@fungi.computer/truffle 0.1.1 → 0.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/truffle",
-  "version": "0.1.1",
+  "version": "0.2.1",
   "private": false,
   "description": "Truffle: Fungi's local Agent runtime, bundled into the fungi command",
   "type": "module",
@@ -58,49 +58,55 @@
   ],
   "dependencies": {
     "@agentclientprotocol/sdk": "1.7.0",
-    "@earendil-works/pi-ai": "0.99.2",
+    "@cf-wasm/photon": "0.4.0",
+    "@earendil-works/pi-ai": "1.3.0",
     "@effect/platform-node": "4.0.2",
-    "@fungi.computer/graft": "0.0.1",
-    "@fungi.computer/agar": "0.2.0",
-    "@fungi.computer/bird-dog": "0.0.1",
-    "@fungi.computer/cairn": "0.0.1",
-    "@fungi.computer/cordyceps": "0.2.2",
-    "@fungi.computer/knapsack": "0.1.0",
-    "@fungi.computer/mycelium": "0.1.0",
-    "@fungi.computer/shiitake": "0.2.0",
-    "@fungi.computer/shiitake-extensions": "0.0.2",
-    "@fungi.computer/veil": "0.1.0",
-    "@fungi.computer/whistle": "0.0.2",
-    "@modelcontextprotocol/client": "2.0.0",
+    "@fungi.computer/agar": "0.3.0",
+    "@fungi.computer/approvals": "0.0.2",
+    "@fungi.computer/bird-dog": "0.1.0",
+    "@fungi.computer/cairn": "0.1.0",
     "@fungi.computer/capnweb": "0.12.0",
+    "@fungi.computer/carrier": "0.1.0",
+    "@fungi.computer/cordyceps": "0.3.1",
+    "@fungi.computer/gills": "0.2.0",
+    "@fungi.computer/graft": "0.1.0",
+    "@fungi.computer/knapsack": "0.2.0",
+    "@fungi.computer/lantern": "0.3.0",
+    "@fungi.computer/mycelium": "0.2.0",
+    "@fungi.computer/nacre": "0.0.1",
+    "@fungi.computer/seam": "0.1.0",
+    "@fungi.computer/shiitake": "0.3.0",
+    "@fungi.computer/shiitake-extensions": "0.1.0",
+    "@fungi.computer/veil": "0.2.0",
+    "@fungi.computer/watchdog": "0.1.0",
+    "@fungi.computer/whistle": "0.1.0",
+    "@fungi.computer/zookeeper": "0.0.1",
+    "@modelcontextprotocol/client": "2.0.0",
     "diff": "8.0.4",
     "effect": "4.0.2",
     "eventsource": "5.1.1",
     "hono": "4.13.5",
+    "image-size": "2.0.4",
+    "jose": "6.2.11",
     "miniflare": "5.20260828.0-alpha",
     "proper-lockfile": "4.1.2",
     "re2js": "1.3.3",
     "write-file-atomic": "8.0.0",
     "yaml": "2.9.0",
-    "zod": "4.4.3",
-    "@fungi.computer/lantern": "0.2.0",
-    "jose": "6.2.11",
-    "@fungi.computer/oyster": "0.2.0",
-    "@fungi.computer/seam": "0.0.1",
-    "@fungi.computer/gills": "0.1.0"
+    "zod": "4.4.3"
   },
   "devDependencies": {
     "@cloudflare/codemode": "0.5.1",
+    "@fungi.computer/mule": "0.1.0",
     "@modelcontextprotocol/server": "2.0.0",
     "@types/node": "24.13.3",
-    "bun-types": "1.4.1",
     "@types/proper-lockfile": "4.1.4",
     "@types/write-file-atomic": "4.0.3",
+    "bun": "1.4.2",
+    "bun-types": "1.4.1",
     "esbuild": "0.28.2",
     "typescript": "5.9.3",
-    "vitest": "4.1.11",
-    "bun": "1.4.2",
-    "@fungi.computer/mule": "0.0.2"
+    "vitest": "4.1.11"
   },
   "botanical": {
     "role": "runtime",
@@ -134,18 +140,25 @@
   "scripts": {
     "lint": "../../node_modules/.bin/eslint src scripts test --max-warnings=0 && ../../node_modules/.bin/oxlint --config ../../oxlint.config.ts --deny-warnings src scripts test",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "build": "pnpm run clean && tsc -p tsconfig.build.json && esbuild src/internal/private-workerd-sandbox-worker.mjs --outfile=dist/internal/private-workerd-sandbox-worker.mjs --bundle --format=esm --platform=neutral --conditions=workerd,browser --target=es2024 --external:cloudflare:workers --metafile=dist/internal/sandbox-metafile.json --log-level=warning",
