talon-agent 3.0.5 → 3.1.1

package/src/frontend/native/server.ts

@@ -25,7 +25,7 @@ import { createHash, timingSafeEqual } from "node:crypto";
 import { createReadStream } from "node:fs";
 import { stat } from "node:fs/promises";
 import { extname } from "node:path";
-import { log, logError, logDebug } from "../../util/log.js";
+import { log, logError, logDebug, logWarn } from "../../util/log.js";
 import { formatFingerprint, type BridgeTlsIdentity } from "./tls.js";
 import {
   BRIDGE_PROTOCOL_VERSION,
@@ -149,12 +149,32 @@ const MAX_BODY_BYTES = 256 * 1024;
 const MAX_UPLOAD_BYTES = 25 * 1024 * 1024;
 const PORT_FALLBACKS = 5;
 
+// Failed-auth lockout: after this many wrong tokens from one address inside
+// the window, that address gets 429s until the window lapses. The token's
+// 256 bits make brute force hopeless anyway — this is about not letting an
+// internet-facing bridge be hammered for free (and giving fail2ban-style
+// tooling a clean signal in the log). Only *presented-and-wrong* secrets
+// count: tokenless probes are just scanners finding a locked door.
+const AUTH_LOCKOUT_MAX_FAILURES = 20;
+const AUTH_LOCKOUT_WINDOW_MS = 15 * 60 * 1000;
+/** Hard cap on tracked addresses so the map can't become a memory lever. */
+const AUTH_LOCKOUT_MAX_TRACKED = 10_000;
+
+/**
+ * ok: request carries the right token (or none is required).
+ * anonymous: no credential presented — a pre-pairing probe, not an attack.
+ * bad: a credential was presented and it is wrong.
+ */
+type AuthState = "ok" | "anonymous" | "bad";
+
 export class BridgeServer {
   private server: Server | null = null;
   private clients = new Set<ServerResponse>();
   private pingTimer: ReturnType<typeof setInterval> | undefined;
   private port = 0;
   private tlsIdentity: BridgeTlsIdentity | null = null;
+  /** Wrong-token counts per remote address (behind a proxy: per proxy). */
+  private authFailures = new Map<string, { count: number; resetAt: number }>();
 
   constructor(
     private readonly opts: {
@@ -311,21 +331,43 @@ export class BridgeServer {
       return;
     }
 
+    const remote = req.socket.remoteAddress ?? "unknown";
+    if (this.authLockedOut(remote)) {
+      res.writeHead(429, {
+        ...this.jsonHeaders(),
+        "Retry-After": String(Math.ceil(AUTH_LOCKOUT_WINDOW_MS / 1000)),
+      });
+      res.end(
+        JSON.stringify({ ok: false, error: "Too many failed auth attempts" }),
+      );
+      return;
+    }
+
+    const auth = this.authState(req, url);
+    if (auth === "bad") this.recordAuthFailure(remote);
+    else if (auth === "ok") this.authFailures.delete(remote);
+
     // /health is unauthenticated so clients can discover/ping the bridge
-    // before they hold a token. It exposes no chat content.
+    // before they hold a token. Pre-auth it serves only what pairing needs
+    // (identity, protocol, fingerprint) — operational details like bot name,
+    // backend, and chat count are not for internet scanners to enumerate.
     if (method === "GET" && path === "/health") {
-      const s = this.handlers.status();
-      return this.json(res, 200, {
+      const base = {
         app: "talon-bridge",
         ok: true,
         protocol: BRIDGE_PROTOCOL_VERSION,
-        host: this.opts.host,
         port: this.port,
         scheme: this.getScheme(),
         // The certificate's own hash — public by definition (any TLS client
         // sees the certificate), surfaced so pairing UIs can display it.
         fingerprint: this.getFingerprint(),
         authRequired: Boolean(this.opts.token),
+      };
+      if (auth !== "ok") return this.json(res, 200, base);
+      const s = this.handlers.status();
+      return this.json(res, 200, {
+        ...base,
+        host: this.opts.host,
         startedAt: this.opts.startedAt,
         botName: s.botName,
         backend: s.backend,
@@ -335,7 +377,7 @@ export class BridgeServer {
       });
     }
 
-    if (!this.authOk(req, url)) {
+    if (auth !== "ok") {
       return this.json(res, 401, { ok: false, error: "Unauthorized" });
     }
 
