zooid 0.13.0 → 0.14.0

package/dist/index.d.ts

@@ -16,13 +16,13 @@ interface BuildAcpRegistryOptions {
     agentsDir?: string;
     /**
      * Per-spawn binding store for the zooid-context MCP server. When set
-     * together with `daemonSockPath`, agents bound to a transport that owns
+     * together with `daemonSockPaths`, agents bound to a transport that owns
      * conversation context get a `contextSpawn` factory threaded into their
      * AcpClient so `session/new mcpServers` includes the zooid-context entry.
      */
     contextSpawnRegistry?: SpawnRegistry;
-    /** Path to the daemon's context Unix socket. Passed to the MCP server bin. */
-    daemonSockPath?: string;
+    /** Agent → host path to that agent's context Unix socket. */
+    daemonSockPaths?: Record<string, string | undefined>;
     /**
      * Directory containing zooid.yaml. Required when any agent uses the
      * workspace auto-mount (the default under `runtime: docker | podman`):

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   buildAcpRegistry
-} from "./chunk-YZ4IO5MR.js";
+} from "./chunk-R5S26T7B.js";
 export {
   buildAcpRegistry
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zooid",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "An open-source, self-hostable chat app for collaborating with AI agents alongside your team. Any model, any CLI.",
   "type": "module",
   "license": "MIT",
@@ -25,7 +25,7 @@
     "access": "public"
   },
   "zooid": {
-    "webVersion": "0.11.0"
+    "webVersion": "0.12.0"
   },
   "engines": {
     "node": ">=22"
@@ -35,6 +35,7 @@
     "@inquirer/prompts": "^8.4.3",
     "cac": "^6.7.14",
     "chalk": "^5.4.1",
+    "croner": "^10.0.1",
     "hono": "^4.6.0",
     "listr2": "^8.2.5",
     "marked": "^18.0.4",
@@ -42,13 +43,14 @@
     "tar": "^7.5.16",
     "web-push": "^3.6.7",
     "yaml": "^2.5.0",
-    "@zooid/acp-client": "^0.13.0",
-    "@zooid/transport-matrix": "^0.13.0",
-    "@zooid/context-mcp": "^0.13.0",
-    "@zooid/core": "^0.13.0",
-    "@zooid/runtime-local": "^0.13.0",
-    "@zooid/runtime-docker": "^0.13.0",
-    "@zooid/transport-http": "^0.13.0"
+    "@zooid/acp-client": "^0.14.0",
+    "@zooid/core": "^0.14.0",
+    "@zooid/pi-extension": "^0.13.1",
+    "@zooid/runtime-docker": "^0.14.0",
+    "@zooid/context-mcp": "^0.14.0",
+    "@zooid/runtime-local": "^0.14.0",
+    "@zooid/transport-matrix": "^0.14.0",
+    "@zooid/transport-http": "^0.14.0"
   },
   "devDependencies": {
     "@agentclientprotocol/sdk": "^0.21.0",

package/src/build-registry.context.test.ts

@@ -44,7 +44,7 @@ describe('buildAcpRegistry — context provider wiring', () => {
     const registry = buildAcpRegistry(matrixCfg, {
       approvals: { register: vi.fn(), on: vi.fn() } as never,
       contextSpawnRegistry: {} as never,
-      daemonSockPath: '/tmp/zooid-test.sock',
+      daemonSockPaths: { architect: '/tmp/zooid-test.sock' },
     })
     expect(registry.hasContextSpawn('architect')).toBe(true)
   })
@@ -59,7 +59,7 @@ describe('buildAcpRegistry — context provider wiring', () => {
     const registry = buildAcpRegistry(httpCfg, {
       approvals: { register: vi.fn(), on: vi.fn() } as never,
       contextSpawnRegistry: {} as never,
-      daemonSockPath: '/tmp/zooid-test.sock',
+      daemonSockPaths: { architect: '/tmp/zooid-test.sock' },
     })
     expect(registry.hasContextSpawn('architect')).toBe(false)
   })
@@ -77,7 +77,7 @@ describe('buildAcpRegistry — context provider in a container runtime', () => {
   const opts = {
     approvals: { register: vi.fn(), on: vi.fn() } as never,
     contextSpawnRegistry: { register: vi.fn(() => 'spawn-1') } as never,
-    daemonSockPath: '/home/ubuntu/hq/data/run/context.sock',
+    daemonSockPaths: { architect: '/home/ubuntu/hq/data/run/context.sock' },
     daemonHome: '/home/ubuntu',
   }
 

