@daugasauron/dolly 0.1.4-rc.2 → 0.1.4

package/README.md

@@ -10,7 +10,7 @@ an agent in place of a web frontend (`docs/agent-frontend.md` in the repository)
 | `@daugasauron/dolly` | The runtime: `boot()`, the kernel, the process runtime, and the host modules that are its own machinery (`runtime`, `http`, `threads`, `dso`, `stack`, `nena`, `snapshot`, `packages`). Building images stays with Dolly's site |
 | `@daugasauron/dolly-host-NAME` | One device host module each: `display` (Ghostty's terminal and programs' frames), `input`, `gpu`, `audio`, `microphone`, `touch`, `download` (as `dolly-host-save`: npm takes no new name with the word), `upload`, `sockets`, `pty` |
 | `@daugasauron/dolly-image-default` | The `default` image alone: a shell, its text tools, the terminal, curl, `amy`, `nena`, `ps`. `amy` lists what is installed and has nothing more to install |
-| `@daugasauron/dolly-image-pi-agent` | The `pi-agent` image alone: the Pi coding agent with JavaScript (Janis), shell tools, ripgrep and fd. The README's "Pi with npm" serves it with a policy |
+| `@daugasauron/dolly-image-pi-minimal` | The `pi-minimal` image alone: the Pi coding agent with JavaScript (Janis), a shell, POSIX tools, curl, ripgrep and fd, on `display`, `input` and `download` alone. The README's "Pi with npm" serves it with a policy |
 
 ```sh
 npm install @daugasauron/dolly @daugasauron/dolly-image-default \
@@ -51,6 +51,7 @@ shows its own failure in the element.
 | `modules` | URLs of the `module.json` of each host module the page has. The registry loads these and no other; an image's `REQUIRES HOST` must be among them |
 | `site` | Optional: the URL of a site that serves Dolly's own pages (`session/`, `sessions/`, `docs/`), as Dolly's site does. Given, a saved session names itself in the tab's URL and modules link to those pages |
 | `http` | Optional `{ policy, relays }` for the HTTP broker, the page's one network edge (docs/http.md). Without a policy a program may fetch any HTTPS URL |
+| `files` | Optional `{ "/absolute/path": text or Uint8Array }`, written over the image before its program starts: Pi's instructions and skills (`docs/agent-frontend.md`), a start script. Programs can read them; they are not for secrets |
 
 The page, not the image, chooses the modules and the policy, before anything of
 the image runs. A program reaches nothing of the browser but through them.

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.4-rc.2",
+  "version": "0.1.4",
   "type": "module",
   "name": "@daugasauron/dolly",
   "license": "MIT",

package/src/browser.mjs

@@ -35,15 +35,17 @@ function element(tag, properties, attributes = {}) {
 // directory `images` (images.mjs). The embedding, trusted page code, names the
 // host modules the page has (`modules`, the URLs of their manifests) and sets
 // the HTTP broker's policy (`http`: { policy, relays }), both before anything
-// of the guest runs. `site`, given, is the root of the routes a module may link
-// to (session/, sessions/, docs/). It resolves to the page's API (window.__dolly
-// on the site) once the image's ENTRY runs.
-export function boot(mount, { images, image, modules, site, http = {} } = {}) {
+// of the guest runs. `files` ({ "/absolute/path": string or Uint8Array }) are
+// written over the restored image before its ENTRY starts. `site`, given, is the
+// root of the routes a module may link to (session/, sessions/, docs/). It
+// resolves to the page's API (window.__dolly on the site) once the image's ENTRY runs.
+export function boot(mount, { images, image, modules, site, http = {}, files = {} } = {}) {
   return run(mount, { images, modules, site, http }, async () => {
     const definition = DOLLY_IMAGES.find(candidate => candidate.image === image);
-    if (!definition) throw new Error("invalid Dolly boot options");
+    if (!definition || typeof files !== "object" || files === null) throw new Error("invalid Dolly boot options");
     if (definition.entry === null) throw new Error(`${image} has no ENTRY; it only builds`);
-    return { image, label: "PRECOMPILED SYSTEM", required: definition.hostRequirements ?? [] };
+    return { image, label: "PRECOMPILED SYSTEM", required: definition.hostRequirements ?? [],
+      start: () => ({ message: { files }, transfers: [] }) };
   });
 }
 

package/src/runtime-worker.mjs

@@ -5,7 +5,7 @@ import { loadPackagedSnapshotMetadata, streamPackagedSystemSnapshot } from "./pa
 import { siteReference, hex } from "./static-asset.mjs";
 import { checkedMemoryRange, runImage } from "./worker-image.mjs";
 
-await runImage(async ({ image, mode }, host) => {
+await runImage(async ({ image, mode, files: given = {} }, host) => {
   const definition = DOLLY_IMAGES.find(candidate => candidate.image === image);
   if (!definition || mode !== "snapshot") throw new Error("invalid Dolly image selection");
   const metadata = await loadPackagedSnapshotMetadata(image);
@@ -19,7 +19,7 @@ await runImage(async ({ image, mode }, host) => {
       // The kernel restores a snapshot against the list of its paths.
       files.write("/etc/dolly/image.manifest", `${metadata.manifest.join("\n")}\n`);
     },
-    async restore({ kernel, memory, stage }) {
+    async restore({ kernel, memory, files, stage }) {
       stage("loading precompiled userspace snapshot...");
       const capacity = 1024 * 1024;
       const address = kernel.dolly_snapshot_restore_address(BigInt(capacity));
@@ -49,7 +49,10 @@ await runImage(async ({ image, mode }, host) => {
           throw new Error("Dolly rejected an incomplete snapshot part");
         return hex(staging().subarray(0, 32));
       });
-      return { status: kernel.dolly_bootstrap_snapshot_end() };
+      const status = kernel.dolly_bootstrap_snapshot_end();
+      // The embedding's files (boot's `files`) lie over the image's.
+      if (status === 0) for (const [path, contents] of Object.entries(given)) files.write(path, contents);
+      return { status };
     },
   };
 });