.status==="paused")&&e.binding.agentMembershipId===null)throw u("join_binding_state")}function U(){return["\u8FD9\u662F\u4E00\u4E2A\u7531\u795E\u5FF5\u521B\u5EFA\u7684\u53D7\u7BA1 Agent \u5BF9\u8BDD\u3002","\u8BF7\u5148\u4FDD\u6301\u7A7A\u95F2\uFF1B\u795E\u5FF5\u6B63\u5728\u4E3A\u8BE5\u7CBE\u786E\u5BF9\u8BDD\u5EFA\u7ACB\u7FA4\u804A\u8FDE\u63A5\uFF0C\u5B8C\u6210\u540E\u4F1A\u53D1\u9001\u540E\u7EED\u6D88\u606F\u3002"].join(`
+`)}function E(e){if(!e.nianSessionId||!e.result||e.phase!=="joined")throw u("operation_state");return{operationId:e.operationId,phase:"joined",nianSessionId:e.nianSessionId,result:g(e.result)}}function m(e,i,o,t){if(e instanceof h)return e;const r=e&&typeof e=="object"&&"code"in e&&typeof e.code=="string"?e.code:`managed_room_${i}_failed`;return new h(r,`Managed Room Session failed during ${i}. The created conversation was preserved for retry.`,i,o,t?.phase??"initialized",t?.nianSessionId??null)}function d(e){throw new h(`invalid_managed_room_${e}`,`Managed Room Session ${e} is invalid.`,"validate_input",null,"initialized",null)}function u(e){return Object.assign(new Error(`Managed Room dependency returned an invalid ${e}.`),{code:`invalid_managed_room_${e}`})}function M(e,i){if(!e||e.schemaVersion!==1||e.operationId!==i||!/^[a-f0-9]{64}$/.test(e.inputFingerprint)||!["initialized","session_created","native_session_ready","session_registered","joined"].includes(e.phase)||!e.input||v(e.input.agent)!==e.runtimeAdapter)throw p();const o=I(e.input,[new URL(e.input.inviteUrl).origin]);if(b(o)!==e.inputFingerprint||(e.nianSessionId!==null&&c(e.nianSessionId,"nian_session_id"),e.sourceSessionKey!==null&&A(e.sourceSessionKey),e.hostProcessIdentity!==null&&c(e.hostProcessIdentity,"host_process_identity"),e.registryKey!==null&&!w.test(e.registryKey)))throw p();e.result!==null&&O(e.result)}function p(){return Object.assign(new Error("Managed Room Session operation store is unsafe or corrupt."),{code:"unsafe_managed_room_operation_store"})}function g(e){return JSON.parse(JSON.stringify(e))}export{Z as FileManagedRoomSessionOperationStore,G as InMemoryManagedRoomSessionOperationStore,h as ManagedRoomSessionError,B as ManagedRoomSessionOrchestrator};

package/dist/src/room/mirror-sync-service.d.ts

@@ -0,0 +1,33 @@
+import { HttpRoomActionClient } from './room-action-client.js';
+import { RoomJsonlMirror } from './jsonl-mirror.js';
+import { RoomSessionRegistry, type RoomSessionRegistration } from './session-registry.js';
+import type { RoomMessageView } from '@shennian/wire';
+type Mirror = Pick<RoomJsonlMirror, 'append' | 'markAccessRevoked' | 'readState' | 'recordSyncError'>;
+type Timer = ReturnType<typeof setTimeout>;
+export declare class RoomMirrorSyncService {
+    private readonly deps;
+    private timer;
+    private running;
+    private started;
+    constructor(deps: {
+        registry: RoomSessionRegistry;
+        actionClient: Pick<HttpRoomActionClient, 'status' | 'read'>;
+        getMachineCredentials: () => {
+            machineToken?: string;
+        };
+        mirrorFactory?: (roomId: string) => Mirror;
+        initialDelayMs?: number;
+        intervalMs?: number;
+        maxPagesPerRun?: number;
+        setTimeout?: (handler: () => void, delayMs: number) => Timer;
+        clearTimeout?: (timer: Timer) => void;
+        onMessages?: (roomId: string, messages: RoomMessageView[], registrations: RoomSessionRegistration[]) => Promise<void>;
+    });
+    start(): void;
+    stop(): void;
+    runOnce(): Promise<void>;
+    private syncRoom;
+    private pullPages;
+    private arm;
+}
+export {};

