@ai-ecoverse/slicc-agent 6.0.10 → 6.0.11

package/README.md

@@ -751,8 +751,8 @@ Every same-repo pull request gets one `cert-review` status from `.github/workflo
 
 - **What is behaviour, by output:**
   - **Plan:** packs the base and the pull request merged onto it with `npm pack --dry-run --ignore-scripts`. A change touches behaviour when it changes a file either side ships (`dist`, `bin`, `packages/vfs-root` and whatever `files` lists, so a shipped prompt or agent definition counts), a build input (`src/`, `bin/`, `build.mjs`, `tsconfig*.json`, `patches/`, `package.json` and its lock, `.releaserc*`, `scripts/publish.mjs`), `release.yml` or `ci.yml`, or the reviewer itself.
-  - **Not behaviour:** anything else, such as `evals/`, `test/`, `README.md`, `AGENTS.md`, `renovate.json`, `lefthook.yml`, `scripts/check-*.mjs` and `review.yml`. It gets a green `not behaviour: <files>`.
-  - **Evidence comes by id from the job that made it:** the jobs that run the pull request's code (`pack candidate` builds it; both `suite` legs run its tests) share the run's artifact store with the jobs that don't, and code in them can reach the runner's artifact token. So each producer job hands on its artifact's `artifact-id` and `artifact-digest`, consumers download by `artifact-ids` with `digest-mismatch: error`, no upload uses `overwrite`, and the base build has its own job, `pack base`, which runs only main's code. `tools/cert-review/artifacts.mjs` lists the run's artifacts and fails on any in `agent-tgz-` or `cert-review-` that its producer didn't upload with that id, name and digest. `same` runs it before it compares the tarballs, and it uploads its evidence before it posts, so "not behaviour (identical dist)" can't be bought with a planted artifact. `record` runs it on everything, and a failure makes the record INCOMPLETE. **Protected:** the base build, the delta, the same-dist evidence and the review's verdict and evidence. **Not protected, by design:** the candidate tarball and both suites' results (the base leg runs the pull request's tests on main's tree), because code on a runner can always lie about its own results. They're taken by exact name, at most one each.
+  - **Not behaviour:** anything else, such as `evals/`, `test/`, `README.md`, `AGENTS.md`, `renovate.json`, `lefthook.yml` and `scripts/check-*.mjs`. It gets a green `not behaviour: <files>`.
+  - **Evidence comes by id from the job that made it:** the jobs that run the pull request's code (`pack candidate` builds it; both `suite` legs run its tests) share the run's artifact store with the jobs that don't, and code in them can reach the runner's artifact token. So each producer job hands on its artifact's `artifact-id` and `artifact-digest`, consumers download by `artifact-ids` with `digest-mismatch: error`, no upload uses `overwrite`, and the base build has its own job, `pack base`, which runs only main's code and restores no Actions cache, because the candidate job shares the run's cache scope. `tools/cert-review/artifacts.mjs` lists the run's artifacts and fails on any in `agent-tgz-` or `cert-review-` that its producer didn't upload with that id, name and digest. `same` runs it before it compares the tarballs, and it uploads its evidence before it posts, so "not behaviour (identical dist)" can't be bought with a planted artifact. `record` runs it on everything, and a failure makes the record INCOMPLETE. **Protected:** the base build, the delta, the same-dist evidence and the review's verdict and evidence. **Not protected, by design:** the candidate tarball and both suites' results (the base leg runs the pull request's tests on main's tree), because code on a runner can always lie about its own results. They're taken by exact name, at most one each.
   - **Same dist:** a behaviour change is packed for real on both sides. If the tarballs carry the same files, entry types, modes and bytes once each side's exact version and `gitHead` are normalised (source maps without their `mappings`), and `package.json` differs only in `devDependencies`, `version` and `gitHead`, the status is `not behaviour (identical dist)` with both sha256. A change to the reviewer, `release.yml`, `ci.yml`, `.releaserc*` or `scripts/publish.mjs` always gets the full review.
 - **When it runs:** on `merge-ok`, and again on every push while the label is on. Before that a behaviour change is red with `waits for merge-ok`. A same-repo pull request by `renovate[bot]` is reviewed without the label, on every push, so a devDependency bump settles as `not behaviour (identical dist)` without anyone labelling it, and a bump that changes what ships gets the full review.