+    "build": "pnpm run clean && tsc -p tsconfig.build.json && node scripts/copy-seatbelt.mjs && esbuild src/internal/private-workerd-sandbox-worker.mjs --outfile=dist/internal/private-workerd-sandbox-worker.mjs --bundle --format=esm --platform=neutral --conditions=workerd,browser --target=es2024 --external:cloudflare:workers --metafile=dist/internal/sandbox-metafile.json --log-level=warning && esbuild src/internal/local-image-fit-worker.mjs --outfile=dist/internal/local-image-fit-worker.mjs --bundle --format=esm --platform=node --target=es2024 --metafile=dist/internal/image-fit-metafile.json --log-level=warning",
     "clean": "node --input-type=module --eval \"import { rm } from 'node:fs/promises'; await rm('dist', { recursive: true, force: true });\"",
-    "test": "pnpm run test:node && pnpm run test:patch",
+    "test": "pnpm run test:node && pnpm run test:merge && pnpm run test:stop-all",
+    "test:stop-all": "bun test ./test/private-local-stop-all.bun.test.ts",
     "test:full": "pnpm run test && pnpm run test:bun",
     "test:node": "../../node_modules/.bin/vitest run",
-    "test:bun": "bun test ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-deadline.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts",
-    "build:native": "fungi-apply-patch-build --out native/bin",
+    "test:bun": "pnpm run test:mesh-link && pnpm run test:bun:batch && bun test ./test/private-workerd-deadline.bun.test.ts",
+    "test:mesh-link": "bun test ./test/private-local-mesh-links.bun.test.ts",
+    "test:bun:batch": "bun test ./test/private-sqlite-approval-driver.bun.test.ts ./test/mcp-form-service.bun.test.ts ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-service-rebind.bun.test.ts ./test/private-local-service-stop.bun.test.ts ./test/private-local-service-ensure.bun.test.ts ./test/private-local-service-identity.bun.test.ts ./test/private-local-service-kill-resume.bun.test.ts ./test/private-local-service-idle-owners.bun.test.ts ./test/private-local-service-idle-delegation.bun.test.ts ./test/private-local-mail-retry.bun.test.ts ./test/private-local-service-log-native.bun.test.ts ./test/private-local-service-log.bun.test.ts ./test/private-local-sqlite-lifetime.bun.test.ts ./test/private-sqlite-driver.bun.test.ts ./test/private-local-reload.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts ./test/local-zookeeper-slot.bun.test.ts ./test/local-extension-skills.bun.test.ts ./test/private-local-sandbox-service.bun.test.ts",
+    "build:native": "fungi-apply-patch-build --out native/bin && node scripts/build-bwrap.mjs --out native/bin",
     "test:patch": "node --test --test-timeout=30000 test/apply-patch.native.mjs",
+    "test:sandbox:linux": "node --import tsx test/fixtures/local-sandbox-proof.mts",
+    "test:sandbox:macos": "scratch=$(mktemp -d /tmp/fungi-seatbelt.XXXXXX) && scratch=$(cd \"$scratch\" && pwd -P) && mkdir \"$scratch/home\" && HOME=\"$scratch/home\" node --import tsx scripts/seatbelt-mac-proof.mjs \"$scratch\"",
     "format:check": "node ../../tooling/repository/scripts/format-package-check.mjs",
     "lint:anti-slop": "node ../../tooling/repository/scripts/lint-package-anti-slop.mjs",
-    "test:unit": "node ../../tooling/repository/scripts/test-file-pool.mjs pnpm run test:node",
-    "test:merge": "pnpm run test:patch",
-    "proof:goal-loop-sol": "bun scripts/goal-loop-model-proof.mjs"
+    "test:unit": "node ../../tooling/repository/scripts/test-file-pool.mjs pnpm run test:node && pnpm run test:mesh-link && pnpm run test:bun:batch && pnpm run test:stop-all",
+    "test:merge": "pnpm run test:patch && case \"$(uname -s)\" in Darwin) pnpm run test:sandbox:macos ;; *) pnpm run test:sandbox:linux ;; esac",
+    "proof:goal-loop-sol": "bun scripts/goal-loop-model-proof.mjs",
+    "proof:unpatched-login": "node scripts/prove-unpatched-login.mjs",
+    "proof:sqlite-close": "bun test ./test/private-local-sqlite-close.bun.test.ts"
   }
 }

