@aspectlylabs/mikka 0.0.1 → 0.0.4

package/README.md

@@ -49,10 +49,26 @@ index for inspection. The test daemon still performs its normal lifecycle
 cleanup inside the new dedicated fixture; previously retained resources are
 not part of that fixture.
 
-No global `tsx` or separate `@mikka/protocol` package is needed. The proposed
-release workflow uses npm trusted publishing from GitHub Actions, with npm
-provenance. It is manual and must be configured for the approved package before
-it can publish. Running tests or building a package does not publish it.
+No global `tsx` or separate `@mikka/protocol` package is needed. Every push to
+`main` publishes through `.github/workflows/publish-daemon.yml` after daemon
+checks and the installed-package runtime test pass. The workflow uses npm
+trusted publishing and provenance; its npm trust configuration must authorize
+this exact repository and workflow filename.
+
+CI stamps `0.0.<workflow run number + 1>` into the source manifest before the
+build, so the npm package and runtime report the same version. Source commits
+keep their development version. Re-running a workflow keeps its version and
+skips publication if npm already records that version from the same commit.
+CI writes the commit SHA into the published manifest as `gitHead`; an existing
+version with absent or different commit metadata stops the release. After
+publication, CI reads npm metadata back and checks the commit SHA. If npm
+serves 404 while the published version becomes available, CI checks up to 31
+times with 10-second waits. Exhausting that wait reports registry verification
+as incomplete; it does not claim that npm rejected publication.
+Releases queue without cancellation (up to GitHub's 100 pending-run limit).
+An older run can publish under its own `build-<version>` tag, preserving the
+newer `latest` version. Manual dispatch remains available on `main` and gets
+a new run version. Running local tests or builds does not publish anything.
 
 `test:package` installs the actual tarball into a new directory with public
 registry dependencies, without workspace symlinks or install scripts. Plain

package/cli.js

@@ -2216,7 +2216,7 @@ function closeLogger(logger) {
 // src/service.ts
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { mkdir, writeFile } from "node:fs/promises";
+import { mkdir, writeFile, rm } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname as dirname2, join as join2, resolve } from "node:path";
 var exec = promisify(execFile);
@@ -2284,6 +2284,34 @@ async function restartService(update, beforeRestart, dependencies = {
   beforeRestart();
   dependencies.restart();
 }
+async function uninstallService(clearCredential, dependencies = {
+  manager: process.env.MIKKA_SERVICE,
+  home: homedir(),
+  uid: process.getuid?.() ?? 0,
+  run: async (program, args) => {
+    await exec(program, args, { timeout: 1e4 });
+  },
+  exit: () => {
+    process.exit(0);
+  }
+}) {
+  try {
+    if (dependencies.manager === "systemd") {
+      await dependencies.run("systemctl", ["--user", "disable", "mikka-daemon.service"]);
+      await rm(join2(dependencies.home, ".config/systemd/user/mikka-daemon.service"), { force: true });
+      await dependencies.run("systemctl", ["--user", "daemon-reload"]);
+    } else if (dependencies.manager === "launchd") {
+      await rm(join2(dependencies.home, "Library/LaunchAgents", `${label}.plist`), { force: true });
+    }
+  } finally {
+    clearCredential();
+    try {
+      if (dependencies.manager === "launchd") await dependencies.run("launchctl", ["bootout", `gui/${dependencies.uid}/${label}`]);
+    } finally {
+      dependencies.exit();
+    }
+  }
+}
 