package/src/build-registry.ts

@@ -14,7 +14,12 @@ import {
   type TransportContextProvider,
 } from '@zooid/core'
 import { MatrixClient, MatrixContextProvider } from '@zooid/transport-matrix'
-import { SpawnRegistry, buildContextServerSpec, contextContainerMounts } from '@zooid/context-mcp'
+import {
+  CONTEXT_CONTAINER_SOCK,
+  SpawnRegistry,
+  buildContextServerSpec,
+  contextContainerMounts,
+} from '@zooid/context-mcp'
 import { PRESETS, type PresetMount, type PresetName } from '@zooid/acp-client'
 
 export interface BuildAcpRegistryOptions {
@@ -32,13 +37,13 @@ export interface BuildAcpRegistryOptions {
   agentsDir?: string
   /**
    * Per-spawn binding store for the zooid-context MCP server. When set
-   * together with `daemonSockPath`, agents bound to a transport that owns
+   * together with `daemonSockPaths`, agents bound to a transport that owns
    * conversation context get a `contextSpawn` factory threaded into their
    * AcpClient so `session/new mcpServers` includes the zooid-context entry.
    */
   contextSpawnRegistry?: SpawnRegistry
-  /** Path to the daemon's context Unix socket. Passed to the MCP server bin. */
-  daemonSockPath?: string
+  /** Agent → host path to that agent's context Unix socket. */
+  daemonSockPaths?: Record<string, string | undefined>
   /**
    * Directory containing zooid.yaml. Required when any agent uses the
    * workspace auto-mount (the default under `runtime: docker | podman`):
@@ -78,10 +83,7 @@ function presetOf(agent: AgentConfig): PresetName | undefined {
   return undefined
 }
 
-function resolveAgentImage(
-  agent: AgentConfig,
-  cfg: ZooidConfig,
-): ResolvedImage {
+function resolveAgentImage(agent: AgentConfig, cfg: ZooidConfig): ResolvedImage {
   if (agent.container?.image) return { image: agent.container.image, source: 'agent' }
   if (cfg.container?.image) return { image: cfg.container.image, source: 'workforce' }
   const preset = presetOf(agent)
@@ -183,9 +185,7 @@ function composeAgentMounts(
     composed.push(out)
   }
 
-  const mkdirs: string[] = composed
-    .filter((m) => m.create)
-    .map((m) => m.host)
+  const mkdirs: string[] = composed.filter((m) => m.create).map((m) => m.host)
 
   return {
     mounts: composed,
@@ -227,8 +227,9 @@ export function buildAcpRegistry(
       }
     }
     if (missing.length > 0) {
-      const lines = missing.map(({ name, preset }) =>
-        `  - ${name}${preset ? ` (preset: ${preset})` : ''} — no preset-default image`,
+      const lines = missing.map(
+        ({ name, preset }) =>
+          `  - ${name}${preset ? ` (preset: ${preset})` : ''} — no preset-default image`,
       )
       throw new Error(
         `runtime: ${cfg.runtime} requires a container image for each agent. Unresolved:\n` +
@@ -260,9 +261,10 @@ export function buildAcpRegistry(
     mkdirByAgent[name] = composed.mkdirs
     cwdByAgent[name] = composed.cwd
     if (resolvedImage && cfg.runtime !== 'local') {
-      const mountSummary = composed.mounts.length === 0
-        ? 'mounts=[]'
-        : `mounts=[${composed.mounts.map((m) => m.id ?? m.target).join(',')}]`
+      const mountSummary =
+        composed.mounts.length === 0
+          ? 'mounts=[]'
+          : `mounts=[${composed.mounts.map((m) => m.id ?? m.target).join(',')}]`
       log(
         `[zooid] agent ${name.padEnd(12)} image=${resolvedImage}  source=${source}  ${mountSummary}`,
       )
@@ -271,16 +273,33 @@ export function buildAcpRegistry(
 
   const contextSpawns = buildContextSpawns(cfg, opts)
 
