@coreplane/switchboard 1.235.0 → 1.237.0

package/dist/assets/deploy/cloudflare-sandbox/Dockerfile

@@ -176,6 +176,17 @@ RUN npm install -g @earendil-works/pi-coding-agent@0.85.1 \
   && pi --version | grep -qx '0.85.1' \
   && pi --help | grep -q -- '--mode <mode>'
 
+# OpenCode, the second harness (docs/reference/specs/harness.md): `@opencode/cli`
+# at the EXACT pin held by src/deploy/imageOpenCodeHarness.test.ts, beside pi.
+# The wrapper's postinstall hard-links the platform binary into place, so it
+# is the one install script allowed by name; the grep proves the binary on
+# PATH prints the pin's version text (`opencode v2.0.3`, exactly); the npm
+# cache (a 200 MB tarball) is dropped in the same layer. Dark until a
+# deployment names it: nothing here starts it on its own.
+RUN npm install -g --allow-scripts=@opencode/cli @opencode/cli@2.0.3 \
+  && npm cache clean --force \
+  && opencode --version | grep -qx 'opencode v2.0.3'
+
 # The container outlives a crash of the SDK's container server (the
 # supervisor's header says why). The base image's ENTRYPOINT is tini running
 # the server, so one uncaught exception there ended the container; here tini

package/dist/assets/deploy/cloudflare-sandbox/worker.ts

@@ -41,9 +41,13 @@ import {
   SANDBOX_SLEEP_AFTER,
   isRecycleError,
   recycledMidCommandMessage,
+  DETACH_HINT,
+  OUTPUT_AFTER_EXIT_MS,
+  heldOutputNote,
 } from "../../src/execution/sandboxLifecycle.js";
 import { envFromRequest } from "../../src/execution/sandboxEnv.js";
 import { IdleGuard, type IdleGuardHost } from "../../src/execution/sandboxIdle.js";
+import { StartGate, type StartGateHost, type StartingCause } from "../../src/execution/sandboxStart.js";
 import { RUNTIME_REPLACEMENT_WORDING, isRuntimeUnreachableSignal } from "../../src/execution/residentRefresh.js";
 import {
   fleetBusyAnswer,
@@ -53,6 +57,8 @@ import {
   runtimeUnreachableAnswer,
   runtimeUnreachableExecAnswer,
   SandboxRuntimeUnreachableError,
+  sandboxStartingAnswer,
+  sandboxStartingExecAnswer,
   thrownShape,
   thrownText,
 } from "../../src/execution/sandboxErrors.js";
@@ -85,10 +91,17 @@ const EXEC_TIMEOUT_SECS = 280;
  *  the shell-level 124 is always the deadline a command meets first. */
 const SDK_BACKSTOP_MARGIN_MS = 40_000;
 
-/** How long the Durable Object waits for the process's exit past the SDK's
- *  own limit before it kills the process itself and reports the timeout: the
- *  runtime should have ended it at the limit; a starved container ends it late. */
-const OUTPUT_WAIT_MARGIN_MS = 30_000;
+/** How long the Durable Object waits for the process's output to END past
+ *  the command's own deadline before it asks the runtime what became of the
+ *  process (docs/reference/specs/execution.md item 24). The runtime ends the
+ *  output stream only when every holder of the command's stdout and stderr is
+ *  gone; a process that exited while a detached child holds them is answered
+ *  with its exit code and a note, a process still running is killed and
+ *  answered as the shell-level timeout. The wait is `OUTPUT_AFTER_EXIT_MS`
+ *  (20 s), inside the executor's per-send margin, so this answer always
+ *  reaches the bot before it gives the command up — the SDK's own limit
+ *  (`SDK_BACKSTOP_MARGIN_MS`) stays above it as the last resort. */
+const OUTPUT_WAIT_AFTER_DEADLINE_MS = OUTPUT_AFTER_EXIT_MS;
 
 /** The interruption reasons that mean the container's runtime is not the one
  *  the command started on: the process, if it started, is gone with its
@@ -167,6 +180,12 @@ interface FileRefusal {
   reason?: string;
 }
 
