@agentshouse/kit 0.2.1-c441d29eb63f4 → 0.2.1-c4613862fad84

package/dist/files.js

@@ -9,6 +9,7 @@ import { retryDelay } from './api.js';
 import { Unsettled } from './mcp.js';
 import { relayed } from './relay.js';
 const STALLED_ROUNDS = 8;
+const PART_CHECKSUM = 'x-amz-checksum-sha256';
 const LINK = /\]\((\/rooms\/[^/)\s]+\/[^)\s]+)\)/gu;
 export function linkedPaths(text) {
     return [...new Set(Array.from(text.matchAll(LINK), (link) => link[1]))];
@@ -32,17 +33,39 @@ function paused(milliseconds) {
 export function storeRefusal(act, status) {
     return new Error(`the ${act} answered ${status}; ${act} the file again`);
 }
+async function partDigests(uploading, partBytes) {
+    const whole = createHash('sha256');
+    const digests = [];
+    for (let start = 0; digests.length === 0 || start < uploading.bytes; start += partBytes) {
+        const end = Math.min(start + partBytes, uploading.bytes);
+        const digest = createHash('sha256');
+        for await (const chunk of uploading.read(start, end)) {
+            digest.update(chunk);
+            whole.update(chunk);
+        }
+        digests.push(digest.digest());
+    }
+    if (whole.digest('hex') !== uploading.sha256)
+        throw new Error(`${uploading.name} changed while it was uploaded; upload it again`);
+    return digests;
+}
 export async function uploaded(declared, uploading) {
-    let upload = declared;
+    const partBytes = declared.part_bytes;
+    const digests = await partDigests(uploading, partBytes);
+    const partSha256 = digests.map((digest) => digest.toString('hex'));
+    let answer = await finishing(uploading, declared.id, partSha256);
     let idle = 0;
     let stalled = 0;
-    for (;;) {
+    while ('upload' in answer) {
+        const { id, parts } = answer.upload;
         let sent = 0;
         let failure = null;
-        for (const { part, url } of upload.parts) {
-            const start = (part - 1) * upload.part_bytes;
+        for (const { part, url } of parts ?? []) {
+            const start = (part - 1) * partBytes;
             try {
-                await uploading.send(url, start, Math.min(start + upload.part_bytes, uploading.bytes));
+                await uploading.send(url, start, Math.min(start + partBytes, uploading.bytes), {
+                    [PART_CHECKSUM]: digests[part - 1].toString('base64'),
+                });
                 sent++;
             }
             catch (error) {
@@ -57,24 +80,17 @@ export async function uploaded(declared, uploading) {
         else {
             if (failure !== null && ++stalled >= STALLED_ROUNDS)
                 throw failure;
-            // A round that sent no part, its store unreachable or not yet started, is followed by the next finishing call on the jittered curve.
+            // A round that sent no part, its store unreachable, is followed by the next finishing call on the jittered curve.
             await paused(retryDelay(idle++));
         }
-        let answer = await finishing(uploading, upload.id);
-        while ('checking' in answer) {
-            // A finishing call that finds House still checking the stored bytes is sent again after five seconds, the cadence at which House takes up a check it handed over.
-            await paused(5_000);
-            answer = await finishing(uploading, upload.id);
-        }
-        if (!('upload' in answer))
-            return answer;
-        upload = answer.upload;
+        answer = await finishing(uploading, id, partSha256);
     }
+    return answer;
 }
-async function finishing(uploading, upload) {
+async function finishing(uploading, upload, partSha256) {
     for (let unsettled = 1;; unsettled++) {
         try {
-            return await uploading.finish(upload);
+            return await uploading.finish(upload, partSha256);
         }
         catch (error) {
             if (!(error instanceof Unsettled) || unsettled === STALLED_ROUNDS)

