shennian 0.3.85 → 0.3.86

package/dist/src/room/room-binding-client.js

@@ -1 +1,151 @@
-import{HttpRoomActionClient as r}from"./room-action-client.js";class a extends Error{code;constructor(e,n){super(n),this.code=e,this.name="RoomBindingHttpError"}}class l{fetchImpl;baseUrl;actionClient;constructor(e,n=fetch){this.fetchImpl=n,this.baseUrl=e.replace(/\/+$/,""),this.actionClient=new r(e,n)}status=e=>this.actionClient.status(e);getAttachmentCapability=e=>this.actionClient.getAttachmentCapability(e);initializeAttachment=e=>this.actionClient.initializeAttachment(e);completeAttachment=e=>this.actionClient.completeAttachment(e);createRoom=e=>this.actionClient.createRoom(e);createOperatorRoom=e=>this.actionClient.createOperatorRoom(e);resolveNativeSession=e=>this.actionClient.resolveNativeSession(e);joinRoom=e=>this.actionClient.joinRoom(e);read=e=>this.actionClient.read(e);send=e=>this.actionClient.send(e);mode=e=>this.actionClient.mode(e);async create(e){let n;try{n=await this.fetchImpl(`${this.baseUrl}/api/rooms/${encodeURIComponent(e.roomId)}/bindings`,{method:"POST",headers:{authorization:`Bearer ${e.machineToken}`,"content-type":"application/json"},body:JSON.stringify({bindingIntentId:e.bindingIntentId,agentIdentityId:e.agentIdentityId,nianSessionId:e.nianSessionId,runtimeAdapter:e.runtimeAdapter,sessionRegistryKey:e.sessionRegistryKey,activationCapability:e.activationCapability,activationMode:e.activationMode}),signal:AbortSignal.timeout(1e4)})}catch{throw new a("room_binding_server_unavailable","Shennian Room service is unavailable.")}if(!n.ok){let i=`room_binding_http_${n.status}`;try{const s=await n.json();typeof s.error=="string"&&/^[a-z0-9_-]{1,80}$/.test(s.error)&&(i=s.error)}catch{}throw new a(i,"Shennian Room binding request failed.")}let t;try{t=await n.json()}catch{throw new a("invalid_room_binding_response","Invalid Room binding response.")}return d(t,e)}async restart(e){let n;try{n=await this.fetchImpl(`${this.baseUrl}/api/rooms/${encodeURIComponent(e.roomId)}/bindings/${encodeURIComponent(e.bindingId)}/session`,{method:"PATCH",headers:{authorization:`Bearer ${e.machineToken}`,"content-type":"application/json"},body:JSON.stringify({agentIdentityId:e.agentIdentityId,previousNianSessionId:e.previousNianSessionId,nianSessionId:e.nianSessionId,runtimeAdapter:e.runtimeAdapter,sessionRegistryKey:e.sessionRegistryKey}),signal:AbortSignal.timeout(1e4)})}catch{throw new a("room_binding_server_unavailable","Shennian Room service is unavailable.")}const t=await n.json().catch(()=>null);if(!n.ok){const s=t&&typeof t.error=="string"&&/^[a-z0-9_-]{1,80}$/.test(t.error)?t.error:`room_binding_http_${n.status}`;throw new a(s,"Shennian Room restart request failed.")}const i=t;if(!i?.binding||i.binding.id!==e.bindingId||i.binding.roomId!==e.roomId||i.binding.agentIdentityId!==e.agentIdentityId||i.binding.nianSessionId!==e.nianSessionId||i.binding.runtimeAdapter!==e.runtimeAdapter||typeof i.binding.agentMembershipId!="string"||typeof i.resumeSequence!="string"||!/^(0|[1-9]\d{0,19})$/.test(i.resumeSequence)||typeof i.idempotent!="boolean")throw new a("invalid_room_binding_response","Invalid Room restart response.");return{binding:i.binding,resumeSequence:i.resumeSequence,idempotent:i.idempotent}}}function d(o,e){if(!o||typeof o!="object")throw new a("invalid_room_binding_response","Invalid Room binding response.");const n=o,t=n.binding;if(!t||typeof t.id!="string"||typeof t.agentMembershipId!="string"||t.roomId!==e.roomId||t.agentIdentityId!==e.agentIdentityId||t.nianSessionId!==e.nianSessionId||t.runtimeAdapter!==e.runtimeAdapter||t.activationCapability!==e.activationCapability||!c(t.activationMode,e)||!["pending_approval","active","paused","detached"].includes(t.status??"")||typeof n.idempotent!="boolean")throw new a("invalid_room_binding_response","Room binding response does not match the request.");return{binding:t,idempotent:n.idempotent}}function c(o,e){return e.activationCapability==="managed"&&e.activationMode==="auto_follow"?o==="auto_follow"||o==="mention_only":o===e.activationMode}export{l as HttpRoomBindingClient,a as RoomBindingHttpError};
+// @arch docs/features/network-rooms/multi-session-client-and-room-panel.md#32-每次调用都必须带可信调用上下文
+// @test src/__tests__/room-binding-client.test.ts
+import { HttpRoomActionClient } from './room-action-client.js';
+export class RoomBindingHttpError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'RoomBindingHttpError';
+    }
+}
+export class HttpRoomBindingClient {
+    fetchImpl;
+    baseUrl;
+    actionClient;
+    constructor(serverUrl, fetchImpl = fetch) {
+        this.fetchImpl = fetchImpl;
+        this.baseUrl = serverUrl.replace(/\/+$/, '');
+        this.actionClient = new HttpRoomActionClient(serverUrl, fetchImpl);
+    }
+    status = (target) => this.actionClient.status(target);
+    getAttachmentCapability = (target) => this.actionClient.getAttachmentCapability(target);
+    initializeAttachment = (target) => this.actionClient.initializeAttachment(target);
+    completeAttachment = (target) => this.actionClient.completeAttachment(target);
+    createRoom = (input) => this.actionClient.createRoom(input);
+    createOperatorRoom = (input) => this.actionClient.createOperatorRoom(input);
+    resolveNativeSession = (input) => this.actionClient.resolveNativeSession(input);
+    joinRoom = (input) => this.actionClient.joinRoom(input);
+    read = (target) => this.actionClient.read(target);
+    send = (target) => this.actionClient.send(target);
+    mode = (target) => this.actionClient.mode(target);
+    pause = (target) => this.actionClient.pause(target);
+    async create(input) {
+        let response;
+        try {