+/** The SDK's own limit on the warm-up command (`true`): generous, since the
+ *  SDK's start — an instance grant up to 30 s, the runtime's port up to 90 s
+ *  by its defaults — happens inside this one call. The executor's wait for
+ *  the `sandbox-starting` token is bounded on its own side. */
+const WARM_UP_BACKSTOP_MS = 4 * 60_000;
+
 /** Durable Object storage key of the idle ledger's served-time. */
 const IDLE_LEDGER_KEY = "switchboard.idle.lastServedAt";
 /** The scheduled-callback name of the idle sweep (a method below). */
@@ -185,10 +204,12 @@ export class SwitchboardSandbox extends Sandbox<Env> {
   sleepAfter = SANDBOX_SLEEP_AFTER;
 
   private readonly idle: IdleGuard;
+  private readonly gate: StartGate;
 
   constructor(...args: ConstructorParameters<typeof Sandbox<Env>>) {
     super(...args);
     this.idle = new IdleGuard(this.idleHost());
+    this.gate = new StartGate(this.startHost());
     // Every wake, including the one the SDK's own alarm causes on a leaked
     // container: the baseline is read and a sweep armed before any request.
     this.ctx.blockConcurrencyWhile(() => this.idle.wake());
@@ -215,6 +236,25 @@ export class SwitchboardSandbox extends Sandbox<Env> {
     };
   }
 
+  /** The start gate's view of this object (docs/reference/specs/execution.md
+   *  item 23): the platform's running flag, and a warm-up that is one trivial
+   *  command through the SDK — which does the start (instance grant, image
+   *  pull, boot, the runtime's port) and answers when the runtime does. The
+   *  warm-up runs inside the idle ledger so the guard sees a request in flight
+   *  for as long as the start takes. */
+  private startHost(): StartGateHost {
+    return {
+      now: systemClock,
+      containerRunning: () => this.ctx.container?.running,
+      warmUp: () =>
+        this.idle.served(async () => {
+          const proc = await createExtensionProcessSandbox(this).exec(["true"], { timeout: WARM_UP_BACKSTOP_MS });
+          await proc.output({ encoding: "utf8", timeout: WARM_UP_BACKSTOP_MS });
+        }),
+      log: (event) => console.log(JSON.stringify({ ...event, thread: this.ctx.id.name ?? this.ctx.id.toString() })),
+    };
+  }
+
   /** The idle sweep, scheduled by the guard through the SDK's schedule table
    *  and re-armed by it while a container is running. */
   async idleSweep(): Promise<void> {
@@ -240,7 +280,19 @@ export class SwitchboardSandbox extends Sandbox<Env> {
     execTimeoutSecs: number,
     envVars: Record<string, string>,
   ): Promise<ExecAnswer | ExecFailure> {
-    return this.idle.served(() => this.execute(command, execTimeoutSecs, envVars));
+    const startedAt = systemClock();
+    return this.idle.served(async () => {
+      try {
+        return await this.gate.through(
+          () => this.execute(command, execTimeoutSecs, envVars),
+          (cause) => sandboxStartingExecAnswer(cause),
+        );
+      } catch (err) {
+        // The warm-up's own failure, handed on by the gate: a full fleet or a
+        // silent control port keeps its name; anything else propagates.
+        return this.execFailure(err, startedAt);
+      }
+    });
   }
 