+  // Extensions run in the agent process (rather than an MCP child), so all
+  // context-enabled agents inherit the daemon socket address directly.
+  if (contextSpawns) {
+    for (const name of Object.keys(cfg.agents)) {
+      if (!contextSpawns[name]) continue
+      const agentSock = opts.daemonSockPaths?.[name]
+      if (!agentSock) continue
+      env[name] = {
+        ZOOID_DAEMON_SOCK:
+          cfg.runtime === 'local' ? agentSock : CONTEXT_CONTAINER_SOCK,
+        ...env[name],
+      }
+    }
+  }
+
   // Container runtimes: opencode spawns the zooid-context MCP subprocess INSIDE
   // its container, so the daemon socket + the (self-contained) bin must be
   // bind-mounted in. Local runtime needs neither — the host spec resolves
   // directly. Only agents that actually got a context factory get the mounts.
-  if (cfg.runtime !== 'local' && opts.daemonSockPath && contextSpawns) {
+  if (cfg.runtime !== 'local' && contextSpawns) {
     for (const name of Object.keys(cfg.agents)) {
       if (!contextSpawns[name]) continue
+      const agentSock = opts.daemonSockPaths?.[name]
+      if (!agentSock) continue
       mountsByAgent[name] = [
         ...(mountsByAgent[name] ?? []),
-        ...contextContainerMounts({ sockPath: opts.daemonSockPath }),
+        ...contextContainerMounts({ sockPath: agentSock }),
       ]
     }
   }
@@ -297,6 +316,8 @@ export function buildAcpRegistry(
     onTap: opts.onTap,
     agentsDir: opts.agentsDir,
     contextSpawns,
+    onSessionEstablished: (agentName, sessionKey, sessionId) =>
+      opts.contextSpawnRegistry?.linkSession(agentName, sessionKey, sessionId),
   })
 }
 
@@ -304,9 +325,8 @@ function buildContextSpawns(
   cfg: ZooidConfig,
   opts: BuildAcpRegistryOptions,
 ): Record<string, ContextSpawnFactory | undefined> | undefined {
-  if (!opts.contextSpawnRegistry || !opts.daemonSockPath) return undefined
+  if (!opts.contextSpawnRegistry || !opts.daemonSockPaths) return undefined
   const registry = opts.contextSpawnRegistry
-  const sockPath = opts.daemonSockPath
 
   const matrixClients = new Map<string, MatrixClient>()
   const agentBots = new Map<string, string>()
@@ -323,18 +343,23 @@ function buildContextSpawns(
 
   const result: Record<string, ContextSpawnFactory | undefined> = {}
   for (const [name, agent] of Object.entries(cfg.agents)) {
-    if (agent.matrix && matrixClients.has(agent.matrix.transport)) {
+    const sockPath = opts.daemonSockPaths[name]
+    if (agent.matrix && matrixClients.has(agent.matrix.transport) && sockPath) {
       const client = matrixClients.get(agent.matrix.transport)!
       const provider: TransportContextProvider = new MatrixContextProvider({
         client,
         asUserId: agent.matrix.user_id,
         agentBots,
+        // Same array BotPool.bootstrap rewrites `.alias` on in place — reads
+        // through this after bootstrap see canonical room IDs.
+        rooms: agent.matrix.rooms,
       })
-      result[name] = async (threadId: string, channelId?: string) => {
+      result[name] = async (threadId: string, channelId?: string, sessionKey?: string) => {
         const spawnId = registry.register({
           agentName: name,
           threadRef: { channelId: channelId ?? threadId, threadId },
           provider,
+          sessionKey: sessionKey ?? threadId,
         })
         return buildContextServerSpec({
           spawnId,
@@ -349,13 +374,31 @@ function buildContextSpawns(
   return result
 }
 
+/** Agents on configured Matrix transports get a context listener and binding. */
+export function contextEligibleAgents(cfg: ZooidConfig): string[] {
+  const matrixTransports = new Set(
+    Object.entries(cfg.transports)
+      .filter(([, transport]) => transport.type === 'matrix')
+      .map(([name]) => name),
+  )
+  return Object.entries(cfg.agents)
+    .filter(([, agent]) => agent.matrix && matrixTransports.has(agent.matrix.transport))
+    .map(([name]) => name)
+}
+
 function defaultRuntimeFor(cfg: ZooidConfig): AcpRuntime {
   if (cfg.runtime === 'local') return new LocalAcpRuntime()
   if (cfg.runtime === 'docker') {
-    return new DockerAcpRuntime({ defaultImage: cfg.container?.image, engine: 'docker' })
+    return new DockerAcpRuntime({
+      defaultImage: cfg.container?.image,
+      engine: 'docker',
+    })
   }
   if (cfg.runtime === 'podman') {
-    return new DockerAcpRuntime({ defaultImage: cfg.container?.image, engine: 'podman' })
+    return new DockerAcpRuntime({
+      defaultImage: cfg.container?.image,
+      engine: 'podman',
+    })
   }
   throw new Error(`unsupported runtime: ${cfg.runtime}`)
 }