 // ../protocol/src/accounts.ts
 import { z } from "zod";
@@ -2971,13 +2999,18 @@ var runReport = z9.object({
     sha: z9.string().regex(/^[a-f0-9]{40}$/),
     readOnly: z9.literal(true)
   }).optional(),
+  /** Preview branch created or used by the producing run; descriptive metadata only. */
+  previewDatabaseBranch: z9.string().trim().min(1).max(500).optional(),
   /** Acceptance criteria the agent checked, with evidence. */
   criteria: z9.array(
     z9.object({
       criterionId: z9.uuid().optional(),
       text: z9.string().max(2e3).optional(),
       passed: z9.boolean(),
-      evidence: z9.string().max(1e4).optional()
+      evidence: z9.string().max(1e4).optional(),
+      /** Agent-reported criterion check; the daemon-owned verify remains authoritative. */
+      command: z9.string().trim().min(1).max(2e3).optional(),
+      exitCode: z9.number().int().nullable().optional()
     })
   ).max(200).optional(),
   /**
@@ -3321,7 +3354,7 @@ var heartbeatRunSchema = z13.object({
   /** Last tool call, turn boundary or file change (not raw output). */
   lastProgressAt: isoTime
 });
-var deviceManagementCommand = z13.object({ id: z13.uuid(), kind: z13.enum(["redetect", "restart", "update"]) });
+var deviceManagementCommand = z13.object({ id: z13.uuid(), kind: z13.enum(["redetect", "restart", "update", "uninstall"]) });
 var deviceHeartbeatSchema = z13.object({
   completedDeviceCommands: z13.array(z13.uuid()).max(100).optional(),
   failedDeviceCommands: z13.array(z13.object({ id: z13.uuid(), error: z13.string().max(500) })).max(100).optional(),
@@ -4248,7 +4281,7 @@ import { join as join3 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.1",
+  version: "0.0.4",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4305,7 +4338,8 @@ var package_default = {
   },
   engines: {
     node: ">=24"
-  }
+  },
+  gitHead: "4c5f80747928d60ea3e03ed6a3de5ca2dc2216df"
 };
 
