shennian 0.3.84 → 0.3.86

package/dist/src/native-fusion/session-header.js

@@ -1,2 +1,101 @@
-import a from"node:fs";import{readTimestamp as d,safeParse as g}from"./parser-common.js";const S=1024*1024,b=64;function j(t){if(t.endsWith(".opencode-session.json"))return h(t);const s=A(t);if(s.length===0)return{status:"pending"};const e=a.statSync(t);if(t.split(/[\\/]+/).includes(".codex")){const n=s.find(y=>y.type==="session_meta");if(!n)return{status:"pending"};const c=p(n.payload),u=d(n.timestamp)??d(c?.timestamp)??f(e.birthtimeMs),m=typeof c?.id=="string"?c.id:"";return u&&m?{status:"ready",createdAtMs:u,sources:[{agentType:"codex",sourceSessionKey:m}]}:{status:"pending"}}const o=s.map(n=>d(n.timestamp)).find(n=>n!=null)??f(e.birthtimeMs),r=M(t);return o&&r?{status:"ready",createdAtMs:o,sources:[{agentType:"claude",sourceSessionKey:r}]}:{status:"pending"}}function h(t){let s;try{s=JSON.parse(a.readFileSync(t,"utf8"))}catch{return{status:"pending"}}const e=p(s);if(!e||!Array.isArray(e.sessions)||e.sessions.length===0)return{status:"pending"};const i={};for(const r of e.sessions){const n=p(r),c=typeof n?.id=="string"?n.id:"",u=l(n?.time_created);c&&u&&(i[c]=u)}const o=Object.values(i);return o.length===0?{status:"pending"}:{status:"ready",createdAtMs:Math.min(...o),sourceCreatedAtByKey:i,sources:Object.keys(i).map(r=>({agentType:"opencode",sourceSessionKey:r}))}}function M(t){const s=t.replace(/\\/g,"/"),e=s.slice(s.lastIndexOf("/")+1);return e.endsWith(".jsonl")?e.slice(0,-6):e}function A(t){const s=a.openSync(t,"r");try{const e=Math.min(a.fstatSync(s).size,S);if(e===0)return[];const i=Buffer.allocUnsafe(e),o=a.readSync(s,i,0,e,0);return i.subarray(0,o).toString("utf8").split(`
-`).slice(0,b).map(r=>g(r)).filter(r=>r!=null)}finally{a.closeSync(s)}}function p(t){return typeof t=="object"&&t!==null?t:null}function f(t){return Number.isFinite(t)&&t>0?t:null}function R(t){return l(t)}function l(t){return typeof t!="number"||!Number.isFinite(t)||t<=0?null:t<1e10?Math.round(t*1e3):Math.round(t)}export{j as inspectNativeSessionFile,R as normalizeNativeTimestamp};
+// @arch docs/architecture/cli/native-session-fusion.md#5-持久同步纪元未知文件分类5-分钟元数据兜底与轮次边界
+// @test src/__tests__/native-fusion-parsers.test.ts
+import fs from 'node:fs';
+import { readTimestamp, safeParse } from './parser-common.js';
+const MAX_HEADER_BYTES = 1024 * 1024;
+const MAX_HEADER_RECORDS = 64;
+export function inspectNativeSessionFile(filePath) {
+    if (filePath.endsWith('.opencode-session.json'))
+        return inspectOpenCodeSnapshot(filePath);
+    const records = readHeaderRecords(filePath);
+    if (records.length === 0)
+        return { status: 'pending' };
+    const stat = fs.statSync(filePath);
+    if (filePath.split(/[\\/]+/).includes('.codex')) {
+        const meta = records.find((record) => record.type === 'session_meta');
+        if (!meta)
+            return { status: 'pending' };
+        const payload = objectRecord(meta.payload);
+        const createdAtMs = readTimestamp(meta.timestamp)
+            ?? readTimestamp(payload?.timestamp)
+            ?? validBirthtime(stat.birthtimeMs);
+        const sourceSessionKey = typeof payload?.id === 'string' ? payload.id : '';