 - **The full review:**

package/dist/scoops/requests.js

@@ -67,7 +67,9 @@ function controlPlane(env, runner, options = {}) {
     await env.writeFile(`${responses}/${id}.out`, result.out, context);
     if (result.err !== void 0)
       await env.writeFile(`${responses}/${id}.err`, result.err, context);
-    await env.writeFile(`${responses}/${id}.code`, String(result.code), context);
+    const staged = `${responses}/.tmp-${id}.code`;
+    await env.writeFile(staged, String(result.code), context);
+    await env.renameFile(staged, `${responses}/${id}.code`, context);
     await env.remove(`${requests}/${id}`, { force: true }, context);
     await env.remove(`${responses}/${id}.ack`, { force: true }, context);
     await options.mirror?.(context).catch(() => void 0);

package/dist/scoops/requests.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/scoops/requests.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { ExecutionEnv, FileWatcher } from '@earendil-works/pi-durable/env';\nimport type { CronRun } from '../licks/crontab.ts';\nimport type { Answer } from './service.ts';\n\nexport const CONTROL_DIR = '/var/lib/slicc/agent/requests';\nexport const PROTOCOL = 'slicc-agent/2';\nexport const PROTOCOL_MARK = 'slicc-agent/';\nexport const STALE_MS = 10 * 60_000;\nconst COMMAND_NAMES = new Set(['subagent', 'memory', 'gelatiere', 'freezer', 'models', 'panel']);\n\nexport interface Request {\n  id: string;\n  as: 'agent' | 'subagent' | 'memory' | 'gelatiere' | 'freezer' | 'models' | 'panel';\n  caller: string;\n  tab?: string | null;\n  cwd: string;\n  pid: number | null;\n  argv: string[];\n  stdin: string;\n  user?: string;\n  cron?: CronRun;\n}\n\nconst HEADERS: Record<string, number> = { 'slicc-agent/1': 6, [PROTOCOL]: 7 };\n\nexport function cronOf(field: string): CronRun | undefined {\n  const [job, due, missed, extra] = field.split(' ');\n  const count = Number(missed);\n  if (!job || !due || extra !== undefined || !Number.isInteger(count) || count < 0)\n    return undefined;\n  return { job, due, missed: count };\n}\n\nexport function parseRequest(id: string, bytes: Uint8Array): Request | undefined {\n  const decoder = new TextDecoder();\n  const fields: string[] = [];\n  let at = 0;\n  let header = 1;\n  while (fields.length < header) {\n    const end = bytes.indexOf(0, at);\n    if (end < 0) return undefined;\n    fields.push(decoder.decode(bytes.subarray(at, end)));\n    at = end + 1;\n    header = HEADERS[fields[0] as string] ?? 0;\n  }\n  if (!header) return undefined;\n  const [, as, caller, cwd, pid] = fields;\n  const cron = header === 7 ? cronOf(fields[5] as string) : undefined;\n  const argc = Number(fields.at(-1));\n  if (!Number.isInteger(argc) || argc < 0) return undefined;\n  const argv: string[] = [];\n  while (argv.length < argc) {\n    const end = bytes.indexOf(0, at);\n    if (end < 0) return undefined;\n    argv.push(decoder.decode(bytes.subarray(at, end)));\n    at = end + 1;\n  }\n  const process = Number(pid);\n  const tab = (caller as string).startsWith('tab:') ? (caller as string).slice(4) : null;\n  return {\n    id,\n    as: COMMAND_NAMES.has(as as string) ? (as as Request['as']) : 'agent',\n    caller: tab === null ? (caller as string) : '',\n    ...(tab ? { tab } : {}),\n    cwd: cwd || '/',\n    pid: Number.isInteger(process) && process > 0 ? process : null,\n    argv,\n    stdin: decoder.decode(bytes.subarray(at)),\n    ...