package/dist/git.js

@@ -2,8 +2,8 @@ import { spawn } from 'node:child_process';
 import { isUtf8 } from 'node:buffer';
 import { createHash } from 'node:crypto';
 import { join } from 'node:path';
-import { withoutProxy } from './clis.js';
 import { workspaceRoot } from './home.js';
+import { childEnvironment } from './relay.js';
 export function localCopies() {
     return join(workspaceRoot(), 'local-copies');
 }
@@ -11,7 +11,7 @@ export const HOUSE_REF = 'refs/house/received';
 const COMMITTER = 'Kit <house-kit@localhost>';
 export function run(cwd, args, input, env = {}) {
     return new Promise((resolve, reject) => {
-        const child = spawn('git', args, { cwd, env: { ...withoutProxy(), ...env } });
+        const child = spawn('git', args, { cwd, env: { ...childEnvironment(), ...env } });
         const stdout = [];
         let stderr = '';
         child.stdout.on('data', (chunk) => stdout.push(chunk));

package/dist/home.js

@@ -8,7 +8,6 @@ const ENROLMENT = 'credential.json';
 const DISCONNECTED = 'disconnected.json';
 const CONFIGURATION = 'kit.json';
 const OWN_AGENT = 'own-agent.json';
-const RESTART = 'restart';
 let defaulted;
 function writable(directory) {
     try {
@@ -132,12 +131,6 @@ export async function forgetRejected(rejected) {
 export function enrolled() {
     return existsSync(join(kitHome(), ENROLMENT));
 }
-export function restartAsked() {
-    return existsSync(join(kitHome(), RESTART));
-}
-export function forgetRestart() {
-    return rm(join(kitHome(), RESTART), { force: true });
-}
 export function readOwnAgent() {
     return readHome(OWN_AGENT);
 }

package/dist/house-cli.js

@@ -1,6 +1,6 @@
 import { createHash } from 'node:crypto';
 import { createReadStream } from 'node:fs';
-import { request, setGlobalProxyFromEnv } from 'node:http';
+import { request } from 'node:http';
 import { request as httpsRequest } from 'node:https';
 import { extname, join, resolve } from 'node:path';
 import { Readable } from 'node:stream';
@@ -10,7 +10,7 @@ import { HOUSE_REF } from './git.js';
 import { ownerSocket, readOwnAgent } from './home.js';
 import { callHouse, rpc, UNREACHABLE, Unsettled } from './mcp.js';
 import { refusalOf, retryable } from './refusals.js';
-import { relayed, selectRelay } from './relay.js';
+import { proxyUnlessRelayed, relayed, selectRelay } from './relay.js';
 import { parse } from 'yaml';
 const USAGE = "usage: house <tool> ['<arguments as JSON>']";
 const PUSH_USAGE = 'usage: house push [commit] [--owner]';
@@ -89,7 +89,6 @@ async function direct(message) {
     if (ownAgent === null)
         throw new Error(UNCONNECTED);
     selectRelay(process.env.HOUSE_KIT_RELAY || ownAgent.relay);
-    setGlobalProxyFromEnv();
     const answer = await callHouse(ownAgent.house, ownAgent.credential, message).catch(() => {
         throw new Unsettled(UNREACHABLE);
     });
@@ -120,7 +119,7 @@ function opened(url, method, headers, body) {
         const local = socketPath !== undefined;
         const target = local ? null : relayed(url);
         if (!local)
-            setGlobalProxyFromEnv();
+            proxyUnlessRelayed();
         const sent = target === null
             ? request({ socketPath, path: url, method, headers }, answered)
             : (target.protocol === 'https:' ? httpsRequest : request)(target, { method, headers }, answered);
@@ -131,8 +130,19 @@ function opened(url, method, headers, body) {
             pipeline(body, sent).catch(() => undefined);
     });
 }
-async function sentPart(url, file, start, end) {
-    const answer = await opened(url, 'PUT', { 'content-length': String(end - start) }, end === start ? undefined : createReadStream(file, { start, end: end - 1 }));
+function ranged(file, start, end) {
+    return end === start ? undefined : createReadStream(file, { start, end: end - 1 });
+}
+async function* read(file, start, end) {
+    try {
+        yield* ranged(file, start, end) ?? [];
+    }
+    catch (error) {
+        throw unreadable(file, error);
+    }
+}
+async function sentPart(url, file, start, end, headers) {
+    const answer = await opened(url, 'PUT', { ...headers, 'content-length': String(end - start) }, ranged(file, start, end));
     await answer.toArray();
     if (answer.statusCode !== 200)
         throw storeRefusal('upload', answer.statusCode);
@@ -171,10 +181,10 @@ async function described(file) {
     const mediaType = MEDIA_TYPES.get(extname(file).slice(1).toLowerCase());
     return { bytes, sha256: digest.digest('hex'), ...(mediaType === undefined ? {} : { media_type: mediaType }) };
 }
-async function finished(upload, room) {
-    const text = await called('upload', { upload, room_ref: room });
+async function finished(upload, room, partSha256) {
+    const text = await called('upload', { upload, room_ref: room, part_sha256: partSha256 });
     const answer = parse(text);
-    return answer !== null && ('upload' in answer || 'checking' in answer) ? answer : { text };
+    return answer !== null && 'upload' in answer ? answer : { text };
 }
 async function upload({ file, ...destination }) {
     if (typeof file !== 'string' || file === '')
@@ -185,9 +195,12 @@ async function upload({ file, ...destination }) {
     if (declared?.upload === undefined)
         return answer;
     const accepted = await uploaded(declared.upload, {
+        name: file,
         bytes: description.bytes,
-        send: (url, start, end) => sentPart(url, file, start, end),
-        finish: (id) => finished(id, destination.room_ref),
+        sha256: description.sha256,
+        read: (start, end) => read(file, start, end),
+        send: (url, start, end, headers) => sentPart(url, file, start, end, headers),
+        finish: (id, partSha256) => finished(id, destination.room_ref, partSha256),
     });
     return accepted.text;
 }