package/dist/src/room/mirror-sync-service.js

@@ -0,0 +1 @@
+import{RoomActionHttpError as m}from"./room-action-client.js";import{RoomJsonlMirror as h}from"./jsonl-mirror.js";class S{deps;timer=null;running=!1;started=!1;constructor(e){this.deps=e}start(){this.started||(this.started=!0,this.arm(this.deps.initialDelayMs??0))}stop(){this.started=!1,this.timer&&(this.deps.clearTimeout??clearTimeout)(this.timer),this.timer=null}async runOnce(){if(this.running)return;const e=this.deps.getMachineCredentials().machineToken?.trim();if(e){this.running=!0;try{const i=l(this.deps.registry.list());for(const[r,o]of i)await this.syncRoom(r,o,e)}finally{this.running=!1}}}async syncRoom(e,i,r){const o=(this.deps.mirrorFactory??(t=>new h(t)))(e),u=i.filter(t=>t.binding&&(t.binding.status==="active"||t.binding.status==="paused"));if(u.length===0){i.some(t=>t.binding?.status==="detached")&&!i.some(t=>t.binding?.status==="pending_approval")&&o.markAccessRevoked();return}let a=0,c=null;for(const t of u){const d=t.binding,g={machineToken:r,roomId:e,bindingId:d.bindingId};try{const s=await this.deps.actionClient.status(g);if(this.deps.registry.setBinding({registryKey:t.registryKey,bindingId:s.bindingId,roomId:s.roomId,agentIdentityId:s.agentIdentityId,agentMembershipId:s.agentMembershipId,status:s.status,activationMode:s.activationMode}),s.status==="detached"){a+=1;continue}if(s.status==="pending_approval")continue;c??=g}catch(s){if(p(s)){this.deps.registry.detachBinding(t.registryKey),a+=1;continue}o.recordSyncError(f(s));return}}if(c){const t=i.map(d=>this.deps.registry.getByRegistryKey(d.registryKey)??d);await this.pullPages(o,c,e,t);return}a===u.length&&o.markAccessRevoked()}async pullPages(e,i,r,o){const u=this.deps.maxPagesPerRun??100;let a=e.readState().lastSyncedSequence;for(let c=0;c<u;c+=1){const t=await this.deps.actionClient.read({...i,afterSequence:a,limit:100}),d=e.append({messages:t.messages,historyFromSequence:t.historyFromSequence,roomName:t.roomName});if(this.deps.onMessages&&await this.deps.onMessages(r,t.messages,o),!t.hasMore)return;if(d.lastSyncedSequence===a)throw new m("room_sync_no_progress","Room mirror synchronization made no progress.");a=d.lastSyncedSequence}}arm(e){if(!this.started||this.timer)return;const i=this.deps.setTimeout??setTimeout;this.timer=i(()=>{this.timer=null,this.runOnce().catch(()=>{}).finally(()=>{this.started&&this.arm(this.deps.intervalMs??5e3)})},e),this.timer.unref?.()}}function l(n){const e=new Map;for(const i of n){if(!i.binding||i.lifecycleState==="closed")continue;const r=e.get(i.binding.roomId)??[];r.push(i),e.set(i.binding.roomId,r)}return e}function p(n){return n instanceof m&&(n.code==="room_binding_unavailable"||n.code==="room_action_http_403")}function f(n){return n instanceof m?n.code:"room_sync_failed"}export{S as RoomMirrorSyncService};