+            response = await this.fetchImpl(`${this.baseUrl}/api/rooms/${encodeURIComponent(input.roomId)}/bindings`, {
+                method: 'POST',
+                headers: {
+                    authorization: `Bearer ${input.machineToken}`,
+                    'content-type': 'application/json',
+                },
+                body: JSON.stringify({
+                    bindingIntentId: input.bindingIntentId,
+                    agentIdentityId: input.agentIdentityId,
+                    nianSessionId: input.nianSessionId,
+                    runtimeAdapter: input.runtimeAdapter,
+                    sessionRegistryKey: input.sessionRegistryKey,
+                    activationCapability: input.activationCapability,
+                    activationMode: input.activationMode,
+                }),
+                signal: AbortSignal.timeout(10_000),
+            });
+        }
+        catch {
+            throw new RoomBindingHttpError('room_binding_server_unavailable', 'Shennian Room service is unavailable.');
+        }
+        if (!response.ok) {
+            let code = `room_binding_http_${response.status}`;
+            try {
+                const body = (await response.json());
+                if (typeof body.error === 'string' && /^[a-z0-9_-]{1,80}$/.test(body.error))
+                    code = body.error;
+            }
+            catch { }
+            throw new RoomBindingHttpError(code, 'Shennian Room binding request failed.');
+        }
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch {
+            throw new RoomBindingHttpError('invalid_room_binding_response', 'Invalid Room binding response.');
+        }
+        return validateResponse(body, input);
+    }
+    async restart(input) {
+        let response;
+        try {
+            response = await this.fetchImpl(`${this.baseUrl}/api/rooms/${encodeURIComponent(input.roomId)}/bindings/${encodeURIComponent(input.bindingId)}/session`, {
+                method: 'PATCH',
+                headers: {
+                    authorization: `Bearer ${input.machineToken}`,
+                    'content-type': 'application/json',
+                },
+                body: JSON.stringify({
+                    agentIdentityId: input.agentIdentityId,
+                    previousNianSessionId: input.previousNianSessionId,
+                    nianSessionId: input.nianSessionId,
+                    runtimeAdapter: input.runtimeAdapter,
+                    sessionRegistryKey: input.sessionRegistryKey,
+                }),
+                signal: AbortSignal.timeout(10_000),
+            });
+        }
+        catch {
+            throw new RoomBindingHttpError('room_binding_server_unavailable', 'Shennian Room service is unavailable.');
+        }
+        const body = await response.json().catch(() => null);
+        if (!response.ok) {
+            const code = body && typeof body.error === 'string' && /^[a-z0-9_-]{1,80}$/.test(body.error)
+                ? body.error
+                : `room_binding_http_${response.status}`;
+            throw new RoomBindingHttpError(code, 'Shennian Room restart request failed.');
+        }
+        const result = body;
+        if (!result?.binding ||
+            result.binding.id !== input.bindingId ||
+            result.binding.roomId !== input.roomId ||
+            result.binding.agentIdentityId !== input.agentIdentityId ||
+            result.binding.nianSessionId !== input.nianSessionId ||
+            result.binding.runtimeAdapter !== input.runtimeAdapter ||
+            typeof result.binding.agentMembershipId !== 'string' ||
+            typeof result.resumeSequence !== 'string' ||
+            !/^(0|[1-9]\d{0,19})$/.test(result.resumeSequence) ||
+            typeof result.idempotent !== 'boolean') {
+            throw new RoomBindingHttpError('invalid_room_binding_response', 'Invalid Room restart response.');
+        }
+        return {
+            binding: result.binding,
+            resumeSequence: result.resumeSequence,
+            idempotent: result.idempotent,
+        };
+    }
+}
+function validateResponse(value, input) {
+    if (!value || typeof value !== 'object') {
+        throw new RoomBindingHttpError('invalid_room_binding_response', 'Invalid Room binding response.');
+    }
+    const object = value;
+    const binding = object.binding;
+    if (!binding ||
+        typeof binding.id !== 'string' ||
+        typeof binding.agentMembershipId !== 'string' ||
+        binding.roomId !== input.roomId ||
+        binding.agentIdentityId !== input.agentIdentityId ||
+        binding.nianSessionId !== input.nianSessionId ||
+        binding.runtimeAdapter !== input.runtimeAdapter ||
+        binding.activationCapability !== input.activationCapability ||
+        !matchesRequestedActivationMode(binding.activationMode, input) ||
+        !['pending_approval', 'active', 'paused', 'detached'].includes(binding.status ?? '') ||
+        typeof object.idempotent !== 'boolean') {
+        throw new RoomBindingHttpError('invalid_room_binding_response', 'Room binding response does not match the request.');
+    }
+    return { binding: binding, idempotent: object.idempotent };
+}
+function matchesRequestedActivationMode(responseMode, input) {
+    if (input.activationCapability === 'managed' && input.activationMode === 'auto_follow') {
+        return responseMode === 'auto_follow' || responseMode === 'mention_only';
+    }
+    return responseMode === input.activationMode;
+}

package/dist/src/security/managed-agent-policy.d.ts

@@ -49,7 +49,8 @@ export type ManagedAgentPolicyCompileInput = ManagedAgentRuntimeResolutionInput
 };
 /**
  * Turns untrusted policy input into one immutable per-turn runtime snapshot.