package/dist/private-local-model-settings.d.ts

@@ -1,5 +0,0 @@
-import { type ModelPreference } from "@fungi.computer/shiitake/model-preference";
-/** Reads Local's per-person remembered model; a Session switch never writes it. */
-export declare function createLocalModelSettings(path?: string): {
-    read: () => Promise<ModelPreference | null>;
-};

package/dist/private-local-model-settings.js

@@ -1,31 +0,0 @@
-import { readFile } from "node:fs/promises";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import * as Schema from "effect/Schema";
-import { ModelPreferenceSchema, } from "@fungi.computer/shiitake/model-preference";
-const settingsSchema = Schema.Struct({
-    lastManualModel: ModelPreferenceSchema,
-});
-const decodeSettings = Schema.decodeUnknownSync(Schema.fromJsonString(settingsSchema), { onExcessProperty: "error" });
-/** Reads Local's per-person remembered model; a Session switch never writes it. */
-export function createLocalModelSettings(path = join(homedir(), ".config", "fungi", "shiitake.json")) {
-    return {
-        read: async () => {
-            try {
-                const text = await readFile(path, "utf8");
-                if (text.length > 4096)
-                    throw new Error("Local model settings exceed their bound");
-                return decodeSettings(text).lastManualModel;
-            }
-            catch (cause) {
-                if (cause instanceof Error &&
-                    "code" in cause &&
-                    cause.code === "ENOENT")
-                    return null;
-                throw new Error("Local model settings are invalid or unreadable", {
-                    cause,
-                });
-            }
-        },
-    };
-}

package/dist/private-local-subagents.d.ts

@@ -1,27 +0,0 @@
-import { type AgentControlDirectory } from "@fungi.computer/shiitake/agent-control";
-import type { DatabaseSync } from "node:sqlite";
-/**
- * One Local Agent's own record of the Agents each of its Sessions created or
- * sent work to. This host writes it as its Agent-control directory accepts a
- * create or a send. It feeds the read-only sub-agent view and is not a managed
- * parent/child relationship.
- */
-export declare function createPrivateLocalSubagents(input: Readonly<{
-    database: DatabaseSync;
-    directory: AgentControlDirectory;
-}>): {
-    control: Readonly<{
-        id: string;
-        acquire: (context: import("@fungi.computer/mycelium").CapabilitySourceContext) => Promise<import("@fungi.computer/mycelium").CapabilitySourceAcquisition>;
-    }>;
-    source: Readonly<{
-        read: (sessionId: string, limit: number) => Promise<Readonly<{
-            agents: readonly import("@fungi.computer/shiitake-extensions/subagents/host").SubagentRecord[];
-            more: number;
-        }>>;
-        open: (agentId: string, signal: AbortSignal) => Promise<Readonly<{
-            agent: import("@fungi.computer/shiitake-extensions/subagents/host").SubagentAgent;
-            release: () => Promise<void>;
-        }>>;
-    }>;
-};

