shennian 0.3.84 → 0.3.86

package/dist/src/session/handlers/message-status.js

@@ -1 +1,15 @@
-import{getMessageDeliveryStatus as a}from"../store.js";import{assertPersonalSyncIdentity as n}from"../../personal-sync/epoch.js";function o(t,s){const e=s.params;if(n(e),!e.sessionId||!e.clientMessageId)throw new Error("sessionId and clientMessageId are required");t.client.sendRes({type:"res",id:s.id,ok:!0,payload:a(e.sessionId,e.clientMessageId)})}export{o as handleSessionMessageStatus};
+// @arch docs/architecture/data-sync.md#8-发送确认与离线边界
+// @test src/__tests__/session-store.test.ts
+import { getMessageDeliveryStatus } from '../store.js';
+import { assertPersonalSyncIdentity } from '../../personal-sync/epoch.js';
+export function handleSessionMessageStatus(runtime, req) {
+    const params = req.params;
+    assertPersonalSyncIdentity(params);
+    if (!params.sessionId || !params.clientMessageId) {
+        throw new Error('sessionId and clientMessageId are required');
+    }
+    runtime.client.sendRes({
+        type: 'res', id: req.id, ok: true,
+        payload: getMessageDeliveryStatus(params.sessionId, params.clientMessageId),
+    });
+}

package/dist/src/session/handlers/remote-access.js

@@ -1 +1,43 @@
-async function i(a,t,s){if(!t){await a.sendResAndWait({type:"res",id:s.id,ok:!1,error:"upgrade_required"}).catch(()=>{});return}try{const e=t.prepare();if(!e.autoStartDisabled)throw new Error(e.autoStartError?`remote_access_autostart_disable_failed: ${e.autoStartError}`:"remote_access_autostart_disable_failed");const r=await a.sendBufferedEvent({type:"event",id:`remote-access-paused-${s.id}`,event:"machine.remote-access.paused",payload:{disabledAt:e.disabledAt}},3e4),d=r&&typeof r.payload=="object"?r.payload:{remoteAccessDisabledAt:e.disabledAt};await a.sendResAndWait({type:"res",id:s.id,ok:!0,payload:d})}catch(e){await a.sendResAndWait({type:"res",id:s.id,ok:!1,error:e instanceof Error?e.message:String(e)}).catch(()=>{})}finally{t.isDisabled()&&t.shutdownAfterResponse()}}export{i as handleRemoteAccessPause};
+// @arch docs/features/platform-security-boundary-and-hardening-todo.md
+// @test src/__tests__/remote-access-pause.test.ts
+export async function handleRemoteAccessPause(client, controller, req) {
+    if (!controller) {
+        await client.sendResAndWait({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: 'upgrade_required',
+        }).catch(() => { });
+        return;
+    }
+    try {
+        const preparation = controller.prepare();
+        if (!preparation.autoStartDisabled) {
+            throw new Error(preparation.autoStartError
+                ? `remote_access_autostart_disable_failed: ${preparation.autoStartError}`
+                : 'remote_access_autostart_disable_failed');
+        }
+        const acknowledgement = await client.sendBufferedEvent({
+            type: 'event',
+            id: `remote-access-paused-${req.id}`,
+            event: 'machine.remote-access.paused',
+            payload: { disabledAt: preparation.disabledAt },
+        }, 30_000);
+        const payload = acknowledgement && typeof acknowledgement.payload === 'object'
+            ? acknowledgement.payload
+            : { remoteAccessDisabledAt: preparation.disabledAt };
+        await client.sendResAndWait({ type: 'res', id: req.id, ok: true, payload });
+    }
+    catch (error) {
+        await client.sendResAndWait({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: error instanceof Error ? error.message : String(error),
+        }).catch(() => { });
+    }
+    finally {
+        if (controller.isDisabled())
+            controller.shutdownAfterResponse();
+    }
+}

package/dist/src/session/handlers/room-managed.js

@@ -1 +1,101 @@
