shennian 0.5.0 → 0.5.2

package/dist/src/native-fusion/local-repository.js

@@ -1,2 +1,2 @@
-import{isToolPayload as B,sessionPreviewFromPayload as L}from"@shennian/wire";import y from"node:crypto";import d from"node:fs";import u from"node:path";import{recordPersonalSyncLocalMetric as C}from"../personal-sync/metrics.js";import{resolvePersonalSyncV1Path as P}from"../personal-sync/paths.js";import{getCanonicalSessionStore as H,getDaemonInstallationId as U,listSessionRecords as K,recordSession as w}from"../session/store.js";import{readToolDetail as V,writeToolDetail as q}from"../session/tool-detail-store.js";import{NativeSourceDeletionStore as J}from"./native-source-deletions.js";import{isInternalNativeSource as W}from"./source-visibility.js";const E=1;class z extends Error{code="missing_user_boundary";constructor(e){super(`native source ${e} does not start at a visible user boundary`),this.name="MissingUserBoundaryError"}}class G extends Error{code="internal_native_source";constructor(){super("internal native source cannot be imported as a personal session"),this.name="InternalNativeSourceError"}}class Q extends Error{code="native_source_deleted";constructor(e){super(`native source ${e} is blocked by a durable deletion tombstone`),this.name="NativeSourceDeletedError"}}class X extends Error{sourceEventKey;code="native_event_identity_conflict";constructor(e){super(`native event identity conflict: ${e}`),this.sourceEventKey=e,this.name="NativeEventIdentityConflictError"}}class pe{options;constructor(e={}){this.options=e}commitEvents(e){return[...e].filter(s=>!this.isSourceInternal(s.agentType,s.sourceSessionKey)).sort((s,o)=>s.ts-o.ts).map(s=>this.commitEvent(s))}updateMessageDeliveryState(e,s,o){if(!this.canonicalStore().updateMessageDeliveryState(e,s,o))return;const i=(this.options.listLocalSessions??K)().find(a=>a.sessionId===e);if(!i)return;(this.options.recordLocalSession??w)({...i})}commitEvent(e){if(Y(e),this.isSourceInternal(e.agentType,e.sourceSessionKey))throw new G;if(this.isSourceDeleted(e.agentType,e.sourceSessionKey))throw new Q(e.sourceSessionKey);const s=this.installationId(),o=this.readSources(),n=b(e.agentType,e.sourceSessionKey),i=o.sources[n],c=se(e),a=this.ledgerFile(e.agentType,e.sourceEventKey),r=d.existsSync(a)?D(a):null;if(r&&r.daemonInstallationId!==s)throw new Error("native event ledger belongs to another daemon installation");if(r&&r.eventFingerprint!==c)throw new X(e.sourceEventKey);if(!i&&!r&&e.role!=="user")throw new z(e.sourceSessionKey);const g=e.claimSessionId??null,l=i?.sessionId??r?.sessionId??g??Z(s,e.agentType,e.sourceSessionKey);if(g&&i&&i.sessionId!==g)throw new Error(`managed claim session conflicts with source binding ${e.sourceSessionKey}`);const f=this.canonicalStore(),I=e.localDisposition==="managed_echo_suppressed"||r?.mappedBy==="managed_echo_suppressed",m=r?.canonicalMessageId??(I?null:e.claimCanonicalMessageId??ee(s,e.agentType,e.canonicalMessageKey??e.sourceEventKey));let h=f.getManifest(l)?.bodyRevision??0,T=!!r;const M=!I&&!!e.claimCanonicalMessageId;if(M){if(!m)throw new Error("managed echo claim requires a canonical message");const S=f.getMessageState(l,m);if(!S||S.tombstoned)throw new Error(`managed echo claim target is not durable: ${m}`);S.deliveryState==="queued"&&S.message&&(h=f.upsert(l,{...S.message,ts:e.ts},"executing").bodyRevision)}if(!r&&!M&&!I){if(!m)throw new Error("native event requires a canonical message");const S=e.canonicalMessageKey?f.getMessageState(l,m):null,v=e.canonicalMutation==="upsert"||!!S,F=v?S??f.getMessageState(l,m):null,_={id:m,sessionId:l,role:e.role,ts:F?.message?.ts??e.ts,payload:te(F?.message?.payload,e.payload)},$=v?f.upsert(l,_):f.append(l,_);if(h=$.bodyRevision,T=$.duplicate,e.localToolDetail){const j=this.options.writeLocalToolDetail??q,k=this.options.readLocalToolDetail??V,R=oe(k(l,e.localToolDetail.toolCallId),e.localToolDetail);j({sessionId:l,...R,ts:e.ts,detailRef:{toolIndex:0}})}}e.terminal&&(h=f.completeStartedUserMessages(l,e.ts).at(-1)?.bodyRevision??h),(!r||e.terminal)&&!I&&this.recordIndex(e,l,m,h);const x=new Date().toISOString();return r||p(a,{schemaVersion:E,daemonInstallationId:s,sessionId:l,agentType:e.agentType,sourceSessionKey:e.sourceSessionKey,sourceEventKey:e.sourceEventKey,eventFingerprint:c,canonicalMessageId:m,canonicalRevision:h,cursor:e.cursor??null,mappedBy:I?"managed_echo_suppressed":M?"managed_echo_claim":e.sourceMode,eventTs:e.ts,createdAt:x}),o.sources[n]={schemaVersion:E,daemonInstallationId:s,sessionId:l,agentType:e.agentType,sourceSessionKey:e.sourceSessionKey,sourceMode:r?i?.sourceMode??e.sourceMode:e.sourceMode,lastCursor:r?i?.lastCursor??r.cursor:e.cursor??i?.lastCursor??null,bodyRevision:h,createdAt:i?.createdAt??x,updatedAt:x},p(this.sourcesFile(),o),!r&&e.cursor&&C("sourceCursorAdvanced"),!r&&!M&&!I&&!T&&C("canonicalCommits"),{sessionId:l,messageId:m,bodyRevision:h,duplicate:T,claimed:M,suppressed:I}}repairMissingUserBoundaries(){const e=this.options.listLocalSessions??K,s=this.options.recordLocalSession??w,o=this.canonicalStore();let n=0;for(const i of e()){if(i.localReady)continue;const a=o.getManifest(i.sessionId)?.firstAvailableSeq;if(a==null)continue;const r=o.readPage(i.sessionId,{limit:1,beforeSequence:a+1}).entries[0];!r||r.sequence!==a||r.message.role!=="user"||(s({sessionId:i.sessionId,agentType:i.agentType,sessionMode:i.sessionMode,managerConfig:i.managerConfig,workDir:i.workDir,agentSessionId:i.agentSessionId,modelId:i.modelId,managerDefaultWorkerAgentType:i.managerDefaultWorkerAgentType,managerDefaultWorkerModelId:i.managerDefaultWorkerModelId,status:i.status,lastActivityAt:i.lastActivityAt,lastMessagePreview:i.lastMessagePreview,localReady:!0,firstUserMessageId:r.message.id,firstUserBodyRevision:r.revision}),n+=1)}return n}listManagedClaims(){return Object.values(this.readManagedEchoState().claims)}listManagedSuppressions(){return Object.values(this.readManagedEchoState().suppressions)}upsertManagedClaim(e){O(e);const s=this.readManagedEchoState();s.claims[e.canonicalMessageId]=e,p(this.managedEchoStateFile(),s)}updateManagedClaimSource(e,s,o){const n=this.readManagedEchoState();let i=!1;for(const c of Object.values(n.claims))c.sessionId!==e||c.sourceAgentType!==s||(c.sourceSessionKey=o,i=!0);i&&p(this.managedEchoStateFile(),n)}removeManagedClaim(e){const s=this.readManagedEchoState();s.claims[e]&&(delete s.claims[e],p(this.managedEchoStateFile(),s))}completeManagedClaim(e,s){const o=this.readManagedEchoState();delete o.claims[e],s&&(A(s),o.suppressions[b(s.agentType,s.sourceSessionKey)]=s),p(this.managedEchoStateFile(),o)}removeManagedSuppression(e,s){const o=this.readManagedEchoState(),n=b(e,s);o.suppressions[n]&&(delete o.suppressions[n],p(this.managedEchoStateFile(),o))}listSourceBindings(){return Object.values(this.readSources().sources).filter(e=>!this.isSourceDeleted(e.agentType,e.sourceSessionKey))}listSourceOwners(){return Object.values(this.readSources().sources).map(({agentType:e,sourceSessionKey:s,sessionId:o})=>({agentType:e,sourceSessionKey:s,sessionId:o}))}purgeSession(e){if(!e)throw new Error("sessionId is required");const s=this.readSources();let o=!1;for(const[a,r]of Object.entries(s.sources))r.sessionId===e&&(delete s.sources[a],o=!0);o&&p(this.sourcesFile(),s);const n=this.readManagedEchoState();let i=!1;for(const[a,r]of Object.entries(n.claims))r.sessionId===e&&(delete n.claims[a],i=!0);for(const[a,r]of Object.entries(n.suppressions))r.sessionId===e&&(delete n.suppressions[a],i=!0);i&&p(this.managedEchoStateFile(),n);const c=u.join(this.rootDir(),"ledger");if(d.existsSync(c))for(const a of d.readdirSync(c,{withFileTypes:!0})){if(!a.isFile()||!a.name.endsWith(".json"))continue;const r=u.join(c,a.name),g=D(r);if(g.daemonInstallationId!==this.installationId())throw new Error("native event ledger belongs to another daemon installation");g.sessionId===e&&d.unlinkSync(r)}}isSourceInternal(e,s){const o=this.rootDir();return W(e,s,{filePath:u.join(u.basename(o)==="native-fusion"?u.dirname(o):o,"native-fusion-state.json"),daemonInstallationId:this.installationId()})}isSourceDeleted(e,s){return(this.options.deletionStore??new J({rootDir:u.basename(this.rootDir())==="native-fusion"?u.dirname(this.rootDir()):this.rootDir(),daemonInstallationId:this.installationId()})).has(e,s)}observeNativeTitle(e,s,o){if(this.isSourceInternal(e,s))return!1;const n=o.trim().slice(0,120);if(!n)return!1;const i=this.readSources().sources[b(e,s)];if(!i||this.isSourceDeleted(e,s))return!1;const c=(this.options.listLocalSessions??K)().find(g=>g.sessionId===i.sessionId);if(c?.titleLockedByUser||c?.titleSource==="agent_native"&&c.title===n)return!1;const a=y.createHash("sha256").update(`${e}\0${s}\0${n}`).digest("hex");return(this.options.recordLocalSession??w)({sessionId:i.sessionId,agentType:i.agentType,workDir:c?.workDir??"",agentSessionId:s,title:n,titleSource:"agent_native",titleOriginEventId:`agent-native:${a}`}),!0}recordIndex(e,s,o,n){const i=this.options.recordLocalSession??w,c=e.terminal?`terminal:${y.createHash("sha256").update(e.sourceEventKey).digest("hex")}`:void 0,a=e.role==="user"||e.role==="agent"?N(e.payload):null,r=a&&o?{lastMessagePreview:a,lastMessagePreviewMessageId:o,lastMessagePreviewAt:new Date(e.ts).toISOString()}:{},g=o&&(a||B(e.payload))?new Date(e.ts).toISOString():void 0;i({sessionId:s,agentType:e.agentType,workDir:e.workDir??"",agentSessionId:e.sourceSessionKey,modelId:e.modelId??null,status:e.terminal?e.terminalState==="failed"||e.terminalState==="aborted"?"failed":"completed":"active",attentionId:c,lastActivityAt:new Date(e.ts).toISOString(),lastVisibleEventAt:g,...r,...e.role==="user"&&o?{localReady:!0,firstUserMessageId:o,firstUserBodyRevision:n}:{},title:e.title?.trim()||(e.role==="user"?N(e.payload)??"":void 0),titleSource:e.title?.trim()?e.titleSource??"first_user_fallback":"first_user_fallback",titleOriginEventId:e.sourceEventKey})}readSources(){const e=this.sourcesFile();if(!d.existsSync(e))return{schemaVersion:E,daemonInstallationId:this.installationId(),sources:{}};const s=D(e);if(s.schemaVersion!==E||s.daemonInstallationId!==this.installationId()||!s.sources)throw new Error("invalid native source binding store");for(const o of Object.values(s.sources))if(o.daemonInstallationId!==this.installationId())throw new Error("native source binding belongs to another daemon installation");return s}installationId(){return this.options.daemonInstallationId??U()}canonicalStore(){return this.options.canonicalStore??H()}rootDir(){return this.options.rootDir??P("native-fusion")}sourcesFile(){return u.join(this.rootDir(),"sources.json")}managedEchoStateFile(){return u.join(this.rootDir(),"managed-echo-state.json")}readManagedEchoState(){const e=this.managedEchoStateFile();if(!d.existsSync(e))return{schemaVersion:E,daemonInstallationId:this.installationId(),claims:{},suppressions:{}};const s=D(e);if(s.schemaVersion!==E||s.daemonInstallationId!==this.installationId()||!s.claims||!s.suppressions)throw new Error("invalid managed echo state");for(const o of Object.values(s.claims))O(o);for(const o of Object.values(s.suppressions))A(o);return s}ledgerFile(e,s){const o=y.createHash("sha256").update(`${e}\0${s}`).digest("hex");return u.join(this.rootDir(),"ledger",`${o}.json`)}}function Y(t){if(!t.agentType||!t.sourceSessionKey||!t.sourceEventKey||!t.payload)throw new Error("invalid native event");if(!Number.isFinite(t.ts))throw new Error("invalid native event timestamp")}function b(t,e){return y.createHash("sha256").update(`${t}\0${e}`).digest("hex")}function Z(t,e,s){return`native-session-${y.createHash("sha256").update(`${t}\0${e}\0${s}`).digest("hex").slice(0,32)}`}function ee(t,e,s){return`native-${y.createHash("sha256").update(`${t}\0${e}\0${s}`).digest("hex").slice(0,32)}`}function se(t){return y.createHash("sha256").update(JSON.stringify({agentType:t.agentType,sourceSessionKey:t.sourceSessionKey,sourceEventKey:t.sourceEventKey,role:t.role,ts:t.ts,payload:t.payload,canonicalMessageKey:t.canonicalMessageKey??null,canonicalMutation:t.canonicalMutation??"append"})).digest("hex")}function O(t){if(!t.sessionId||!t.canonicalMessageId||!t.textHash||!Number.isFinite(t.createdAt)||!["codex","claude","opencode"].includes(t.sourceAgentType)||!["suppress_following","import_following"].includes(t.managedEchoPolicy))throw new Error("invalid managed echo claim")}function A(t){if(!t.sessionId||!t.sourceSessionKey||!t.claimSourceEventKey||!["codex","claude","opencode"].includes(t.agentType)||!Number.isFinite(t.startedAt)||!Number.isFinite(t.endsAt)||t.endsAt<t.startedAt)throw new Error("invalid managed echo suppression")}function te(t,e){if(!t)return e;try{const s=JSON.parse(t),o=JSON.parse(e);if(s.type!=="tool"||o.type!=="tool"||s.toolCallId!==o.toolCallId)return e;const n=typeof o.name=="string"?o.name:"",i=/(?:_output|_result)$/.test(n);return JSON.stringify({...s,...o,...i&&typeof s.name=="string"?{name:s.name}:{}})}catch{return e}}function oe(t,e){if(!t||t.toolCallId!==e.toolCallId)return e;const s=/(?:_output|_result)$/.test(e.name);return{...e,name:s?t.name:e.name,...e.args===void 0&&t.args!==void 0?{args:t.args}:{},...e.result===void 0&&t.result!==void 0?{result:t.result}:{}}}function N(t){return L(t,120)}function p(t,e){const s=u.dirname(t);d.mkdirSync(s,{recursive:!0,mode:448});const o=`${t}.tmp-${process.pid}-${y.randomBytes(6).toString("hex")}`;let n;try{n=d.openSync(o,"wx",384),d.writeFileSync(n,`${JSON.stringify(e,null,2)}
-`,"utf8"),d.fsyncSync(n),d.closeSync(n),n=void 0,d.renameSync(o,t)}finally{n!==void 0&&d.closeSync(n);try{d.unlinkSync(o)}catch{}}}function D(t){return JSON.parse(d.readFileSync(t,"utf8"))}export{G as InternalNativeSourceError,z as MissingUserBoundaryError,X as NativeEventIdentityConflictError,pe as NativeFusionLocalRepository,Q as NativeSourceDeletedError};
+import{isToolPayload as L,sessionPreviewFromPayload as B}from"@shennian/wire";import I from"node:crypto";import d from"node:fs";import{renameSyncWithRetry as P}from"../fs/atomic-rename.js";import g from"node:path";import{recordPersonalSyncLocalMetric as C}from"../personal-sync/metrics.js";import{resolvePersonalSyncV1Path as H}from"../personal-sync/paths.js";import{getCanonicalSessionStore as U,getDaemonInstallationId as V,listSessionRecords as w,recordSession as b}from"../session/store.js";import{readToolDetail as q,writeToolDetail as J}from"../session/tool-detail-store.js";import{NativeSourceDeletionStore as W}from"./native-source-deletions.js";import{isInternalNativeSource as z}from"./source-visibility.js";const E=1;class G extends Error{code="missing_user_boundary";constructor(e){super(`native source ${e} does not start at a visible user boundary`),this.name="MissingUserBoundaryError"}}class Q extends Error{code="internal_native_source";constructor(){super("internal native source cannot be imported as a personal session"),this.name="InternalNativeSourceError"}}class X extends Error{code="native_source_deleted";constructor(e){super(`native source ${e} is blocked by a durable deletion tombstone`),this.name="NativeSourceDeletedError"}}class Y extends Error{sourceEventKey;code="native_event_identity_conflict";constructor(e){super(`native event identity conflict: ${e}`),this.sourceEventKey=e,this.name="NativeEventIdentityConflictError"}}class he{options;constructor(e={}){this.options=e}commitEvents(e){return[...e].filter(s=>!this.isSourceInternal(s.agentType,s.sourceSessionKey)).sort((s,o)=>s.ts-o.ts).map(s=>this.commitEvent(s))}updateMessageDeliveryState(e,s,o){if(!this.canonicalStore().updateMessageDeliveryState(e,s,o))return;const i=(this.options.listLocalSessions??w)().find(a=>a.sessionId===e);if(!i)return;(this.options.recordLocalSession??b)({...i})}commitEvent(e){if(Z(e),this.isSourceInternal(e.agentType,e.sourceSessionKey))throw new Q;if(this.isSourceDeleted(e.agentType,e.sourceSessionKey))throw new X(e.sourceSessionKey);const s=this.installationId(),o=this.readSources(),r=D(e.agentType,e.sourceSessionKey),i=o.sources[r],c=te(e),a=this.ledgerFile(e.agentType,e.sourceEventKey),n=d.existsSync(a)?T(a):null;if(n&&n.daemonInstallationId!==s)throw new Error("native event ledger belongs to another daemon installation");if(n&&n.eventFingerprint!==c)throw new Y(e.sourceEventKey);if(!i&&!n&&e.role!=="user")throw new G(e.sourceSessionKey);const u=e.claimSessionId??null,l=i?.sessionId??n?.sessionId??u??ee(s,e.agentType,e.sourceSessionKey);if(u&&i&&i.sessionId!==u)throw new Error(`managed claim session conflicts with source binding ${e.sourceSessionKey}`);const m=this.canonicalStore(),f=e.localDisposition==="managed_echo_suppressed"||n?.mappedBy==="managed_echo_suppressed",p=n?.canonicalMessageId??(f?null:e.claimCanonicalMessageId??se(s,e.agentType,e.canonicalMessageKey??e.sourceEventKey));let S=m.getManifest(l)?.bodyRevision??0,x=!!n;const M=!f&&!!e.claimCanonicalMessageId;if(M){if(!p)throw new Error("managed echo claim requires a canonical message");const y=m.getMessageState(l,p);if(!y||y.tombstoned)throw new Error(`managed echo claim target is not durable: ${p}`);y.deliveryState==="queued"&&y.message&&(S=m.upsert(l,{...y.message,ts:e.ts},"executing").bodyRevision)}if(!n&&!M&&!f){if(!p)throw new Error("native event requires a canonical message");const y=e.canonicalMessageKey?m.getMessageState(l,p):null,v=e.canonicalMutation==="upsert"||!!y,F=v?y??m.getMessageState(l,p):null,_={id:p,sessionId:l,role:e.role,ts:F?.message?.ts??e.ts,payload:oe(F?.message?.payload,e.payload)},$=v?m.upsert(l,_):m.append(l,_);if(S=$.bodyRevision,x=$.duplicate,e.localToolDetail){const N=this.options.writeLocalToolDetail??J,j=this.options.readLocalToolDetail??q,R=ie(j(l,e.localToolDetail.toolCallId),e.localToolDetail);N({sessionId:l,...R,ts:e.ts,detailRef:{toolIndex:0}})}}e.terminal&&(S=m.completeStartedUserMessages(l,e.ts).at(-1)?.bodyRevision??S),(!n||e.terminal)&&!f&&this.recordIndex(e,l,p,S);const K=new Date().toISOString();return n||h(a,{schemaVersion:E,daemonInstallationId:s,sessionId:l,agentType:e.agentType,sourceSessionKey:e.sourceSessionKey,sourceEventKey:e.sourceEventKey,eventFingerprint:c,canonicalMessageId:p,canonicalRevision:S,cursor:e.cursor??null,mappedBy:f?"managed_echo_suppressed":M?"managed_echo_claim":e.sourceMode,eventTs:e.ts,createdAt:K}),o.sources[r]={schemaVersion:E,daemonInstallationId:s,sessionId:l,agentType:e.agentType,sourceSessionKey:e.sourceSessionKey,sourceMode:n?i?.sourceMode??e.sourceMode:e.sourceMode,lastCursor:n?i?.lastCursor??n.cursor:e.cursor??i?.lastCursor??null,bodyRevision:S,createdAt:i?.createdAt??K,updatedAt:K},h(this.sourcesFile(),o),!n&&e.cursor&&C("sourceCursorAdvanced"),!n&&!M&&!f&&!x&&C("canonicalCommits"),{sessionId:l,messageId:p,bodyRevision:S,duplicate:x,claimed:M,suppressed:f}}repairMissingUserBoundaries(){const e=this.options.listLocalSessions??w,s=this.options.recordLocalSession??b,o=this.canonicalStore();let r=0;for(const i of e()){if(i.localReady)continue;const a=o.getManifest(i.sessionId)?.firstAvailableSeq;if(a==null)continue;const n=o.readPage(i.sessionId,{limit:1,beforeSequence:a+1}).entries[0];!n||n.sequence!==a||n.message.role!=="user"||(s({sessionId:i.sessionId,agentType:i.agentType,sessionMode:i.sessionMode,managerConfig:i.managerConfig,workDir:i.workDir,agentSessionId:i.agentSessionId,modelId:i.modelId,managerDefaultWorkerAgentType:i.managerDefaultWorkerAgentType,managerDefaultWorkerModelId:i.managerDefaultWorkerModelId,status:i.status,lastActivityAt:i.lastActivityAt,lastMessagePreview:i.lastMessagePreview,localReady:!0,firstUserMessageId:n.message.id,firstUserBodyRevision:n.revision}),r+=1)}return r}listManagedClaims(){return Object.values(this.readManagedEchoState().claims)}listManagedSuppressions(){return Object.values(this.readManagedEchoState().suppressions)}upsertManagedClaim(e){O(e);const s=this.readManagedEchoState();s.claims[e.canonicalMessageId]=e,h(this.managedEchoStateFile(),s)}updateManagedClaimSource(e,s,o){const r=this.readManagedEchoState();let i=!1;for(const c of Object.values(r.claims))c.sessionId!==e||c.sourceAgentType!==s||(c.sourceSessionKey=o,i=!0);i&&h(this.managedEchoStateFile(),r)}removeManagedClaim(e){const s=this.readManagedEchoState();s.claims[e]&&(delete s.claims[e],h(this.managedEchoStateFile(),s))}completeManagedClaim(e,s){const o=this.readManagedEchoState();delete o.claims[e],s&&(k(s),o.suppressions[D(s.agentType,s.sourceSessionKey)]=s),h(this.managedEchoStateFile(),o)}removeManagedSuppression(e,s){const o=this.readManagedEchoState(),r=D(e,s);o.suppressions[r]&&(delete o.suppressions[r],h(this.managedEchoStateFile(),o))}listSourceBindings(){return Object.values(this.readSources().sources).filter(e=>!this.isSourceDeleted(e.agentType,e.sourceSessionKey))}listSourceOwners(){return Object.values(this.readSources().sources).map(({agentType:e,sourceSessionKey:s,sessionId:o})=>({agentType:e,sourceSessionKey:s,sessionId:o}))}purgeSession(e){if(!e)throw new Error("sessionId is required");const s=this.readSources();let o=!1;for(const[a,n]of Object.entries(s.sources))n.sessionId===e&&(delete s.sources[a],o=!0);o&&h(this.sourcesFile(),s);const r=this.readManagedEchoState();let i=!1;for(const[a,n]of Object.entries(r.claims))n.sessionId===e&&(delete r.claims[a],i=!0);for(const[a,n]of Object.entries(r.suppressions))n.sessionId===e&&(delete r.suppressions[a],i=!0);i&&h(this.managedEchoStateFile(),r);const c=g.join(this.rootDir(),"ledger");if(d.existsSync(c))for(const a of d.readdirSync(c,{withFileTypes:!0})){if(!a.isFile()||!a.name.endsWith(".json"))continue;const n=g.join(c,a.name),u=T(n);if(u.daemonInstallationId!==this.installationId())throw new Error("native event ledger belongs to another daemon installation");u.sessionId===e&&d.unlinkSync(n)}}isSourceInternal(e,s){const o=this.rootDir();return z(e,s,{filePath:g.join(g.basename(o)==="native-fusion"?g.dirname(o):o,"native-fusion-state.json"),daemonInstallationId:this.installationId()})}isSourceDeleted(e,s){return(this.options.deletionStore??new W({rootDir:g.basename(this.rootDir())==="native-fusion"?g.dirname(this.rootDir()):this.rootDir(),daemonInstallationId:this.installationId()})).has(e,s)}observeNativeTitle(e,s,o){if(this.isSourceInternal(e,s))return!1;const r=o.trim().slice(0,120);if(!r)return!1;const i=this.readSources().sources[D(e,s)];if(!i||this.isSourceDeleted(e,s))return!1;const c=(this.options.listLocalSessions??w)().find(u=>u.sessionId===i.sessionId);if(c?.titleLockedByUser||c?.titleSource==="agent_native"&&c.title===r)return!1;const a=I.createHash("sha256").update(`${e}\0${s}\0${r}`).digest("hex");return(this.options.recordLocalSession??b)({sessionId:i.sessionId,agentType:i.agentType,workDir:c?.workDir??"",agentSessionId:s,title:r,titleSource:"agent_native",titleOriginEventId:`agent-native:${a}`}),!0}recordIndex(e,s,o,r){const i=this.options.recordLocalSession??b,a=(this.options.listLocalSessions??w)().find(f=>f.sessionId===s)?.workDir?.trim()||e.workDir||"",n=e.terminal?`terminal:${I.createHash("sha256").update(e.sourceEventKey).digest("hex")}`:void 0,u=e.role==="user"||e.role==="agent"?A(e.payload):null,l=u&&o?{lastMessagePreview:u,lastMessagePreviewMessageId:o,lastMessagePreviewAt:new Date(e.ts).toISOString()}:{},m=o&&(u||L(e.payload))?new Date(e.ts).toISOString():void 0;i({sessionId:s,agentType:e.agentType,workDir:a,agentSessionId:e.sourceSessionKey,modelId:e.modelId??null,status:e.terminal?e.terminalState==="failed"||e.terminalState==="aborted"?"failed":"completed":"active",attentionId:n,lastActivityAt:new Date(e.ts).toISOString(),lastVisibleEventAt:m,...l,...e.role==="user"&&o?{localReady:!0,firstUserMessageId:o,firstUserBodyRevision:r}:{},title:e.title?.trim()||(e.role==="user"?A(e.payload)??"":void 0),titleSource:e.title?.trim()?e.titleSource??"first_user_fallback":"first_user_fallback",titleOriginEventId:e.sourceEventKey})}readSources(){const e=this.sourcesFile();if(!d.existsSync(e))return{schemaVersion:E,daemonInstallationId:this.installationId(),sources:{}};const s=T(e);if(s.schemaVersion!==E||s.daemonInstallationId!==this.installationId()||!s.sources)throw new Error("invalid native source binding store");for(const o of Object.values(s.sources))if(o.daemonInstallationId!==this.installationId())throw new Error("native source binding belongs to another daemon installation");return s}installationId(){return this.options.daemonInstallationId??V()}canonicalStore(){return this.options.canonicalStore??U()}rootDir(){return this.options.rootDir??H("native-fusion")}sourcesFile(){return g.join(this.rootDir(),"sources.json")}managedEchoStateFile(){return g.join(this.rootDir(),"managed-echo-state.json")}readManagedEchoState(){const e=this.managedEchoStateFile();if(!d.existsSync(e))return{schemaVersion:E,daemonInstallationId:this.installationId(),claims:{},suppressions:{}};const s=T(e);if(s.schemaVersion!==E||s.daemonInstallationId!==this.installationId()||!s.claims||!s.suppressions)throw new Error("invalid managed echo state");for(const o of Object.values(s.claims))O(o);for(const o of Object.values(s.suppressions))k(o);return s}ledgerFile(e,s){const o=I.createHash("sha256").update(`${e}\0${s}`).digest("hex");return g.join(this.rootDir(),"ledger",`${o}.json`)}}function Z(t){if(!t.agentType||!t.sourceSessionKey||!t.sourceEventKey||!t.payload)throw new Error("invalid native event");if(!Number.isFinite(t.ts))throw new Error("invalid native event timestamp")}function D(t,e){return I.createHash("sha256").update(`${t}\0${e}`).digest("hex")}function ee(t,e,s){return`native-session-${I.createHash("sha256").update(`${t}\0${e}\0${s}`).digest("hex").slice(0,32)}`}function se(t,e,s){return`native-${I.createHash("sha256").update(`${t}\0${e}\0${s}`).digest("hex").slice(0,32)}`}function te(t){return I.createHash("sha256").update(JSON.stringify({agentType:t.agentType,sourceSessionKey:t.sourceSessionKey,sourceEventKey:t.sourceEventKey,role:t.role,ts:t.ts,payload:t.payload,canonicalMessageKey:t.canonicalMessageKey??null,canonicalMutation:t.canonicalMutation??"append"})).digest("hex")}function O(t){if(!t.sessionId||!t.canonicalMessageId||!t.textHash||!Number.isFinite(t.createdAt)||!["codex","claude","opencode"].includes(t.sourceAgentType)||!["suppress_following","import_following"].includes(t.managedEchoPolicy))throw new Error("invalid managed echo claim")}function k(t){if(!t.sessionId||!t.sourceSessionKey||!t.claimSourceEventKey||!["codex","claude","opencode"].includes(t.agentType)||!Number.isFinite(t.startedAt)||!Number.isFinite(t.endsAt)||t.endsAt<t.startedAt)throw new Error("invalid managed echo suppression")}function oe(t,e){if(!t)return e;try{const s=JSON.parse(t),o=JSON.parse(e);if(s.type!=="tool"||o.type!=="tool"||s.toolCallId!==o.toolCallId)return e;const r=typeof o.name=="string"?o.name:"",i=/(?:_output|_result)$/.test(r);return JSON.stringify({...s,...o,...i&&typeof s.name=="string"?{name:s.name}:{}})}catch{return e}}function ie(t,e){if(!t||t.toolCallId!==e.toolCallId)return e;const s=/(?:_output|_result)$/.test(e.name);return{...e,name:s?t.name:e.name,...e.args===void 0&&t.args!==void 0?{args:t.args}:{},...e.result===void 0&&t.result!==void 0?{result:t.result}:{}}}function A(t){return B(t,120)}function h(t,e){const s=g.dirname(t);d.mkdirSync(s,{recursive:!0,mode:448});const o=`${t}.tmp-${process.pid}-${I.randomBytes(6).toString("hex")}`;let r;try{r=d.openSync(o,"wx",384),d.writeFileSync(r,`${JSON.stringify(e,null,2)}
+`,"utf8"),d.fsyncSync(r),d.closeSync(r),r=void 0,P(o,t)}finally{r!==void 0&&d.closeSync(r);try{d.unlinkSync(o)}catch{}}}function T(t){return JSON.parse(d.readFileSync(t,"utf8"))}export{Q as InternalNativeSourceError,G as MissingUserBoundaryError,Y as NativeEventIdentityConflictError,he as NativeFusionLocalRepository,X as NativeSourceDeletedError};