(cron ? { cron } : {}),\n  };\n}\n\nexport interface Runner {\n  run(request: Request, context: Context): Promise<Answer>;\n  blocking(request: Request): boolean;\n}\n\nexport interface ControlPlane {\n  start(context: Context): Promise<void>;\n  sweep(context: Context): Promise<void>;\n  close(context: Context): Promise<void>;\n}\n\nexport interface PlaneOptions {\n  dir?: string;\n  now?: () => number;\n  sweepEvery?: number;\n  mirror?: (context: Context) => Promise<void>;\n  user?: string;\n}\n\nexport function controlPlane(\n  env: ExecutionEnv,\n  runner: Runner,\n  options: PlaneOptions = {}\n): ControlPlane {\n  const dir = options.dir ?? CONTROL_DIR;\n  const requests = `${dir}/in`;\n  const responses = `${dir}/out`;\n  const now = options.now ?? Date.now;\n  const handled = new Set<string>();\n  let watcher: FileWatcher | undefined;\n  let timer: ReturnType<typeof setInterval> | undefined;\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const next = lock.then(operation, operation);\n    lock = next.catch(() => undefined);\n    return next;\n  };\n\n  async function answer(id: string, result: Answer, context: Context) {\n    await env.writeFile(`${responses}/${id}.out`, result.out, context);\n    if (result.err !== undefined)\n      await env.writeFile(`${responses}/${id}.err`, result.err, context);\n    await env.writeFile(`${responses}/${id}.code`, String(result.code), context);\n    await env.remove(`${requests}/${id}`, { force: true }, context);\n    await env.remove(`${responses}/${id}.ack`, { force: true }, context);\n    await options.mirror?.(context).catch(() => undefined);\n  }\n\n  async function handle(id: string, context: Context) {\n    if (handled.has(id)) return;\n    handled.add(id);\n    try {\n      const bytes = await env.readBinaryFile(`${requests}/${id}`, context);\n      if (!bytes.ok) return;\n      await env.writeFile(`${responses}/${id}.ack`, '', context);\n      const parsed = parseRequest(id, bytes.value);\n      const request = parsed && options.user ? { ...parsed, user: options.user } : parsed;\n      if (!request) {\n        await answer(\n          id,\n          { code: 2, out: 'agent: this request is not understood; update the agent command\\n' },\n          context\n        );\n        return;\n      }\n      const result = runner.blocking(request)\n        ? await runner.run(request, context)\n        : await serial(() => runner.run(request, context));\n      await answer(id, result, context);\n    } finally {\n      handled.delete(id);\n    }\n  }\n\n  async function scan(context: Context) {\n    const listed = await env.listDir(requests, context);\n    if (!listed.ok) return;\n    for (const entry of listed.value.sort((a, b) => a.name.localeCompare(b.name)))\n      if (entry.kind === 'file' && !entry.name.startsWith('.'))\n        void handle(entry.name, context).catch(() => undefined);\n  }\n\n  async function sweep(context: Context) {\n    for (const folder of [requests, responses]) {\n      const listed = await env.listDir(folder, context);\n      if (!listed.ok) continue;\n      for (const entry of listed.value) {\n        const stale = now() - entry.mtimeMs > STALE_MS;\n        const removable = folder === responses || entry.name.startsWith('.tmp-');\n        if (stale && removable)\n          await env.remove(`${folder}/${entry.name}`, { force: true }, context);\n      }\n    }\n  }\n\n  return {\n    async start(context) {\n      await env.createDir(requests, { recursive: true }, context);\n      await env.createDir(responses, { recursive: true }, context);\n      const leftovers = await env.listDir(requests, context);\n      if (leftovers.ok)\n        for (const entry of leftovers.value)\n          if (entry.name.startsWith('.tmp-'))\n            await env.remove(`${requests}/${entry.name}`, { force: true }, context);\n      await sweep(context);\n      const watched = await env.watch(\n        [{ path: requests }],\n        () => void scan(context).catch(() => undefined),\n        context\n      );\n      if (watched.ok) watcher = watched.value;\n      await scan(context);\n      timer = setInterval(\n        () => void sweep(context).catch(() => undefined),\n        options.sweepEvery ?? 