package/dist/house-main.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-const [major = 0, minor = 0] = process.versions.node.split('.').map(Number);
-if (major < 24 || (major === 24 && minor < 14)) {
-    process.stderr.write(`house: the Kit needs Node 24.14.0 or newer; this is ${process.versions.node}\n`);
+const [major = 0, minor = 0, patch = 0] = process.versions.node.split('.').map(Number);
+if (major < 24 || (major === 24 && (minor < 22 || (minor === 22 && patch < 1)))) {
+    process.stderr.write(`house: the Kit needs Node 24.22.1 or newer; this is ${process.versions.node}\n`);
     process.exitCode = 1;
 }
 else {

package/dist/instructions.js

@@ -1,6 +1,6 @@
 import { agentInstructions } from '@agentshouse/skills';
 import { HOUSE_REF } from './git.js';
-const HOW_WE_WORK = '/rooms/private/how-we-work.md';
+const OWNER_RULES = '/rooms/private/owner-rules.md';
 const UNREADABLE = /^(?:\S+: )?(?:path_not_found|room_not_found|operation_denied)\b/;
 const FAILED = /^exit: [1-9]\d*$/;
 const CUT = /^stderr: shell: output_cut (\d+) of \d+ bytes; continue with: (.+)$/;
@@ -8,9 +8,9 @@ function cutOf(lines) {
     const cut = CUT.exec(lines[0] ?? '');
     return cut !== null && Buffer.byteLength(lines.slice(1).join('\n')) === Number(cut[1]) ? cut : null;
 }
-async function readHowWeWork(bridge) {
+async function readOwnerRules(bridge) {
     let document = '';
-    for (let command = `cat ${HOW_WE_WORK}`; command !== undefined;) {
+    for (let command = `cat ${OWNER_RULES}`; command !== undefined;) {
         const read = await bridge.tool('shell', { command });
         const text = read.content.map((content) => content.text).join('\n');
         const lines = text.split('\n');
@@ -28,5 +28,5 @@ async function readHowWeWork(bridge) {
 }
 export async function instructions(bridge, base, copies) {
     const lines = agentInstructions(HOUSE_REF, copies);
-    return [lines.join('\n'), base, (await readHowWeWork(bridge)).replace(/\n$/, '')].filter((part) => part !== '').join('\n\n');
+    return [lines.join('\n'), base, (await readOwnerRules(bridge)).replace(/\n$/, '')].filter((part) => part !== '').join('\n\n');
 }

