@agentshouse/kit 0.1.0-alpha.32 → 0.1.0-alpha.34

package/README.md

@@ -12,7 +12,7 @@ The Skill set Kit installs is Matt Pocock's
 On Linux `amd64` or `arm64`, run the published, versioned bootstrap once:
 
 ```sh
-bash <(curl -fsSL https://github.com/agentshouse/kit/releases/download/v0.1.0-alpha.32/connect-linux.sh)
+bash <(curl -fsSL https://github.com/agentshouse/kit/releases/download/v0.1.0-alpha.34/connect-linux.sh)
 ```
 
 The bootstrap first establishes Docker Engine from what it observes on the
@@ -145,6 +145,37 @@ matching directory beneath `/agents/house`, through the resident's lease when
 the container runs, and refuses a directory outside the workspace before
 anything reaches House.
 
+## Connect a macOS computer
+
+On a Mac with Apple silicon or an Intel chip, run the same
+`bash <(curl -fsSL …/connect-linux.sh)` command as
+[a Linux computer](#connect-a-linux-computer). It runs in macOS's own
+`bash` and reads the chip from the hardware, so it selects `arm64` or `amd64`
+correctly even from a terminal running under Rosetta.
+
+The bootstrap first establishes Docker Desktop from what it observes. A Docker
+Desktop that already answers is used as it is. Without
+`/Applications/Docker.app` it follows Docker's
+[command-line installation](https://docs.docker.com/desktop/setup/install/mac-install/):
+it downloads `Docker.dmg` for the chip from `desktop.docker.com`, attaches it
+through `sudo hdiutil`, runs its `install --user=<account>` through `sudo`, and
+detaches it. `sudo` asks for the password as it ordinarily does, and the
+installer does not accept Docker's Subscription Service Agreement for you. The
+bootstrap then opens Docker Desktop, including one a restart left stopped, and
+waits up to five minutes for its Linux containers to answer while you accept
+its terms or finish what its window asks. If Docker Desktop is still not ready,
+or the download or the installer fails, the bootstrap names the cause and changes
+nothing further; running it again continues from that state. Docker Desktop
+built for the other chip is refused. The bootstrap reaches `docker` in
+Docker Desktop's app bundle when no terminal has added it to `PATH` yet.
+
+Everything after that is the Linux journey above, with `open` as the host
+browser opener. With an HTTPS House, login's container publishes its one
+callback port on the Mac's `127.0.0.1`, so House Login returns from the Mac's
+browser, and no Kit container uses the host network. A loopback House needs
+Docker Desktop's host networking enabled. A `--workspace` root must be a
+directory Docker Desktop shares, such as one under `/Users`.
+
 ## Building the package
 
 The repository checkout is the development source. Build the package that can
@@ -414,7 +445,8 @@ service to a signed-in account asks only for that service's consent, and each
 service keeps its own grant. An address that answers another consent, or a code
 Google refuses to exchange, stores nothing; a declined consent or a ceremony
 that outlives its ten-minute bound cancels the sign-in, and the Kit tries again
-at the next reconciliation.
+at the next reconciliation. A capture that finds the grant revoked removes it,
+reports the entry `signed_out` and opens a new sign-in at once.
 
 The resident captures each signed-in entry every 15 minutes, with no command.
 An occurrence never overlaps its entry's previous one, and one missed while the
@@ -1545,8 +1577,9 @@ kit sync rebootstrap ./replica
 ```
 
 `bootstrap` writes `ROOM.md`, Library text, House-derived projections, and
-Capture text with its provenance sidecar, and records one position per selected
-authority from the bundle, with the log epoch House issued it in, together with
+Capture text, with the provenance House serves on a file's manifest entry as
+its `_provenance` sidecar, and records one position per selected authority from
+the bundle, with the log epoch House issued it in, together with
 the positive operation scopes House declared for it: `read`, `sync`, `write`,
 and `delete`, each a list of paths relative to the authority under which that
 operation is admitted. Managed replication needs `read` plus `sync` on a Room;
@@ -1555,11 +1588,11 @@ with `operation_denied`. Generated `_provenance` files delivered beside authored
 Library paths are House metadata, not authored Library documents. `pull` presents
 each recorded position with its log epoch, applies each enumerated path's whole
 content or removal, and advances those positions. A removal, pulled or accepted
-from `submit`, also removes each directory it leaves empty up to the authority,
-so a later file can take that path; a directory still holding a file, such as a
-local draft, stays. A position older than House's
-declared retention, or one of a log epoch before House's database was restored,
-is reported as `position_expired`; only `rebootstrap` rebuilds the directory.
