shennian 0.3.85 → 0.3.86

package/dist/src/room/activation-service.js

@@ -1,8 +1,408 @@
-import{isAvailableBuiltinAgentType as A}from"@shennian/wire";import{getBuiltinAgentVersion as x,resolveBuiltinCommand as P}from"../agents/command-spec.js";import{registerCustomRuntimeSecurity as S,resolveCustomRuntimeExecutableFingerprint as K}from"../agents/custom-managed-runtime.js";import{loadConfig as $}from"../config/index.js";import{resolveManagedAgentExecutableIdentity as k}from"../security/managed-agent-executable.js";import{compileManagedAgentPolicy as q}from"../security/managed-agent-policy.js";import{resolveManagedAgentRuntimeProtection as B}from"../security/managed-agent-runtime.js";import{selectRoomActivationTargets as T}from"./activation-policy.js";import{composeManagedRoomPrompt as E}from"./managed-prompt-composer.js";const R=4,D=6e4,N=6,F=5*6e4;class oe{deps;latestContexts=new Map;constructor(e){this.deps=e}async processMessages(e,o,t,a={roomName:"\u5F53\u524D\u7FA4\u804A"}){const c=[],d=[],g=new Map,p=new Set,u=[...o].sort((i,r)=>G(i.sequence,r.sequence));for(const i of t){const r=this.deps.registry.getByRegistryKey(i.registryKey);if(!r?.binding||r.binding.roomId!==e||r.binding.status!=="active"&&r.binding.status!=="paused"&&r.binding.activationQueue.length===0)continue;const m=a.agentsByIdentityId?.[r.binding.agentIdentityId];if(m&&m.sessionMode!=="standard")throw new Error("managed_agent_manager_mode_unsupported")}for(const i of t){const r=this.deps.registry.getByRegistryKey(i.registryKey);if(!r?.binding||r.binding.roomId!==e||r.binding.activationQueue.length===0&&!r.binding.activeActivation||(p.add(r.registryKey),r.binding.activationQueue.length===0))continue;const m=this.deps.observations.getBySource(r);if(!m?.workspacePath||m.lifecycleState==="closed")throw new Error("managed_room_workspace_unavailable");this.latestContexts.set(r.registryKey,a);for(const s of r.binding.activationQueue)c.push({registration:r,input:{params:{sessionId:r.nianSessionId,text:s.deliveryText??"\u7FA4\u804A\u4E2D\u6709\u4E00\u6761\u5F85\u5904\u7406\u6D88\u606F\uFF0C\u8BF7\u7ED3\u5408\u5F53\u524D\u7FA4\u804A\u4E0A\u4E0B\u6587\u5904\u7406\u3002",agentType:f(r.runtimeAdapter),sessionMode:"standard",workDir:m.workspacePath,agentSessionId:r.sourceSessionKey,queueMessageId:`room-activation-${r.binding.bindingId}-${s.causeMessageId}`,clientMessageId:`room-activation-${r.binding.bindingId}-${s.causeMessageId}`},context:{registryKey:r.registryKey,causeMessageId:s.causeMessageId,rootCauseMessageId:s.rootCauseMessageId,sequence:s.sequence,hopCount:s.hopCount}}})}for(const i of u){const r=new Set(T(i,t).map(m=>m.registration.registryKey));for(const m of t){const s=this.deps.registry.getByRegistryKey(m.registryKey);if(!s?.binding||s.binding.roomId!==e||s.binding.status!=="active"&&s.binding.status!=="paused"||BigInt(i.sequence)<=BigInt(s.binding.lastActivatedSequence))continue;const l=g.get(s.registryKey)??[...s.binding.mentionContext??[]];if(g.set(s.registryKey,l),r.has(s.registryKey)){const y=(i.activationCause?.hopCount??0)+(i.author.principalType==="agent"?1:0),h=i.activationCause?.rootCauseMessageId??i.id;if(y>R)this.audit(s,i.id,h,y,"suppressed","max_hops");else{const v=this.deps.registry.claimActivation({registryKey:s.registryKey,windowMs:D,maxActivations:N,pauseMs:F,now:this.deps.now?.()});if(!v.allowed){v.newlyPaused&&this.audit(s,i.id,h,y,"suppressed","rate_limited"),d.push({registryKey:s.registryKey,sequence:i.sequence});continue}const b=this.deps.observations.getBySource(s);if(!b?.workspacePath||b.lifecycleState==="closed")throw new Error("managed_room_workspace_unavailable");const I=w([i]),C=s.binding.activationMode==="mention_only"?L([...l.map(M=>M.deliveryText),I]):I;this.latestContexts.set(s.registryKey,a),c.push({registration:s,input:{params:{sessionId:s.nianSessionId,text:C,agentType:f(s.runtimeAdapter),sessionMode:"standard",workDir:b.workspacePath,agentSessionId:s.sourceSessionKey,queueMessageId:`room-activation-${s.binding.bindingId}-${i.id}`,clientMessageId:`room-activation-${s.binding.bindingId}-${i.id}`},context:{registryKey:s.registryKey,causeMessageId:i.id,rootCauseMessageId:h,sequence:i.sequence,hopCount:y}}}),s.binding.activationMode==="mention_only"&&g.set(s.registryKey,[])}}else s.binding.activationMode==="mention_only"&&i.kind!=="system"&&i.author.membershipId!==s.binding.agentMembershipId&&(l.some(y=>y.sequence===i.sequence)||l.push({sequence:i.sequence,deliveryText:w([i])}));d.push({registryKey:s.registryKey,sequence:i.sequence})}}await this.deps.enqueueConversationBatch(c.map(i=>i.input));for(const i of p)this.deps.registry.retireLegacyActivationState(i,this.deps.now?.()??new Date);for(const[i,r]of g)this.deps.registry.replaceMentionContext(i,r,this.deps.now?.()??new Date);for(const i of c)this.audit(i.registration,i.input.context.causeMessageId,i.input.context.rootCauseMessageId,i.input.context.hopCount,"queued","conversation_queue");for(const i of d)this.deps.registry.advanceCursor({registryKey:i.registryKey,cursor:"activated",sequence:i.sequence})}async prepareConversationTurn(e){const o=e.at(-1);if(!o)throw new Error("managed_room_queue_context_missing");const t=this.deps.registry.getByRegistryKey(o.registryKey);if(!t?.binding||t.binding.status!=="active")throw new Error("managed_room_binding_unavailable");const a=this.deps.loadContext?await this.deps.loadContext(t):this.latestContexts.get(o.registryKey);if(!a)throw new Error("managed_room_prompt_context_unavailable");const c=a.agentsByIdentityId?.[t.binding.agentIdentityId];if(!c?.permissionPolicy)throw new Error("managed_agent_policy_missing");if(c.sessionMode!=="standard")throw new Error("managed_agent_manager_mode_unsupported");const d=this.deps.observations.getBySource(t);if(!d?.workspacePath||d.lifecycleState==="closed")throw new Error("managed_room_workspace_unavailable");const g=this.deps.resolveManagedAgentPolicy?await this.deps.resolveManagedAgentPolicy({registration:t,permissionPolicy:c.permissionPolicy,permissionConfirmation:c.permissionConfirmation,workDir:d.workspacePath}):await j({registration:t,permissionPolicy:c.permissionPolicy,permissionConfirmation:c.permissionConfirmation,workDir:d.workspacePath}),p=Q(a,t,g),u=this.deps.issueManagedRoomContext(t.registryKey,o.causeMessageId);if(!