+        return createdAtMs && sourceSessionKey
+            ? { status: 'ready', createdAtMs, sources: [{ agentType: 'codex', sourceSessionKey }] }
+            : { status: 'pending' };
+    }
+    const firstTimestamp = records.map((record) => readTimestamp(record.timestamp)).find((value) => value != null);
+    const createdAtMs = firstTimestamp ?? validBirthtime(stat.birthtimeMs);
+    const sourceSessionKey = pathBasenameWithoutJsonl(filePath);
+    return createdAtMs && sourceSessionKey
+        ? { status: 'ready', createdAtMs, sources: [{ agentType: 'claude', sourceSessionKey }] }
+        : { status: 'pending' };
+}
+function inspectOpenCodeSnapshot(filePath) {
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
+    }
+    catch {
+        return { status: 'pending' };
+    }
+    const root = objectRecord(parsed);
+    if (!root || !Array.isArray(root.sessions) || root.sessions.length === 0)
+        return { status: 'pending' };
+    const sourceCreatedAtByKey = {};
+    for (const value of root.sessions) {
+        const session = objectRecord(value);
+        const id = typeof session?.id === 'string' ? session.id : '';
+        const createdAtMs = normalizeNumericTimestamp(session?.time_created);
+        if (id && createdAtMs)
+            sourceCreatedAtByKey[id] = createdAtMs;
+    }
+    const timestamps = Object.values(sourceCreatedAtByKey);
+    if (timestamps.length === 0)
+        return { status: 'pending' };
+    return {
+        status: 'ready',
+        createdAtMs: Math.min(...timestamps),
+        sourceCreatedAtByKey,
+        sources: Object.keys(sourceCreatedAtByKey).map((sourceSessionKey) => ({
+            agentType: 'opencode',
+            sourceSessionKey,
+        })),
+    };
+}
+function pathBasenameWithoutJsonl(filePath) {
+    const normalized = filePath.replace(/\\/g, '/');
+    const basename = normalized.slice(normalized.lastIndexOf('/') + 1);
+    return basename.endsWith('.jsonl') ? basename.slice(0, -'.jsonl'.length) : basename;
+}
+function readHeaderRecords(filePath) {
+    const descriptor = fs.openSync(filePath, 'r');
+    try {
+        const size = Math.min(fs.fstatSync(descriptor).size, MAX_HEADER_BYTES);
+        if (size === 0)
+            return [];
+        const buffer = Buffer.allocUnsafe(size);
+        const bytesRead = fs.readSync(descriptor, buffer, 0, size, 0);
+        return buffer.subarray(0, bytesRead).toString('utf8').split('\n')
+            .slice(0, MAX_HEADER_RECORDS)
+            .map((line) => safeParse(line))
+            .filter((record) => record != null);
+    }
+    finally {
+        fs.closeSync(descriptor);
+    }
+}
+function objectRecord(value) {
+    return typeof value === 'object' && value !== null ? value : null;
+}
+function validBirthtime(value) {
+    return Number.isFinite(value) && value > 0 ? value : null;
+}
+export function normalizeNativeTimestamp(value) {
+    return normalizeNumericTimestamp(value);
+}
+function normalizeNumericTimestamp(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0)
+        return null;
+    return value < 10_000_000_000 ? Math.round(value * 1000) : Math.round(value);
+}