-import{isAvailableAgentType as S}from"@shennian/wire";const w=/^[A-Za-z0-9_.:@/-]{1,191}$/,f=new Set(["roomId","agentIdentityId","nianSessionId","assignmentIntentId","agentType"]),R=new Set(["roomId","bindingId","agentIdentityId","previousNianSessionId","nianSessionId","assignmentIntentId","agentType"]);async function T(e,t,n){if(!t)throw new Error("Managed Room binding is unavailable.");if(Object.keys(n.params).some(m=>!f.has(m)))throw new Error("Managed Room binding contains unsupported parameters.");const i=a(n.params.roomId,"roomId"),d=a(n.params.agentIdentityId,"agentIdentityId"),s=a(n.params.nianSessionId,"nianSessionId"),r=a(n.params.assignmentIntentId,"assignmentIntentId"),o=g(n.params.agentType);await c(e,s);const I=await t.bind({roomId:i,agentIdentityId:d,nianSessionId:s,assignmentIntentId:r,sourceSessionKey:p(s),agentType:o});e.client.sendRes({type:"res",id:n.id,ok:!0,payload:I})}async function b(e,t,n){if(!t)throw new Error("Managed Room binding is unavailable.");if(Object.keys(n.params).some(u=>!R.has(u)))throw new Error("Managed Room restart contains unsupported parameters.");const i=a(n.params.roomId,"roomId"),d=a(n.params.bindingId,"bindingId"),s=a(n.params.agentIdentityId,"agentIdentityId"),r=a(n.params.previousNianSessionId,"previousNianSessionId"),o=a(n.params.nianSessionId,"nianSessionId"),I=a(n.params.assignmentIntentId,"assignmentIntentId"),m=g(n.params.agentType);await c(e,o);const y=await t.restart({roomId:i,bindingId:d,agentIdentityId:s,previousNianSessionId:r,nianSessionId:o,assignmentIntentId:I,sourceSessionKey:p(o),agentType:m});e.client.sendRes({type:"res",id:n.id,ok:!0,payload:y})}function a(e,t){if(typeof e!="string"||!w.test(e))throw new Error(`Invalid ${t}.`);return e}function g(e){if(typeof e!="string"||!S(e)||e==="manager"||e==="pi"||e==="openclaw")throw new Error("managed_agent_runtime_unsupported");return e}function p(e){return`managed:${e}`}async function c(e,t){const n=e.sessions.get(t);n&&(e.sessions.delete(t),n.managedRoomContextToken&&(e.revokeManagedRoomContextToken?.(n.managedRoomContextToken),n.managedRoomContextToken=null),n.heartbeatTimer&&clearInterval(n.heartbeatTimer),n.adapter.removeAllListeners(),await n.adapter.stop())}export{T as handleManagedRoomBind,b as handleManagedRoomRestart};
+// @arch docs/features/network-rooms/multi-session-client-and-room-panel.md
+// @test src/__tests__/managed-room-binding.test.ts
+import { isAvailableAgentType } from '@shennian/wire';
+const SAFE_ID = /^[A-Za-z0-9_.:@/-]{1,191}$/;
+const BIND_PARAMS = new Set([
+    'roomId',
+    'agentIdentityId',
+    'nianSessionId',
+    'assignmentIntentId',
+    'agentType',
+]);
+const RESTART_PARAMS = new Set([
+    'roomId',
+    'bindingId',
+    'agentIdentityId',
+    'previousNianSessionId',
+    'nianSessionId',
+    'assignmentIntentId',
+    'agentType',
+]);
+export async function handleManagedRoomBind(runtime, binder, req) {
+    if (!binder)
+        throw new Error('Managed Room binding is unavailable.');
+    if (Object.keys(req.params).some((key) => !BIND_PARAMS.has(key))) {
+        throw new Error('Managed Room binding contains unsupported parameters.');
+    }
+    const roomId = requireId(req.params.roomId, 'roomId');
+    const agentIdentityId = requireId(req.params.agentIdentityId, 'agentIdentityId');
+    const nianSessionId = requireId(req.params.nianSessionId, 'nianSessionId');
+    const assignmentIntentId = requireId(req.params.assignmentIntentId, 'assignmentIntentId');
+    const agentType = requireManagedAgentType(req.params.agentType);
+    await discardPreBindingSession(runtime, nianSessionId);
+    const result = await binder.bind({
+        roomId,
+        agentIdentityId,
+        nianSessionId,
+        assignmentIntentId,