   /** `runCommand` without the ledger entry: the body, and the internal caller
@@ -261,7 +313,10 @@ export class SwitchboardSandbox extends Sandbox<Env> {
       return this.execFailure(err, startedAt);
     }
     try {
-      const out = await proc.output({ encoding: "utf8", timeout: backstopMs + OUTPUT_WAIT_MARGIN_MS });
+      const out = await proc.output({
+        encoding: "utf8",
+        timeout: execTimeoutSecs * 1000 + OUTPUT_WAIT_AFTER_DEADLINE_MS,
+      });
       // coreutils `timeout` exits 124 when the deadline killed the command
       // (137 when the follow-up SIGKILL had to); the SDK's own limit, if it
       // ever wins, reports `timedOut`. All three are the one story.
@@ -279,9 +334,21 @@ export class SwitchboardSandbox extends Sandbox<Env> {
       };
     } catch (err) {
       if (err instanceof ProcessWaitTimeoutError) {
-        // The runtime should have ended the process at the SDK's limit and
-        // did not; abandoning a live process would leave it running in the
-        // workspace. End it, then report the shell-level timeout it exceeded.
+        // The output never ended inside the command's deadline plus the
+        // margin. Two stories, told apart by asking the runtime (item 24):
+        // the process EXITED and a detached child holds its output open —
+        // the answer is its exit code and the note, the child runs on; or
+        // the process is still RUNNING past its own `timeout` — end it, and
+        // report the shell-level timeout it exceeded.
+        const status = await proc.status().catch(() => null);
+        if (status?.state === "exited") {
+          return {
+            stdout: "",
+            stderr: heldOutputNote(status.exit.code),
+            exitCode: status.exit.code,
+            durationMs: systemClock() - startedAt,
+          };
+        }
         await proc.kill(9).catch(() => {});
         return {
           stdout: "",
@@ -337,9 +404,19 @@ export class SwitchboardSandbox extends Sandbox<Env> {
     }
   }
 
+  /** A file route's answer while the container starts: HTTP 503 with the
+   *  token, like a full fleet's. */
+  private startingRefusal(cause: StartingCause): FileRefusal {
+    const { error, reason } = sandboxStartingAnswer(cause);
+    return { error, status: 503, reason };
+  }
+
   async readText(path: string): Promise<{ content: string } | FileRefusal> {
     return this.idle.served(() =>
-      this.fileOp(async () => ({ content: (await this.readFile(path, { encoding: "utf-8" })).content })),
+      this.gate.through(
+        () => this.fileOp(async () => ({ content: (await this.readFile(path, { encoding: "utf-8" })).content })),
+        (cause) => this.startingRefusal(cause),
+      ),
     );
   }
 
@@ -348,7 +425,12 @@ export class SwitchboardSandbox extends Sandbox<Env> {
    *  decoded bytes to it — an SDK read that came back short would otherwise
    *  pass as the file. A file over the cap is refused by name inside a 200. */
   async readBase64(path: string): Promise<Base64ReadAnswer | FileRefusal> {
-    return this.idle.served(() => this.readBase64Now(path));
+    return this.idle.served(() =>
+      this.gate.through(
+        () => this.readBase64Now(path),
+        (cause) => this.startingRefusal(cause),
+      ),
+    );
   }
 
   private async readBase64Now(path: string): Promise<Base64ReadAnswer | FileRefusal> {
@@ -377,10 +459,14 @@ export class SwitchboardSandbox extends Sandbox<Env> {
 
   async write(path: string, content: string): Promise<{ ok: true } | FileRefusal> {
     return this.idle.served(() =>
-      this.fileOp(async () => {
-        await this.writeFile(path, content);
-        return { ok: true as const };
-      }),
+      this.gate.through(
+        () =>
+          this.fileOp(async () => {
+            await this.writeFile(path, content);
+            return { ok: true as const };
+          }),
+        (cause) => this.startingRefusal(cause),
+      ),
     );
   }
 }
@@ -388,11 +474,12 @@ export class SwitchboardSandbox extends Sandbox<Env> {
 /** The stderr line an exit 124 carries: the limit, the knob, and the way to
  *  outlive a command (`setsid -f`: every /exec runs under `timeout … bash -c`,
  *  whose process group is reaped when the command returns, so a plain
- *  background job dies with it). */
+ *  background job dies with it — and with the wrapper's stdio redirected, so
+ *  the command's output ends when the command does, item 24). */
 function timeoutNote(execTimeoutSecs: number): string {
   return (
     `command timed out in the sandbox after ${execTimeoutSecs}s (pass the bash tool's timeoutMs for longer commands, max ${BASH_TIMEOUT_MAX_MS} ms); ` +
-    "re-run as smaller/faster steps, or start it detached with `setsid -f sh -c '<command> > /tmp/job.log 2>&1'` and poll the log on later calls"
+    `re-run as smaller/faster steps, or start it detached with \`${DETACH_HINT}\` and poll the log on later calls`
   );
 }
 

