soulnet-dsh 0.1.0

package/lib/send-DcYQC5CC.js

@@ -0,0 +1,127 @@
+//#region src/policy.ts
+const DEFAULT_REPLY_TIER = "draft";
+function isReplyTier(value) {
+	return value === "notify" || value === "draft" || value === "auto";
+}
+function normalizeTier(value, fallback = DEFAULT_REPLY_TIER) {
+	return isReplyTier(value) ? value : fallback;
+}
+const UNKNOWN_TRIGGER = { kind: "unknown" };
+function routeInbound(input) {
+	if (!input.isFriend) return {
+		action: "append",
+		reason: "not-a-friend"
+	};
+	if (input.auto) return {
+		action: "append",
+		reason: "loop-guard-auto"
+	};
+	if (input.tier === "notify") return {
+		action: "append",
+		reason: "tier-notify"
+	};
+	return { action: "wake" };
+}
+function sendGate(input) {
+	switch (input.trigger.kind) {
+		case "owner": return {
+			kind: "allow",
+			auto: false,
+			reason: "owner-initiated"
+		};
+		case "inbound-auto": return {
+			kind: "draft",
+			reason: "loop-guard-auto"
+		};
+		case "inbound":
+			if (input.trigger.fp !== void 0 && input.trigger.fp !== input.target) return {
+				kind: "draft",
+				reason: "other-friend"
+			};
+			if (input.tier === "auto") {
+				if (input.limit > 0 && input.autoSentInWindow < input.limit) return {
+					kind: "allow",
+					auto: true,
+					reason: "auto-tier"
+				};
+				return {
+					kind: "draft",
+					reason: "rate-limited"
+				};
+			}
+			return {
+				kind: "draft",
+				reason: input.tier === "draft" ? "draft-tier" : "notify-tier"
+			};
+		default: return {
+			kind: "draft",
+			reason: "unknown-trigger"
+		};
+	}
+}
+const HOUR_MS = 36e5;
+/** Sliding one-hour window of timestamps per key (friend fingerprint). */
+var HourlyWindow = class {
+	windowMs;
+	hits = /* @__PURE__ */ new Map();
+	constructor(windowMs = HOUR_MS) {
+		this.windowMs = windowMs;
+	}
+	/** Timestamps still inside the window for `key`, oldest first. */
+	count(key, now = Date.now()) {
+		return this.prune(key, now).length;
+	}
+	/** Record one hit for `key`; returns the new count. */
+	record(key, now = Date.now()) {
+		const list = this.prune(key, now);
+		list.push(now);
+		this.hits.set(key, list);
+		return list.length;
+	}
+	/** Milliseconds until the oldest hit leaves the window (0 when none). */
+	retryAfter(key, now = Date.now()) {
+		const list = this.prune(key, now);
+		if (list.length === 0) return 0;
+		return Math.max(0, list[0] + this.windowMs - now);
+	}
+	prune(key, now) {
+		const list = (this.hits.get(key) ?? []).filter((ts) => now - ts < this.windowMs);
+		if (list.length === 0) this.hits.delete(key);
+		else this.hits.set(key, list);
+		return list;
+	}
+};
+//#endregion
+//#region src/network/send.ts
+async function sendAndArchive(client, fp, body, options) {
+	const receipt = await client.send(fp, body, options);
+	let entry;
+	if (receipt.seq !== void 0 && receipt.seq > 0) try {
+		const { entries } = await client.conversation(fp, {
+			since: receipt.seq - 1,
+			limit: 1
+		});
