switchroom 0.19.18 → 0.19.22

package/dist/vault/approvals/kernel-server.js

@@ -18546,7 +18546,8 @@ var ApprovalDecisionMetaSchema = exports_external.object({
   ttl_expires_at: exports_external.number().nullable(),
   last_used_at: exports_external.number().nullable(),
   revoked_at: exports_external.number().nullable(),
-  revoke_reason: exports_external.string().nullable()
+  revoke_reason: exports_external.string().nullable(),
+  origin: exports_external.enum(["agent", "operator"]).optional()
 });
 var OkApprovalLookupResponseSchema = exports_external.object({
   ok: exports_external.literal(true),
@@ -18710,6 +18711,7 @@ function migrateApprovalSchema(db) {
 var DEFAULT_MAX_TTL_LIFETIME_MS = 7 * 24 * 60 * 60 * 1000;
 
 // src/vault/approvals/kernel.ts
+var ALLOW_ONCE_CONSUMED_REASON = "allow_once_consumed";
 function generateRequestId() {
   return randomBytes(16).toString("hex");
 }
@@ -18857,6 +18859,38 @@ function evaluateDecisionRow(db, row, currentCanonical, opts, now) {
   if (decision.decision === "deny") {
     return { state: "denied", decision };
   }
+  if (decision.decision === "allow_once") {
+    const burn = db.run(`UPDATE approval_decisions
+       SET last_used_at = ?, revoked_at = ?, revoke_reason = ?
+       WHERE id = ? AND revoked_at IS NULL`, [now, now, ALLOW_ONCE_CONSUMED_REASON, decision.id]);
+    if ((burn.changes ?? 0) === 0) {
+      audit(db, "deny", {
+        agent_unit: decision.agent_unit,
+        scope: decision.scope,
+        action: decision.action,
+        decision_id: decision.id,
+        context: { reason: ALLOW_ONCE_CONSUMED_REASON }
+      });
+      return { state: "denied", decision };
+    }
+    decision.last_used_at = now;
+    decision.revoked_at = now;
+    decision.revoke_reason = ALLOW_ONCE_CONSUMED_REASON;
+    audit(db, "match", {
+      agent_unit: decision.agent_unit,
+      scope: decision.scope,
+      action: decision.action,
+      decision_id: decision.id
+    });
+    audit(db, "revoke", {
+      agent_unit: decision.agent_unit,
+      scope: decision.scope,
+      action: decision.action,
+      decision_id: decision.id,
+      context: { actor: "kernel", reason: ALLOW_ONCE_CONSUMED_REASON }
+    });
+    return { state: "granted", decision };
+  }
   if (decision.decision === "allow_ttl") {
     const maxLifetime = opts.max_ttl_lifetime_ms ?? DEFAULT_MAX_TTL_LIFETIME_MS;
     const hardCap = decision.granted_at + maxLifetime;
@@ -18925,7 +18959,8 @@ function consumeNonce(db, request_id, now = Date.now()) {
 }
 function recordDecision(db, input, now = Date.now()) {
   const id = randomUUID();
-  const ttl_expires_at = input.decision === "allow_ttl" && input.ttl_ms ? now + input.ttl_ms : null;
+  const maxLifetime = input.max_ttl_lifetime_ms ?? DEFAULT_MAX_TTL_LIFETIME_MS;
+  const ttl_expires_at = input.decision === "allow_ttl" && input.ttl_ms ? now + Math.min(input.ttl_ms, maxLifetime) : null;
   const canonical = canonicalizeApproverSet(input.approver_set);
   db.run(`INSERT INTO approval_decisions
        (id, agent_unit, scope, action, decision,
@@ -19112,6 +19147,47 @@ for (const name of SHARED_FRAGMENTS) {
   }
 }
 