60_000\n      );\n    },\n    sweep,\n    async close(context) {\n      clearInterval(timer);\n      await watcher?.close(context);\n      await lock;\n    },\n  };\n}\n"],
-  "mappings": "AAKO,MAAM,cAAc;AACpB,MAAM,WAAW;AACjB,MAAM,gBAAgB;AACtB,MAAM,WAAW,KAAK;AAC7B,MAAM,gBAAgB,oBAAI,IAAI,CAAC,YAAY,UAAU,aAAa,WAAW,UAAU,OAAO,CAAC;AAe/F,MAAM,UAAkC,EAAE,iBAAiB,GAAG,CAAC,QAAQ,GAAG,EAAE;AAErE,SAAS,OAAO,OAAoC;AACzD,QAAM,CAAC,KAAK,KAAK,QAAQ,KAAK,IAAI,MAAM,MAAM,GAAG;AACjD,QAAM,QAAQ,OAAO,MAAM;AAC3B,MAAI,CAAC,OAAO,CAAC,OAAO,UAAU,UAAa,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ;AAC7E,WAAO;AACT,SAAO,EAAE,KAAK,KAAK,QAAQ,MAAM;AACnC;AAEO,SAAS,aAAa,IAAY,OAAwC;AAC/E,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,SAAmB,CAAC;AAC1B,MAAI,KAAK;AACT,MAAI,SAAS;AACb,SAAO,OAAO,SAAS,QAAQ;AAC7B,UAAM,MAAM,MAAM,QAAQ,GAAG,EAAE;AAC/B,QAAI,MAAM,EAAG,QAAO;AACpB,WAAO,KAAK,QAAQ,OAAO,MAAM,SAAS,IAAI,GAAG,CAAC,CAAC;AACnD,SAAK,MAAM;AACX,aAAS,QAAQ,OAAO,CAAC,CAAW,KAAK;AAAA,EAC3C;AACA,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,CAAC,EAAE,IAAI,QAAQ,KAAK,GAAG,IAAI;AACjC,QAAM,OAAO,WAAW,IAAI,OAAO,OAAO,CAAC,CAAW,IAAI;AAC1D,QAAM,OAAO,OAAO,OAAO,GAAG,EAAE,CAAC;AACjC,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,EAAG,QAAO;AAChD,QAAM,OAAiB,CAAC;AACxB,SAAO,KAAK,SAAS,MAAM;AACzB,UAAM,MAAM,MAAM,QAAQ,GAAG,EAAE;AAC/B,QAAI,MAAM,EAAG,QAAO;AACpB,SAAK,KAAK,QAAQ,OAAO,MAAM,SAAS,IAAI,GAAG,CAAC,CAAC;AACjD,SAAK,MAAM;AAAA,EACb;AACA,QAAM,UAAU,OAAO,GAAG;AAC1B,QAAM,MAAO,OAAkB,WAAW,MAAM,IAAK,OAAkB,MAAM,CAAC,IAAI;AAClF,SAAO;AAAA,IACL;AAAA,IACA,IAAI,cAAc,IAAI,EAAY,IAAK,KAAuB;AAAA,IAC9D,QAAQ,QAAQ,OAAQ,SAAoB;AAAA,IAC5C,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;AAAA,IACrB,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO,UAAU,OAAO,KAAK,UAAU,IAAI,UAAU;AAAA,IAC1D;AAAA,IACA,OAAO,QAAQ,OAAO,MAAM,SAAS,EAAE,CAAC;AAAA,IACxC,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,EACzB;AACF;AAqBO,SAAS,aACd,KACA,QACA,UAAwB,CAAC,GACX;AACd,QAAM,MAAM,QAAQ,OAAO;AAC3B,QAAM,WAAW,GAAG,GAAG;AACvB,QAAM,YAAY,GAAG,GAAG;AACxB,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,QAAM,UAAU,oBAAI,IAAY;AAChC,MAAI;AACJ,MAAI;AACJ,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,OAAO,KAAK,KAAK,WAAW,SAAS;AAC3C,WAAO,KAAK,MAAM,MAAM,MAAS;AACjC,WAAO;AAAA,EACT;AAEA,iBAAe,OAAO,IAAY,QAAgB,SAAkB;AAClE,UAAM,IAAI,UAAU,GAAG,SAAS,IAAI,EAAE,QAAQ,OAAO,KAAK,OAAO;AACjE,QAAI,OAAO,QAAQ;AACjB,YAAM,IAAI,UAAU,GAAG,SAAS,IAAI,EAAE,QAAQ,OAAO,KAAK,OAAO;AACnE,UAAM,IAAI,UAAU,GAAG,SAAS,IAAI,EAAE,SAAS,OAAO,OAAO,IAAI,GAAG,OAAO;AAC3E,UAAM,IAAI,OAAO,GAAG,QAAQ,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,GAAG,OAAO;AAC9D,UAAM,IAAI,OAAO,GAAG,SAAS,IAAI,EAAE,QAAQ,EAAE,OAAO,KAAK,GAAG,OAAO;AACnE,UAAM,QAAQ,SAAS,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EACvD;AAEA,iBAAe,OAAO,IAAY,SAAkB;AAClD,QAAI,QAAQ,IAAI,EAAE,EAAG;AACrB,YAAQ,IAAI,EAAE;AACd,QAAI;AACF,YAAM,QAAQ,MAAM,IAAI,eAAe,GAAG,QAAQ,IAAI,EAAE,IAAI,OAAO;AACnE,UAAI,CAAC,MAAM,GAAI;AACf,YAAM,IAAI,UAAU,GAAG,SAAS,IAAI,EAAE,QAAQ,IAAI,OAAO;AACzD,YAAM,SAAS,aAAa,IAAI,MAAM,KAAK;AAC3C,YAAM,UAAU,UAAU,QAAQ,OAAO,EAAE,GAAG,QAAQ,MAAM,QAAQ,KAAK,IAAI;AAC7E,UAAI,CAAC,SAAS;AACZ,cAAM;AAAA,UACJ;AAAA,UACA,EAAE,MAAM,GAAG,KAAK,oEAAoE;AAAA,UACpF;AAAA,QACF;AACA;AAAA,MACF;AACA,YAAM,SAAS,OAAO,SAAS,OAAO,IAClC,MAAM,OAAO,IAAI,SAAS,OAAO,IACjC,MAAM,OAAO,MAAM,OAAO,IAAI,SAAS,OAAO,CAAC;AACnD,YAAM,OAAO,IAAI,QAAQ,OAAO;AAAA,IAClC,UAAE;AACA,cAAQ,OAAO,EAAE;AAAA,IACnB;AAAA,EACF;AAEA,iBAAe,KAAK,SAAkB;AACpC,UAAM,SAAS,MAAM,IAAI,QAAQ,UAAU,OAAO;AAClD,QAAI,CAAC,OAAO,GAAI;AAChB,eAAW,SAAS,OAAO,MAAM,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC1E,UAAI,MAAM,SAAS,UAAU,CAAC,MAAM,KAAK,WAAW,GAAG;AACrD,aAAK,OAAO,MAAM,MAAM,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EAC5D;AAEA,iBAAe,MAAM,SAAkB;AACrC,eAAW,UAAU,CAAC,UAAU,SAAS,GAAG;AAC1C,YAAM,SAAS,MAAM,IAAI,QAAQ,QAAQ,OAAO;AAChD,UAAI,CAAC,OAAO,GAAI;AAChB,iBAAW,SAAS,OAAO,OAAO;AAChC,cAAM,QAAQ,IAAI,IAAI,MAAM,UAAU;AACtC,cAAM,YAAY,WAAW,aAAa,MAAM,KAAK,WAAW,OAAO;AACvE,YAAI,SAAS;AACX,gBAAM,IAAI,OAAO,GAAG,MAAM,IAAI,MAAM,IAAI,IAAI,EAAE,OAAO,KAAK,GAAG,OAAO;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,MAAM,SAAS;AACnB,YAAM,IAAI,UAAU,UAAU,EAAE,WAAW,KAAK,GAAG,OAAO;AAC1D,YAAM,IAAI,UAAU,WAAW,EAAE,WAAW,KAAK,GAAG,OAAO;AAC3D,YAAM,YAAY,MAAM,IAAI,QAAQ,UAAU,OAAO;AACrD,UAAI,UAAU;AACZ,mBAAW,SAAS,UAAU;AAC5B,cAAI,MAAM,KAAK,WAAW,OAAO;AAC/B,kBAAM,IAAI,OAAO,GAAG,QAAQ,IAAI,MAAM,IAAI,IAAI,EAAE,OAAO,KAAK,GAAG,OAAO;AAAA;AAC5E,YAAM,MAAM,OAAO;AACnB,YAAM,UAAU,MAAM,IAAI;AAAA,QACxB,CAAC,EAAE,MAAM,SAAS,CAAC;AAAA,QACnB,MAAM,KAAK,KAAK,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,QAC9C;AAAA,MACF;AACA,UAAI,QAAQ,GAAI,WAAU,QAAQ;AAClC,YAAM,KAAK,OAAO;AAClB,cAAQ;AAAA,QACN,MAAM,KAAK,MAAM,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,QAC/C,QAAQ,cAAc;AAAA,MACxB;AAAA,IACF;AAAA,IACA;AAAA,IACA,MAAM,MAAM,SAAS;AACnB,oBAAc,KAAK;AACnB,YAAM,SAAS,MAAM,OAAO;AAC5B,YAAM;AAAA,IACR;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { ExecutionEnv, FileWatcher } from '@earendil-works/pi-durable/env';\nimport type { CronRun } from '../licks/crontab.ts';\nimport type { Answer } from './service.ts';\n\nexport const CONTROL_DIR = '/var/lib/slicc/agent/requests';\nexport const PROTOCOL = 'slicc-agent/2';\nexport const PROTOCOL_MARK = 'slicc-agent/';\nexport const STALE_MS = 10 * 60_000;\nconst COMMAND_NAMES = new Set(['subagent', 'memory', 'gelatiere', 'freezer', 'models', 'panel']);\n\nexport interface Request {\n  id: string;\n  as: 'agent' | 'subagent' | 'memory' | 'gelatiere' | 'freezer' | 'models' | 'panel';\n  caller: string;\n  tab?: string | null;\n  cwd: string;\n  pid: number | null;\n  argv: string[];\n  stdin: string;\n  user?: string;\n  cron?: CronRun;\n}\n\nconst HEADERS: Record<string, number> = { 'slicc-agent/1': 6, [PROTOCOL]: 7 };\n\nexport function cronOf(field: string): CronRun | undefined {\n  const [job, due, missed, extra] = field.split(' ');\n  const count = Number(missed);\n  if (!job || !due || extra !== undefined || !Number.isInteger(count) || count < 0)\n    return undefined;\n  return { job, due, missed: count };\n}\n\nexport function parseRequest(id: string, bytes: Uint8Array): Request | undefined {\n  const decoder = new TextDecoder();\n  const fields: string[] = [];\n  let at = 0;\n  let header = 1;\n  while (fields.length < header) {\n    const end = bytes.indexOf(0, at);\n    if (end < 0) return undefined;\n    fields.push(decoder.decode(bytes.subarray(at, end)));\n    at = end + 1;\n    header = HEADERS[fields[0] as string] ?? 