- * Any missing proof, invalid input, unavailable capability, or unconfirmed
- * privilege expansion returns an error instead of falling back to full access.
+ * Invalid input and unconfirmed host-wide access fail. Native enforcement gaps
+ * remain explicit in the immutable snapshot so the prompt can preserve the
+ * user's authorization ceiling while each adapter applies what it supports.
  */
 export declare function compileManagedAgentPolicy(input: ManagedAgentPolicyCompileInput): Promise<ManagedAgentPolicyCompileResult>;

package/dist/src/security/managed-agent-policy.js

@@ -1 +1 @@
-import u from"node:fs/promises";import o from"node:path";import{parseManagedAgentPermissionPolicy as m,resolveManagedAgentEffectivePermissionPolicy as y}from"@shennian/wire";import{getManagedAgentBaseEnvKeys as _,getManagedAgentProviderEnvKeys as f,MANAGED_AGENT_SESSION_ENV_KEYS as d}from"../agent-env.js";import{collectPolicyEnforcementGaps as b,resolveManagedAgentRuntimeProtection as C,resolveManagedAgentSecurityProfile as k}from"./managed-agent-runtime.js";import{resolveProtectedShennianDirectories as w}from"./managed-agent-credential-paths.js";function W(e){return{...e.enforcement,effectivePolicy:{version:e.adapterPolicy.version,fileAccess:e.adapterPolicy.fileAccess,externalCapabilities:{...e.adapterPolicy.externalCapabilities}}}}async function R(e){const r=m(e.policy);if(!r)return{ok:!1,errorCode:"managed_agent_policy_invalid"};if(r.fileAccess==="host-full"&&!e.hostFullAccessConfirmed)return{ok:!1,errorCode:"managed_agent_host_full_confirmation_required"};const t=await A(e.workDir,e.resolveWorkDir);if(!t.ok)return t;if(await E(t.workDir))return{ok:!1,errorCode:"managed_agent_workdir_invalid"};const a=P(e),i=C(a);if(i.level!=="hard")return{ok:!1,errorCode:"managed_agent_capability_unavailable",unsupportedCapabilities:c(["runtime.hardIsolation",...i.unsupportedCapabilities])};const l=k(a),n=b(r,l);if(n.unavailableCapabilities.length>0)return{ok:!1,errorCode:"managed_agent_capability_unavailable",unsupportedCapabilities:n.unavailableCapabilities};const s=c([...i.unsupportedCapabilities,...n.overgrantedCapabilities]);if(n.overgrantedCapabilities.length>0)return{ok:!1,errorCode:"managed_agent_capability_unavailable",unsupportedCapabilities:s};const g=y(r,i),v={level:i.level,effectivePolicy:g,unsupportedCapabilities:s,runtimeVersion:i.runtimeVersion,platform:i.platform,...i.executableFingerprint?{executableFingerprint:i.executableFingerprint}:{}};return{ok:!0,value:{requestedPolicy:x(r),enforcement:v,adapterPolicy:{version:r.version,workDir:t.workDir,fileAccess:r.fileAccess,externalCapabilities:{...r.externalCapabilities},denySensitiveFiles:!0,failClosed:!0},environmentPolicy:{inheritDaemonEnv:!1,loadLoginShell:!1,providerEnvKeys:[...f(e.agentType)],sessionEnvKeys:[...d],shellSubprocess:{inherit:"none",allowedEnvKeys:c([..._(e.platform),...d]),deniedEnvKeys:[...f(e.agentType)]}}}}}function P(e){return{agentType:e.agentType,runtimeVersion:e.runtimeVersion,platform:e.platform,isWsl:e.isWsl,executableFingerprint:e.executableFingerprint,requireExecutableFingerprint:e.requireExecutableFingerprint,securityDeclaration:e.securityDeclaration}}async function A(e,r){const t=e.trim();if(!t||!o.isAbsolute(t))return{ok:!1,errorCode:"managed_agent_workdir_invalid"};try{const a=await(r??h)(t);return!a||!o.isAbsolute(a)?{ok:!1,errorCode:"managed_agent_workdir_invalid"}:{ok:!0,workDir:o.normalize(a)}}catch{return{ok:!1,errorCode:"managed_agent_workdir_unavailable"}}}async function h(e){const r=await u.realpath(e);if(!(await u.stat(r)).isDirectory())throw new Error("managed_agent_workdir_not_directory");return r}async function E(e){return w().some(t=>D(e,t,process.platform))}function D(e,r,t){const a=n=>{const s=o.resolve(n);return t==="win32"?s.toLowerCase():s},i=a(e),l=a(r);return p(i,l)||p(l,i)}function p(e,r){const t=o.relative(e,r);return t===""||!t.startsWith("..")&&!o.isAbsolute(t)}function x(e){return{...e,externalCapabilities:{...e.externalCapabilities}}}function c(e){return[...new Set(e)]}export{R as compileManagedAgentPolicy,W as resolveManagedAgentAdapterEnforcement};