+from `submit`, also removes the file's `_provenance` sidecar and each directory
+it leaves empty up to the authority, so a later file can take that path; a
+directory still holding a file, such as a local draft, stays. A position older
+than House's declared retention, or one of a log epoch before House's database
+was restored, is reported as `position_expired`; only `rebootstrap` rebuilds the directory.
 
 `submit` sends field, section, and preamble operations with that value's prior
 content as base, and whole-file, rename, and removal operations with the file
@@ -1772,7 +1805,12 @@ another, beside the live drafts described below:
   the answer is absent or unreadable. File items are pulled back from House,
   refused as `file_too_large` above the 10 MiB image ceiling, uploaded as
   `sendPhoto` with the caption House composed around the link to the retained
-  original, and reported the same way; a pull that fails reports
+  original, and reported the same way. A caption past Telegram's
+  1,024-character caption limit keeps its head under the image, cut at its last
+  line break that fits or else at the limit, and the rest follows in the topic
+  as ordinary messages; the upload is reported with the image's answer when
+  every part was delivered and otherwise with the answer of the first part that
+  was not. A pull that fails reports
   `transfer_failed` and an ambiguous upload answer reports `delivery_unknown`.
   Only an image ever becomes a file item, because House offers every other file
   as a `conversation_file_link` message this queue delivers like any other. The
@@ -1783,6 +1821,10 @@ another, beside the live drafts described below:
   between blocks and inside a block only when that block alone exceeds them,
   and reported once, `delivered` with the first message's id when every part
   was delivered and otherwise with the answer of the first part that was not.
+  A new plain-text message past Telegram's 4,096-character message limit, such
+  as a `conversation_file_link` text, is sent and reported the same way, cut
+  at the last line break that fits or else at the limit, so the first message
+  keeps its reply and keyboard and a link on its own line stays whole.
   Each answer also names the `threads` the bot's topics carry, a
   `conversation_id` with its `chat_id` and `topic_id`, which is where live
   drafts go.

package/bin/connect-linux.sh

@@ -15,7 +15,12 @@ FORWARD=()
 UBUNTU_RELEASES=(jammy noble resolute)
 DOCKER_PACKAGES=(docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin)
 CONFLICTING_PACKAGES=(docker.io docker-compose docker-compose-v2 docker-doc docker-buildx podman-docker containerd runc)
-DOCKER_GROUP=0
+DOCKER_APP=/Applications/Docker.app
+DESKTOP_WAIT_SECONDS=300
+RUNTIME='Docker Engine'
+OPENER=xdg-open
+NETWORK=(--network host)
+PUBLISHED=()
 
 refuse() {
   printf 'kit_bootstrap_refused: %s\n' "$1" >&2
@@ -32,11 +37,11 @@ login_kit() {
     "${DOCKER_RUN[@]:0:2}" -i "${DOCKER_RUN[@]:2}" login "$@"
     return
   fi
-  command -v xdg-open >/dev/null || refuse 'no host browser opener; rerun with --manual'
-  "${DOCKER_RUN[@]}" login "$@" --host-browser | while IFS= read -r line; do
+  command -v "$OPENER" >/dev/null || refuse 'no host browser opener; rerun with --manual'
+  "${DOCKER_RUN[@]:0:2}" ${PUBLISHED[@]+"${PUBLISHED[@]}"} "${DOCKER_RUN[@]:2}" login "$@" --host-browser | while IFS= read -r line; do
     if [[ "$line" == 'Open '* ]]; then
       printf 'Opening House Login in the host browser.\n'