/^mrc_[A-Za-z0-9_-]{43}$/.test(u))throw new Error("managed_room_context_unavailable");return this.audit(t,o.causeMessageId,o.rootCauseMessageId,o.hopCount,"activated","conversation_queue_dispatch"),{systemPrompt:p.systemPrompt,roomContextRegistryKey:t.registryKey,managedRoomContextToken:u,managedAgentPolicy:g,managedRoomPromptSnapshot:p.snapshot}}audit(e,o,t,a,c,d){e.binding&&this.deps.audit?.record({roomId:e.binding.roomId,bindingId:e.binding.bindingId,causeMessageId:o,rootCauseMessageId:t,hopCount:a,outcome:c,reason:d,at:this.deps.now?.()})}}function w(n){const e=n.map(o=>{const t=o.text?.trim()||"\u53D1\u9001\u4E86\u4E00\u6761\u6D88\u606F",a=o.attachments.length>0?`
-${o.attachments.map(W).join(`
-`)}`:"";return{speaker:o.author.displayName,body:`${t}${a}`}});return _(e)}function W(n){return`\u9644\u4EF6\uFF1A${`${O(n.name)} \xB7 ${V(n.byteSize)}`}\uFF5C${n.mimeType}\uFF5CattachmentId=${n.attachmentId}`}function O(n){return String(n||"\u9644\u4EF6").replace(/[[\]\\]/g,"\\$&").replace(/[\r\n]+/g," ")}function V(n){const e=Number(n);if(!Number.isFinite(e)||e<0)return`${n} B`;if(e<1024)return`${e} B`;const o=["KB","MB","GB","TB"];let t=e,a=-1;do t/=1024,a+=1;while(t>=1024&&a<o.length-1);const c=t>=100?0:t>=10?1:2;return`${t.toFixed(c).replace(/\.0+$|(?<=\.[0-9])0+$/,"")} ${o[a]}`}function L(n){return _(n.map(z))}function z(n){const e=n.match(/^\[群消息\][ \t]+<([^>\n]+)>\n([\s\S]*)$/);if(e)return{speaker:e[1],body:e[2]};const o=n.match(/^\[群消息\]\n<([^>\n]+)>\n([\s\S]*)$/);if(o)return{speaker:o[1],body:o[2]};const t=n.match(/^群消息\n([^\n]+)\n([\s\S]*)$/);if(t)return{speaker:t[1],body:t[2]};const a=n.match(/^([^\n]+)\n([\s\S]*)$/);return a?{speaker:a[1],body:a[2]}:{speaker:"\u7FA4\u6210\u5458",body:n.trim()}}function _(n){if(n.length===1){const[e]=n;return`[\u7FA4\u6D88\u606F] <${e.speaker}>
-${e.body}`}return`[\u7FA4\u6D88\u606F]
-${n.map(e=>`<${e.speaker}>
-${e.body}`).join(`
-
-`)}`}function Q(n,e,o){const t=e.binding?n.agentsByIdentityId?.[e.binding.agentIdentityId]:void 0;if(!e.binding||!t)throw new Error("managed_room_prompt_incomplete");return E({runtimeAdapter:f(e.runtimeAdapter),agent:{displayName:t.displayName,description:t.description,systemPrompt:n.agentSystemPromptsByIdentityId?.[e.binding.agentIdentityId]},room:{name:n.roomName,activationMode:e.binding.activationMode,members:n.members},runtimePermissions:{requestedPolicy:o.requestedPolicy,enforcement:o.enforcement,resolvedWorkDir:o.adapterPolicy.workDir}})}async function j(n){const e=f(n.registration.runtimeAdapter),o=A(e)?P(e):null,t=e.startsWith("custom:")?$().customAgents?.[e.slice(7)]:void 0;t&&S(e,t);const a=o?x(e,o):t?.caps.version,c=o?k(o):{platform:process.platform,isWsl:process.platform==="linux"&&!!(process.env.WSL_DISTRO_NAME||process.env.WSL_INTEROP),executableFingerprint:t?K(t):void 0},d={agentType:e,runtimeVersion:a,platform:c.platform,isWsl:c.isWsl,executableFingerprint:c.executableFingerprint,requireExecutableFingerprint:!0},g=B(d),p=X({confirmation:n.permissionConfirmation,policy:n.permissionPolicy,runtimeAdapter:e,protection:g}),u=await q({...d,policy:n.permissionPolicy,workDir:n.workDir,hostFullAccessConfirmed:p&&n.permissionConfirmation?.hostFullAccess,limitedProtectionConfirmed:p&&n.permissionConfirmation?.limitedProtection});if(!u.ok){const i=u.unsupportedCapabilities?.length?`:${u.unsupportedCapabilities.join(",")}`:"";throw new Error(`${u.errorCode}${i}`)}return u.value}function X(n){const{confirmation:e,policy:o,runtimeAdapter:t,protection:a}=n;return!!(e&&e.policyVersion===o.version&&e.runtimeAdapter===t&&e.runtimeVersion===a.runtimeVersion&&e.platform===a.platform&&e.executableFingerprint===a.executableFingerprint&&e.hostFullAccess===(o.fileAccess==="host-full")&&e.limitedProtection===(a.level!=="hard"))}function f(n){return n==="claude_code"?"claude":n}function G(n,e){const o=BigInt(n),t=BigInt(e);return o<t?-1:o>t?1:0}export{oe as RoomActivationService,X as managedAgentPermissionConfirmationMatches,j as resolveManagedAgentPolicy};
+// @arch docs/features/network-rooms/core-data-and-security-decisions.md#五触发语义
+// @test src/__tests__/room-activation-service.test.ts
+import { isAvailableBuiltinAgentType, } from '@shennian/wire';
+import { getBuiltinAgentVersion, resolveBuiltinCommand } from '../agents/command-spec.js';
+import { registerCustomRuntimeSecurity, resolveCustomRuntimeExecutableFingerprint, } from '../agents/custom-managed-runtime.js';
+import { loadConfig } from '../config/index.js';
+import { resolveManagedAgentExecutableIdentity } from '../security/managed-agent-executable.js';
+import { compileManagedAgentPolicy, } from '../security/managed-agent-policy.js';
+import { resolveManagedAgentRuntimeProtection } from '../security/managed-agent-runtime.js';
+import { selectRoomActivationTargets } from './activation-policy.js';
+import { composeManagedRoomPrompt } from './managed-prompt-composer.js';
+const MAX_HOPS = 4;
+const ACTIVATION_WINDOW_MS = 60_000;
+const MAX_ACTIVATIONS_PER_WINDOW = 6;
+const RATE_PAUSE_MS = 5 * 60_000;
+export class RoomActivationService {
+    deps;
+    latestContexts = new Map();
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async processMessages(roomId, messages, registrations, context = { roomName: '当前群聊' }) {
+        const queued = [];
+        const cursorAdvances = [];
+        const mentionContexts = new Map();
+        const legacyStateToRetire = new Set();
+        const ordered = [...messages].sort((a, b) => compareSequence(a.sequence, b.sequence));
+        for (const snapshot of registrations) {
+            const current = this.deps.registry.getByRegistryKey(snapshot.registryKey);
