shennian 0.3.73 → 0.3.74

package/node_modules/@shennian/wire/dist/session-sync.d.ts

@@ -21,9 +21,9 @@ export declare const SESSION_SYNC_REQUIRED_CAPABILITIES: readonly ["session_inde
  * epoch-wide minimum gate. This lets the App roll out background replication
  * while old daemons keep serving the compatible visible-session snapshot path.
  */
-export declare const SESSION_SYNC_ADDITIVE_CAPABILITIES: readonly ["session_body_replica_v1"];
-export declare const SESSION_SYNC_ADVERTISED_CAPABILITIES: readonly ["session_index_v1", "session_body_revision_v1", "session_history_subscription_v1", "local_canonical_v1", "session_title_authority_v1", "session_title_seed_v1", "session_tool_detail_v1", "voice_session_body_relay_v1", "native_source_tombstone_v1", "session_durable_send_v1", "daemon_installation_identity_v1", "session_user_boundary_v1", "session_terminal_outbox_v1", "session_list_preview_v1", "session_attention_v1", "session_data_epoch_v2", "session_structured_rejection_v2", "machine_personal_authority_v2", "session_body_replica_v1"];
-export declare const SESSION_SYNC_EVENT_NAMES: readonly ["session.index.updated", "session.body.delta"];
+export declare const SESSION_SYNC_ADDITIVE_CAPABILITIES: readonly ["session_body_replica_v1", "session_body_replica_stream_v1"];
+export declare const SESSION_SYNC_ADVERTISED_CAPABILITIES: readonly ["session_index_v1", "session_body_revision_v1", "session_history_subscription_v1", "local_canonical_v1", "session_title_authority_v1", "session_title_seed_v1", "session_tool_detail_v1", "voice_session_body_relay_v1", "native_source_tombstone_v1", "session_durable_send_v1", "daemon_installation_identity_v1", "session_user_boundary_v1", "session_terminal_outbox_v1", "session_list_preview_v1", "session_attention_v1", "session_data_epoch_v2", "session_structured_rejection_v2", "machine_personal_authority_v2", "session_body_replica_v1", "session_body_replica_stream_v1"];
+export declare const SESSION_SYNC_EVENT_NAMES: readonly ["session.index.updated", "session.body.delta", "session.body.replica.delta", "session.body.replica.error"];
 export declare const SESSION_HISTORY_LIMITS: {
     readonly defaultSnapshotMessages: 100;
     readonly maxSnapshotMessages: 500;
@@ -34,6 +34,7 @@ export declare const SESSION_HISTORY_LIMITS: {
     readonly maxReplicaPageBytes: number;
     readonly maxSubscriptionsPerClient: 4;
     readonly maxSubscriptionsPerSession: 8;
+    readonly maxReplicaStreamsPerDaemon: 8;
 };
 export type SessionSyncCapability = (typeof SESSION_SYNC_ADVERTISED_CAPABILITIES)[number];
 export type SessionSyncEventName = (typeof SESSION_SYNC_EVENT_NAMES)[number];
@@ -257,6 +258,55 @@ export type SessionHistorySyncPage = PersonalSyncIdentity & {
     hasMore: boolean;
     mutations: SessionBodyMutation[];
 };
+/**
+ * One foreground App installation owns at most one body replica stream for a
+ * daemon generation. The daemon registers the stream before capturing these
+ * high-water marks, so mutations committed during subscribe cannot be lost.
+ */
+export type SessionBodyReplicaSubscribeParams = PersonalSyncIdentity & {
+    appInstallationId: string;
+    streamId: string;
+    generation: number;
+};
+export type SessionBodyReplicaHighWater = {
+    sessionId: string;
+    bodyRevision: number;
+};
+export type SessionBodyReplicaSubscribeResponse = PersonalSyncIdentity & {
+    appInstallationId: string;
+    streamId: string;
+    generation: number;
+    highWatermarks: SessionBodyReplicaHighWater[];
+};
+export type SessionBodyReplicaUnsubscribeParams = PersonalSyncIdentity & {
+    appInstallationId: string;
+    streamId: string;
+    generation: number;
+};
+export type SessionBodyReplicaUnsubscribeResponse = PersonalSyncIdentity & {
+    appInstallationId: string;
+    streamId: string;
+    generation: number;
+    closed: true;
+};
+export type SessionBodyReplicaDeltaBatch = {
+    sessionId: string;
+    fromRevision: number;
+    toRevision: number;
+    mutations: SessionBodyMutation[];
+};
+export type SessionBodyReplicaDeltaEvent = PersonalSyncIdentity & {
+    appInstallationId: string;
+    streamId: string;
+    generation: number;
+    batches: SessionBodyReplicaDeltaBatch[];
+};
+export type SessionBodyReplicaErrorEvent = {
+    streamId: string;
+    generation?: number;
+    appInstallationId?: string;
+    rejection: SessionSyncRejection;
+};
 /**
  * Machine-authored personal-session projection. Ownership, machine display
  * fields and viewer permissions are server authority and therefore never