 // src/paths.ts
@@ -4944,12 +4978,28 @@ var HttpServerLink = class {
     const liveness = new AbortController();
     const gate = new ToolApprovalGate(assignment.runId, {
       permission: (request) => toolApprovalDecision(request, assignment.policy, worktree),
+      // Keep the callback pending at the tool boundary. The adapter's current
+      // session and checkpoint remain intact; handback resolves this same call.
       isLive: async () => {
         try {
-          check();
-          const current = await this.call("POST", path, { body: { operation: "check", deviceId: assignment.deviceId, policyRevision }, schema: z25.object({ live: z25.boolean() }), signal: liveness.signal, timeoutMs: 5e3 });
-          check();
-          return current.live;
+          for (; ; ) {
+            check();
+            const current = await this.call("POST", path, { body: { operation: "check", deviceId: assignment.deviceId, policyRevision }, schema: z25.object({ live: z25.boolean(), paused: z25.boolean().optional() }), signal: liveness.signal, timeoutMs: 5e3 });
+            check();
+            if (!current.live || !current.paused) return current.live;
+            await new Promise((resolve10, reject) => {
+              const stop = () => {
+                clearTimeout(timer);
+                reject(new Error("cancelled"));
+              };
+              const timer = setTimeout(() => {
+                liveness.signal.removeEventListener("abort", stop);
+                resolve10();
+              }, 1e3);
+              liveness.signal.addEventListener("abort", stop, { once: true });
+              if (liveness.signal.aborted) stop();
+            });
+          }
         } catch {
           return false;
         }
@@ -4978,9 +5028,11 @@ var HttpServerLink = class {
             }
           }
         };
+        if (!await gate.checkLive()) return "deny";
         const created = await retry(() => this.call("POST", path, { body: { operation: "propose", deviceId: assignment.deviceId, policyRevision, requestId: request.requestId, harness: request.harness, method: request.method, input: request.input }, schema: proposal, signal: signal2 }));
         try {
           for (; ; ) {
+            if (!await gate.checkLive()) return "deny";
             const result = await retry(() => this.call("POST", path, { body: { operation: "take", deviceId: assignment.deviceId, id: created.id, digest: created.digest }, schema: response, signal: signal2 }));
             if (result.decision !== "pending") return result.decision;
             await delay3();
@@ -6193,6 +6245,7 @@ var RunContext = class {
       nextStep: file.nextStep ?? null,
       ...file.blockedOn ? { blockedOn: file.blockedOn } : {},
       ...plan ? { plan } : {},
+      ...typeof file.previewDatabaseBranch === "string" ? { previewDatabaseBranch: file.previewDatabaseBranch } : {},
       ...Array.isArray(file.criteria) ? { criteria: file.criteria } : {},
       ...runQuestion.safeParse(file.question).success ? { question: runQuestion.parse(file.question) } : {}
     };
@@ -6635,6 +6688,7 @@ import {
   existsSync as existsSync6,
   mkdirSync as mkdirSync15,
   readFileSync as readFileSync11,
+  rmSync as rmSync16,
   realpathSync as realpathSync11
 } from "node:fs";
 import { arch, hostname, platform as platform2 } from "node:os";
@@ -12302,7 +12356,7 @@ var RunSupervisor = class {
       const current = this.deps.journal.get(runId);
       assertMailboxRunAuthority({ held: this.active.get(runId) === run2, state: current?.state, stopped: this.stopping || run2.cancelRequested || run2.abort.signal.aborted, lease });
     };
-    const mailbox = await this.deps.prepareRunMailbox?.(assignment, run2.abort.signal, checkMailbox);
+    let mailbox = await this.deps.prepareRunMailbox?.(assignment, run2.abort.signal, checkMailbox);
     run2.mailbox = mailbox;
     if (this.stopping) return;
     if (run2.cancelRequested) {
@@ -12312,6 +12366,14 @@ var RunSupervisor = class {
     if (mailbox) checkMailbox();
     const toolApproval = await this.deps.prepareRunToolApproval?.(assignment, run2.abort.signal, checkMailbox, worktree);
     run2.toolApproval = toolApproval;
+    if (mailbox && toolApproval) {
+      const original = mailbox;
+      mailbox = { tools: original.tools, close: () => original.close(), request: async (body, signal) => {
+        if (!await toolApproval.checkLive()) throw new Error("Run tool approval unavailable");
+        return original.request(body, signal);
+      } };
+      run2.mailbox = mailbox;
+    }
     if (this.stopping) {
       toolApproval?.revoke();
       return;
@@ -12605,18 +12667,21 @@ function pickAgentReport(agent) {
   const question = runQuestion.safeParse(agent.question);
   if (question.success) picked.question = question.data;
   if (agent.plan) picked.plan = agent.plan;
+  if (typeof agent.previewDatabaseBranch === "string" && agent.previewDatabaseBranch.trim())
+    picked.previewDatabaseBranch = agent.previewDatabaseBranch.trim().slice(0, 500);
   if (Array.isArray(agent.criteria)) {
     const criteria = [];
     for (const entry of agent.criteria) {
       if (criteria.length >= MAX_REPORTED_CRITERIA) break;
       if (!entry || typeof entry !== "object") continue;
-      const { criterionId, passed, evidence } = entry;
+      const { criterionId, passed, evidence, command, exitCode } = entry;
       if (typeof criterionId !== "string" || !UUID_RE.test(criterionId))
         continue;
       if (typeof passed !== "boolean") continue;
       criteria.push({
         criterionId,
         passed,
+        ...typeof command === "string" && command.trim() ? { command: command.trim().slice(0, 2e3), ...exitCode === null || typeof exitCode === "number" && Number.isSafeInteger(exitCode) ? { exitCode } : {} } : {},
         ...typeof evidence === "string" ? { evidence: evidence.slice(0, 1e4) } : {}
       });
     }
@@ -12789,7 +12854,7 @@ import { promisify as promisify4 } from "node:util";
 