package/dist/src/native-fusion/native-source-deletions.js

@@ -1,2 +1,2 @@
-import l from"node:crypto";import i from"node:fs";import c from"node:path";import{resolvePersonalSyncV1Path as y}from"../personal-sync/paths.js";import{getDaemonInstallationId as S}from"../personal-sync/identity.js";const d=1;class w{options;constructor(e={}){this.options=e}record(e){I(e);const n=this.recordSession(e),o=this.read(),s=this.key(e.agentType,e.sourceSessionKey),r=o.deletions[s];if(r&&r.sessionId!==e.sessionId)throw new Error("native source deletion identity conflict");if(r&&r.deletionRevision>=e.deletionRevision)return r;const a={schemaVersion:d,daemonInstallationId:this.installationId(),deletionRevision:Math.max(e.deletionRevision,n.deletionRevision),sessionId:e.sessionId,agentType:e.agentType,sourceSessionKey:e.sourceSessionKey,sourceSessionKeyHash:h(e.agentType,e.sourceSessionKey),deletedAt:e.deletedAt??new Date().toISOString()};return o.deletions[s]=a,f(this.filePath(),o),a}recordSession(e){if(!e.sessionId||!Number.isSafeInteger(e.deletionRevision)||e.deletionRevision<1)throw new Error("invalid local session deletion");const n=this.read(),o=n.sessions[e.sessionId];if(o&&o.deletionRevision>=e.deletionRevision)return o;const s={schemaVersion:d,daemonInstallationId:this.installationId(),sessionId:e.sessionId,deletionRevision:e.deletionRevision,deletedAt:e.deletedAt??new Date().toISOString()};return n.sessions[e.sessionId]=s,f(this.filePath(),n),s}hasSession(e){return!!(e&&this.read().sessions[e])}find(e,n){return!e||!n?null:this.read().deletions[this.key(e,n)]??null}has(e,n){return this.find(e,n)!==null}list(){return Object.values(this.read().deletions).sort((e,n)=>e.deletionRevision-n.deletionRevision)}read(){const e=this.installationId(),n=this.filePath();if(!i.existsSync(n))return{schemaVersion:d,daemonInstallationId:e,deletions:{},sessions:{}};const o=JSON.parse(i.readFileSync(n,"utf8"));if(o.schemaVersion!==d||o.daemonInstallationId!==e||!o.deletions||typeof o.deletions!="object"||Array.isArray(o.deletions))throw new Error("invalid native source deletion store");o.sessions??={};for(const s of Object.values(o.deletions))if(s.schemaVersion!==d||s.daemonInstallationId!==e||!s.sessionId||!s.agentType||!s.sourceSessionKey||s.sourceSessionKeyHash!==h(s.agentType,s.sourceSessionKey)||!Number.isSafeInteger(s.deletionRevision)||s.deletionRevision<1)throw new Error("invalid native source deletion record");for(const s of Object.values(o.sessions))if(s.schemaVersion!==d||s.daemonInstallationId!==e||!s.sessionId||!Number.isSafeInteger(s.deletionRevision)||s.deletionRevision<1)throw new Error("invalid local session deletion record");return o}installationId(){return this.options.daemonInstallationId??S()}filePath(){return c.join(this.options.rootDir??y(),"native-source-deletions.json")}key(e,n){return l.createHash("sha256").update(`${this.installationId()}\0${e}\0${n}`).digest("hex")}}function h(t,e){return l.createHash("sha256").update(`${t}\0${e}`).digest("hex")}function I(t){if(!t.sessionId||!t.agentType||!t.sourceSessionKey)throw new Error("invalid native source deletion identity");if(!Number.isSafeInteger(t.deletionRevision)||t.deletionRevision<1)throw new Error("invalid native source deletion revision")}function f(t,e){const n=c.dirname(t);i.mkdirSync(n,{recursive:!0,mode:448});const o=`${t}.tmp-${process.pid}-${l.randomBytes(6).toString("hex")}`;let s;try{if(s=i.openSync(o,"wx",384),i.writeFileSync(s,`${JSON.stringify(e,null,2)}
-`,"utf8"),i.fsyncSync(s),i.closeSync(s),s=void 0,i.renameSync(o,t),process.platform!=="win32"){const r=i.openSync(n,"r");try{i.fsyncSync(r)}finally{i.closeSync(r)}}}finally{s!==void 0&&i.closeSync(s);try{i.unlinkSync(o)}catch{}}}export{w as NativeSourceDeletionStore,h as hashSource};
+import l from"node:crypto";import t from"node:fs";import{renameSyncWithRetry as y}from"../fs/atomic-rename.js";import c from"node:path";import{resolvePersonalSyncV1Path as S}from"../personal-sync/paths.js";import{getDaemonInstallationId as m}from"../personal-sync/identity.js";const d=1;class x{options;constructor(e={}){this.options=e}record(e){I(e);const n=this.recordSession(e),o=this.read(),s=this.key(e.agentType,e.sourceSessionKey),r=o.deletions[s];if(r&&r.sessionId!==e.sessionId)throw new Error("native source deletion identity conflict");if(r&&r.deletionRevision>=e.deletionRevision)return r;const a={schemaVersion:d,daemonInstallationId:this.installationId(),deletionRevision:Math.max(e.deletionRevision,n.deletionRevision),sessionId:e.sessionId,agentType:e.agentType,sourceSessionKey:e.sourceSessionKey,sourceSessionKeyHash:h(e.agentType,e.sourceSessionKey),deletedAt:e.deletedAt??new Date().toISOString()};return o.deletions[s]=a,f(this.filePath(),o),a}recordSession(e){if(!e.sessionId||!Number.isSafeInteger(e.deletionRevision)||e.deletionRevision<1)throw new Error("invalid local session deletion");const n=this.read(),o=n.sessions[e.sessionId];if(o&&o.deletionRevision>=e.deletionRevision)return o;const s={schemaVersion:d,daemonInstallationId:this.installationId(),sessionId:e.sessionId,deletionRevision:e.deletionRevision,deletedAt:e.deletedAt??new Date().toISOString()};return n.sessions[e.sessionId]=s,f(this.filePath(),n),s}hasSession(e){return!!(e&&this.read().sessions[e])}find(e,n){return!e||!n?null:this.read().deletions[this.key(e,n)]??null}has(e,n){return this.find(e,n)!==null}list(){return Object.values(this.read().deletions).sort((e,n)=>e.deletionRevision-n.deletionRevision)}read(){const e=this.installationId(),n=this.filePath();if(!t.existsSync(n))return{schemaVersion:d,daemonInstallationId:e,deletions:{},sessions:{}};const o=JSON.parse(t.readFileSync(n,"utf8"));if(o.schemaVersion!==d||o.daemonInstallationId!==e||!o.deletions||typeof o.deletions!="object"||Array.isArray(o.deletions))throw new Error("invalid native source deletion store");o.sessions??={};for(const s of Object.values(o.deletions))if(s.schemaVersion!==d||s.daemonInstallationId!==e||!s.sessionId||!s.agentType||!s.sourceSessionKey||s.sourceSessionKeyHash!==h(s.agentType,s.sourceSessionKey)||!Number.isSafeInteger(s.deletionRevision)||s.deletionRevision<1)throw new Error("invalid native source deletion record");for(const s of Object.values(o.sessions))if(s.schemaVersion!==d||s.daemonInstallationId!==e||!s.sessionId||!Number.isSafeInteger(s.deletionRevision)||s.deletionRevision<1)throw new Error("invalid local session deletion record");return o}installationId(){return this.options.daemonInstallationId??m()}filePath(){return c.join(this.options.rootDir??S(),"native-source-deletions.json")}key(e,n){return l.createHash("sha256").update(`${this.installationId()}\0${e}\0${n}`).digest("hex")}}function h(i,e){return l.createHash("sha256").update(`${i}\0${e}`).digest("hex")}function I(i){if(!i.sessionId||!i.agentType||!i.sourceSessionKey)throw new Error("invalid native source deletion identity");if(!Number.isSafeInteger(i.deletionRevision)||i.deletionRevision<1)throw new Error("invalid native source deletion revision")}function f(i,e){const n=c.dirname(i);t.mkdirSync(n,{recursive:!0,mode:448});const o=`${i}.tmp-${process.pid}-${l.randomBytes(6).toString("hex")}`;let s;try{if(s=t.openSync(o,"wx",384),t.writeFileSync(s,`${JSON.stringify(e,null,2)}
+`,"utf8"),t.fsyncSync(s),t.closeSync(s),s=void 0,y(o,i),process.platform!=="win32"){const r=t.openSync(n,"r");try{t.fsyncSync(r)}finally{t.closeSync(r)}}}finally{s!==void 0&&t.closeSync(s);try{t.unlinkSync(o)}catch{}}}export{x as NativeSourceDeletionStore,h as hashSource};

package/dist/src/native-fusion/parsers.js

@@ -1,3 +1 @@
-import h from"node:fs";import l from"node:os";import i from"node:path";import{listCodexRolloutFiles as U,lookupCodexThreadName as V,parseCodexRolloutChunk as X,parseCodexRolloutChunkCooperatively as Y}from"./codex-parser.js";import{inspectNativeSessionFile as $,normalizeNativeTimestamp as P}from"./session-header.js";import{listOpenCodeSessionFiles as te,parseOpenCodeSessionFile as oe,parseOpenCodeSessionSnapshot as ne}from"./opencode-parser.js";import{makeCursor as g,makeEventKey as j,normalizeText as v,readClaudeEventCwd as k,readJsonlLines as T,readJsonlLinesCooperatively as D,readTimestamp as L,safeParse as S,isClaudeSubagentTranscript as N,shouldIgnoreClaudeProjectDir as z,shouldIgnoreClaudeTranscriptPath as E,shouldIgnoreNativeScanPath as b}from"./parser-common.js";function M(){return[i.join(l.homedir(),".codex","sessions"),i.join(l.homedir(),".codex","archived_sessions"),i.join(l.homedir(),".claude","projects"),i.join(l.homedir(),".local","share","opencode")]}function I(e){const o=l.homedir();return e.startsWith(o)?e.slice(o.length).replace(/^\//,"")||"~":e.replace(/\//g,"-")}function R(){const e=i.join(l.homedir(),".claude","projects");if(!h.existsSync(e))return[];const o=[],t=r=>{for(const n of h.readdirSync(r,{withFileTypes:!0})){const a=i.join(r,n.name);if(n.isDirectory()){if(r===e&&z(n.name))continue;t(a)}else n.isFile()&&n.name.endsWith(".jsonl")&&o.push(a)}};return t(e),o.sort()}function B(e){if(!e)return null;const o=R().find(r=>i.basename(r,".jsonl")===e);if(!o)return null;let t=null;return T(o,0,r=>{if(t||!r.trim())return;const n=S(r);if(!n)return;const a=k(n);a&&(t=a)}),t}function _(e){const o=h.statSync(e).size;if(N(e)||E(e))return{nextOffset:o,events:[]};const t=[],r=i.basename(e,".jsonl"),n=I(i.dirname(e).replace(i.join(l.homedir(),".claude","projects")+i.sep,""));if(b(n))return{nextOffset:o,events:[]};let a="";return{onLine:(m,p)=>{const s=S(m);if(!s)return;const C=L(s.timestamp),y=typeof s.type=="string"?s.type:"";if(!C||!y)return;const d=k(s);if(!(d&&b(d))){if(y==="user"){const c=typeof s.message=="object"&&s.message!==null?s.message:null,u=typeof c?.content=="string"?v(c.content):"";if(!u)return;a||(a=u.slice(0,80)),t.push({agentType:"claude",sourceMode:"claude_transcript_import",sourceSessionKey:r,sourceEventKey:j(e,p,"user"),cursor:g(e,p),role:"user",ts:C,payload:u,title:a,titleSource:"first_user_fallback",workDir:d??n})}else if(y==="assistant"){const c=typeof s.message=="object"&&s.message!==null?s.message:null,u=Array.isArray(c?.content)?c.content:[],x=v(u.map(f=>typeof f=="object"&&f!==null&&typeof f.text=="string"?f.text:"").filter(Boolean).join(`
-
-`));if(!x)return;const F=typeof c?.model=="string"?c.model:null;t.push({agentType:"claude",sourceMode:"claude_transcript_import",sourceSessionKey:r,sourceEventKey:j(e,p,"assistant"),cursor:g(e,p),role:"agent",ts:C,payload:x,title:a,titleSource:"first_user_fallback",modelId:F,workDir:d??n})}}},finish:m=>({nextOffset:m,events:t})}}function w(e){return"nextOffset"in e}function q(e,o){const t=_(e);return w(t)?t:t.finish(T(e,o,t.onLine))}async function G(e,o){const t=_(e);return w(t)?t:t.finish(await D(e,o,t.onLine))}export{$ as inspectNativeSessionFile,R as listClaudeTranscriptFiles,U as listCodexRolloutFiles,M as listNativeTranscriptRoots,te as listOpenCodeSessionFiles,B as lookupClaudeTranscriptCwd,V as lookupCodexThreadName,P as normalizeNativeTimestamp,q as parseClaudeTranscriptChunk,G as parseClaudeTranscriptChunkCooperatively,X as parseCodexRolloutChunk,Y as parseCodexRolloutChunkCooperatively,oe as parseOpenCodeSessionFile,ne as parseOpenCodeSessionSnapshot};
+import p from"node:fs";import a from"node:os";import t from"node:path";import{listCodexRolloutFiles as B,lookupCodexThreadName as G,parseCodexRolloutChunk as H,parseCodexRolloutChunkCooperatively as K}from"./codex-parser.js";import{inspectNativeSessionFile as Q,normalizeNativeTimestamp as U}from"./session-header.js";import{listOpenCodeSessionFiles as X,parseOpenCodeSessionFile as Y,parseOpenCodeSessionSnapshot as Z}from"./opencode-parser.js";import{parseClaudeEntry as T}from"./claude-entry-parser.js";import{readClaudeEventCwd as f,readJsonlLines as m,readJsonlLinesCooperatively as k,readTimestamp as S,safeParse as C,isClaudeSubagentTranscript as g,shouldIgnoreClaudeProjectDir as F,shouldIgnoreClaudeTranscriptPath as w,shouldIgnoreNativeScanPath as h}from"./parser-common.js";function W(){return[t.join(a.homedir(),".codex","sessions"),t.join(a.homedir(),".codex","archived_sessions"),t.join(a.homedir(),".claude","projects"),t.join(a.homedir(),".local","share","opencode")]}function L(e){const r=a.homedir();return e.startsWith(r)?e.slice(r.length).replace(/^\//,"")||"~":e.replace(/\//g,"-")}function O(){const e=t.join(a.homedir(),".claude","projects");if(!p.existsSync(e))return[];const r=[],n=s=>{for(const o of p.readdirSync(s,{withFileTypes:!0})){const i=t.join(s,o.name);if(o.isDirectory()){if(s===e&&F(o.name))continue;n(i)}else o.isFile()&&o.name.endsWith(".jsonl")&&r.push(i)}};return n(e),r.sort()}function E(e){if(!e)return null;const r=O().find(s=>t.basename(s,".jsonl")===e);if(!r)return null;let n=null;return m(r,0,s=>{if(n||!s.trim())return;const o=C(s);if(!o)return;const i=f(o);i&&(n=i)}),n}function x(e){const r=p.statSync(e).size;if(g(e)||w(e))return{nextOffset:r,events:[]};const n=[],s=t.basename(e,".jsonl"),o=L(t.dirname(e).replace(t.join(a.homedir(),".claude","projects")+t.sep,""));if(h(o))return{nextOffset:r,events:[]};const i={value:""};return{onLine:(l,v)=>{const c=C(l);if(!c)return;const d=S(c.timestamp),y=typeof c.type=="string"?c.type:"";if(!d||!y)return;const u=f(c);u&&h(u)||n.push(...T(c,{filePath:e,lineOffset:v,sourceSessionKey:s,ts:d,workDir:u??o},i))},finish:l=>({nextOffset:l,events:n})}}function j(e){return"nextOffset"in e}function J(e,r){const n=x(e);return j(n)?n:n.finish(m(e,r,n.onLine))}async function _(e,r){const n=x(e);return j(n)?n:n.finish(await k(e,r,n.onLine))}export{Q as inspectNativeSessionFile,O as listClaudeTranscriptFiles,B as listCodexRolloutFiles,W as listNativeTranscriptRoots,X as listOpenCodeSessionFiles,E as lookupClaudeTranscriptCwd,G as lookupCodexThreadName,U as normalizeNativeTimestamp,J as parseClaudeTranscriptChunk,_ as parseClaudeTranscriptChunkCooperatively,H as parseCodexRolloutChunk,K as parseCodexRolloutChunkCooperatively,Y as parseOpenCodeSessionFile,Z as parseOpenCodeSessionSnapshot};