+            if (!current?.binding || current.binding.roomId !== roomId)
+                continue;
+            if (current.binding.status !== 'active' &&
+                current.binding.status !== 'paused' &&
+                current.binding.activationQueue.length === 0)
+                continue;
+        }
+        // One-way upgrade bridge: old daemons persisted Room-specific pending items.
+        // Move only items that were never dispatched into the Session queue, and
+        // clear every legacy active marker after the durable batch commit.
+        for (const snapshot of registrations) {
+            const current = this.deps.registry.getByRegistryKey(snapshot.registryKey);
+            if (!current?.binding || current.binding.roomId !== roomId)
+                continue;
+            if (current.binding.activationQueue.length === 0 && !current.binding.activeActivation)
+                continue;
+            legacyStateToRetire.add(current.registryKey);
+            if (current.binding.activationQueue.length === 0)
+                continue;
+            const observation = this.deps.observations.getBySource(current);
+            if (!observation?.workspacePath || observation.lifecycleState === 'closed') {
+                throw new Error('managed_room_workspace_unavailable');
+            }
+            this.latestContexts.set(current.registryKey, context);
+            for (const item of current.binding.activationQueue) {
+                queued.push({
+                    registration: current,
+                    input: {
+                        params: {
+                            sessionId: current.nianSessionId,
+                            text: item.deliveryText ?? '群聊中有一条待处理消息，请结合当前群聊上下文处理。',
+                            agentType: toAgentType(current.runtimeAdapter),
+                            sessionMode: context.agentsByIdentityId?.[current.binding.agentIdentityId]?.sessionMode ?? 'standard',
+                            managerConfig: context.agentsByIdentityId?.[current.binding.agentIdentityId]?.managerConfig ?? null,
+                            managerDefaultWorkerAgentType: context.agentsByIdentityId?.[current.binding.agentIdentityId]?.managerConfig?.defaultWorkerAgentType ?? null,
+                            managerDefaultWorkerModelId: context.agentsByIdentityId?.[current.binding.agentIdentityId]?.managerConfig?.defaultWorkerModelId ?? null,
+                            workDir: observation.workspacePath,
+                            agentSessionId: current.sourceSessionKey,
+                            queueMessageId: `room-activation-${current.binding.bindingId}-${item.causeMessageId}`,
+                            clientMessageId: `room-activation-${current.binding.bindingId}-${item.causeMessageId}`,
+                        },
+                        context: {
+                            registryKey: current.registryKey,
+                            causeMessageId: item.causeMessageId,
+                            rootCauseMessageId: item.rootCauseMessageId,
+                            sequence: item.sequence,
+                            hopCount: item.hopCount,
+                        },
+                    },
+                });
+            }
+        }
+        for (const message of ordered) {
+            const targets = new Set(selectRoomActivationTargets(message, registrations).map((target) => target.registration.registryKey));
+            for (const snapshot of registrations) {
+                const current = this.deps.registry.getByRegistryKey(snapshot.registryKey);
+                if (!current?.binding || current.binding.roomId !== roomId)
+                    continue;
+                if (current.binding.status !== 'active' && current.binding.status !== 'paused')
+                    continue;
+                if (BigInt(message.sequence) <= BigInt(current.binding.lastActivatedSequence))
+                    continue;
+                const mentionContext = mentionContexts.get(current.registryKey)
+                    ?? [...(current.binding.mentionContext ?? [])];
+                mentionContexts.set(current.registryKey, mentionContext);
+                if (targets.has(current.registryKey)) {
+                    const hopCount = (message.activationCause?.hopCount ?? 0) +
+                        (message.author.principalType === 'agent' ? 1 : 0);
+                    const rootCauseMessageId = message.activationCause?.rootCauseMessageId ?? message.id;
+                    if (hopCount > MAX_HOPS) {
+                        this.audit(current, message.id, rootCauseMessageId, hopCount, 'suppressed', 'max_hops');
+                    }
+                    else {
+                        const claim = this.deps.registry.claimActivation({
+                            registryKey: current.registryKey,
+                            windowMs: ACTIVATION_WINDOW_MS,
+                            maxActivations: MAX_ACTIVATIONS_PER_WINDOW,
+                            pauseMs: RATE_PAUSE_MS,
+                            now: this.deps.now?.(),
+                        });
+                        if (!claim.allowed) {
+                            if (claim.newlyPaused) {
+                                this.audit(current, message.id, rootCauseMessageId, hopCount, 'suppressed', 'rate_limited');
+                            }
+                            cursorAdvances.push({ registryKey: current.registryKey, sequence: message.sequence });
+                            continue;
+                        }
+                        const observation = this.deps.observations.getBySource(current);
+                        if (!observation?.workspacePath || observation.lifecycleState === 'closed') {
+                            throw new Error('managed_room_workspace_unavailable');
+                        }
+                        const currentDelivery = buildDeliveryText([message]);