package/dist/src/room/operator-ipc.d.ts

@@ -0,0 +1,11 @@
+import type { DaemonIpcHandler } from '../daemon-ipc/server.js';
+import type { RoomSessionRegistry } from './session-registry.js';
+import type { HttpRoomActionClient } from './room-action-client.js';
+export declare function createRoomOperatorIpcHandlers(input: {
+    registry: Pick<RoomSessionRegistry, 'list'>;
+    actionClient: Pick<HttpRoomActionClient, 'createOperatorRoom'>;
+    getMachineCredentials: () => {
+        machineId?: string;
+        machineToken?: string;
+    };
+}): Record<string, DaemonIpcHandler>;

package/dist/src/room/operator-ipc.js

@@ -0,0 +1 @@
+import{DaemonIpcError as r}from"../daemon-ipc/protocol.js";function w(e){return{"room-operator.inspect":n=>{const o=u(n),t=e.getMachineCredentials(),i=t.machineId?.trim(),l=!!(i&&t.machineToken?.trim()),c=i?e.registry.list().filter(s=>s.machineId===i):[],m=c.filter(s=>s.binding!==null),d=h(m);return a(o==="status"?{source:"local_registry",signedIn:l,registeredSessions:c.length,boundSessions:m.length,rooms:d.length}:{source:"local_registry",complete:!1,rooms:d})},"room-operator.create":async n=>{const o=f(n),t=e.getMachineCredentials();if(!t.machineId?.trim()||!t.machineToken?.trim())throw new r("cli_not_signed_in","Sign in to the Shennian CLI first.");try{return a(await e.actionClient.createOperatorRoom({machineToken:t.machineToken,name:o}))}catch(i){throw g(i)}}}}function a(e){return JSON.parse(JSON.stringify(e))}function u(e){if(!e||Array.isArray(e)||typeof e!="object")throw new r("invalid_params","Room operator parameters are required.");const n=e;if(Object.keys(n).length!==1||n.action!=="status"&&n.action!=="list")throw new r("invalid_params","Room operator action is invalid.");return n.action}function f(e){if(!e||Array.isArray(e)||typeof e!="object")throw new r("invalid_params","Room operator parameters are required.");const n=e;if(Object.keys(n).length!==1||typeof n.name!="string")throw new r("invalid_params","Room operator create parameters are invalid.");const o=n.name.trim();if(!o||o.length>80)throw new r("invalid_params","Room name must contain 1 to 80 characters.");return o}function g(e){return e&&typeof e=="object"&&"code"in e&&typeof e.code=="string"&&"message"in e&&typeof e.message=="string"?new r(e.code,e.message):new r("room_operator_failed","Shennian Room operator action failed.")}function h(e){const n=new Map;for(const o of e){const t=o.binding;if(!t)continue;const i=n.get(t.roomId)??{sessions:0,runtimes:new Set,statuses:new Set,modes:new Set};i.sessions+=1,i.runtimes.add(o.runtimeAdapter),i.statuses.add(t.status),i.modes.add(t.activationMode),n.set(t.roomId,i)}return[...n.entries()].sort(([o],[t])=>o.localeCompare(t)).map(([o,t])=>({roomId:o,sessions:t.sessions,runtimes:[...t.runtimes].sort(),bindingStatuses:[...t.statuses].sort(),activationModes:[...t.modes].sort()}))}export{w as createRoomOperatorIpcHandlers};