package/dist/assets/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "switchboard",
-  "version": "1.235.0",
+  "version": "1.237.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "switchboard",
-      "version": "1.235.0",
+      "version": "1.237.0",
       "license": "Apache-2.0",
       "workspaces": [
         "web",
@@ -34,7 +34,10 @@
       "devDependencies": {
         "@earendil-works/pi-coding-agent": "0.85.1",
         "@eslint/js": "^10.0.1",
+        "@opencode/protocol": "2.0.3",
+        "@opencode/schema": "2.0.3",
         "@types/node": "^24.0.0",
+        "effect": "4.0.0-rc.112",
         "eslint": "^10.10.0",
         "eslint-config-prettier": "^10.1.8",
         "eslint-plugin-vue": "^10.11.0",
@@ -5863,6 +5866,90 @@
         "@chevrotain/types": "~11.1.2"
       }
     },
+    "node_modules/@msgpackr-extract/msgpackr-extract-darwin-arm64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-darwin-arm64/-/msgpackr-extract-darwin-arm64-3.0.4.tgz",
+      "integrity": "sha512-LCkGo6JDfaBhgST7UpPWgNgLINpcpabaHfyz5OBx75nUYxBsaEPxjnyNjWpeb/xBup/682QnBfRBy2/LvPutZQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-darwin-x64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-darwin-x64/-/msgpackr-extract-darwin-x64-3.0.4.tgz",
+      "integrity": "sha512-zExlW9zUJKZH/tOtVMttwjKa4Xm/3KcNjnE3dPN92uCktwavMxpgCA3MoJK/DOnTWsQgo224OaST27/mPNAf+w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-linux-arm": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-linux-arm/-/msgpackr-extract-linux-arm-3.0.4.tgz",
+      "integrity": "sha512-Tg3yX65f5GbtXLkrYEHE5oibZG9epyYWas7FogTTEJeDEF9JlXJzKgXaNhT3UXlTOeA+AfZpYZYZ0uPj7Cfquw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-linux-arm64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-linux-arm64/-/msgpackr-extract-linux-arm64-3.0.4.tgz",
+      "integrity": "sha512-dgX0P/9wGPJeHFBG+ZmhgE6bmtMt7NP5CRBGyyktpopdk/mW4POnrpQsSLtKI1dwpc+pPLuXHDh6vvskyQE/sw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-linux-x64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-linux-x64/-/msgpackr-extract-linux-x64-3.0.4.tgz",
+      "integrity": "sha512-8TNXMEjJc3QEy7R/x1INhgiU+XakDAFUzBhaz7+Rbrs8NH5UQeHQxxmzsSBJGyV6I1jW79undiQm8tOI+D+8FQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@msgpackr-extract/msgpackr-extract-win32-x64": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@msgpackr-extract/msgpackr-extract-win32-x64/-/msgpackr-extract-win32-x64-3.0.4.tgz",
+      "integrity": "sha512-CmCXPQrkbwExx3j946/PtHWHbYJiCRBRDl4BlkRQcJB/YOwQxJRTpoo7aTsortjgoJ1x7opzTSxn7C+ASSLVjQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
     "node_modules/@napi-rs/lzma-linux-x64-gnu": {
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-gnu/-/lzma-linux-x64-gnu-1.5.1.tgz",
@@ -6155,6 +6242,28 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@opencode/protocol": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/protocol/-/protocol-2.0.3.tgz",
+      "integrity": "sha512-DNHbkLDTuAyMsmVdnjuKulcfoDbllW2dxt4W19r2aJEYvswJpEO9168CSK6Sjbx1FOh/B9yL7SQgoDRMd4K5Vw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@opencode/schema": "2.0.3",
+        "effect": "4.0.0-rc.112"
+      }
+    },
+    "node_modules/@opencode/schema": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@opencode/schema/-/schema-2.0.3.tgz",
+      "integrity": "sha512-thPeBbqw4+SkZ/0LOuqfahSRGuWogRa/wwfIVyiQYsoE0vzLx8XUpHQ+FSUWkdz6llDtP0+ZsyBqXUMpXmPgbg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@standard-schema/spec": "1.1.0",
+        "effect": "4.0.0-rc.112"
+      }
+    },
     "node_modules/@oxc-project/types": {
       "version": "0.148.0",
       "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.148.0.tgz",
@@ -11840,6 +11949,17 @@
       "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
       "license": "MIT"
     },
+    "node_modules/effect": {
+      "version": "4.0.0-rc.112",
+      "resolved": "https://registry.npmjs.org/effect/-/effect-4.0.0-rc.112.tgz",
+      "integrity": "sha512-wXxwuh1Ywnv4cPRM3Wfa0vDwuOHnZ1TsTgHJkG9XgzND6inhBH9n1vBxhg3iIXOia/OrpmvVmd3lrD4vq6bF3A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fast-check": "^4.9.0",
+        "msgpackr": "^2.0.5"
+      }
+    },