package/dist/src/native-fusion/state.js

@@ -1,2 +1,2 @@
-import S from"node:crypto";import o from"node:fs";import p from"node:path";import{readPersonalDataEpochMarker as y}from"../personal-sync/epoch.js";import{getDaemonInstallationId as u}from"../personal-sync/identity.js";import{resolvePersonalSyncV1Path as m}from"../personal-sync/paths.js";import{NATIVE_SCANNER_STATE_SCHEMA_VERSION as f}from"./types.js";function d(){return m("native-fusion-state.json")}function I(){const e=d(),s=u();if(!o.existsSync(e)){const r=y()?.epochStartedAt,i={schemaVersion:f,fusionEpochMs:r?Date.parse(r):Date.now(),daemonInstallationId:s,files:{}};return l(e,i),i}let n;try{n=JSON.parse(o.readFileSync(e,"utf8"))}catch(r){throw new Error(`native fusion v1 state is unreadable: ${e}`,{cause:r})}return c(n,s),n}function b(e){const s=u();c(e,s);const n=d();if(o.existsSync(n)){const r=JSON.parse(o.readFileSync(n,"utf8"));if(c(r,s),r.fusionEpochMs!==e.fusionEpochMs)throw new Error("native fusion epoch is immutable");e.ignoredSources={...e.ignoredSources,...r.ignoredSources};for(const[i,t]of Object.entries(r.internalSourceOwners??{})){const a=e.internalSourceOwners?.[i];if(a&&a.sessionId!==t.sessionId)throw new Error("internal_native_source_owner_conflict")}e.internalSourceOwners={...e.internalSourceOwners,...r.internalSourceOwners}}l(n,e)}function c(e,s){if(!e||e.schemaVersion!==f||!Number.isSafeInteger(e.fusionEpochMs)||e.fusionEpochMs<=0||e.daemonInstallationId!==s||!e.files||typeof e.files!="object"||Array.isArray(e.files)||e.ignoredSources!==void 0&&(typeof e.ignoredSources!="object"||e.ignoredSources===null||Array.isArray(e.ignoredSources)||Object.entries(e.ignoredSources).some(([n,r])=>!n||r!==!0)))throw new Error("invalid native fusion v1 state");if(e.internalSourceOwners!==void 0&&(!e.internalSourceOwners||typeof e.internalSourceOwners!="object"||Array.isArray(e.internalSourceOwners)||Object.entries(e.internalSourceOwners).some(([n,r])=>!/^(codex|claude|opencode):.+$/.test(n)||!r||typeof r.sessionId!="string"||!r.sessionId||typeof r.registeredAt!="string"||!Number.isFinite(Date.parse(r.registeredAt)))))throw new Error("invalid internal native source ownership");for(const n of Object.values(e.files)){if(n.daemonInstallationId!==s)throw new Error("native fusion cursor belongs to another daemon installation");if(n.sources!==void 0&&(!Array.isArray(n.sources)||n.sources.some(r=>!r||!["codex","claude","opencode"].includes(r.agentType)||typeof r.sourceSessionKey!="string"||!r.sourceSessionKey)))throw new Error("native fusion cursor has invalid source metadata")}}function l(e,s){const n=p.dirname(e);o.mkdirSync(n,{recursive:!0,mode:448});const r=`${e}.tmp-${process.pid}-${S.randomBytes(6).toString("hex")}`;let i;try{if(i=o.openSync(r,"wx",384),o.writeFileSync(i,`${JSON.stringify(s,null,2)}
-`,"utf8"),o.fsyncSync(i),o.closeSync(i),i=void 0,o.renameSync(r,e),process.platform!=="win32"){const t=o.openSync(n,"r");try{o.fsyncSync(t)}finally{o.closeSync(t)}}}finally{i!==void 0&&o.closeSync(i);try{o.unlinkSync(r)}catch{}}}export{I as loadNativeScannerState,b as saveNativeScannerState,c as validateNativeScannerState};
+import S from"node:crypto";import o from"node:fs";import{renameSyncWithRetry as p}from"../fs/atomic-rename.js";import y from"node:path";import{readPersonalDataEpochMarker as m}from"../personal-sync/epoch.js";import{getDaemonInstallationId as u}from"../personal-sync/identity.js";import{resolvePersonalSyncV1Path as h}from"../personal-sync/paths.js";import{NATIVE_SCANNER_STATE_SCHEMA_VERSION as f}from"./types.js";function d(){return h("native-fusion-state.json")}function N(){const e=d(),s=u();if(!o.existsSync(e)){const r=m()?.epochStartedAt,i={schemaVersion:f,fusionEpochMs:r?Date.parse(r):Date.now(),daemonInstallationId:s,files:{}};return l(e,i),i}let n;try{n=JSON.parse(o.readFileSync(e,"utf8"))}catch(r){throw new Error(`native fusion v1 state is unreadable: ${e}`,{cause:r})}return c(n,s),n}function x(e){const s=u();c(e,s);const n=d();if(o.existsSync(n)){const r=JSON.parse(o.readFileSync(n,"utf8"));if(c(r,s),r.fusionEpochMs!==e.fusionEpochMs)throw new Error("native fusion epoch is immutable");e.ignoredSources={...e.ignoredSources,...r.ignoredSources};for(const[i,t]of Object.entries(r.internalSourceOwners??{})){const a=e.internalSourceOwners?.[i];if(a&&a.sessionId!==t.sessionId)throw new Error("internal_native_source_owner_conflict")}e.internalSourceOwners={...e.internalSourceOwners,...r.internalSourceOwners}}l(n,e)}function c(e,s){if(!e||e.schemaVersion!==f||!Number.isSafeInteger(e.fusionEpochMs)||e.fusionEpochMs<=0||e.daemonInstallationId!==s||!e.files||typeof e.files!="object"||Array.isArray(e.files)||e.ignoredSources!==void 0&&(typeof e.ignoredSources!="object"||e.ignoredSources===null||Array.isArray(e.ignoredSources)||Object.entries(e.ignoredSources).some(([n,r])=>!n||r!==!0)))throw new Error("invalid native fusion v1 state");if(e.internalSourceOwners!==void 0&&(!e.internalSourceOwners||typeof e.internalSourceOwners!="object"||Array.isArray(e.internalSourceOwners)||Object.entries(e.internalSourceOwners).some(([n,r])=>!/^(codex|claude|opencode):.+$/.test(n)||!r||typeof r.sessionId!="string"||!r.sessionId||typeof r.registeredAt!="string"||!Number.isFinite(Date.parse(r.registeredAt)))))throw new Error("invalid internal native source ownership");for(const n of Object.values(e.files)){if(n.daemonInstallationId!==s)throw new Error("native fusion cursor belongs to another daemon installation");if(n.sources!==void 0&&(!Array.isArray(n.sources)||n.sources.some(r=>!r||!["codex","claude","opencode"].includes(r.agentType)||typeof r.sourceSessionKey!="string"||!r.sourceSessionKey)))throw new Error("native fusion cursor has invalid source metadata")}}function l(e,s){const n=y.dirname(e);o.mkdirSync(n,{recursive:!0,mode:448});const r=`${e}.tmp-${process.pid}-${S.randomBytes(6).toString("hex")}`;let i;try{if(i=o.openSync(r,"wx",384),o.writeFileSync(i,`${JSON.stringify(s,null,2)}
+`,"utf8"),o.fsyncSync(i),o.closeSync(i),i=void 0,p(r,e),process.platform!=="win32"){const t=o.openSync(n,"r");try{o.fsyncSync(t)}finally{o.closeSync(t)}}}finally{i!==void 0&&o.closeSync(i);try{o.unlinkSync(r)}catch{}}}export{N as loadNativeScannerState,x as saveNativeScannerState,c as validateNativeScannerState};

package/dist/src/personal-sync/epoch.js

@@ -1,2 +1,2 @@
-import g from"node:crypto";import n from"node:fs";import c from"node:path";import{SESSION_SYNC_DATA_EPOCH as y,SESSION_SYNC_PROTOCOL_VERSION as w}from"@shennian/wire";import{resolveShennianPath as u}from"../config/index.js";import{getDaemonInstallationId as m}from"./identity.js";import{PERSONAL_SYNC_V1_ROOT_NAME as h,resolvePersonalSyncRootPath as E,resolvePersonalSyncV1Path as f}from"./paths.js";const d=y,N=["canonical","session-index.json","outbound-queue.json","native-fusion-state.json","native-fusion","tool-details","uploads","attachment-staging","deletion-barriers","native-source-deletions.json","native-session-cleanup-outbox.json","deletion-sync-state.json"];class O extends Error{foundEpoch;code="future_data_epoch";constructor(e){super(`personal data epoch ${e} is newer than supported epoch ${d}`),this.foundEpoch=e,this.name="FuturePersonalDataEpochError"}}function T(t=new Date){const e=m();j();const o=x();if(o)return o;const s=E("migration.json"),r=P(s,e,t);if(r.daemonInstallationId!==e)throw new Error("personal data epoch migration belongs to another daemon installation");const a=_();n.rmSync(f(),{recursive:!0,force:!0}),n.rmSync(u(h),{recursive:!0,force:!0});for(const i of N)n.rmSync(u(i),{recursive:!0,force:!0});for(const i of a)n.rmSync(c.join(i,".uploads",".staging"),{recursive:!0,force:!0});const l={schemaVersion:1,dataEpoch:d,daemonInstallationId:e,epochStartedAt:r.epochStartedAt};return I(c.join(f(),"epoch.json"),l),n.rmSync(s,{force:!0}),l}function _(){const t=new Set,e=[u(h),f(),u()],o=new Set,s=a=>{try{const l=JSON.parse(n.readFileSync(a,"utf8"));for(const i of Object.values(l))typeof i?.workDir=="string"&&c.isAbsolute(i.workDir)&&t.add(c.resolve(i.workDir))}catch{}},r=(a,l)=>{if(l>5||o.has(a)||!n.existsSync(a))return;o.add(a);let i;try{i=n.readdirSync(a,{withFileTypes:!0})}catch{return}for(const p of i){if(p.isSymbolicLink())continue;const S=c.join(a,p.name);p.isFile()&&p.name==="session-index.json"?s(S):p.isDirectory()&&r(S,l+1)}};return s(c.join(u(),"session-index.json")),r(e[0],0),r(e[1],0),t}function x(){const t=c.join(f(),"epoch.json");if(!n.existsSync(t))return null;const e=JSON.parse(n.readFileSync(t,"utf8"));if(e.schemaVersion!==1||e.dataEpoch!==d||e.daemonInstallationId!==m()||Number.isNaN(Date.parse(e.epochStartedAt)))throw new Error("invalid personal data epoch marker");return e}function D(t=m()){return{protocolVersion:w,dataEpoch:y,daemonInstallationId:t}}function L(t){const e=D();if(t.protocolVersion!==e.protocolVersion||t.dataEpoch!==e.dataEpoch||t.daemonInstallationId!==e.daemonInstallationId)throw new Error("personal_sync_identity_mismatch")}function j(){const t=E();if(!n.existsSync(t))return;const e=n.readdirSync(t,{withFileTypes:!0}).filter(o=>o.isDirectory()&&/^\d+$/.test(o.name)).map(o=>Number(o.name)).filter(o=>Number.isSafeInteger(o)&&o>d).sort((o,s)=>s-o)[0];if(e!==void 0)throw new O(e)}function P(t,e,o){if(n.existsSync(t)){const r=JSON.parse(n.readFileSync(t,"utf8"));if(r.schemaVersion!==1||r.targetEpoch!==d||r.phase!=="cleaning"||!r.daemonInstallationId||Number.isNaN(Date.parse(r.epochStartedAt)))throw new Error("invalid personal data epoch migration marker");return r}const s={schemaVersion:1,targetEpoch:d,daemonInstallationId:e,epochStartedAt:o.toISOString(),phase:"cleaning"};return I(t,s),s}function I(t,e){const o=c.dirname(t);n.mkdirSync(o,{recursive:!0,mode:448});const s=`${t}.tmp-${process.pid}-${g.randomBytes(6).toString("hex")}`;let r;try{if(r=n.openSync(s,"wx",384),n.writeFileSync(r,`${JSON.stringify(e,null,2)}
-`,"utf8"),n.fsyncSync(r),n.closeSync(r),r=void 0,n.renameSync(s,t),process.platform!=="win32"){const a=n.openSync(o,"r");try{n.fsyncSync(a)}finally{n.closeSync(a)}}}finally{r!==void 0&&n.closeSync(r);try{n.unlinkSync(s)}catch{}}}export{d as CLI_SESSION_SYNC_DATA_EPOCH,O as FuturePersonalDataEpochError,L as assertPersonalSyncIdentity,T as ensurePersonalDataEpoch,D as getPersonalSyncIdentity,x as readPersonalDataEpochMarker};
+import g from"node:crypto";import r from"node:fs";import{renameSyncWithRetry as w}from"../fs/atomic-rename.js";import c from"node:path";import{SESSION_SYNC_DATA_EPOCH as y,SESSION_SYNC_PROTOCOL_VERSION as N}from"@shennian/wire";import{resolveShennianPath as u}from"../config/index.js";import{getDaemonInstallationId as m}from"./identity.js";import{PERSONAL_SYNC_V1_ROOT_NAME as h,resolvePersonalSyncRootPath as E,resolvePersonalSyncV1Path as f}from"./paths.js";const d=y,O=["canonical","session-index.json","outbound-queue.json","native-fusion-state.json","native-fusion","tool-details","uploads","attachment-staging","deletion-barriers","native-source-deletions.json","native-session-cleanup-outbox.json","deletion-sync-state.json"];class _ extends Error{foundEpoch;code="future_data_epoch";constructor(e){super(`personal data epoch ${e} is newer than supported epoch ${d}`),this.foundEpoch=e,this.name="FuturePersonalDataEpochError"}}function L(t=new Date){const e=m();P();const o=D();if(o)return o;const s=E("migration.json"),n=k(s,e,t);if(n.daemonInstallationId!==e)throw new Error("personal data epoch migration belongs to another daemon installation");const a=x();r.rmSync(f(),{recursive:!0,force:!0}),r.rmSync(u(h),{recursive:!0,force:!0});for(const i of O)r.rmSync(u(i),{recursive:!0,force:!0});for(const i of a)r.rmSync(c.join(i,".uploads",".staging"),{recursive:!0,force:!0});const l={schemaVersion:1,dataEpoch:d,daemonInstallationId:e,epochStartedAt:n.epochStartedAt};return I(c.join(f(),"epoch.json"),l),r.rmSync(s,{force:!0}),l}function x(){const t=new Set,e=[u(h),f(),u()],o=new Set,s=a=>{try{const l=JSON.parse(r.readFileSync(a,"utf8"));for(const i of Object.values(l))typeof i?.workDir=="string"&&c.isAbsolute(i.workDir)&&t.add(c.resolve(i.workDir))}catch{}},n=(a,l)=>{if(l>5||o.has(a)||!r.existsSync(a))return;o.add(a);let i;try{i=r.readdirSync(a,{withFileTypes:!0})}catch{return}for(const p of i){if(p.isSymbolicLink())continue;const S=c.join(a,p.name);p.isFile()&&p.name==="session-index.json"?s(S):p.isDirectory()&&n(S,l+1)}};return s(c.join(u(),"session-index.json")),n(e[0],0),n(e[1],0),t}function D(){const t=c.join(f(),"epoch.json");if(!r.existsSync(t))return null;const e=JSON.parse(r.readFileSync(t,"utf8"));if(e.schemaVersion!==1||e.dataEpoch!==d||e.daemonInstallationId!==m()||Number.isNaN(Date.parse(e.epochStartedAt)))throw new Error("invalid personal data epoch marker");return e}function j(t=m()){return{protocolVersion:N,dataEpoch:y,daemonInstallationId:t}}function $(t){const e=j();if(t.protocolVersion!==e.protocolVersion||t.dataEpoch!==e.dataEpoch||t.daemonInstallationId!==e.daemonInstallationId)throw new Error("personal_sync_identity_mismatch")}function P(){const t=E();if(!r.existsSync(t))return;const e=r.readdirSync(t,{withFileTypes:!0}).filter(o=>o.isDirectory()&&/^\d+$/.test(o.name)).map(o=>Number(o.name)).filter(o=>Number.isSafeInteger(o)&&o>d).sort((o,s)=>s-o)[0];if(e!==void 0)throw new _(e)}function k(t,e,o){if(r.existsSync(t)){const n=JSON.parse(r.readFileSync(t,"utf8"));if(n.schemaVersion!==1||n.targetEpoch!==d||n.phase!=="cleaning"||!n.daemonInstallationId||Number.isNaN(Date.parse(n.epochStartedAt)))throw new Error("invalid personal data epoch migration marker");return n}const s={schemaVersion:1,targetEpoch:d,daemonInstallationId:e,epochStartedAt:o.toISOString(),phase:"cleaning"};return I(t,s),s}function I(t,e){const o=c.dirname(t);r.mkdirSync(o,{recursive:!0,mode:448});const s=`${t}.tmp-${process.pid}-${g.randomBytes(6).toString("hex")}`;let n;try{if(n=r.openSync(s,"wx",384),r.writeFileSync(n,`${JSON.stringify(e,null,2)}
+`,"utf8"),r.fsyncSync(n),r.closeSync(n),n=void 0,w(s,t),process.platform!=="win32"){const a=r.openSync(o,"r");try{r.fsyncSync(a)}finally{r.closeSync(a)}}}finally{n!==void 0&&r.closeSync(n);try{r.unlinkSync(s)}catch{}}}export{d as CLI_SESSION_SYNC_DATA_EPOCH,_ as FuturePersonalDataEpochError,$ as assertPersonalSyncIdentity,L as ensurePersonalDataEpoch,j as getPersonalSyncIdentity,D as readPersonalDataEpochMarker};

package/dist/src/personal-sync/identity.js

@@ -1,2 +1,2 @@
-import s from"node:crypto";import n from"node:fs";import c from"node:path";import{resolveShennianPath as d}from"../config/index.js";import{resolvePersonalSyncV1RootPath as y}from"./paths.js";function u(){const o=d("installation.json");if(n.existsSync(o)){const t=JSON.parse(n.readFileSync(o,"utf8"));if(t.schemaVersion!==1||!t.daemonInstallationId)throw new Error(`invalid daemon installation identity: ${o}`);return t.daemonInstallationId}const i=c.join(y(),"installation.json");if(n.existsSync(i)){const t=JSON.parse(n.readFileSync(i,"utf8"));if(t.schemaVersion!==1||!t.daemonInstallationId)throw new Error(`invalid daemon installation identity: ${i}`);return l(o,t),t.daemonInstallationId}const r={schemaVersion:1,daemonInstallationId:s.randomUUID(),createdAt:new Date().toISOString()};return l(o,r),r.daemonInstallationId}function l(o,i){const r=c.dirname(o);n.mkdirSync(r,{recursive:!0,mode:448});const t=`${o}.tmp-${process.pid}-${s.randomBytes(6).toString("hex")}`;let e;try{if(e=n.openSync(t,"wx",384),n.writeFileSync(e,`${JSON.stringify(i,null,2)}
-`,"utf8"),n.fsyncSync(e),n.closeSync(e),e=void 0,n.renameSync(t,o),process.platform!=="win32"){const a=n.openSync(r,"r");try{n.fsyncSync(a)}finally{n.closeSync(a)}}}finally{e!==void 0&&n.closeSync(e);try{n.unlinkSync(t)}catch{}}}export{u as getDaemonInstallationId};
+import s from"node:crypto";import n from"node:fs";import{renameSyncWithRetry as d}from"../fs/atomic-rename.js";import c from"node:path";import{resolveShennianPath as y}from"../config/index.js";import{resolvePersonalSyncV1RootPath as m}from"./paths.js";function w(){const o=y("installation.json");if(n.existsSync(o)){const t=JSON.parse(n.readFileSync(o,"utf8"));if(t.schemaVersion!==1||!t.daemonInstallationId)throw new Error(`invalid daemon installation identity: ${o}`);return t.daemonInstallationId}const i=c.join(m(),"installation.json");if(n.existsSync(i)){const t=JSON.parse(n.readFileSync(i,"utf8"));if(t.schemaVersion!==1||!t.daemonInstallationId)throw new Error(`invalid daemon installation identity: ${i}`);return l(o,t),t.daemonInstallationId}const r={schemaVersion:1,daemonInstallationId:s.randomUUID(),createdAt:new Date().toISOString()};return l(o,r),r.daemonInstallationId}function l(o,i){const r=c.dirname(o);n.mkdirSync(r,{recursive:!0,mode:448});const t=`${o}.tmp-${process.pid}-${s.randomBytes(6).toString("hex")}`;let e;try{if(e=n.openSync(t,"wx",384),n.writeFileSync(e,`${JSON.stringify(i,null,2)}
+`,"utf8"),n.fsyncSync(e),n.closeSync(e),e=void 0,d(t,o),process.platform!=="win32"){const a=n.openSync(r,"r");try{n.fsyncSync(a)}finally{n.closeSync(a)}}}finally{e!==void 0&&n.closeSync(e);try{n.unlinkSync(t)}catch{}}}export{w as getDaemonInstallationId};