package/dist/src/native-fusion/state.js

@@ -1,2 +1,104 @@
-import d from"node:crypto";import r from"node:fs";import p from"node:path";import{resolvePersonalSyncV1Path as y}from"../personal-sync/paths.js";import{getDaemonInstallationId as a}from"../session/store.js";import{readPersonalDataEpochMarker as m}from"../personal-sync/epoch.js";import{NATIVE_SCANNER_STATE_SCHEMA_VERSION as f}from"./types.js";function l(){return y("native-fusion-state.json")}function N(){const e=l(),t=a();if(!r.existsSync(e)){const n=m()?.epochStartedAt,i={schemaVersion:f,fusionEpochMs:n?Date.parse(n):Date.now(),daemonInstallationId:t,files:{}};return u(e,i),i}let o;try{o=JSON.parse(r.readFileSync(e,"utf8"))}catch(n){throw new Error(`native fusion v1 state is unreadable: ${e}`,{cause:n})}return s(o,t),o}function g(e){const t=a();s(e,t);const o=l();if(r.existsSync(o)){const n=JSON.parse(r.readFileSync(o,"utf8"));if(s(n,t),n.fusionEpochMs!==e.fusionEpochMs)throw new Error("native fusion epoch is immutable")}u(o,e)}function s(e,t){if(!e||e.schemaVersion!==f||!Number.isSafeInteger(e.fusionEpochMs)||e.fusionEpochMs<=0||e.daemonInstallationId!==t||!e.files||typeof e.files!="object"||Array.isArray(e.files))throw new Error("invalid native fusion v1 state");for(const o of Object.values(e.files)){if(o.daemonInstallationId!==t)throw new Error("native fusion cursor belongs to another daemon installation");if(o.sources!==void 0&&(!Array.isArray(o.sources)||o.sources.some(n=>!n||!["codex","claude","opencode"].includes(n.agentType)||typeof n.sourceSessionKey!="string"||!n.sourceSessionKey)))throw new Error("native fusion cursor has invalid source metadata")}}function u(e,t){const o=p.dirname(e);r.mkdirSync(o,{recursive:!0,mode:448});const n=`${e}.tmp-${process.pid}-${d.randomBytes(6).toString("hex")}`;let i;try{if(i=r.openSync(n,"wx",384),r.writeFileSync(i,`${JSON.stringify(t,null,2)}
-`,"utf8"),r.fsyncSync(i),r.closeSync(i),i=void 0,r.renameSync(n,e),process.platform!=="win32"){const c=r.openSync(o,"r");try{r.fsyncSync(c)}finally{r.closeSync(c)}}}finally{i!==void 0&&r.closeSync(i);try{r.unlinkSync(n)}catch{}}}export{N as loadNativeScannerState,g as saveNativeScannerState};
+// @arch docs/architecture/cli/native-session-fusion.md#5-持久同步纪元未知文件分类5-分钟元数据兜底与轮次边界
+// @test src/__tests__/native-fusion-state.test.ts
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { resolvePersonalSyncV1Path } from '../personal-sync/paths.js';
+import { getDaemonInstallationId } from '../session/store.js';
+import { readPersonalDataEpochMarker } from '../personal-sync/epoch.js';
+import { NATIVE_SCANNER_STATE_SCHEMA_VERSION, } from './types.js';
+function stateFile() {
+    return resolvePersonalSyncV1Path('native-fusion-state.json');
+}
+export function loadNativeScannerState() {
+    const file = stateFile();
+    const daemonInstallationId = getDaemonInstallationId();
+    if (!fs.existsSync(file)) {
+        const epochStartedAt = readPersonalDataEpochMarker()?.epochStartedAt;
+        const created = {
+            schemaVersion: NATIVE_SCANNER_STATE_SCHEMA_VERSION,
+            fusionEpochMs: epochStartedAt ? Date.parse(epochStartedAt) : Date.now(),
+            daemonInstallationId,
+            files: {},
+        };
+        atomicWriteJson(file, created);
+        return created;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch (cause) {
+        throw new Error(`native fusion v1 state is unreadable: ${file}`, { cause });
+    }
+    validateState(parsed, daemonInstallationId);
+    return parsed;
+}
+export function saveNativeScannerState(state) {
+    const daemonInstallationId = getDaemonInstallationId();
+    validateState(state, daemonInstallationId);
+    const file = stateFile();
+    if (fs.existsSync(file)) {
+        const persisted = JSON.parse(fs.readFileSync(file, 'utf8'));
+        validateState(persisted, daemonInstallationId);
+        if (persisted.fusionEpochMs !== state.fusionEpochMs) {
+            throw new Error('native fusion epoch is immutable');
+        }
+    }
+    atomicWriteJson(file, state);
+}
+function validateState(state, daemonInstallationId) {
+    if (!state
+        || state.schemaVersion !== NATIVE_SCANNER_STATE_SCHEMA_VERSION
+        || !Number.isSafeInteger(state.fusionEpochMs)
+        || state.fusionEpochMs <= 0
+        || state.daemonInstallationId !== daemonInstallationId
+        || !state.files
+        || typeof state.files !== 'object'
+        || Array.isArray(state.files)) {
+        throw new Error('invalid native fusion v1 state');
+    }
+    for (const cursor of Object.values(state.files)) {
+        if (cursor.daemonInstallationId !== daemonInstallationId) {
+            throw new Error('native fusion cursor belongs to another daemon installation');
+        }
+        if (cursor.sources !== undefined && (!Array.isArray(cursor.sources)
+            || cursor.sources.some((source) => (!source
+                || !['codex', 'claude', 'opencode'].includes(source.agentType)
+                || typeof source.sourceSessionKey !== 'string'
+                || !source.sourceSessionKey)))) {
+            throw new Error('native fusion cursor has invalid source metadata');
+        }
+    }
+}
+function atomicWriteJson(file, value) {
+    const directory = path.dirname(file);
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const temp = `${file}.tmp-${process.pid}-${crypto.randomBytes(6).toString('hex')}`;
+    let descriptor;
+    try {
+        descriptor = fs.openSync(temp, 'wx', 0o600);
+        fs.writeFileSync(descriptor, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+        fs.fsyncSync(descriptor);
+        fs.closeSync(descriptor);
+        descriptor = undefined;
+        fs.renameSync(temp, file);
+        if (process.platform !== 'win32') {
+            const directoryDescriptor = fs.openSync(directory, 'r');
+            try {
+                fs.fsyncSync(directoryDescriptor);
+            }
+            finally {
+                fs.closeSync(directoryDescriptor);
+            }
+        }
+    }
+    finally {
+        if (descriptor !== undefined)
+            fs.closeSync(descriptor);
+        try {
+            fs.unlinkSync(temp);
+        }
+        catch { }
+    }
+}