+        sourceSessionKey: managedSourceSessionKey(nianSessionId),
+        agentType,
+    });
+    runtime.client.sendRes({ type: 'res', id: req.id, ok: true, payload: result });
+}
+export async function handleManagedRoomRestart(runtime, binder, req) {
+    if (!binder)
+        throw new Error('Managed Room binding is unavailable.');
+    if (Object.keys(req.params).some((key) => !RESTART_PARAMS.has(key))) {
+        throw new Error('Managed Room restart contains unsupported parameters.');
+    }
+    const roomId = requireId(req.params.roomId, 'roomId');
+    const bindingId = requireId(req.params.bindingId, 'bindingId');
+    const agentIdentityId = requireId(req.params.agentIdentityId, 'agentIdentityId');
+    const previousNianSessionId = requireId(req.params.previousNianSessionId, 'previousNianSessionId');
+    const nianSessionId = requireId(req.params.nianSessionId, 'nianSessionId');
+    const assignmentIntentId = requireId(req.params.assignmentIntentId, 'assignmentIntentId');
+    const agentType = requireManagedAgentType(req.params.agentType);
+    await discardPreBindingSession(runtime, nianSessionId);
+    const result = await binder.restart({
+        roomId,
+        bindingId,
+        agentIdentityId,
+        previousNianSessionId,
+        nianSessionId,
+        assignmentIntentId,
+        sourceSessionKey: managedSourceSessionKey(nianSessionId),
+        agentType,
+    });
+    runtime.client.sendRes({ type: 'res', id: req.id, ok: true, payload: result });
+}
+function requireId(value, field) {
+    if (typeof value !== 'string' || !SAFE_ID.test(value)) {
+        throw new Error(`Invalid ${field}.`);
+    }
+    return value;
+}
+function requireManagedAgentType(value) {
+    if (typeof value !== 'string' ||
+        !isAvailableAgentType(value) ||
+        value === 'manager' ||
+        value === 'pi' ||
+        value === 'openclaw') {
+        throw new Error('managed_agent_runtime_unsupported');
+    }
+    return value;
+}
+function managedSourceSessionKey(nianSessionId) {
+    return `managed:${nianSessionId}`;
+}
+async function discardPreBindingSession(runtime, nianSessionId) {
+    const session = runtime.sessions.get(nianSessionId);
+    if (!session)
+        return;
+    runtime.sessions.delete(nianSessionId);
+    if (session.managedRoomContextToken) {
+        runtime.revokeManagedRoomContextToken?.(session.managedRoomContextToken);
+        session.managedRoomContextToken = null;
+    }
+    if (session.heartbeatTimer)
+        clearInterval(session.heartbeatTimer);
+    session.adapter.removeAllListeners();
+    await session.adapter.stop();
+}

package/dist/src/session/handlers/session-refresh.js

@@ -1 +1,35 @@
-async function a(s,e){const n=e.params;if(!n.sessionId){s.client.sendRes({type:"res",id:e.id,ok:!1,error:"sessionId is required"});return}if(!s.nativeFusion){s.client.sendRes({type:"res",id:e.id,ok:!0,payload:{scanned:!1}});return}await s.nativeFusion.scanNow(),s.client.sendRes({type:"res",id:e.id,ok:!0,payload:{scanned:!0,sessionId:n.sessionId,agentType:n.agentType??null,agentSessionId:n.agentSessionId??null}})}export{a as handleSessionRefresh};
+// @arch docs/architecture/cli/native-session-fusion.md
+// @test src/__tests__/session-manager.test.ts
+export async function handleSessionRefresh(runtime, req) {
+    const params = req.params;
+    if (!params.sessionId) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: 'sessionId is required',
+        });
+        return;
+    }
+    if (!runtime.nativeFusion) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: { scanned: false },
+        });
+        return;
+    }
+    await runtime.nativeFusion.scanNow();
+    runtime.client.sendRes({
+        type: 'res',