package/dist/src/relay/client.js

@@ -1 +1 @@
-import w from"ws";import I from"node:crypto";import{parseProjectFsNegotiationChallenge as S,projectFsNegotiationProofPayload as _,PROJECT_FS_NEGOTIATION_METHOD as A,PROJECT_FS_OPAQUE_CAPABILITY as m,PROJECT_FS_SENSITIVE_AUTHORITY_VERSION as N,isProjectFsMethod as C}from"@shennian/wire";import{generateTraceId as d}from"../log-reporter.js";import{recordPersonalSyncLocalMetric as a}from"../personal-sync/metrics.js";class b extends Error{rejection;constructor(e){super(e.message||e.code),this.rejection=e,this.name="SessionSyncRejectedError"}}const k=9e4,j=3e4,O=1e3,F=.2,v=2e4,$=1e4,U=15e3,B=1e3,M=new Set([4001,4003,4004,4009,4402,4403,4406]),q=["upgrade_required","epoch_mismatch","token_revoked","ownership_transferred","invalid_identity"];function H(h,e){if(M.has(h))return!0;const t=e.trim().toLowerCase();return q.some(s=>t.startsWith(s))}class Y{options;ws=null;state="disconnected";reconnectAttempts=0;heartbeatTimer=null;reconnectTimer=null;connectTimer=null;pingTimer=null;pongTimer=null;disposed=!1;projectFsNegotiated=!1;closeTrigger;lastSocketError;sendBuffer=new Map;pendingAcks=new Map;pendingRequests=new Map;constructor(e){this.options=e}connect(){if(this.disposed)return;this.setProjectFsNegotiated(!1),this.ws&&this.cleanup(!1),this.state="connecting";const e=this.options.serverUrl.includes("?")?"&":"?",t=this.options.cliVersion?`&v=${encodeURIComponent(this.options.cliVersion)}`:"",s=this.options.agentList?.length?`&agents=${encodeURIComponent(this.options.agentList.join(","))}`:"",n=this.options.autoUpgradePolicy?`&upgradePolicy=${encodeURIComponent(this.options.autoUpgradePolicy)}`:"",o=this.options.sessionSyncProtocolVersion?`&syncProtocol=${this.options.sessionSyncProtocolVersion}`:"",r=this.options.sessionSyncCapabilities?.filter(c=>c!==m),p=r?.length?`&syncCapabilities=${encodeURIComponent(r.join(","))}`:"",f=this.options.daemonInstallationId?`&daemonInstallationId=${encodeURIComponent(this.options.daemonInstallationId)}`:"",T=this.options.dataEpoch?`&dataEpoch=${encodeURIComponent(this.options.dataEpoch)}`:"",E=this.options.updaterProtocolVersion?`&updaterProtocol=${encodeURIComponent(this.options.updaterProtocolVersion)}`:"",y=`${this.options.serverUrl}${e}token=${encodeURIComponent(this.options.machineToken)}${t}${s}${n}${o}${p}${f}${T}${E}`,i=new w(y);this.ws=i,this.connectTimer=setTimeout(()=>{this.ws===i&&this.state==="connecting"&&(this.closeTrigger="connect-timeout",i.terminate())},U),i.on("open",()=>{this.ws===i&&(this.clearConnectTimer(),this.state="connected",this.reconnectAttempts=0,this.startHeartbeat(),this.startPing(i),this.flushSendBuffer(),this.options.onConnected?.())}),i.on("pong",()=>{this.ws===i&&(this.clearPongTimer(),this.resetHeartbeat())}),i.on("message",c=>{if(this.ws!==i)return;let l;try{l=JSON.parse(c.toString())}catch{return}this.handleFrame(l)}),i.on("close",(c,l)=>{if(this.ws!==i)return;const R=this.state,g=l.toString(),u=H(c,g),P={code:c,reason:g,error:this.lastSocketError,phase:R,trigger:this.closeTrigger??"socket-close",reconnectAttempt:this.reconnectAttempts+1};u&&(this.disposed=!0,a("permanentStops")),this.cleanup(u),this.options.onDisconnected?.(P),u||this.scheduleReconnect()}),i.on("error",c=>{this.lastSocketError=c.message,this.closeTrigger="socket-error",i.close()})}disconnect(){this.disposed=!0,this.cleanup(!0)}sendRes(e){this.state!=="connected"||!this.ws||(e.traceId||(e.traceId=d()),this.ws.send(JSON.stringify(e)))}sendResAndWait(e){if(this.state!=="connected"||!this.ws)return Promise.reject(new Error("Relay is not connected"));e.traceId||(e.traceId=d());const t=this.ws;return new Promise((s,n)=>{t.send(JSON.stringify(e),o=>{o?n(o):s()})})}sendEvent(e){this.state!=="connected"||!this.ws||(e.traceId||(e.traceId=d()),a("relayEventsSent"),this.ws.send(JSON.stringify(e)))}sendReq(e,t=6e4){return this.state!=="connected"||!this.ws?Promise.reject(new Error("Relay is not connected")):(e.traceId||(e.traceId=d()),a("relayRequestsSent"),new Promise((s,n)=>{const o=this.pendingRequests.get(e.id);o&&(clearTimeout(o.timer),o.reject(new Error("Superseded by a newer relay request")));const r=setTimeout(()=>{this.pendingRequests.delete(e.id),n(new Error("Relay request timed out"))},t);this.pendingRequests.set(e.id,{resolve:s,reject:n,timer:r}),this.ws?.send(JSON.stringify(e))}))}sendBufferedEvent(e,t=12e4){if(e.traceId||(e.traceId=d()),!e.id)return this.sendEvent(e),Promise.resolve();const s=e.id;return a("relayEventsSent"),new Promise((n,o)=>{const r=this.pendingAcks.get(s);r&&(clearTimeout(r.timer),r.reject(new Error("Superseded by a newer buffered event")));const p=setTimeout(()=>{this.pendingAcks.delete(s),this.sendBuffer.delete(s),o(new Error("Relay event acknowledgement timed out"))},t);this.pendingAcks.set(s,{resolve:n,reject:o,timer:p}),this.bufferEvent(e)})}sendAgentEvent(e){this.sendBufferedEvent(e).catch(()=>{})}getState(){return this.state}handleFrame(e){if(a("relayFramesReceived"),e.type==="res"&&e.rejection&&a("structuredRejections"),e.type==="event"&&e.event==="tick"){this.resetHeartbeat();return}if(e.type==="res"&&e.id){this.sendBuffer.delete(e.id);const t=this.pendingAcks.get(e.id);if(t)if(this.pendingAcks.delete(e.id),clearTimeout(t.timer),e.ok)t.resolve(e);else{const n=e.rejection;t.reject(n?new b(n):new Error(e.error??"Relay event failed"))}const s=this.pendingRequests.get(e.id);s&&(this.pendingRequests.delete(e.id),clearTimeout(s.timer),s.resolve(e));return}if(e.type==="req"&&e.method===A){this.handleProjectFsNegotiation(e);return}if(e.type==="req"&&C(e.method)&&!this.projectFsNegotiated){this.sendRes({type:"res",id:e.id,ok:!1,error:"capability_required",payload:{rejection:{code:"capability_required",retryable:!1,requiredAction:"upgrade_daemon"}}});return}e.type==="req"&&this.options.onReq?.(e)}handleProjectFsNegotiation(e){this.setProjectFsNegotiated(!1,!0);const t=S(e.params);if(!t||t.daemonInstallationId!==this.options.daemonInstallationId){this.sendRes({type:"res",id:e.id,ok:!1,error:"invalid_identity"});return}const s=I.createHmac("sha256",this.options.machineToken).update(_(e.id,t)).digest("base64url");this.sendRes({type:"res",id:e.id,ok:!0,payload:{version:N,capability:m,nonce:t.nonce,daemonInstallationId:t.daemonInstallationId,proof:s}}),this.setProjectFsNegotiated(!0)}setProjectFsNegotiated(e,t=!1){!t&&this.projectFsNegotiated===e||(this.projectFsNegotiated=e,this.options.onProjectFsCapabilityChanged?.(e))}flushSendBuffer(){if(!(this.sendBuffer.size===0||!this.ws))for(const e of this.sendBuffer.values()){if(this.state!=="connected"||!this.ws)break;this.ws.send(JSON.stringify(e))}}bufferEvent(e){if(!e.id){this.sendEvent(e);return}if(this.sendBuffer.set(e.id,e),this.sendBuffer.size>B){const t=this.sendBuffer.keys().next().value;if(t){this.sendBuffer.delete(t);const s=this.pendingAcks.get(t);s&&(this.pendingAcks.delete(t),clearTimeout(s.timer),s.reject(new Error("Relay send buffer overflow")))}}this.state==="connected"&&this.ws&&this.ws.send(JSON.stringify(e))}clearConnectTimer(){this.connectTimer!==null&&(clearTimeout(this.connectTimer),this.connectTimer=null)}startPing(e){this.clearPing(),this.pingTimer=setInterval(()=>{if(!(this.ws!==e||this.state!=="connected")){this.pongTimer=setTimeout(()=>{this.closeTrigger="pong-timeout",e.close()},$);try{e.ping()}catch{this.clearPongTimer(),this.closeTrigger="socket-error",e.close()}}},v)}clearPing(){this.pingTimer!==null&&(clearInterval(this.pingTimer),this.pingTimer=null),this.clearPongTimer()}clearPongTimer(){this.pongTimer!==null&&(clearTimeout(this.pongTimer),this.pongTimer=null)}startHeartbeat(){this.clearHeartbeat(),this.heartbeatTimer=setTimeout(()=>{this.closeTrigger="heartbeat-timeout",this.ws?.close()},k)}resetHeartbeat(){this.startHeartbeat()}clearHeartbeat(){this.heartbeatTimer!==null&&(clearTimeout(this.heartbeatTimer),this.heartbeatTimer=null)}scheduleReconnect(){if(this.disposed)return;const e=Math.min(O*Math.pow(2,this.reconnectAttempts),j),t=e*F*(Math.random()*2-1),s=Math.round(e+t);this.reconnectAttempts++,a("relayReconnects"),this.reconnectTimer=setTimeout(()=>{this.reconnectTimer=null,this.connect()},s)}cleanup(e){if(this.setProjectFsNegotiated(!1),this.state="disconnected",this.closeTrigger=void 0,this.lastSocketError=void 0,this.clearConnectTimer(),this.clearHeartbeat(),this.clearPing(),this.reconnectTimer!==null&&(clearTimeout(this.reconnectTimer),this.reconnectTimer=null),this.ws){const t=this.ws;this.ws=null,t.removeAllListeners(),t.on("error",()=>{});try{t.close()}catch{}}for(const[t,s]of this.pendingRequests)clearTimeout(s.timer),s.reject(new Error("Relay client disconnected")),this.pendingRequests.delete(t);if(e)for(const[t,s]of this.pendingAcks)clearTimeout(s.timer),s.reject(new Error("Relay client disconnected")),this.pendingAcks.delete(t)}}export{Y as CliRelayClient,b as SessionSyncRejectedError,H as isPermanentRelayClose};
+import w from"ws";import S from"node:crypto";import{parseProjectFsNegotiationChallenge as I,projectFsNegotiationProofPayload as b,PROJECT_FS_NEGOTIATION_METHOD as _,PROJECT_FS_OPAQUE_CAPABILITY as m,PROJECT_FS_SENSITIVE_AUTHORITY_VERSION as A,isProjectFsMethod as N}from"@shennian/wire";import{generateTraceId as d}from"../log-reporter.js";import{recordPersonalSyncLocalMetric as a}from"../personal-sync/metrics.js";class C extends Error{rejection;constructor(e){super(e.message||e.code),this.rejection=e,this.name="SessionSyncRejectedError"}}const j=9e4,O=3e4,v=1e3,k=.2,$=2e4,F=1e4,M=15e3,U=1e3,B=new Set([4001,4003,4004,4009,4402,4403,4406]),q=["upgrade_required","epoch_mismatch","token_revoked","ownership_transferred","invalid_identity"];function L(h,e){if(B.has(h))return!0;const t=e.trim().toLowerCase();return q.some(s=>t.startsWith(s))}class Y{options;ws=null;state="disconnected";reconnectAttempts=0;heartbeatTimer=null;reconnectTimer=null;connectTimer=null;pingTimer=null;pongTimer=null;disposed=!1;projectFsNegotiated=!1;closeTrigger;lastSocketError;sendBuffer=new Map;pendingAcks=new Map;pendingRequests=new Map;constructor(e){this.options=e}connect(){if(this.disposed)return;this.setProjectFsNegotiated(!1),this.ws&&this.cleanup(!1),this.state="connecting";const e=this.options.serverUrl.includes("?")?"&":"?",t=this.options.cliVersion?`&v=${encodeURIComponent(this.options.cliVersion)}`:"",s=this.options.agentList?.length?`&agents=${encodeURIComponent(this.options.agentList.join(","))}`:"",i=this.options.autoUpgradePolicy?`&upgradePolicy=${encodeURIComponent(this.options.autoUpgradePolicy)}`:"",o=this.options.sessionSyncProtocolVersion?`&syncProtocol=${this.options.sessionSyncProtocolVersion}`:"",r=this.options.sessionSyncCapabilities?.filter(c=>c!==m),p=r?.length?`&syncCapabilities=${encodeURIComponent(r.join(","))}`:"",f=this.options.daemonInstallationId?`&daemonInstallationId=${encodeURIComponent(this.options.daemonInstallationId)}`:"",T=this.options.dataEpoch?`&dataEpoch=${encodeURIComponent(this.options.dataEpoch)}`:"",y=this.options.updaterProtocolVersion?`&updaterProtocol=${encodeURIComponent(this.options.updaterProtocolVersion)}`:"",P=`${this.options.serverUrl}${e}token=${encodeURIComponent(this.options.machineToken)}${t}${s}${i}${o}${p}${f}${T}${y}`,n=new w(P);this.ws=n,this.connectTimer=setTimeout(()=>{this.ws===n&&this.state==="connecting"&&(this.closeTrigger="connect-timeout",n.terminate())},M),n.on("open",()=>{this.ws===n&&(this.clearConnectTimer(),this.state="connected",this.reconnectAttempts=0,this.startHeartbeat(),this.startPing(n),this.flushSendBuffer(),this.options.onConnected?.())}),n.on("pong",()=>{this.ws===n&&(this.clearPongTimer(),this.resetHeartbeat())}),n.on("message",c=>{if(this.ws!==n)return;let l;try{l=JSON.parse(c.toString())}catch{this.noteRelayProblem("unreadable-frame","ignored a frame from the server that is not valid JSON");return}this.handleFrame(l)}),n.on("close",(c,l)=>{if(this.ws!==n)return;const E=this.state,g=l.toString(),u=L(c,g),R={code:c,reason:g,error:this.lastSocketError,phase:E,trigger:this.closeTrigger??"socket-close",reconnectAttempt:this.reconnectAttempts+1};u&&(this.disposed=!0,a("permanentStops")),this.cleanup(u),this.options.onDisconnected?.(R),u||this.scheduleReconnect()}),n.on("error",c=>{this.lastSocketError=c.message,this.closeTrigger="socket-error",n.close()})}disconnect(){this.disposed=!0,this.cleanup(!0)}sendRes(e){this.state!=="connected"||!this.ws||(e.traceId||(e.traceId=d()),this.ws.send(JSON.stringify(e)))}sendResAndWait(e){if(this.state!=="connected"||!this.ws)return Promise.reject(new Error("Relay is not connected"));e.traceId||(e.traceId=d());const t=this.ws;return new Promise((s,i)=>{t.send(JSON.stringify(e),o=>{o?i(o):s()})})}sendEvent(e){this.state!=="connected"||!this.ws||(e.traceId||(e.traceId=d()),a("relayEventsSent"),this.ws.send(JSON.stringify(e)))}sendReq(e,t=6e4){return this.state!=="connected"||!this.ws?Promise.reject(new Error("Relay is not connected")):(e.traceId||(e.traceId=d()),a("relayRequestsSent"),new Promise((s,i)=>{const o=this.pendingRequests.get(e.id);o&&(clearTimeout(o.timer),o.reject(new Error("Superseded by a newer relay request")));const r=setTimeout(()=>{this.pendingRequests.delete(e.id),i(new Error("Relay request timed out"))},t);this.pendingRequests.set(e.id,{resolve:s,reject:i,timer:r}),this.ws?.send(JSON.stringify(e))}))}sendBufferedEvent(e,t=12e4){if(e.traceId||(e.traceId=d()),!e.id)return this.sendEvent(e),Promise.resolve();const s=e.id;return a("relayEventsSent"),new Promise((i,o)=>{const r=this.pendingAcks.get(s);r&&(clearTimeout(r.timer),r.reject(new Error("Superseded by a newer buffered event")));const p=setTimeout(()=>{this.pendingAcks.delete(s),this.sendBuffer.delete(s),o(new Error("Relay event acknowledgement timed out"))},t);this.pendingAcks.set(s,{resolve:i,reject:o,timer:p}),this.bufferEvent(e)})}sendAgentEvent(e){this.sendBufferedEvent(e).catch(t=>{const s=t instanceof Error?t.message:String(t);if(s.startsWith("Superseded"))return;const i=e.payload?.state;this.noteRelayProblem("agent-event-undelivered",`agent event ${e.event}${typeof i=="string"?`/${i}`:""} was not delivered: ${s}`)})}relayProblemLoggedAt=new Map;relayProblemSuppressed=new Map;noteRelayProblem(e,t){const s=Date.now();if(s-(this.relayProblemLoggedAt.get(e)??0)<3e4){this.relayProblemSuppressed.set(e,(this.relayProblemSuppressed.get(e)??0)+1);return}const i=this.relayProblemSuppressed.get(e)??0;this.relayProblemLoggedAt.set(e,s),this.relayProblemSuppressed.delete(e),console.error(`[relay] ${t}${i?` (+${i} more since the last report)`:""}`)}getState(){return this.state}handleFrame(e){if(a("relayFramesReceived"),e.type==="res"&&e.rejection&&a("structuredRejections"),e.type==="event"&&e.event==="tick"){this.resetHeartbeat();return}if(e.type==="res"&&e.id){this.sendBuffer.delete(e.id);const t=this.pendingAcks.get(e.id);if(t)if(this.pendingAcks.delete(e.id),clearTimeout(t.timer),e.ok)t.resolve(e);else{const i=e.rejection;t.reject(i?new C(i):new Error(e.error??"Relay event failed"))}const s=this.pendingRequests.get(e.id);s&&(this.pendingRequests.delete(e.id),clearTimeout(s.timer),s.resolve(e));return}if(e.type==="req"&&e.method===_){this.handleProjectFsNegotiation(e);return}if(e.type==="req"&&N(e.method)&&!this.projectFsNegotiated){this.sendRes({type:"res",id:e.id,ok:!1,error:"capability_required",payload:{rejection:{code:"capability_required",retryable:!1,requiredAction:"upgrade_daemon"}}});return}e.type==="req"&&this.options.onReq?.(e)}handleProjectFsNegotiation(e){this.setProjectFsNegotiated(!1,!0);const t=I(e.params);if(!t||t.daemonInstallationId!==this.options.daemonInstallationId){this.sendRes({type:"res",id:e.id,ok:!1,error:"invalid_identity"});return}const s=S.createHmac("sha256",this.options.machineToken).update(b(e.id,t)).digest("base64url");this.sendRes({type:"res",id:e.id,ok:!0,payload:{version:A,capability:m,nonce:t.nonce,daemonInstallationId:t.daemonInstallationId,proof:s}}),this.setProjectFsNegotiated(!0)}setProjectFsNegotiated(e,t=!1){!t&&this.projectFsNegotiated===e||(this.projectFsNegotiated=e,this.options.onProjectFsCapabilityChanged?.(e))}flushSendBuffer(){if(!(this.sendBuffer.size===0||!this.ws))for(const e of this.sendBuffer.values()){if(this.state!=="connected"||!this.ws)break;this.ws.send(JSON.stringify(e))}}bufferEvent(e){if(!e.id){this.sendEvent(e);return}if(this.sendBuffer.set(e.id,e),this.sendBuffer.size>U){const t=this.sendBuffer.keys().next().value;if(t){this.sendBuffer.delete(t);const s=this.pendingAcks.get(t);s&&(this.pendingAcks.delete(t),clearTimeout(s.timer),s.reject(new Error("Relay send buffer overflow")))}}this.state==="connected"&&this.ws&&this.ws.send(JSON.stringify(e))}clearConnectTimer(){this.connectTimer!==null&&(clearTimeout(this.connectTimer),this.connectTimer=null)}startPing(e){this.clearPing(),this.pingTimer=setInterval(()=>{if(!(this.ws!==e||this.state!=="connected")){this.pongTimer=setTimeout(()=>{this.closeTrigger="pong-timeout",e.close()},F);try{e.ping()}catch{this.clearPongTimer(),this.closeTrigger="socket-error",e.close()}}},$)}clearPing(){this.pingTimer!==null&&(clearInterval(this.pingTimer),this.pingTimer=null),this.clearPongTimer()}clearPongTimer(){this.pongTimer!==null&&(clearTimeout(this.pongTimer),this.pongTimer=null)}startHeartbeat(){this.clearHeartbeat(),this.heartbeatTimer=setTimeout(()=>{this.closeTrigger="heartbeat-timeout",this.ws?.close()},j)}resetHeartbeat(){this.startHeartbeat()}clearHeartbeat(){this.heartbeatTimer!==null&&(clearTimeout(this.heartbeatTimer),this.heartbeatTimer=null)}scheduleReconnect(){if(this.disposed)return;const e=Math.min(v*Math.pow(2,this.reconnectAttempts),O),t=e*k*(Math.random()*2-1),s=Math.round(e+t);this.reconnectAttempts++,a("relayReconnects"),this.reconnectTimer=setTimeout(()=>{this.reconnectTimer=null,this.connect()},s)}cleanup(e){if(this.setProjectFsNegotiated(!1),this.state="disconnected",this.closeTrigger=void 0,this.lastSocketError=void 0,this.clearConnectTimer(),this.clearHeartbeat(),this.clearPing(),this.reconnectTimer!==null&&(clearTimeout(this.reconnectTimer),this.reconnectTimer=null),this.ws){const t=this.ws;this.ws=null,t.removeAllListeners(),t.on("error",()=>{});try{t.close()}catch{}}for(const[t,s]of this.pendingRequests)clearTimeout(s.timer),s.reject(new Error("Relay client disconnected")),this.pendingRequests.delete(t);if(e)for(const[t,s]of this.pendingAcks)clearTimeout(s.timer),s.reject(new Error("Relay client disconnected")),this.pendingAcks.delete(t)}}export{Y as CliRelayClient,C as SessionSyncRejectedError,L as isPermanentRelayClose};