package/dist/kit-cli.js

@@ -1,9 +1,9 @@
-import { setGlobalProxyFromEnv } from 'node:http';
 import { parseArgs } from 'node:util';
 import { answerGitCredential } from './app-git.js';
 import { chatgpt } from './chatgpt.js';
 import { login } from './login.js';
 import { logout } from './logout.js';
+import { proxyUnlessRelayed } from './relay.js';
 import { resident } from './resident.js';
 const USAGE = 'usage: kit <login|logout|resident|chatgpt>\n';
 const COMMANDS = new Map([
@@ -36,7 +36,7 @@ const COMMANDS = new Map([
     ],
 ]);
 const [command, ...argv] = process.argv.slice(2);
-setGlobalProxyFromEnv();
+proxyUnlessRelayed();
 async function run() {
     if (command === 'login')
         return login(argv);

package/dist/kit-main.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-const [major = 0, minor = 0] = process.versions.node.split('.').map(Number);
-if (major < 24 || (major === 24 && minor < 14)) {
-    process.stderr.write(`kit: the Kit needs Node 24.14.0 or newer; this is ${process.versions.node}\n`);
+const [major = 0, minor = 0, patch = 0] = process.versions.node.split('.').map(Number);
+if (major < 24 || (major === 24 && (minor < 22 || (minor === 22 && patch < 1)))) {
+    process.stderr.write(`kit: the Kit needs Node 24.22.1 or newer; this is ${process.versions.node}\n`);
     process.exitCode = 1;
 }
 else {

package/dist/login.js

@@ -10,6 +10,7 @@ import { refusalOf } from './refusals.js';
 import { selectRelay } from './relay.js';
 import { startService } from './service.js';
 import { placeSkillSet } from './skills.js';
+import { endUnserved } from './wire.js';
 export const DEFAULT_HOUSE = 'https://agents.house';
 const OPENER = process.platform === 'darwin' ? 'open' : 'xdg-open';
 // Polling every two seconds brings the User's confirmation to the waiting Kit moments after they give it.
@@ -25,6 +26,7 @@ export async function accepted(house, credential) {
         return true;
     if (checked.status === 401)
         return false;
+    endUnserved(checked.text);
     throw new Error(`House answered ${checked.status} when Kit checked this computer's own agent's connection: ${checked.text}`);
 }
 const USAGE = `usage: kit login [--house <origin>] [--environment <id>] [--rooms <ref>[,<ref>...] | --no-private]
@@ -119,7 +121,7 @@ export async function login(argv) {
         open(started.start_url);
         exchanged = await retrying(() => post(house, '/kit/token', { login: started.login, code_verifier: verifier }), undefined, () => POLL_INTERVAL_MS);
     }
-    await placeSkillSet();
+    await placeSkillSet(house);
     await writeCodexRule().catch((error) => process.stderr.write(`kit: ${error.message}\n`));
     const relayRecord = relay === undefined ? {} : { relay };
     await writeEnrolment({

package/dist/mcp.js

@@ -1,6 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { KIT_RELEASE } from './clis.js';
 import { relayed } from './relay.js';
+import { KIT_WIRE, KIT_WIRE_HEADER } from './wire.js';
 const MCP_PROTOCOL_VERSION = '2026-07-28';
 export const UNREACHABLE = 'House is unreachable; call again in a minute';
 export class Unsettled extends Error {
@@ -33,6 +34,7 @@ export async function callHouse(origin, credential, message, operation = null, s
             'mcp-protocol-version': MCP_PROTOCOL_VERSION,
             'mcp-method': message.method,
             ...(tool === null ? {} : { 'mcp-name': tool }),
+            [KIT_WIRE_HEADER]: String(KIT_WIRE),
         },
         body: mcpBody(message, operation),
         signal,