+                        const deliveryText = current.binding.activationMode === 'mention_only'
+                            ? mergeDeliveryTexts([
+                                ...mentionContext.map((item) => item.deliveryText),
+                                currentDelivery,
+                            ])
+                            : currentDelivery;
+                        this.latestContexts.set(current.registryKey, context);
+                        queued.push({
+                            registration: current,
+                            input: {
+                                params: {
+                                    sessionId: current.nianSessionId,
+                                    text: deliveryText,
+                                    agentType: toAgentType(current.runtimeAdapter),
+                                    sessionMode: context.agentsByIdentityId?.[current.binding.agentIdentityId]?.sessionMode ?? 'standard',
+                                    managerConfig: context.agentsByIdentityId?.[current.binding.agentIdentityId]?.managerConfig ?? null,
+                                    managerDefaultWorkerAgentType: context.agentsByIdentityId?.[current.binding.agentIdentityId]?.managerConfig?.defaultWorkerAgentType ?? null,
+                                    managerDefaultWorkerModelId: context.agentsByIdentityId?.[current.binding.agentIdentityId]?.managerConfig?.defaultWorkerModelId ?? null,
+                                    workDir: observation.workspacePath,
+                                    agentSessionId: current.sourceSessionKey,
+                                    queueMessageId: `room-activation-${current.binding.bindingId}-${message.id}`,
+                                    clientMessageId: `room-activation-${current.binding.bindingId}-${message.id}`,
+                                },
+                                context: {
+                                    registryKey: current.registryKey,
+                                    causeMessageId: message.id,
+                                    rootCauseMessageId,
+                                    sequence: message.sequence,
+                                    hopCount,
+                                },
+                            },
+                        });
+                        if (current.binding.activationMode === 'mention_only') {
+                            mentionContexts.set(current.registryKey, []);
+                        }
+                    }
+                }
+                else if (current.binding.activationMode === 'mention_only' &&
+                    message.kind !== 'system' &&
+                    message.author.membershipId !== current.binding.agentMembershipId) {
+                    if (!mentionContext.some((item) => item.sequence === message.sequence)) {
+                        mentionContext.push({ sequence: message.sequence, deliveryText: buildDeliveryText([message]) });
+                    }
+                }
+                cursorAdvances.push({ registryKey: current.registryKey, sequence: message.sequence });
+            }
+        }
+        await this.deps.enqueueConversationBatch(queued.map((entry) => entry.input));
+        for (const registryKey of legacyStateToRetire) {
+            this.deps.registry.retireLegacyActivationState(registryKey, this.deps.now?.() ?? new Date());
+        }
+        for (const [registryKey, items] of mentionContexts) {
+            this.deps.registry.replaceMentionContext(registryKey, items, this.deps.now?.() ?? new Date());
+        }
+        for (const entry of queued) {
+            this.audit(entry.registration, entry.input.context.causeMessageId, entry.input.context.rootCauseMessageId, entry.input.context.hopCount, 'queued', 'conversation_queue');
+        }
+        for (const advance of cursorAdvances) {
+            this.deps.registry.advanceCursor({
+                registryKey: advance.registryKey,
+                cursor: 'activated',
+                sequence: advance.sequence,
+            });
+        }
+    }
+    async prepareConversationTurn(contexts) {
+        const currentContext = contexts.at(-1);
+        if (!currentContext)
+            throw new Error('managed_room_queue_context_missing');
+        const registration = this.deps.registry.getByRegistryKey(currentContext.registryKey);
+        if (!registration?.binding || registration.binding.status !== 'active') {
+            throw new Error('managed_room_binding_unavailable');
+        }
+        const roomContext = this.deps.loadContext
+            ? await this.deps.loadContext(registration)
+            : this.latestContexts.get(currentContext.registryKey);
+        if (!roomContext)
+            throw new Error('managed_room_prompt_context_unavailable');
+        const identity = roomContext.agentsByIdentityId?.[registration.binding.agentIdentityId];
+        if (!identity?.permissionPolicy)
+            throw new Error('managed_agent_policy_missing');
+        const observation = this.deps.observations.getBySource(registration);
+        if (!observation?.workspacePath || observation.lifecycleState === 'closed') {
+            throw new Error('managed_room_workspace_unavailable');
+        }
+        const managedAgentPolicy = this.deps.resolveManagedAgentPolicy
+            ? await this.deps.resolveManagedAgentPolicy({
+                registration,
+                permissionPolicy: identity.permissionPolicy,
+                permissionConfirmation: identity.permissionConfirmation,
+                workDir: observation.workspacePath,
+            })
+            : await resolveManagedAgentPolicy({
+                registration,
+                permissionPolicy: identity.permissionPolicy,
+                permissionConfirmation: identity.permissionConfirmation,
+                workDir: observation.workspacePath,
+            });
+        const prompt = buildRoomSystemPrompt(roomContext, registration, managedAgentPolicy);