+        id: req.id,
+        ok: true,
+        payload: {
+            scanned: true,
+            sessionId: params.sessionId,
+            agentType: params.agentType ?? null,
+            agentSessionId: params.agentSessionId ?? null,
+        },
+    });
+}

package/dist/src/session/handlers/title.js

@@ -1 +1,79 @@
-import{createAgent as y}from"../../agents/adapter.js";import{buildManagedAgentEnv as f}from"../../agents/config-status.js";import{recordSession as g}from"../store.js";import{requestSessionIndexPublish as m}from"../index-publisher.js";import{assertPersonalSyncIdentity as S}from"../../personal-sync/epoch.js";function o(e){return typeof e=="string"?e.trim():""}async function R(e,i){const t=i.params;S(t);const r=o(t.sessionId),d=o(t.title),n=o(t.agentSessionId),c=o(t.agentType),l=o(t.workDir)||process.cwd(),u=o(t.titleOriginEventId),p=t.titleRevision;if(!r||!d||!c||t.titleSource!=="shennian_manual"||!Number.isSafeInteger(p)||Number(p)<1||!u){e.client.sendRes({type:"res",id:i.id,ok:!1,error:"explicit shennian_manual title authority is required"});return}if(g({sessionId:r,agentType:c,workDir:l,agentSessionId:n||null,title:d,titleSource:"shennian_manual",titleRevision:Number(p),titleLockedByUser:!0,titleOriginEventId:u}),m(e.client),c!=="codex"||!n){e.client.sendRes({type:"res",id:i.id,ok:!0,payload:{localApplied:!0,nativeWriteback:"unsupported"}});return}const s=e.sessions.get(r);if(s?.agentType==="codex"&&s.adapter.setTitle){await s.adapter.setTitle(n,d,s.workDir||l),s.agentSessionId=n,s.lastActiveAt=Date.now(),e.client.sendRes({type:"res",id:i.id,ok:!0,payload:{synced:!0}});return}const a=y("codex");if(!a?.setTitle){e.client.sendRes({type:"res",id:i.id,ok:!1,error:"Codex adapter does not support title sync"});return}a.configure?.({sessionId:r,env:f("codex")});try{await a.start(r,l,n),await a.setTitle(n,d,l),e.client.sendRes({type:"res",id:i.id,ok:!0,payload:{synced:!0}})}finally{await a.stop().catch(()=>{})}}export{R as handleSessionTitleSet};
+// @arch docs/architecture/cli/daemon.md#会话管理
+// @test src/__tests__/session-manager.test.ts
+import { createAgent } from '../../agents/adapter.js';
+import { buildManagedAgentEnv } from '../../agents/config-status.js';
+import { recordSession } from '../store.js';
+import { requestSessionIndexPublish } from '../index-publisher.js';
+import { assertPersonalSyncIdentity } from '../../personal-sync/epoch.js';
+function cleanString(value) {
+    return typeof value === 'string' ? value.trim() : '';
+}
+export async function handleSessionTitleSet(runtime, req) {
+    const params = req.params;
+    assertPersonalSyncIdentity(params);
+    const sessionId = cleanString(params.sessionId);
+    const title = cleanString(params.title);
+    const agentSessionId = cleanString(params.agentSessionId);
+    const agentType = cleanString(params.agentType);
+    const workDir = cleanString(params.workDir) || process.cwd();
+    const titleOriginEventId = cleanString(params.titleOriginEventId);
+    const titleRevision = params.titleRevision;
+    if (!sessionId || !title || !agentType || params.titleSource !== 'shennian_manual'
+        || !Number.isSafeInteger(titleRevision) || Number(titleRevision) < 1 || !titleOriginEventId) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: 'explicit shennian_manual title authority is required',
+        });
+        return;
+    }
+    recordSession({
+        sessionId,
+        agentType,
+        workDir,
+        agentSessionId: agentSessionId || null,
+        title,
+        titleSource: 'shennian_manual',
+        titleRevision: Number(titleRevision),
+        titleLockedByUser: true,
+        titleOriginEventId,
+    });
+    requestSessionIndexPublish(runtime.client);