0;\n  }\n  if (!header) return undefined;\n  const [, as, caller, cwd, pid] = fields;\n  const cron = header === 7 ? cronOf(fields[5] as string) : undefined;\n  const argc = Number(fields.at(-1));\n  if (!Number.isInteger(argc) || argc < 0) return undefined;\n  const argv: string[] = [];\n  while (argv.length < argc) {\n    const end = bytes.indexOf(0, at);\n    if (end < 0) return undefined;\n    argv.push(decoder.decode(bytes.subarray(at, end)));\n    at = end + 1;\n  }\n  const process = Number(pid);\n  const tab = (caller as string).startsWith('tab:') ? (caller as string).slice(4) : null;\n  return {\n    id,\n    as: COMMAND_NAMES.has(as as string) ? (as as Request['as']) : 'agent',\n    caller: tab === null ? (caller as string) : '',\n    ...(tab ? { tab } : {}),\n    cwd: cwd || '/',\n    pid: Number.isInteger(process) && process > 0 ? process : null,\n    argv,\n    stdin: decoder.decode(bytes.subarray(at)),\n    ...(cron ? { cron } : {}),\n  };\n}\n\nexport interface Runner {\n  run(request: Request, context: Context): Promise<Answer>;\n  blocking(request: Request): boolean;\n}\n\nexport interface ControlPlane {\n  start(context: Context): Promise<void>;\n  sweep(context: Context): Promise<void>;\n  close(context: Context): Promise<void>;\n}\n\nexport interface PlaneOptions {\n  dir?: string;\n  now?: () => number;\n  sweepEvery?: number;\n  mirror?: (context: Context) => Promise<void>;\n  user?: string;\n}\n\nexport function controlPlane(\n  env: ExecutionEnv,\n  runner: Runner,\n  options: PlaneOptions = {}\n): ControlPlane {\n  const dir = options.dir ?? CONTROL_DIR;\n  const requests = `${dir}/in`;\n  const responses = `${dir}/out`;\n  const now = options.now ?? Date.now;\n  const handled = new Set<string>();\n  let watcher: FileWatcher | undefined;\n  let timer: ReturnType<typeof setInterval> | undefined;\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const next = lock.then(operation, operation);\n    lock = next.catch(() => undefined);\n    return next;\n  };\n\n  async function answer(id: string, result: Answer, context: Context) {\n    await env.writeFile(`${responses}/${id}.out`, result.out, context);\n    if (result.err !== undefined)\n      await env.writeFile(`${responses}/${id}.err`, result.err, context);\n    const staged = `${responses}/.tmp-${id}.code`;\n    await env.writeFile(staged, String(result.code), context);\n    await env.renameFile(staged, `${responses}/${id}.code`, context);\n    await env.remove(`${requests}/${id}`, { force: true }, context);\n    await env.remove(`${responses}/${id}.ack`, { force: true }, context);\n    await options.mirror?.(context).catch(() => undefined);\n  }\n\n  async function handle(id: string, context: Context) {\n    if (handled.has(id)) return;\n    handled.add(id);\n    try {\n      const bytes = await env.readBinaryFile(`${requests}/${id}`, context);\n      if (!bytes.ok) return;\n      await env.writeFile(`${responses}/${id}.ack`, '', context);\n      const parsed = parseRequest(id, bytes.value);\n      const request = parsed && options.user ? { ...parsed, user: options.user } : parsed;\n      if (!request) {\n        await answer(\n          id,\n          { code: 2, out: 'agent: this request is not understood; update the agent command\\n' },\n          context\n        );\n        return;\n      }\n      const result = runner.blocking(request)\n        ? await runner.run(request, context)\n        : await serial(() => runner.run(request, context));\n      await answer(id, result, context);\n    } finally {\n      handled.delete(id);\n    }\n  }\n\n  async function scan(context: Context) {\n    const listed = await env.listDir(requests, context);\n    if (!listed.ok) return;\n    for (const entry of listed.value.sort((a, b) => a.name.localeCompare(b.name)))\n      if (entry.kind === 'file' && !entry.name.startsWith('.'))