@@ -677,17 +719,54 @@ export class BridgeServer {
 
   // ── Helpers ──────────────────────────────────────────────────────────────
 
-  private authOk(req: IncomingMessage, url: URL): boolean {
-    if (!this.opts.token) return true;
+  private authState(req: IncomingMessage, url: URL): AuthState {
+    if (!this.opts.token) return "ok";
     const header = req.headers["authorization"];
-    if (
-      typeof header === "string" &&
-      header.startsWith("Bearer ") &&
-      this.tokenMatches(header.slice("Bearer ".length))
-    )
-      return true;
+    const fromHeader =
+      typeof header === "string" && header.startsWith("Bearer ")
+        ? header.slice("Bearer ".length)
+        : null;
     // EventSource can't set headers, so SSE clients pass ?token=… instead.
-    return this.tokenMatches(url.searchParams.get("token"));
+    const candidate = fromHeader ?? url.searchParams.get("token");
+    if (candidate === null) return "anonymous";
+    return this.tokenMatches(candidate) ? "ok" : "bad";
+  }
+
+  private authLockedOut(remote: string): boolean {
+    const entry = this.authFailures.get(remote);
+    if (!entry) return false;
+    if (Date.now() >= entry.resetAt) {
+      this.authFailures.delete(remote);
+      return false;
+    }
+    return entry.count >= AUTH_LOCKOUT_MAX_FAILURES;
+  }
+
+  private recordAuthFailure(remote: string): void {
+    const now = Date.now();
+    const entry = this.authFailures.get(remote);
+    if (!entry || now >= entry.resetAt) {
+      if (this.authFailures.size >= AUTH_LOCKOUT_MAX_TRACKED) {
+        for (const [ip, e] of this.authFailures) {
+          if (now >= e.resetAt) this.authFailures.delete(ip);
+        }
+        // Still saturated after pruning live entries — under that much churn
+        // dropping the newest attacker beats unbounded growth.
+        if (this.authFailures.size >= AUTH_LOCKOUT_MAX_TRACKED) return;
+      }
+      this.authFailures.set(remote, {
+        count: 1,
+        resetAt: now + AUTH_LOCKOUT_WINDOW_MS,
+      });
+      return;
+    }
+    entry.count++;
+    if (entry.count === AUTH_LOCKOUT_MAX_FAILURES) {
+      logWarn(
+        "native",
+        `Bridge auth lockout for ${remote} (${AUTH_LOCKOUT_MAX_FAILURES} wrong tokens in ${AUTH_LOCKOUT_WINDOW_MS / 60_000}m)`,
+      );
+    }
   }
 
   /**
@@ -708,6 +787,8 @@ export class BridgeServer {
       "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
       "Access-Control-Allow-Headers": "Authorization, Content-Type",
       "Access-Control-Max-Age": "86400",
+      // Every response states its type; never let a browser guess one.
+      "X-Content-Type-Options": "nosniff",
     };
   }
 

package/src/frontend/telegram/callbacks/model.ts

@@ -11,8 +11,8 @@ import type { Context } from "grammy";
 import {
   setChatModelForBackend,
   setChatBackend,
-  resolveModelName,
 } from "../../../storage/chat-settings.js";
+import { resolveModelId as resolveModelName } from "../../../core/models/catalog.js";
 import { resetSession } from "../../../storage/sessions.js";
 import { clearHistory } from "../../../storage/history.js";
 import {

package/src/frontend/telegram/commands/admin.ts

@@ -211,7 +211,7 @@ export function registerAdminCommands(
   }
 
   // Unknown /command → "did you mean ...?" via the C similarity core
-  // (native/strsim-c). Registered after every real command, so grammY
+  // (native/strsim-wasm). Registered after every real command, so grammY
   // only reaches this when nothing above matched. Only bare commands
   // are intercepted — a close miss gets a suggestion, anything else
   // keeps flowing to the agent as a normal message.

package/src/frontend/telegram/commands/settings.ts

@@ -9,9 +9,9 @@ import {
   setChatBackend,
   setChatEffort,
   setChatPulseInterval,
-  resolveModelName,
   type EffortLevel,
 } from "../../../storage/chat-settings.js";
+import { resolveModelId as resolveModelName } from "../../../core/models/catalog.js";
 import {
   registerChat,
   disablePulse,

package/src/frontend/telegram/formatting.ts

@@ -18,7 +18,7 @@ export function splitMessage(text: string, max: number): string[] {
 /**
  * Escape HTML special characters for Telegram HTML parse mode.
  * Must be applied to all text that is NOT inside an HTML tag.
- * Delegates to the C++ core (native/htmlents-cpp): one pass over the
+ * Delegates to the Rust core (native/htmlents-wasm): one pass over the
  * bytes instead of the five chained regex passes this replaces.
  */
 export function escapeHtml(text: string): string {

