@fungi.computer/truffle 0.4.0 → 0.6.0

package/dist/private-local-session-discovery.js

@@ -1,3 +1,4 @@
+import { statSync } from "node:fs";
 import { readdir, realpath, stat } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
 import * as Effect from "effect/Effect";
@@ -151,12 +152,44 @@ export class LocalStoreSchemaError extends Error {
         this.databasePath = databasePath;
     }
 }
+/** Profiles held at once; directory listings touch every store each call. */
+const cachedProfiles = 1_024;
+const profiles = new Map();
+/** Every committed write moves the store file (or its WAL); none rewrites it in place unseen. */
+function storeVersion(path) {
+    const version = (file) => {
+        const metadata = statSync(file, { bigint: true, throwIfNoEntry: false });
+        return metadata === undefined
+            ? "-"
+            : `${String(metadata.dev)}:${String(metadata.ino)}:${String(metadata.size)}:${String(metadata.mtimeNs)}:${String(metadata.ctimeNs)}`;
+    };
+    return `${version(path)}/${version(`${path}-wal`)}`;
+}
 /**
  * One Agent store's chosen display name, default model, whether it is
  * archived and the Agent that created it (absent when a human made it), read
- * without opening a host.
+ * without opening a host. Directory listings and the sub-agents footer read
+ * every store's profile on each call; an unchanged store file answers from
+ * memory instead of reopening SQLite (each Bun open/close also leaks native
+ * memory).
  */
 export function readPrivateLocalAgentProfile(path) {
+    const version = storeVersion(path);
+    const cached = profiles.get(path);
+    if (cached?.version === version)
+        return cached.profile;
+    const profile = openAgentProfile(path);
+    // The version is taken before the read, so a write racing it misses next time.
+    profiles.delete(path);
+    profiles.set(path, { version, profile });
+    if (profiles.size > cachedProfiles) {
+        const oldest = profiles.keys().next().value;
+        if (oldest !== undefined)
+            profiles.delete(oldest);
+    }
+    return profile;
+}
+function openAgentProfile(path) {
     const database = openPrivateReadOnlySqliteDatabase(path);
     try {
         const columns = database
@@ -184,15 +217,15 @@ export function readPrivateLocalAgentProfile(path) {
             folder: identity?.folder,
             model: readAgentDefaultModelJson(database),
         });
-        return {
+        return Object.freeze({
             name: stored.name ?? undefined,
             createdBy: stored.createdBy,
             archived: stored.archived === 1,
             mode: stored.mode,
-            writableFolders: stored.writableFolders,
+            writableFolders: Object.freeze(stored.writableFolders),
             folder: stored.folder,
             model: parseModelPreferenceJson(stored.model),
-        };
+        });
     }
     finally {
         database.close();

package/dist/private-provider-rejection.d.ts

@@ -1,5 +1,5 @@
 import type { AssistantMessage } from "@earendil-works/pi-ai";
-import type { ProviderRejection } from "@fungi.computer/mule";
+import { type ProviderRejection } from "@fungi.computer/mule";
 /** Evidence owned by one Local request, never inferred from assistant prose. */
 export type ModelFailureInput = Readonly<{
     refusal?: Readonly<{