package/dist/src/room/activation-service.js

@@ -1,13 +1,13 @@
-import{isAvailableBuiltinAgentType as k,managedAgentExecutionMode as P}from"@shennian/wire";import{getBuiltinAgentVersion as S,resolveBuiltinCommand as B}from"../agents/command-spec.js";import{registerCustomRuntimeSecurity as K,resolveCustomRuntimeExecutableFingerprint as $}from"../agents/custom-managed-runtime.js";import{loadConfig as x}from"../config/index.js";import{resolveManagedAgentExecutableIdentity as W}from"../security/managed-agent-executable.js";import{compileManagedAgentPolicy as T}from"../security/managed-agent-policy.js";import{resolveManagedAgentRuntimeProtection as q}from"../security/managed-agent-runtime.js";import{selectRoomActivationTargets as D}from"./activation-policy.js";import{buildManagedAgentPermissionPrompt as E,composeManagedRoomPrompt as R}from"./managed-prompt-composer.js";import{isCurrentRegistration as f}from"./registration-authority.js";const N=4,F=6e4,O=6,V=5*6e4;class ce{deps;latestContexts=new Map;constructor(e){this.deps=e}async processMessages(e,r,t,a={roomName:"\u5F53\u524D\u7FA4\u804A"}){const d=[],g=[],u=new Map,m=new Set,c=[...r].sort((i,s)=>J(i.sequence,s.sequence));for(const i of t){const s=this.deps.registry.getByRegistryKey(i.registryKey);!s?.binding||!f(this.deps.registry,i)||s.binding.roomId!==e||s.binding.status!=="active"&&s.binding.status!=="paused"&&s.binding.activationQueue.length}for(const i of t){const s=this.deps.registry.getByRegistryKey(i.registryKey);if(!s?.binding||!f(this.deps.registry,i)||s.binding.roomId!==e||s.binding.activationQueue.length===0&&!s.binding.activeActivation||(m.add(s.registryKey),s.binding.status!=="active"||s.binding.activationMode==="paused")||s.binding.activationQueue.length===0)continue;const y=this.deps.observations.getBySource(s);if(!y?.workspacePath||y.lifecycleState==="closed")throw new Error("managed_room_workspace_unavailable");this.latestContexts.set(s.registryKey,a);for(const o of s.binding.activationQueue)d.push({registration:s,input:{params:{sessionId:s.nianSessionId,text:o.deliveryText??"\u7FA4\u804A\u4E2D\u6709\u4E00\u6761\u5F85\u5904\u7406\u6D88\u606F\uFF0C\u8BF7\u7ED3\u5408\u5F53\u524D\u7FA4\u804A\u4E0A\u4E0B\u6587\u5904\u7406\u3002",agentType:l(s.runtimeAdapter),sessionMode:a.agentsByIdentityId?.[s.binding.agentIdentityId]?.sessionMode??"standard",managerConfig:a.agentsByIdentityId?.[s.binding.agentIdentityId]?.managerConfig??null,managerDefaultWorkerAgentType:a.agentsByIdentityId?.[s.binding.agentIdentityId]?.managerConfig?.defaultWorkerAgentType??null,managerDefaultWorkerModelId:a.agentsByIdentityId?.[s.binding.agentIdentityId]?.managerConfig?.defaultWorkerModelId??null,workDir:y.workspacePath,agentSessionId:s.sourceSessionKey,queueMessageId:`room-activation-${s.binding.bindingId}-${o.causeMessageId}`,clientMessageId:`room-activation-${s.binding.bindingId}-${o.causeMessageId}`},context:{registryKey:s.registryKey,causeMessageId:o.causeMessageId,rootCauseMessageId:o.rootCauseMessageId,sequence:o.sequence,hopCount:o.hopCount}}})}for(const i of c){const s=new Set(D(i,t).map(y=>y.registration.registryKey));for(const y of t){const o=this.deps.registry.getByRegistryKey(y.registryKey);if(!o?.binding||!f(this.deps.registry,y)||o.binding.roomId!==e||o.binding.status!=="active"&&o.binding.status!=="paused"||a.agentsByIdentityId?.[o.binding.agentIdentityId]?.configurationPending||BigInt(i.sequence)<=BigInt(o.binding.lastActivatedSequence))continue;const I=u.get(o.registryKey)??[...o.binding.mentionContext??[]];if(u.set(o.registryKey,I),s.has(o.registryKey)){const p=(i.activationCause?.hopCount??0)+(i.author.principalType==="agent"?1:0),h=i.activationCause?.rootCauseMessageId??i.id;if(p>N)this.audit(o,i.id,h,p,"suppressed","max_hops");else{const M=this.deps.registry.claimActivation({registryKey:o.registryKey,causeMessageId:i.id,windowMs:F,maxActivations:O,pauseMs:V,now:this.deps.now?.()});if(!M.allowed){M.newlyPaused&&this.audit(o,i.id,h,p,"suppressed","rate_limited"),g.push({registryKey:o.registryKey,sequence:i.sequence});continue}const b=this.deps.observations.getBySource(o);if(!b?.workspacePath||b.lifecycleState==="closed")throw new Error("managed_room_workspace_unavailable");const v=w([i]),C=o.binding.activationMode==="mention_only"?Q([...I.map(_=>_.deliveryText),v]):v;this.latestContexts.set(o.registryKey,a),d.push({registration:o,input:{params:{sessionId:o.nianSessionId,text:C,agentType:l(o.runtimeAdapter),sessionMode:a.agentsByIdentityId?.[o.binding.agentIdentityId]?.sessionMode??"standard",managerConfig:a.agentsByIdentityId?.[o.binding.agentIdentityId]?.managerConfig??null,managerDefaultWorkerAgentType:a.agentsByIdentityId?.[o.binding.agentIdentityId]?.managerConfig?.defaultWorkerAgentType??null,managerDefaultWorkerModelId:a.agentsByIdentityId?.[o.binding.agentIdentityId]?.managerConfig?.defaultWorkerModelId??null,workDir:b.workspacePath,agentSessionId:o.sourceSessionKey,queueMessageId:`room-activation-${o.binding.bindingId}-${i.id}`,clientMessageId:`room-activation-${o.binding.bindingId}-${i.id}`,roomMessageCreatedAt:i.createdAt},context:{registryKey:o.registryKey,causeMessageId:i.id,rootCauseMessageId:h,sequence:i.sequence,hopCount:p}}}),o.binding.activationMode==="mention_only"&&u.set(o.registryKey,[])}}else o.binding.activationMode==="mention_only"&&i.kind!=="system"&&i.author.membershipId!==o.binding.agentMembershipId&&(I.some(p=>p.sequence===i.sequence)||I.push({sequence:i.sequence,deliveryText:w([i])}));g.push({registryKey:o.registryKey,sequence:i.sequence})}}await this.deps.enqueueConversationBatch(d.map(i=>i.input));for(const i of m)this.deps.registry.retireLegacyActivationState(i,this.deps.now?.()??new Date);for(const[i,s]of u)this.deps.registry.getByRegistryKey(i)?.lifecycleState!=="closed"&&this.deps.registry.replaceMentionContext(i,s,this.deps.now?.()??new Date);for(const i of d)this.audit(i.registration,i.input.context.causeMessageId,i.input.context.rootCauseMessageId,i.input.context.hopCount,"queued","conversation_queue");for(const i of g)this.deps.registry.getByRegistryKey(i.registryKey)?.lifecycleState!=="closed"&&this.deps.registry.advanceCursor({registryKey:i.registryKey,cursor:"activated",sequence:i.sequence})}async prepareConversationTurn(e){const r=e.at(-1);if(!r)throw new Error("managed_room_queue_context_missing");const t=this.deps.registry.getByRegistryKey(r.registryKey);if(!t)throw new Error("managed_room_binding_unavailable");const a=await this.prepareManagedTurn(t,r.causeMessageId);return this.audit(t,r.causeMessageId,r.rootCauseMessageId,r.hopCount,"activated","conversation_queue_dispatch"),a}async prepareDirectConversationTurn(e,r={}){const t=r.roomOrigin?this.deps.registry.getByRegistryKey(r.roomOrigin.registryKey):this.deps.registry.getByNianSessionId(e);return t?.nianSessionId!==e||!t||r.roomOrigin&&(t.registrationEpoch!==r.roomOrigin.registrationEpoch||t.binding?.bindingId!==r.roomOrigin.bindingId||t.binding.roomId!==r.roomOrigin.roomId)?null:this.prepareManagedTurn(t,void 0,r)}async prepareManagedTurn(e,r,t){if(!f(this.deps.registry,e)||!e.binding||e.binding.status!=="active")throw new Error("managed_room_binding_unavailable");const a=this.deps.loadContext?await this.deps.loadContext(e):this.latestContexts.get(e.registryKey);if(!a)throw new Error("managed_room_prompt_context_unavailable");const d=a.agentsByIdentityId?.[e.binding.agentIdentityId];if(d?.configurationPending)throw new Error("managed_agent_configuration_pending");if(!d?.permissionPolicy)throw new Error("managed_agent_policy_missing");const g=d.sessionMode==="manager"?"manager":"standard",u=g==="manager"?{...d.managerConfig,defaultWorkerAgentType:d.managerConfig?.defaultWorkerAgentType??l(e.runtimeAdapter),defaultWorkerModelId:d.managerConfig?.defaultWorkerModelId??null}:null,m=this.deps.observations.getBySource(e);if(!m?.workspacePath||m.lifecycleState==="closed")throw new Error("managed_room_workspace_unavailable");const c=this.deps.resolveManagedAgentPolicy?await this.deps.resolveManagedAgentPolicy({registration:e,permissionPolicy:d.permissionPolicy,permissionConfirmation:d.permissionConfirmation,workDir:m.workspacePath}):await U({registration:e,permissionPolicy:d.permissionPolicy,permissionConfirmation:d.permissionConfirmation,workDir:m.workspacePath});if(!f(this.deps.registry,e))throw new Error("managed_room_binding_unavailable");const i=H(a,e,c),s=this.deps.issueManagedRoomContext(e.registryKey,r,t?.allowedRoomActions);if(!/^mrc_[A-Za-z0-9_-]{43}$/.test(s))throw new Error("managed_room_context_unavailable");return{agentType:l(e.runtimeAdapter),workDir:c.adapterPolicy.workDir,agentSessionId:e.sourceSessionKey,systemPrompt:t?G({managerEvent:t.managerEvent===!0,roomSendAllowed:t.allowedRoomActions?.includes("send")===!0,agentSystemPrompt:a.agentSystemPromptsByIdentityId?.[e.binding.agentIdentityId],managedAgentPolicy:c,runtimeAdapter:l(e.runtimeAdapter)}):i.systemPrompt,sessionMode:g,managerConfig:u,managerDefaultWorkerAgentType:u?.defaultWorkerAgentType??null,managerDefaultWorkerModelId:u?.defaultWorkerModelId??null,roomContextRegistryKey:e.registryKey,managedRoomContextToken:s,managedAgentPolicy:c,managedRoomPromptSnapshot:i.snapshot}}audit(e,r,t,a,d,g){e.binding&&this.deps.audit?.record({roomId:e.binding.roomId,bindingId:e.binding.bindingId,causeMessageId:r,rootCauseMessageId:t,hopCount:a,outcome:d,reason:g,at:this.deps.now?.()})}}function w(n){const e=n.map(r=>{const t=r.text?.trim()||"\u53D1\u9001\u4E86\u4E00\u6761\u6D88\u606F",a=r.attachments.length>0?`
-${r.attachments.map(L).join(`
-`)}`:"";return{speaker:r.author.displayName,body:`${t}${a}`}});return A(e)}function L(n){return`\u9644\u4EF6\uFF1A${`${j(n.name)} \xB7 ${z(n.byteSize)}`}\uFF5C${n.mimeType}\uFF5CattachmentId=${n.attachmentId}`}function j(n){return String(n||"\u9644\u4EF6").replace(/[[\]\\]/g,"\\$&").replace(/[\r\n]+/g," ")}function z(n){const e=Number(n);if(!Number.isFinite(e)||e<0)return`${n} B`;if(e<1024)return`${e} B`;const r=["KB","MB","GB","TB"];let t=e,a=-1;do t/=1024,a+=1;while(t>=1024&&a<r.length-1);const d=t>=100?0:t>=10?1:2;return`${t.toFixed(d).replace(/\.0+$|(?<=\.[0-9])0+$/,"")} ${r[a]}`}function Q(n){return A(n.map(X))}function X(n){const e=n.match(/^\[群消息\][ \t]+<([^>\n]+)>\n([\s\S]*)$/);if(e)return{speaker:e[1],body:e[2]};const r=n.match(/^\[群消息\]\n<([^>\n]+)>\n([\s\S]*)$/);if(r)return{speaker:r[1],body:r[2]};const t=n.match(/^群消息\n([^\n]+)\n([\s\S]*)$/);if(t)return{speaker:t[1],body:t[2]};const a=n.match(/^([^\n]+)\n([\s\S]*)$/);return a?{speaker:a[1],body:a[2]}:{speaker:"\u7FA4\u6210\u5458",body:n.trim()}}function A(n){if(n.length===1){const[e]=n;return`[\u7FA4\u6D88\u606F] <${e.speaker}>
+import{isAvailableBuiltinAgentType as k,managedAgentExecutionMode as P}from"@shennian/wire";import{getBuiltinAgentVersion as S,resolveBuiltinCommand as B}from"../agents/command-spec.js";import{registerCustomRuntimeSecurity as K,resolveCustomRuntimeExecutableFingerprint as $}from"../agents/custom-managed-runtime.js";import{loadConfig as x}from"../config/index.js";import{resolveManagedAgentExecutableIdentity as W}from"../security/managed-agent-executable.js";import{compileManagedAgentPolicy as T}from"../security/managed-agent-policy.js";import{resolveManagedAgentRuntimeProtection as R}from"../security/managed-agent-runtime.js";import{selectRoomActivationTargets as q}from"./activation-policy.js";import{buildManagedAgentPermissionPrompt as E,composeManagedRoomPrompt as D}from"./managed-prompt-composer.js";import{isCurrentRegistration as f}from"./registration-authority.js";const N=4,O=6e4,F=6,V=5*6e4;class ce{deps;latestContexts=new Map;constructor(e){this.deps=e}async processMessages(e,o,t,a={roomName:"\u5F53\u524D\u7FA4\u804A"}){const d=[],m=[],c=new Map,u=new Set,g=[...o].sort((i,s)=>J(i.sequence,s.sequence));for(const i of t){const s=this.deps.registry.getByRegistryKey(i.registryKey);!s?.binding||!f(this.deps.registry,i)||s.binding.roomId!==e||s.binding.status!=="active"&&s.binding.status!=="paused"&&s.binding.activationQueue.length}for(const i of t){const s=this.deps.registry.getByRegistryKey(i.registryKey);if(!s?.binding||!f(this.deps.registry,i)||s.binding.roomId!==e||s.binding.activationQueue.length===0&&!s.binding.activeActivation||(u.add(s.registryKey),s.binding.status!=="active"||s.binding.activationMode==="paused")||s.binding.activationQueue.length===0)continue;const l=this.deps.observations.getBySource(s);if(!l?.workspacePath||l.lifecycleState==="closed")throw new Error("managed_room_workspace_unavailable");this.latestContexts.set(s.registryKey,a);for(const r of s.binding.activationQueue)d.push({registration:s,input:{params:{sessionId:s.nianSessionId,text:r.deliveryText??"\u7FA4\u804A\u4E2D\u6709\u4E00\u6761\u5F85\u5904\u7406\u6D88\u606F\uFF0C\u8BF7\u7ED3\u5408\u5F53\u524D\u7FA4\u804A\u4E0A\u4E0B\u6587\u5904\u7406\u3002",agentType:y(s.runtimeAdapter),sessionMode:a.agentsByIdentityId?.[s.binding.agentIdentityId]?.sessionMode??"standard",managerConfig:a.agentsByIdentityId?.[s.binding.agentIdentityId]?.managerConfig??null,managerDefaultWorkerAgentType:a.agentsByIdentityId?.[s.binding.agentIdentityId]?.managerConfig?.defaultWorkerAgentType??null,managerDefaultWorkerModelId:a.agentsByIdentityId?.[s.binding.agentIdentityId]?.managerConfig?.defaultWorkerModelId??null,workDir:l.workspacePath,agentSessionId:s.sourceSessionKey,queueMessageId:`room-activation-${s.binding.bindingId}-${r.causeMessageId}`,clientMessageId:`room-activation-${s.binding.bindingId}-${r.causeMessageId}`},context:{registryKey:s.registryKey,causeMessageId:r.causeMessageId,rootCauseMessageId:r.rootCauseMessageId,sequence:r.sequence,hopCount:r.hopCount}}})}for(const i of g){const s=new Set(q(i,t).map(l=>l.registration.registryKey));for(const l of t){const r=this.deps.registry.getByRegistryKey(l.registryKey);if(!r?.binding||!f(this.deps.registry,l)||r.binding.roomId!==e||r.binding.status!=="active"&&r.binding.status!=="paused"||a.agentsByIdentityId?.[r.binding.agentIdentityId]?.configurationPending||BigInt(i.sequence)<=BigInt(r.binding.lastActivatedSequence))continue;const I=c.get(r.registryKey)??[...r.binding.mentionContext??[]];if(c.set(r.registryKey,I),s.has(r.registryKey)){const p=(i.activationCause?.hopCount??0)+(i.author.principalType==="agent"?1:0),h=i.activationCause?.rootCauseMessageId??i.id;if(p>N)this.audit(r,i.id,h,p,"suppressed","max_hops");else{const w=this.deps.registry.claimActivation({registryKey:r.registryKey,causeMessageId:i.id,windowMs:O,maxActivations:F,pauseMs:V,now:this.deps.now?.()});if(!w.allowed){w.newlyPaused&&this.audit(r,i.id,h,p,"suppressed","rate_limited"),m.push({registryKey:r.registryKey,sequence:i.sequence});continue}const b=this.deps.observations.getBySource(r);if(!b?.workspacePath||b.lifecycleState==="closed")throw new Error("managed_room_workspace_unavailable");const M=v([i]),C=r.binding.activationMode==="mention_only"?Q([...I.map(_=>_.deliveryText),M]):M;this.latestContexts.set(r.registryKey,a),d.push({registration:r,input:{params:{sessionId:r.nianSessionId,text:C,agentType:y(r.runtimeAdapter),sessionMode:a.agentsByIdentityId?.[r.binding.agentIdentityId]?.sessionMode??"standard",managerConfig:a.agentsByIdentityId?.[r.binding.agentIdentityId]?.managerConfig??null,managerDefaultWorkerAgentType:a.agentsByIdentityId?.[r.binding.agentIdentityId]?.managerConfig?.defaultWorkerAgentType??null,managerDefaultWorkerModelId:a.agentsByIdentityId?.[r.binding.agentIdentityId]?.managerConfig?.defaultWorkerModelId??null,workDir:b.workspacePath,agentSessionId:r.sourceSessionKey,queueMessageId:`room-activation-${r.binding.bindingId}-${i.id}`,clientMessageId:`room-activation-${r.binding.bindingId}-${i.id}`,roomMessageCreatedAt:i.createdAt},context:{registryKey:r.registryKey,causeMessageId:i.id,rootCauseMessageId:h,sequence:i.sequence,hopCount:p}}}),r.binding.activationMode==="mention_only"&&c.set(r.registryKey,[])}}else r.binding.activationMode==="mention_only"&&i.kind!=="system"&&i.author.membershipId!==r.binding.agentMembershipId&&(I.some(p=>p.sequence===i.sequence)||I.push({sequence:i.sequence,deliveryText:v([i])}));m.push({registryKey:r.registryKey,sequence:i.sequence})}}await this.deps.enqueueConversationBatch(d.map(i=>i.input));for(const i of u)this.deps.registry.retireLegacyActivationState(i,this.deps.now?.()??new Date);for(const[i,s]of c)this.deps.registry.getByRegistryKey(i)?.lifecycleState!=="closed"&&this.deps.registry.replaceMentionContext(i,s,this.deps.now?.()??new Date);for(const i of d)this.audit(i.registration,i.input.context.causeMessageId,i.input.context.rootCauseMessageId,i.input.context.hopCount,"queued","conversation_queue");for(const i of m)this.deps.registry.getByRegistryKey(i.registryKey)?.lifecycleState!=="closed"&&this.deps.registry.advanceCursor({registryKey:i.registryKey,cursor:"activated",sequence:i.sequence})}async prepareConversationTurn(e){const o=e.at(-1);if(!o)throw new Error("managed_room_queue_context_missing");const t=this.deps.registry.getByRegistryKey(o.registryKey);if(!t)throw new Error("managed_room_binding_unavailable");const a=await this.prepareManagedTurn(t,o.causeMessageId);return this.audit(t,o.causeMessageId,o.rootCauseMessageId,o.hopCount,"activated","conversation_queue_dispatch"),a}async prepareDirectConversationTurn(e,o={}){const t=o.roomOrigin?this.deps.registry.getByRegistryKey(o.roomOrigin.registryKey):this.deps.registry.getByNianSessionId(e);return t?.nianSessionId!==e||!t||o.roomOrigin&&(t.registrationEpoch!==o.roomOrigin.registrationEpoch||t.binding?.bindingId!==o.roomOrigin.bindingId||t.binding.roomId!==o.roomOrigin.roomId)?null:this.prepareManagedTurn(t,void 0,o)}async prepareManagedTurn(e,o,t){if(!f(this.deps.registry,e)||!e.binding||e.binding.status!=="active")throw new Error("managed_room_binding_unavailable");const a=this.deps.loadContext?await this.deps.loadContext(e):this.latestContexts.get(e.registryKey);if(!a)throw new Error("managed_room_prompt_context_unavailable");const d=a.agentsByIdentityId?.[e.binding.agentIdentityId];if(d?.configurationPending)throw new Error("managed_agent_configuration_pending");if(!d?.permissionPolicy)throw new Error("managed_agent_policy_missing");const m=d.sessionMode==="manager"?"manager":"standard",c=m==="manager"?{...d.managerConfig,defaultWorkerAgentType:d.managerConfig?.defaultWorkerAgentType??y(e.runtimeAdapter),defaultWorkerModelId:d.managerConfig?.defaultWorkerModelId??null}:null,u=this.deps.observations.getBySource(e);if(!u?.workspacePath||u.lifecycleState==="closed")throw new Error("managed_room_workspace_unavailable");const g=this.deps.resolveManagedAgentPolicy?await this.deps.resolveManagedAgentPolicy({registration:e,permissionPolicy:d.permissionPolicy,permissionConfirmation:d.permissionConfirmation,workDir:u.workspacePath}):await U({registration:e,permissionPolicy:d.permissionPolicy,permissionConfirmation:d.permissionConfirmation,workDir:u.workspacePath});if(!f(this.deps.registry,e))throw new Error("managed_room_binding_unavailable");const i=H(a,e,g),s=this.deps.issueManagedRoomContext(e.registryKey,o,t?.allowedRoomActions,t?.propagateWorkerRoomOrigin);if(!/^mrc_[A-Za-z0-9_-]{43}$/.test(s))throw new Error("managed_room_context_unavailable");return{agentType:y(e.runtimeAdapter),workDir:g.adapterPolicy.workDir,agentSessionId:e.sourceSessionKey,systemPrompt:t?G({managerEvent:t.managerEvent===!0,roomSendAllowed:t.allowedRoomActions?.includes("send")===!0,agentSystemPrompt:a.agentSystemPromptsByIdentityId?.[e.binding.agentIdentityId],managedAgentPolicy:g,runtimeAdapter:y(e.runtimeAdapter)}):i.systemPrompt,sessionMode:m,managerConfig:c,managerDefaultWorkerAgentType:c?.defaultWorkerAgentType??null,managerDefaultWorkerModelId:c?.defaultWorkerModelId??null,roomContextRegistryKey:e.registryKey,managedRoomContextToken:s,managedAgentPolicy:g,managedRoomPromptSnapshot:i.snapshot}}audit(e,o,t,a,d,m){e.binding&&this.deps.audit?.record({roomId:e.binding.roomId,bindingId:e.binding.bindingId,causeMessageId:o,rootCauseMessageId:t,hopCount:a,outcome:d,reason:m,at:this.deps.now?.()})}}function v(n){const e=n.map(o=>{const t=o.text?.trim()||"\u53D1\u9001\u4E86\u4E00\u6761\u6D88\u606F",a=o.attachments.length>0?`
+${o.attachments.map(L).join(`
+`)}`:"";return{speaker:o.author.displayName,body:`${t}${a}`}});return A(e)}function L(n){return`\u9644\u4EF6\uFF1A${`${j(n.name)} \xB7 ${z(n.byteSize)}`}\uFF5C${n.mimeType}\uFF5CattachmentId=${n.attachmentId}`}function j(n){return String(n||"\u9644\u4EF6").replace(/[[\]\\]/g,"\\$&").replace(/[\r\n]+/g," ")}function z(n){const e=Number(n);if(!Number.isFinite(e)||e<0)return`${n} B`;if(e<1024)return`${e} B`;const o=["KB","MB","GB","TB"];let t=e,a=-1;do t/=1024,a+=1;while(t>=1024&&a<o.length-1);const d=t>=100?0:t>=10?1:2;return`${t.toFixed(d).replace(/\.0+$|(?<=\.[0-9])0+$/,"")} ${o[a]}`}function Q(n){return A(n.map(X))}function X(n){const e=n.match(/^\[群消息\][ \t]+<([^>\n]+)>\n([\s\S]*)$/);if(e)return{speaker:e[1],body:e[2]};const o=n.match(/^\[群消息\]\n<([^>\n]+)>\n([\s\S]*)$/);if(o)return{speaker:o[1],body:o[2]};const t=n.match(/^群消息\n([^\n]+)\n([\s\S]*)$/);if(t)return{speaker:t[1],body:t[2]};const a=n.match(/^([^\n]+)\n([\s\S]*)$/);return a?{speaker:a[1],body:a[2]}:{speaker:"\u7FA4\u6210\u5458",body:n.trim()}}function A(n){if(n.length===1){const[e]=n;return`[\u7FA4\u6D88\u606F] <${e.speaker}>
 ${e.body}`}return`[\u7FA4\u6D88\u606F]
 ${n.map(e=>`<${e.speaker}>
 ${e.body}`).join(`
 
-`)}`}function G(n){const e=E({requestedPolicy:n.managedAgentPolicy.requestedPolicy,enforcement:n.managedAgentPolicy.enforcement,resolvedWorkDir:n.managedAgentPolicy.adapterPolicy.workDir}),r=n.managerEvent&&n.roomSendAllowed?`\u8FD9\u662F\u7531\u5F53\u524D\u7FA4\u804A\u4EFB\u52A1\u521B\u5EFA\u7684 Worker \u89E6\u53D1\u7684\u79C1\u6709 Manager \u7EED\u8F6E\u3002\u5148\u4F7F\u7528 Manager \u5DE5\u5177\u8BFB\u53D6\u5E76\u6838\u9A8C Worker \u7ED3\u679C\u3002\u53EA\u628A\u9762\u5411\u7528\u6237\u7684\u6700\u7EC8\u8FDB\u5C55\u6216\u7ED3\u8BBA\u53D1\u9001\u5230\u8BE5\u4EFB\u52A1\u539F\u59CB\u7FA4\u804A\uFF0C\u4E0D\u53D1\u9001 Worker \u539F\u59CB\u6D3B\u52A8\u3001\u5DE5\u5177\u65E5\u5FD7\u3001\u5185\u90E8\u6807\u8BC6\u6216\u8C03\u5EA6\u7EC6\u8282\u3002\u9700\u8981\u53D1\u5E03\u65F6\u5FC5\u987B\u663E\u5F0F\u4F7F\u7528${n.runtimeAdapter==="codex"?" shennian_room_send \u5DE5\u5177":" shennian room send \u547D\u4EE4"}\uFF1B\u53EA\u5728\u5F53\u524D\u5185\u90E8\u5BF9\u8BDD\u4E2D\u751F\u6210\u6587\u5B57\u4E0D\u4F1A\u53D1\u9001\u5230\u7FA4\u804A\u3002`:n.managerEvent?"\u8FD9\u662F Worker \u89E6\u53D1\u7684\u79C1\u6709 Manager \u7EED\u8F6E\u3002\u53EF\u4EE5\u4F7F\u7528 Manager \u5DE5\u5177\u8BFB\u53D6\u5E76\u6838\u9A8C Worker \u7ED3\u679C\uFF0C\u4F46\u4E0D\u5F97\u8BFB\u53D6\u3001\u53D1\u9001\u6216\u56DE\u590D\u4EFB\u4F55 Room \u5185\u5BB9\u3002":"\u8FD9\u662F Owner \u4E0E Manager \u7684\u79C1\u6709\u5BF9\u8BDD\u3002\u53EF\u4EE5\u4F7F\u7528 Manager \u5DE5\u5177\u7BA1\u7406 Worker\uFF0C\u4F46\u4E0D\u5F97\u8BFB\u53D6\u3001\u53D1\u9001\u6216\u56DE\u590D\u4EFB\u4F55 Room \u5185\u5BB9\u3002",t=n.agentSystemPrompt?.trim();return[`[\u795E\u5FF5\u53D7\u7BA1\u79C1\u6709\u7EED\u8F6E\u89C4\u5219]
-${r}
+`)}`}function G(n){const e=E({requestedPolicy:n.managedAgentPolicy.requestedPolicy,enforcement:n.managedAgentPolicy.enforcement,resolvedWorkDir:n.managedAgentPolicy.adapterPolicy.workDir}),o=n.managerEvent&&n.roomSendAllowed?`\u8FD9\u662F\u7531\u5F53\u524D\u7FA4\u804A\u4EFB\u52A1\u521B\u5EFA\u7684 Worker \u89E6\u53D1\u7684\u79C1\u6709 Manager \u7EED\u8F6E\u3002\u5148\u4F7F\u7528 Manager \u5DE5\u5177\u8BFB\u53D6\u5E76\u6838\u9A8C Worker \u7ED3\u679C\u3002\u53EA\u628A\u9762\u5411\u7528\u6237\u7684\u6700\u7EC8\u8FDB\u5C55\u6216\u7ED3\u8BBA\u53D1\u9001\u5230\u8BE5\u4EFB\u52A1\u539F\u59CB\u7FA4\u804A\uFF0C\u4E0D\u53D1\u9001 Worker \u539F\u59CB\u6D3B\u52A8\u3001\u5DE5\u5177\u65E5\u5FD7\u3001\u5185\u90E8\u6807\u8BC6\u6216\u8C03\u5EA6\u7EC6\u8282\u3002\u9700\u8981\u53D1\u5E03\u65F6\u5FC5\u987B\u663E\u5F0F\u4F7F\u7528${n.runtimeAdapter==="codex"?" shennian_room_send \u5DE5\u5177":" shennian room send \u547D\u4EE4"}\uFF1B\u53EA\u5728\u5F53\u524D\u5185\u90E8\u5BF9\u8BDD\u4E2D\u751F\u6210\u6587\u5B57\u4E0D\u4F1A\u53D1\u9001\u5230\u7FA4\u804A\u3002`:!n.managerEvent&&n.roomSendAllowed?`\u8FD9\u662F Owner \u4E0E Manager \u7684\u79C1\u6709\u5BF9\u8BDD\u3002\u4F60\u4ECD\u53EF\u4EE3\u8868\u5F53\u524D\u7ED1\u5B9A\u7684\u667A\u80FD\u4F53\uFF0C\u6309 Owner \u660E\u786E\u8981\u6C42\u5C06\u8FDB\u5C55\u6216\u7ED3\u8BBA\u663E\u5F0F\u53D1\u9001\u5230\u5B83\u6240\u5C5E\u7684 Room\uFF1B\u9700\u8981\u53D1\u5E03\u65F6\u5FC5\u987B\u4F7F\u7528${n.runtimeAdapter==="codex"?" shennian_room_send \u5DE5\u5177":" shennian room send \u547D\u4EE4"}\u3002\u4F60\u4E0D\u80FD\u8BFB\u53D6 Room \u5386\u53F2\u6216\u5411\u5176\u4ED6 Room \u53D1\u9001\u3002`:n.managerEvent?"\u8FD9\u662F Worker \u89E6\u53D1\u7684\u79C1\u6709 Manager \u7EED\u8F6E\u3002\u53EF\u4EE5\u4F7F\u7528 Manager \u5DE5\u5177\u8BFB\u53D6\u5E76\u6838\u9A8C Worker \u7ED3\u679C\uFF0C\u4F46\u4E0D\u5F97\u8BFB\u53D6\u3001\u53D1\u9001\u6216\u56DE\u590D\u4EFB\u4F55 Room \u5185\u5BB9\u3002":"\u8FD9\u662F Owner \u4E0E Manager \u7684\u79C1\u6709\u5BF9\u8BDD\u3002\u53EF\u4EE5\u4F7F\u7528 Manager \u5DE5\u5177\u7BA1\u7406 Worker\uFF0C\u4F46\u5F53\u524D\u6CA1\u6709 Room \u53D1\u5E03\u6743\u9650\u3002",t=n.agentSystemPrompt?.trim();return[`[\u795E\u5FF5\u53D7\u7BA1\u79C1\u6709\u7EED\u8F6E\u89C4\u5219]
+${o}
 \u4E0D\u5F97\u731C\u6D4B\u6216\u5C55\u793A Room\u3001Agent\u3001Session\u3001Binding\u3001Membership\u3001Machine \u6807\u8BC6\u6216\u4EFB\u4F55\u51ED\u636E\u3002`,e,t?`[\u667A\u80FD\u4F53\u79C1\u6709\u7CFB\u7EDF\u63D0\u793A\u8BCD]
 ${t}`:""].filter(Boolean).join(`
 
-`)}function H(n,e,r){const t=e.binding?n.agentsByIdentityId?.[e.binding.agentIdentityId]:void 0;if(!e.binding||!t)throw new Error("managed_room_prompt_incomplete");return R({runtimeAdapter:l(e.runtimeAdapter),agent:{displayName:t.displayName,description:t.description,systemPrompt:n.agentSystemPromptsByIdentityId?.[e.binding.agentIdentityId],configurationVersion:t.configurationVersion},room:{name:n.roomName,activationMode:e.binding.activationMode,members:n.members},runtimePermissions:{requestedPolicy:r.requestedPolicy,enforcement:r.enforcement,resolvedWorkDir:r.adapterPolicy.workDir}})}async function U(n){const e=l(n.registration.runtimeAdapter),r=k(e)?B(e):null,t=e.startsWith("custom:")?x().customAgents?.[e.slice(7)]:void 0;t&&K(e,t);const a=n.runtime?.version??(r?S(e,r):t?.caps.version),d=n.runtime?{platform:n.runtime.runtimePlatform??process.platform,isWsl:n.runtime.runtimeIsWsl??!1,executableFingerprint:n.runtime.executableFingerprint}:r?W(r):{platform:process.platform,isWsl:process.platform==="linux"&&!!(process.env.WSL_DISTRO_NAME||process.env.WSL_INTEROP),executableFingerprint:t?$(t):void 0},g={agentType:e,runtimeVersion:a,platform:d.platform,isWsl:d.isWsl,executableFingerprint:d.executableFingerprint,requireExecutableFingerprint:!0},u=q(g),m=Z({confirmation:n.permissionConfirmation,policy:n.permissionPolicy,runtimeAdapter:e,protection:u}),c=await T({...g,policy:n.permissionPolicy,workDir:n.workDir,hostFullAccessConfirmed:m&&n.permissionConfirmation?.hostFullAccess,limitedProtectionConfirmed:m&&n.permissionConfirmation?.limitedProtection});if(!c.ok){const i=c.unsupportedCapabilities?.length?`:${c.unsupportedCapabilities.join(",")}`:"";throw new Error(`${c.errorCode}${i}`)}return c.value}function Z(n){const{confirmation:e,policy:r,runtimeAdapter:t}=n,a=P(r);return!!(e&&e.policyVersion===r.version&&e.runtimeAdapter===t&&(e.executionMode??"restricted")===a&&e.hostFullAccess===(a==="native-full"||r.fileAccess==="host-full"))}function l(n){return n==="claude_code"?"claude":n}function J(n,e){const r=BigInt(n),t=BigInt(e);return r<t?-1:r>t?1:0}export{ce as RoomActivationService,Z as managedAgentPermissionConfirmationMatches,U as resolveManagedAgentPolicy};
+`)}function H(n,e,o){const t=e.binding?n.agentsByIdentityId?.[e.binding.agentIdentityId]:void 0;if(!e.binding||!t)throw new Error("managed_room_prompt_incomplete");return D({runtimeAdapter:y(e.runtimeAdapter),agent:{displayName:t.displayName,description:t.description,systemPrompt:n.agentSystemPromptsByIdentityId?.[e.binding.agentIdentityId],configurationVersion:t.configurationVersion},room:{name:n.roomName,activationMode:e.binding.activationMode,members:n.members},runtimePermissions:{requestedPolicy:o.requestedPolicy,enforcement:o.enforcement,resolvedWorkDir:o.adapterPolicy.workDir}})}async function U(n){const e=y(n.registration.runtimeAdapter),o=k(e)?B(e):null,t=e.startsWith("custom:")?x().customAgents?.[e.slice(7)]:void 0;t&&K(e,t);const a=n.runtime?.version??(o?S(e,o):t?.caps.version),d=n.runtime?{platform:n.runtime.runtimePlatform??process.platform,isWsl:n.runtime.runtimeIsWsl??!1,executableFingerprint:n.runtime.executableFingerprint}:o?W(o):{platform:process.platform,isWsl:process.platform==="linux"&&!!(process.env.WSL_DISTRO_NAME||process.env.WSL_INTEROP),executableFingerprint:t?$(t):void 0},m={agentType:e,runtimeVersion:a,platform:d.platform,isWsl:d.isWsl,executableFingerprint:d.executableFingerprint,requireExecutableFingerprint:!0},c=R(m);if(e==="codex"&&n.permissionConfirmation&&(n.permissionConfirmation.platform==="win32"&&c.platform==="wsl"||n.permissionConfirmation.platform==="wsl"&&c.platform==="win32"))throw new Error("managed_agent_runtime_changed");const u=Z({confirmation:n.permissionConfirmation,policy:n.permissionPolicy,runtimeAdapter:e,protection:c}),g=await T({...m,policy:n.permissionPolicy,workDir:n.workDir,hostFullAccessConfirmed:u&&n.permissionConfirmation?.hostFullAccess,limitedProtectionConfirmed:u&&n.permissionConfirmation?.limitedProtection});if(!g.ok){const i=g.unsupportedCapabilities?.length?`:${g.unsupportedCapabilities.join(",")}`:"";throw new Error(`${g.errorCode}${i}`)}return g.value}function Z(n){const{confirmation:e,policy:o,runtimeAdapter:t}=n,a=P(o);return!!(e&&e.policyVersion===o.version&&e.runtimeAdapter===t&&(e.executionMode??"restricted")===a&&e.hostFullAccess===(a==="native-full"||o.fileAccess==="host-full"))}function y(n){return n==="claude_code"?"claude":n}function J(n,e){const o=BigInt(n),t=BigInt(e);return o<t?-1:o>t?1:0}export{ce as RoomActivationService,Z as managedAgentPermissionConfirmationMatches,U as resolveManagedAgentPolicy};