+    if (agentType !== 'codex' || !agentSessionId) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: { localApplied: true, nativeWriteback: 'unsupported' },
+        });
+        return;
+    }
+    const active = runtime.sessions.get(sessionId);
+    if (active?.agentType === 'codex' && active.adapter.setTitle) {
+        await active.adapter.setTitle(agentSessionId, title, active.workDir || workDir);
+        active.agentSessionId = agentSessionId;
+        active.lastActiveAt = Date.now();
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: true, payload: { synced: true } });
+        return;
+    }
+    const adapter = createAgent('codex');
+    if (!adapter?.setTitle) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: 'Codex adapter does not support title sync',
+        });
+        return;
+    }
+    adapter.configure?.({ sessionId, env: buildManagedAgentEnv('codex') });
+    try {
+        await adapter.start(sessionId, workDir, agentSessionId);
+        await adapter.setTitle(agentSessionId, title, workDir);
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: true, payload: { synced: true } });
+    }
+    finally {
+        await adapter.stop().catch(() => { });
+    }
+}

package/dist/src/session/handlers/tool-detail.js

@@ -1 +1,149 @@
-import{isSystemControlPayload as A,SESSION_TOOL_DETAIL_LIMITS as l}from"@shennian/wire";import{readToolDetail as _}from"../tool-detail-store.js";import{assertPersonalSyncIdentity as T,getPersonalSyncIdentity as p}from"../../personal-sync/epoch.js";import{getDaemonInstallationId as m}from"../store.js";const D=/(?:token|api[-_]?key|password|passwd|pwd|secret|authorization|cookie|credential|private[-_]?key)/i,O=/\b([A-Z0-9_]*(?:TOKEN|KEY|SECRET|PASSWORD|PASSWD|PWD|AUTH)[A-Z0-9_]*)=("[^"]*"|'[^']*'|[^\s]+)/gi,M=/\bBearer\s+[A-Za-z0-9._~+/=-]+/gi,z=/\bsk-[A-Za-z0-9_-]{12,}\b/g;function N(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function k(e){const n=typeof e=="number"?e:Number(e);return!Number.isFinite(n)||n<=0?l.defaultMaxBytes:Math.min(Math.max(l.minMaxBytes,Math.floor(n)),l.maxMaxBytes)}function c(e,n){if(A(e))return"[SYSTEM CONTEXT REDACTED]";const t=e.replace(O,"$1=[REDACTED]").replace(M,"Bearer [REDACTED]").replace(z,"sk-[REDACTED]");return t.length>n?`${t.slice(0,n)}\u2026`:t}function f(e,n,t=0){if(e==null)return e;if(typeof e=="string")return c(e,n);if(typeof e=="number"||typeof e=="boolean")return e;if(t>=4)return"[Truncated]";if(Array.isArray(e))return e.slice(0,20).map(i=>f(i,n,t+1));if(typeof e=="object"){const i={};for(const[s,a]of Object.entries(e).slice(0,50))i[s]=D.test(s)?"[REDACTED]":f(a,n,t+1);return i}return String(e)}function x(e,n){const t=N(e)?.command;if(typeof t=="string")return c(t,n);if(Array.isArray(t))return c(t.map(String).join(" "),n)}function C(e){return Buffer.byteLength(JSON.stringify(e),"utf8")}function E(e){for(let n=0;n<3;n++){const t=C(e);if(t===e.byteSize)break;e.byteSize=t}return e}function I(e,n){const t={...p(m()),sessionId:e.sessionId,toolCallId:e.toolCallId,detailRevision:e.detailRevision,detailStatus:n==="not_found"?"not_found":"unavailable",resultOmitted:!0,redacted:!0,byteSize:0,expiresAt:new Date(Date.now()+l.responseTtlMs).toISOString(),source:"unavailable",reason:n};return E(t)}async function j(e,n){const t=n.params;T(t);const i=typeof t.sessionId=="string"?t.sessionId:"",s=typeof t.toolCallId=="string"?t.toolCallId:"",a=typeof t.detailRevision=="number"&&Number.isSafeInteger(t.detailRevision)?t.detailRevision:-1;if(!i||!s||a<0){e.client.sendRes({type:"res",id:n.id,ok:!1,error:"upgrade_required: sessionId, toolCallId and detailRevision are required"});return}const u=k(t.maxBytes),y={...p(m()),sessionId:i,toolCallId:s,detailRevision:a,maxBytes:u},r=_(i,s);if(!r){e.client.sendRes({type:"res",id:n.id,ok:!0,payload:I(y,"not_found")});return}if(r.detailRevision!