-      xdg-open "${line#Open }" >/dev/null 2>&1 || refuse 'host browser did not open; rerun with --manual'
+      "$OPENER" "${line#Open }" >/dev/null 2>&1 || refuse 'host browser did not open; rerun with --manual'
     else
       printf '%s\n' "$line"
     fi
@@ -46,15 +51,7 @@ login_kit() {
 start_resident() {
   local network=()
   [[ "$HOUSE" == https://* ]] || network=(--network host)
-  docker run -d --name "$NAME" --restart unless-stopped "${network[@]}" --user "$(id -u):$(id -g)" --mount "$KIT_HOME_MOUNT" --mount "$WORKSPACE_MOUNT" --label "agentshouse.house=$HOUSE" --env HOME=/kit-home --env HOUSE_KIT_HOME=/kit-home --env HOUSE_KIT_CONTAINER=1 "$IMAGE" resident >/dev/null
-}
-
-docker() {
-  if ((DOCKER_GROUP)); then
-    sudo -u "$(id -un)" docker "$@"
-  else
-    command docker "$@"
-  fi
+  docker run -d --name "$NAME" --restart unless-stopped ${network[@]+"${network[@]}"} --user "$(id -u):$(id -g)" --mount "$KIT_HOME_MOUNT" --mount "$WORKSPACE_MOUNT" --label "agentshouse.house=$HOUSE" --env HOME=/kit-home --env HOUSE_KIT_HOME=/kit-home --env HOUSE_KIT_CONTAINER=1 "$IMAGE" resident >/dev/null
 }
 
 elevated() {
@@ -82,6 +79,41 @@ unanswered() {
   printf '; Docker Engine does not answer: %s' "$(docker_cause)"
 }
 
+install_docker_desktop() {
+  local mount
+  DOWNLOAD=$(mktemp -d) || refuse 'no temporary directory for the Docker Desktop download'
+  trap 'rm -rf "$DOWNLOAD"' EXIT
+  mount="$DOWNLOAD/volume"
+  printf 'Downloading Docker Desktop for %s from docker.com.\n' "$1"
+  curl -fsSL -o "$DOWNLOAD/Docker.dmg" "https://desktop.docker.com/mac/main/$ARCH/Docker.dmg" || refuse 'Docker Desktop could not be downloaded'
+  printf 'Installing Docker Desktop in /Applications; sudo may ask for your password.\n'
+  mkdir "$mount" || refuse 'the Docker Desktop disk image has no mount point'
+  elevated hdiutil attach -nobrowse -readonly -mountpoint "$mount" "$DOWNLOAD/Docker.dmg" >/dev/null || refuse 'the Docker Desktop disk image could not be opened'
+  if ! elevated "$mount/Docker.app/Contents/MacOS/install" "--user=$(id -un)"; then
+    elevated hdiutil detach "$mount" >/dev/null 2>&1 || true
+    refuse 'the Docker Desktop installer did not finish'
+  fi
+  elevated hdiutil detach "$mount" >/dev/null || refuse 'the Docker Desktop disk image could not be closed'
+}
+
+establish_docker_desktop() {
+  PATH="$PATH:$DOCKER_APP/Contents/Resources/bin"
+  docker_answers && return
+  if ((FORWARDING)); then
+    [[ -d "$DOCKER_APP" ]] || refuse 'House Kit is not installed; run this bootstrap without arguments first'
+    refuse "Docker Desktop does not answer: $(docker_cause); start Docker Desktop, then rerun this command"
+  fi
+  [[ -d "$DOCKER_APP" ]] || install_docker_desktop "$1"
+  printf 'Starting Docker Desktop; accept its terms or finish its setup if its window asks.\n'
+  open "$DOCKER_APP" || refuse 'Docker Desktop could not be opened'
+  local waited=0
+  until docker_answers; do
+    ((waited < DESKTOP_WAIT_SECONDS)) || refuse "Docker Desktop is not ready: $(docker_cause); finish what its window asks, then rerun this bootstrap"
+    sleep 2
+    waited=$((waited + 2))
+  done
+}
+
 installed_packages() {
   { dpkg-query -W -f='${db:Status-Status} ${Package}\n' "$@" 2>/dev/null || true; } | awk '$1 == "installed" { print $2 }'
 }
@@ -132,7 +164,7 @@ establish_docker_engine() {
       printf 'Adding %s to the docker group; it applies from your next sign-in, so this run reaches Docker Engine through sudo.\n' "$(id -un)"
       elevated usermod -aG docker "$(id -un)" || refuse "$(id -un) could not be added to the docker group"