+        const token = this.deps.issueManagedRoomContext(registration.registryKey, currentContext.causeMessageId);
+        if (!/^mrc_[A-Za-z0-9_-]{43}$/.test(token)) {
+            throw new Error('managed_room_context_unavailable');
+        }
+        this.audit(registration, currentContext.causeMessageId, currentContext.rootCauseMessageId, currentContext.hopCount, 'activated', 'conversation_queue_dispatch');
+        return {
+            systemPrompt: prompt.systemPrompt,
+            roomContextRegistryKey: registration.registryKey,
+            managedRoomContextToken: token,
+            managedAgentPolicy,
+            managedRoomPromptSnapshot: prompt.snapshot,
+        };
+    }
+    audit(registration, causeMessageId, rootCauseMessageId, hopCount, outcome, reason) {
+        if (!registration.binding)
+            return;
+        this.deps.audit?.record({
+            roomId: registration.binding.roomId,
+            bindingId: registration.binding.bindingId,
+            causeMessageId,
+            rootCauseMessageId,
+            hopCount,
+            outcome,
+            reason,
+            at: this.deps.now?.(),
+        });
+    }
+}
+function buildDeliveryText(messages) {
+    const blocks = messages.map((message) => {
+        const text = message.text?.trim() || '发送了一条消息';
+        const attachments = message.attachments.length > 0
+            ? `\n${message.attachments.map(formatDeliveryAttachment).join('\n')}`
+            : '';
+        return { speaker: message.author.displayName, body: `${text}${attachments}` };
+    });
+    return formatDeliveryBlocks(blocks);
+}
+function formatDeliveryAttachment(attachment) {
+    const label = `${escapeMarkdownLabel(attachment.name)} · ${formatByteSize(attachment.byteSize)}`;
+    return `附件：${label}｜${attachment.mimeType}｜attachmentId=${attachment.attachmentId}`;
+}
+function escapeMarkdownLabel(value) {
+    return String(value || '附件').replace(/[[\]\\]/g, '\\$&').replace(/[\r\n]+/g, ' ');
+}
+function formatByteSize(value) {
+    const bytes = Number(value);
+    if (!Number.isFinite(bytes) || bytes < 0)
+        return `${value} B`;
+    if (bytes < 1024)
+        return `${bytes} B`;
+    const units = ['KB', 'MB', 'GB', 'TB'];
+    let size = bytes;
+    let unit = -1;
+    do {
+        size /= 1024;
+        unit += 1;
+    } while (size >= 1024 && unit < units.length - 1);
+    const digits = size >= 100 ? 0 : size >= 10 ? 1 : 2;
+    return `${size.toFixed(digits).replace(/\.0+$|(?<=\.[0-9])0+$/, '')} ${units[unit]}`;
+}
+function mergeDeliveryTexts(deliveryTexts) {
+    return formatDeliveryBlocks(deliveryTexts.map(parseDeliveryText));
+}
+function parseDeliveryText(deliveryText) {
+    const compact = deliveryText.match(/^\[群消息\][ \t]+<([^>\n]+)>\n([\s\S]*)$/);
+    if (compact)
+        return { speaker: compact[1], body: compact[2] };
+    // Registries written by earlier local daemons used a three-line header.
+    const legacy = deliveryText.match(/^\[群消息\]\n<([^>\n]+)>\n([\s\S]*)$/);
+    if (legacy)
+        return { speaker: legacy[1], body: legacy[2] };
+    // A short-lived format used an unbracketed source label before the speaker.
+    const labeledLegacy = deliveryText.match(/^群消息\n([^\n]+)\n([\s\S]*)$/);
+    if (labeledLegacy)
+        return { speaker: labeledLegacy[1], body: labeledLegacy[2] };
+    // The first natural Room format used an unadorned speaker on the first line.
+    const natural = deliveryText.match(/^([^\n]+)\n([\s\S]*)$/);
+    if (natural)
+        return { speaker: natural[1], body: natural[2] };
+    return { speaker: '群成员', body: deliveryText.trim() };
+}
+function formatDeliveryBlocks(blocks) {
+    if (blocks.length === 1) {
+        const [block] = blocks;
+        return `[群消息] <${block.speaker}>\n${block.body}`;
+    }
+    return `[群消息]\n${blocks.map((block) => `<${block.speaker}>\n${block.body}`).join('\n\n')}`;
+}
+function buildRoomSystemPrompt(context, registration, managedAgentPolicy) {
+    const identity = registration.binding
+        ? context.agentsByIdentityId?.[registration.binding.agentIdentityId]
+        : undefined;
+    if (!registration.binding || !identity)
+        throw new Error('managed_room_prompt_incomplete');
+    return composeManagedRoomPrompt({
+        runtimeAdapter: toAgentType(registration.runtimeAdapter),
+        agent: {
+            displayName: identity.displayName,
+            description: identity.description,
+            systemPrompt: context.agentSystemPromptsByIdentityId?.[registration.binding.agentIdentityId],
+        },
+        room: {
+            name: context.roomName,
+            activationMode: registration.binding.activationMode,
+            members: context.members,
+        },
+        runtimePermissions: {
+            requestedPolicy: managedAgentPolicy.requestedPolicy,
+            enforcement: managedAgentPolicy.enforcement,
+            resolvedWorkDir: managedAgentPolicy.adapterPolicy.workDir,
+        },
+    });
+}
+export async function resolveManagedAgentPolicy(input) {
+    const agentType = toAgentType(input.registration.runtimeAdapter);
+    const command = isAvailableBuiltinAgentType(agentType)
+        ? resolveBuiltinCommand(agentType)
+        : null;
+    const customEntry = agentType.startsWith('custom:')
+        ? loadConfig().customAgents?.[agentType.slice('custom:'.length)]
+        : undefined;
+    if (customEntry)
+        registerCustomRuntimeSecurity(agentType, customEntry);
+    const runtimeVersion = command
+        ? getBuiltinAgentVersion(agentType, command)
+        : customEntry?.caps.version;
+    const executableIdentity = command
+        ? resolveManagedAgentExecutableIdentity(command)
+        : {
+            platform: process.platform,
+            isWsl: process.platform === 'linux' &&
+                Boolean(process.env.WSL_DISTRO_NAME || process.env.WSL_INTEROP),
+            executableFingerprint: customEntry