+import c from"node:fs/promises";import i from"node:path";import{parseManagedAgentPermissionPolicy as v,resolveManagedAgentEffectivePermissionPolicy as y}from"@shennian/wire";import{getManagedAgentBaseEnvKeys as _,getManagedAgentProviderEnvKeys as f,MANAGED_AGENT_SESSION_ENV_KEYS as u}from"../agent-env.js";import{collectPolicyEnforcementGaps as k,resolveManagedAgentRuntimeProtection as b,resolveManagedAgentSecurityProfile as w}from"./managed-agent-runtime.js";import{resolveProtectedShennianDirectories as P}from"./managed-agent-credential-paths.js";function W(e){return{...e.enforcement,effectivePolicy:{version:e.adapterPolicy.version,fileAccess:e.adapterPolicy.fileAccess,externalCapabilities:{...e.adapterPolicy.externalCapabilities}}}}async function R(e){const r=v(e.policy);if(!r)return{ok:!1,errorCode:"managed_agent_policy_invalid"};if(r.fileAccess==="host-full"&&!e.hostFullAccessConfirmed)return{ok:!1,errorCode:"managed_agent_host_full_confirmation_required"};const t=await C(e.workDir,e.resolveWorkDir);if(!t.ok)return t;if(await E(t.workDir))return{ok:!1,errorCode:"managed_agent_workdir_invalid"};const n=A(e),o=b(n),a=w(n),s=k(r,a),l=g([...o.level==="hard"?[]:["runtime.hardIsolation"],...o.unsupportedCapabilities,...s.unavailableCapabilities,...s.overgrantedCapabilities]),p=y(r,o),m={level:o.level,effectivePolicy:p,unsupportedCapabilities:l,runtimeVersion:o.runtimeVersion,platform:o.platform,...o.executableFingerprint?{executableFingerprint:o.executableFingerprint}:{}};return{ok:!0,value:{requestedPolicy:x(r),enforcement:m,adapterPolicy:{version:r.version,workDir:t.workDir,fileAccess:r.fileAccess,externalCapabilities:{...r.externalCapabilities},denySensitiveFiles:!0,failClosed:!0},environmentPolicy:{inheritDaemonEnv:!1,loadLoginShell:!1,providerEnvKeys:[...f(e.agentType)],sessionEnvKeys:[...u],shellSubprocess:{inherit:"none",allowedEnvKeys:g([..._(e.platform),...u]),deniedEnvKeys:[...f(e.agentType)]}}}}}function A(e){return{agentType:e.agentType,runtimeVersion:e.runtimeVersion,platform:e.platform,isWsl:e.isWsl,executableFingerprint:e.executableFingerprint,requireExecutableFingerprint:e.requireExecutableFingerprint,securityDeclaration:e.securityDeclaration}}async function C(e,r){const t=e.trim();if(!t||!i.isAbsolute(t))return{ok:!1,errorCode:"managed_agent_workdir_invalid"};try{const n=await(r??h)(t);return!n||!i.isAbsolute(n)?{ok:!1,errorCode:"managed_agent_workdir_invalid"}:{ok:!0,workDir:i.normalize(n)}}catch{return{ok:!1,errorCode:"managed_agent_workdir_unavailable"}}}async function h(e){const r=await c.realpath(e);if(!(await c.stat(r)).isDirectory())throw new Error("managed_agent_workdir_not_directory");return r}async function E(e){return P().some(t=>D(e,t,process.platform))}function D(e,r,t){const n=s=>{const l=i.resolve(s);return t==="win32"?l.toLowerCase():l},o=n(e),a=n(r);return d(o,a)||d(a,o)}function d(e,r){const t=i.relative(e,r);return t===""||!t.startsWith("..")&&!i.isAbsolute(t)}function x(e){return{...e,externalCapabilities:{...e.externalCapabilities}}}function g(e){return[...new Set(e)]}export{R as compileManagedAgentPolicy,W as resolveManagedAgentAdapterEnforcement};

package/dist/src/session/archive-zip.js

@@ -1 +1,220 @@
-import c from"node:fs";import u from"node:path";const p=5e3,M=1024*1024*1024,L=20,U=2048,h=0,x=1024*1024,z=new Uint32Array(256);for(let i=0;i<256;i+=1){let t=i;for(let n=0;n<8;n+=1)t=t&1?3988292384^t>>>1:t>>>1;z[i]=t>>>0}function F(i,t){let n=i;for(let o=0;o<t.length;o+=1)n=z[(n^t[o])&255]^n>>>8;return n>>>0}function b(i){const t=new Date(i||Date.now());return{date:Math.max(1980,Math.min(2107,t.getFullYear()))-1980<<9|t.getMonth()+1<<5|t.getDate(),time:t.getHours()<<11|t.getMinutes()<<5|Math.floor(t.getSeconds()/2)}}function s(i,t,n){i.writeUInt32LE(t>>>0,n)}function D(i,t){const n=Buffer.from(t.name,"utf8"),{date:o,time:r}=b(t.mtimeMs),e=Buffer.alloc(30);s(e,67324752,0),e.writeUInt16LE(L,4),e.writeUInt16LE(U,6),e.writeUInt16LE(h,8),e.writeUInt16LE(r,10),e.writeUInt16LE(o,12),s(e,t.crc32,14),s(e,t.size,18),s(e,t.size,22),e.writeUInt16LE(n.length,26),e.writeUInt16LE(0,28),c.writeSync(i,e),c.writeSync(i,n)}function T(i,t){const n=Buffer.from(t.name,"utf8"),{date:o,time:r}=b(t.mtimeMs),e=Buffer.alloc(46);s(e,33639248,0),e.writeUInt16LE(798,4),e.writeUInt16LE(L,6),e.writeUInt16LE(U,8),e.writeUInt16LE(h,10),e.writeUInt16LE(r,12),e.writeUInt16LE(o,14),s(e,t.crc32,16),s(e,t.size,20),s(e,t.size,24),e.writeUInt16LE(n.length,28),e.writeUInt16LE(0,30),e.writeUInt16LE(0,32),e.writeUInt16LE(0,34),e.writeUInt16LE(0,36),s(e,t.isDir?16:0,38),s(e,t.offset,42),c.writeSync(i,e),c.writeSync(i,n)}function g(i,t,n,o){const r=Buffer.alloc(22);s(r,101010256,0),r.writeUInt16LE(0,4),r.writeUInt16LE(0,6),r.writeUInt16LE(t,8),r.writeUInt16LE(t,10),s(r,n,12),s(r,o,16),r.writeUInt16LE(0,20),c.writeSync(i,r)}function d(i,t){const n=i.split(u.sep).join("/");return t&&!n.endsWith("/")?`${n}/`:n}function _(i,t){const n=c.statSync(i),o=d(u.basename(i)||"folder",!0),r=[{name:o,sourcePath:null,crc32:0,size:0,isDir:!0,mtimeMs:n.mtimeMs}];let e=0,m=0;const E=S=>{const a=c.readdirSync(S,{withFileTypes:!0});for(const I of a){const w=u.join(S,I.name),f=u.relative(i,w);if(!f||f.startsWith("..")