package/src/frontend/terminal/commands.ts

@@ -20,8 +20,8 @@ import {
   getChatSettings,
   setChatModel,
   setChatEffort,
-  resolveModelName,
 } from "../../storage/chat-settings.js";
+import { resolveModelId as resolveModelName } from "../../core/models/catalog.js";
 import {
   getAllSessions,
   getSession,

package/src/native/htmlents-wasm-bytes.ts

@@ -1,7 +1,7 @@
 // Generated by native/shared/build-lib.mjs — do not edit by hand.
-// Rebuild with `npm run build:cpp` after changing the source.
-// Source: native/htmlents-cpp (1448 bytes of wasm32-freestanding).
+// Rebuild with `npm run build:wasm` after changing the source.
+// Source: native/htmlents-wasm (1195 bytes of wasm32-unknown-unknown).
 
-/** native/htmlents-cpp artifact, base64-encoded. Decoded + instantiated lazily by src/native/htmlents.ts. */
+/** native/htmlents-wasm artifact, base64-encoded. Decoded + instantiated lazily by src/native/htmlents.ts. */
 export const HTMLENTS_WASM_BASE64 =
-  "AGFzbQEAAAABEQNgAX8Bf2ACf38AYAJ/fwF/AwQDAAECBAUBcAEBAQUDAQARBgkBfwFBgIDAAAsHKgQGbWVtb3J5AgAFYWxsb2MAAAdkZWFsbG9jAAELZXNjYXBlX2h0bWwAAgruCQOPAQEDfwJAIAANAEEADwtBACEBQQBBACgCyIDAgAAiAkHQgMCAACACG0EHakF4cSICNgLIgMCAAAJAIAIgAGoiACACSQ0AAkAgAD8AQRB0IgNNDQAgACADa0H//wNqQRB2QABBf0YNAQtBACAANgLIgMCAAEEAQQAoAsyAwIAAQQFqNgLMgMCAACACIQELIAELQAACQCAARQ0AIAFFDQBBACgCzIDAgAAiAEUNAEEAIABBf2oiADYCzIDAgAAgAA0AQQBB0IDAgAA2AsiAwIAACwuZCAEJf0EAIQICQAJAIAENAEEMIQNBACEEDAELIAFBAXEhBQJAAkAgAUEBRw0AQQAhBEEAIQMMAQsgAUF+cSEGQQAhBEEAIQMDQEGAgMCAACEHQQEhCEEBIQkCQAJAAkACQAJAAkAgACADaiIKLQAAQV5qDh0CBQUFBAMFBQUFBQUFBQUFBQUFBQUFBQUFBQAFAQULQaiAwIAAIQcMAwtBsIDAgAAhBwwCC0G4gMCAACEHDAELQcCAwIAAIQcLIAcoAgQhCQsgCSAEaiEHQYCAwIAAIQkCQAJAAkACQAJAAkAgCkEBai0AAEFeag4dAQUFBQQABQUFBQUFBQUFBQUFBQUFBQUFBQUDBQIFC0HAgMCAACEJDAMLQbiAwIAAIQkMAgtBsIDAgAAhCQwBC0GogMCAACEJCyAJKAIEIQgLIAggB2ohBCAGIANBAmoiA0cNAAsLAkAgBUUNAEGAgMCAACEJQQEhCAJAAkACQAJAAkACQCAAIANqLQAAQV5qDh0BBQUFBAAFBQUFBQUFBQUFBQUFBQUFBQUFBQMFAgULQcCAwIAAIQkMAwtBuIDAgAAhCQwCC0GwgMCAACEJDAELQaiAwIAAIQkLIAkoAgQhCAsgCCAEaiEECyAEQQxqIgMNAEEADwtBAEEAKALIgMCAACIIQdCAwIAAIAgbQQdqQXhxIgU2AsiAwIAAAkAgBSADaiIIIAVJDQACQCAIPwBBEHQiCU0NACAIIAlrQf//A2pBEHZAAEF/Rg0BC0EAIQJBACAINgLIgMCAAEEAQQAoAsyAwIAAQQFqNgLMgMCAACAFRQ0AIAUgBDoACCAFQQE2AgQgBSADOgAAIAUgBEEYdjoACyAFIARBEHY6AAogBSAEQQh2OgAJIAUgA0EYdjoAAyAFIANBEHY6AAIgBSADQQh2OgABAkAgAUUNACAFQQxqIQNBACECA0BBgIDAgAAhCAJAAkACQAJAAkACQAJAIAAgAmotAAAiCUFeag4dAgUFBQQDBQUFBQUFBQUFBQUFBQUFBQUFBQUABQEFC0GogMCAACEIDAMLQbCAwIAAIQgMAgtBuIDAgAAhCAwBC0HAgMCAACEICyAIKAIEIglFDQEgCUEDcSEEIAgoAgAhCkEAIQgCQCAJQQRJDQAgCUF8cSEGQQAhCANAIAMgCGoiCSAKIAhqIgctAAA6AAAgCUEBaiAHQQFqLQAAOgAAIAlBAmogB0ECai0AADoAACAJQQNqIAdBA2otAAA6AAAgBiAIQQRqIghHDQALIAMgCGohAwsgBEUNASAKIAhqIQgDQCADIAgtAAA6AAAgCEEBaiEIIANBAWohAyAEQX9qIgQNAAwCCwsgAyAJOgAAIANBAWohAwsgAkEBaiICIAFHDQALCyAFIQILIAILC1EBAEGAgMAAC0gZABAABQAAACZxdW90OwAmbHQ7ACZndDsAJmFtcDsAJiMzOTsAAAAADwAQAAQAAAAUABAABAAAAAgAEAAGAAAAHwAQAAUAAAA=";
+  "AGFzbQEAAAABKQdgBX9/f39/AGADf39/AGACf38AYAR/f39/AGABfwF/YAJ/fwF/YAAAAwsKAAECAwIEAgUCBgUDAQARBhkDfwFBgIDAAAt/AEGggMAAC38AQaCAwAALB0UGBm1lbW9yeQIABWFsbG9jAAULX19oZWFwX2Jhc2UDAQdkZWFsbG9jAAYLZXNjYXBlX2h0bWwABwpfX2RhdGFfZW5kAwIK3gcKNQACQCACIAFJDQAgAiAESw0AIAAgAiABazYCBCAAIAMgAWo2AgAPCyABIAIgBBCBgICAAAALCQAQiYCAgAAAC40BAQJ/QQAhAgJAAkACQAJAAkACQAJAAkAgAUH/AXEiAUFeag4GBAcHBwEFAAsgAUFEag4DAQYCBgtBgIDAgAAhAgwEC0GFgMCAACECQQQhAwwEC0GJgMCAACECQQQhAwwDC0GNgMCAACECQQYhAwwCC0GTgMCAACECC0EFIQMLIAAgAzYCBCAAIAI2AgALKgACQCABIANHDQACQCABRQ0AIAAgAiAB/AoAAAsPCyABIAMQhICAgAAACwkAEImAgIAAAAuiAQEDfwJAIAANAEEADwtBACEBAkBBACgCmIDAgAAiAg0AQaCAwIAAIQJBAEGggMCAADYCmIDAgAALAkACQCACQQdqQXhxIgIgAGoiACACSQ0AIAA/AEEQdCIDTQ0BQQAhASAAIANrQRB2IABB//8DcUEAR2pAAEF/Rw0BCyABDwtBACAANgKYgMCAAEEAQQAoApyAwIAAQQFqNgKcgMCAACACC0AAAkAgAEUNACABRQ0AQQAoApyAwIAAIgBFDQBBACAAQX9qIgA2ApyAwIAAIAANAEEAQaCAwIAANgKYgMCAAAsL5AMBB38jgICAgABBwABrIgIkgICAgABBACEDQQAhBAJAIAFFDQBBACEEIAAhBSABIQYDQCACQTBqIAUtAAAQgoCAgAAgAigCNEEBIAIoAjAbIARqIQQgBUEBaiEFIAZBf2oiBg0ACwtBDCEFAkAgBEEMaiIHEIWAgIAAIghFDQAgAEEBIAEbIQYgAkEoakEAQQQgCCAHEICAgIAAIAIoAiwhAyACKAIoIQAgAiAHNgI8IAAgAyACQTxqQQQQg4CAgAAgAkEgakEEQQggCCAHEICAgIAAIAIoAiQhAyACKAIgIQAgAkEBNgI8IAAgAyACQTxqQQQQg4CAgAAgAkEYakEIQQwgCCAHEICAgIAAIAIoAhwhAyACKAIYIQAgAiAENgI8IAAgAyACQTxqQQQQg4CAgAADQAJAAkACQCABRQ0AIAJBEGogBi0AACIDEIKAgIAAIAIoAhAiBEUNASACQQhqIAUgAigCFCIDIAVqIgAgCCAHEICAgIAAIAIoAgggAigCDCAEIAMQg4CAgAAgACEFDAILIAghAwwDCwJAIAUgB08NACAIIAVqIAM6AAAgBUEBaiEFDAELIAUgBxCIgICAAAALIAZBAWohBiABQX9qIQEMAAsLIAJBwABqJICAgIAAIAMLCQAQiYCAgAAACwMAAAsLIQEAQYCAwAALGCZhbXA7Jmx0OyZndDsmcXVvdDsmIzM5Ow==";