package/dist/private-provider-rejection.js

@@ -1,24 +1,44 @@
 import { isContextOverflow } from "@earendil-works/pi-ai/utils/overflow";
+import { isRetryableProviderRejection, } from "@fungi.computer/mule";
 /** Local retries only a typed transient, never cancellation or a turn refusal. */
 export function modelFailureRetryable(failure) {
     return (failure.refusal === undefined &&
         failure.upstream?.stopReason !== "aborted" &&
-        failure.rejection?.code === "provider_unavailable");
+        isRetryableProviderRejection(failure.rejection));
 }
 /** The one owned wording for a failed Local model request. */
 export function modelFailureMessage(provider, failure) {
+    const name = provider === "anthropic"
+        ? "Anthropic"
+        : provider === "openai"
+            ? "OpenAI"
+            : provider;
     if (failure.refusal !== undefined)
         return `${failure.refusal.category}: ${failure.refusal.message}`;
     // Typed subscription evidence wins over all SDK/provider wording.
-    if (failure.rejection?.code === "usage-limit-reached")
-        return `${provider} usage limit reached (usage-limit-reached). Check ChatGPT Settings > Usage, then try again later.`;
-    if (modelFailureRetryable(failure))
-        return `${provider} service unavailable. Try again shortly.`;
+    if (failure.rejection?.code === "usage-limit-reached") {
+        const subscription = provider === "anthropic"
+            ? " on your Claude subscription"
+            : provider === "openai"
+                ? " on your ChatGPT subscription"
+                : "";
+        const resetAt = failure.rejection.resetAt;
+        const reset = resetAt === undefined
+            ? ""
+            : `; resets at ${new Intl.DateTimeFormat(undefined, { hour: "2-digit", minute: "2-digit", hourCycle: "h23" }).format(resetAt)}`;
+        return `${name} usage limit reached${subscription}${reset}.`;
+    }
+    if (failure.rejection?.code === "rate-limit")
+        return `${name} rate limit reached; try again shortly.`;
+    if (failure.rejection?.code === "overloaded")
+        return `${name} is overloaded; try again shortly.`;
+    if (failure.rejection?.code === "provider_unavailable")
+        return `${name} is unavailable; try again shortly.`;
     if (failure.upstream !== undefined) {
         if (isContextOverflow(failure.upstream))
-            return `${provider} request exceeds the context window. Compact the Session or choose another model.`;
+            return `${name} request exceeds the context window; compact the Session or choose another model.`;
     }
     if (failure.rejection?.code === "provider_rejected")
-        return `${provider} rejected the model request (${failure.rejection.code}, HTTP ${String(failure.rejection.status)}). Check /login or choose another model with /model.`;
-    return `${provider} model request failed without a provider rejection. Retry the request.`;
+        return `${name} rejected the request (HTTP ${String(failure.rejection.status)}); check your sign-in or choose another model.`;
+    return `${name} model request failed; try again.`;
 }

package/dist/private-sqlite-owner.d.ts

@@ -18,13 +18,19 @@ export type PrivateBunSqliteDatabase = {
 };
 /** The actual Node connection or Local's explicit native Bun adapter. */
 export type PrivateSqliteDatabase = DatabaseSync | PrivateBunSqliteDatabase;
+/**
+ * How long a store's writer waits out a reader's shared lock before its
+ * commit fails. Status reads and the Board read a live store; a reader holds
+ * its lock for one statement, so this bounds a rare wait, never a hang.
+ */
+export declare const storeWriteBusyTimeoutMs = 2000;
 /**
  * A listing owns this database until its existing finally close. Bun's
  * node:sqlite prepare/close leaves native statements alive until GC. Native
  * close(true) on the native Bun driver explicitly finalizes every statement
  * before releasing the connection, including when a read or decoding fails.
  */
-export declare function openPrivateReadOnlySqliteDatabase(path: string): PrivateSqliteDatabase;
+export declare function openPrivateReadOnlySqliteDatabase(path: string, timeout?: number): PrivateSqliteDatabase;
 /** Writable connections own their statements through deterministic close. */
 export declare function openPrivateWritableSqliteDatabase(path: string, timeout: number): PrivateSqliteDatabase;
 export type PrivateSqliteFailureCode = "busy" | "locked" | "corrupt" | "not_a_database" | "other";