package/dist/src/room/pending-authorized-actions.d.ts

@@ -0,0 +1,69 @@
+export type AuthorizedActionStatus = 'waiting_user' | 'approved' | 'executing' | 'completed' | 'failed' | 'expired';
+export type JsonValue = null | boolean | number | string | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export type PendingAuthorizedAction = {
+    schemaVersion: 1;
+    id: string;
+    loginIntentId: string;
+    publicLoginUrl: string;
+    actionType: string;
+    canonicalActionPayload: JsonValue;
+    actionPayloadHash: string;
+    idempotencyKey: string;
+    deviceSecretHash: string;
+    status: AuthorizedActionStatus;
+    expiresAt: string;
+    createdAt: string;
+    updatedAt: string;
+    browserOpenedAt?: string;
+    approvedAt?: string;
+    executingAt?: string;
+    completedAt?: string;
+    failedAt?: string;
+    errorCode?: string;
+    result?: JsonValue;
+};
+type CreatePendingActionInput = {
+    id?: string;
+    loginIntentId: string;
+    publicLoginUrl: string;
+    actionType: string;
+    actionPayload: JsonValue;
+    idempotencyKey: string;
+    deviceSecret: string;
+    expiresAt: string;
+    now?: Date;
+};
+export declare class PendingAuthorizedActionError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function canonicalizeActionPayload(value: JsonValue): string;
+export declare function hashActionPayload(value: JsonValue): string;
+export declare function hashPendingDeviceSecret(secret: string): string;
+export declare class PendingAuthorizedActionStore {
+    readonly directory: string;
+    constructor(rootDir?: string);
+    create(input: CreatePendingActionInput): PendingAuthorizedAction;
+    get(id: string): PendingAuthorizedAction | null;
+    list(): PendingAuthorizedAction[];
+    findByIdempotencyKey(idempotencyKey: string): PendingAuthorizedAction | null;
+    listRecoverable(now?: Date): PendingAuthorizedAction[];
+    readDeviceSecret(id: string): string;
+    markApproved(id: string, now?: Date): PendingAuthorizedAction;
+    markBrowserOpened(id: string, now?: Date): PendingAuthorizedAction;
+    markExecuting(id: string, now?: Date): PendingAuthorizedAction;
+    markCompleted(id: string, result: JsonValue, now?: Date): PendingAuthorizedAction;
+    markFailed(id: string, errorCode: string, now?: Date): PendingAuthorizedAction;
+    private transition;
+    private update;
+    private ensureDirectory;
+    private recordPath;
+    private secretPath;
+    private writeRecord;
+    private writeSecret;
+    private atomicWrite;
+    private removeSecret;
+}
+export {};