package/dist/private-local-subagents.js

@@ -1,77 +0,0 @@
-import { createAgentControlSource, } from "@fungi.computer/shiitake/agent-control";
-import { z } from "zod";
-const subagentRow = z.lazy(() => z.strictObject({
-    agent_id: z.string().min(1).max(256),
-    session_id: z.string().min(1).max(256).nullable(),
-    total: z.number().int().nonnegative(),
-}));
-/**
- * One Local Agent's own record of the Agents each of its Sessions created or
- * sent work to. This host writes it as its Agent-control directory accepts a
- * create or a send. It feeds the read-only sub-agent view and is not a managed
- * parent/child relationship.
- */
-export function createPrivateLocalSubagents(input) {
-    input.database.exec(`CREATE TABLE IF NOT EXISTS private_local_subagents (
-    parent_session_id TEXT NOT NULL,
-    agent_id TEXT NOT NULL,
-    session_id TEXT,
-    at INTEGER NOT NULL,
-    PRIMARY KEY (parent_session_id, agent_id)
-  ) STRICT`);
-    input.database.exec("CREATE INDEX IF NOT EXISTS idx_private_local_subagents_parent ON private_local_subagents(parent_session_id, at)");
-    // A retried create keeps its first row.
-    const created = input.database.prepare("INSERT OR IGNORE INTO private_local_subagents(parent_session_id, agent_id, session_id, at) VALUES (?, ?, NULL, ?)");
-    // A send names the conversation to open and moves the row to the front.
-    const sent = input.database.prepare("INSERT INTO private_local_subagents(parent_session_id, agent_id, session_id, at) VALUES (?, ?, ?, ?) ON CONFLICT(parent_session_id, agent_id) DO UPDATE SET session_id = excluded.session_id, at = excluded.at");
-    const page = input.database.prepare("SELECT agent_id, session_id, COUNT(*) OVER () AS total FROM private_local_subagents WHERE parent_session_id = ? ORDER BY at DESC, agent_id LIMIT ?");
-    /** One Session's directory: its accepted creates and sends are recorded. */
-    function recording(parentSessionId) {
-        const { create, send } = input.directory;
-        let directory = input.directory;
-        if (create !== undefined && parentSessionId !== undefined)
-            directory = {
-                ...directory,
-                create: async (request, signal) => {
-                    const agent = await create(request, signal);
-                    created.run(parentSessionId, agent.agentId, Date.now());
-                    return agent;
-                },
-            };
-        if (send !== undefined)
-            directory = {
-                ...directory,
-                send: async (task, sourceSessionId, signal, invocation) => {
-                    const accepted = await send(task, sourceSessionId, signal, invocation);
-                    sent.run(sourceSessionId, task.agentId, task.sessionId, Date.now());
-                    return accepted;
-                },
-            };
-        return directory;
-    }
-    /**
-     * The ordinary Agent-control tools, bound to the Session that acquires them
-     * for one run, so a create is recorded against that Session.
-     */
-    const control = {
-        id: createAgentControlSource(input.directory).id,
-        acquire: (context) => createAgentControlSource(recording(context.session?.sessionId)).acquire(context),
-    };
-    const source = {
-        read: (sessionId, limit) => {
-            const rows = page
-                .all(sessionId, limit)
-                .map((row) => subagentRow.parse(row));
-            return Promise.resolve({
-                agents: rows.map((row) => ({
-                    agentId: row.agent_id,
-                    name: row.agent_id,
-                    sessionId: row.session_id,
-                })),
-                more: Math.max(0, (rows[0]?.total ?? 0) - rows.length),
-            });
-        },
-        open: input.directory.open,
-    };
-    return { control, source };
-}