||u.isAbsolute(f))continue;const l=c.lstatSync(w);if(!l.isSymbolicLink()){if(l.isDirectory()){r.push({name:u.posix.join(o,d(f,!0)),sourcePath:null,crc32:0,size:0,isDir:!0,mtimeMs:l.mtimeMs}),E(w);continue}if(l.isFile()){if(e+=1,e>t.maxFiles)throw new Error(`Too many files: ${e}`);if(m+=l.size,m>t.maxTotalSize)throw new Error(`Folder too large: ${m} bytes`);r.push({name:u.posix.join(o,d(f,!1)),sourcePath:w,crc32:A(w),size:l.size,isDir:!1,mtimeMs:l.mtimeMs})}}}};return E(i),r}function A(i){const t=c.openSync(i,"r"),n=Buffer.alloc(x);let o=4294967295;try{for(;;){const r=c.readSync(t,n,0,n.length,null);if(r<=0)break;o=F(o,n.subarray(0,r))}}finally{c.closeSync(t)}return(o^4294967295)>>>0}function B(i,t){const n=c.openSync(t,"r"),o=Buffer.alloc(x);try{for(;;){const r=c.readSync(n,o,0,o.length,null);if(r<=0)break;c.writeSync(i,o.subarray(0,r))}}finally{c.closeSync(n)}}function C(i,t,n={}){if(!c.statSync(i).isDirectory())throw new Error("Not a directory");const r={maxFiles:n.maxFiles??p,maxTotalSize:n.maxTotalSize??M},e=_(i,r),m=[];let E=0,S=0;c.mkdirSync(u.dirname(t),{recursive:!0});const a=c.openSync(t,"w");try{for(const f of e){const l=c.fstatSync(a).size,y={...f,offset:l};D(a,y),y.sourcePath&&(B(a,y.sourcePath),E+=1,S+=y.size),m.push(y)}const I=c.fstatSync(a).size;for(const f of m)T(a,f);const w=c.fstatSync(a).size-I;g(a,m.length,w,I)}finally{c.closeSync(a)}return{outputPath:t,fileCount:E,totalSize:S}}export{C as createZipArchive};
+// @arch docs/features/file-management-enhancements.md#文件夹打包下载
+// @test src/__tests__/archive-zip.test.ts
+import fs from 'node:fs';
+import path from 'node:path';
+const DEFAULT_MAX_FILES = 5000;
+const DEFAULT_MAX_TOTAL_SIZE = 1024 * 1024 * 1024;
+const ZIP_VERSION_NEEDED = 20;
+const ZIP_UTF8_FLAG = 0x0800;
+const ZIP_STORE_METHOD = 0;
+const CHUNK_SIZE = 1024 * 1024;
+const crcTable = new Uint32Array(256);
+for (let index = 0; index < 256; index += 1) {
+    let value = index;
+    for (let bit = 0; bit < 8; bit += 1) {
+        value = value & 1 ? 0xedb88320 ^ (value >>> 1) : value >>> 1;
+    }
+    crcTable[index] = value >>> 0;
+}
+function updateCrc32(crc, buffer) {
+    let next = crc;
+    for (let index = 0; index < buffer.length; index += 1) {
+        next = crcTable[(next ^ buffer[index]) & 0xff] ^ (next >>> 8);
+    }
+    return next >>> 0;
+}
+function dosDateTime(mtimeMs) {
+    const date = new Date(mtimeMs || Date.now());
+    const year = Math.max(1980, Math.min(2107, date.getFullYear()));
+    return {
+        date: ((year - 1980) << 9) | ((date.getMonth() + 1) << 5) | date.getDate(),
+        time: (date.getHours() << 11) | (date.getMinutes() << 5) | Math.floor(date.getSeconds() / 2),
+    };
+}
+function writeUInt32(buffer, value, offset) {
+    buffer.writeUInt32LE(value >>> 0, offset);
+}
+function writeLocalHeader(fd, entry) {
+    const name = Buffer.from(entry.name, 'utf8');
+    const { date, time } = dosDateTime(entry.mtimeMs);
+    const header = Buffer.alloc(30);
+    writeUInt32(header, 0x04034b50, 0);
+    header.writeUInt16LE(ZIP_VERSION_NEEDED, 4);
+    header.writeUInt16LE(ZIP_UTF8_FLAG, 6);
+    header.writeUInt16LE(ZIP_STORE_METHOD, 8);
+    header.writeUInt16LE(time, 10);
+    header.writeUInt16LE(date, 12);
+    writeUInt32(header, entry.crc32, 14);
+    writeUInt32(header, entry.size, 18);
+    writeUInt32(header, entry.size, 22);
+    header.writeUInt16LE(name.length, 26);
+    header.writeUInt16LE(0, 28);
+    fs.writeSync(fd, header);
+    fs.writeSync(fd, name);
+}
+function writeCentralDirectoryHeader(fd, entry) {
+    const name = Buffer.from(entry.name, 'utf8');
+    const { date, time } = dosDateTime(entry.mtimeMs);
+    const header = Buffer.alloc(46);
+    writeUInt32(header, 0x02014b50, 0);
+    header.writeUInt16LE(0x031e, 4);
+    header.writeUInt16LE(ZIP_VERSION_NEEDED, 6);
+    header.writeUInt16LE(ZIP_UTF8_FLAG, 8);
+    header.writeUInt16LE(ZIP_STORE_METHOD, 10);
+    header.writeUInt16LE(time, 12);
+    header.writeUInt16LE(date, 14);
+    writeUInt32(header, entry.crc32, 16);
+    writeUInt32(header, entry.size, 20);
+    writeUInt32(header, entry.size, 24);
+    header.writeUInt16LE(name.length, 28);
+    header.writeUInt16LE(0, 30);
+    header.writeUInt16LE(0, 32);
+    header.writeUInt16LE(0, 34);
+    header.writeUInt16LE(0, 36);
+    writeUInt32(header, entry.isDir ? 0x10 : 0, 38);
+    writeUInt32(header, entry.offset, 42);
+    fs.writeSync(fd, header);
+    fs.writeSync(fd, name);
+}
+function writeEndOfCentralDirectory(fd, entryCount, centralSize, centralOffset) {
+    const header = Buffer.alloc(22);
+    writeUInt32(header, 0x06054b50, 0);
+    header.writeUInt16LE(0, 4);
+    header.writeUInt16LE(0, 6);
+    header.writeUInt16LE(entryCount, 8);
+    header.writeUInt16LE(entryCount, 10);
+    writeUInt32(header, centralSize, 12);
+    writeUInt32(header, centralOffset, 16);