package/dist/placement.js

@@ -1,23 +1,6 @@
 import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { run } from './clis.js';
+import { join, resolve } from 'node:path';
 import { kitHome } from './home.js';
-export function service() {
-    if (process.platform !== 'linux' || !process.env.INVOCATION_ID)
-        return null;
-    return process.env.MANAGERPID ? 'user' : 'system';
-}
-export function throughSudo() {
-    return service() === 'system' && process.getuid() !== 0;
-}
-export async function updatesItself() {
-    if (service() === null)
-        return false;
-    if (!throughSudo())
-        return true;
-    // sudo answers at once, so ten seconds only bounds a stuck sudo.
-    return (await run('sudo', ['-n', 'true'], 10_000)).status === 0;
-}
 function recorded(name) {
     try {
         return readFileSync(join(kitHome(), name), 'utf8').trim();
@@ -37,3 +20,12 @@ export function machine() {
         return placed;
     return process.platform === 'darwin' ? 'macos' : 'linux';
 }
+export function placedPrefix() {
+    const prefix = process.env.HOUSE_KIT_PREFIX;
+    if (prefix === undefined || prefix === '')
+        throw new Error('this Kit process was not started by a launcher its installer placed');
+    return resolve(prefix);
+}
+export function releaseDirectory(release) {
+    return join(placedPrefix(), 'releases', release);
+}

package/dist/relay.js

@@ -1,6 +1,11 @@
+import { setGlobalProxyFromEnv } from 'node:http';
+const PROXY = /^https?_proxy$/i;
+const LOOPBACK = ['127.0.0.1', 'localhost', '::1'];
 let selected;
+let restoreProxy;
 export function selectRelay(relay) {
     selected = relay === undefined || relay === '' ? null : relay;
+    proxyUnlessRelayed();
 }
 export function relayOrigin() {
     if (selected !== undefined)
@@ -8,6 +13,22 @@ export function relayOrigin() {
     const ambient = process.env.HOUSE_KIT_RELAY;
     return ambient === undefined || ambient === '' ? undefined : ambient;
 }
+function unlessRelayed() {
+    if (relayOrigin() === undefined)
+        return { ...process.env };
+    return Object.fromEntries(Object.entries(process.env).filter(([name]) => !PROXY.test(name)));
+}
+export function proxyUnlessRelayed() {
+    restoreProxy?.();
+    restoreProxy = setGlobalProxyFromEnv(unlessRelayed());
+}
+export function childEnvironment() {
+    const environment = unlessRelayed();
+    if (!Object.keys(environment).some((name) => PROXY.test(name)))
+        return environment;
+    const bypassed = [environment.NO_PROXY ?? environment.no_proxy, ...LOOPBACK].filter((entry) => entry !== undefined && entry !== '').join(',');
+    return { ...environment, NO_PROXY: bypassed, no_proxy: bypassed };
+}
 export function relayed(target) {
     const url = new URL(target);
     const relay = relayOrigin();

