@fungi.computer/bonsai 0.2.5 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,51 @@
 # @fungi.computer/bonsai
 
+## 0.3.0
+
+### Minor Changes
+
+- Changes since 0.2.6:
+
+  - feat(repository): scope docs-only gates
+  - fix(oyster): close every anonymous door
+  - fix(oyster): route every host request through one authorization owner
+  - fix(oyster): keep every door closed through authorization.ts
+
+### Patch Changes
+
+- Updated dependencies
+- Updated dependencies
+- Updated dependencies
+- Updated dependencies
+- Updated dependencies
+- Updated dependencies
+- Updated dependencies
+  - @fungi.computer/agar@0.6.0
+  - @fungi.computer/braid@0.3.0
+  - @fungi.computer/caps@0.5.0
+  - @fungi.computer/oyster@0.7.0
+  - @fungi.computer/puffball@0.3.0
+  - @fungi.computer/trellis@0.5.0
+  - @fungi.computer/workflows-wire@0.3.0
+  - @fungi.computer/nacre@0.1.1
+
+## 0.2.6
+
+### Patch Changes
+
+- Updated dependencies
+- Updated dependencies
+- Updated dependencies
+- Updated dependencies
+- Updated dependencies
+  - @fungi.computer/agar@0.5.0
+  - @fungi.computer/caps@0.4.0
+  - @fungi.computer/nacre@0.1.0
+  - @fungi.computer/oyster@0.6.0
+  - @fungi.computer/trellis@0.4.0
+  - @fungi.computer/braid@0.2.4
+  - @fungi.computer/workflows-wire@0.2.4
+
 ## 0.2.5
 
 ### Patch Changes

package/README.md

@@ -8,10 +8,10 @@ agent gets its own fork, pushes with ordinary `git`, and shows up live.
 Bonsai is one of the starter Apps of
 [Oyster](https://github.com/fungi-computer/oyster), the open App host that runs
 on your own Cloudflare account. Its repositories live in Cloudflare Artifacts,
-so a repository per agent is cheap. Try it at
-<https://oyster.shiit.app/apps/bonsai/>: that installation is public and
-read-only, so you can browse repositories, the graph, Changes and issues with no
-sign-in.
+so a repository per agent is cheap. The live instance at
+[oyster.shiit.app](https://oyster.shiit.app/) requires an Oyster key. To try
+Oyster without a Cloudflare account,
+[run it locally](https://docs.fungi.computer/guides/run-your-own-oyster/#run-it-on-your-laptop).
 
 ## What you can do
 
@@ -58,7 +58,7 @@ Oyster with `git push`, builds them on your Computer and installs them. Sign in
 at `$OYSTER_URL/login` with the owner key and open Bonsai from the Tourtois
 desktop. Run `install-apps` again to update; each App keeps its data.
 