     fi
-    docker_member || DOCKER_GROUP=1
+    docker_member || docker() { sudo -u "$(id -un)" docker "$@"; }
   fi
   docker_answers || refuse "Docker Engine does not answer: $(docker_cause)"
 }
@@ -172,20 +204,39 @@ while (($#)); do
 done
 
 [[ "$IMAGE" =~ ^ghcr\.io/agentshouse/kit@sha256:[0-9a-f]{64}$ ]] || refuse 'this bootstrap has not been published with an immutable image digest'
-[[ "$(uname -s)" == Linux ]] || refuse "unsupported host $(uname -s); this bootstrap is for Linux"
-case "$(uname -m)" in
-  x86_64|amd64) ARCH=amd64 ;;
-  aarch64|arm64) ARCH=arm64 ;;
-  *) refuse "unsupported Linux architecture $(uname -m)" ;;
+case "$(uname -s)" in
+  Linux)
+    case "$(uname -m)" in
+      x86_64|amd64) ARCH=amd64 ;;
+      aarch64|arm64) ARCH=arm64 ;;
+      *) refuse "unsupported Linux architecture $(uname -m)" ;;
+    esac
+    ;;
+  Darwin)
+    RUNTIME='Docker Desktop'
+    OPENER=open
+    if [[ "$(sysctl -n hw.optional.arm64 2>/dev/null)" == 1 ]]; then
+      ARCH=arm64
+      CHIP='Apple silicon'
+    else
+      ARCH=amd64
+      CHIP='an Intel chip'
+    fi
+    ;;
+  *) refuse "unsupported host $(uname -s); this bootstrap is for Linux and macOS" ;;
 esac
 [[ "$WORKSPACE" == /* ]] || refuse 'workspace root must be an absolute path'
-establish_docker_engine
+if [[ "$RUNTIME" == 'Docker Desktop' ]]; then
+  establish_docker_desktop "$CHIP"
+else
+  establish_docker_engine
+fi
 case "$DOCKER_PLATFORM" in
   linux/x86_64|linux/amd64) DOCKER_ARCH=amd64 ;;
   linux/aarch64|linux/arm64) DOCKER_ARCH=arm64 ;;
-  *) refuse "unsupported Docker Engine platform $DOCKER_PLATFORM" ;;
+  *) refuse "unsupported $RUNTIME platform $DOCKER_PLATFORM" ;;
 esac
-[[ "$DOCKER_ARCH" == "$ARCH" ]] || refuse "host linux/$ARCH does not match Docker Engine linux/$DOCKER_ARCH"
+[[ "$DOCKER_ARCH" == "$ARCH" ]] || refuse "host linux/$ARCH does not match $RUNTIME linux/$DOCKER_ARCH"
 if ((FORWARDING)); then
   docker container inspect "$NAME" >/dev/null 2>&1 || refuse 'House Kit is not installed; run this bootstrap without arguments first'
   WORKSPACE=$(docker inspect --format '{{range .Mounts}}{{if eq .Destination "/agents/house"}}{{.Source}}{{end}}{{end}}' "$NAME")
@@ -197,7 +248,7 @@ for path in "$KIT_HOME" "$WORKSPACE"; do
   [[ ! -L "$path" ]] || refuse "$path is a symbolic link"
   mkdir -p -m 700 "$path" || refuse "$path could not be created"
   [[ -d "$path" ]] || refuse "$path is not a directory"
-  [[ "$(stat -c %u "$path")" == "$(id -u)" ]] || refuse "$path is not owned by this User"
+  [[ -O "$path" ]] || refuse "$path is not owned by this User"
   chmod 700 "$path" || refuse "$path could not be owner-protected"
 done
 KIT_HOME=$(cd "$KIT_HOME" && pwd -P)
@@ -219,13 +270,19 @@ if ((FORWARDING == 0)); then
   if [[ ! -f "$KIT_HOME/kit.json" ]]; then
     printf '{"availability":"intermittent","execution_authority":"allow","migrators":[],"instances":[],"clients":[],"host":null,"skills":%s}\n' "$SKILLS" > "$KIT_HOME/kit.json"
   elif grep -Eq '"skills"[[:space:]]*:' "$KIT_HOME/kit.json"; then
-    sed -E -i "s/(\"skills\"[[:space:]]*:[[:space:]]*)(true|false)/\\1$SKILLS/" "$KIT_HOME/kit.json" || refuse 'kit.json could not be updated'
+    sed -E -i.old "s/(\"skills\"[[:space:]]*:[[:space:]]*)(true|false)/\\1$SKILLS/" "$KIT_HOME/kit.json" || refuse 'kit.json could not be updated'
   else
-    sed -E -i "1s/^([[:space:]]*)\\{/\\1{\"skills\":$SKILLS,/" "$KIT_HOME/kit.json" || refuse 'kit.json could not be updated'
