@corenel/sidecar 0.10.0 → 0.13.0

package/dist/helm/corenel-sidecar/.helmignore

@@ -0,0 +1,4 @@
+.DS_Store
+*.tgz
+*.orig
+*~

package/dist/helm/corenel-sidecar/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+name: corenel-sidecar
+description: One Corenel sidecar, served at a URL, configured by SIDECAR_* environment variables.
+type: application
+# Versioned WITH @corenel/sidecar: both fields equal packages/sidecar/package.json's
+# version, and packages/sidecar/src/containerInit.test.ts fails when they drift.
+version: 0.12.0
+appVersion: "0.12.0"
+home: https://corenel.ai
+sources:
+  - https://github.com/Prompd/prompd-web

package/dist/helm/corenel-sidecar/templates/NOTES.txt

@@ -0,0 +1,14 @@
+corenel-sidecar {{ .Chart.AppVersion }} ({{ include "corenel-sidecar.mode" . }} mode, exposed by {{ include "corenel-sidecar.expose" . }}).
+
+Each device pairs once with a single-use code, valid ten minutes. The start
+log prints one:
+  kubectl logs -n {{ .Release.Namespace }} deploy/{{ include "corenel-sidecar.fullname" . }}
+For another device, print a fresh one:
+  kubectl exec -n {{ .Release.Namespace }} deploy/{{ include "corenel-sidecar.fullname" . }} -- corenel-sidecar pair --state-dir /state
+
+{{- if eq (include "corenel-sidecar.team" .) "true" }}
+Team mode: only members of the Clerk organization {{ .Values.env.SIDECAR_ORG | default "(SIDECAR_ORG is NOT SET: the sidecar will refuse to start)" }} may connect.
+{{- else }}
+Solo mode: only the account in CORENEL_TOKEN may connect.
+{{- end }}
+Keep the origin list short and treat a code like a password while it is valid.

package/dist/helm/corenel-sidecar/templates/_helpers.tpl

@@ -0,0 +1,26 @@
+{{/* The resource name: the release name, or release-chart when the release
+name does not already say which chart it is. */}}
+{{- define "corenel-sidecar.fullname" -}}
+{{- if contains .Chart.Name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name .Chart.Name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+
+{{- define "corenel-sidecar.selectorLabels" -}}
+app.kubernetes.io/name: {{ .Chart.Name }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end -}}
+
+{{- define "corenel-sidecar.labels" -}}
+{{ include "corenel-sidecar.selectorLabels" . }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end -}}
+
+{{/* The same defaults `corenel-sidecar container` applies to an unset value. */}}
+{{- define "corenel-sidecar.mode" -}}{{ default "agent" .Values.env.SIDECAR_MODE }}{{- end -}}
+{{- define "corenel-sidecar.expose" -}}{{ default "proxy" .Values.env.SIDECAR_EXPOSE }}{{- end -}}
+{{- define "corenel-sidecar.port" -}}{{ default "4858" .Values.env.SIDECAR_PORT }}{{- end -}}
+{{- define "corenel-sidecar.team" -}}{{ has (toString (default "1" .Values.env.SIDECAR_TEAM)) (list "1" "true") }}{{- end -}}
+{{- define "corenel-sidecar.clone" -}}{{ has (toString (default "0" .Values.env.SIDECAR_CLONE)) (list "1" "true") }}{{- end -}}