-To let anyone browse your Bonsai read-only, as the live demo does:
+To let anyone browse your Bonsai read-only:
 
 ```sh
 curl -X PUT -H "Authorization: Bearer $OYSTER_OWNER_KEY" -H 'content-type: application/json' \

package/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@fungi.computer/bonsai",
-  "version": "0.2.5",
+  "version": "0.3.0",
   "author": "Levi <levi@technomancy.dev>",
   "type": "module",
   "description": "Bonsai: a git platform for many agents working at once, on Workers and Artifacts",
   "dependencies": {
-    "@fungi.computer/agar": "0.4.0",
-    "@fungi.computer/caps": "0.3.1",
+    "@fungi.computer/agar": "0.6.0",
+    "@fungi.computer/caps": "0.5.0",
     "@fungi.computer/issues": "0.2.0",
-    "@fungi.computer/oyster": "0.5.0",
-    "@fungi.computer/puffball": "0.2.0",
+    "@fungi.computer/oyster": "0.7.0",
+    "@fungi.computer/puffball": "0.3.0",
     "@fungi.computer/sigils": "0.2.0",
     "@fungi.computer/stipe": "0.1.0",
     "@pierre/diffs": "1.3.6",
@@ -29,10 +29,10 @@
     "@fungi.computer/maosaico": "0.1.0",
     "@visx/hierarchy": "3.12.0",
     "@fungi.computer/gills": "0.2.0",
-    "@fungi.computer/nacre": "0.0.3",
-    "@fungi.computer/trellis": "0.3.0",
-    "@fungi.computer/braid": "0.2.3",
-    "@fungi.computer/workflows-wire": "0.2.3"
+    "@fungi.computer/nacre": "0.1.1",
+    "@fungi.computer/trellis": "0.5.0",
+    "@fungi.computer/braid": "0.3.0",
+    "@fungi.computer/workflows-wire": "0.3.0"
   },
   "devDependencies": {
     "playwright": "1.62.1",
@@ -52,7 +52,7 @@
     "eslint": "10.9.1",
     "oxlint": "1.78.0",
     "jsdom": "29.0.1",
-    "@fungi.computer/computer-contract": "0.0.4"
+    "@fungi.computer/computer-contract": "0.0.6"
   },
   "botanical": {
     "role": "app",

package/test/repository-deletion.test.ts

@@ -12,6 +12,13 @@ import { BonsaiState, ensureBonsaiTables } from "../backend/state.js";
 import type { Bonsai } from "../backend/service.js";
 import { realGit } from "@fungi.computer/agar/test-kit/git";
 
+/** A Git door answers whole requests; resolve a path against one origin. */
+const gitFetch = (
+  door: { fetch: (request: Request) => Promise<Response> },
+  path: string,
+  init?: RequestInit,
+) => door.fetch(new Request(new URL(path, "https://oyster.test"), init));
+
 function fixture() {
   const database = new DatabaseSync(":memory:");
   const sql = fromNodeSqlite(database);
@@ -84,7 +91,7 @@ it("refuses repository deletion before state or provider writes for every non-ow
   }
 });
 
-it("withdraws the public listing and anonymous clone after owner deletion", async () => {
+it("withdraws the listing and owner clone after owner deletion", async () => {
   const f = fixture();
   const provider = realGit();
   try {
@@ -113,7 +120,7 @@ it("withdraws the public listing and anonymous clone after owner deletion", asyn
       grants: { admits: () => Promise.resolve(true) },
       policy: {
         authorize: () =>
-          Promise.reject(new Error("Anonymous clone never authorizes a push")),
+          Promise.reject(new Error("A clone never authorizes a push")),
       },
       journal: {
         tip: () => Promise.reject(new Error("Clone has no write journal")),
@@ -121,12 +128,16 @@ it("withdraws the public listing and anonymous clone after owner deletion", asyn
       },
     });
     const door = createGitDoor({
-      authenticate: () => Promise.resolve(null),
-      isPublic: () => Promise.resolve(true),
+      authenticate: () =>
+        Promise.resolve({
+          kind: "actor",
+          actor: { kind: "member", memberId: "owner" },
+          role: "owner",
+        }),
       git: () => Promise.resolve(git),
     });
     const path = "/git/bonsai/pond.git/info/refs?service=git-upload-pack";
-    expect((await door.request(path)).status).toBe(200);
+    expect((await gitFetch(door, path)).status).toBe(200);
     await expect(
       appBackend.call("repos.list", {}, { bonsai }, owner),
     ).resolves.toMatchObject({ repos: [{ name: "pond" }] });
@@ -136,11 +147,11 @@ it("withdraws the public listing and anonymous clone after owner deletion", asyn
     await expect(
       appBackend.call("repos.list", {}, { bonsai }, owner),
     ).resolves.toEqual({ repos: [] });
-    expect((await door.request(path)).status).toBe(404);
+    expect((await gitFetch(door, path)).status).toBe(404);
     await expect(
       appBackend.call("repos.delete", { repo: "pond" }, { bonsai }, owner),
     ).resolves.toEqual({ deleted: true });
-    expect((await door.request(path)).status).toBe(404);
+    expect((await gitFetch(door, path)).status).toBe(404);
   } finally {
     provider.close();
     f.database.close();

package/turbo.jsonc

@@ -19,6 +19,10 @@
         "$TURBO_ROOT$/.agents/skills/orchestrate-multi-lane-work/scripts/proof-time-bound.sh",
         "$TURBO_ROOT$/tooling/celld-platform/runtime/**",
         "$TURBO_ROOT$/apps/trellis/templates/**",
+        "!$TURBO_ROOT$/apps/docs/release-claims/**",
+        "!**/*.{md,mdx}",
+        "!$TURBO_ROOT$/**/*.{md,mdx}",
+        "!release-claims/**",
       ],
     },
   },