+// src/litellm/timeout-budget.ts
+var LITELLM_ROUTER_MARGIN_S = 10;
+var LITELLM_TIMEOUT_TIERS = {
+  interactive: {
+    group: "gpt-oss-20b",
+    localTimeoutS: 90,
+    fallbackGroup: "gpt-oss-20b-openrouter",
+    fallbackTimeoutS: 60
+  },
+  retain: {
+    group: "gpt-oss-20b-retain",
+    localTimeoutS: 200,
+    fallbackGroup: "gpt-oss-20b-retain-openrouter",
+    fallbackTimeoutS: 90
+  },
+  consolidation: {
+    group: "gpt-oss-20b-consolidation",
+    localTimeoutS: 200,
+    fallbackGroup: "gpt-oss-20b-consolidation-openrouter",
+    fallbackTimeoutS: 90
+  }
+};
+function litellmChainSeconds(tier) {
+  assertPositive(tier.localTimeoutS, `${tier.group} localTimeoutS`);
+  if (tier.fallbackGroup === null)
+    return tier.localTimeoutS;
+  assertPositive(tier.fallbackTimeoutS, `${tier.fallbackGroup} fallbackTimeoutS`);
+  return tier.localTimeoutS + tier.fallbackTimeoutS;
+}
+function minimumClientBudgetSeconds(tier, marginS = LITELLM_ROUTER_MARGIN_S) {
+  return litellmChainSeconds(tier) + marginS;
+}
+function clientBudgetSeconds(tier, floorS = 0, marginS = LITELLM_ROUTER_MARGIN_S) {
+  return Math.max(Math.ceil(floorS), minimumClientBudgetSeconds(tier, marginS));
+}
+function assertPositive(value, label) {
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new Error(`litellm timeout budget: ${label} must be a positive number, got ${value}`);
+  }
+}
+
 // src/setup/hindsight.ts
 var HINDSIGHT_DEFAULT_API_PORT = 18888;
 var HINDSIGHT_DEFAULT_MCP_URL = `http://127.0.0.1:${HINDSIGHT_DEFAULT_API_PORT}/mcp/`;
@@ -19121,8 +19197,21 @@ var HINDSIGHT_IMAGE_REPO = "ghcr.io/switchroom/switchroom-hindsight";
 var HINDSIGHT_IMAGE = `${HINDSIGHT_IMAGE_REPO}:latest`;
 var HINDSIGHT_BROKER_SOCK_VOLUME = `auth-broker-${HINDSIGHT_CONSUMER_NAME}-sock`;
 var HINDSIGHT_CREDS_MIRROR_VOLUME = `consumer-creds-${HINDSIGHT_CONSUMER_NAME}`;
+var HINDSIGHT_DEFAULT_RETAIN_MAX_COMPLETION_TOKENS = 16384;
+var HINDSIGHT_RETAIN_MIN_TOKENS_PER_SECOND = 80.6;
+function hindsightRetainLlmTimeoutSeconds(maxCompletionTokens = HINDSIGHT_DEFAULT_RETAIN_MAX_COMPLETION_TOKENS, tokensPerSecond = HINDSIGHT_RETAIN_MIN_TOKENS_PER_SECOND) {
+  if (!(maxCompletionTokens > 0) || !(tokensPerSecond > 0)) {
+    throw new Error(`hindsight retain budget: maxCompletionTokens (${maxCompletionTokens}) and ` + `tokensPerSecond (${tokensPerSecond}) must both be positive`);
+  }
+  return Math.ceil(maxCompletionTokens / tokensPerSecond);
+}
+function hindsightRetainClientTimeoutSeconds() {
+  return clientBudgetSeconds(LITELLM_TIMEOUT_TIERS.retain, hindsightRetainLlmTimeoutSeconds());
+}
+var HINDSIGHT_RETAIN_CLIENT_DEADLINE_S = hindsightRetainClientTimeoutSeconds() + LITELLM_ROUTER_MARGIN_S;
 var HINDSIGHT_HEALTHCHECK_PY = 'import urllib.request,sys; sys.exit(0 if urllib.request.urlopen("http://localhost:8888/health",timeout=4).getcode()==200 else 1)';
 var HINDSIGHT_HEALTHCHECK_CMD = `python3 -c '${HINDSIGHT_HEALTHCHECK_PY}'`;
+var DOCKER_PROBE_TIMEOUT_MS = 60 * 1000;
 