package/dist/src/native-fusion/types.js

@@ -1 +1 @@
-const E=1;export{E as NATIVE_SCANNER_STATE_SCHEMA_VERSION};
+export const NATIVE_SCANNER_STATE_SCHEMA_VERSION = 1;

package/dist/src/personal-sync/machine-authority.js

@@ -1 +1,34 @@
-import{SESSION_SYNC_DATA_EPOCH as r}from"@shennian/wire";import{loadConfig as i,saveConfig as t}from"../config/index.js";import{getDaemonInstallationId as h}from"./identity.js";async function d(e){const n=await(e.fetchImpl??fetch)(`${e.serverUrl.replace(/\/+$/,"")}/api/machines/identity`,{headers:{Authorization:`Bearer ${e.machineToken}`},signal:AbortSignal.timeout(1e4)});if(!n.ok)throw new Error(`machine_personal_authority_unavailable:${n.status}`);const a=await n.json();if(typeof a.machineId!="string"||!a.machineId||typeof a.daemonInstallationId!="string"||!a.daemonInstallationId||typeof a.dataEpoch!="number"||!Number.isSafeInteger(a.dataEpoch))throw new Error("machine_personal_authority_invalid_response");if(e.machineId&&a.machineId!==e.machineId)throw new Error("machine_personal_authority_machine_mismatch");if(a.daemonInstallationId!==h())throw new Error("machine_personal_authority_daemon_mismatch");if(a.dataEpoch!==r)throw new Error("machine_personal_authority_epoch_mismatch");const o=i();return o.machineId!==a.machineId&&t({...o,machineId:a.machineId}),a}export{d as synchronizeMachinePersonalAuthority};
+// @arch docs/features/machine-owned-personal-session-authority.md#三权威归属模型
+// @test src/__tests__/personal-sync-account-namespace.test.ts
+import { SESSION_SYNC_DATA_EPOCH } from '@shennian/wire';
+import { loadConfig, saveConfig } from '../config/index.js';
+import { getDaemonInstallationId } from './identity.js';
+export async function synchronizeMachinePersonalAuthority(input) {
+    const response = await (input.fetchImpl ?? fetch)(`${input.serverUrl.replace(/\/+$/, '')}/api/machines/identity`, {
+        headers: { Authorization: `Bearer ${input.machineToken}` },
+        signal: AbortSignal.timeout(10_000),
+    });
+    if (!response.ok)
+        throw new Error(`machine_personal_authority_unavailable:${response.status}`);
+    const body = await response.json();
+    if (typeof body.machineId !== 'string' || !body.machineId
+        || typeof body.daemonInstallationId !== 'string' || !body.daemonInstallationId
+        || typeof body.dataEpoch !== 'number' || !Number.isSafeInteger(body.dataEpoch))
+        throw new Error('machine_personal_authority_invalid_response');
+    if (input.machineId && body.machineId !== input.machineId) {
+        throw new Error('machine_personal_authority_machine_mismatch');
+    }
+    if (body.daemonInstallationId !== getDaemonInstallationId()) {
+        throw new Error('machine_personal_authority_daemon_mismatch');
+    }
+    if (body.dataEpoch !== SESSION_SYNC_DATA_EPOCH) {
+        throw new Error('machine_personal_authority_epoch_mismatch');
+    }
+    const config = loadConfig();
+    if (config.machineId !== body.machineId) {
+        // accountNamespaceId is deliberately left untouched as legacy pairing
+        // metadata. It never selects, clears, or authorizes personal storage.
+        saveConfig({ ...config, machineId: body.machineId });
+    }
+    return body;
+}