+    sed -E -i.old "1s/^([[:space:]]*)\\{/\\1{\"skills\":$SKILLS,/" "$KIT_HOME/kit.json" || refuse 'kit.json could not be updated'
   fi
+  rm -f "$KIT_HOME/kit.json.old"
   grep -Eq "\"skills\"[[:space:]]*:[[:space:]]*$SKILLS" "$KIT_HOME/kit.json" || refuse 'kit.json could not be updated'
 fi
-DOCKER_RUN=(docker run --rm --network host --user "$(id -u):$(id -g)" --mount "$KIT_HOME_MOUNT" --mount "$WORKSPACE_MOUNT" --env HOME=/kit-home --env HOUSE_KIT_HOME=/kit-home --env HOUSE_KIT_CONTAINER=1 --env "HOUSE_KIT_HOSTNAME=$(hostname)" "$IMAGE")
+if [[ "$RUNTIME" == 'Docker Desktop' && "$HOUSE" == https://* ]]; then
+  NETWORK=()
+  LOGIN_PORT=$((49152 + RANDOM % 16384))
+  PUBLISHED=(--publish "127.0.0.1:$LOGIN_PORT:$LOGIN_PORT" --env "HOUSE_KIT_LOGIN_PORT=$LOGIN_PORT")
+fi
+DOCKER_RUN=(docker run --rm ${NETWORK[@]+"${NETWORK[@]}"} --user "$(id -u):$(id -g)" --mount "$KIT_HOME_MOUNT" --mount "$WORKSPACE_MOUNT" --env HOME=/kit-home --env HOUSE_KIT_HOME=/kit-home --env HOUSE_KIT_CONTAINER=1 --env "HOUSE_KIT_HOSTNAME=$(hostname)" "$IMAGE")
 
 if docker container inspect "$NAME" >/dev/null 2>&1; then
   INSTALLED_IMAGE=$(docker inspect --format '{{.Config.Image}}' "$NAME")
@@ -240,7 +297,7 @@ if docker container inspect "$NAME" >/dev/null 2>&1; then
   [[ -f "$KIT_HOME/credential" && -f "$KIT_HOME/environment" && -f "$KIT_HOME/house" ]] || refuse 'the installed Kit has no enrolled authority'
   if ((FORWARDING)); then
     if [[ "$FORWARDED" == kit && "${FORWARD[0]:-}" == login ]]; then
-      login_kit "${FORWARD[@]:1}"
+      login_kit ${FORWARD[@]+"${FORWARD[@]:1}"}
       exit 0
     fi
     PLACED=()
@@ -259,9 +316,9 @@ if docker container inspect "$NAME" >/dev/null 2>&1; then
       stty -echo
     fi
     if [[ "$(docker inspect --format '{{.State.Running}}' "$NAME")" == true ]]; then
-      docker exec -i "${TERMINAL[@]}" "${PLACED[@]}" "$NAME" "$FORWARDED" "${FORWARD[@]}"
+      docker exec -i ${TERMINAL[@]+"${TERMINAL[@]}"} ${PLACED[@]+"${PLACED[@]}"} "$NAME" "$FORWARDED" ${FORWARD[@]+"${FORWARD[@]}"}
     else
-      "${DOCKER_RUN[@]:0:2}" -i "${TERMINAL[@]}" "${PLACED[@]}" "${ENTRY[@]}" "${DOCKER_RUN[@]:2}" "${FORWARD[@]}"
+      "${DOCKER_RUN[@]:0:2}" -i ${TERMINAL[@]+"${TERMINAL[@]}"} ${PLACED[@]+"${PLACED[@]}"} ${ENTRY[@]+"${ENTRY[@]}"} "${DOCKER_RUN[@]:2}" ${FORWARD[@]+"${FORWARD[@]}"}
     fi
     exit
   fi
@@ -294,7 +351,7 @@ else
   LOGIN=()
   if ((HOUSE_SELECTED)); then LOGIN+=(--house "$HOUSE"); fi
   if ((MANUAL)); then LOGIN+=(--manual); fi
-  login_kit "${LOGIN[@]}"
+  login_kit ${LOGIN[@]+"${LOGIN[@]}"}
 fi
 
 "${DOCKER_RUN[@]}" apply

package/bin/kit.js

@@ -119,6 +119,7 @@ async function runLogin(args, directory) {
     directory,
     hostBrowser: values["--host-browser"] === true,
     hostname: process.env.HOUSE_KIT_HOSTNAME,
+    loginPort: process.env.HOUSE_KIT_LOGIN_PORT,
     ...(values["--environment"] === undefined ? {} : { environment: values["--environment"] }),
   });
 }

package/bootstrap.json

@@ -1,12 +1,12 @@
 {
   "schemaVersion": 1,
-  "version": "0.1.0-alpha.32",
+  "version": "0.1.0-alpha.34",
   "hosts": {
     "linux": {
-      "command": "bash <(curl -fsSL https://github.com/agentshouse/kit/releases/download/v0.1.0-alpha.32/connect-linux.sh)",
+      "command": "bash <(curl -fsSL https://github.com/agentshouse/kit/releases/download/v0.1.0-alpha.34/connect-linux.sh)",
       "asset": {
         "name": "connect-linux.sh",
-        "url": "https://github.com/agentshouse/kit/releases/download/v0.1.0-alpha.32/connect-linux.sh"