+		entry = entries.find((e) => e.seq === receipt.seq);
+	} catch {}
+	entry ??= {
+		seq: receipt.seq ?? 0,
+		dir: "out",
+		id: receipt.id,
+		body,
+		ts: Date.now(),
+		status: receipt.status,
+		...options?.auto === true ? { auto: true } : {}
+	};
+	return {
+		entry,
+		receipt: {
+			id: receipt.id,
+			status: receipt.status,
+			...receipt.seq === void 0 ? {} : { seq: receipt.seq }
+		}
+	};
+}
+//#endregion
+export { isReplyTier as a, sendGate as c, UNKNOWN_TRIGGER as i, DEFAULT_REPLY_TIER as n, normalizeTier as o, HourlyWindow as r, routeInbound as s, sendAndArchive as t };
+
+//# sourceMappingURL=send-DcYQC5CC.js.map

package/lib/send-DcYQC5CC.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-DcYQC5CC.js","names":[],"sources":["../src/policy.ts","../src/network/send.ts"],"sourcesContent":["/**\n * Reply policy of the alter (P3, reshaped in P4 for the single alter session)\n * — pure, no I/O, unit-tested in test/policy.test.ts:\n *\n *   - `ReplyTier` per friend: `notify` (inbound mail is appended to the alter\n *     session, no turn), `draft` (a turn is woken; the alter's reply is stored\n *     as a PENDING DRAFT the owner reviews on the SoulMirror page), `auto` (a\n *     turn is woken; the reply is sent without review, rate-limited per\n *     friend per hour).\n *   - `routeInbound()` — what to do with one inbound mail: append only, or\n *     append AND wake the alter. The loop guard lives here: mail flagged\n *     `auto` (another alter's automatic reply) never wakes a turn, and mail\n *     from a non-friend never does either.\n *   - `sendGate()` — whether `soulmirror_send_message` may send now or must\n *     queue a draft. Owner-initiated turns send freely (SoulMirror rule:\n *     friend messages on the owner's instruction are direct; only tasks /\n *     money need confirmation). Inbound-triggered turns send freely only to\n *     the friend who wrote, in the `auto` tier and under the hourly cap;\n *     everything else becomes a draft for the owner. There is no dsh\n *     approval panel in this path any more (P4).\n *   - `HourlyWindow` — the per-friend sliding-window counter behind the cap.\n */\n\nexport type ReplyTier = 'notify' | 'draft' | 'auto'\n\nexport const REPLY_TIERS: readonly ReplyTier[] = ['notify', 'draft', 'auto']\n\nexport const DEFAULT_REPLY_TIER: ReplyTier = 'draft'\n\nexport const DEFAULT_AUTO_REPLY_PER_HOUR = 20\n\nexport function isReplyTier(value: unknown): value is ReplyTier {\n  return value === 'notify' || value === 'draft' || value === 'auto'\n}\n\nexport function normalizeTier(value: unknown, fallback: ReplyTier = DEFAULT_REPLY_TIER): ReplyTier {\n  return isReplyTier(value) ? value : fallback\n}\n\n/**\n * What woke the current turn of the alter session:\n *   - `owner`: the owner typed an instruction (a `user/message` with\n *     `source.kind === 'user'`) — from the SoulMirror page composer or dsh's\n *     own input bar. `fp` is never set: an instruction that names a friend\n *     is