+                ? resolveCustomRuntimeExecutableFingerprint(customEntry)
+                : undefined,
+        };
+    const runtimeInput = {
+        agentType,
+        runtimeVersion,
+        platform: executableIdentity.platform,
+        isWsl: executableIdentity.isWsl,
+        executableFingerprint: executableIdentity.executableFingerprint,
+        requireExecutableFingerprint: true,
+    };
+    const protection = resolveManagedAgentRuntimeProtection(runtimeInput);
+    const confirmationMatches = managedAgentPermissionConfirmationMatches({
+        confirmation: input.permissionConfirmation,
+        policy: input.permissionPolicy,
+        runtimeAdapter: agentType,
+        protection,
+    });
+    const result = await compileManagedAgentPolicy({
+        ...runtimeInput,
+        policy: input.permissionPolicy,
+        workDir: input.workDir,
+        hostFullAccessConfirmed: confirmationMatches && input.permissionConfirmation?.hostFullAccess,
+        limitedProtectionConfirmed: confirmationMatches && input.permissionConfirmation?.limitedProtection,
+    });
+    if (!result.ok) {
+        const unsupported = result.unsupportedCapabilities?.length
+            ? `:${result.unsupportedCapabilities.join(',')}`
+            : '';
+        throw new Error(`${result.errorCode}${unsupported}`);
+    }
+    return result.value;
+}
+export function managedAgentPermissionConfirmationMatches(input) {
+    const { confirmation, policy, runtimeAdapter, protection } = input;
+    return Boolean(confirmation &&
+        confirmation.policyVersion === policy.version &&
+        confirmation.runtimeAdapter === runtimeAdapter &&
+        confirmation.runtimeVersion === protection.runtimeVersion &&
+        confirmation.platform === protection.platform &&
+        confirmation.executableFingerprint === protection.executableFingerprint &&
+        confirmation.hostFullAccess === (policy.fileAccess === 'host-full') &&
+        confirmation.limitedProtection === (protection.level !== 'hard'));
+}
+function toAgentType(runtime) {
+    if (runtime === 'claude_code')
+        return 'claude';
+    return runtime;
+}
+function compareSequence(left, right) {
+    const a = BigInt(left);
+    const b = BigInt(right);
+    return a < b ? -1 : a > b ? 1 : 0;
+}

package/dist/src/room/invite-bootstrap.js

@@ -1 +1,156 @@
-const p="https://shennian.net/api/room-invites/agent-bootstrap",d=["room.create","room.join","room.read","room.send","room.mode","room.status"],r=["codex","claude_code","workbuddy"],m={codex:{install:"shennian integration codex install --confirm-user-action",update:"shennian integration codex update --confirm-user-action"},claude_code:{install:"shennian integration claude-code install --confirm-user-action",update:"shennian integration claude-code update --confirm-user-action"},workbuddy:{install:"shennian integration workbuddy install --confirm-user-action",update:"shennian integration workbuddy update --confirm-user-action"}};class a extends Error{code;constructor(t,n){super(n),this.code=t,this.name="RoomInviteBootstrapError"}}async function y(o=fetch){let t;try{t=await o(p,{headers:{accept:"application/json"},redirect:"error",signal:AbortSignal.timeout(1e4)})}catch{throw new a("room_bootstrap_unavailable","Official Shennian Room setup information is unavailable.")}if(!t.ok)throw new a("room_bootstrap_unavailable","Official Shennian Room setup information is unavailable.");let n;try{n=await t.json()}catch{throw s()}return f(n)}function f(o){if(!o||typeof o!="object"||Array.isArray(o))throw s();const t=o,n=c(t.install),e=c(t.roomTool),i=e.integrationCommands===void 0?m:c(e.integrationCommands);if(t.schemaVersion!==1||t.product!=="shennian"||t.inviteKind!=="room"||n.documentationUrl!=="https://shennian.net/agent-install.md"||n.npmPackage!=="shennian"||n.distTag!=="latest"||n.installCommand!=="npm install -g shennian@latest"||n.upgradeCommand!=="shennian upgrade"||typeof n.minimumCliVersion!="string"||!/^\d+\.\d+\.\d+$/.test(n.minimumCliVersion)||e.schemaVersion!==1||!l(e.actions,d)||!l(e.supportedRuntimes,r)||!h(i))throw s();return{documentationUrl:"https://shennian.net/agent-install.md",installCommand:"npm install -g shennian@latest",upgradeCommand:"shennian upgrade",minimumCliVersion:n.minimumCliVersion,actions:d,supportedRuntimes:r,integrationCommands:m}}function h(o){return Object.keys(o).sort().join(",")!==[...r].sort().join(",")?!1:r.every(t=>{const n=o[t];if(!n||typeof n!="object"||Array.isArray(n))return!1;const e=n,i=m[t];return Object.keys(e).sort().join(",")==="install,update"&&e.install===i.install&&e.update===i.update})}function C(o,t){if(o===null)return{status:"install_required",documentationUrl:t.documentationUrl,command:t.installCommand};const n=u(o),e=u(t.minimumCliVersion);if(!n||!e)throw new a("invalid_local_cli_version","The installed Shennian CLI version could not be verified.");return g(n,e)<0?{status:"upgrade_required",documentationUrl:t.documentationUrl,command:t.upgradeCommand}:{status:"ready"}}function c(o){if(!o||typeof o!="object"||Array.isArray(o))throw s();return o}function l(o,t){return Array.isArray(o)&&o.length===t.length&&o.every((n,e)=>n===t[e])}function u(o){const t=/^(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?$/.exec(o.trim());if(!t)return null;const n=[Number(t[1]),Number(t[2]),Number(t[3])];return n.every(Number.isSafeInteger)?n:null}function g(o,t){for(let n=0;n<3;n+=1)if(o[n]!==t[n])return o[n]-t[n];return 0}function s(){return new a("invalid_room_bootstrap","Official Shennian Room setup information failed validation.")}export{a as RoomInviteBootstrapError,y as fetchTrustedRoomAgentBootstrap,C as resolveRoomClientPreparation,f as validateTrustedRoomAgentBootstrap};
+// @arch docs/features/network-rooms/implementation-plan.md#八、邀请链接作为人和-agent-共同入口
+// @test src/__tests__/room-invite-bootstrap.test.ts
+const OFFICIAL_BOOTSTRAP_URL = 'https://shennian.net/api/room-invites/agent-bootstrap';