package/dist/src/room/pending-authorized-actions.js

@@ -0,0 +1,3 @@
+import d from"node:crypto";import c from"node:fs";import m from"node:path";import{resolveShennianPath as b}from"../config/index.js";const u=/^[A-Za-z0-9_-]{8,128}$/,w=/^[a-z][a-z0-9_.-]{0,63}$/,S=/^[a-f0-9]{64}$/,f=new Set(["completed","failed","expired"]);class r extends Error{code;constructor(e,t){super(t),this.code=e,this.name="PendingAuthorizedActionError"}}function I(i){return l(i)}function _(i){return d.createHash("sha256").update(I(i),"utf8").digest("hex")}function v(i){return d.createHash("sha256").update(i,"utf8").digest("hex")}class k{directory;constructor(e=b("runtime","pending-authorized-actions")){this.directory=e}create(e){if(y(e.loginIntentId,"loginIntentId"),O(e.publicLoginUrl,e.loginIntentId),!w.test(e.actionType))throw new r("invalid_action_type","Invalid authorized action type.");if(!e.idempotencyKey.trim()||e.idempotencyKey.length>191)throw new r("invalid_idempotency_key","Invalid idempotency key.");if(e.deviceSecret.length<32||e.deviceSecret.length>256)throw new r("invalid_device_secret","Invalid device secret.");const t=new Date(e.expiresAt);if(!Number.isFinite(t.getTime()))throw new r("invalid_expiry","Invalid authorization expiry.");this.ensureDirectory();const n=x(e.actionPayload),o=_(n),a=this.list().find(p=>p.idempotencyKey===e.idempotencyKey);if(a){if(a.actionType!==e.actionType||a.actionPayloadHash!==o)throw new r("idempotency_payload_conflict","The idempotency key is already bound to a different action.");return a}const s=(e.now??new Date).toISOString(),h=e.id??d.randomUUID();y(h,"id");const g={schemaVersion:1,id:h,loginIntentId:e.loginIntentId,publicLoginUrl:e.publicLoginUrl,actionType:e.actionType,canonicalActionPayload:n,actionPayloadHash:o,idempotencyKey:e.idempotencyKey,deviceSecretHash:v(e.deviceSecret),status:"waiting_user",expiresAt:t.toISOString(),createdAt:s,updatedAt:s};this.writeSecret(h,e.deviceSecret);try{this.writeRecord(g)}catch(p){throw this.removeSecret(h),p}return g}get(e){y(e,"id");try{const t=this.recordPath(e),n=c.lstatSync(t);if(!n.isFile()||n.isSymbolicLink())throw new r("unsafe_pending_action","Pending action is not a regular file.");return A(JSON.parse(c.readFileSync(t,"utf8")))}catch(t){if(N(t))return null;throw t instanceof r?t:new r("corrupt_pending_action","Pending authorized action is corrupt.")}}list(){return this.ensureDirectory(),c.readdirSync(this.directory).filter(e=>e.endsWith(".json")&&!e.includes(".tmp-")).map(e=>this.get(e.slice(0,-5))).filter(e=>e!==null).sort((e,t)=>e.createdAt.localeCompare(t.createdAt))}findByIdempotencyKey(e){return this.list().find(t=>t.idempotencyKey===e)??null}listRecoverable(e=new Date){const t=[];for(const n of this.list())if(!f.has(n.status)){if(new Date(n.expiresAt)<=e){this.update(n.id,{status:"expired",errorCode:"authorization_expired"},e),this.removeSecret(n.id);continue}t.push(n)}return t}readDeviceSecret(e){const t=this.get(e);if(!t||f.has(t.status))throw new r("pending_action_unavailable","Pending action is unavailable.");let n;try{const o=this.secretPath(e),a=c.lstatSync(o);if(!a.isFile()||a.isSymbolicLink())throw new r("unsafe_device_secret","Device authorization secret is not a regular file.");n=c.readFileSync(o,"utf8").trim()}catch(o){throw o instanceof r?o:new r("device_secret_missing","Device authorization secret is missing.")}if(!$(n,t.deviceSecretHash))throw new r("device_secret_mismatch","Device authorization secret is invalid.");return n}markApproved(e,t=new Date){return this.transition(e,["waiting_user","approved"],"approved",{approvedAt:t.toISOString()},t)}markBrowserOpened(e,t=new Date){const n=this.get(e);if(!n)throw new r("pending_action_not_found","Pending action not found.");return n.browserOpenedAt||n.status!=="waiting_user"?n:this.update(e,{browserOpenedAt:t.toISOString()},t)}markExecuting(e,t=new Date){const n=this.transition(e,["approved"],"executing",{executingAt:t.toISOString()},t);return this.removeSecret(e),n}markCompleted(e,t,n=new Date){const o=this.transition(e,["executing","completed"],"completed",{completedAt:n.toISOString(),result:t,errorCode:void 0},n);return this.removeSecret(e),o}markFailed(e,t,n=new Date){const o=this.transition(e,["waiting_user","approved","executing","failed"],"failed",{failedAt:n.toISOString(),errorCode:t.slice(0,120)},n);return this.removeSecret(e),o}transition(e,t,n,o,a){const s=this.get(e);if(!s)throw new r("pending_action_not_found","Pending action not found.");if(!t.includes(s.status))throw new r("invalid_pending_action_transition",`Cannot transition ${s.status} to ${n}.