 // src/memory/hindsight.ts
 var DEFAULT_RETAIN_MISSION = "Extract durable facts that will still be true and useful weeks from now: " + "user preferences and standing rules, ongoing projects and recurring " + "commitments, technical and architectural decisions with their rationale, " + "and people/tool relationships. A preference revealed by a request is " + "durable — record the preference (what the user likes, wants, or always " + `does), not the request itself.
@@ -19385,6 +19474,9 @@ function handleConnection(socket, agent, db, isOperator = false) {
 }
 var KERNEL_OPERATOR_NAME = "operator";
 var OPERATOR_ALLOWED_OPS = new Set(["approval_list"]);
+function listenerOrigin(isOperator) {
+  return isOperator ? "operator" : "agent";
+}
 function handleRequest(socket, req, agent, db, peerUid, isOperator = false) {
   if (isOperator && !OPERATOR_ALLOWED_OPS.has(req.op)) {
     socket.write(encodeResponse(errorResponse("DENIED", `kernel operator socket is read-only: '${req.op}' is not permitted (only ${[...OPERATOR_ALLOWED_OPS].join(", ")})`)));
@@ -19445,7 +19537,8 @@ function handleRequest(socket, req, agent, db, peerUid, isOperator = false) {
       ttl_expires_at: r.decision.ttl_expires_at,
       last_used_at: r.decision.last_used_at,
       revoked_at: r.decision.revoked_at,
-      revoke_reason: r.decision.revoke_reason
+      revoke_reason: r.decision.revoke_reason,
+      origin: r.decision.origin
     } : null;
     socket.write(encodeResponse({ ok: true, state: r.state, decision }));
     return;
@@ -19472,7 +19565,8 @@ function handleRequest(socket, req, agent, db, peerUid, isOperator = false) {
       ttl_expires_at: r.decision.ttl_expires_at,
       last_used_at: r.decision.last_used_at,
       revoked_at: r.decision.revoked_at,
-      revoke_reason: r.decision.revoke_reason
+      revoke_reason: r.decision.revoke_reason,
+      origin: r.decision.origin
     } : null;
     socket.write(encodeResponse({ ok: true, state: r.state, decision }));
     return;
@@ -19534,7 +19628,8 @@ function handleRequest(socket, req, agent, db, peerUid, isOperator = false) {
       decision: req.decision,
       approver_set: req.approver_set,
       granted_by_user_id: req.granted_by_user_id,
-      ttl_ms: req.ttl_ms ?? undefined
+      ttl_ms: req.ttl_ms ?? undefined,
+      origin: listenerOrigin(isOperator)
     });
     socket.write(encodeResponse({ ok: true, decision_id }));
     return;
@@ -19553,7 +19648,8 @@ function handleRequest(socket, req, agent, db, peerUid, isOperator = false) {
       decision: req.decision,
       approver_set: req.approver_set,
       granted_by_user_id: req.granted_by_user_id,
-      ttl_ms: req.ttl_ms ?? undefined
+      ttl_ms: req.ttl_ms ?? undefined,
+      origin: listenerOrigin(isOperator)
     });
     if (!res.consumed) {
       socket.write(encodeResponse({ ok: true, consumed: false }));
@@ -19571,7 +19667,16 @@ function handleRequest(socket, req, agent, db, peerUid, isOperator = false) {
     return;
   }
   if (req.op === "approval_list") {
-    const decisions = listDecisions(db, { agent_unit: req.agent_unit });
+    let listFilter = { agent_unit: req.agent_unit };
+    if (!isOperator) {
+      const acl = checkApprovalAclByAgent(agent, req.agent_unit ?? agent);
+      if (!acl.allow) {
+        socket.write(encodeResponse(errorResponse("DENIED", acl.reason)));
+        return;
+      }
+      listFilter = { agent_unit: agent };
+    }
+    const decisions = listDecisions(db, listFilter);
     const meta = decisions.map((d) => ({
       id: d.id,
       agent_unit: d.agent_unit,
@@ -19733,6 +19838,7 @@ if (import.meta.url === `file://${process.argv[1]}` && /(?:^|[/\\])(?:vault[/\\]
 export {
   openKernelDb,
   main,
+  listenerOrigin,
   bootstrap,
   KERNEL_OPERATOR_NAME
 };