==a){e.client.sendRes({type:"res",id:n.id,ok:!0,payload:I(y,"revision_mismatch")});return}const d=Math.max(512,Math.floor(u/4)),b=r.args==null?void 0:f(r.args,d),g=x(r.args,d),S=typeof r.result=="string"?c(r.result,d):r.result==null?void 0:c(JSON.stringify(f(r.result,d)),d),R=new Date(Date.now()+l.responseTtlMs).toISOString();let o={...p(m()),sessionId:i,toolCallId:s,detailRevision:a,detailStatus:"available",status:r.status,...g?{command:g}:{},...b!==void 0?{argsSummary:b}:{},...S!==void 0?{result:S}:{},resultOmitted:S===void 0,redacted:!0,byteSize:0,expiresAt:R,source:"local-tool-index"};E(o),o.byteSize>u&&(delete o.result,o.resultOmitted=!0,E(o)),o.byteSize>u&&(o=I(y,"response_too_large")),e.client.sendRes({type:"res",id:n.id,ok:!0,payload:o})}export{j as handleSessionToolDetail};
+// @arch docs/architecture/data-sync.md#工具详情按需读取
+// @test src/__tests__/session-manager.test.ts
+import { isSystemControlPayload, SESSION_TOOL_DETAIL_LIMITS, } from '@shennian/wire';
+import { readToolDetail } from '../tool-detail-store.js';
+import { assertPersonalSyncIdentity, getPersonalSyncIdentity } from '../../personal-sync/epoch.js';
+import { getDaemonInstallationId } from '../store.js';
+const SENSITIVE_KEY_RE = /(?:token|api[-_]?key|password|passwd|pwd|secret|authorization|cookie|credential|private[-_]?key)/i;
+const SENSITIVE_ASSIGNMENT_RE = /\b([A-Z0-9_]*(?:TOKEN|KEY|SECRET|PASSWORD|PASSWD|PWD|AUTH)[A-Z0-9_]*)=("[^"]*"|'[^']*'|[^\s]+)/gi;
+const BEARER_RE = /\bBearer\s+[A-Za-z0-9._~+/=-]+/gi;
+const OPENAI_KEY_RE = /\bsk-[A-Za-z0-9_-]{12,}\b/g;
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : null;
+}
+function clampMaxBytes(value) {
+    const parsed = typeof value === 'number' ? value : Number(value);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return SESSION_TOOL_DETAIL_LIMITS.defaultMaxBytes;
+    return Math.min(Math.max(SESSION_TOOL_DETAIL_LIMITS.minMaxBytes, Math.floor(parsed)), SESSION_TOOL_DETAIL_LIMITS.maxMaxBytes);
+}
+function redactString(value, maxChars) {
+    if (isSystemControlPayload(value))
+        return '[SYSTEM CONTEXT REDACTED]';
+    const redacted = value
+        .replace(SENSITIVE_ASSIGNMENT_RE, '$1=[REDACTED]')
+        .replace(BEARER_RE, 'Bearer [REDACTED]')
+        .replace(OPENAI_KEY_RE, 'sk-[REDACTED]');
+    return redacted.length > maxChars ? `${redacted.slice(0, maxChars)}…` : redacted;
+}
+function sanitizeValue(value, maxChars, depth = 0) {
+    if (value == null)
+        return value;
+    if (typeof value === 'string')
+        return redactString(value, maxChars);
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return value;
+    if (depth >= 4)
+        return '[Truncated]';
+    if (Array.isArray(value))
+        return value.slice(0, 20).map((item) => sanitizeValue(item, maxChars, depth + 1));
+    if (typeof value === 'object') {
+        const output = {};
+        for (const [key, raw] of Object.entries(value).slice(0, 50)) {
+            output[key] = SENSITIVE_KEY_RE.test(key) ? '[REDACTED]' : sanitizeValue(raw, maxChars, depth + 1);
+        }
+        return output;
+    }
+    return String(value);
+}
+function extractCommand(args, maxChars) {
+    const raw = asRecord(args)?.command;
+    if (typeof raw === 'string')
+        return redactString(raw, maxChars);
+    if (Array.isArray(raw))
+        return redactString(raw.map(String).join(' '), maxChars);
+    return undefined;
+}
+function byteSize(value) {
+    return Buffer.byteLength(JSON.stringify(value), 'utf8');
+}
+function finalizeByteSize(payload) {
+    for (let attempt = 0; attempt < 3; attempt++) {
+        const next = byteSize(payload);