package/dist/helm/corenel-sidecar/templates/deployment.yaml

@@ -0,0 +1,147 @@
+{{- $fullname := include "corenel-sidecar.fullname" . -}}
+{{- $mode := include "corenel-sidecar.mode" . -}}
+{{- $expose := include "corenel-sidecar.expose" . -}}
+{{- $clone := include "corenel-sidecar.clone" . -}}
+{{- $team := include "corenel-sidecar.team" . -}}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ $fullname }}
+  labels:
+    {{- include "corenel-sidecar.labels" . | nindent 4 }}
+spec:
+  # ONE replica, always: /state is one sidecar identity on a ReadWriteOnce
+  # volume, and Recreate stops the old pod before the new one mounts it.
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      {{- include "corenel-sidecar.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "corenel-sidecar.selectorLabels" . | nindent 8 }}
+    spec:
+      # No Kubernetes API access is needed, and without the token mount nothing
+      # else claims /run/secrets (which /var/run/secrets resolves to).
+      automountServiceAccountToken: false
+      # Service links would inject SIDECAR_PORT=tcp://... for any Service named
+      # "sidecar" in the namespace, which the container refuses to start on.
+      enableServiceLinks: false
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 10001
+        runAsGroup: 10001
+        fsGroup: 10001
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: sidecar
+          image: "{{ .Values.image.repository }}:{{ default .Chart.AppVersion .Values.image.tag }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop: ["ALL"]
+          env:
+            {{- range $name, $value := .Values.env }}
+            - name: {{ $name }}
+              value: {{ $value | toString | quote }}
+            {{- end }}
+            {{- /* Model runs need it, and so does solo admission (only the
+                   signed-in account may connect). */}}
+            {{- if or (ne $mode "files") (ne $team "true") }}
+            - name: CORENEL_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.secrets.corenelToken.name }}
+                  key: {{ .Values.secrets.corenelToken.key }}
+            {{- end }}
+          ports:
+            - name: sidecar
+              containerPort: {{ include "corenel-sidecar.port" . | int }}
+              protocol: TCP
+          # The sidecar has no HTTP health route (a plain GET on its port is
+          # answered 426 Upgrade Required), so the probe is a TCP connect to
+          # loopback made from inside the container. That works for every
+          # exposure, including a tunnel's loopback-only bind.
+          readinessProbe:
+            exec:
+              command: ["sidecar-healthcheck"]
+            periodSeconds: 10
+            timeoutSeconds: 5
+          livenessProbe:
+            exec:
+              command: ["sidecar-healthcheck"]
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          volumeMounts:
+            - name: state
+              mountPath: /state
+            {{- range .Values.workspaces }}
+            - name: ws-{{ .name }}
+              mountPath: /workspace/{{ .name }}
+            {{- end }}
+            {{- if or (eq $expose "tls") (eq $clone "true") }}
+            - name: secrets
+              mountPath: /run/secrets
+              readOnly: true
+            {{- end }}
+            - name: tmp
+              mountPath: /tmp
+            - name: home
+              mountPath: /home/corenel
+          {{- with .Values.resources }}
+          resources:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+      volumes:
+        - name: state
+          persistentVolumeClaim:
+            claimName: {{ $fullname }}-state
+        {{- range .Values.workspaces }}
+        - name: ws-{{ .name }}
+          persistentVolumeClaim:
+            claimName: {{ $fullname }}-ws-{{ .name }}
+        {{- end }}
+        {{- if or (eq $expose "tls") (eq $clone "true") }}
+        - name: secrets
+          projected:
+            sources:
+              {{- if eq $expose "tls" }}
+              - secret:
+                  name: {{ .Values.secrets.tls.name }}
+                  items:
+                    - key: tls.crt
+                      path: sidecar-tls.crt
+                    - key: tls.key
+                      path: sidecar-tls.key
+              {{- end }}
+              {{- if eq $clone "true" }}
+              - secret:
+                  name: {{ .Values.secrets.gitCredentials.name }}
+                  items:
+                    - key: {{ .Values.secrets.gitCredentials.key }}
+                      path: git-credentials
+              {{- end }}
+        {{- end }}
+        - name: tmp
+          emptyDir: {}
+        - name: home
+          emptyDir: {}
+      {{- with .Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}

package/dist/helm/corenel-sidecar/templates/ingress.yaml

@@ -0,0 +1,35 @@
+{{- if and .Values.ingress.enabled (eq (include "corenel-sidecar.expose" .) "proxy") }}
+{{- $fullname := include "corenel-sidecar.fullname" . -}}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ $fullname }}
+  labels:
+    {{- include "corenel-sidecar.labels" . | nindent 4 }}
+  {{- with .Values.ingress.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  {{- if .Values.ingress.className }}
+  ingressClassName: {{ .Values.ingress.className | quote }}
+  {{- end }}
+  {{- if and .Values.ingress.host .Values.ingress.tlsSecretName }}
+  tls:
+    - hosts: [{{ .Values.ingress.host | quote }}]
+      secretName: {{ .Values.ingress.tlsSecretName | quote }}
+  {{- end }}
+  rules:
+    - http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: {{ $fullname }}
+                port:
+                  name: sidecar
+      {{- if .Values.ingress.host }}
+      host: {{ .Values.ingress.host | quote }}
+      {{- end }}
+{{- end }}

package/dist/helm/corenel-sidecar/templates/pvc.yaml

@@ -0,0 +1,36 @@
+{{- $fullname := include "corenel-sidecar.fullname" . -}}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ $fullname }}-state
+  labels:
+    {{- include "corenel-sidecar.labels" . | nindent 4 }}
+  annotations:
+    helm.sh/resource-policy: keep
+spec:
+  accessModes: [{{ .Values.state.accessMode | quote }}]
+  {{- if .Values.state.storageClassName }}
+  storageClassName: {{ .Values.state.storageClassName | quote }}
+  {{- end }}
+  resources:
+    requests:
+      storage: {{ .Values.state.size }}
+{{- range .Values.workspaces }}
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ $fullname }}-ws-{{ .name }}
+  labels:
+    {{- include "corenel-sidecar.labels" $ | nindent 4 }}
+  annotations:
+    helm.sh/resource-policy: keep
+spec:
+  accessModes: [{{ .accessMode | quote }}]
+  {{- if .storageClassName }}
+  storageClassName: {{ .storageClassName | quote }}
+  {{- end }}
+  resources:
+    requests:
+      storage: {{ .size }}
+{{- end }}