+const EXPECTED_ACTIONS = [
+    'room.create',
+    'room.join',
+    'room.read',
+    'room.send',
+    'room.mode',
+    'room.status',
+];
+const EXPECTED_RUNTIMES = ['codex', 'claude_code', 'workbuddy'];
+const EXPECTED_INTEGRATION_COMMANDS = {
+    codex: {
+        install: 'shennian integration codex install --confirm-user-action',
+        update: 'shennian integration codex update --confirm-user-action',
+    },
+    claude_code: {
+        install: 'shennian integration claude-code install --confirm-user-action',
+        update: 'shennian integration claude-code update --confirm-user-action',
+    },
+    workbuddy: {
+        install: 'shennian integration workbuddy install --confirm-user-action',
+        update: 'shennian integration workbuddy update --confirm-user-action',
+    },
+};
+export class RoomInviteBootstrapError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'RoomInviteBootstrapError';
+    }
+}
+export async function fetchTrustedRoomAgentBootstrap(fetchImpl = fetch) {
+    let response;
+    try {
+        response = await fetchImpl(OFFICIAL_BOOTSTRAP_URL, {
+            headers: { accept: 'application/json' },
+            redirect: 'error',
+            signal: AbortSignal.timeout(10_000),
+        });
+    }
+    catch {
+        throw new RoomInviteBootstrapError('room_bootstrap_unavailable', 'Official Shennian Room setup information is unavailable.');
+    }
+    if (!response.ok) {
+        throw new RoomInviteBootstrapError('room_bootstrap_unavailable', 'Official Shennian Room setup information is unavailable.');
+    }
+    let value;
+    try {
+        value = await response.json();
+    }
+    catch {
+        throw invalidBootstrap();
+    }
+    return validateTrustedRoomAgentBootstrap(value);
+}
+export function validateTrustedRoomAgentBootstrap(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw invalidBootstrap();
+    const root = value;
+    const install = readObject(root.install);
+    const roomTool = readObject(root.roomTool);
+    const integrationCommands = roomTool.integrationCommands === undefined
+        ? EXPECTED_INTEGRATION_COMMANDS
+        : readObject(roomTool.integrationCommands);
+    if (root.schemaVersion !== 1 ||
+        root.product !== 'shennian' ||
+        root.inviteKind !== 'room' ||
+        install.documentationUrl !== 'https://shennian.net/agent-install.md' ||
+        install.npmPackage !== 'shennian' ||
+        install.distTag !== 'latest' ||
+        install.installCommand !== 'npm install -g shennian@latest' ||
+        install.upgradeCommand !== 'shennian upgrade' ||
+        typeof install.minimumCliVersion !== 'string' ||
+        !/^\d+\.\d+\.\d+$/.test(install.minimumCliVersion) ||
+        roomTool.schemaVersion !== 1 ||
+        !sameStrings(roomTool.actions, EXPECTED_ACTIONS) ||
+        !sameStrings(roomTool.supportedRuntimes, EXPECTED_RUNTIMES) ||
+        !sameIntegrationCommands(integrationCommands)) {
+        throw invalidBootstrap();
+    }
+    return {
+        documentationUrl: 'https://shennian.net/agent-install.md',
+        installCommand: 'npm install -g shennian@latest',
+        upgradeCommand: 'shennian upgrade',
+        minimumCliVersion: install.minimumCliVersion,
+        actions: EXPECTED_ACTIONS,
+        supportedRuntimes: EXPECTED_RUNTIMES,
+        integrationCommands: EXPECTED_INTEGRATION_COMMANDS,
+    };
+}
+function sameIntegrationCommands(value) {
+    if (Object.keys(value).sort().join(',') !== [...EXPECTED_RUNTIMES].sort().join(','))
+        return false;
+    return EXPECTED_RUNTIMES.every((runtime) => {
+        const commands = value[runtime];
+        if (!commands || typeof commands !== 'object' || Array.isArray(commands))
+            return false;
+        const object = commands;
+        const expected = EXPECTED_INTEGRATION_COMMANDS[runtime];
+        return (Object.keys(object).sort().join(',') === 'install,update' &&
+            object.install === expected.install &&
+            object.update === expected.update);
+    });
+}
+export function resolveRoomClientPreparation(currentVersion, bootstrap) {
+    if (currentVersion === null) {
+        return {
+            status: 'install_required',
+            documentationUrl: bootstrap.documentationUrl,
+            command: bootstrap.installCommand,
+        };
+    }
+    const current = parseVersion(currentVersion);
+    const minimum = parseVersion(bootstrap.minimumCliVersion);
+    if (!current || !minimum) {
+        throw new RoomInviteBootstrapError('invalid_local_cli_version', 'The installed Shennian CLI version could not be verified.');
+    }
+    if (compareVersion(current, minimum) < 0) {
+        return {
+            status: 'upgrade_required',
+            documentationUrl: bootstrap.documentationUrl,
+            command: bootstrap.upgradeCommand,
+        };
+    }
+    return { status: 'ready' };
+}
+function readObject(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw invalidBootstrap();
+    return value;
+}
+function sameStrings(value, expected) {
+    return (Array.isArray(value) &&
+        value.length === expected.length &&
+        value.every((entry, index) => entry === expected[index]));
+}
+function parseVersion(value) {
+    const match = /^(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?$/.exec(value.trim());
+    if (!match)
+        return null;
+    const parts = [Number(match[1]), Number(match[2]), Number(match[3])];
+    return parts.every(Number.isSafeInteger) ? parts : null;
+}
+function compareVersion(left, right) {
+    for (let index = 0; index < 3; index += 1) {
+        if (left[index] !== right[index])
+            return left[index] - right[index];
+    }
+    return 0;
+}
+function invalidBootstrap() {
+    return new RoomInviteBootstrapError('invalid_room_bootstrap', 'Official Shennian Room setup information failed validation.');
+}

package/dist/src/room/managed-context.d.ts

@@ -1,6 +1,6 @@