package/src/native/htmlents.ts

@@ -1,10 +1,10 @@
 /**
- * HTML entity escaping — TypeScript boundary over the C++ wasm module.
+ * HTML entity escaping — TypeScript boundary over the Rust wasm module.
  *
  * One single-pass escaper for Telegram HTML parse mode, replacing the
  * five chained regex passes it supersedes. Every outbound Telegram
- * render flows through here (frontend/telegram/formatting.ts). The C++
- * source lives in native/htmlents-cpp and exports a three-function
+ * render flows through here (frontend/telegram/formatting.ts). The Rust
+ * source lives in native/htmlents-wasm and exports a three-function
  * C ABI (alloc / dealloc / escape_html) — see that module's README for
  * the contract, and src/native/runtime.ts for the embedding and memory
  * conventions shared by every native module.
@@ -24,7 +24,7 @@ import {
   type WasmCoreExports,
 } from "./runtime.js";
 
-/** The C-ABI surface exported by native/htmlents-cpp. */
+/** The C-ABI surface exported by native/htmlents-wasm. */
 interface HtmlentsExports extends WasmCoreExports {
   escape_html(inputPtr: number, len: number): number;
 }

package/src/native/registry.ts

@@ -75,9 +75,9 @@ export const NATIVE_MODULES: readonly NativeModuleSpec[] = [
   },
   {
     name: "strsim",
-    language: "C",
-    target: "wasm32-freestanding",
-    sourceDir: "native/strsim-c",
+    language: "Rust",
+    target: "wasm32-unknown-unknown",
+    sourceDir: "native/strsim-wasm",
     sizeBytes: async () =>
       base64ByteLength(
         (await import("./strsim-wasm-bytes.js")).STRSIM_WASM_BASE64,
@@ -90,9 +90,9 @@ export const NATIVE_MODULES: readonly NativeModuleSpec[] = [
   },
   {
     name: "sqlguard",
-    language: "C",
-    target: "wasm32-freestanding",
-    sourceDir: "native/sqlguard-c",
+    language: "Rust",
+    target: "wasm32-unknown-unknown",
+    sourceDir: "native/sqlguard-wasm",
     sizeBytes: async () =>
       base64ByteLength(
         (await import("./sqlguard-wasm-bytes.js")).SQLGUARD_WASM_BASE64,
@@ -107,9 +107,9 @@ export const NATIVE_MODULES: readonly NativeModuleSpec[] = [
   },
   {
     name: "htmlents",
-    language: "C++",
-    target: "wasm32-freestanding",
-    sourceDir: "native/htmlents-cpp",
+    language: "Rust",
+    target: "wasm32-unknown-unknown",
+    sourceDir: "native/htmlents-wasm",
     sizeBytes: async () =>
       base64ByteLength(
         (await import("./htmlents-wasm-bytes.js")).HTMLENTS_WASM_BASE64,

package/src/native/runtime.ts

@@ -2,8 +2,8 @@
  * Embedded-wasm runtime — the one place that knows how Talon's native
  * modules cross the JS boundary.
  *
- * Every wasm module in the native plane (Rust blake3, Zig textops,
- * C strsim, C++ htmlents) follows the same contract:
+ * Every wasm module in the native plane (Rust blake3, strsim,
+ * sqlguard, htmlents; Zig textops) follows the same contract:
  *
  *   - The artifact ships as base64 inside a generated `*-bytes.ts`
  *     module, so it survives `bun build --compile` single binaries —

package/src/native/sqlguard-wasm-bytes.ts

@@ -1,7 +1,7 @@
 // Generated by native/shared/build-lib.mjs — do not edit by hand.
-// Rebuild with `npm run build:c` after changing the source.
-// Source: native/sqlguard-c (2252 bytes of wasm32-freestanding).
+// Rebuild with `npm run build:wasm` after changing the source.
+// Source: native/sqlguard-wasm (1805 bytes of wasm32-unknown-unknown).
 