 // src/agents/public-egress.ts
 import { lookup } from "node:dns/promises";
-import { chmod, mkdtemp, rm } from "node:fs/promises";
+import { chmod, mkdtemp, rm as rm2 } from "node:fs/promises";
 import { createServer as createServer3, request as httpRequest } from "node:http";
 import { connect, isIP as isIP3 } from "node:net";
 import { tmpdir as tmpdir3 } from "node:os";
@@ -12971,7 +13036,7 @@ async function startPublicEgress(options) {
     for (const socket of sockets) socket.destroy();
     closing = new Promise((resolve10, reject) => server.close((error) => {
       options.signal.removeEventListener("abort", onAbort);
-      void rm(directory, { recursive: true, force: true }).then(() => error && error.code !== "ERR_SERVER_NOT_RUNNING" ? reject(error) : resolve10(), reject);
+      void rm2(directory, { recursive: true, force: true }).then(() => error && error.code !== "ERR_SERVER_NOT_RUNNING" ? reject(error) : resolve10(), reject);
     }));
     return closing;
   };
@@ -14777,7 +14842,7 @@ var Daemon = class {
       }
       const deviceId = this.device.deviceId;
       const quotas = this.quota?.snapshot().quotas;
-      const { leases, revoked, cloudCredential, deviceCommands } = await link.heartbeat(deviceId, {
+      const heartbeat = {
         completedDeviceCommands: this.device.completedDeviceCommands,
         failedDeviceCommands: this.device.failedDeviceCommands,
         harnesses: this.harnesses,
@@ -14785,7 +14850,8 @@ var Daemon = class {
         runs: this.supervisor.heartbeatRuns(),
         worktreeDiskBytes: await this.worktrees.diskUsage(),
         ...quotas ? { quotas } : {}
-      });
+      };
+      const { leases, revoked, cloudCredential, deviceCommands } = await link.heartbeat(deviceId, heartbeat);
       this.supervisor.renewLeases(leases);
       if (revoked) this.supervisor.revokeLeases(revoked);
       if (this.options.cloudComputer && cloudCredential && this.device.credential === credential) {
@@ -14794,6 +14860,26 @@ var Daemon = class {
         this.registered = false;
       }
       const command = deviceCommands?.[0];
+      if (command?.kind === "uninstall") {
+        this.draining = true;
+        if (this.supervisor.heartbeatRuns().length === 0) {
+          this.saveDevice({ completedDeviceCommands: [command.id], failedDeviceCommands: [] });
+          try {
+            await link.heartbeat(deviceId, { ...heartbeat, runs: [], completedDeviceCommands: [command.id], failedDeviceCommands: [] });
+          } catch {
+            this.log.warn("Could not confirm uninstall receipt");
+          }
+          setImmediate(() => {
+            void this.stop().then(() => uninstallService(() => {
+              this.saveDevice({ credential: void 0 });
+              rmSync16(this.paths.secret, { force: true });
+            })).catch(() => {
+              this.options.onDrained?.();
+            });
+          });
+        }
+        return;
+      }
       if (command && !this.device.completedDeviceCommands?.includes(command.id) && !this.device.failedDeviceCommands?.some((failure) => failure.id === command.id)) {
         if (command.kind === "redetect" || this.supervisor.heartbeatRuns().length === 0) {
           try {