 import type { RoomSessionRegistry } from './session-registry.js';
 export declare const MANAGED_ROOM_CONTEXT_ENV = "SHENNIAN_MANAGED_ROOM_CONTEXT";
-export type ManagedRoomAction = 'status' | 'read' | 'send' | 'attachment.get';
+export type ManagedRoomAction = 'status' | 'read' | 'send' | 'attachment.get' | 'pause';
 type ManagedRoomGrant = {
     tokenHash: string;
     registryKey: string;

package/dist/src/room/managed-context.js

@@ -1 +1 @@
-import g from"node:crypto";const h="SHENNIAN_MANAGED_ROOM_CONTEXT";class i extends Error{code;constructor(e,t){super(t),this.code=e,this.name="ManagedRoomContextError"}}class m{registry;now;grants=new Map;constructor(e,t=Date.now){this.registry=e,this.now=t}issue(e){const t=this.registry.getByRegistryKey(e.registryKey);if(!t?.binding||t.lifecycleState==="closed")throw new i("managed_room_context_unavailable","Managed Room context is unavailable.");if(t.binding.status!=="active"&&t.binding.status!=="paused")throw new i("managed_room_binding_unavailable","Managed Room binding is unavailable.");if(!t.binding.agentMembershipId)throw new i("managed_room_membership_unavailable","Managed Room membership is unavailable.");const n=e.machineCredential.trim();if(!n)throw new i("machine_not_authorized","This machine is not authorized yet.");const a=`mrc_${g.randomBytes(32).toString("base64url")}`,o=s(a);return this.grants.set(o,{tokenHash:o,registryKey:t.registryKey,registrationEpoch:t.registrationEpoch,credentialHash:s(n),allowedActions:new Set(e.allowedActions??["status","read","send","attachment.get"]),activationCauseMessageId:e.activationCauseMessageId,expiresAt:this.now()+Math.min(Math.max(e.ttlMs??10*6e4,1e3),30*6e4)}),this.prune(),a}resolve(e){const t=s(e.token),n=this.grants.get(t);if(!n||n.expiresAt<=this.now())throw this.grants.delete(t),new i("managed_room_context_expired","Managed Room context expired.");if(!d(n.credentialHash,s(e.machineCredential)))throw new i("managed_room_context_invalid","Managed Room context is invalid.");if(!n.allowedActions.has(e.action))throw new i("managed_room_action_forbidden","This action is not allowed in the managed Room context.");const a=this.registry.getByRegistryKey(n.registryKey),o=a?.binding;if(!a||!o||a.registrationEpoch!==n.registrationEpoch||a.lifecycleState==="closed"||o.status!=="active"&&o.status!=="paused"||!o.agentMembershipId)throw this.grants.delete(t),new i("managed_room_context_revoked","Managed Room context was revoked.");return{grant:n,registration:a,binding:o}}revokeToken(e){this.grants.delete(s(e))}revokeSession(e){for(const[t,n]of this.grants)n.registryKey===e&&this.grants.delete(t)}prune(){const e=this.now();for(const[t,n]of this.grants)n.expiresAt<=e&&this.grants.delete(t)}}function s(r){return g.createHash("sha256").update(r,"utf8").digest("hex")}function d(r,e){return g.timingSafeEqual(Buffer.from(r,"hex"),Buffer.from(e,"hex"))}export{h as MANAGED_ROOM_CONTEXT_ENV,m as ManagedRoomContextAuthority,i as ManagedRoomContextError};
+import g from"node:crypto";const h="SHENNIAN_MANAGED_ROOM_CONTEXT";class i extends Error{code;constructor(e,t){super(t),this.code=e,this.name="ManagedRoomContextError"}}class m{registry;now;grants=new Map;constructor(e,t=Date.now){this.registry=e,this.now=t}issue(e){const t=this.registry.getByRegistryKey(e.registryKey);if(!t?.binding||t.lifecycleState==="closed")throw new i("managed_room_context_unavailable","Managed Room context is unavailable.");if(t.binding.status!=="active"&&t.binding.status!=="paused")throw new i("managed_room_binding_unavailable","Managed Room binding is unavailable.");if(!t.binding.agentMembershipId)throw new i("managed_room_membership_unavailable","Managed Room membership is unavailable.");const n=e.machineCredential.trim();if(!n)throw new i("machine_not_authorized","This machine is not authorized yet.");const a=`mrc_${g.randomBytes(32).toString("base64url")}`,o=s(a);return this.grants.set(o,{tokenHash:o,registryKey:t.registryKey,registrationEpoch:t.registrationEpoch,credentialHash:s(n),allowedActions:new Set(e.allowedActions??["status","read","send","attachment.get","pause"]),activationCauseMessageId:e.activationCauseMessageId,expiresAt:this.now()+Math.min(Math.max(e.ttlMs??10*6e4,1e3),30*6e4)}),this.prune(),a}resolve(e){const t=s(e.token),n=this.grants.get(t);if(!n||n.expiresAt<=this.now())throw this.grants.delete(t),new i("managed_room_context_expired","Managed Room context expired.");if(!d(n.credentialHash,s(e.machineCredential)))throw new i("managed_room_context_invalid","Managed Room context is invalid.");if(!n.allowedActions.has(e.action))throw new i("managed_room_action_forbidden","This action is not allowed in the managed Room context.");const a=this.registry.getByRegistryKey(n.registryKey),o=a?.binding;if(!a||!o||a.registrationEpoch!==n.registrationEpoch||a.lifecycleState==="closed"||o.status!=="active"&&o.status!=="paused"||!o.agentMembershipId)throw this.grants.delete(t),new i("managed_room_context_revoked","Managed Room context was revoked.");return{grant:n,registration:a,binding:o}}revokeToken(e){this.grants.delete(s(e))}revokeSession(e){for(const[t,n]of this.grants)n.registryKey===e&&this.grants.delete(t)}prune(){const e=this.now();for(const[t,n]of this.grants)n.expiresAt<=e&&this.grants.delete(t)}}function s(r){return g.createHash("sha256").update(r,"utf8").digest("hex")}function d(r,e){return g.timingSafeEqual(Buffer.from(r,"hex"),Buffer.from(e,"hex"))}export{h as MANAGED_ROOM_CONTEXT_ENV,m as ManagedRoomContextAuthority,i as ManagedRoomContextError};

package/dist/src/room/managed-prompt-composer.d.ts

@@ -1,5 +1,5 @@
 import type { ManagedAgentEnforcement, ManagedAgentPermissionPolicy, AgentType, RoomActivationMode } from '@shennian/wire';
-export declare const MANAGED_ROOM_POLICY_VERSION = "managed-room-surface-v3";
+export declare const MANAGED_ROOM_POLICY_VERSION = "managed-room-surface-v4";
 export type ManagedRoomPromptInput = {
     agent: {
         displayName: string;