package/src/daemon/delivery-cache.test.ts

@@ -0,0 +1,34 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
+import { DeliveryCache } from './delivery-cache.js'
+
+describe('DeliveryCache', () => {
+  beforeEach(() => vi.useFakeTimers())
+  afterEach(() => vi.useRealTimers())
+
+  it('accepts an id once and rejects the replay', () => {
+    const c = new DeliveryCache(60_000)
+    expect(c.seen('abc')).toBe(false)
+    expect(c.seen('abc')).toBe(true)
+  })
+
+  it('treats ids from different triggers as distinct', () => {
+    const c = new DeliveryCache(60_000)
+    expect(c.seen('t1:abc')).toBe(false)
+    expect(c.seen('t2:abc')).toBe(false)
+  })
+
+  it('forgets an id after the TTL, so the cache cannot grow without bound', () => {
+    const c = new DeliveryCache(60_000)
+    c.seen('abc')
+    vi.advanceTimersByTime(61_000)
+    expect(c.seen('abc')).toBe(false)
+  })
+
+  it('evicts expired entries rather than retaining them forever', () => {
+    const c = new DeliveryCache(1_000)
+    for (let i = 0; i < 1000; i++) c.seen(`id-${i}`)
+    vi.advanceTimersByTime(2_000)
+    c.seen('trigger-eviction')
+    expect(c.size).toBeLessThan(10)
+  })
+})

package/src/daemon/delivery-cache.ts

@@ -0,0 +1,36 @@
+/**
+ * TTL-bounded replay defence for webhook delivery ids. GitHub sends no
+ * timestamp, so freshness-window rejection (used for Stripe/Slack in
+ * `webhook-verify.ts`) is not available — dedupe on delivery id instead.
+ * Keys are namespaced by trigger name (e.g. `t1:abc`) so two triggers never
+ * collide on the same upstream id.
+ */
+export class DeliveryCache {
+  private readonly ttlMs: number
+  private readonly expiryById = new Map<string, number>()
+
+  constructor(ttlMs: number) {
+    this.ttlMs = ttlMs
+  }
+
+  get size(): number {
+    return this.expiryById.size
+  }
+
+  /** Returns true if `id` was already seen (and still within its TTL). */
+  seen(id: string): boolean {
+    this.evictExpired()
+    const now = Date.now()
+    const expiry = this.expiryById.get(id)
+    if (expiry !== undefined && expiry > now) return true
+    this.expiryById.set(id, now + this.ttlMs)
+    return false
+  }
+
+  private evictExpired(): void {
+    const now = Date.now()
+    for (const [id, expiry] of this.expiryById) {
+      if (expiry <= now) this.expiryById.delete(id)
+    }
+  }
+}

package/src/daemon/load-custom-verifiers.ts

@@ -0,0 +1,43 @@
+import { pathToFileURL } from 'node:url'
+import type { TriggerConfig } from '@zooid/core'
+import type { CustomVerifier } from './webhook-verify.js'
+
+/**
+ * Import the `verify:` module of every `provider: custom` trigger, keyed by
+ * trigger name.
+ *
+ * Loaded once at daemon start rather than per delivery: a bad path or a
+ * module that exports the wrong thing is a configuration error, and it
+ * should surface when the operator starts the daemon, not silently as a 401
+ * the first time the service fires. Config has already resolved the path to
+ * an absolute one against the zooid.yaml directory.
+ */
+export async function loadCustomVerifiers(
+  triggers: Record<string, TriggerConfig>,
+): Promise<Record<string, CustomVerifier>> {
+  const out: Record<string, CustomVerifier> = {}
+  for (const [name, trigger] of Object.entries(triggers)) {
+    const path = trigger.webhook?.provider === 'custom' ? trigger.webhook.verify : undefined
+    if (!path) continue
+
+    let mod: Record<string, unknown>
+    try {
+      mod = (await import(pathToFileURL(path).href)) as Record<string, unknown>
+    } catch (err) {
+      throw new Error(
+        `triggers.${name}.webhook.verify: cannot load ${path} — ${(err as Error).message}`,
+      )
+    }
+    // `export default` is the documented shape; a named `verify` export is
+    // accepted so a module can hold more than one provider's verifier.
+    const fn = mod.default ?? mod.verify
+    if (typeof fn !== 'function') {
+      throw new Error(
+        `triggers.${name}.webhook.verify: ${path} must export a function as \`default\` ` +
+          `(or as \`verify\`), got ${typeof fn}`,
+      )
+    }
+    out[name] = fn as CustomVerifier
+  }
+  return out
+}