     "node_modules/embla-carousel": {
       "version": "8.6.0",
       "resolved": "https://registry.npmjs.org/embla-carousel/-/embla-carousel-8.6.0.tgz",
@@ -12447,6 +12567,29 @@
       "integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==",
       "license": "MIT"
     },
+    "node_modules/fast-check": {
+      "version": "4.10.1",
+      "resolved": "https://registry.npmjs.org/fast-check/-/fast-check-4.10.1.tgz",
+      "integrity": "sha512-sB5Vghiu8MyCyToHoBVGsT0baZg3sZWNIY+a6Ct2EDrQJlT4YdH6MC1BSLNe3kX1k5i5g0q1O52XFgcKK/rGHg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/dubzzz"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fast-check"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "pure-rand": "^8.0.0"
+      },
+      "engines": {
+        "node": ">=12.17.0"
+      }
+    },
     "node_modules/fast-deep-equal": {
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
@@ -15349,6 +15492,39 @@
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
       "license": "MIT"
     },
+    "node_modules/msgpackr": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/msgpackr/-/msgpackr-2.1.0.tgz",
+      "integrity": "sha512-p/pBCVO63CsvvpkomUnNNag6+n38rULuDA6HHe70o2gtC8ODI52foF/4ko2qQcp6OiErJXTmrZeXmsGGHsIQNQ==",
+      "dev": true,
+      "license": "MIT",
+      "optionalDependencies": {
+        "msgpackr-extract": "^3.0.4"
+      }
+    },
+    "node_modules/msgpackr-extract": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/msgpackr-extract/-/msgpackr-extract-3.0.4.tgz",
+      "integrity": "sha512-4kmO/MdyUIkLIvTPr8VHLil4AtoKIoniWPIEk5+CDy0xnWC84azhSFmuJ7PxZdsYtiP5kEeQsORAVIeMgxT+Hw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "node-gyp-build-optional-packages": "5.2.2"
+      },
+      "bin": {
+        "download-msgpackr-prebuilds": "bin/download-prebuilds.js"
+      },
+      "optionalDependencies": {
+        "@msgpackr-extract/msgpackr-extract-darwin-arm64": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-darwin-x64": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-linux-arm": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-linux-arm64": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-linux-x64": "3.0.4",
+        "@msgpackr-extract/msgpackr-extract-win32-x64": "3.0.4"
+      }
+    },
     "node_modules/muggle-string": {
       "version": "0.4.1",
       "resolved": "https://registry.npmjs.org/muggle-string/-/muggle-string-0.4.1.tgz",
@@ -15453,6 +15629,22 @@
       "integrity": "sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==",
       "license": "MIT"
     },
+    "node_modules/node-gyp-build-optional-packages": {
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/node-gyp-build-optional-packages/-/node-gyp-build-optional-packages-5.2.2.tgz",
+      "integrity": "sha512-s+w+rBWnpTMwSFbaE0UXsRlg7hU4FjekKU4eyAih5T8nJuNZT1nNsskXpxmeqSK9UzkBl6UgRlnKc8hz8IEqOw==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "detect-libc": "^2.0.1"
+      },
+      "bin": {
+        "node-gyp-build-optional-packages": "bin.js",
+        "node-gyp-build-optional-packages-optional": "optional.js",
+        "node-gyp-build-optional-packages-test": "build-test.js"
+      }
+    },
     "node_modules/node-mock-http": {
       "version": "1.0.5",
       "resolved": "https://registry.npmjs.org/node-mock-http/-/node-mock-http-1.0.5.tgz",
@@ -16269,6 +16461,23 @@
         "node": ">=6"
       }
     },
+    "node_modules/pure-rand": {
+      "version": "8.4.2",
+      "resolved": "https://registry.npmjs.org/pure-rand/-/pure-rand-8.4.2.tgz",
+      "integrity": "sha512-vvuOGgcuPJAirlHvuQw1TrOiw7ptaIXXmIbNuiNOY6lNGJJH49PQ1Kj4nd783nPdQhQdicgOjVI2yI/9BD6/Ng==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/dubzzz"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fast-check"
+        }
+      ],
+      "license": "MIT"
+    },
     "node_modules/qified": {
       "version": "0.10.1",
       "resolved": "https://registry.npmjs.org/qified/-/qified-0.10.1.tgz",
@@ -20032,7 +20241,7 @@
     },
     "packages/switchboard": {
       "name": "@coreplane/switchboard",
-      "version": "1.235.0",
+      "version": "1.237.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@earendil-works/pi-ai": "0.85.1",