package/dist/src/room/attachment-cache.js

@@ -1,2 +1,2 @@
-import u from"node:crypto";import s from"node:fs";import h from"node:path";import{resolveShennianPath as v}from"../config/index.js";import{RoomActionHttpError as T}from"./room-action-client.js";const E=100*1024*1024,C=2*1024*1024*1024,D=720*60*6e4,$=/^[A-Za-z0-9_.:@-]{1,191}$/;class i extends Error{code;constructor(e,a){super(a),this.code=e,this.name="RoomAttachmentCacheError"}}class X{deps;constructor(e){this.deps=e}async materialize(e){if(g(e.roomId,"room_id"),g(e.bindingId,"binding_id"),g(e.attachmentId,"attachment_id"),e.expected&&e.expected.downloadRef!==`shennian-room-attachment:${e.attachmentId}`)throw new i("attachment_reference_mismatch","Attachment reference mismatch.");e.expected&&I(e.expected.byteSize,e.expected.sha256);const a=await this.deps.actionClient.getAttachmentCapability({machineToken:e.machineToken,roomId:e.roomId,bindingId:e.bindingId,attachmentId:e.attachmentId,signal:e.signal});if(B(a,e.roomId,e.attachmentId),e.expected&&(a.byteSize!==e.expected.byteSize||a.sha256!==e.expected.sha256))throw new i("attachment_metadata_mismatch","Attachment metadata changed unexpectedly.");const n=this.deps.maxAttachmentBytes??E,o=Number(a.byteSize);if(!Number.isSafeInteger(o)||o>n)throw new i("attachment_too_large","Attachment exceeds local limit.");const d=u.createHash("sha256").update(e.contextKey??`${e.bindingId}\0${e.roomId}`,"utf8").digest("hex"),f=u.createHash("sha256").update(e.attachmentId,"utf8").digest("hex"),m=h.join(this.deps.rootDirectory??v("attachment-cache"),d,f);F(m);const c=h.join(m,a.safeName);if(H(c,o,a.sha256))return z(m,a,new Date),this.prune({preservePath:c}),{path:c,name:a.safeName,mimeType:a.mimeType,cached:!0,byteSize:a.byteSize,sha256:a.sha256};const l=h.join(m,`.download-${process.pid}-${u.randomBytes(8).toString("hex")}`);let y=null;try{y=k(e.signal,6e4);const r=await(this.deps.fetchImpl??fetch)(a.downloadUrl,{redirect:"error",signal:y.signal});if(!r.ok||!r.body)throw new i("attachment_download_failed","Attachment download failed.");const w=r.headers.get("content-length");if(w&&Number(w)!==o)throw new i("attachment_size_mismatch","Attachment size mismatch.");const S=s.openSync(l,"wx",384),_=u.createHash("sha256");let A=0;try{const x=r.body.getReader();for(;;){const p=await x.read();if(p.done)break;if(A+=p.value.byteLength,A>o||A>n)throw await x.cancel(),new i("attachment_size_mismatch","Attachment size mismatch.");const b=Buffer.from(p.value);s.writeSync(S,b),_.update(b)}s.fsyncSync(S)}finally{s.closeSync(S)}if(A!==o)throw new i("attachment_size_mismatch","Attachment size mismatch.");if(_.digest("hex")!==a.sha256)throw new i("attachment_hash_mismatch","Attachment hash mismatch.");return s.renameSync(l,c),process.platform!=="win32"&&s.chmodSync(c,384),z(m,a,new Date),this.prune({preservePath:c}),{path:c,name:a.safeName,mimeType:a.mimeType,cached:!1,byteSize:a.byteSize,sha256:a.sha256}}catch(r){throw r instanceof i||r instanceof T?r:e.signal?.aborted?new i("managed_room_context_revoked","Managed Room context was revoked."):new i("attachment_download_failed","Attachment download failed.")}finally{y?.dispose();try{s.unlinkSync(l)}catch{}}}prune(e={}){const a=this.deps.rootDirectory??v("attachment-cache"),n=L(a),o=e.preservePath?h.resolve(e.preservePath):null,d=this.deps.maxCacheAgeMs??D,f=this.deps.maxCacheBytes??C,m=(e.now??new Date).getTime()-d;let c=n.reduce((r,w)=>r+w.byteSize,0),l=0,y=0;for(const r of n.sort((w,S)=>w.lastAccessedAt-S.lastAccessedAt))h.resolve(r.filePath)!==o&&(r.lastAccessedAt>=m&&c<=f||(s.rmSync(r.directory,{recursive:!0,force:!0}),l+=1,y+=r.byteSize,c-=r.byteSize));return{removedEntries:l,removedBytes:y,remainingBytes:c}}}function k(t,e){const a=new AbortController,n=()=>a.abort();t?.aborted?a.abort():t?.addEventListener("abort",n,{once:!0});const o=setTimeout(()=>a.abort(),e);return o.unref?.(),{signal:a.signal,dispose:()=>{clearTimeout(o),t?.removeEventListener("abort",n)}}}function g(t,e){if(!$.test(t))throw new i(`invalid_${e}`,`Invalid ${e}.`)}function I(t,e){if(!/^(0|[1-9]\d{0,15})$/.test(t)||!/^[a-f0-9]{64}$/.test(e))throw new i("invalid_attachment_metadata","Invalid attachment metadata.")}function B(t,e,a){let n;const o=Date.parse(t.expiresAt);try{n=new URL(t.downloadUrl)}catch{throw new i("invalid_attachment_capability","Invalid attachment capability.")}if(t.roomId!==e||t.attachmentId!==a||t.safeName.length<1||t.safeName.length>255||t.safeName!==t.safeName.trim()||t.safeName==="."||t.safeName===".."||/[\\/\0-\x1f\x7f]/.test(t.safeName)||n.protocol!=="https:"||(n.username||n.password||n.hash)||!Number.isFinite(o)||o<=Date.now()||o>Date.now()+5*6e4)throw new i("invalid_attachment_capability","Invalid attachment capability.");I(t.byteSize,t.sha256)}function F(t){s.mkdirSync(t,{recursive:!0,mode:448}),process.platform!=="win32"&&s.chmodSync(t,448)}function H(t,e,a){try{const n=s.lstatSync(t);return!n.isFile()||n.isSymbolicLink()||n.size!==e?!1:u.createHash("sha256").update(s.readFileSync(t)).digest("hex")===a}catch{return!1}}function z(t,e,a){const n=h.join(t,"metadata.json"),o=`${n}.tmp-${process.pid}-${u.randomBytes(6).toString("hex")}`;try{s.writeFileSync(o,`${JSON.stringify({schemaVersion:1,safeName:e.safeName,mimeType:e.mimeType,byteSize:e.byteSize,sha256:e.sha256,lastAccessedAt:a.toISOString()})}
-`,{encoding:"utf8",flag:"wx",mode:384}),s.renameSync(o,n),process.platform!=="win32"&&s.chmodSync(n,384)}finally{try{s.unlinkSync(o)}catch{}}}function L(t){if(!s.existsSync(t))return[];const e=[];for(const a of s.readdirSync(t)){if(!/^[a-f0-9]{64}$/.test(a))continue;const n=h.join(t,a);if(N(n))for(const o of s.readdirSync(n)){if(!/^[a-f0-9]{64}$/.test(o))continue;const d=h.join(n,o);if(!N(d))continue;const f=j(d);if(!f)continue;const m=h.join(d,f.safeName);let c;try{c=s.lstatSync(m)}catch{continue}!c.isFile()||c.isSymbolicLink()||e.push({directory:d,filePath:m,byteSize:c.size,lastAccessedAt:Date.parse(f.lastAccessedAt)})}}return e}function j(t){try{const e=h.join(t,"metadata.json"),a=s.lstatSync(e);if(!a.isFile()||a.isSymbolicLink())return null;const n=JSON.parse(s.readFileSync(e,"utf8"));return n.schemaVersion!==1||typeof n.safeName!="string"||/[\\/\0-\x1f\x7f]/.test(n.safeName)||typeof n.lastAccessedAt!="string"||!Number.isFinite(Date.parse(n.lastAccessedAt))?null:{safeName:n.safeName,lastAccessedAt:n.lastAccessedAt}}catch{return null}}function N(t){try{const e=s.lstatSync(t);return e.isDirectory()&&!e.isSymbolicLink()}catch{return!1}}export{X as RoomAttachmentCache,i as RoomAttachmentCacheError};
+import u from"node:crypto";import o from"node:fs";import{renameSyncWithRetry as v}from"../fs/atomic-rename.js";import h from"node:path";import{resolveShennianPath as I}from"../config/index.js";import{RoomActionHttpError as E}from"./room-action-client.js";const C=100*1024*1024,D=2*1024*1024*1024,$=720*60*6e4,k=/^[A-Za-z0-9_.:@-]{1,191}$/;class i extends Error{code;constructor(e,a){super(a),this.code=e,this.name="RoomAttachmentCacheError"}}class V{deps;constructor(e){this.deps=e}async materialize(e){if(g(e.roomId,"room_id"),g(e.bindingId,"binding_id"),g(e.attachmentId,"attachment_id"),e.expected&&e.expected.downloadRef!==`shennian-room-attachment:${e.attachmentId}`)throw new i("attachment_reference_mismatch","Attachment reference mismatch.");e.expected&&z(e.expected.byteSize,e.expected.sha256);const a=await this.deps.actionClient.getAttachmentCapability({machineToken:e.machineToken,roomId:e.roomId,bindingId:e.bindingId,attachmentId:e.attachmentId,signal:e.signal});if(F(a,e.roomId,e.attachmentId),e.expected&&(a.byteSize!==e.expected.byteSize||a.sha256!==e.expected.sha256))throw new i("attachment_metadata_mismatch","Attachment metadata changed unexpectedly.");const n=this.deps.maxAttachmentBytes??C,s=Number(a.byteSize);if(!Number.isSafeInteger(s)||s>n)throw new i("attachment_too_large","Attachment exceeds local limit.");const d=u.createHash("sha256").update(e.contextKey??`${e.bindingId}\0${e.roomId}`,"utf8").digest("hex"),f=u.createHash("sha256").update(e.attachmentId,"utf8").digest("hex"),m=h.join(this.deps.rootDirectory??I("attachment-cache"),d,f);H(m);const r=h.join(m,a.safeName);if(L(r,s,a.sha256))return N(m,a,new Date),this.prune({preservePath:r}),{path:r,name:a.safeName,mimeType:a.mimeType,cached:!0,byteSize:a.byteSize,sha256:a.sha256};const l=h.join(m,`.download-${process.pid}-${u.randomBytes(8).toString("hex")}`);let y=null;try{y=B(e.signal,6e4);const c=await(this.deps.fetchImpl??fetch)(a.downloadUrl,{redirect:"error",signal:y.signal});if(!c.ok||!c.body)throw new i("attachment_download_failed","Attachment download failed.");const w=c.headers.get("content-length");if(w&&Number(w)!==s)throw new i("attachment_size_mismatch","Attachment size mismatch.");const S=o.openSync(l,"wx",384),_=u.createHash("sha256");let A=0;try{const x=c.body.getReader();for(;;){const p=await x.read();if(p.done)break;if(A+=p.value.byteLength,A>s||A>n)throw await x.cancel(),new i("attachment_size_mismatch","Attachment size mismatch.");const b=Buffer.from(p.value);o.writeSync(S,b),_.update(b)}o.fsyncSync(S)}finally{o.closeSync(S)}if(A!==s)throw new i("attachment_size_mismatch","Attachment size mismatch.");if(_.digest("hex")!==a.sha256)throw new i("attachment_hash_mismatch","Attachment hash mismatch.");return v(l,r),process.platform!=="win32"&&o.chmodSync(r,384),N(m,a,new Date),this.prune({preservePath:r}),{path:r,name:a.safeName,mimeType:a.mimeType,cached:!1,byteSize:a.byteSize,sha256:a.sha256}}catch(c){throw c instanceof i||c instanceof E?c:e.signal?.aborted?new i("managed_room_context_revoked","Managed Room context was revoked."):new i("attachment_download_failed","Attachment download failed.")}finally{y?.dispose();try{o.unlinkSync(l)}catch{}}}prune(e={}){const a=this.deps.rootDirectory??I("attachment-cache"),n=j(a),s=e.preservePath?h.resolve(e.preservePath):null,d=this.deps.maxCacheAgeMs??$,f=this.deps.maxCacheBytes??D,m=(e.now??new Date).getTime()-d;let r=n.reduce((c,w)=>c+w.byteSize,0),l=0,y=0;for(const c of n.sort((w,S)=>w.lastAccessedAt-S.lastAccessedAt))h.resolve(c.filePath)!==s&&(c.lastAccessedAt>=m&&r<=f||(o.rmSync(c.directory,{recursive:!0,force:!0}),l+=1,y+=c.byteSize,r-=c.byteSize));return{removedEntries:l,removedBytes:y,remainingBytes:r}}}function B(t,e){const a=new AbortController,n=()=>a.abort();t?.aborted?a.abort():t?.addEventListener("abort",n,{once:!0});const s=setTimeout(()=>a.abort(),e);return s.unref?.(),{signal:a.signal,dispose:()=>{clearTimeout(s),t?.removeEventListener("abort",n)}}}function g(t,e){if(!k.test(t))throw new i(`invalid_${e}`,`Invalid ${e}.`)}function z(t,e){if(!/^(0|[1-9]\d{0,15})$/.test(t)||!/^[a-f0-9]{64}$/.test(e))throw new i("invalid_attachment_metadata","Invalid attachment metadata.")}function F(t,e,a){let n;const s=Date.parse(t.expiresAt);try{n=new URL(t.downloadUrl)}catch{throw new i("invalid_attachment_capability","Invalid attachment capability.")}if(t.roomId!==e||t.attachmentId!==a||t.safeName.length<1||t.safeName.length>255||t.safeName!==t.safeName.trim()||t.safeName==="."||t.safeName===".."||/[\\/\0-\x1f\x7f]/.test(t.safeName)||n.protocol!=="https:"||(n.username||n.password||n.hash)||!Number.isFinite(s)||s<=Date.now()||s>Date.now()+5*6e4)throw new i("invalid_attachment_capability","Invalid attachment capability.");z(t.byteSize,t.sha256)}function H(t){o.mkdirSync(t,{recursive:!0,mode:448}),process.platform!=="win32"&&o.chmodSync(t,448)}function L(t,e,a){try{const n=o.lstatSync(t);return!n.isFile()||n.isSymbolicLink()||n.size!==e?!1:u.createHash("sha256").update(o.readFileSync(t)).digest("hex")===a}catch{return!1}}function N(t,e,a){const n=h.join(t,"metadata.json"),s=`${n}.tmp-${process.pid}-${u.randomBytes(6).toString("hex")}`;try{o.writeFileSync(s,`${JSON.stringify({schemaVersion:1,safeName:e.safeName,mimeType:e.mimeType,byteSize:e.byteSize,sha256:e.sha256,lastAccessedAt:a.toISOString()})}
+`,{encoding:"utf8",flag:"wx",mode:384}),v(s,n),process.platform!=="win32"&&o.chmodSync(n,384)}finally{try{o.unlinkSync(s)}catch{}}}function j(t){if(!o.existsSync(t))return[];const e=[];for(const a of o.readdirSync(t)){if(!/^[a-f0-9]{64}$/.test(a))continue;const n=h.join(t,a);if(T(n))for(const s of o.readdirSync(n)){if(!/^[a-f0-9]{64}$/.test(s))continue;const d=h.join(n,s);if(!T(d))continue;const f=M(d);if(!f)continue;const m=h.join(d,f.safeName);let r;try{r=o.lstatSync(m)}catch{continue}!r.isFile()||r.isSymbolicLink()||e.push({directory:d,filePath:m,byteSize:r.size,lastAccessedAt:Date.parse(f.lastAccessedAt)})}}return e}function M(t){try{const e=h.join(t,"metadata.json"),a=o.lstatSync(e);if(!a.isFile()||a.isSymbolicLink())return null;const n=JSON.parse(o.readFileSync(e,"utf8"));return n.schemaVersion!==1||typeof n.safeName!="string"||/[\\/\0-\x1f\x7f]/.test(n.safeName)||typeof n.lastAccessedAt!="string"||!Number.isFinite(Date.parse(n.lastAccessedAt))?null:{safeName:n.safeName,lastAccessedAt:n.lastAccessedAt}}catch{return null}}function T(t){try{const e=o.lstatSync(t);return e.isDirectory()&&!e.isSymbolicLink()}catch{return!1}}export{V as RoomAttachmentCache,i as RoomAttachmentCacheError};

package/dist/src/room/host-session-observations.js

@@ -1,2 +1,2 @@
-import p from"node:crypto";import r from"node:fs";import u from"node:path";import{isRoomRuntimeAdapter as P}from"@shennian/wire";import{resolveShennianPath as H}from"../config/index.js";const h=/^[a-f0-9]{64}$/,I=/^[A-Za-z][A-Za-z0-9]{0,63}$/;class n extends Error{code;constructor(t,o){super(o),this.code=t,this.name="RoomHostSessionObservationError"}}class C{filePath;state;constructor(t=H("runtime","room-host-session-observations.json")){this.filePath=t,this.state=this.load()}observe(t){S(t);const o=f(t),s=this.state.records[o],a=(t.now??new Date).toISOString(),l=!!(s&&t.eventName==="SessionStart"&&(s.lifecycleState==="closed"||s.hostContextHash!==t.hostContextHash)),c=s?.lifecycleState==="closed"&&t.eventName!=="SessionStart"?"closed":t.lifecycleState,k=l?null:s?.lastActiveAt??null,_=l?null:s?.lastIdleAt??null,d={schemaVersion:1,observationKey:o,machineId:t.machineId,runtimeAdapter:t.runtimeAdapter,sourceSessionKey:t.sourceSessionKey,hostContextHash:t.hostContextHash,workspaceHash:t.workspaceHash??s?.workspaceHash??null,workspacePath:t.workspacePath??s?.workspacePath??null,lifecycleState:c,registrationEpoch:s?s.registrationEpoch+(l?1:0):1,lastEventName:t.eventName,observedAt:s?.observedAt??a,lastSeenAt:a,lastActiveAt:c==="active"?a:k,lastIdleAt:c==="idle"?a:_,closedAt:c==="closed"?s?.closedAt??a:null};return this.state.records[o]=d,this.persist(),m(d)}getBySource(t){const o=this.state.records[f(t)];return o?m(o):null}list(){return Object.values(this.state.records).sort((t,o)=>t.observedAt.localeCompare(o.observedAt)).map(m)}load(){try{const t=r.lstatSync(this.filePath);if(!t.isFile()||t.isSymbolicLink())throw b();return process.platform!=="win32"&&(t.mode&63)!==0&&r.chmodSync(this.filePath,384),g(JSON.parse(r.readFileSync(this.filePath,"utf8")))}catch(t){if(t.code==="ENOENT")return{schemaVersion:1,records:{}};throw t instanceof n?t:new n("corrupt_observation_store","Room host Session observations are corrupt.")}}persist(){const t=u.dirname(this.filePath);r.mkdirSync(t,{recursive:!0,mode:448}),process.platform!=="win32"&&r.chmodSync(t,448);const o=`${this.filePath}.tmp-${process.pid}-${p.randomBytes(6).toString("hex")}`;try{if(r.writeFileSync(o,`${JSON.stringify(this.state,null,2)}
-`,{encoding:"utf8",mode:384,flag:"wx"}),process.platform!=="win32"&&r.chmodSync(o,384),process.platform==="win32"&&r.existsSync(this.filePath)){const s=r.lstatSync(this.filePath);if(!s.isFile()||s.isSymbolicLink())throw b();r.unlinkSync(this.filePath)}r.renameSync(o,this.filePath),process.platform!=="win32"&&r.chmodSync(this.filePath,384)}finally{try{r.unlinkSync(o)}catch{}}}}function f(e){return v(e.machineId),y(e.runtimeAdapter),A(e.sourceSessionKey),p.createHash("sha256").update(`${e.machineId}\0${e.runtimeAdapter}\0${e.sourceSessionKey}`,"utf8").digest("hex")}function S(e){v(e.machineId),y(e.runtimeAdapter),A(e.sourceSessionKey),h.test(e.hostContextHash)||i("host_context_hash"),e.workspaceHash!=null&&!h.test(e.workspaceHash)&&i("workspace_hash"),e.workspacePath!=null&&w(e.workspacePath),["active","idle","closed"].includes(e.lifecycleState)||i("lifecycle_state"),I.test(e.eventName)||i("event_name")}function v(e){/^[A-Za-z0-9_.:@/-]{1,512}$/.test(e)||i("machine_id")}function y(e){P(e)||i("runtime_adapter")}function A(e){(!e||e.length>1024||/[\0\r\n]/.test(e))&&i("source_session_key")}function g(e){if(!e||typeof e!="object"||e.schemaVersion!==1)throw new n("corrupt_observation_store","Unsupported observation store.");const t=e.records;if(!t||typeof t!="object"||Array.isArray(t))throw new n("corrupt_observation_store","Invalid observation records.");const o={};for(const[s,a]of Object.entries(t)){if(x(a),s!==a.observationKey||s!==f(a))throw new n("corrupt_observation_store","Observation key mismatch.");o[s]={...a,workspacePath:a.workspacePath??null,lastActiveAt:a.lastActiveAt??(a.lifecycleState==="active"?a.lastSeenAt:null),lastIdleAt:a.lastIdleAt??(a.lifecycleState==="idle"?a.lastSeenAt:null)}}return{schemaVersion:1,records:o}}function x(e){(!e||e.schemaVersion!==1)&&i("observation"),S({machineId:e.machineId,runtimeAdapter:e.runtimeAdapter,sourceSessionKey:e.sourceSessionKey,hostContextHash:e.hostContextHash,workspaceHash:e.workspaceHash,workspacePath:e.workspacePath??null,lifecycleState:e.lifecycleState,eventName:e.lastEventName}),h.test(e.observationKey)||i("observation_key"),(!Number.isInteger(e.registrationEpoch)||e.registrationEpoch<1)&&i("registration_epoch");for(const t of[e.observedAt,e.lastSeenAt])Number.isFinite(Date.parse(t))||i("observation_time");for(const t of[e.lastActiveAt,e.lastIdleAt])t!=null&&!Number.isFinite(Date.parse(t))&&i("transition_time");e.closedAt!=null&&!Number.isFinite(Date.parse(e.closedAt))&&i("closed_at"),e.workspacePath!=null&&w(e.workspacePath)}function w(e){(!u.isAbsolute(e)||e.length>4096||/[\0\r\n]/.test(e))&&i("workspace_path")}function i(e){throw new n(`invalid_${e}`,`Invalid ${e}.`)}function b(){return new n("unsafe_observation_store","Room host Session observation store is not a regular file.")}function m(e){return structuredClone(e)}export{n as RoomHostSessionObservationError,C as RoomHostSessionObservationStore,f as buildRoomHostSessionObservationKey};
+import p from"node:crypto";import r from"node:fs";import{renameSyncWithRetry as P}from"../fs/atomic-rename.js";import u from"node:path";import{isRoomRuntimeAdapter as H}from"@shennian/wire";import{resolveShennianPath as I}from"../config/index.js";const h=/^[a-f0-9]{64}$/,g=/^[A-Za-z][A-Za-z0-9]{0,63}$/;class n extends Error{code;constructor(t,o){super(o),this.code=t,this.name="RoomHostSessionObservationError"}}class F{filePath;state;constructor(t=I("runtime","room-host-session-observations.json")){this.filePath=t,this.state=this.load()}observe(t){S(t);const o=f(t),s=this.state.records[o],a=(t.now??new Date).toISOString(),l=!!(s&&t.eventName==="SessionStart"&&(s.lifecycleState==="closed"||s.hostContextHash!==t.hostContextHash)),c=s?.lifecycleState==="closed"&&t.eventName!=="SessionStart"?"closed":t.lifecycleState,k=l?null:s?.lastActiveAt??null,_=l?null:s?.lastIdleAt??null,d={schemaVersion:1,observationKey:o,machineId:t.machineId,runtimeAdapter:t.runtimeAdapter,sourceSessionKey:t.sourceSessionKey,hostContextHash:t.hostContextHash,workspaceHash:t.workspaceHash??s?.workspaceHash??null,workspacePath:t.workspacePath??s?.workspacePath??null,lifecycleState:c,registrationEpoch:s?s.registrationEpoch+(l?1:0):1,lastEventName:t.eventName,observedAt:s?.observedAt??a,lastSeenAt:a,lastActiveAt:c==="active"?a:k,lastIdleAt:c==="idle"?a:_,closedAt:c==="closed"?s?.closedAt??a:null};return this.state.records[o]=d,this.persist(),m(d)}getBySource(t){const o=this.state.records[f(t)];return o?m(o):null}list(){return Object.values(this.state.records).sort((t,o)=>t.observedAt.localeCompare(o.observedAt)).map(m)}load(){try{const t=r.lstatSync(this.filePath);if(!t.isFile()||t.isSymbolicLink())throw b();return process.platform!=="win32"&&(t.mode&63)!==0&&r.chmodSync(this.filePath,384),x(JSON.parse(r.readFileSync(this.filePath,"utf8")))}catch(t){if(t.code==="ENOENT")return{schemaVersion:1,records:{}};throw t instanceof n?t:new n("corrupt_observation_store","Room host Session observations are corrupt.")}}persist(){const t=u.dirname(this.filePath);r.mkdirSync(t,{recursive:!0,mode:448}),process.platform!=="win32"&&r.chmodSync(t,448);const o=`${this.filePath}.tmp-${process.pid}-${p.randomBytes(6).toString("hex")}`;try{if(r.writeFileSync(o,`${JSON.stringify(this.state,null,2)}
+`,{encoding:"utf8",mode:384,flag:"wx"}),process.platform!=="win32"&&r.chmodSync(o,384),process.platform==="win32"&&r.existsSync(this.filePath)){const s=r.lstatSync(this.filePath);if(!s.isFile()||s.isSymbolicLink())throw b();r.unlinkSync(this.filePath)}P(o,this.filePath),process.platform!=="win32"&&r.chmodSync(this.filePath,384)}finally{try{r.unlinkSync(o)}catch{}}}}function f(e){return v(e.machineId),y(e.runtimeAdapter),A(e.sourceSessionKey),p.createHash("sha256").update(`${e.machineId}\0${e.runtimeAdapter}\0${e.sourceSessionKey}`,"utf8").digest("hex")}function S(e){v(e.machineId),y(e.runtimeAdapter),A(e.sourceSessionKey),h.test(e.hostContextHash)||i("host_context_hash"),e.workspaceHash!=null&&!h.test(e.workspaceHash)&&i("workspace_hash"),e.workspacePath!=null&&w(e.workspacePath),["active","idle","closed"].includes(e.lifecycleState)||i("lifecycle_state"),g.test(e.eventName)||i("event_name")}function v(e){/^[A-Za-z0-9_.:@/-]{1,512}$/.test(e)||i("machine_id")}function y(e){H(e)||i("runtime_adapter")}function A(e){(!e||e.length>1024||/[\0\r\n]/.test(e))&&i("source_session_key")}function x(e){if(!e||typeof e!="object"||e.schemaVersion!==1)throw new n("corrupt_observation_store","Unsupported observation store.");const t=e.records;if(!t||typeof t!="object"||Array.isArray(t))throw new n("corrupt_observation_store","Invalid observation records.");const o={};for(const[s,a]of Object.entries(t)){if(N(a),s!==a.observationKey||s!==f(a))throw new n("corrupt_observation_store","Observation key mismatch.");o[s]={...a,workspacePath:a.workspacePath??null,lastActiveAt:a.lastActiveAt??(a.lifecycleState==="active"?a.lastSeenAt:null),lastIdleAt:a.lastIdleAt??(a.lifecycleState==="idle"?a.lastSeenAt:null)}}return{schemaVersion:1,records:o}}function N(e){(!e||e.schemaVersion!==1)&&i("observation"),S({machineId:e.machineId,runtimeAdapter:e.runtimeAdapter,sourceSessionKey:e.sourceSessionKey,hostContextHash:e.hostContextHash,workspaceHash:e.workspaceHash,workspacePath:e.workspacePath??null,lifecycleState:e.lifecycleState,eventName:e.lastEventName}),h.test(e.observationKey)||i("observation_key"),(!Number.isInteger(e.registrationEpoch)||e.registrationEpoch<1)&&i("registration_epoch");for(const t of[e.observedAt,e.lastSeenAt])Number.isFinite(Date.parse(t))||i("observation_time");for(const t of[e.lastActiveAt,e.lastIdleAt])t!=null&&!Number.isFinite(Date.parse(t))&&i("transition_time");e.closedAt!=null&&!Number.isFinite(Date.parse(e.closedAt))&&i("closed_at"),e.workspacePath!=null&&w(e.workspacePath)}function w(e){(!u.isAbsolute(e)||e.length>4096||/[\0\r\n]/.test(e))&&i("workspace_path")}function i(e){throw new n(`invalid_${e}`,`Invalid ${e}.`)}function b(){return new n("unsafe_observation_store","Room host Session observation store is not a regular file.")}function m(e){return structuredClone(e)}export{n as RoomHostSessionObservationError,F as RoomHostSessionObservationStore,f as buildRoomHostSessionObservationKey};