package/client.js

@@ -2547,13 +2547,18 @@ var runReport = z9.object({
     sha: z9.string().regex(/^[a-f0-9]{40}$/),
     readOnly: z9.literal(true)
   }).optional(),
+  /** Preview branch created or used by the producing run; descriptive metadata only. */
+  previewDatabaseBranch: z9.string().trim().min(1).max(500).optional(),
   /** Acceptance criteria the agent checked, with evidence. */
   criteria: z9.array(
     z9.object({
       criterionId: z9.uuid().optional(),
       text: z9.string().max(2e3).optional(),
       passed: z9.boolean(),
-      evidence: z9.string().max(1e4).optional()
+      evidence: z9.string().max(1e4).optional(),
+      /** Agent-reported criterion check; the daemon-owned verify remains authoritative. */
+      command: z9.string().trim().min(1).max(2e3).optional(),
+      exitCode: z9.number().int().nullable().optional()
     })
   ).max(200).optional(),
   /**
@@ -2809,7 +2814,7 @@ var heartbeatRunSchema = z13.object({
   /** Last tool call, turn boundary or file change (not raw output). */
   lastProgressAt: isoTime
 });
-var deviceManagementCommand = z13.object({ id: z13.uuid(), kind: z13.enum(["redetect", "restart", "update"]) });
+var deviceManagementCommand = z13.object({ id: z13.uuid(), kind: z13.enum(["redetect", "restart", "update", "uninstall"]) });
 var deviceHeartbeatSchema = z13.object({
   completedDeviceCommands: z13.array(z13.uuid()).max(100).optional(),
   failedDeviceCommands: z13.array(z13.object({ id: z13.uuid(), error: z13.string().max(500) })).max(100).optional(),
@@ -3616,7 +3621,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.1",
+  version: "0.0.4",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3673,7 +3678,8 @@ var package_default = {
   },
   engines: {
     node: ">=24"
-  }
+  },
+  gitHead: "4c5f80747928d60ea3e03ed6a3de5ca2dc2216df"
 };
 
 // src/paths.ts

package/http-link.js

@@ -2993,13 +2993,18 @@ var runReport = z15.object({
     sha: z15.string().regex(/^[a-f0-9]{40}$/),
     readOnly: z15.literal(true)
   }).optional(),
+  /** Preview branch created or used by the producing run; descriptive metadata only. */
+  previewDatabaseBranch: z15.string().trim().min(1).max(500).optional(),
   /** Acceptance criteria the agent checked, with evidence. */
   criteria: z15.array(
     z15.object({
       criterionId: z15.uuid().optional(),
       text: z15.string().max(2e3).optional(),
       passed: z15.boolean(),
-      evidence: z15.string().max(1e4).optional()
+      evidence: z15.string().max(1e4).optional(),
+      /** Agent-reported criterion check; the daemon-owned verify remains authoritative. */
+      command: z15.string().trim().min(1).max(2e3).optional(),
+      exitCode: z15.number().int().nullable().optional()
     })
   ).max(200).optional(),
   /**
@@ -3217,7 +3222,7 @@ var heartbeatRunSchema = z17.object({
   /** Last tool call, turn boundary or file change (not raw output). */
   lastProgressAt: isoTime
 });
-var deviceManagementCommand = z17.object({ id: z17.uuid(), kind: z17.enum(["redetect", "restart", "update"]) });
+var deviceManagementCommand = z17.object({ id: z17.uuid(), kind: z17.enum(["redetect", "restart", "update", "uninstall"]) });
 var deviceHeartbeatSchema = z17.object({
   completedDeviceCommands: z17.array(z17.uuid()).max(100).optional(),
   failedDeviceCommands: z17.array(z17.object({ id: z17.uuid(), error: z17.string().max(500) })).max(100).optional(),
@@ -3916,7 +3921,7 @@ var InvalidIdError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.1",
+  version: "0.0.4",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3973,7 +3978,8 @@ var package_default = {
   },
   engines: {
     node: ">=24"
-  }
+  },
+  gitHead: "4c5f80747928d60ea3e03ed6a3de5ca2dc2216df"
 };
 