package/dist/src/room/activation-audit.js

@@ -1,2 +1,45 @@
-import i from"node:fs";import n from"node:path";import{resolveShennianPath as a}from"../config/index.js";class f{root;constructor(o=a("rooms")){this.root=o}record(o){for(const t of[o.roomId,o.bindingId,o.causeMessageId,o.rootCauseMessageId])if(!/^[A-Za-z0-9_.:@-]{1,191}$/.test(t))throw new Error("invalid_room_activation_audit_id");if(!Number.isInteger(o.hopCount)||o.hopCount<0||o.hopCount>32)throw new Error("invalid_room_activation_audit_hop");const r=n.join(this.root,o.roomId);if(i.mkdirSync(this.root,{recursive:!0,mode:448}),i.existsSync(r)){const t=i.lstatSync(r);if(!t.isDirectory()||t.isSymbolicLink())throw new Error("unsafe_room_activation_audit_path")}else i.mkdirSync(r,{mode:448});process.platform!=="win32"&&i.chmodSync(r,448);const s=n.join(r,"activation-audit.jsonl");if(i.existsSync(s)){const t=i.lstatSync(s);if(!t.isFile()||t.isSymbolicLink())throw new Error("unsafe_room_activation_audit_path")}i.appendFileSync(s,`${JSON.stringify({schemaVersion:1,...o,at:(o.at??new Date).toISOString()})}
-`,{encoding:"utf8",mode:384}),process.platform!=="win32"&&i.chmodSync(s,384)}}export{f as RoomActivationAudit};
+// @arch docs/features/network-rooms/core-data-and-security-decisions.md#四默认自动接收不使用-manual-作为正常模式
+// @test src/__tests__/room-activation-audit.test.ts
+import fs from 'node:fs';
+import path from 'node:path';
+import { resolveShennianPath } from '../config/index.js';
+export class RoomActivationAudit {
+    root;
+    constructor(root = resolveShennianPath('rooms')) {
+        this.root = root;
+    }
+    record(event) {
+        for (const value of [event.roomId, event.bindingId, event.causeMessageId, event.rootCauseMessageId]) {
+            if (!/^[A-Za-z0-9_.:@-]{1,191}$/.test(value))
+                throw new Error('invalid_room_activation_audit_id');
+        }
+        if (!Number.isInteger(event.hopCount) || event.hopCount < 0 || event.hopCount > 32) {
+            throw new Error('invalid_room_activation_audit_hop');
+        }
+        const directory = path.join(this.root, event.roomId);
+        fs.mkdirSync(this.root, { recursive: true, mode: 0o700 });
+        if (fs.existsSync(directory)) {
+            const stat = fs.lstatSync(directory);
+            if (!stat.isDirectory() || stat.isSymbolicLink())
+                throw new Error('unsafe_room_activation_audit_path');
+        }
+        else {
+            fs.mkdirSync(directory, { mode: 0o700 });
+        }
+        if (process.platform !== 'win32')
+            fs.chmodSync(directory, 0o700);
+        const file = path.join(directory, 'activation-audit.jsonl');
+        if (fs.existsSync(file)) {
+            const stat = fs.lstatSync(file);
+            if (!stat.isFile() || stat.isSymbolicLink())
+                throw new Error('unsafe_room_activation_audit_path');
+        }
+        fs.appendFileSync(file, `${JSON.stringify({
+            schemaVersion: 1,
+            ...event,
+            at: (event.at ?? new Date()).toISOString(),
+        })}\n`, { encoding: 'utf8', mode: 0o600 });
+        if (process.platform !== 'win32')
+            fs.chmodSync(file, 0o600);
+    }
+}