package/dist/private-sqlite-owner.js

@@ -7,14 +7,26 @@ const decodeSqliteRow = Schema.decodeUnknownSync(sqliteRowSchema);
 const bunSqlite = Object.hasOwn(process.versions, "bun")
     ? await import("bun:sqlite")
     : undefined;
+/**
+ * How long a reader waits out a live runtime's commit. Stores use a rollback
+ * journal, so a commit briefly locks readers out; a reader that gives up at
+ * once would read a busy store as an unreadable one.
+ */
+const readBusyTimeoutMs = 250;
+/**
+ * How long a store's writer waits out a reader's shared lock before its
+ * commit fails. Status reads and the Board read a live store; a reader holds
+ * its lock for one statement, so this bounds a rare wait, never a hang.
+ */
+export const storeWriteBusyTimeoutMs = 2_000;
 /**
  * A listing owns this database until its existing finally close. Bun's
  * node:sqlite prepare/close leaves native statements alive until GC. Native
  * close(true) on the native Bun driver explicitly finalizes every statement
  * before releasing the connection, including when a read or decoding fails.
  */
-export function openPrivateReadOnlySqliteDatabase(path) {
-    return openPrivateSqliteDatabase(path, true, 0);
+export function openPrivateReadOnlySqliteDatabase(path, timeout = readBusyTimeoutMs) {
+    return openPrivateSqliteDatabase(path, true, timeout);
 }
 /** Writable connections own their statements through deterministic close. */
 export function openPrivateWritableSqliteDatabase(path, timeout) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/truffle",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "private": false,
   "description": "Truffle: Fungi's local Agent runtime, bundled into the fungi command",
   "type": "module",
@@ -57,6 +57,14 @@
     "./rules": {
       "types": "./dist/private-local-exec-rules.d.ts",
       "import": "./dist/private-local-exec-rules.js"
+    },
+    "./board-agents": {
+      "types": "./dist/local-board-agents.d.ts",
+      "import": "./dist/local-board-agents.js"
+    },
+    "./board-shipping": {
+      "types": "./dist/local-board-shipping.d.ts",
+      "import": "./dist/local-board-shipping.js"
     }
   },
   "files": [
@@ -69,26 +77,26 @@
     "@cf-wasm/photon": "0.4.0",
     "@earendil-works/pi-ai": "1.3.0",
     "@effect/platform-node": "4.0.2",
-    "@fungi.computer/agar": "0.4.0",
+    "@fungi.computer/agar": "0.6.0",
     "@fungi.computer/approvals": "0.2.0",
-    "@fungi.computer/bird-dog": "0.2.1",
+    "@fungi.computer/bird-dog": "0.3.1",
     "@fungi.computer/cairn": "0.1.0",
     "@fungi.computer/capnweb": "0.12.0",
     "@fungi.computer/carrier": "0.2.0",
     "@fungi.computer/cordyceps": "0.4.0",
     "@fungi.computer/gills": "0.2.0",
-    "@fungi.computer/graft": "0.1.3",
-    "@fungi.computer/knapsack": "0.3.1",
-    "@fungi.computer/lantern": "0.3.0",
-    "@fungi.computer/mycelium": "0.2.2",
-    "@fungi.computer/nacre": "0.0.3",
+    "@fungi.computer/graft": "0.1.5",
+    "@fungi.computer/knapsack": "0.4.1",
+    "@fungi.computer/lantern": "0.3.1",
+    "@fungi.computer/mycelium": "0.3.0",
+    "@fungi.computer/nacre": "0.1.1",
     "@fungi.computer/seam": "0.2.0",
-    "@fungi.computer/shiitake": "0.5.0",
-    "@fungi.computer/shiitake-extensions": "0.3.0",
+    "@fungi.computer/shiitake": "0.7.0",
+    "@fungi.computer/shiitake-extensions": "0.5.0",
     "@fungi.computer/veil": "0.2.1",
     "@fungi.computer/watchdog": "0.1.0",
-    "@fungi.computer/whistle": "0.2.0",
-    "@fungi.computer/zookeeper": "0.0.4",
+    "@fungi.computer/whistle": "0.3.0",
+    "@fungi.computer/zookeeper": "0.0.6",
     "@jellybrick/dbus-next": "0.11.4",
     "@modelcontextprotocol/client": "2.0.0",