 // src/paths.ts
@@ -4170,12 +4176,28 @@ var HttpServerLink = class {
     const liveness = new AbortController();
     const gate = new ToolApprovalGate(assignment.runId, {
       permission: (request) => toolApprovalDecision(request, assignment.policy, worktree),
+      // Keep the callback pending at the tool boundary. The adapter's current
+      // session and checkpoint remain intact; handback resolves this same call.
       isLive: async () => {
         try {
-          check();
-          const current = await this.call("POST", path, { body: { operation: "check", deviceId: assignment.deviceId, policyRevision }, schema: z25.object({ live: z25.boolean() }), signal: liveness.signal, timeoutMs: 5e3 });
-          check();
-          return current.live;
+          for (; ; ) {
+            check();
+            const current = await this.call("POST", path, { body: { operation: "check", deviceId: assignment.deviceId, policyRevision }, schema: z25.object({ live: z25.boolean(), paused: z25.boolean().optional() }), signal: liveness.signal, timeoutMs: 5e3 });
+            check();
+            if (!current.live || !current.paused) return current.live;
+            await new Promise((resolve2, reject) => {
+              const stop = () => {
+                clearTimeout(timer);
+                reject(new Error("cancelled"));
+              };
+              const timer = setTimeout(() => {
+                liveness.signal.removeEventListener("abort", stop);
+                resolve2();
+              }, 1e3);
+              liveness.signal.addEventListener("abort", stop, { once: true });
+              if (liveness.signal.aborted) stop();
+            });
+          }
         } catch {
           return false;
         }
@@ -4204,9 +4226,11 @@ var HttpServerLink = class {
             }
           }
         };
+        if (!await gate.checkLive()) return "deny";
         const created = await retry(() => this.call("POST", path, { body: { operation: "propose", deviceId: assignment.deviceId, policyRevision, requestId: request.requestId, harness: request.harness, method: request.method, input: request.input }, schema: proposal, signal: signal2 }));
         try {
           for (; ; ) {
+            if (!await gate.checkLive()) return "deny";
             const result = await retry(() => this.call("POST", path, { body: { operation: "take", deviceId: assignment.deviceId, id: created.id, digest: created.digest }, schema: response, signal: signal2 }));
             if (result.decision !== "pending") return result.decision;
             await delay();

package/login.js

@@ -2544,13 +2544,18 @@ var runReport = z9.object({
     sha: z9.string().regex(/^[a-f0-9]{40}$/),
     readOnly: z9.literal(true)
   }).optional(),
+  /** Preview branch created or used by the producing run; descriptive metadata only. */
+  previewDatabaseBranch: z9.string().trim().min(1).max(500).optional(),
   /** Acceptance criteria the agent checked, with evidence. */
   criteria: z9.array(
     z9.object({
       criterionId: z9.uuid().optional(),
       text: z9.string().max(2e3).optional(),
       passed: z9.boolean(),
-      evidence: z9.string().max(1e4).optional()
+      evidence: z9.string().max(1e4).optional(),
+      /** Agent-reported criterion check; the daemon-owned verify remains authoritative. */
+      command: z9.string().trim().min(1).max(2e3).optional(),
+      exitCode: z9.number().int().nullable().optional()
     })
   ).max(200).optional(),
   /**
@@ -2805,7 +2810,7 @@ var heartbeatRunSchema = z13.object({
   /** Last tool call, turn boundary or file change (not raw output). */
   lastProgressAt: isoTime
 });
-var deviceManagementCommand = z13.object({ id: z13.uuid(), kind: z13.enum(["redetect", "restart", "update"]) });
+var deviceManagementCommand = z13.object({ id: z13.uuid(), kind: z13.enum(["redetect", "restart", "update", "uninstall"]) });
 var deviceHeartbeatSchema = z13.object({
   completedDeviceCommands: z13.array(z13.uuid()).max(100).optional(),
   failedDeviceCommands: z13.array(z13.object({ id: z13.uuid(), error: z13.string().max(500) })).max(100).optional(),
@@ -3623,7 +3628,7 @@ var ServerUnreachableError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.1",
+  version: "0.0.4",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3680,7 +3685,8 @@ var package_default = {
   },
   engines: {
     node: ">=24"
-  }
+  },
+  gitHead: "4c5f80747928d60ea3e03ed6a3de5ca2dc2216df"
 };
 
 // src/paths.ts