+    header.writeUInt16LE(0, 20);
+    fs.writeSync(fd, header);
+}
+function normalizeZipName(relativePath, isDir) {
+    const normalized = relativePath.split(path.sep).join('/');
+    return isDir && !normalized.endsWith('/') ? `${normalized}/` : normalized;
+}
+function collectEntries(sourceDir, options) {
+    const sourceStat = fs.statSync(sourceDir);
+    const rootName = normalizeZipName(path.basename(sourceDir) || 'folder', true);
+    const entries = [{
+            name: rootName,
+            sourcePath: null,
+            crc32: 0,
+            size: 0,
+            isDir: true,
+            mtimeMs: sourceStat.mtimeMs,
+        }];
+    let fileCount = 0;
+    let totalSize = 0;
+    const visit = (dirPath) => {
+        const raw = fs.readdirSync(dirPath, { withFileTypes: true });
+        for (const dirent of raw) {
+            const fullPath = path.join(dirPath, dirent.name);
+            const relative = path.relative(sourceDir, fullPath);
+            if (!relative || relative.startsWith('..') || path.isAbsolute(relative))
+                continue;
+            const stat = fs.lstatSync(fullPath);
+            if (stat.isSymbolicLink())
+                continue;
+            if (stat.isDirectory()) {
+                entries.push({
+                    name: path.posix.join(rootName, normalizeZipName(relative, true)),
+                    sourcePath: null,
+                    crc32: 0,
+                    size: 0,
+                    isDir: true,
+                    mtimeMs: stat.mtimeMs,
+                });
+                visit(fullPath);
+                continue;
+            }
+            if (!stat.isFile())
+                continue;
+            fileCount += 1;
+            if (fileCount > options.maxFiles)
+                throw new Error(`Too many files: ${fileCount}`);
+            totalSize += stat.size;
+            if (totalSize > options.maxTotalSize) {
+                throw new Error(`Folder too large: ${totalSize} bytes`);
+            }
+            entries.push({
+                name: path.posix.join(rootName, normalizeZipName(relative, false)),
+                sourcePath: fullPath,
+                crc32: computeFileCrc32(fullPath),
+                size: stat.size,
+                isDir: false,
+                mtimeMs: stat.mtimeMs,
+            });
+        }
+    };
+    visit(sourceDir);
+    return entries;
+}
+function computeFileCrc32(filePath) {
+    const fd = fs.openSync(filePath, 'r');
+    const buffer = Buffer.alloc(CHUNK_SIZE);
+    let crc = 0xffffffff;
+    try {
+        while (true) {
+            const bytesRead = fs.readSync(fd, buffer, 0, buffer.length, null);
+            if (bytesRead <= 0)
+                break;
+            crc = updateCrc32(crc, buffer.subarray(0, bytesRead));
+        }
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    return (crc ^ 0xffffffff) >>> 0;
+}
+function writeFileData(fd, filePath) {
+    const sourceFd = fs.openSync(filePath, 'r');
+    const buffer = Buffer.alloc(CHUNK_SIZE);
+    try {
+        while (true) {
+            const bytesRead = fs.readSync(sourceFd, buffer, 0, buffer.length, null);
+            if (bytesRead <= 0)
+                break;
+            fs.writeSync(fd, buffer.subarray(0, bytesRead));
+        }
+    }
+    finally {
+        fs.closeSync(sourceFd);
+    }
+}
+export function createZipArchive(sourceDir, outputPath, options = {}) {
+    const sourceStat = fs.statSync(sourceDir);
+    if (!sourceStat.isDirectory())
+        throw new Error('Not a directory');
+    const limits = {
+        maxFiles: options.maxFiles ?? DEFAULT_MAX_FILES,
+        maxTotalSize: options.maxTotalSize ?? DEFAULT_MAX_TOTAL_SIZE,
+    };
+    const scanned = collectEntries(sourceDir, limits);
+    const zipEntries = [];
+    let fileCount = 0;
+    let totalSize = 0;
+    fs.mkdirSync(path.dirname(outputPath), { recursive: true });
+    const fd = fs.openSync(outputPath, 'w');
+    try {
+        for (const entry of scanned) {
+            const offset = fs.fstatSync(fd).size;
+            const nextEntry = { ...entry, offset };
+            writeLocalHeader(fd, nextEntry);
+            if (nextEntry.sourcePath) {
+                writeFileData(fd, nextEntry.sourcePath);
+                fileCount += 1;
+                totalSize += nextEntry.size;
+            }
+            zipEntries.push(nextEntry);
+        }
+        const centralOffset = fs.fstatSync(fd).size;
+        for (const entry of zipEntries)
+            writeCentralDirectoryHeader(fd, entry);
+        const centralSize = fs.fstatSync(fd).size - centralOffset;
+        writeEndOfCentralDirectory(fd, zipEntries.length, centralSize, centralOffset);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    return { outputPath, fileCount, totalSize };