still the owner speaking (the persona resolves the friend as \"none\");\n *   - `inbound`: mail from a friend woke the turn; `fp` / `name` identify\n *     that friend (the per-friend tier and protocol override are resolved from\n *     it, per turn);\n *   - `inbound-auto`: that mail was itself flagged `auto` (should never wake a\n *     turn — kept for the belt-and-braces branch in the gate);\n *   - `unknown`: no user message in the current turn could be attributed (a\n *     tool call from another session, a steer, a resumed turn …).\n */\nexport interface TurnTrigger {\n  readonly kind: 'owner' | 'inbound' | 'inbound-auto' | 'unknown'\n  /** Fingerprint of the friend whose mail woke the turn (inbound kinds only). */\n  readonly fp?: string\n  /** Display name of that friend at delivery time. */\n  readonly name?: string\n  /** A2A id of that mail. */\n  readonly messageId?: string\n}\n\nexport const UNKNOWN_TRIGGER: TurnTrigger = { kind: 'unknown' }\n\nexport interface InboundRoute {\n  /** Wake a model turn (the mail is delivered through the agent inbox) or append only. */\n  readonly action: 'wake' | 'append'\n  /** Why it was not woken (logged). */\n  readonly reason?: 'tier-notify' | 'loop-guard-auto' | 'not-a-friend'\n}\n\nexport interface RouteInboundInput {\n  readonly tier: ReplyTier\n  /** The mail carries the A2A `auto` flag (another alter's automatic reply). */\n  readonly auto: boolean\n  /** The sender is in the friend list (the peer only archives friend mail, but the session layer may lag). */\n  readonly isFriend: boolean\n}\n\nexport function routeInbound(input: RouteInboundInput): InboundRoute {\n  if (!input.isFriend) return { action: 'append', reason: 'not-a-friend' }\n  if (input.auto) return { action: 'append', reason: 'loop-guard-auto' }\n  if (input.tier === 'notify') return { action: 'append', reason: 'tier-notify' }\n  return { action: 'wake' }\n}\n\nexport type SendGateReason =\n  | 'owner-initiated' | 'auto-tier'\n  | 'draft-tier' | 'notify-tier' | 'rate-limited' | 'loop-guard-auto' | 'unknown-trigger' | 'other-friend'\n\nexport type SendDecision =\n  /** Send now; `auto` says whether to flag the wire message as an automatic reply. */\n  | { readonly kind: 'allow'; readonly auto: boolean; readonly reason: 'owner-initiated' | 'auto-tier' }\n  /** Do not send: store a pending draft for the owner to review on the page. */\n  | { readonly kind: 'draft'; readonly reason: Exclude<SendGateReason, 'owner-initiated' | 'auto-tier'> }\n\nexport interface SendGateInput {\n  readonly trigger: TurnTrigger\n  /** The target friend of this send. */\n  readonly target: string\n  /** Effective reply tier of the TARGET friend. */\n  readonly tier: ReplyTier\n  /** Automatic replies already sent to the target in the current hour window. */\n  readonly autoSentInWindow: number\n  /** `autoReplyPerHour` (<= 0 disables automatic sends entirely). */\n  readonly limit: number\n}\n\nexport function sendGate(input: SendGateInput): SendDecision {\n  switch (input.trigger.kind) {\n    case 'owner':\n      return { kind: 'allow', auto: false, reason: 'owner-initiated' }\n    case 'inbound-auto':\n      return { kind: 'draft', reason: 'loop-guard-auto' }\n    case 'inbound':\n      // The alter answering friend A by writing to friend B is not an auto reply to A.