+        "url": "https://github.com/agentshouse/kit/releases/download/v0.1.0-alpha.34/connect-linux.sh"
       },
       "workspace": {
         "argument": "--workspace",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentshouse/kit",
-  "version": "0.1.0-alpha.32",
+  "version": "0.1.0-alpha.34",
   "license": "MIT",
   "repository": {
     "type": "git",

package/src/contract.js

@@ -61,6 +61,8 @@ export const TELEGRAM_DOWNLOAD_CEILING_BYTES = 20 * 1024 * 1024;
 export const TELEGRAM_BOT_API_TIMEOUT_MS = 30_000;
 export const TELEGRAM_GATEWAY_POLL_MS = 2_000;
 export const TELEGRAM_RICH_MESSAGE_CHARACTERS_MAX = 32_768;
+export const TELEGRAM_MESSAGE_CHARACTERS_MAX = 4_096;
+export const TELEGRAM_CAPTION_CHARACTERS_MAX = 1_024;
 export const TELEGRAM_RICH_MESSAGE_BLOCKS_MAX = 500;
 export const TELEGRAM_CONTROL_KEYBOARD_COMMANDS = ["/stop", "/kill"];
 export const TELEGRAM_MEDIA_KINDS = [

package/src/google/entries.js

@@ -213,7 +213,10 @@ export function sourceEntries(context) {
       const task = signIn(occasion(record), entry);
       signingIn = { source: entry.source, task };
       try {
-        if (await task) record.last = null;
+        if (await task) {
+          record.last = null;
+          attempted.delete(entry.source);
+        }
       } catch (error) {
         if (!record.stop.signal.aborted) throw error;
       } finally {

package/src/login.js

@@ -216,11 +216,12 @@ export async function login(options, dependencies = {}) {
   return { environment: exchanged.environment };
 }
 
-export async function loopback() {
+export async function loopback(published) {
   const server = createServer();
   await new Promise((resolve, reject) => {
     server.once("error", reject);
-    server.listen(0, "127.0.0.1", resolve);
+    if (published === undefined) server.listen(0, "127.0.0.1", resolve);
+    else server.listen(Number(published), "0.0.0.0", resolve);
   });
   const address = server.address();
   const code = new Promise((resolve, reject) => {
@@ -274,7 +275,7 @@ export async function connectHouse(options, dependencies = {}) {
   refuseDrained(options.directory);
   await prepareLaunchBase(launchBase(dependencies));
   if (options.presentation === "manual") return login(options, dependencies);
-  const callback = await loopback();
+  const callback = await loopback(options.loginPort);
   try {
     return await login(
       { ...options, presentation: "loopback", loopbackUri: callback.uri },

package/src/sync.js

@@ -131,23 +131,31 @@ function scopeContents(replica, scope) {
   return scope.contents;
 }
 
+function servedFile(scope, path) {
+  return scope.manifest.files.find((file) => file?.path === path);
+}
+
 async function writeScope(replica, scope, signal) {
-  const files = [];
+  const recorded = new Map();
   for (const entry of scopeContents(replica, scope)) {
-    const meta = scope.manifest.files.find((file) => file.path === entry.path);
+    const meta = servedFile(scope, entry.path) ?? {};
     await writeReplicaFile(locate(replica, scope.manifest.path, entry.path), entry.content, signal);
-    files.push({
-      path: entry.path,
-      revision: typeof meta?.revision === "string" ? meta.revision : "",
-      sha256: typeof meta?.sha256 === "string" ? meta.sha256 : "",
-      content: entry.content,
-    });
+    recorded.set(entry.path, enumeratedRecord(entry.path, entry.content, meta));
+    if (typeof meta.provenance === "string") {
+      await writeSidecar({ replica }, scope.manifest, recorded, entry.path, meta, signal);
+    }
   }