\n        void handle(entry.name, context).catch(() => undefined);\n  }\n\n  async function sweep(context: Context) {\n    for (const folder of [requests, responses]) {\n      const listed = await env.listDir(folder, context);\n      if (!listed.ok) continue;\n      for (const entry of listed.value) {\n        const stale = now() - entry.mtimeMs > STALE_MS;\n        const removable = folder === responses || entry.name.startsWith('.tmp-');\n        if (stale && removable)\n          await env.remove(`${folder}/${entry.name}`, { force: true }, context);\n      }\n    }\n  }\n\n  return {\n    async start(context) {\n      await env.createDir(requests, { recursive: true }, context);\n      await env.createDir(responses, { recursive: true }, context);\n      const leftovers = await env.listDir(requests, context);\n      if (leftovers.ok)\n        for (const entry of leftovers.value)\n          if (entry.name.startsWith('.tmp-'))\n            await env.remove(`${requests}/${entry.name}`, { force: true }, context);\n      await sweep(context);\n      const watched = await env.watch(\n        [{ path: requests }],\n        () => void scan(context).catch(() => undefined),\n        context\n      );\n      if (watched.ok) watcher = watched.value;\n      await scan(context);\n      timer = setInterval(\n        () => void sweep(context).catch(() => undefined),\n        options.sweepEvery ?? 60_000\n      );\n    },\n    sweep,\n    async close(context) {\n      clearInterval(timer);\n      await watcher?.close(context);\n      await lock;\n    },\n  };\n}\n"],
+  "mappings": "AAKO,MAAM,cAAc;AACpB,MAAM,WAAW;AACjB,MAAM,gBAAgB;AACtB,MAAM,WAAW,KAAK;AAC7B,MAAM,gBAAgB,oBAAI,IAAI,CAAC,YAAY,UAAU,aAAa,WAAW,UAAU,OAAO,CAAC;AAe/F,MAAM,UAAkC,EAAE,iBAAiB,GAAG,CAAC,QAAQ,GAAG,EAAE;AAErE,SAAS,OAAO,OAAoC;AACzD,QAAM,CAAC,KAAK,KAAK,QAAQ,KAAK,IAAI,MAAM,MAAM,GAAG;AACjD,QAAM,QAAQ,OAAO,MAAM;AAC3B,MAAI,CAAC,OAAO,CAAC,OAAO,UAAU,UAAa,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ;AAC7E,WAAO;AACT,SAAO,EAAE,KAAK,KAAK,QAAQ,MAAM;AACnC;AAEO,SAAS,aAAa,IAAY,OAAwC;AAC/E,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,SAAmB,CAAC;AAC1B,MAAI,KAAK;AACT,MAAI,SAAS;AACb,SAAO,OAAO,SAAS,QAAQ;AAC7B,UAAM,MAAM,MAAM,QAAQ,GAAG,EAAE;AAC/B,QAAI,MAAM,EAAG,QAAO;AACpB,WAAO,KAAK,QAAQ,OAAO,MAAM,SAAS,IAAI,GAAG,CAAC,CAAC;AACnD,SAAK,MAAM;AACX,aAAS,QAAQ,OAAO,CAAC,CAAW,KAAK;AAAA,EAC3C;AACA,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,CAAC,EAAE,IAAI,QAAQ,KAAK,GAAG,IAAI;AACjC,QAAM,OAAO,WAAW,IAAI,OAAO,OAAO,CAAC,CAAW,IAAI;AAC1D,QAAM,OAAO,OAAO,OAAO,GAAG,EAAE,CAAC;AACjC,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,EAAG,QAAO;AAChD,QAAM,OAAiB,CAAC;AACxB,SAAO,KAAK,SAAS,MAAM;AACzB,UAAM,MAAM,MAAM,QAAQ,GAAG,EAAE;AAC/B,QAAI,MAAM,EAAG,QAAO;AACpB,SAAK,KAAK,QAAQ,OAAO,MAAM,SAAS,IAAI,GAAG,CAAC,CAAC;AACjD,SAAK,MAAM;AAAA,EACb;AACA,QAAM,UAAU,OAAO,GAAG;AAC1B,QAAM,MAAO,OAAkB,WAAW,MAAM,IAAK,OAAkB,MAAM,CAAC,IAAI;AAClF,SAAO;AAAA,IACL;AAAA,IACA,IAAI,cAAc,IAAI,EAAY,IAAK,KAAuB;AAAA,IAC9D,QAAQ,QAAQ,OAAQ,SAAoB;AAAA,IAC5C,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;AAAA,IACrB,KAAK,OAAO;AAAA,IACZ,KAAK,OAAO,UAAU,OAAO,KAAK,UAAU,IAAI,UAAU;AAAA,IAC1D;AAAA,IACA,OAAO,QAAQ,OAAO,MAAM,SAAS,EAAE,CAAC;AAAA,IACxC,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,EACzB;AACF;AAqBO,SAAS,aACd,KACA,QACA,UAAwB,CAAC,GACX;AACd,QAAM,MAAM,QAAQ,OAAO;AAC3B,QAAM,WAAW,GAAG,GAAG;AACvB,QAAM,YAAY,GAAG,GAAG;AACxB,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