\n      if (input.trigger.fp !== undefined && input.trigger.fp !== input.target) return { kind: 'draft', reason: 'other-friend' }\n      if (input.tier === 'auto') {\n        if (input.limit > 0 && input.autoSentInWindow < input.limit) return { kind: 'allow', auto: true, reason: 'auto-tier' }\n        return { kind: 'draft', reason: 'rate-limited' }\n      }\n      return { kind: 'draft', reason: input.tier === 'draft' ? 'draft-tier' : 'notify-tier' }\n    case 'unknown':\n    default:\n      return { kind: 'draft', reason: 'unknown-trigger' }\n  }\n}\n\nexport const HOUR_MS = 3_600_000\n\n/** Sliding one-hour window of timestamps per key (friend fingerprint). */\nexport class HourlyWindow {\n  private readonly hits = new Map<string, number[]>()\n\n  constructor(private readonly windowMs: number = HOUR_MS) {}\n\n  /** Timestamps still inside the window for `key`, oldest first. */\n  count(key: string, now: number = Date.now()): number {\n    return this.prune(key, now).length\n  }\n\n  /** Record one hit for `key`; returns the new count. */\n  record(key: string, now: number = Date.now()): number {\n    const list = this.prune(key, now)\n    list.push(now)\n    this.hits.set(key, list)\n    return list.length\n  }\n\n  /** Milliseconds until the oldest hit leaves the window (0 when none). */\n  retryAfter(key: string, now: number = Date.now()): number {\n    const list = this.prune(key, now)\n    if (list.length === 0) return 0\n    return Math.max(0, list[0]! + this.windowMs - now)\n  }\n\n  private prune(key: string, now: number): number[] {\n    const list = (this.hits.get(key) ?? []).filter(ts => now - ts < this.windowMs)\n    if (list.length === 0) this.hits.delete(key)\n    else this.hits.set(key, list)\n    return list\n  }\n}\n","/**\n * Send through the peer and read the archived entry back (shared by the\n * browser API's direct send and the alter's `soulmirror_send_message` tool):\n * the peer answers `seq` / `status`; the archive line carries the exact `ts`\n * and `auto` flag, which the SoulMirror page needs to reconcile its\n * optimistic bubble or to paint the alter's send. Falls back to a constructed\n * entry when the read-back misses.\n */\nimport type { Fingerprint } from '../events.ts'\nimport type { ConversationEntry, NetworkClient, SendOptions, SendReceipt } from './types.ts'\n\nexport interface SentEntry {\n  readonly entry: ConversationEntry\n  readonly receipt: { id: string; seq?: number; status: string }\n}\n\nexport async function sendAndArchive(client: NetworkClient, fp: Fingerprint, body: string, options?: SendOptions): Promise<SentEntry> {\n  const receipt: SendReceipt = await client.send(fp, body, options)\n  let entry: ConversationEntry | undefined\n  if (receipt.seq !