+}

package/dist/src/session/deletion-sync-state.js

@@ -1,2 +1,136 @@
-import f from"node:crypto";import n from"node:fs";import u from"node:path";import{resolvePersonalSyncV1Path as A}from"../personal-sync/paths.js";import{getDaemonInstallationId as m}from"../personal-sync/identity.js";import{recordPersonalSyncLocalMetric as y}from"../personal-sync/metrics.js";class p extends Error{code;retryable=!1;constructor(e){super(`session deletion sync stopped: ${e}`),this.code=e,this.name="DeletionSyncTerminalError"}}class S extends Error{retryAfterMs;retryable=!0;constructor(e){super(`session deletion sync retry delayed by ${e}ms`),this.retryAfterMs=e,this.name="DeletionSyncRetryWaitError"}}function w(){return s().lastAppliedRevision}function s(){const t=a();if(!n.existsSync(t))return{schemaVersion:1,daemonInstallationId:m(),lastAppliedRevision:0,updatedAt:new Date(0).toISOString()};const e=JSON.parse(n.readFileSync(t,"utf8"));if(e.schemaVersion!==1||e.daemonInstallationId!==m()||!Number.isSafeInteger(e.lastAppliedRevision)||e.lastAppliedRevision<0)throw new Error("invalid deletion sync state");return e}function v(t){if(!Number.isSafeInteger(t)||t<0)throw new Error("invalid deletion sync revision");const e=w();if(t<e)throw new Error("deletion sync revision cannot move backwards");t!==e&&l(a(),{...s(),lastAppliedRevision:t,updatedAt:new Date().toISOString()})}function E(t=Date.now()){const e=s();if(e.terminalCode)throw new p(e.terminalCode);if(e.nextAttemptAt){const r=Date.parse(e.nextAttemptAt)-t;if(r>0)throw new S(r)}}function b(t){const e=s(),r=(e.retryAttempts??0)+1,i=t.now??Date.now();if(!t.retryable||r>=(t.maxAttempts??8))throw l(a(),{...e,retryAttempts:r,nextAttemptAt:null,terminalCode:t.code,updatedAt:new Date(i).toISOString()}),y("permanentStops"),new p(t.code);const o=Math.min(5e3*2**Math.max(0,r-1),360*60*1e3),c=Math.round(o*.2*(Math.random()*2-1)),d=o+c;throw l(a(),{...e,retryAttempts:r,terminalCode:null,nextAttemptAt:new Date(i+d).toISOString(),updatedAt:new Date(i).toISOString()}),y("transientRetries"),new S(d)}function O(){const t=s();!t.retryAttempts&&!t.nextAttemptAt&&!t.terminalCode||l(a(),{...t,retryAttempts:0,nextAttemptAt:null,terminalCode:null,updatedAt:new Date().toISOString()})}function a(){return A("deletion-sync-state.json")}function l(t,e){const r=u.dirname(t);n.mkdirSync(r,{recursive:!0,mode:448});const i=`${t}.tmp-${process.pid}-${f.randomBytes(6).toString("hex")}`;let o;try{if(o=n.openSync(i,"wx",384),n.writeFileSync(o,`${JSON.stringify(e,null,2)}
-`,"utf8"),n.fsyncSync(o),n.closeSync(o),o=void 0,n.renameSync(i,t),process.platform!=="win32"){const c=n.openSync(r,"r");try{n.fsyncSync(c)}finally{n.closeSync(c)}}}finally{o!==void 0&&n.closeSync(o);try{n.unlinkSync(i)}catch{}}}export{S as DeletionSyncRetryWaitError,p as DeletionSyncTerminalError,E as assertDeletionSyncRunnable,O as clearDeletionSyncFailure,w as readDeletionSyncRevision,b as recordDeletionSyncFailure,v as writeDeletionSyncRevision};
+// @arch docs/architecture/data-sync.md#删除闭环
+// @test src/__tests__/session-deletion-sync.test.ts
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { resolvePersonalSyncV1Path } from '../personal-sync/paths.js';
+import { getDaemonInstallationId } from '../personal-sync/identity.js';
+import { recordPersonalSyncLocalMetric } from '../personal-sync/metrics.js';
+export class DeletionSyncTerminalError extends Error {
+    code;
+    retryable = false;
+    constructor(code) {
+        super(`session deletion sync stopped: ${code}`);
+        this.code = code;
+        this.name = 'DeletionSyncTerminalError';
+    }
+}
+export class DeletionSyncRetryWaitError extends Error {
+    retryAfterMs;
+    retryable = true;
+    constructor(retryAfterMs) {
+        super(`session deletion sync retry delayed by ${retryAfterMs}ms`);
+        this.retryAfterMs = retryAfterMs;
+        this.name = 'DeletionSyncRetryWaitError';
+    }
+}
+export function readDeletionSyncRevision() {
+    return readState().lastAppliedRevision;
+}
+function readState() {
+    const file = stateFile();
+    if (!fs.existsSync(file))
+        return {
+            schemaVersion: 1,
+            daemonInstallationId: getDaemonInstallationId(),
+            lastAppliedRevision: 0,
+            updatedAt: new Date(0).toISOString(),
+        };
+    const state = JSON.parse(fs.readFileSync(file, 'utf8'));
+    if (state.schemaVersion !== 1
+        || state.daemonInstallationId !== getDaemonInstallationId()
+        || !Number.isSafeInteger(state.lastAppliedRevision)
+        || state.lastAppliedRevision < 0)
+        throw new Error('invalid deletion sync state');
+    return state;