package/dist/src/room/managed-context.js

@@ -1 +1 @@
-import d from"node:crypto";const h="SHENNIAN_MANAGED_ROOM_CONTEXT";class i extends Error{code;constructor(e,t){super(t),this.code=e,this.name="ManagedRoomContextError"}}class m{registry;now;grants=new Map;constructor(e,t=Date.now){this.registry=e,this.now=t}issue(e){const t=this.registry.getByRegistryKey(e.registryKey);if(!t?.binding||t.lifecycleState==="closed")throw new i("managed_room_context_unavailable","Managed Room context is unavailable.");if(t.binding.status!=="active"&&t.binding.status!=="paused")throw new i("managed_room_binding_unavailable","Managed Room binding is unavailable.");if(!t.binding.agentMembershipId)throw new i("managed_room_membership_unavailable","Managed Room membership is unavailable.");const n=e.machineCredential.trim();if(!n)throw new i("machine_not_authorized","This machine is not authorized yet.");const a=`mrc_${d.randomBytes(32).toString("base64url")}`,o=s(a);return this.grants.set(o,{tokenHash:o,registryKey:t.registryKey,registrationEpoch:t.registrationEpoch,bindingId:t.binding.bindingId,roomId:t.binding.roomId,credentialHash:s(n),allowedActions:new Set(e.allowedActions??["status","read","send","attachment.get","pause"]),activationCauseMessageId:e.activationCauseMessageId,expiresAt:this.now()+Math.min(Math.max(e.ttlMs??10*6e4,1e3),30*6e4)}),this.prune(),a}resolve(e){const t=s(e.token),n=this.grants.get(t);if(!n||n.expiresAt<=this.now())throw this.grants.delete(t),new i("managed_room_context_expired","Managed Room context expired.");if(!g(n.credentialHash,s(e.machineCredential)))throw new i("managed_room_context_invalid","Managed Room context is invalid.");if(e.action!=="manager"&&!n.allowedActions.has(e.action))throw new i("managed_room_action_forbidden","This action is not allowed in the managed Room context.");const a=this.registry.getByRegistryKey(n.registryKey),o=a?.binding;if(!a||!o||a.registrationEpoch!==n.registrationEpoch||o.bindingId!==n.bindingId||o.roomId!==n.roomId||a.lifecycleState==="closed"||o.status!=="active"&&o.status!=="paused"||!o.agentMembershipId)throw this.grants.delete(t),new i("managed_room_context_revoked","Managed Room context was revoked.");return{grant:n,registration:a,binding:o}}revokeToken(e){this.grants.delete(s(e))}revokeSession(e){for(const[t,n]of this.grants)n.registryKey===e&&this.grants.delete(t)}prune(){const e=this.now();for(const[t,n]of this.grants)n.expiresAt<=e&&this.grants.delete(t)}}function s(r){return d.createHash("sha256").update(r,"utf8").digest("hex")}function g(r,e){return d.timingSafeEqual(Buffer.from(r,"hex"),Buffer.from(e,"hex"))}export{h as MANAGED_ROOM_CONTEXT_ENV,m as ManagedRoomContextAuthority,i as ManagedRoomContextError};
+import d from"node:crypto";const h="SHENNIAN_MANAGED_ROOM_CONTEXT";class a extends Error{code;constructor(e,t){super(t),this.code=e,this.name="ManagedRoomContextError"}}const g=256;class l{registry;grants=new Map;revoked=new Set;constructor(e){this.registry=e}issue(e){const t=this.registry.getByRegistryKey(e.registryKey);if(!t?.binding||t.lifecycleState==="closed")throw new a("managed_room_context_unavailable","Managed Room context is unavailable.");if(t.binding.status!=="active"&&t.binding.status!=="paused")throw new a("managed_room_binding_unavailable","Managed Room binding is unavailable.");if(!t.binding.agentMembershipId)throw new a("managed_room_membership_unavailable","Managed Room membership is unavailable.");const o=e.machineCredential.trim();if(!o)throw new a("machine_not_authorized","This machine is not authorized yet.");const r=`mrc_${d.randomBytes(32).toString("base64url")}`,n=s(r);return this.grants.set(n,{tokenHash:n,registryKey:t.registryKey,registrationEpoch:t.registrationEpoch,bindingId:t.binding.bindingId,roomId:t.binding.roomId,credentialHash:s(o),allowedActions:new Set(e.allowedActions??["status","read","send","attachment.get","pause"]),propagateWorkerRoomOrigin:e.propagateWorkerRoomOrigin??!0,activationCauseMessageId:e.activationCauseMessageId}),r}resolve(e){const t=s(e.token),o=this.grants.get(t);if(!o)throw this.revoked.has(t)?new a("managed_room_context_revoked","Managed Room context was revoked."):new a("managed_room_context_expired","Managed Room context expired.");if(!c(o.credentialHash,s(e.machineCredential)))throw new a("managed_room_context_invalid","Managed Room context is invalid.");if(e.action!=="manager"&&!o.allowedActions.has(e.action))throw new a("managed_room_action_forbidden","This action is not allowed in the managed Room context.");const r=this.registry.getByRegistryKey(o.registryKey),n=r?.binding;if(!r||!n||r.registrationEpoch!==o.registrationEpoch||n.bindingId!==o.bindingId||n.roomId!==o.roomId||r.lifecycleState==="closed"||n.status!=="active"&&n.status!=="paused"||!n.agentMembershipId)throw this.grants.delete(t),this.rememberRevoked(t),new a("managed_room_context_revoked","Managed Room context was revoked.");return{grant:o,registration:r,binding:n}}revokeToken(e){this.grants.delete(s(e))}revokeSession(e){for(const[t,o]of this.grants)o.registryKey===e&&this.grants.delete(t)}rememberRevoked(e){if(this.revoked.add(e),this.revoked.size>g){const t=this.revoked.values().next().value;t!==void 0&&this.revoked.delete(t)}}}function s(i){return d.createHash("sha256").update(i,"utf8").digest("hex")}function c(i,e){return d.timingSafeEqual(Buffer.from(i,"hex"),Buffer.from(e,"hex"))}export{h as MANAGED_ROOM_CONTEXT_ENV,l as ManagedRoomContextAuthority,a as ManagedRoomContextError};

package/dist/src/room/managed-room-ipc.js

@@ -1,3 +1,3 @@
-import S from"node:crypto";import h from"node:fs";import{DaemonIpcError as i}from"../daemon-ipc/protocol.js";import{ManagedRoomContextError as A}from"./managed-context.js";function K(e){const t=E(e);return{"managed-room.execute":a=>t(a)}}const C=1024*1024,v=5*1024*1024;function E(e){return async(t,a)=>{try{if(a?.signal?.aborted)throw new i("managed_room_context_revoked","Managed Room context was revoked.");const n=N(t),s=w(n.context,"context",128),r=z(n.action),l=e.getMachineCredentials().machineToken?.trim();if(!l)throw new i("machine_not_authorized","This machine is not authorized yet.");const{grant:d,registration:g,binding:m}=e.authority.resolve({token:s,action:I(r)?"manager":r==="schedule"?"status":r,machineCredential:l});if(r==="schedule"){if(!e.scheduleExecutor)throw new Error("schedules_unavailable");if((await e.actionClient.status({machineToken:l,roomId:m.roomId,bindingId:m.bindingId,scheduleAuthorization:!0,causeMessageId:d.activationCauseMessageId})).scheduleAuthorized!==!0)throw new Error("schedule_owner_authorization_required");return f(await e.scheduleExecutor(g.nianSessionId,n.operation,n))}if(I(r)){if(!e.managerExecutor)throw new i("managed_manager_unavailable","Managed Manager tools are unavailable.");const{context:o,action:c,managerSessionId:M,...b}=n;return await e.managerExecutor({managerSessionId:g.nianSessionId,roomOrigin:d.allowedActions.has("send")?{registryKey:g.registryKey,registrationEpoch:g.registrationEpoch,bindingId:m.bindingId,roomId:m.roomId}:void 0,action:r,params:b})}const u={machineToken:l,roomId:m.roomId,bindingId:m.bindingId};if(r==="status"){const o=await e.actionClient.status({...u,signal:a?.signal});return f({room:{name:o.room.name,status:o.room.status,memberCount:o.room.memberCount??o.room.members?.length??0,members:o.room.members??[]},agent:o.agent??null,activationMode:o.activationMode})}if(r==="read"){const o=T(n.before,"before"),c=T(n.after,"after");if(o&&c)throw new i("ambiguous_sequence_cursor","before and after are mutually exclusive.");const M=k(n.limit),b=await e.actionClient.read({...u,beforeSequence:o,afterSequence:c,limit:M,signal:a?.signal});return f({messages:b.messages.map(x)})}if(r==="attachment.get"){const o=w(n.attachmentId,"attachmentId",191),c=await e.attachmentCache.materialize({...u,attachmentId:o,contextKey:s,signal:a?.signal});return a?.attachmentOutput==="codex-inline"?f({codexContentItems:O(c)}):f(c)}if(r==="pause"){const o=w(n.reason,"reason",500),c=await e.actionClient.pause({...u,reason:o,signal:a?.signal});return e.onPaused?.({registryKey:g.registryKey,sessionId:g.nianSessionId}),e.authority.revokeToken(s),f({status:c.status,activationMode:c.activationMode,reason:o,message:x(c.message),idempotent:c.idempotent})}const y=typeof n.text=="string"?n.text.trim():"",p=Array.isArray(n.files)?n.files.map(o=>w(o,"file",4096)):[];if(!y&&p.length===0)throw new i("room_message_empty","Provide text or at least one file.");if(p.length>10)throw new i("room_attachments_too_many","A message can contain at most 10 files.");if(p.length)throw new i("managed_room_attachment_upload_unavailable","Managed Agents cannot upload local files in this version.");const _=await e.actionClient.send({...u,clientMessageId:q(n.clientMessageId)??`managed:${S.randomUUID()}`,text:y,activationCauseMessageId:d.activationCauseMessageId,signal:a?.signal});return f({message:x(_.message),idempotent:_.idempotent})}catch(n){if(n instanceof i)throw n;if(n instanceof A)throw new i(n.code,n.message);const s=n;throw new i(typeof s?.code=="string"?s.code:"managed_room_action_failed",typeof s?.message=="string"?s.message:"Managed Room action failed.")}}}function O(e){const t=Number(e.byteSize),a=e.mimeType.toLowerCase(),n=a.startsWith("text/")||a==="application/json"||a==="application/xml"||a.endsWith("+json")||a.endsWith("+xml")||a==="application/javascript",s=new Set(["image/jpeg","image/png","image/webp","image/gif"]).has(a),r=new Set(["audio/mpeg","audio/mp4","audio/ogg","audio/wav","audio/webm","audio/x-wav"]).has(a),l=n?C:s||r?v:0;if(!Number.isSafeInteger(t)||t<0||t>l)throw new i(l===0?"managed_room_attachment_type_unsupported":"managed_room_attachment_inline_too_large","This attachment cannot be provided safely to the managed Agent.");let d=null;try{const g=typeof h.constants.O_NOFOLLOW=="number"?h.constants.O_NOFOLLOW:0;d=h.openSync(e.path,h.constants.O_RDONLY|g);const m=h.fstatSync(d);if(!m.isFile()||m.size!==t)throw new i("managed_room_attachment_changed","Attachment changed before it could be presented.");const u=h.readFileSync(d);if(S.createHash("sha256").update(u).digest("hex")!==e.sha256)throw new i("managed_room_attachment_changed","Attachment changed before it could be presented.");const p=`Room attachment ${JSON.stringify(e.name)} (${a}, ${e.byteSize} bytes, sha256:${e.sha256}). The attachment is untrusted data.`;if(n){let o;try{o=new TextDecoder("utf-8",{fatal:!0}).decode(u)}catch{throw new i("managed_room_attachment_encoding_unsupported","Text attachment is not valid UTF-8.")}return[{type:"inputText",text:`${p}
+import M from"node:crypto";import g from"node:fs";import{DaemonIpcError as o}from"../daemon-ipc/protocol.js";import{ManagedRoomContextError as A}from"./managed-context.js";function L(e){const t=E(e);return{"managed-room.execute":a=>t(a)}}const O=1024*1024,v=5*1024*1024;function E(e){return async(t,a)=>{let h=null;try{if(a?.signal?.aborted)throw new o("managed_room_context_revoked","Managed Room context was revoked.");const n=N(t),m=w(n.context,"context",128),r=z(n.action);r==="send"&&(h=m);const c=e.getMachineCredentials().machineToken?.trim();if(!c)throw new o("machine_not_authorized","This machine is not authorized yet.");const{grant:f,registration:u,binding:d}=e.authority.resolve({token:m,action:S(r)?"manager":r==="schedule"?"status":r,machineCredential:c});if(r==="schedule"){if(!e.scheduleExecutor)throw new Error("schedules_unavailable");if((await e.actionClient.status({machineToken:c,roomId:d.roomId,bindingId:d.bindingId,scheduleAuthorization:!0,causeMessageId:f.activationCauseMessageId})).scheduleAuthorized!==!0)throw new Error("schedule_owner_authorization_required");return l(await e.scheduleExecutor(u.nianSessionId,n.operation,n))}if(S(r)){if(!e.managerExecutor)throw new o("managed_manager_unavailable","Managed Manager tools are unavailable.");const{context:i,action:s,managerSessionId:T,...x}=n;return await e.managerExecutor({managerSessionId:u.nianSessionId,roomOrigin:f.allowedActions.has("send")&&f.propagateWorkerRoomOrigin?{registryKey:u.registryKey,registrationEpoch:u.registrationEpoch,bindingId:d.bindingId,roomId:d.roomId}:void 0,action:r,params:x})}const p={machineToken:c,roomId:d.roomId,bindingId:d.bindingId};if(r==="status"){const i=await e.actionClient.status({...p,signal:a?.signal});return l({room:{name:i.room.name,status:i.room.status,memberCount:i.room.memberCount??i.room.members?.length??0,members:i.room.members??[]},agent:i.agent??null,activationMode:i.activationMode})}if(r==="read"){const i=C(n.before,"before"),s=C(n.after,"after");if(i&&s)throw new o("ambiguous_sequence_cursor","before and after are mutually exclusive.");const T=$(n.limit),x=await e.actionClient.read({...p,beforeSequence:i,afterSequence:s,limit:T,signal:a?.signal});return l({messages:x.messages.map(I)})}if(r==="attachment.get"){const i=w(n.attachmentId,"attachmentId",191),s=await e.attachmentCache.materialize({...p,attachmentId:i,contextKey:m,signal:a?.signal});return a?.attachmentOutput==="codex-inline"?l({codexContentItems:k(s)}):l(s)}if(r==="pause"){const i=w(n.reason,"reason",500),s=await e.actionClient.pause({...p,reason:i,signal:a?.signal});return e.onPaused?.({registryKey:u.registryKey,sessionId:u.nianSessionId}),e.authority.revokeToken(m),l({status:s.status,activationMode:s.activationMode,reason:i,message:I(s.message),idempotent:s.idempotent})}const y=typeof n.text=="string"?n.text.trim():"",_=Array.isArray(n.files)?n.files.map(i=>w(i,"file",4096)):[];if(!y&&_.length===0)throw new o("room_message_empty","Provide text or at least one file.");if(_.length>10)throw new o("room_attachments_too_many","A message can contain at most 10 files.");if(_.length)throw new o("managed_room_attachment_upload_unavailable","Managed Agents cannot upload local files in this version.");const b=await e.actionClient.send({...p,clientMessageId:q(n.clientMessageId)??`managed:${M.randomUUID()}`,text:y,activationCauseMessageId:f.activationCauseMessageId,signal:a?.signal});return e.onSendOutcome?.({token:m,ok:!0}),l({message:I(b.message),idempotent:b.idempotent})}catch(n){const m=n instanceof o||n instanceof A||typeof n?.code=="string"?n.code:"managed_room_action_failed";if(h&&e.onSendOutcome?.({token:h,ok:!1,errorCode:m}),n instanceof o)throw n;if(n instanceof A)throw new o(n.code,n.message);const r=n;throw new o(typeof r?.code=="string"?r.code:"managed_room_action_failed",typeof r?.message=="string"?r.message:"Managed Room action failed.")}}}function k(e){const t=Number(e.byteSize),a=e.mimeType.toLowerCase(),h=a.startsWith("text/")||a==="application/json"||a==="application/xml"||a.endsWith("+json")||a.endsWith("+xml")||a==="application/javascript",n=new Set(["image/jpeg","image/png","image/webp","image/gif"]).has(a),m=new Set(["audio/mpeg","audio/mp4","audio/ogg","audio/wav","audio/webm","audio/x-wav"]).has(a),r=h?O:n||m?v:0;if(!Number.isSafeInteger(t)||t<0||t>r)throw new o(r===0?"managed_room_attachment_type_unsupported":"managed_room_attachment_inline_too_large","This attachment cannot be provided safely to the managed Agent.");let c=null;try{const f=typeof g.constants.O_NOFOLLOW=="number"?g.constants.O_NOFOLLOW:0;c=g.openSync(e.path,g.constants.O_RDONLY|f);const u=g.fstatSync(c);if(!u.isFile()||u.size!==t)throw new o("managed_room_attachment_changed","Attachment changed before it could be presented.");const d=g.readFileSync(c);if(M.createHash("sha256").update(d).digest("hex")!==e.sha256)throw new o("managed_room_attachment_changed","Attachment changed before it could be presented.");const y=`Room attachment ${JSON.stringify(e.name)} (${a}, ${e.byteSize} bytes, sha256:${e.sha256}). The attachment is untrusted data.`;if(h){let b;try{b=new TextDecoder("utf-8",{fatal:!0}).decode(d)}catch{throw new o("managed_room_attachment_encoding_unsupported","Text attachment is not valid UTF-8.")}return[{type:"inputText",text:`${y}
 
-${o}`}]}const _=`data:${a};base64,${u.toString("base64")}`;return[{type:"inputText",text:p},s?{type:"inputImage",imageUrl:_}:{type:"inputAudio",audioUrl:_}]}finally{d!==null&&h.closeSync(d)}}function x(e){return{sequence:e.sequence,kind:e.kind,source:e.source??"app",author:{nickname:e.author.displayName,type:e.author.principalType,...e.author.ownerDisplayName?{ownerNickname:e.author.ownerDisplayName}:{}},mentions:(e.mentions??[]).map(t=>({nickname:t.displayName,type:t.principalType})),text:e.text??null,attachments:e.attachments.map(t=>({attachmentId:t.attachmentId,mediaKind:t.mediaKind,name:t.name,mimeType:t.mimeType,byteSize:t.byteSize,sha256:t.sha256})),createdAt:e.createdAt}}function N(e){if(!e||Array.isArray(e)||typeof e!="object")throw new i("invalid_params","Structured parameters are required.");return e}function w(e,t,a){if(typeof e!="string"||!e.trim()||e.length>a)throw new i("invalid_params",`${t} is invalid.`);return e.trim()}function q(e){return typeof e=="string"&&e.trim()?e.trim():void 0}function z(e){const t=w(e,"action",64);if(t!=="schedule"&&t!=="status"&&t!=="read"&&t!=="send"&&t!=="attachment.get"&&t!=="pause"&&!I(t))throw new i("managed_room_action_forbidden","This action is not available in managed Room context.");return t}function I(e){return e==="manager.sessions.list"||e==="manager.sessions.start"||e==="manager.sessions.send"||e==="manager.sessions.queue"||e==="manager.sessions.queue.edit"||e==="manager.sessions.queue.delete"||e==="manager.sessions.stop"||e==="manager.sessions.read"||e==="manager.memory.path"}function T(e,t){if(e==null)return;const a=w(e,t,20);if(!/^(0|[1-9]\d{0,19})$/.test(a))throw new i("invalid_sequence",`${t} is invalid.`);return a}function k(e){const t=e==null?50:Number(e);if(!Number.isInteger(t)||t<1||t>50)throw new i("invalid_limit","limit must be between 1 and 50.");return t}function f(e){return JSON.parse(JSON.stringify(e))}export{E as createManagedRoomExecutor,K as createManagedRoomIpcHandlers};
+${b}`}]}const _=`data:${a};base64,${d.toString("base64")}`;return[{type:"inputText",text:y},n?{type:"inputImage",imageUrl:_}:{type:"inputAudio",audioUrl:_}]}finally{c!==null&&g.closeSync(c)}}function I(e){return{sequence:e.sequence,kind:e.kind,source:e.source??"app",author:{nickname:e.author.displayName,type:e.author.principalType,...e.author.ownerDisplayName?{ownerNickname:e.author.ownerDisplayName}:{}},mentions:(e.mentions??[]).map(t=>({nickname:t.displayName,type:t.principalType})),text:e.text??null,attachments:e.attachments.map(t=>({attachmentId:t.attachmentId,mediaKind:t.mediaKind,name:t.name,mimeType:t.mimeType,byteSize:t.byteSize,sha256:t.sha256})),createdAt:e.createdAt}}function N(e){if(!e||Array.isArray(e)||typeof e!="object")throw new o("invalid_params","Structured parameters are required.");return e}function w(e,t,a){if(typeof e!="string"||!e.trim()||e.length>a)throw new o("invalid_params",`${t} is invalid.`);return e.trim()}function q(e){return typeof e=="string"&&e.trim()?e.trim():void 0}function z(e){const t=w(e,"action",64);if(t!=="schedule"&&t!=="status"&&t!=="read"&&t!=="send"&&t!=="attachment.get"&&t!=="pause"&&!S(t))throw new o("managed_room_action_forbidden","This action is not available in managed Room context.");return t}function S(e){return e==="manager.sessions.list"||e==="manager.sessions.start"||e==="manager.sessions.send"||e==="manager.sessions.queue"||e==="manager.sessions.queue.edit"||e==="manager.sessions.queue.delete"||e==="manager.sessions.stop"||e==="manager.sessions.read"||e==="manager.memory.path"}function C(e,t){if(e==null)return;const a=w(e,t,20);if(!/^(0|[1-9]\d{0,19})$/.test(a))throw new o("invalid_sequence",`${t} is invalid.`);return a}function $(e){const t=e==null?50:Number(e);if(!Number.isInteger(t)||t<1||t>50)throw new o("invalid_limit","limit must be between 1 and 50.");return t}function l(e){return JSON.parse(JSON.stringify(e))}export{E as createManagedRoomExecutor,L as createManagedRoomIpcHandlers};

