@chopin-ai/workspace 0.2.0 → 0.3.0

package/dist/directory.d.ts

@@ -1,11 +1,18 @@
 import { type Workspace, type WorkspaceProvider } from "./workspace.js";
+export interface DirectoryWorkspaceOptions {
+    /**
+     * Directories no command in the workspace may read or write, each a real path with no symbolic link on the way,
+     * since that is how the sandbox sees them. Only macOS enforces this; elsewhere commands run unconfined.
+     */
+    hidden?: readonly string[];
+}
 /**
  * Single-user local mode: the workspace is a directory of this machine, used as it is. There is nothing to start or
  * stop, and nothing is ever deleted: the directory is the user's own.
  */
 export declare class DirectoryWorkspaceProvider implements WorkspaceProvider {
     #private;
-    constructor(root: string);
+    constructor(root: string, options?: DirectoryWorkspaceOptions);
     open(owner: string): Workspace;
     /** Nothing here can be reclaimed. */
     list(): Promise<Workspace[]>;

package/dist/directory.js

@@ -5,8 +5,10 @@ import { carried } from "./workspace.js";
  */
 export class DirectoryWorkspaceProvider {
     #root;
-    constructor(root) {
+    #hidden;
+    constructor(root, options = {}) {
         this.#root = root;
+        this.#hidden = options.hidden ?? [];
     }
     open(owner) {
         return {
@@ -21,7 +23,7 @@ export class DirectoryWorkspaceProvider {
             },
             command: (argv, env = {}) => {
                 const carry = carried(argv, env);
-                return { argv: ["sh", "-c", `cd "$1" && shift && ${carry.exec}`, "sh", this.#root, ...argv], env: carry.env };
+                return confined({ argv: ["sh", "-c", `cd "$1" && shift && ${carry.exec}`, "sh", this.#root, ...argv], env: carry.env }, this.#hidden);
             },
         };
     }
@@ -30,4 +32,14 @@ export class DirectoryWorkspaceProvider {
         return [];
     }
 }
+/** `launch` under a macOS sandbox that denies every file operation within `hidden`, and allows all else. */
+function confined(launch, hidden) {
+    if (hidden.length === 0 || process.platform !== "darwin")
+        return launch;
+    // Paths travel as parameters, so none is ever quoted into the profile.
+    const params = hidden.flatMap((path, i) => ["-D", `HIDDEN_${i}=${path}`]);
+    const denied = hidden.map((_, i) => `(subpath (param "HIDDEN_${i}"))`).join(" ");
+    const profile = `(version 1)(allow default)(deny file-read* file-write* ${denied})`;
+    return { argv: ["/usr/bin/sandbox-exec", ...params, "-p", profile, ...launch.argv], env: launch.env };
+}
 //# sourceMappingURL=directory.js.map

package/dist/directory.js.map

@@ -1 +1 @@
-{"version":3,"file":"directory.js","sourceRoot":"","sources":["../src/directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAA0C,MAAM,gBAAgB,CAAC;AAEjF;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IAC5B,KAAK,CAAS;IAEvB,YAAY,IAAY;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,OAAO;YACL,KAAK;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YAC5B,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACrB,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACrB,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACpB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,qDAAqD,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE;gBAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACjC,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,uBAAuB,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YAChH,CAAC;SACF,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,IAAI;QACR,OAAO,EAAE,CAAC;IACZ,CAAC;CACF"}
+{"version":3,"file":"directory.js","sourceRoot":"","sources":["../src/directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAuD,MAAM,gBAAgB,CAAC;AAU9F;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IAC5B,KAAK,CAAS;IACd,OAAO,CAAoB;IAEpC,YAAY,IAAY,EAAE,OAAO,GAA8B,EAAE;QAC/D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,OAAO;YACL,KAAK;YACL,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YAC5B,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACrB,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACrB,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACpB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,qDAAqD,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE;gBAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACjC,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,uBAAuB,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACxI,CAAC;SACF,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,IAAI;QACR,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,4GAA4G;AAC5G,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAyB;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACxE,uEAAuE;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,0DAA0D,MAAM,GAAG,CAAC;IACpF,OAAO,EAAE,IAAI,EAAE,CAAC,uBAAuB,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;AACxG,CAAC"}