-/** native/sqlguard-c artifact, base64-encoded. Decoded + instantiated lazily by src/native/sqlguard.ts. */
+/** native/sqlguard-wasm artifact, base64-encoded. Decoded + instantiated lazily by src/native/sqlguard.ts. */
 export const SQLGUARD_WASM_BASE64 =
-  "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";
+  "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";

package/src/native/sqlguard.ts

@@ -6,7 +6,7 @@
  * pattern for a LIKE search (get_user_messages), and `ftsQuote` turns
  * free-form text into a literal FTS5 MATCH expression (search_history).
  *
- * The C source lives in native/sqlguard-c and exports a four-function
+ * The Rust source lives in native/sqlguard-wasm and exports a four-function
  * C ABI (alloc / dealloc / escape_like / fts_quote) — see that module's
  * README for the contract, and src/native/runtime.ts for the embedding
  * and memory conventions shared by every native module.
@@ -27,7 +27,7 @@ import {
 } from "./runtime.js";
 import { SQLGUARD_WASM_BASE64 } from "./sqlguard-wasm-bytes.js";
 
-/** The C-ABI surface exported by native/sqlguard-c. */
+/** The C-ABI surface exported by native/sqlguard-wasm. */
 interface SqlguardExports extends WasmCoreExports {
   escape_like(inputPtr: number, len: number): number;
   fts_quote(inputPtr: number, len: number): number;

package/src/native/strsim-wasm-bytes.ts

@@ -1,7 +1,7 @@
 // Generated by native/shared/build-lib.mjs — do not edit by hand.
-// Rebuild with `npm run build:c` after changing the source.
-// Source: native/strsim-c (775 bytes of wasm32-freestanding).
+// Rebuild with `npm run build:wasm` after changing the source.
+// Source: native/strsim-wasm (725 bytes of wasm32-unknown-unknown).
 
-/** native/strsim-c artifact, base64-encoded. Decoded + instantiated lazily by src/native/strsim.ts. */
+/** native/strsim-wasm artifact, base64-encoded. Decoded + instantiated lazily by src/native/strsim.ts. */
 export const STRSIM_WASM_BASE64 =
-  "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";
+  "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";

package/src/native/strsim.ts

@@ -2,8 +2,8 @@
  * String similarity — TypeScript boundary over the C wasm module.
  *
  * Powers "did you mean ...?" suggestions for unknown Telegram slash
- * commands and unknown CLI subcommands. The C source lives in
- * native/strsim-c and exports a three-function C ABI (alloc / dealloc /
+ * commands and unknown CLI subcommands. The Rust source lives in
+ * native/strsim-wasm and exports a three-function C ABI (alloc / dealloc /
  * levenshtein) — see that module's README for the contract, and
  * src/native/runtime.ts for the embedding and memory conventions
  * shared by every native module.
@@ -29,7 +29,7 @@ import {
 /** Returned by the wasm side when either input exceeds its DP buffer. */
 const OVERFLOW = 0xffffffff;
 
-/** The C-ABI surface exported by native/strsim-c. */
+/** The C-ABI surface exported by native/strsim-wasm. */
 interface StrsimExports extends WasmCoreExports {
   levenshtein(aPtr: number, aLen: number, bPtr: number, bLen: number): number;
 }

package/src/plugins/github/index.ts

@@ -12,7 +12,7 @@
  */
 
 import { execFileSync } from "node:child_process";
-import type { TalonPlugin } from "../../core/plugin/index.js";
+import type { TalonPlugin } from "../../core/plugin/types.js";
 import { log, logWarn } from "../../util/log.js";
 
 /**

package/src/plugins/mem0/index.ts

@@ -21,7 +21,7 @@
 import { readFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import type { TalonPlugin } from "../../core/plugin/index.js";
+import type { TalonPlugin } from "../../core/plugin/types.js";
 import { log, logWarn } from "../../util/log.js";
 import { dirs } from "../../util/paths.js";
 

package/src/plugins/mempalace/index.ts

@@ -18,7 +18,7 @@ import { existsSync, mkdirSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { execFile as execFileCb, execFileSync } from "node:child_process";
 import { promisify } from "node:util";
-import type { TalonPlugin } from "../../core/plugin/index.js";
+import type { TalonPlugin } from "../../core/plugin/types.js";
 import { log, logWarn } from "../../util/log.js";
 import { dirs } from "../../util/paths.js";
 