package/dist/resident.js

@@ -10,16 +10,17 @@ import { house } from './api.js';
 import { received } from './bridge.js';
 import { CONVERSATION_METHODS, Conversations } from './conversations.js';
 import { LocalCopies } from './copies.js';
-import { restart } from './end.js';
-import { agentBase, enrolled, forgetRestart, kitHome, ownerLock, ownerSocket, restartAsked } from './home.js';
+import { restart, unknownMethod } from './end.js';
+import { agentBase, enrolled, kitHome, ownerLock, ownerSocket, readEnrolment } from './home.js';
 import { Calls } from './calls.js';
 import { killDescendants } from './scope.js';
+import { removeInputs, Scripts } from './scripts.js';
 import { quoted } from './shell.js';
 import { SignIns } from './sign-in.js';
 import { placeSkillSet } from './skills.js';
 import { holdConnection } from './connection.js';
 import { KitUpdate } from './update.js';
-import { WebWizards } from './web-wizard.js';
+import { takeUnservedRelease } from './wire.js';
 import { codexLauncher } from './work.js';
 function report(error) {
     process.stderr.write(`kit: ${error instanceof Error ? error.message : String(error)}\n`);
@@ -110,14 +111,13 @@ function connected() {
 }
 async function started() {
     await connected();
-    await forgetRestart();
     watch(kitHome(), () => {
         if (enrolled())
             return;
         killDescendants();
         process.exit(1);
     });
-    await placeSkillSet();
+    await placeSkillSet((await readEnrolment()).house);
     await mkdir(agentBase(), { recursive: true });
     await installShim(join(kitHome(), 'shim', 'git'), 'git-main');
     await installShim(codexLauncher(), 'codex-main');
@@ -140,8 +140,8 @@ export async function resident() {
         if (!idle()) {
             reported = false;
         }
-        else if (restartAsked() && conversations.quiet()) {
-            restart('restarting for an updated CLI');
+        else if (update.placedRelease() !== null && conversations.quiet()) {
+            restart(`Kit ${update.placedRelease()} is placed; its supervisor starts it`);
         }
         else if (!reported) {
             reported = true;
@@ -159,34 +159,38 @@ export async function resident() {
     });
     const signIns = new SignIns(house, agents, calls);
     const update = new KitUpdate(calls);
-    const wizards = new WebWizards(calls, (notification) => connection?.send(notification) ?? false);
+    if (process.env.HOUSE_KIT_SANDBOX !== '1')
+        takeUnservedRelease((release) => logged(update.takeRefused(release)));
+    removeInputs();
+    const scripts = new Scripts(calls, (notification) => connection?.send(notification) ?? false);
     for (const signal of ['SIGTERM', 'SIGINT']) {
         process.once(signal, () => {
             killDescendants();
+            removeInputs();
             process.kill(process.pid, signal);
         });
     }
     await house.deliver('/kit/restarted', {}).catch(report);
-    await update.resumed().catch(report);
     logged(agents.refresh());
+    agents.keepCurrent();
     connection = holdConnection({
         opened: () => {
             conversations.opened();
             changed();
             logged(copies.connected());
         },
-        closed: () => wizards.disconnected(),
+        closed: () => scripts.disconnected(),
         call: (call) => {
             if (call.kind === 'sign_in')
                 signIns.start(call);
             else if (call.kind === 'update')
-                update.start(call);
-            else if (call.kind === 'run_wizard')
-                wizards.start(call);
+                update.take(call);
+            else if (call.kind === 'run_wizard' || call.kind === 'run_function')
+                scripts.start(call);
             else if (CONVERSATION_METHODS.has(call.kind))
                 conversations.call(call);
             else {
-                const refused = { refused: `This Kit does not know ${call.kind}; update the Kit` };
+                const refused = { refused: unknownMethod(call.kind) };
                 void calls.carry(call.input_id, async () => ({ result: refused }));
             }
         },
@@ -197,7 +201,7 @@ export async function resident() {
                 logged(copies.changed(notification.rooms));
             if (notification.type === 'work_available' && notification.subject === 'agents')
                 logged(agents.refresh());
-            wizards.notified(notification);
+            scripts.notified(notification);
         },
     });
 }

package/dist/scope.js

@@ -1,5 +1,5 @@
 import { execFileSync } from 'node:child_process';
-import { mkdirSync, readdirSync, readFileSync, rmdirSync, statSync, writeFileSync } from 'node:fs';
+import { mkdirSync, readdirSync, readFileSync, realpathSync, rmdirSync, statSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 const LISTING_BYTES = 1 << 28;
 const CGROUPS = '/sys/fs/cgroup';
@@ -122,15 +122,23 @@ function members(group) {
     }
     return pids;
 }
+function besideCli(cli) {
+    try {
+        return `${realpathSync(cli)}-`;
+    }
+    catch {
+        return null;
+    }
+}
 export class Scope {
     marker;
-    cli;
+    helpers;
     group;
     session = null;
     recorded = null;
     constructor(marker, name, cli) {
         this.marker = marker;
-        this.cli = cli;
+        this.helpers = besideCli(cli);
         const own = ownGroup();
         this.group = own === null ? null : join(own, name);
         try {
@@ -168,7 +176,7 @@ export class Scope {
             return true;
         if (this.recorded === null)
             return found.size > 0;
-        return [...found].some(([pid, { session, command }]) => session !== this.session || !(this.recorded.has(pid) || command.startsWith(`${this.cli}-`)));
+        return [...found].some(([pid, { session, command }]) => session !== this.session || !(this.recorded.has(pid) || (this.helpers !== null && command.startsWith(this.helpers))));
     }
     empty() {
         return this.found()?.size === 0;