== undefined && receipt.seq > 0) {\n    try {\n      const { entries } = await client.conversation(fp, { since: receipt.seq - 1, limit: 1 })\n      entry = entries.find(e => e.seq === receipt.seq)\n    } catch {\n      // archive read-back is best effort\n    }\n  }\n  entry ??= {\n    seq: receipt.seq ?? 0,\n    dir: 'out',\n    id: receipt.id,\n    body,\n    ts: Date.now(),\n    status: receipt.status,\n    ...(options?.auto === true ? { auto: true as const } : {}),\n  }\n  return { entry, receipt: { id: receipt.id, status: receipt.status, ...(receipt.seq === undefined ? {} : { seq: receipt.seq }) } }\n}\n"],"mappings":";AA2BA,MAAa,qBAAgC;AAI7C,SAAgB,YAAY,OAAoC;CAC9D,OAAO,UAAU,YAAY,UAAU,WAAW,UAAU;AAC9D;AAEA,SAAgB,cAAc,OAAgB,WAAsB,oBAA+B;CACjG,OAAO,YAAY,KAAK,IAAI,QAAQ;AACtC;AA0BA,MAAa,kBAA+B,EAAE,MAAM,UAAU;AAiB9D,SAAgB,aAAa,OAAwC;CACnE,IAAI,CAAC,MAAM,UAAU,OAAO;EAAE,QAAQ;EAAU,QAAQ;CAAe;CACvE,IAAI,MAAM,MAAM,OAAO;EAAE,QAAQ;EAAU,QAAQ;CAAkB;CACrE,IAAI,MAAM,SAAS,UAAU,OAAO;EAAE,QAAQ;EAAU,QAAQ;CAAc;CAC9E,OAAO,EAAE,QAAQ,OAAO;AAC1B;AAwBA,SAAgB,SAAS,OAAoC;CAC3D,QAAQ,MAAM,QAAQ,MAAtB;EACE,KAAK,SACH,OAAO;GAAE,MAAM;GAAS,MAAM;GAAO,QAAQ;EAAkB;EACjE,KAAK,gBACH,OAAO;GAAE,MAAM;GAAS,QAAQ;EAAkB;EACpD,KAAK;GAEH,IAAI,MAAM,QAAQ,OAAO,KAAA,KAAa,MAAM,QAAQ,OAAO,MAAM,QAAQ,OAAO;IAAE,MAAM;IAAS,QAAQ;GAAe;GACxH,IAAI,MAAM,SAAS,QAAQ;IACzB,IAAI,MAAM,QAAQ,KAAK,MAAM,mBAAmB,MAAM,OAAO,OAAO;KAAE,MAAM;KAAS,MAAM;KAAM,QAAQ;IAAY;IACrH,OAAO;KAAE,MAAM;KAAS,QAAQ;IAAe;GACjD;GACA,OAAO;IAAE,MAAM;IAAS,QAAQ,MAAM,SAAS,UAAU,eAAe;GAAc;EAExF,SACE,OAAO;GAAE,MAAM;GAAS,QAAQ;EAAkB;CACtD;AACF;AAEA,MAAa,UAAU;;AAGvB,IAAa,eAAb,MAA0B;CAGK;CAF7B,uBAAwB,IAAI,IAAsB;CAElD,YAAY,WAAoC,SAAS;EAA5B,KAAA,WAAA;CAA6B;;CAG1D,MAAM,KAAa,MAAc,KAAK,IAAI,GAAW;EACnD,OAAO,KAAK,MAAM,KAAK,GAAG,CAAC,CAAC;CAC9B;;CAGA,OAAO,KAAa,MAAc,KAAK,IAAI,GAAW;EACpD,MAAM,OAAO,KAAK,MAAM,KAAK,GAAG;EAChC,KAAK,KAAK,GAAG;EACb,KAAK,KAAK,IAAI,KAAK,IAAI;EACvB,OAAO,KAAK;CACd;;CAGA,WAAW,KAAa,MAAc,KAAK,IAAI,GAAW;EACxD,MAAM,OAAO,KAAK,MAAM,KAAK,GAAG;EAChC,IAAI,KAAK,WAAW,GAAG,OAAO;EAC9B,OAAO,KAAK,IAAI,GAAG,KAAK,KAAM,KAAK,WAAW,GAAG;CACnD;CAEA,MAAc,KAAa,KAAuB;EAChD,MAAM,QAAQ,KAAK,KAAK,IAAI,GAAG,KAAK,CAAC,EAAA,CAAG,QAAO,OAAM,MAAM,KAAK,KAAK,QAAQ;EAC7E,IAAI,KAAK,WAAW,GAAG,KAAK,KAAK,OAAO,GAAG;OACtC,KAAK,KAAK,IAAI,KAAK,IAAI;EAC5B,OAAO;CACT;AACF;;;ACnJA,eAAsB,eAAe,QAAuB,IAAiB,MAAc,SAA2C;CACpI,MAAM,UAAuB,MAAM,OAAO,KAAK,IAAI,MAAM,OAAO;CAChE,IAAI;CACJ,IAAI,QAAQ,QAAQ,KAAA,KAAa,QAAQ,MAAM,GAC7C,IAAI;EACF,MAAM,EAAE,YAAY,MAAM,OAAO,aAAa,IAAI;GAAE,OAAO,QAAQ,MAAM;GAAG,OAAO;EAAE,CAAC;EACtF,QAAQ,QAAQ,MAAK,MAAK,EAAE,QAAQ,QAAQ,GAAG;CACjD,QAAQ,CAER;CAEF,UAAU;EACR,KAAK,QAAQ,OAAO;EACpB,KAAK;EACL,IAAI,QAAQ;EACZ;EACA,IAAI,KAAK,IAAI;EACb,QAAQ,QAAQ;EAChB,GAAI,SAAS,SAAS,OAAO,EAAE,MAAM,KAAc,IAAI,CAAC;CAC1D;CACA,OAAO;EAAE;EAAO,SAAS;GAAE,IAAI,QAAQ;GAAI,QAAQ,QAAQ;GAAQ,GAAI,QAAQ,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK,QAAQ,IAAI;EAAG;CAAE;AAClI"}