package/dist/assets/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchboard",
-  "version": "1.235.0",
+  "version": "1.237.0",
   "private": true,
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",
@@ -91,7 +91,10 @@
   "devDependencies": {
     "@earendil-works/pi-coding-agent": "0.85.1",
     "@eslint/js": "^10.0.1",
+    "@opencode/protocol": "2.0.3",
+    "@opencode/schema": "2.0.3",
     "@types/node": "^24.0.0",
+    "effect": "4.0.0-rc.112",
     "eslint": "^10.10.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-vue": "^10.11.0",

package/dist/assets/source.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.235.0",
-  "commit": "091ab2f1f6d89290bde9c84e933d23525f9c8873",
-  "builtAt": "2026-09-16T17:37:07.278Z"
+  "version": "1.237.0",
+  "commit": "48c0666b37e01a43b1cfaafb6a9b80c398efa813",
+  "builtAt": "2026-09-16T22:10:57.396Z"
 }

package/dist/assets/src/core/authz/authorize.ts

@@ -63,6 +63,21 @@ export function principalOf(actor: Actor): Actor {
   return current;
 }
 
+/** The ids that mean "me" for a decision (record 0042): the root principal's
+ *  `self` when it carries one — its own id and the person a dashboard session
+ *  is linked to — else its id alone. Never read by a grant check. */
+export function selfIdsOf(actor: Actor): readonly string[] {
+  const principal = principalOf(actor);
+  return principal.self && principal.self.length > 0 ? principal.self : [principal.id];
+}
+
+/** Whether a self set names a chat identity — the `acts-as-person` condition:
+ *  every chat actor, a dashboard session linked to its person; never an
+ *  unlinked browser session or a credential. */
+export function actsAsPerson(selfIds: readonly string[]): boolean {
+  return selfIds.some((id) => id.startsWith("slack:"));
+}
+
 // ── decision ─────────────────────────────────────────────────────────────────
 
 const ALLOW: Decision = Object.freeze({ allow: true });
@@ -76,11 +91,13 @@ export type DenyReason =
   | "missing-grant"
   | "not-member"
   | "not-self"
+  | "not-person"
   | "not-owner"
   | "not-all-channels";
 