+}
+export function writeDeletionSyncRevision(revision) {
+    if (!Number.isSafeInteger(revision) || revision < 0)
+        throw new Error('invalid deletion sync revision');
+    const current = readDeletionSyncRevision();
+    if (revision < current)
+        throw new Error('deletion sync revision cannot move backwards');
+    if (revision === current)
+        return;
+    atomicWriteJson(stateFile(), {
+        ...readState(),
+        lastAppliedRevision: revision,
+        updatedAt: new Date().toISOString(),
+    });
+}
+export function assertDeletionSyncRunnable(now = Date.now()) {
+    const state = readState();
+    if (state.terminalCode)
+        throw new DeletionSyncTerminalError(state.terminalCode);
+    if (state.nextAttemptAt) {
+        const remaining = Date.parse(state.nextAttemptAt) - now;
+        if (remaining > 0)
+            throw new DeletionSyncRetryWaitError(remaining);
+    }
+}
+export function recordDeletionSyncFailure(input) {
+    const state = readState();
+    const attempts = (state.retryAttempts ?? 0) + 1;
+    const now = input.now ?? Date.now();
+    if (!input.retryable || attempts >= (input.maxAttempts ?? 8)) {
+        atomicWriteJson(stateFile(), {
+            ...state, retryAttempts: attempts, nextAttemptAt: null,
+            terminalCode: input.code, updatedAt: new Date(now).toISOString(),
+        });
+        recordPersonalSyncLocalMetric('permanentStops');
+        throw new DeletionSyncTerminalError(input.code);
+    }
+    const delay = Math.min(5_000 * 2 ** Math.max(0, attempts - 1), 6 * 60 * 60 * 1_000);
+    const jitter = Math.round(delay * 0.2 * (Math.random() * 2 - 1));
+    const retryAfterMs = delay + jitter;
+    atomicWriteJson(stateFile(), {
+        ...state, retryAttempts: attempts, terminalCode: null,
+        nextAttemptAt: new Date(now + retryAfterMs).toISOString(),
+        updatedAt: new Date(now).toISOString(),
+    });
+    recordPersonalSyncLocalMetric('transientRetries');
+    throw new DeletionSyncRetryWaitError(retryAfterMs);
+}
+export function clearDeletionSyncFailure() {
+    const state = readState();
+    if (!state.retryAttempts && !state.nextAttemptAt && !state.terminalCode)
+        return;
+    atomicWriteJson(stateFile(), {
+        ...state, retryAttempts: 0, nextAttemptAt: null, terminalCode: null,
+        updatedAt: new Date().toISOString(),
+    });
+}
+function stateFile() {
+    return resolvePersonalSyncV1Path('deletion-sync-state.json');
+}
+function atomicWriteJson(file, value) {
+    const directory = path.dirname(file);
+    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const temp = `${file}.tmp-${process.pid}-${crypto.randomBytes(6).toString('hex')}`;
+    let fd;
+    try {
+        fd = fs.openSync(temp, 'wx', 0o600);
+        fs.writeFileSync(fd, `${JSON.stringify(value, null, 2)}\n`, 'utf8');
+        fs.fsyncSync(fd);
+        fs.closeSync(fd);
+        fd = undefined;
+        fs.renameSync(temp, file);
+        if (process.platform !== 'win32') {
+            const directoryFd = fs.openSync(directory, 'r');
+            try {
+                fs.fsyncSync(directoryFd);
+            }
+            finally {
+                fs.closeSync(directoryFd);
+            }
+        }
+    }
+    finally {
+        if (fd !== undefined)
+            fs.closeSync(fd);
+        try {
+            fs.unlinkSync(temp);
+        }
+        catch { }
+    }
+}

package/dist/src/session/handlers/agent-capabilities.js

@@ -1 +1,14 @@
-import{isNativeCapabilityProvider as o,listAgentNativeCapabilities as n}from"../../agents/native-capabilities.js";async function c(s,t){const i=typeof t.params.agentType=="string"?t.params.agentType:"",e=typeof t.params.workDir=="string"?t.params.workDir:process.cwd(),a=o(i),p={supported:a,agentType:i,capabilities:a?n({agentType:i,workDir:e}):[]};s.client.sendRes({type:"res",id:t.id,ok:!0,payload:p})}export{c as handleAgentCapabilitiesList};
+// @arch docs/features/agent-native-capabilities.md
+// @test src/__tests__/native-capabilities.test.ts
+import { isNativeCapabilityProvider, listAgentNativeCapabilities } from '../../agents/native-capabilities.js';
+export async function handleAgentCapabilitiesList(runtime, req) {
+    const agentType = typeof req.params.agentType === 'string' ? req.params.agentType : '';
+    const workDir = typeof req.params.workDir === 'string' ? req.params.workDir : process.cwd();
+    const supported = isNativeCapabilityProvider(agentType);
+    const payload = {
+        supported,
+        agentType,
+        capabilities: supported ? listAgentNativeCapabilities({ agentType, workDir }) : [],
+    };
+    runtime.client.sendRes({ type: 'res', id: req.id, ok: true, payload });
+}