-  return files;
+  return [...recorded.values()];
 }
 
 async function replaceScope(replica, previous, scope, signal) {
-  const kept = new Set(scopeContents(replica, scope).map((entry) => entry.path));
+  const kept = new Set(
+    scopeContents(replica, scope).flatMap((entry) =>
+      typeof servedFile(scope, entry.path)?.provenance === "string"
+        ? [entry.path, sidecarPath(entry.path)]
+        : [entry.path],
+    ),
+  );
   const root = locate(replica, scope.manifest.path);
   for (const path of await listFiles(root)) {
     if (!kept.has(path)) await removeReplicaFile(replica, scope.manifest.path, path);
@@ -255,6 +263,12 @@ async function writeSidecar(options, authority, recorded, path, change, signal)
   recorded.set(sidecar, enumeratedRecord(sidecar, change.provenance, change));
 }
 
+async function removeSidecar(options, authority, recorded, path) {
+  const sidecar = sidecarPath(path);
+  await removeReplicaFile(options.replica, authority.path, sidecar);
+  recorded.delete(sidecar);
+}
+
 async function applyEnumeration(options, state, enumeration, signal) {
   if (!Array.isArray(enumeration?.authorities)) throw new KitRefusal("kit_sync_rejected", "enumerate");
   for (const view of enumeration.authorities) {
@@ -267,6 +281,7 @@ async function applyEnumeration(options, state, enumeration, signal) {
       if (change.removed === true) {
         await removeReplicaFile(options.replica, authority.path, change.path);
         recorded.delete(change.path);
+        await removeSidecar(options, authority, recorded, change.path);
         continue;
       }
       if (typeof change.content === "string") {
@@ -360,6 +375,7 @@ async function acceptBatch(session, options, state, outcome, signal, pending = n
     if (accepted === null) {
       if (!preserve) await removeReplicaFile(options.replica, authority.path, relative);
       recorded.delete(relative);
+      await removeSidecar(options, authority, recorded, relative);
       continue;
     }
     if (!preserve) await writeReplicaFile(destination, accepted, signal);

package/src/telegram-view.js

@@ -25,13 +25,16 @@ function richText(value, key = null) {
   return [];
 }
 
-function slices(text) {
+export function slices(text, limit = TELEGRAM_RICH_MESSAGE_CHARACTERS_MAX) {
   const pieces = [];
   let start = 0;
   while (start < text.length) {
-    let end = Math.min(start + TELEGRAM_RICH_MESSAGE_CHARACTERS_MAX, text.length);
+    let end = Math.min(start + limit, text.length);
+    const window = text.slice(start, end);
+    const line = window.lastIndexOf("\n");
     const last = text.charCodeAt(end - 1);
-    if (end < text.length && last >= 0xd800 && last <= 0xdbff) end -= 1;
+    if (end < text.length && line > 0 && /\S/.test(window.slice(0, line))) end = start + line + 1;
+    else if (end < text.length && last >= 0xd800 && last <= 0xdbff) end -= 1;
     pieces.push(text.slice(start, end));
     start = end;
   }

package/src/telegram.js

@@ -10,6 +10,7 @@ import {
   PERSONAL_BOT_OFFSET_RELATIVE_PATH,
   PERSONAL_BOT_TOKEN_RELATIVE_PATH,
   TELEGRAM_BOT_API_TIMEOUT_MS,
+  TELEGRAM_CAPTION_CHARACTERS_MAX,
   TELEGRAM_CONTROL_KEYBOARD_COMMANDS,
   TELEGRAM_DELIVERY_BATCH_MAX,
   TELEGRAM_DELIVERY_KINDS,
@@ -18,6 +19,7 @@ import {
   TELEGRAM_IMAGE_UPLOAD_CEILING_BYTES,
   TELEGRAM_INGRESS_BATCH_MAX,
   TELEGRAM_MEDIA_KINDS,
+  TELEGRAM_MESSAGE_CHARACTERS_MAX,
   TELEGRAM_UNSUPPORTED_MEDIA_FIELDS,
   TELEGRAM_UPDATE_OUTCOMES,
   telegramApiUrl,