package/src/plugins/playwright/index.ts

@@ -21,7 +21,7 @@
 
 import { existsSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
-import type { TalonPlugin } from "../../core/plugin/index.js";
+import type { TalonPlugin } from "../../core/plugin/types.js";
 import { log } from "../../util/log.js";
 
 export function createPlaywrightPlugin(config: {

package/src/storage/chat-settings.ts

@@ -22,63 +22,12 @@ import { recordError } from "../util/watchdog.js";
 import { files } from "../util/paths.js";
 import { importLegacyJson } from "./legacy-import.js";
 import * as repo from "./repositories/chat-settings-repo.js";
-import type { ReasoningEffortLevel } from "../core/types.js";
+import type { ReasoningEffortLevel } from "../types/effort.js";
 
 export type EffortLevel = ReasoningEffortLevel;
 
-export type ChatSettings = {
-  /**
-   * Per-backend model overrides for this chat. Keyed by backend id
-   * (`"claude"`, `"codex"`, `"openai-agents"`, etc). Each entry is the
-   * model id the user picked on that backend.
-   *
-   * Switching backends preserves each side's last pick — your Codex
-   * chat remembers `gpt-5.5`, your OpenRouter chat remembers
-   * `meta-llama/...`. Replaces the single legacy `model` field which
-   * couldn't differentiate per-backend choices and produced the
-   * orphan-bug class (model from backend X persisting when switching
-   * to backend Y).
-   *
-   * Resolution order (see `core/models/active-model.ts`):
-   *   1. `modelByBackend[activeBackend]` if it validates on the catalog
-   *   2. `backend.getDefaultModel()` (canonical for backends that have one)
-   *   3. `config.backendDefaults[activeBackend]` (operator override)
-   *   4. `config.model` (only when activeBackend === config.backend)
-   *   5. null → "No model selected" UI + send guard refuses.
-   */
-  modelByBackend?: Record<string, string>;
-  /**
-   * @deprecated Single-slot model field. Retained for back-compat with
-   * old stores; migrated into `modelByBackend` on load. New writes go
-   * through `setChatModelForBackend` instead.
-   */
-  model?: string;
-  /**
-   * Backend override for this chat. When set, queries from this chat
-   * route to the override backend instead of the global `config.backend`.
-   * The backend controller refcounts pool instances, so two chats on
-   * two different backends keep both alive concurrently.
-   *
-   * Stored as the registry id (e.g. `"claude"`, `"openai-agents"`).
-   * Cleared via `setChatBackend(cid, undefined)` — chat reverts to
-   * the global default.
-   */
-  backend?: string;
-  /** Effort level override (maps to SDK thinking + effort options). */
-  effort?: EffortLevel;
-  /** Whether pulse is enabled for this chat. */
-  pulse?: boolean;
-  /** Per-chat pulse check interval in milliseconds. */
-  pulseIntervalMs?: number;
-  /** Last message ID checked by pulse (persisted to avoid reprocessing on restart). */
-  pulseLastCheckMsgId?: number;
-  /**
-   * When true, the model picker filters to free-tier models by default.
-   * Only meaningful for backends that report free-tier metadata (currently
-   * `openai-agents` against OpenRouter); other backends ignore the flag.
-   */
-  freeOnly?: boolean;
-};
+export type { ChatSettings } from "./repositories/chat-settings-repo.js";
+import type { ChatSettings } from "./repositories/chat-settings-repo.js";
 
 // In-memory cache over the chat_settings table. Reads serve live
 // references from here; writes go through persist() so each mutation
@@ -488,9 +437,3 @@ export const EFFORT_LEVELS: EffortLevel[] = [
   "max",
   "xhigh",
 ];
-
-/**
- * Resolve a user-provided model name (alias or full ID) to the canonical model ID.
- * Delegates to the model registry; falls through unknown names unchanged.
- */
-export { resolveModelId as resolveModelName } from "../core/models/catalog.js";

package/src/storage/cron-store.ts

@@ -20,87 +20,13 @@ import { inTransaction } from "./db.js";
 import * as repo from "./repositories/cron-repo.js";
 import { nextDueMs, type CatchupPolicy } from "../native/scheduler-core.js";
 