 const FAILURE_REASON: Readonly<Record<Condition["kind"], DenyReason>> = {
   "has-grant": "missing-grant",
+  "acts-as-person": "not-person",
   "member-of": "not-member",
   "is-self": "not-self",
   "owner-of": "not-owner",
@@ -98,7 +115,7 @@ export function isKnownActorKind(kind: string): boolean {
 export function evaluateCondition(
   condition: Condition,
   grants: Grants,
-  selfId: string,
+  selfIds: readonly string[],
   attributes: ResourceAttributes,
 ): boolean {
   switch (condition.kind) {
@@ -115,7 +132,9 @@ export function evaluateCondition(
         attributes.channelVisibility === "public"
       );
     case "is-self":
-      return attributes.userId !== undefined && attributes.userId === selfId;
+      return attributes.userId !== undefined && selfIds.includes(attributes.userId);
+    case "acts-as-person":
+      return actsAsPerson(selfIds);
     case "owner-of":
       return attributes.repo !== undefined && holds(grants.repos, attributes.repo);
     case "all-channels":
@@ -134,8 +153,8 @@ export function evaluateRule(rule: Rule, actor: Actor, resource: Resource): bool
   const attributes = attributesOf(resource);
   if (rule.originVisibility && !rule.originVisibility.includes(attributes.visibility)) return false;
   const grants = effectiveGrants(actor);
-  const selfId = principalOf(actor).id;
-  return rule.when.every((condition) => evaluateCondition(condition, grants, selfId, attributes));
+  const selfIds = selfIdsOf(actor);
+  return rule.when.every((condition) => evaluateCondition(condition, grants, selfIds, attributes));
 }
 
 /** `authorize` over an explicit (validated) table. Tests use it to drive
@@ -153,10 +172,10 @@ export function authorizeWith(rules: readonly Rule[], actor: Actor, action: Acti
   );
   if (forOrigin.length === 0) return deny("origin-visibility");
   const grants = effectiveGrants(actor);
-  const selfId = principalOf(actor).id;
+  const selfIds = selfIdsOf(actor);
   let reason: DenyReason | undefined;
   for (const rule of forOrigin) {
-    const failed = rule.when.find((condition) => !evaluateCondition(condition, grants, selfId, attributes));
+    const failed = rule.when.find((condition) => !evaluateCondition(condition, grants, selfIds, attributes));
     if (!failed) return ALLOW;
     reason ??= FAILURE_REASON[failed.kind];
   }

package/dist/assets/src/core/authz/policy.ts

@@ -41,6 +41,7 @@ import type { ActorKind, Condition, Rule } from "./types.js";
 const grant = (g: string): Condition => ({ kind: "has-grant", grant: g });
 const MEMBER_OF: Condition = { kind: "member-of" };
 const IS_SELF: Condition = { kind: "is-self" };
+const ACTS_AS_PERSON: Condition = { kind: "acts-as-person" };
 const OWNER_OF: Condition = { kind: "owner-of" };
 const ALL_CHANNELS: Condition = { kind: "all-channels" };
 
@@ -144,6 +145,13 @@ export const POLICY: readonly Rule[] = [
   // ── mcp (external MCP servers live in the three config tiers) ────────────
   { action: "mcp:read", resource: "command", when: [grant("mcp:read")] },
   { action: "mcp:write", resource: "command", when: [grant("mcp:write")] },
+  // A person always has their own tier to write (`mcp add|connect|remove`
+  // for themselves), as `config set me` already is theirs: the row admits an
+  // actor whose `self` names a chat identity — every chat user (who holds
+  // `mcp:write` by baseline anyway) and a dashboard session linked to its
+  // person (record 0042) — never an unlinked browser session or a credential.
+  // Which tier the write reaches stays the handler's question below.
+  { action: "mcp:write", resource: "command", actorKinds: ["user"], when: [ACTS_AS_PERSON] },
   // A CHANNEL's servers: the channel-config right for a person; a credential
   // an admin minted with `mcp:write` manages any tier it can name.
   { action: "mcp:write", resource: "config-scope", resourceKind: "channel", when: [grant("config:write")] },
@@ -214,6 +222,7 @@ export const CONDITION_KINDS: readonly Condition["kind"][] = [
   "has-grant",
   "member-of",
   "is-self",
+  "acts-as-person",
   "owner-of",
   "all-channels",
 ];