package/dist/index.d.ts

@@ -5,3 +5,6 @@ export type { ContainerCli, ContainerWorkspaceOptions } from "./container.js";
 export { diff, run, snapshot } from "./run.js";
 export type { RunOptions, RunResult } from "./run.js";
 export { DirectoryWorkspaceProvider } from "./directory.js";
+export type { DirectoryWorkspaceOptions } from "./directory.js";
+export { LoopbackWorkspaceProvider } from "./loopback.js";
+export type { LoopbackWorkspaceOptions } from "./loopback.js";

package/dist/index.js

@@ -2,4 +2,5 @@ export { carried, isVariableName, reclaimIdle } from "./workspace.js";
 export { containerCli, ContainerWorkspaceProvider } from "./container.js";
 export { diff, run, snapshot } from "./run.js";
 export { DirectoryWorkspaceProvider } from "./directory.js";
+export { LoopbackWorkspaceProvider } from "./loopback.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC"}

package/dist/loopback-connect.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/loopback-connect.js

@@ -0,0 +1,17 @@
+// Run as `loopback-connect <port> serve --token <hex>`, where the execution daemon would be: hands the token to the
+// workspace listener on that loopback port, then joins this process's standard input and output to the daemon it starts.
+import { connect } from "node:net";
+const [port, verb, flag, token] = process.argv.slice(2);
+if (!/^\d{1,5}$/.test(port ?? "") || verb !== "serve" || flag !== "--token" || token === undefined) {
+    process.stderr.write("usage: loopback-connect <port> serve --token <hex>\n");
+    process.exit(2);
+}
+const link = connect(Number(port), "127.0.0.1", () => {
+    link.write(`${token}\n`);
+    process.stdin.pipe(link);
+    link.pipe(process.stdout);
+});
+link.on("error", (error) => process.stderr.write(`loopback-connect: ${error.message}\n`));
+// The daemon's last answer is written out whole before this process ends.
+link.on("close", (failed) => process.stdout.write("", () => process.exit(failed ? 1 : 0)));
+//# sourceMappingURL=loopback-connect.js.map

package/dist/loopback-connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-connect.js","sourceRoot":"","sources":["../src/loopback-connect.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,yHAAyH;AACzH,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAEnC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;IACnG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;IACnD,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACzB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;AAC1F,0EAA0E;AAC1E,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/loopback.d.ts

@@ -0,0 +1,23 @@
+import type { Workspace, WorkspaceProvider } from "./workspace.js";
+export interface LoopbackWorkspaceOptions {
+    /** The port the workspace's listener serves on the loopback address. */
+    port: number;
+    /** The persistent directory inside the workspace, where work happens. */
+    root: string;
+    /** The execution daemon as the listener starts it, the one command this workspace runs. */
+    daemon: string;
+    /** How long `start` waits for the listener to answer; a minute by default. */
+    startTimeoutMs?: number;
+}
+/**
+ * A workspace someone else runs beside the service on the same network, such as another container of the same pod,
+ * whose listener on a loopback port starts the execution daemon for each connection. Starting and stopping it is
+ * theirs. The daemon is all it runs: a byte stream carries no exit status, which any other command would need.
+ */
+export declare class LoopbackWorkspaceProvider implements WorkspaceProvider {
+    #private;
+    constructor(options: LoopbackWorkspaceOptions);
+    open(owner: string): Workspace;
+    /** Nothing here can be reclaimed: whoever runs the workspace does that. */
+    list(): Promise<Workspace[]>;
+}