+        if (next === payload.byteSize)
+            break;
+        payload.byteSize = next;
+    }
+    return payload;
+}
+function unavailable(request, reason) {
+    const payload = {
+        ...getPersonalSyncIdentity(getDaemonInstallationId()),
+        sessionId: request.sessionId,
+        toolCallId: request.toolCallId,
+        detailRevision: request.detailRevision,
+        detailStatus: reason === 'not_found' ? 'not_found' : 'unavailable',
+        resultOmitted: true,
+        redacted: true,
+        byteSize: 0,
+        expiresAt: new Date(Date.now() + SESSION_TOOL_DETAIL_LIMITS.responseTtlMs).toISOString(),
+        source: 'unavailable',
+        reason,
+    };
+    return finalizeByteSize(payload);
+}
+export async function handleSessionToolDetail(runtime, req) {
+    const params = req.params;
+    assertPersonalSyncIdentity(params);
+    const sessionId = typeof params.sessionId === 'string' ? params.sessionId : '';
+    const toolCallId = typeof params.toolCallId === 'string' ? params.toolCallId : '';
+    const detailRevision = typeof params.detailRevision === 'number' && Number.isSafeInteger(params.detailRevision)
+        ? params.detailRevision
+        : -1;
+    if (!sessionId || !toolCallId || detailRevision < 0) {
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: false,
+            error: 'upgrade_required: sessionId, toolCallId and detailRevision are required',
+        });
+        return;
+    }
+    const maxBytes = clampMaxBytes(params.maxBytes);
+    const request = {
+        ...getPersonalSyncIdentity(getDaemonInstallationId()), sessionId, toolCallId, detailRevision, maxBytes,
+    };
+    const detail = readToolDetail(sessionId, toolCallId);
+    if (!detail) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: true, payload: unavailable(request, 'not_found') });
+        return;
+    }
+    if (detail.detailRevision !== detailRevision) {
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: true, payload: unavailable(request, 'revision_mismatch'),
+        });
+        return;
+    }
+    const maxChars = Math.max(512, Math.floor(maxBytes / 4));
+    const argsSummary = detail.args == null ? undefined : sanitizeValue(detail.args, maxChars);
+    const command = extractCommand(detail.args, maxChars);
+    const result = typeof detail.result === 'string'
+        ? redactString(detail.result, maxChars)
+        : detail.result == null
+            ? undefined
+            : redactString(JSON.stringify(sanitizeValue(detail.result, maxChars)), maxChars);
+    const expiresAt = new Date(Date.now() + SESSION_TOOL_DETAIL_LIMITS.responseTtlMs).toISOString();
+    let payload = {
+        ...getPersonalSyncIdentity(getDaemonInstallationId()),
+        sessionId, toolCallId, detailRevision,
+        detailStatus: 'available',
+        status: detail.status,
+        ...(command ? { command } : {}),
+        ...(argsSummary !== undefined ? { argsSummary } : {}),
+        ...(result !== undefined ? { result } : {}),
+        resultOmitted: result === undefined,
+        redacted: true,
+        byteSize: 0,
+        expiresAt,
+        source: 'local-tool-index',
+    };
+    finalizeByteSize(payload);
+    if (payload.byteSize > maxBytes) {
+        delete payload.result;
+        payload.resultOmitted = true;
+        finalizeByteSize(payload);
+    }
+    if (payload.byteSize > maxBytes)
+        payload = unavailable(request, 'response_too_large');
+    runtime.client.sendRes({ type: 'res', id: req.id, ok: true, payload });
+}

package/dist/src/session/handlers/voice-window.js

@@ -1 +1,62 @@