package/node_modules/@shennian/wire/dist/session-sync.js

@@ -1,4 +1,4 @@
-// @arch docs/architecture/data-sync.md#目标架构-v3
+// @arch docs/architecture/data-sync.md#8-app-级统一正文副本与列表发布屏障
 // @test src/__tests__/session-sync.test.ts
 export const SESSION_SYNC_PROTOCOL_VERSION = 2;
 /**
@@ -37,6 +37,7 @@ export const SESSION_SYNC_REQUIRED_CAPABILITIES = [
  */
 export const SESSION_SYNC_ADDITIVE_CAPABILITIES = [
     'session_body_replica_v1',
+    'session_body_replica_stream_v1',
 ];
 export const SESSION_SYNC_ADVERTISED_CAPABILITIES = [
     ...SESSION_SYNC_REQUIRED_CAPABILITIES,
@@ -45,6 +46,8 @@ export const SESSION_SYNC_ADVERTISED_CAPABILITIES = [
 export const SESSION_SYNC_EVENT_NAMES = [
     'session.index.updated',
     'session.body.delta',
+    'session.body.replica.delta',
+    'session.body.replica.error',
 ];
 export const SESSION_HISTORY_LIMITS = {
     defaultSnapshotMessages: 100,
@@ -56,6 +59,7 @@ export const SESSION_HISTORY_LIMITS = {
     maxReplicaPageBytes: 4 * 1024 * 1024,
     maxSubscriptionsPerClient: 4,
     maxSubscriptionsPerSession: 8,
+    maxReplicaStreamsPerDaemon: 8,
 };
 export const SESSION_TITLE_SOURCE_PRIORITY = {
     first_user_fallback: 0,

package/node_modules/@shennian/wire/dist/session.d.ts

@@ -56,6 +56,8 @@ export type AgentInfo = {
     config?: AgentConfigSummary;
     /** Non-secret runtime version and compatibility summary. */
     runtime?: AgentRuntimeSummary;
+    /** Conservative per-machine protection baseline; absent on older daemons. */
+    managedAgentProtection?: import('./agent-workspace.ts').ManagedAgentRuntimeProtection;
 };
 export type SessionMode = 'standard' | 'manager';
 export type ManagerConfig = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shennian",
-  "version": "0.3.73",
+  "version": "0.3.74",
   "description": "Shennian — AI Agent Control Plane CLI",
   "type": "module",
   "bin": {
@@ -57,6 +57,8 @@
   "scripts": {
     "build": "tsc && node -e \"require('node:fs').chmodSync('dist/bin/shennian.js', 0o755)\"",
     "build:publish": "pnpm --filter @shennian/wire build:publish && node -e \"const fs=require('node:fs'); fs.rmSync('dist', { recursive: true, force: true }); fs.rmSync('.tsbuildinfo.publish', { force: true })\" && tsc -p tsconfig.publish.json && node scripts/minify-publish-js.mjs && node -e \"require('node:fs').chmodSync('dist/bin/shennian.js', 0o755)\" && node scripts/check-publish-artifact.mjs",
+    "test:security:codex": "tsx scripts/verify-managed-codex-sandbox.ts",
+    "test:security:codex-tools": "tsx scripts/verify-managed-codex-dynamic-tools.ts",
     "dev": "tsc --watch"
   }
 }