package/dist/loopback.js

@@ -0,0 +1,65 @@
+import { connect } from "node:net";
+import { extname } from "node:path";
+import { setTimeout as sleep } from "node:timers/promises";
+import { fileURLToPath } from "node:url";
+/** The only address the workspace's listener is reached at: one no other machine can reach. */
+const LOOPBACK = "127.0.0.1";
+// The connector next to this module, run by Node as it is: compiled, or as source while testing.
+const CONNECTOR = fileURLToPath(new URL(`./loopback-connect${extname(fileURLToPath(import.meta.url))}`, import.meta.url));
+/**
+ * A workspace someone else runs beside the service on the same network, such as another container of the same pod,
+ * whose listener on a loopback port starts the execution daemon for each connection. Starting and stopping it is
+ * theirs. The daemon is all it runs: a byte stream carries no exit status, which any other command would need.
+ */
+export class LoopbackWorkspaceProvider {
+    #options;
+    constructor(options) {
+        if (!Number.isInteger(options.port) || options.port < 1 || options.port > 65_535)
+            throw new Error(`${options.port} is no port`);
+        this.#options = options;
+    }
+    open(owner) {
+        const { port, root, daemon, startTimeoutMs = 60_000 } = this.#options;
+        const at = `${LOOPBACK}:${port}`;
+        const managed = async () => {
+            throw new Error(`the workspace at ${at} is started and stopped by whoever runs it`);
+        };
+        return {
+            owner,
+            root,
+            state: async () => ((await answers(port)) ? "running" : "stopped"),
+            start: async () => {
+                const deadline = Date.now() + startTimeoutMs;
+                while (!(await answers(port))) {
+                    if (Date.now() >= deadline)
+                        throw new Error(`no workspace listener answered at ${at}`);
+                    await sleep(250);
+                }
+            },
+            pause: managed,
+            stop: managed,
+            destroy: managed,
+            command: (argv, env = {}) => {
+                if (argv.length !== 1 || argv[0] !== daemon || Object.keys(env).length > 0) {
+                    throw new Error(`the workspace at ${at} runs only its execution daemon, ${daemon}`);
+                }
+                return { argv: [process.execPath, CONNECTOR, String(port)], env: {} };
+            },
+        };
+    }
+    /** Nothing here can be reclaimed: whoever runs the workspace does that. */
+    async list() {
+        return [];
+    }
+}
+/** Whether a listener accepts a connection on the loopback `port` now. */
+function answers(port) {
+    return new Promise((resolve) => {
+        const probe = connect(port, LOOPBACK, () => {
+            probe.destroy();
+            resolve(true);
+        });
+        probe.on("error", () => resolve(false));
+    });
+}
+//# sourceMappingURL=loopback.js.map

package/dist/loopback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback.js","sourceRoot":"","sources":["../src/loopback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,+FAA+F;AAC/F,MAAM,QAAQ,GAAG,WAAW,CAAC;AAa7B,iGAAiG;AACjG,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,qBAAqB,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1H;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IAC3B,QAAQ,CAA2B;IAE5C,YAAY,OAAiC;QAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,aAAa,CAAC,CAAC;QAChI,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACtE,MAAM,EAAE,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,4CAA4C,CAAC,CAAC;QACtF,CAAC,CAAC;QACF,OAAO;YACL,KAAK;YACL,IAAI;YACJ,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;gBAC7C,OAAO,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAC;oBACvF,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE;gBAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3E,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,oCAAoC,MAAM,EAAE,CAAC,CAAC;gBACtF,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;YACxE,CAAC;SACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,IAAI;QACR,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,0EAA0E;AAC1E,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;YACzC,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/loopback-listener.sh

@@ -0,0 +1,16 @@
+#!/bin/sh
+# Serves this workspace to an agent service beside it on the same network, as LoopbackWorkspaceProvider reaches it:
+#   loopback-listener.sh <port> <daemon>
+# Each connection starts the execution daemon with the connection as its standard input and output, under the token
+# the connection's first line carries; one that sends nothing was only checking the listener is up. It listens on the
+# loopback address alone, which nothing outside this network can reach. The daemon's path, and this script's, have no
+# space, colon or comma, which the relay's addresses would split on.
+set -eu
+if [ "${1-}" = --connection ]; then
+  read -r token || exit 0
+  case $token in '' | *[!0-9a-f]*) exit 2 ;; esac
+  exec "$2" serve --token "$token"
+fi
+case ${1-}:${2-} in '' | :* | *[!0-9]*:* | *:) echo "usage: loopback-listener.sh <port> <daemon>" >&2; exit 2 ;; esac
+# Once a connection stops sending, the daemon is given time to answer what it was asked; it ends sooner by itself.
+exec socat -t 10 "TCP-LISTEN:$1,bind=127.0.0.1,reuseaddr,fork" "EXEC:$0 --connection $2"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chopin-ai/workspace",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Per-user workspace lifecycle interface with directory and container implementations",
   "license": "Apache-2.0",
   "repository": {
@@ -19,6 +19,7 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "loopback-listener.sh"
   ]
 }