@aspectlylabs/mikka 0.0.1 → 0.0.4

package/mikka-mcp.mjs

@@ -137,6 +137,7 @@ const TOOLS = [
         },
         spec: SPEC_SCHEMA,
         split: SPLIT_SCHEMA,
+        previewDatabaseBranch: { type: "string", description: "Name of the preview database branch you actually created or used; omit when none." },
         criteria: {
           type: "array",
           description:
@@ -149,6 +150,8 @@ const TOOLS = [
                 description: "The criterion's id, as given in your brief.",
               },
               passed: { type: "boolean" },
+              command: { type: "string", description: "Exact command used to check this criterion, when one was run." },
+              exitCode: { type: ["integer", "null"], description: "Observed exit code of that command." },
               evidence: {
                 type: "string",
                 description:
@@ -332,6 +335,7 @@ function record(kind, args, toolName) {
       : {}),
     ...(plan ? { plan } : {}),
     // Kept as sent; the daemon validates and trims each entry.
+    ...(typeof args.previewDatabaseBranch === "string" ? { previewDatabaseBranch: args.previewDatabaseBranch } : {}),
     ...(Array.isArray(args.criteria) ? { criteria: args.criteria } : {}),
     at: new Date().toISOString(),
   }

package/mikka.js

@@ -2217,7 +2217,7 @@ function closeLogger(logger) {
 // src/service.ts
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { mkdir, writeFile } from "node:fs/promises";
+import { mkdir, writeFile, rm } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname as dirname2, join as join2, resolve } from "node:path";
 var exec = promisify(execFile);
@@ -2285,6 +2285,34 @@ async function restartService(update, beforeRestart, dependencies = {
   beforeRestart();
   dependencies.restart();
 }
+async function uninstallService(clearCredential, dependencies = {
+  manager: process.env.MIKKA_SERVICE,
+  home: homedir(),
+  uid: process.getuid?.() ?? 0,
+  run: async (program, args) => {
+    await exec(program, args, { timeout: 1e4 });
+  },
+  exit: () => {
+    process.exit(0);
+  }
+}) {
+  try {
+    if (dependencies.manager === "systemd") {
+      await dependencies.run("systemctl", ["--user", "disable", "mikka-daemon.service"]);
+      await rm(join2(dependencies.home, ".config/systemd/user/mikka-daemon.service"), { force: true });
+      await dependencies.run("systemctl", ["--user", "daemon-reload"]);
+    } else if (dependencies.manager === "launchd") {
+      await rm(join2(dependencies.home, "Library/LaunchAgents", `${label}.plist`), { force: true });
+    }
+  } finally {
+    clearCredential();
+    try {
+      if (dependencies.manager === "launchd") await dependencies.run("launchctl", ["bootout", `gui/${dependencies.uid}/${label}`]);
+    } finally {
+      dependencies.exit();
+    }
+  }
+}
 
 // ../protocol/src/accounts.ts
 import { z } from "zod";
@@ -2972,13 +3000,18 @@ var runReport = z9.object({
     sha: z9.string().regex(/^[a-f0-9]{40}$/),
     readOnly: z9.literal(true)
   }).optional(),
+  /** Preview branch created or used by the producing run; descriptive metadata only. */
+  previewDatabaseBranch: z9.string().trim().min(1).max(500).optional(),
   /** Acceptance criteria the agent checked, with evidence. */
   criteria: z9.array(
     z9.object({
       criterionId: z9.uuid().optional(),
       text: z9.string().max(2e3).optional(),
       passed: z9.boolean(),
-      evidence: z9.string().max(1e4).optional()
+      evidence: z9.string().max(1e4).optional(),
+      /** Agent-reported criterion check; the daemon-owned verify remains authoritative. */
+      command: z9.string().trim().min(1).max(2e3).optional(),
+      exitCode: z9.number().int().nullable().optional()
     })
   ).max(200).optional(),
   /**
@@ -3322,7 +3355,7 @@ var heartbeatRunSchema = z13.object({
   /** Last tool call, turn boundary or file change (not raw output). */
   lastProgressAt: isoTime
 });
-var deviceManagementCommand = z13.object({ id: z13.uuid(), kind: z13.enum(["redetect", "restart", "update"]) });
+var deviceManagementCommand = z13.object({ id: z13.uuid(), kind: z13.enum(["redetect", "restart", "update", "uninstall"]) });
 var deviceHeartbeatSchema = z13.object({
   completedDeviceCommands: z13.array(z13.uuid()).max(100).optional(),
   failedDeviceCommands: z13.array(z13.object({ id: z13.uuid(), error: z13.string().max(500) })).max(100).optional(),
@@ -4249,7 +4282,7 @@ import { join as join3 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.1",
+  version: "0.0.4",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4306,7 +4339,8 @@ var package_default = {
   },
   engines: {
     node: ">=24"
-  }
+  },
+  gitHead: "4c5f80747928d60ea3e03ed6a3de5ca2dc2216df"
 };
 