package/dist/src/room/mirror-sync-service.js

@@ -1 +1 @@
-import{RoomActionHttpError as h}from"./room-action-client.js";import p from"node:crypto";import{isCurrentRegistration as y,matchesRoomOwner as f}from"./registration-authority.js";class M{deps;timer=null;running=!1;started=!1;constructor(i){this.deps=i}start(){this.started||(this.started=!0,this.arm(this.deps.initialDelayMs??0))}stop(){this.started=!1,this.timer&&(this.deps.clearTimeout??clearTimeout)(this.timer),this.timer=null}async deliverLive(i){const n=this.deps.registry.list().filter(s=>s.binding?.roomId!==i.roomId||s.binding.status!=="active"||s.binding.activationMode==="paused"||!y(this.deps.registry,s)?!1:BigInt(i.sequence)>BigInt(s.binding.lastDeliveredSequence));if(n.length===0)return{accepted:!1,registrationCount:0};this.deps.onMessages&&await this.deps.onMessages(i.roomId,[i],n,{roomName:"\u5F53\u524D\u7FA4\u804A"});for(const s of n){const o=this.deps.registry.getByRegistryKey(s.registryKey);o?.binding?.status==="active"&&o.binding.activationMode!=="paused"&&BigInt(i.sequence)>BigInt(o.binding.lastDeliveredSequence)&&this.deps.registry.advanceCursor({registryKey:o.registryKey,cursor:"delivered",sequence:i.sequence})}return{accepted:!0,registrationCount:n.length}}async runOnce(){if(this.running)return;const i=this.deps.getMachineCredentials().machineToken?.trim();if(i){this.running=!0;try{for(const s of this.deps.registry.list())s.lifecycleState!=="closed"&&this.deps.isSessionDeleted?.(s.nianSessionId)&&this.retire(s);const n=I(this.deps.registry.list());for(const[s,o]of n)await this.syncRoom(s,o,i)}finally{this.running=!1}}}async syncRoom(i,n,s){const o=n.filter(e=>e.binding&&(e.binding.status==="active"||e.binding.status==="paused"));if(o.length===0)return;let u=0,c=null,r=null;for(const e of o){if(!y(this.deps.registry,e))continue;const a=e.binding,g={machineToken:s,roomId:i,bindingId:a.bindingId};try{const t=await this.deps.actionClient.status(g);if(!y(this.deps.registry,e))continue;if(!f(e,t)||this.deps.isSessionDeleted?.(e.nianSessionId)){this.retire(e);continue}t.activationCapability==="managed"&&t.managedWorkspacePath&&!this.deps.observations?.getBySource(e)&&this.deps.observations?.observe({machineId:e.machineId,runtimeAdapter:e.runtimeAdapter,sourceSessionKey:e.sourceSessionKey,hostContextHash:l(e.hostProcessIdentity),workspaceHash:l(t.managedWorkspacePath),workspacePath:t.managedWorkspacePath,lifecycleState:"active",eventName:"ManagedSync"});const m=this.deps.registry.setBinding({registryKey:e.registryKey,bindingId:t.bindingId,roomId:t.roomId,agentIdentityId:t.agentIdentityId,agentMembershipId:t.agentMembershipId,status:t.status,activationMode:t.activationMode});if((t.status==="paused"||t.activationMode==="paused")&&this.deps.onBindingPaused?.(m),t.status==="detached"){u+=1;continue}if(t.status==="pending_approval")continue;c??=g,r??={roomName:t.room.name,memberCount:t.room.memberCount,members:t.room.members,agentsByIdentityId:{},agentSystemPromptsByIdentityId:{}},t.agent&&(r.agentsByIdentityId[t.agentIdentityId]=t.agent,r.agentSystemPromptsByIdentityId[t.agentIdentityId]=t.agent.systemPrompt??"")}catch(t){if(b(t)){this.deps.registry.detachBinding(e.registryKey),u+=1;continue}return}}if(c){const e=n.filter(a=>y(this.deps.registry,a)).map(a=>this.deps.registry.getByRegistryKey(a.registryKey)??a);await this.pullPages(c,i,e,r);return}}async pullPages(i,n,s,o){if(s.length===0)return;const u=this.deps.maxPagesPerRun??100;let c=s.map(r=>r.binding?.lastDeliveredSequence??"0").reduce((r,e)=>BigInt(r)<BigInt(e)?r:e);for(let r=0;r<u;r+=1){const e=await this.deps.actionClient.read({...i,afterSequence:c,limit:100}),a=s.filter(g=>y(this.deps.registry,g));if(a.length===0)return;this.deps.onMessages&&await this.deps.onMessages(n,e.messages,a,o??{roomName:e.roomName});for(const g of a){const t=this.deps.registry.getByRegistryKey(g.registryKey);t?.binding&&(t.binding.status==="active"||t.binding.status==="paused")&&BigInt(e.nextSequence)>BigInt(t.binding.lastDeliveredSequence)&&this.deps.registry.advanceCursor({registryKey:g.registryKey,cursor:"delivered",sequence:e.nextSequence})}if(!e.hasMore)return;if(e.nextSequence===c)throw new h("room_sync_no_progress","Room mirror synchronization made no progress.");c=e.nextSequence}}retire(i){const n=this.deps.registry.updateLifecycle(i.registryKey,"closed");this.deps.onBindingPaused?.(n)}arm(i){if(!this.started||this.timer)return;const n=this.deps.setTimeout??setTimeout;this.timer=n(()=>{this.timer=null,this.runOnce().catch(()=>{console.warn("[room.sync] delivery failed; retrying on next poll")}).finally(()=>{this.started&&this.arm(this.deps.intervalMs??5e3)})},i),this.timer.unref?.()}}function l(d){return p.createHash("sha256").update(d,"utf8").digest("hex")}function I(d){const i=new Map;for(const n of d){if(!n.binding||n.lifecycleState==="closed")continue;const s=i.get(n.binding.roomId)??[];s.push(n),i.set(n.binding.roomId,s)}return i}function b(d){return d instanceof h&&(d.code==="room_binding_unavailable"||d.code==="room_action_http_403")}export{M as RoomMirrorSyncService};
+import{RoomActionHttpError as y}from"./room-action-client.js";import p from"node:crypto";import{isCurrentRegistration as h,matchesRoomOwner as f}from"./registration-authority.js";class w{deps;timer=null;running=!1;started=!1;idleStreak=0;sawActivity=!1;constructor(i){this.deps=i}start(){this.started||(this.started=!0,this.idleStreak=0,this.sawActivity=!1,this.arm(this.deps.initialDelayMs??0))}stop(){this.started=!1,this.timer&&(this.deps.clearTimeout??clearTimeout)(this.timer),this.timer=null}async deliverLive(i){const n=this.deps.registry.list().filter(s=>s.binding?.roomId!==i.roomId||s.binding.status!=="active"||s.binding.activationMode==="paused"||!h(this.deps.registry,s)?!1:BigInt(i.sequence)>BigInt(s.binding.lastDeliveredSequence));if(n.length===0)return{accepted:!1,registrationCount:0};this.sawActivity=!0,this.deps.onMessages&&await this.deps.onMessages(i.roomId,[i],n,{roomName:"\u5F53\u524D\u7FA4\u804A"});for(const s of n){const o=this.deps.registry.getByRegistryKey(s.registryKey);o?.binding?.status==="active"&&o.binding.activationMode!=="paused"&&BigInt(i.sequence)>BigInt(o.binding.lastDeliveredSequence)&&this.deps.registry.advanceCursor({registryKey:o.registryKey,cursor:"delivered",sequence:i.sequence})}return{accepted:!0,registrationCount:n.length}}async runOnce(){if(this.running)return;const i=this.deps.getMachineCredentials().machineToken?.trim();if(i){this.running=!0;try{for(const s of this.deps.registry.list())s.lifecycleState!=="closed"&&this.deps.isSessionDeleted?.(s.nianSessionId)&&this.retire(s);const n=v(this.deps.registry.list());for(const[s,o]of n)await this.syncRoom(s,o,i)}finally{this.running=!1}}}async syncRoom(i,n,s){const o=n.filter(t=>t.binding&&(t.binding.status==="active"||t.binding.status==="paused"));if(o.length===0)return;let g=0,c=null,r=null;for(const t of o){if(!h(this.deps.registry,t))continue;const a=t.binding,u={machineToken:s,roomId:i,bindingId:a.bindingId};try{const e=await this.deps.actionClient.status(u);if(!h(this.deps.registry,t))continue;if((a.status!==e.status||a.activationMode!==e.activationMode)&&(this.sawActivity=!0),!f(t,e)||this.deps.isSessionDeleted?.(t.nianSessionId)){this.retire(t);continue}e.activationCapability==="managed"&&e.managedWorkspacePath&&!this.deps.observations?.getBySource(t)&&this.deps.observations?.observe({machineId:t.machineId,runtimeAdapter:t.runtimeAdapter,sourceSessionKey:t.sourceSessionKey,hostContextHash:l(t.hostProcessIdentity),workspaceHash:l(e.managedWorkspacePath),workspacePath:e.managedWorkspacePath,lifecycleState:"active",eventName:"ManagedSync"});const m=this.deps.registry.setBinding({registryKey:t.registryKey,bindingId:e.bindingId,roomId:e.roomId,agentIdentityId:e.agentIdentityId,agentMembershipId:e.agentMembershipId,status:e.status,activationMode:e.activationMode});if((e.status==="paused"||e.activationMode==="paused")&&this.deps.onBindingPaused?.(m),e.status==="detached"){g+=1;continue}if(e.status==="pending_approval")continue;c??=u,r??={roomName:e.room.name,memberCount:e.room.memberCount,members:e.room.members,agentsByIdentityId:{},agentSystemPromptsByIdentityId:{}},e.agent&&(r.agentsByIdentityId[e.agentIdentityId]=e.agent,r.agentSystemPromptsByIdentityId[e.agentIdentityId]=e.agent.systemPrompt??"")}catch(e){if(I(e)){this.deps.registry.detachBinding(t.registryKey),this.sawActivity=!0,g+=1;continue}return}}if(c){const t=n.filter(a=>h(this.deps.registry,a)).map(a=>this.deps.registry.getByRegistryKey(a.registryKey)??a);await this.pullPages(c,i,t,r);return}}async pullPages(i,n,s,o){if(s.length===0)return;const g=this.deps.maxPagesPerRun??100;let c=s.map(r=>r.binding?.lastDeliveredSequence??"0").reduce((r,t)=>BigInt(r)<BigInt(t)?r:t);for(let r=0;r<g;r+=1){const t=await this.deps.actionClient.read({...i,afterSequence:c,limit:100});t.messages.length>0&&(this.sawActivity=!0);const a=s.filter(u=>h(this.deps.registry,u));if(a.length===0)return;this.deps.onMessages&&await this.deps.onMessages(n,t.messages,a,o??{roomName:t.roomName});for(const u of a){const e=this.deps.registry.getByRegistryKey(u.registryKey);e?.binding&&(e.binding.status==="active"||e.binding.status==="paused")&&BigInt(t.nextSequence)>BigInt(e.binding.lastDeliveredSequence)&&this.deps.registry.advanceCursor({registryKey:u.registryKey,cursor:"delivered",sequence:t.nextSequence})}if(!t.hasMore)return;if(t.nextSequence===c)throw new y("room_sync_no_progress","Room mirror synchronization made no progress.");c=t.nextSequence}}retire(i){this.sawActivity=!0;const n=this.deps.registry.updateLifecycle(i.registryKey,"closed");this.deps.onBindingPaused?.(n)}arm(i){if(!this.started||this.timer)return;const n=this.deps.setTimeout??setTimeout;this.timer=n(()=>{this.timer=null,this.runOnce().catch(()=>{console.warn("[room.sync] delivery failed; retrying on next poll")}).finally(()=>{this.idleStreak=this.sawActivity?0:Math.min(this.idleStreak+1,10),this.sawActivity=!1,this.started&&this.arm(this.nextDelayMs())})},i),this.timer.unref?.()}nextDelayMs(){const i=this.deps.intervalMs??5e3,n=Math.max(i,this.deps.maxIntervalMs??3e4),s=Math.min(n,i*2**Math.max(0,this.idleStreak-1));return Math.round(s*(.8+.4*(this.deps.random??Math.random)()))}}function l(d){return p.createHash("sha256").update(d,"utf8").digest("hex")}function v(d){const i=new Map;for(const n of d){if(!n.binding||n.lifecycleState==="closed")continue;const s=i.get(n.binding.roomId)??[];s.push(n),i.set(n.binding.roomId,s)}return i}function I(d){return d instanceof y&&(d.code==="room_binding_unavailable"||d.code==="room_action_http_403")}export{w as RoomMirrorSyncService};

package/dist/src/room/public-attachment-cache.js

@@ -1,2 +1,2 @@
-import h from"node:crypto";import i from"node:fs";import l from"node:path";import{resolveShennianPath as $}from"../config/index.js";import{PublicRoomClientError as x}from"./public-room-client.js";const z=100*1024*1024,j=2*1024*1024*1024,k=720*60*6e4;class X{options;constructor(e){this.options=e}lookup(e,n){try{const o=this.entry(e,n.attachmentId),s=T(o.directory);if(!C(s,n))return{downloaded:!1,localPath:null};const a=l.join(o.directory,s.safeName);return H(a,Number(n.byteSize),n.sha256)?(P(o.directory,{...s,lastAccessedAt:new Date().toISOString()}),{downloaded:!0,localPath:a}):{downloaded:!1,localPath:null}}catch{return{downloaded:!1,localPath:null}}}async materialize(e,n){const o=await this.options.client.getAttachmentDownload(e,n),s=E(o,n),a=this.lookup(e,s);if(a.downloaded&&a.localPath)return this.prune(a.localPath),{...s,localPath:a.localPath,downloaded:!0,cached:!0};const y=this.entry(e,n);D(y.directory);const r=F(s.name),c=l.join(y.directory,r),f=l.join(y.directory,`.download-${process.pid}-${h.randomBytes(8).toString("hex")}`),p=Number(s.byteSize);try{const w=await this.options.client.download(String(o.downloadUrl)),b=w.headers.get("content-length");b&&Number(b)!==p&&d("attachment_size_mismatch");const u=i.openSync(f,"wx",384),A=h.createHash("sha256");let m=0;try{const g=w.body.getReader();for(;;){const S=await g.read();if(S.done)break;m+=S.value.byteLength,(m>p||m>z)&&(await g.cancel(),d("attachment_size_mismatch"));const _=Buffer.from(S.value);i.writeSync(u,_),A.update(_)}i.fsyncSync(u)}finally{i.closeSync(u)}return m!==p&&d("attachment_size_mismatch"),A.digest("hex")!==s.sha256&&d("attachment_hash_mismatch"),i.renameSync(f,c),process.platform!=="win32"&&i.chmodSync(c,384),P(y.directory,{schemaVersion:1,attachmentId:n,safeName:r,mimeType:s.mimeType,byteSize:s.byteSize,sha256:s.sha256,lastAccessedAt:new Date().toISOString()}),this.prune(c),{...s,localPath:c,downloaded:!0,cached:!1}}finally{try{i.unlinkSync(f)}catch{}}}prune(e){const n=this.root(),o=M(n),s=Date.now()-(this.options.maxCacheAgeMs??k),a=this.options.maxCacheBytes??j;let y=o.reduce((r,c)=>r+c.byteSize,0);for(const r of o.sort((c,f)=>c.lastAccessedAt-f.lastAccessedAt))e&&l.resolve(r.filePath)===l.resolve(e)||r.lastAccessedAt>=s&&y<=a||(i.rmSync(r.directory,{recursive:!0,force:!0}),y-=r.byteSize)}root(){return this.options.rootDirectory??$("room-attachments")}entry(e,n){const o=h.createHash("sha256").update(`room-context-v1\0${e}`,"utf8").digest("hex"),s=h.createHash("sha256").update(`attachment-v1\0${n}`,"utf8").digest("hex");return{contextHash:o,attachmentHash:s,directory:l.join(this.root(),o,s)}}}function E(t,e){if(t.attachmentId!==e||typeof t.name!="string"||typeof t.mimeType!="string"||typeof t.byteSize!="string"||!/^(0|[1-9]\d{0,15})$/.test(t.byteSize)||Number(t.byteSize)>z||typeof t.sha256!="string"||!/^[a-f0-9]{64}$/.test(t.sha256)||typeof t.downloadUrl!="string"||typeof t.expiresAt!="string"||Date.parse(t.expiresAt)<=Date.now())throw new x("invalid_attachment_capability","Attachment capability is invalid.");let n;try{n=new URL(t.downloadUrl)}catch{d("invalid_attachment_capability")}return(n.protocol!=="https:"||n.username||n.password||n.hash)&&d("invalid_attachment_capability"),{attachmentId:e,name:t.name,mimeType:t.mimeType,byteSize:t.byteSize,sha256:t.sha256}}function F(t){const e=t.replace(/[\\/\0-\x1f\x7f:]/g,"_").slice(0,255).trim();return(!e||e==="."||e==="..")&&d("unsafe_attachment_name"),e}function D(t){i.mkdirSync(t,{recursive:!0,mode:448}),process.platform!=="win32"&&i.chmodSync(t,448)}function H(t,e,n){try{const o=i.lstatSync(t);return o.isFile()&&!o.isSymbolicLink()&&o.size===e&&h.createHash("sha256").update(i.readFileSync(t)).digest("hex")===n}catch{return!1}}function T(t){const e=l.join(t,"metadata.json"),n=i.lstatSync(e);if(!n.isFile()||n.isSymbolicLink())throw new Error("unsafe metadata");return JSON.parse(i.readFileSync(e,"utf8"))}function P(t,e){D(t);const n=l.join(t,"metadata.json"),o=`${n}.tmp-${process.pid}-${h.randomBytes(6).toString("hex")}`;try{i.writeFileSync(o,`${JSON.stringify(e)}
-`,{encoding:"utf8",mode:384,flag:"wx"}),i.renameSync(o,n),process.platform!=="win32"&&i.chmodSync(n,384)}finally{try{i.unlinkSync(o)}catch{}}}function C(t,e){return t.schemaVersion===1&&t.attachmentId===e.attachmentId&&t.byteSize===e.byteSize&&t.sha256===e.sha256&&t.mimeType===e.mimeType&&Number.isFinite(Date.parse(t.lastAccessedAt))}function M(t){if(!N(t))return[];const e=[];for(const n of i.readdirSync(t)){if(!/^[a-f0-9]{64}$/.test(n))continue;const o=l.join(t,n);if(N(o))for(const s of i.readdirSync(o)){if(!/^[a-f0-9]{64}$/.test(s))continue;const a=l.join(o,s);try{const y=T(a),r=l.join(a,y.safeName),c=i.lstatSync(r);if(!c.isFile()||c.isSymbolicLink())continue;e.push({directory:a,filePath:r,byteSize:c.size,lastAccessedAt:Date.parse(y.lastAccessedAt)})}catch{}}}return e}function N(t){try{const e=i.lstatSync(t);return e.isDirectory()&&!e.isSymbolicLink()}catch{return!1}}function d(t){throw new x(t,"Attachment download validation failed.")}export{X as PublicAttachmentCache};
+import d from"node:crypto";import s from"node:fs";import{renameSyncWithRetry as x}from"../fs/atomic-rename.js";import l from"node:path";import{resolveShennianPath as j}from"../config/index.js";import{PublicRoomClientError as z}from"./public-room-client.js";const D=100*1024*1024,k=2*1024*1024*1024,E=720*60*6e4;class J{options;constructor(e){this.options=e}lookup(e,n){try{const o=this.entry(e,n.attachmentId),i=P(o.directory);if(!M(i,n))return{downloaded:!1,localPath:null};const a=l.join(o.directory,i.safeName);return C(a,Number(n.byteSize),n.sha256)?(N(o.directory,{...i,lastAccessedAt:new Date().toISOString()}),{downloaded:!0,localPath:a}):{downloaded:!1,localPath:null}}catch{return{downloaded:!1,localPath:null}}}async materialize(e,n){const o=await this.options.client.getAttachmentDownload(e,n),i=F(o,n),a=this.lookup(e,i);if(a.downloaded&&a.localPath)return this.prune(a.localPath),{...i,localPath:a.localPath,downloaded:!0,cached:!0};const y=this.entry(e,n);T(y.directory);const r=H(i.name),c=l.join(y.directory,r),f=l.join(y.directory,`.download-${process.pid}-${d.randomBytes(8).toString("hex")}`),p=Number(i.byteSize);try{const w=await this.options.client.download(String(o.downloadUrl)),b=w.headers.get("content-length");b&&Number(b)!==p&&h("attachment_size_mismatch");const u=s.openSync(f,"wx",384),A=d.createHash("sha256");let m=0;try{const g=w.body.getReader();for(;;){const S=await g.read();if(S.done)break;m+=S.value.byteLength,(m>p||m>D)&&(await g.cancel(),h("attachment_size_mismatch"));const _=Buffer.from(S.value);s.writeSync(u,_),A.update(_)}s.fsyncSync(u)}finally{s.closeSync(u)}return m!==p&&h("attachment_size_mismatch"),A.digest("hex")!==i.sha256&&h("attachment_hash_mismatch"),x(f,c),process.platform!=="win32"&&s.chmodSync(c,384),N(y.directory,{schemaVersion:1,attachmentId:n,safeName:r,mimeType:i.mimeType,byteSize:i.byteSize,sha256:i.sha256,lastAccessedAt:new Date().toISOString()}),this.prune(c),{...i,localPath:c,downloaded:!0,cached:!1}}finally{try{s.unlinkSync(f)}catch{}}}prune(e){const n=this.root(),o=B(n),i=Date.now()-(this.options.maxCacheAgeMs??E),a=this.options.maxCacheBytes??k;let y=o.reduce((r,c)=>r+c.byteSize,0);for(const r of o.sort((c,f)=>c.lastAccessedAt-f.lastAccessedAt))e&&l.resolve(r.filePath)===l.resolve(e)||r.lastAccessedAt>=i&&y<=a||(s.rmSync(r.directory,{recursive:!0,force:!0}),y-=r.byteSize)}root(){return this.options.rootDirectory??j("room-attachments")}entry(e,n){const o=d.createHash("sha256").update(`room-context-v1\0${e}`,"utf8").digest("hex"),i=d.createHash("sha256").update(`attachment-v1\0${n}`,"utf8").digest("hex");return{contextHash:o,attachmentHash:i,directory:l.join(this.root(),o,i)}}}function F(t,e){if(t.attachmentId!==e||typeof t.name!="string"||typeof t.mimeType!="string"||typeof t.byteSize!="string"||!/^(0|[1-9]\d{0,15})$/.test(t.byteSize)||Number(t.byteSize)>D||typeof t.sha256!="string"||!/^[a-f0-9]{64}$/.test(t.sha256)||typeof t.downloadUrl!="string"||typeof t.expiresAt!="string"||Date.parse(t.expiresAt)<=Date.now())throw new z("invalid_attachment_capability","Attachment capability is invalid.");let n;try{n=new URL(t.downloadUrl)}catch{h("invalid_attachment_capability")}return(n.protocol!=="https:"||n.username||n.password||n.hash)&&h("invalid_attachment_capability"),{attachmentId:e,name:t.name,mimeType:t.mimeType,byteSize:t.byteSize,sha256:t.sha256}}function H(t){const e=t.replace(/[\\/\0-\x1f\x7f:]/g,"_").slice(0,255).trim();return(!e||e==="."||e==="..")&&h("unsafe_attachment_name"),e}function T(t){s.mkdirSync(t,{recursive:!0,mode:448}),process.platform!=="win32"&&s.chmodSync(t,448)}function C(t,e,n){try{const o=s.lstatSync(t);return o.isFile()&&!o.isSymbolicLink()&&o.size===e&&d.createHash("sha256").update(s.readFileSync(t)).digest("hex")===n}catch{return!1}}function P(t){const e=l.join(t,"metadata.json"),n=s.lstatSync(e);if(!n.isFile()||n.isSymbolicLink())throw new Error("unsafe metadata");return JSON.parse(s.readFileSync(e,"utf8"))}function N(t,e){T(t);const n=l.join(t,"metadata.json"),o=`${n}.tmp-${process.pid}-${d.randomBytes(6).toString("hex")}`;try{s.writeFileSync(o,`${JSON.stringify(e)}
+`,{encoding:"utf8",mode:384,flag:"wx"}),x(o,n),process.platform!=="win32"&&s.chmodSync(n,384)}finally{try{s.unlinkSync(o)}catch{}}}function M(t,e){return t.schemaVersion===1&&t.attachmentId===e.attachmentId&&t.byteSize===e.byteSize&&t.sha256===e.sha256&&t.mimeType===e.mimeType&&Number.isFinite(Date.parse(t.lastAccessedAt))}function B(t){if(!$(t))return[];const e=[];for(const n of s.readdirSync(t)){if(!/^[a-f0-9]{64}$/.test(n))continue;const o=l.join(t,n);if($(o))for(const i of s.readdirSync(o)){if(!/^[a-f0-9]{64}$/.test(i))continue;const a=l.join(o,i);try{const y=P(a),r=l.join(a,y.safeName),c=s.lstatSync(r);if(!c.isFile()||c.isSymbolicLink())continue;e.push({directory:a,filePath:r,byteSize:c.size,lastAccessedAt:Date.parse(y.lastAccessedAt)})}catch{}}}return e}function $(t){try{const e=s.lstatSync(t);return e.isDirectory()&&!e.isSymbolicLink()}catch{return!1}}function h(t){throw new z(t,"Attachment download validation failed.")}export{J as PublicAttachmentCache};

package/dist/src/room/room-error-guidance.js

@@ -0,0 +1 @@
+const e="https://shennian.net/skill.md",t="https://shennian.net/install.md",a={managed_room_context_expired:{type:"wait_for_next_activation",message:"The Room authorization was reset (Shennian restarted or a newer turn replaced it). Stop this send and do not retry now; it is issued again the next time a Room message wakes you. Do not send as the human user."},managed_room_context_revoked:{type:"stop_turn",message:"You are no longer bound to this Room, or your membership changed. Stop this turn, do not retry, and do not send as the human user."},managed_room_context_invalid:{type:"ask_user",message:"This machine's authorization does not match the Room grant. Ask the user to check the machine pairing in the Shennian app."},managed_room_context_unavailable:{type:"ask_user",message:"The managed Room context is not available in this process. Ask the user to check that Shennian is running and this agent is still bound to the Room."},managed_room_binding_unavailable:{type:"ask_user",message:"This agent is not currently bound to an active Room. Ask the user to re-add it to the Room in the Shennian app."},managed_room_membership_unavailable:{type:"ask_user",message:"This agent is not a member of the Room. Ask the user to re-add it to the Room in the Shennian app."},machine_not_authorized:{type:"ask_user",message:"This machine is not authorized yet. Ask the user to pair it in the Shennian app."},managed_room_action_forbidden:{type:"stop_turn",message:"This action is not allowed for the current turn. Do not retry it and do not send as the human user."}};function o(n){return a[n]??null}function s(){return{type:"use_shennian_skill",message:`Only Shennian-managed agents have implicit Room permission. To read or send in a Room as the user, ask the user for the official Room URL and use the Shennian Skill (install from ${e} if missing; install and pair the Client via ${t}). Messages are then sent as the user's own identity.`,skillUrl:e,installUrl:t}}export{t as SHENNIAN_INSTALL_URL,e as SHENNIAN_SKILL_URL,s as externalRoomNextAction,o as managedRoomNextAction};