,QAAM,UAAU,oBAAI,IAAY;AAChC,MAAI;AACJ,MAAI;AACJ,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,OAAO,KAAK,KAAK,WAAW,SAAS;AAC3C,WAAO,KAAK,MAAM,MAAM,MAAS;AACjC,WAAO;AAAA,EACT;AAEA,iBAAe,OAAO,IAAY,QAAgB,SAAkB;AAClE,UAAM,IAAI,UAAU,GAAG,SAAS,IAAI,EAAE,QAAQ,OAAO,KAAK,OAAO;AACjE,QAAI,OAAO,QAAQ;AACjB,YAAM,IAAI,UAAU,GAAG,SAAS,IAAI,EAAE,QAAQ,OAAO,KAAK,OAAO;AACnE,UAAM,SAAS,GAAG,SAAS,SAAS,EAAE;AACtC,UAAM,IAAI,UAAU,QAAQ,OAAO,OAAO,IAAI,GAAG,OAAO;AACxD,UAAM,IAAI,WAAW,QAAQ,GAAG,SAAS,IAAI,EAAE,SAAS,OAAO;AAC/D,UAAM,IAAI,OAAO,GAAG,QAAQ,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,GAAG,OAAO;AAC9D,UAAM,IAAI,OAAO,GAAG,SAAS,IAAI,EAAE,QAAQ,EAAE,OAAO,KAAK,GAAG,OAAO;AACnE,UAAM,QAAQ,SAAS,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EACvD;AAEA,iBAAe,OAAO,IAAY,SAAkB;AAClD,QAAI,QAAQ,IAAI,EAAE,EAAG;AACrB,YAAQ,IAAI,EAAE;AACd,QAAI;AACF,YAAM,QAAQ,MAAM,IAAI,eAAe,GAAG,QAAQ,IAAI,EAAE,IAAI,OAAO;AACnE,UAAI,CAAC,MAAM,GAAI;AACf,YAAM,IAAI,UAAU,GAAG,SAAS,IAAI,EAAE,QAAQ,IAAI,OAAO;AACzD,YAAM,SAAS,aAAa,IAAI,MAAM,KAAK;AAC3C,YAAM,UAAU,UAAU,QAAQ,OAAO,EAAE,GAAG,QAAQ,MAAM,QAAQ,KAAK,IAAI;AAC7E,UAAI,CAAC,SAAS;AACZ,cAAM;AAAA,UACJ;AAAA,UACA,EAAE,MAAM,GAAG,KAAK,oEAAoE;AAAA,UACpF;AAAA,QACF;AACA;AAAA,MACF;AACA,YAAM,SAAS,OAAO,SAAS,OAAO,IAClC,MAAM,OAAO,IAAI,SAAS,OAAO,IACjC,MAAM,OAAO,MAAM,OAAO,IAAI,SAAS,OAAO,CAAC;AACnD,YAAM,OAAO,IAAI,QAAQ,OAAO;AAAA,IAClC,UAAE;AACA,cAAQ,OAAO,EAAE;AAAA,IACnB;AAAA,EACF;AAEA,iBAAe,KAAK,SAAkB;AACpC,UAAM,SAAS,MAAM,IAAI,QAAQ,UAAU,OAAO;AAClD,QAAI,CAAC,OAAO,GAAI;AAChB,eAAW,SAAS,OAAO,MAAM,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC1E,UAAI,MAAM,SAAS,UAAU,CAAC,MAAM,KAAK,WAAW,GAAG;AACrD,aAAK,OAAO,MAAM,MAAM,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EAC5D;AAEA,iBAAe,MAAM,SAAkB;AACrC,eAAW,UAAU,CAAC,UAAU,SAAS,GAAG;AAC1C,YAAM,SAAS,MAAM,IAAI,QAAQ,QAAQ,OAAO;AAChD,UAAI,CAAC,OAAO,GAAI;AAChB,iBAAW,SAAS,OAAO,OAAO;AAChC,cAAM,QAAQ,IAAI,IAAI,MAAM,UAAU;AACtC,cAAM,YAAY,WAAW,aAAa,MAAM,KAAK,WAAW,OAAO;AACvE,YAAI,SAAS;AACX,gBAAM,IAAI,OAAO,GAAG,MAAM,IAAI,MAAM,IAAI,IAAI,EAAE,OAAO,KAAK,GAAG,OAAO;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,MAAM,SAAS;AACnB,YAAM,IAAI,UAAU,UAAU,EAAE,WAAW,KAAK,GAAG,OAAO;AAC1D,YAAM,IAAI,UAAU,WAAW,EAAE,WAAW,KAAK,GAAG,OAAO;AAC3D,YAAM,YAAY,MAAM,IAAI,QAAQ,UAAU,OAAO;AACrD,UAAI,UAAU;AACZ,mBAAW,SAAS,UAAU;AAC5B,cAAI,MAAM,KAAK,WAAW,OAAO;AAC/B,kBAAM,IAAI,OAAO,GAAG,QAAQ,IAAI,MAAM,IAAI,IAAI,EAAE,OAAO,KAAK,GAAG,OAAO;AAAA;AAC5E,YAAM,MAAM,OAAO;AACnB,YAAM,UAAU,MAAM,IAAI;AAAA,QACxB,CAAC,EAAE,MAAM,SAAS,CAAC;AAAA,QACnB,MAAM,KAAK,KAAK,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,QAC9C;AAAA,MACF;AACA,UAAI,QAAQ,GAAI,WAAU,QAAQ;AAClC,YAAM,KAAK,OAAO;AAClB,cAAQ;AAAA,QACN,MAAM,KAAK,MAAM,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,QAC/C,QAAQ,cAAc;AAAA,MACxB;AAAA,IACF;AAAA,IACA;AAAA,IACA,MAAM,MAAM,SAAS;AACnB,oBAAc,KAAK;AACnB,YAAM,SAAS,MAAM,OAAO;AAC5B,YAAM;AAAA,IACR;AAAA,EACF;AACF;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-agent",
-  "version": "6.0.10",
+  "version": "6.0.11",
   "description": "SLICC's agent core on pi durable: an agent worker, session storage, remoting and pi extensions",
   "type": "module",
   "license": "Apache-2.0",
@@ -63,9 +63,9 @@
     "release": "semantic-release"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-kernel": "1.124.3",
+    "@ai-ecoverse/slicc-kernel": "1.124.8",
     "@ai-ecoverse/slicc-scrub": "1.0.0",
-    "@ai-ecoverse/slicc-shared-web": "1.23.2",
+    "@ai-ecoverse/slicc-shared-web": "1.23.3",
     "@ai-ecoverse/slicc-spectrum": "1.86.4",
     "@ai-ecoverse/wasm-bash": "5.3.0-19",
     "@ai-ecoverse/wasm-coreutils": "9.12.0-9",