 // src/paths.ts
@@ -4945,12 +4979,28 @@ var HttpServerLink = class {
     const liveness = new AbortController();
     const gate = new ToolApprovalGate(assignment.runId, {
       permission: (request) => toolApprovalDecision(request, assignment.policy, worktree),
+      // Keep the callback pending at the tool boundary. The adapter's current
+      // session and checkpoint remain intact; handback resolves this same call.
       isLive: async () => {
         try {
-          check();
-          const current = await this.call("POST", path, { body: { operation: "check", deviceId: assignment.deviceId, policyRevision }, schema: z25.object({ live: z25.boolean() }), signal: liveness.signal, timeoutMs: 5e3 });
-          check();
-          return current.live;
+          for (; ; ) {
+            check();
+            const current = await this.call("POST", path, { body: { operation: "check", deviceId: assignment.deviceId, policyRevision }, schema: z25.object({ live: z25.boolean(), paused: z25.boolean().optional() }), signal: liveness.signal, timeoutMs: 5e3 });
+            check();
+            if (!current.live || !current.paused) return current.live;
+            await new Promise((resolve10, reject) => {
+              const stop = () => {
+                clearTimeout(timer);
+                reject(new Error("cancelled"));
+              };
+              const timer = setTimeout(() => {
+                liveness.signal.removeEventListener("abort", stop);
+                resolve10();
+              }, 1e3);
+              liveness.signal.addEventListener("abort", stop, { once: true });
+              if (liveness.signal.aborted) stop();
+            });
+          }
         } catch {
           return false;
         }
@@ -4979,9 +5029,11 @@ var HttpServerLink = class {
             }
           }
         };
+        if (!await gate.checkLive()) return "deny";
         const created = await retry(() => this.call("POST", path, { body: { operation: "propose", deviceId: assignment.deviceId, policyRevision, requestId: request.requestId, harness: request.harness, method: request.method, input: request.input }, schema: proposal, signal: signal2 }));
         try {
           for (; ; ) {
+            if (!await gate.checkLive()) return "deny";
             const result = await retry(() => this.call("POST", path, { body: { operation: "take", deviceId: assignment.deviceId, id: created.id, digest: created.digest }, schema: response, signal: signal2 }));
             if (result.decision !== "pending") return result.decision;
             await delay3();
@@ -6194,6 +6246,7 @@ var RunContext = class {
       nextStep: file.nextStep ?? null,
       ...file.blockedOn ? { blockedOn: file.blockedOn } : {},
       ...plan ? { plan } : {},
+      ...typeof file.previewDatabaseBranch === "string" ? { previewDatabaseBranch: file.previewDatabaseBranch } : {},
       ...Array.isArray(file.criteria) ? { criteria: file.criteria } : {},
       ...runQuestion.safeParse(file.question).success ? { question: runQuestion.parse(file.question) } : {}
     };
@@ -6636,6 +6689,7 @@ import {
   existsSync as existsSync6,
   mkdirSync as mkdirSync15,
   readFileSync as readFileSync11,
+  rmSync as rmSync16,
   realpathSync as realpathSync11
 } from "node:fs";
 import { arch, hostname, platform as platform2 } from "node:os";
@@ -12303,7 +12357,7 @@ var RunSupervisor = class {
       const current = this.deps.journal.get(runId);
       assertMailboxRunAuthority({ held: this.active.get(runId) === run2, state: current?.state, stopped: this.stopping || run2.cancelRequested || run2.abort.signal.aborted, lease });
     };
-    const mailbox = await this.deps.prepareRunMailbox?.(assignment, run2.abort.signal, checkMailbox);
+    let mailbox = await this.deps.prepareRunMailbox?.(assignment, run2.abort.signal, checkMailbox);
     run2.mailbox = mailbox;
     if (this.stopping) return;
     if (run2.cancelRequested) {
@@ -12313,6 +12367,14 @@ var RunSupervisor = class {
     if (mailbox) checkMailbox();
     const toolApproval = await this.deps.prepareRunToolApproval?.(assignment, run2.abort.signal, checkMailbox, worktree);
     run2.toolApproval = toolApproval;
+    if (mailbox && toolApproval) {
+      const original = mailbox;
+      mailbox = { tools: original.tools, close: () => original.close(), request: async (body, signal) => {
+        if (!await toolApproval.checkLive()) throw new Error("Run tool approval unavailable");
+        return original.request(body, signal);
+      } };
+      run2.mailbox = mailbox;
+    }
     if (this.stopping) {
       toolApproval?.revoke();
       return;
@@ -12606,18 +12668,21 @@ function pickAgentReport(agent) {
   const question = runQuestion.safeParse(agent.question);
   if (question.success) picked.question = question.data;
   if (agent.plan) picked.plan = agent.plan;
+  if (typeof agent.previewDatabaseBranch === "string" && agent.previewDatabaseBranch.trim())
+    picked.previewDatabaseBranch = agent.previewDatabaseBranch.trim().slice(0, 500);
   if (Array.isArray(agent.criteria)) {
     const criteria = [];
     for (const entry of agent.criteria) {
       if (criteria.length >= MAX_REPORTED_CRITERIA) break;
       if (!entry || typeof entry !== "object") continue;
-      const { criterionId, passed, evidence } = entry;
+      const { criterionId, passed, evidence, command, exitCode } = entry;
       if (typeof criterionId !== "string" || !UUID_RE.test(criterionId))
         continue;
       if (typeof passed !== "boolean") continue;
       criteria.push({
         criterionId,
         passed,
+        ...typeof command === "string" && command.trim() ? { command: command.trim().slice(0, 2e3), ...exitCode === null || typeof exitCode === "number" && Number.isSafeInteger(exitCode) ? { exitCode } : {} } : {},
         ...typeof evidence === "string" ? { evidence: evidence.slice(0, 1e4) } : {}
       });
     }
@@ -12790,7 +12855,7 @@ import { promisify as promisify4 } from "node:util";
 