`);return s.status===n&&f.has(n)?s:this.update(e,{...o,status:n},a)}update(e,t,n){const o=this.get(e);if(!o)throw new r("pending_action_not_found","Pending action not found.");const a=A({...o,...t,id:o.id,updatedAt:n.toISOString()});return this.writeRecord(a),a}ensureDirectory(){c.mkdirSync(this.directory,{recursive:!0,mode:448}),process.platform!=="win32"&&c.chmodSync(this.directory,448)}recordPath(e){return m.join(this.directory,`${e}.json`)}secretPath(e){return m.join(this.directory,`${e}.secret`)}writeRecord(e){this.atomicWrite(this.recordPath(e.id),`${JSON.stringify(e,null,2)}
+`)}writeSecret(e,t){this.atomicWrite(this.secretPath(e),`${t}
+`)}atomicWrite(e,t){this.ensureDirectory();const n=`${e}.tmp-${process.pid}-${d.randomBytes(6).toString("hex")}`;try{c.writeFileSync(n,t,{encoding:"utf8",mode:384,flag:"wx"}),process.platform!=="win32"&&c.chmodSync(n,384),c.renameSync(n,e),process.platform!=="win32"&&c.chmodSync(e,384)}finally{try{c.unlinkSync(n)}catch{}}}removeSecret(e){try{c.unlinkSync(this.secretPath(e))}catch{}}}function l(i){if(i===null||typeof i=="boolean"||typeof i=="string")return JSON.stringify(i);if(typeof i=="number"){if(!Number.isFinite(i))throw new r("invalid_action_payload","Numbers must be finite.");return JSON.stringify(i)}if(Array.isArray(i))return`[${i.map(l).join(",")}]`;if(typeof i!="object")throw new r("invalid_action_payload","Action payload must be JSON.");const e=Object.getPrototypeOf(i);if(e!==Object.prototype&&e!==null)throw new r("invalid_action_payload","Action payload must be plain JSON.");return`{${Object.keys(i).sort().map(t=>`${JSON.stringify(t)}:${l(i[t])}`).join(",")}}`}function x(i){return JSON.parse(l(i))}function y(i,e){if(!u.test(i))throw new r(`invalid_${e}`,`Invalid ${e}.`)}function A(i){if(!i||typeof i!="object")throw new r("corrupt_pending_action","Pending action must be an object.");const e=i;if(e.schemaVersion!==1||typeof e.id!="string"||!u.test(e.id)||typeof e.loginIntentId!="string"||!u.test(e.loginIntentId)||typeof e.publicLoginUrl!="string"||!P(e.publicLoginUrl,e.loginIntentId)||typeof e.actionType!="string"||!w.test(e.actionType)||typeof e.idempotencyKey!="string"||!e.idempotencyKey||typeof e.actionPayloadHash!="string"||!S.test(e.actionPayloadHash)||typeof e.deviceSecretHash!="string"||!S.test(e.deviceSecretHash)||!["waiting_user","approved","executing","completed","failed","expired"].includes(e.status??"")||typeof e.expiresAt!="string"||!Number.isFinite(new Date(e.expiresAt).getTime())||typeof e.createdAt!="string"||typeof e.updatedAt!="string")throw new r("corrupt_pending_action","Pending action has invalid fields.");if(e.browserOpenedAt!==void 0&&(typeof e.browserOpenedAt!="string"||!Number.isFinite(new Date(e.browserOpenedAt).getTime())))throw new r("corrupt_pending_action","Pending action has invalid browser state.");if(_(e.canonicalActionPayload)!==e.actionPayloadHash)throw new r("action_payload_tampered","Pending action payload hash mismatch.");return e}function O(i,e){if(!P(i,e))throw new r("invalid_public_login_url","Invalid Shennian authorization URL.")}function P(i,e){try{const t=new URL(i);return t.pathname!==`/authorize/${e}`||t.search||t.hash?!1:t.protocol==="https:"&&(t.hostname==="shennian.net"||t.hostname.endsWith(".shennian.net"))?!0:t.protocol==="http:"&&D(t.hostname)}catch{return!1}}function D(i){return i==="127.0.0.1"||i==="localhost"||i==="::1"||/^10\./.test(i)||/^192\.168\./.test(i)||/^172\.(1[6-9]|2\d|3[0-1])\./.test(i)}function $(i,e){const t=Buffer.from(v(i),"hex"),n=Buffer.from(e,"hex");return t.length===n.length&&d.timingSafeEqual(t,n)}function N(i){return typeof i=="object"&&i!==null&&"code"in i&&i.code==="ENOENT"}export{r as PendingAuthorizedActionError,k as PendingAuthorizedActionStore,I as canonicalizeActionPayload,_ as hashActionPayload,v as hashPendingDeviceSecret};