@@ -27,7 +29,7 @@ import { heldControl, houseRequest, maintainControl, openSession } from "./house
 import { watchKitWork } from "./kit-work-stream.js";
 import { KitRefusal } from "./refusal.js";
 import { writeText } from "./state.js";
-import { richPieces, turnViews } from "./telegram-view.js";
+import { richPieces, slices, turnViews } from "./telegram-view.js";
 import { kitStreamWriter } from "./turn-frames.js";
 
 const TOKEN_PROMPT = "Paste the BotFather token for this Environment: ";
@@ -285,8 +287,21 @@ export function deliveryCall(delivery) {
   return { method: "sendMessage", body: sendBody(delivery) };
 }
 
+function topicMessage(chat, topic, text) {
+  const body = { chat_id: Number(chat), text };
+  if (topic !== null) body.message_thread_id = Number(topic);
+  return { method: "sendMessage", body };
+}
+
 function deliveryCalls(delivery) {
   const call = deliveryCall(delivery);
+  if (call.method === "sendMessage" && call.body.text.length > TELEGRAM_MESSAGE_CHARACTERS_MAX) {
+    const [first, ...following] = slices(call.body.text, TELEGRAM_MESSAGE_CHARACTERS_MAX);
+    return [
+      { method: call.method, body: { ...call.body, text: first } },
+      ...following.map((text) => topicMessage(delivery.chat_id, delivery.topic_id, text)),
+    ];
+  }
   if (call.method !== "sendRichMessage") return [call];
   return richPieces(call.body.rich_message).map((rich_message) => ({
     method: call.method,
@@ -791,6 +806,27 @@ async function sendQueuedMessage(gateway, token, delivery) {
   return false;
 }
 
+function captionPieces(caption) {
+  if (caption === null || caption.length <= TELEGRAM_CAPTION_CHARACTERS_MAX) return [caption];
+  const [head] = slices(caption, TELEGRAM_CAPTION_CHARACTERS_MAX);
+  return [head, ...slices(caption.slice(head.length), TELEGRAM_MESSAGE_CHARACTERS_MAX)];
+}
+
+async function sentOverflow(gateway, token, upload, overflow) {
+  for (const text of overflow) {
+    const call = topicMessage(upload.chat_id, upload.topic_id, text);
+    let answered;
+    try {
+      answered = await telegramPost(gateway, telegramApiUrl(token, call.method), call.body);
+    } catch (error) {
+      if (cancelled(error)) throw error;
+      return { settled: uploadOutcome(null), answered: null };
+    }
+    if (!botApiAccepted(answered)) return { settled: uploadOutcome(answered), answered };
+  }
+  return null;
+}
+
 async function sendQueuedUpload(gateway, token, upload) {
   let bytes;
   try {
@@ -810,12 +846,13 @@ async function sendQueuedUpload(gateway, token, upload) {
     });
     return false;
   }
+  const [caption, ...overflow] = captionPieces(upload.caption);
   let answered;
   try {
     answered = await telegramUpload(
       gateway,
       telegramApiUrl(token, "sendPhoto"),
-      uploadFields(upload),
+      uploadFields({ ...upload, caption }),
       { field: "photo", name: upload.file_name, bytes },
     );
   } catch (error) {
@@ -826,8 +863,11 @@ async function sendQueuedUpload(gateway, token, upload) {
     });
     return false;
   }
-  await reportUpload(gateway, upload, uploadOutcome(answered));
-  const retryAfter = telegramRetryAfter(answered);
+  const photographed = uploadOutcome(answered);
+  const unsent =
+    photographed.outcome === "delivered" ? await sentOverflow(gateway, token, upload, overflow) : null;
+  await reportUpload(gateway, upload, unsent?.settled ?? photographed);
+  const retryAfter = telegramRetryAfter(unsent === null ? answered : unsent.answered);
   if (retryAfter === null) return false;
   gateway.gate.hold(retryAfter);
   return true;