 // src/agents/public-egress.ts
 import { lookup } from "node:dns/promises";
-import { chmod, mkdtemp, rm } from "node:fs/promises";
+import { chmod, mkdtemp, rm as rm2 } from "node:fs/promises";
 import { createServer as createServer3, request as httpRequest } from "node:http";
 import { connect, isIP as isIP3 } from "node:net";
 import { tmpdir as tmpdir3 } from "node:os";
@@ -12972,7 +13037,7 @@ async function startPublicEgress(options) {
     for (const socket of sockets) socket.destroy();
     closing = new Promise((resolve10, reject) => server.close((error) => {
       options.signal.removeEventListener("abort", onAbort);
-      void rm(directory, { recursive: true, force: true }).then(() => error && error.code !== "ERR_SERVER_NOT_RUNNING" ? reject(error) : resolve10(), reject);
+      void rm2(directory, { recursive: true, force: true }).then(() => error && error.code !== "ERR_SERVER_NOT_RUNNING" ? reject(error) : resolve10(), reject);
     }));
     return closing;
   };
@@ -14778,7 +14843,7 @@ var Daemon = class {
       }
       const deviceId = this.device.deviceId;
       const quotas = this.quota?.snapshot().quotas;
-      const { leases, revoked, cloudCredential, deviceCommands } = await link.heartbeat(deviceId, {
+      const heartbeat = {
         completedDeviceCommands: this.device.completedDeviceCommands,
         failedDeviceCommands: this.device.failedDeviceCommands,
         harnesses: this.harnesses,
@@ -14786,7 +14851,8 @@ var Daemon = class {
         runs: this.supervisor.heartbeatRuns(),
         worktreeDiskBytes: await this.worktrees.diskUsage(),
         ...quotas ? { quotas } : {}
-      });
+      };
+      const { leases, revoked, cloudCredential, deviceCommands } = await link.heartbeat(deviceId, heartbeat);
       this.supervisor.renewLeases(leases);
       if (revoked) this.supervisor.revokeLeases(revoked);
       if (this.options.cloudComputer && cloudCredential && this.device.credential === credential) {
@@ -14795,6 +14861,26 @@ var Daemon = class {
         this.registered = false;
       }
       const command = deviceCommands?.[0];
+      if (command?.kind === "uninstall") {
+        this.draining = true;
+        if (this.supervisor.heartbeatRuns().length === 0) {
+          this.saveDevice({ completedDeviceCommands: [command.id], failedDeviceCommands: [] });
+          try {
+            await link.heartbeat(deviceId, { ...heartbeat, runs: [], completedDeviceCommands: [command.id], failedDeviceCommands: [] });
+          } catch {
+            this.log.warn("Could not confirm uninstall receipt");
+          }
+          setImmediate(() => {
+            void this.stop().then(() => uninstallService(() => {
+              this.saveDevice({ credential: void 0 });
+              rmSync16(this.paths.secret, { force: true });
+            })).catch(() => {
+              this.options.onDrained?.();
+            });
+          });
+        }
+        return;
+      }
       if (command && !this.device.completedDeviceCommands?.includes(command.id) && !this.device.failedDeviceCommands?.some((failure) => failure.id === command.id)) {
         if (command.kind === "redetect" || this.supervisor.heartbeatRuns().length === 0) {
           try {

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@aspectlylabs/mikka",
-  "version": "0.0.1",
+  "version": "0.0.4",
   "description": "Local Mikka daemon: runs agents through the user's own CLIs",
+  "gitHead": "4c5f80747928d60ea3e03ed6a3de5ca2dc2216df",
   "type": "module",
   "private": false,
   "license": "AGPL-3.0-only",

package/paths.js

@@ -6,7 +6,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.1",
+  version: "0.0.4",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -63,7 +63,8 @@ var package_default = {
   },
   engines: {
     node: ">=24"
-  }
+  },
+  gitHead: "4c5f80747928d60ea3e03ed6a3de5ca2dc2216df"
 };
 
 // src/paths.ts