package/dist/helm/corenel-sidecar/templates/service.yaml

@@ -0,0 +1,17 @@
+{{- if ne (include "corenel-sidecar.expose" .) "tunnel" }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "corenel-sidecar.fullname" . }}
+  labels:
+    {{- include "corenel-sidecar.labels" . | nindent 4 }}
+spec:
+  type: {{ .Values.service.type }}
+  selector:
+    {{- include "corenel-sidecar.selectorLabels" . | nindent 4 }}
+  ports:
+    - name: sidecar
+      port: {{ .Values.service.port }}
+      targetPort: sidecar
+      protocol: TCP
+{{- end }}

package/dist/helm/corenel-sidecar/values.yaml

@@ -0,0 +1,81 @@
+# Values for the corenel-sidecar chart.
+#
+# `corenel-sidecar container init --target helm` writes a filled-in copy of
+# this file. The `env` block is passed to the container verbatim and is
+# exactly what `corenel-sidecar container` reads at start; see
+# deployment/sidecar/README.md for every variable. An unknown SIDECAR_*
+# variable or an unknown value makes the container refuse to start.
+#
+# NO SECRET VALUES BELONG IN THIS FILE. Secrets are referenced by name under
+# `secrets:` and created with kubectl (see the generated README.md).
+
+image:
+  repository: prompd/corenel-sidecar
+  # Empty means the chart's appVersion.
+  tag: ""
+  pullPolicy: IfNotPresent
+
+env:
+  SIDECAR_MODE: "agent"
+  SIDECAR_EXPOSE: "proxy"
+  SIDECAR_PORT: "4858"
+  SIDECAR_TEAM: "1"
+  # Required while SIDECAR_TEAM is 1: the Clerk organization ID (org_..., not a
+  # slug) whose members may connect. Empty refuses to start and says so. Set
+  # SIDECAR_TEAM to "0" (solo) for one person: only the account in
+  # CORENEL_TOKEN may connect, and SIDECAR_ORG must then be unset.
+  SIDECAR_ORG: ""
+
+# One PersistentVolumeClaim per root, mounted at /workspace/<name>. Every
+# directory mounted directly under /workspace is served as a root.
+workspaces:
+  - name: work
+    size: 10Gi
+    storageClassName: ""
+    accessMode: ReadWriteOnce
+
+# /state: the sidecar's key and identity, paired devices, crew agents,
+# sessions, audit log.
+# Kept on uninstall (helm.sh/resource-policy: keep) -- losing it makes this
+# a new sidecar that every paired browser has to pair with again.
+state:
+  size: 1Gi
+  storageClassName: ""
+  accessMode: ReadWriteOnce
+
+# Rendered unless SIDECAR_EXPOSE is tunnel (a tunnel needs no inbound path).
+service:
+  type: ClusterIP
+  port: 4858
+
+# Rendered only when SIDECAR_EXPOSE is proxy: the Ingress terminates TLS and
+# forwards plain WebSocket traffic to the sidecar. Long-lived WebSockets may
+# need controller-specific timeout annotations (see the README).
+ingress:
+  enabled: true
+  className: ""
+  host: ""
+  # A kubernetes.io/tls Secret for the host; empty means no TLS block.
+  tlsSecretName: ""
+  annotations: {}
+
+# Secrets, by NAME only.
+secrets:
+  # CORENEL_TOKEN: model-run sign-in. Required unless SIDECAR_MODE is files in
+  # team mode (solo admits only this account, so it needs it too).
+  corenelToken:
+    name: corenel-sidecar-token
+    key: token
+  # SIDECAR_EXPOSE=tls: a kubernetes.io/tls Secret (tls.crt, tls.key).
+  tls:
+    name: corenel-sidecar-tls
+  # SIDECAR_CLONE=1: a git-credential-store file, mounted at
+  # /run/secrets/git-credentials where the image's git config reads it.
+  gitCredentials:
+    name: corenel-sidecar-git
+    key: credentials
+
+resources: {}
+nodeSelector: {}
+tolerations: []
+affinity: {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corenel/sidecar",
-  "version": "0.10.0",
+  "version": "0.13.0",
   "type": "module",
   "license": "Elastic-2.0",
   "description": "Prompd sidecar — a local capability server. Run it next to Prompd (prompd.app) so the browser app can reach your machine: local LLMs (Ollama/LM Studio/vLLM) without CORS, your filesystem, and (opt-in) shell.",
@@ -21,7 +21,7 @@
     "CHANGELOG.md"
   ],
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "publishConfig": {
     "access": "public"
@@ -36,11 +36,11 @@
     "esbuild": "^0.21.5",
     "tsx": "^4.19.2",
     "typescript": "^5.9.3",
-    "@corenel/config": "0.3.0",
-    "@corenel/mcp": "0.2.0",
-    "@corenel/protocol": "0.9.0",
-    "@corenel/harness": "0.10.0",
-    "@corenel/tools-node": "0.5.0",
+    "@corenel/mcp": "0.4.0",
+    "@corenel/config": "0.6.0",
+    "@corenel/tools-node": "0.7.0",
+    "@corenel/protocol": "0.12.0",
+    "@corenel/harness": "0.13.0",
     "@corenel/crew": "0.0.0"
   },
   "repository": {