-export type CronJobType = "message" | "query";
+export type {
+  CronJob,
+  CronJobType,
+  CronRunStatus,
+} from "./repositories/cron-repo.js";
 export type { CatchupPolicy };
-
-/** Outcome of the most recent execution — surfaced in list_cron_jobs. */
-export type CronRunStatus = "ok" | "error";
-
-export type CronJob = {
-  id: string;
-  chatId: string;
-  /**
-   * Cron expression (5-field: minute hour day month weekday). Optional — a job
-   * carries EITHER `schedule` (cron mode) OR `everyMs` (interval mode), never
-   * both. The store validator (`isCronJob`) enforces exactly one.
-   */
-  schedule?: string;
-  /**
-   * Fixed interval in milliseconds (interval mode). Mutually exclusive with
-   * `schedule`. The job fires roughly every `everyMs` after its anchor
-   * (`lastRunAt`, else `startAt`, else `createdAt`). Wires the native
-   * scheduler-core interval math (next-due + missed-run catch-up) directly.
-   */
-  everyMs?: number;
-  /** "message" sends content as text; "query" runs content as a Claude prompt with tools */
-  type: CronJobType;
-  /** The message text or query prompt */
-  content: string;
-  /** Human-readable name for the job */
-  name: string;
-  enabled: boolean;
-  createdAt: number;
-  lastRunAt?: number;
-  runCount: number;
-  /** IANA timezone (e.g. "America/New_York"). Defaults to system timezone. */
-  timezone?: string;
-  /**
-   * Optional model override for `query` jobs. Unset = the chat's model. `query`
-   * cron jobs run as an isolated one-shot (no chat session), so unlike triggers
-   * the model may be on a different provider — see `provider`.
-   */
-  model?: string;
-  /**
-   * Optional provider/backend id for the override (e.g. a cheaper provider than
-   * the chat). Requires `model`. Unset = the chat's backend. Since cron runs
-   * isolated, a different provider is fine here.
-   */
-  provider?: string;
-  /**
-   * Optional short brief that becomes the isolated agent's system prompt — what
-   * the job is and how to do it. Useful to orient a cheaper override model.
-   */
-  instructions?: string;
-  /**
-   * Don't fire before this epoch-ms instant (a delayed start / "not before").
-   * Unset = eligible immediately.
-   */
-  startAt?: number;
-  /**
-   * Don't fire after this epoch-ms instant; the job auto-disables once now
-   * passes it (a natural expiry / "until"). Unset = no end.
-   */
-  endAt?: number;
-  /**
-   * Auto-disable after this many total runs (`runCount >= maxRuns`). A value of
-   * 1 makes the job one-shot. Unset = unbounded.
-   */
-  maxRuns?: number;
-  /**
-   * Missed-run policy for runs that were due while Talon was down:
-   *   "skip" (default) — drop them, resume on the next due tick
-   *   "once"           — collapse any number of missed runs into a single catch-up
-   *   "all"            — replay every missed run, capped by CATCHUP_MAX
-   * Decided by the native scheduler-core `catchupRunCount`.
-   */
-  catchup?: CatchupPolicy;
-  /** Status of the most recent execution. */
-  lastStatus?: CronRunStatus;
-  /** Error message from the most recent failed execution (cleared on success). */
-  lastError?: string;
-  /** Wall-clock duration of the most recent execution, in ms. */
-  lastDurationMs?: number;
-};
+import type { CronJob, CronRunStatus } from "./repositories/cron-repo.js";
 
 /** Telemetry recorded after each execution attempt. */
 export type CronRunOutcome = {

package/src/storage/goal-store.ts

@@ -17,25 +17,16 @@
 import { randomUUID } from "node:crypto";
 import * as repo from "./repositories/goals-repo.js";
 
-export type GoalStatus = "active" | "paused" | "completed" | "abandoned";
-export type GoalPriority = "low" | "normal" | "high";
-
-export type Goal = {
-  id: string;
-  /** Chat the goal belongs to — progress reports route back here. */
-  chatId: string;
-  title: string;
-  description?: string;
-  status: GoalStatus;
-  priority: GoalPriority;
-  createdAt: number;
-  updatedAt: number;
-  /** Optional soft deadline (unix ms). */
-  dueAt?: number;
-  /** Rolling note from the last progress update. */
-  lastProgressNote?: string;
-  lastProgressAt?: number;
-};
+export type {
+  Goal,
+  GoalPriority,
+  GoalStatus,
+} from "./repositories/goals-repo.js";
+import type {
+  Goal,
+  GoalPriority,
+  GoalStatus,
+} from "./repositories/goals-repo.js";
 
 export const GOAL_STATUSES: readonly GoalStatus[] = [
   "active",