package/dist/src/room/activation-policy.js

@@ -1 +1,30 @@
-function l(i,a){if(i.deletedAt||i.kind==="system")return[];const n=new Set((i.mentions??[]).filter(e=>e.principalType==="agent").map(e=>e.membershipId)),t=a.filter(d);return i.author.principalType==="agent"?t.filter(e=>e.binding.agentMembershipId!==i.author.membershipId&&n.has(e.binding.agentMembershipId)).map(e=>({registration:e,cause:"explicit_mention"})):n.size>0?t.filter(e=>n.has(e.binding.agentMembershipId)).map(e=>({registration:e,cause:"explicit_mention"})):t.filter(e=>e.binding.activationMode==="auto_follow").map(e=>({registration:e,cause:"human_message"}))}function d(i){return!!(i.lifecycleState!=="closed"&&i.binding?.status==="active"&&i.binding.activationMode!=="paused"&&i.binding.agentMembershipId)}export{l as selectRoomActivationTargets};
+// @arch docs/features/network-rooms/core-data-and-security-decisions.md#五触发语义
+// @test src/__tests__/room-activation-policy.test.ts
+export function selectRoomActivationTargets(message, registrations) {
+    if (message.deletedAt || message.kind === 'system')
+        return [];
+    const mentionedAgents = new Set((message.mentions ?? [])
+        .filter((mention) => mention.principalType === 'agent')
+        .map((mention) => mention.membershipId));
+    const eligible = registrations.filter(isEligible);
+    if (message.author.principalType === 'agent') {
+        return eligible
+            .filter((registration) => registration.binding.agentMembershipId !== message.author.membershipId &&
+            mentionedAgents.has(registration.binding.agentMembershipId))
+            .map((registration) => ({ registration, cause: 'explicit_mention' }));
+    }
+    if (mentionedAgents.size > 0) {
+        return eligible
+            .filter((registration) => mentionedAgents.has(registration.binding.agentMembershipId))
+            .map((registration) => ({ registration, cause: 'explicit_mention' }));
+    }
+    return eligible
+        .filter((registration) => registration.binding.activationMode === 'auto_follow')
+        .map((registration) => ({ registration, cause: 'human_message' }));
+}
+function isEligible(registration) {
+    return Boolean(registration.lifecycleState !== 'closed' &&
+        registration.binding?.status === 'active' &&
+        registration.binding.activationMode !== 'paused' &&
+        registration.binding.agentMembershipId);
+}

package/dist/src/room/activation-service.d.ts

@@ -21,6 +21,7 @@ export type RoomActivationContext = {
         displayName: string;
         description: string;
         sessionMode: SessionMode;
+        managerConfig?: import('@shennian/wire').ManagerConfig | null;
         permissionPolicy: ManagedAgentPermissionPolicy;
         permissionConfirmation: ManagedAgentPermissionConfirmation | null;
     }>;