-import{extractPayloadText as u,isAgentHiddenPayload as g,isSystemControlPayload as I,isToolPayload as h}from"@shennian/wire";import{getCanonicalSessionStore as p,getDaemonInstallationId as S}from"../store.js";import{assertPersonalSyncIdentity as b,getPersonalSyncIdentity as w}from"../../personal-sync/epoch.js";const x=8,y=32*1024;function R(e,i){const t=i.params;if(b(t),!t?.sessionId?.trim()||!t.callId?.trim())throw new Error("sessionId and callId are required");const l=m(t.limit,4,x),d=m(t.maxBytes,y,y),o=p().readRecent(t.sessionId,Math.min(l*6,48)),s=o.messages.filter(M),n=[];let c=0;for(let r=s.length-1;r>=0&&n.length<l;r-=1){const f=s[r],a=Buffer.byteLength(JSON.stringify(f),"utf8");if(n.length>0&&c+a>d)break;a>d||(n.push(f),c+=a)}n.reverse(),e.client.sendRes({type:"res",id:i.id,ok:!0,payload:{...w(S()),sessionId:t.sessionId,callId:t.callId,bodyRevision:o.bodyRevision,messages:n,truncated:o.hasOlder||n.length<s.length}})}function M(e){return e.role!=="user"&&e.role!=="agent"||h(e.payload)||I(e.payload)||g(e.payload)?!1:u(e.payload).trim().length>0}function m(e,i,t){if(e===void 0)return i;if(!Number.isSafeInteger(e)||e<1)throw new Error("invalid voice window limit");return Math.min(e,t)}export{R as handleVoiceSessionBodyWindow};
+// @arch docs/architecture/data-sync.md#6-voice-shennian-边界
+// @test ../../__tests__/voice-window.test.ts
+import { extractPayloadText, isAgentHiddenPayload, isSystemControlPayload, isToolPayload, } from '@shennian/wire';
+import { getCanonicalSessionStore, getDaemonInstallationId } from '../store.js';
+import { assertPersonalSyncIdentity, getPersonalSyncIdentity } from '../../personal-sync/epoch.js';
+const MAX_MESSAGES = 8;
+const MAX_BYTES = 32 * 1024;
+export function handleVoiceSessionBodyWindow(runtime, req) {
+    const params = req.params;
+    assertPersonalSyncIdentity(params);
+    if (!params?.sessionId?.trim() || !params.callId?.trim()) {
+        throw new Error('sessionId and callId are required');
+    }
+    const limit = boundedInteger(params.limit, 4, MAX_MESSAGES);
+    const maxBytes = boundedInteger(params.maxBytes, MAX_BYTES, MAX_BYTES);
+    const page = getCanonicalSessionStore().readRecent(params.sessionId, Math.min(limit * 6, 48));
+    const visible = page.messages.filter(isVoiceReadableMessage);
+    const selected = [];
+    let bytes = 0;
+    for (let index = visible.length - 1; index >= 0 && selected.length < limit; index -= 1) {
+        const message = visible[index];
+        const size = Buffer.byteLength(JSON.stringify(message), 'utf8');
+        if (selected.length > 0 && bytes + size > maxBytes)
+            break;
+        if (size > maxBytes)
+            continue;
+        selected.push(message);
+        bytes += size;
+    }
+    selected.reverse();
+    runtime.client.sendRes({
+        type: 'res',
+        id: req.id,
+        ok: true,
+        payload: {
+            ...getPersonalSyncIdentity(getDaemonInstallationId()),
+            sessionId: params.sessionId,
+            callId: params.callId,
+            bodyRevision: page.bodyRevision,
+            messages: selected,
+            truncated: page.hasOlder || selected.length < visible.length,
+        },
+    });
+}
+function isVoiceReadableMessage(message) {
+    if (message.role !== 'user' && message.role !== 'agent')
+        return false;
+    if (isToolPayload(message.payload))
+        return false;
+    if (isSystemControlPayload(message.payload))
+        return false;
+    if (isAgentHiddenPayload(message.payload))
+        return false;
+    return extractPayloadText(message.payload).trim().length > 0;
+}
+function boundedInteger(value, fallback, max) {
+    if (value === undefined)
+        return fallback;
+    if (!Number.isSafeInteger(value) || value < 1)
+        throw new Error('invalid voice window limit');
+    return Math.min(value, max);
+}