     "@napi-rs/keyring": "2.1.2",
@@ -99,6 +107,7 @@
     "image-size": "2.0.4",
     "jose": "6.2.11",
     "miniflare": "5.20260828.0-alpha",
+    "npm-package-arg": "14.0.0",
     "proper-lockfile": "4.1.2",
     "re2js": "1.3.3",
     "semver": "7.8.5",
@@ -109,13 +118,14 @@
   },
   "devDependencies": {
     "@cloudflare/codemode": "0.5.1",
-    "@fungi.computer/mule": "0.2.0",
+    "@fungi.computer/mule": "0.2.1",
     "@modelcontextprotocol/server": "2.0.0",
     "@types/node": "24.13.3",
+    "@types/npm-package-arg": "6.1.4",
     "@types/proper-lockfile": "4.1.4",
     "@types/semver": "7.8.0",
     "@types/write-file-atomic": "4.0.3",
-    "bun": "1.4.2",
+    "bun": "1.4.4",
     "bun-types": "1.4.1",
     "esbuild": "0.28.2",
     "typescript": "5.9.3",
@@ -156,12 +166,15 @@
     "build": "if [ ! -f src/private-local-native-digests.js ]; then pnpm run build:native; fi && node scripts/generate-native-digests.mjs --verify && pnpm run clean && tsc -p tsconfig.build.json && cp src/private-local-native-digests.js dist/private-local-native-digests.js && node scripts/copy-seatbelt.mjs && esbuild src/internal/private-workerd-sandbox-worker.mjs --outfile=dist/internal/private-workerd-sandbox-worker.mjs --bundle --format=esm --platform=neutral --conditions=workerd,browser --target=es2024 --external:cloudflare:workers --metafile=dist/internal/sandbox-metafile.json --log-level=warning && esbuild src/internal/local-image-fit-worker.mjs --outfile=dist/internal/local-image-fit-worker.mjs --bundle --format=esm --platform=node --target=es2024 --metafile=dist/internal/image-fit-metafile.json --log-level=warning",
     "clean": "node --input-type=module --eval \"import { rm } from 'node:fs/promises'; await rm('dist', { recursive: true, force: true });\"",
     "test": "pnpm run test:node && pnpm run test:merge && pnpm run test:stop-all",
+    "soak:memory": "bun scripts/service-memory-soak.mjs",
+    "soak:sqlite-open-close": "bun scripts/sqlite-open-close-repro.mjs",
     "test:stop-all": "bun test ./test/private-local-stop-all.bun.test.ts",
     "test:full": "pnpm run test && pnpm run test:bun",
     "test:node": "../../node_modules/.bin/vitest run",
+    "test:sandbox:native": "../../node_modules/.bin/vitest run --config vitest.native.config.ts",
     "test:bun": "pnpm run test:mesh-link && pnpm run test:bun:batch && bun test ./test/private-workerd-deadline.bun.test.ts",
     "test:mesh-link": "bun test ./test/private-local-mesh-links.bun.test.ts",
-    "test:bun:batch": "bun test ./test/private-sqlite-approval-driver.bun.test.ts ./test/mcp-form-service.bun.test.ts ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-service-rebind.bun.test.ts ./test/private-local-service-stop.bun.test.ts ./test/private-local-service-ensure.bun.test.ts ./test/private-local-service-identity.bun.test.ts ./test/private-local-service-kill-resume.bun.test.ts ./test/private-local-service-idle-owners.bun.test.ts ./test/private-local-service-idle-delegation.bun.test.ts ./test/private-local-mail-retry.bun.test.ts ./test/private-local-service-log-native.bun.test.ts ./test/private-local-service-log.bun.test.ts ./test/private-local-sqlite-lifetime.bun.test.ts ./test/private-sqlite-driver.bun.test.ts ./test/private-local-reload.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts ./test/local-extension-archive.bun.test.ts ./test/local-zookeeper-slot.bun.test.ts ./test/local-extension-skills.bun.test.ts ./test/private-local-sandbox-service.bun.test.ts ./test/private-local-native-service.bun.test.ts",
+    "test:bun:batch": "bun test ./test/private-sqlite-approval-driver.bun.test.ts ./test/mcp-form-service.bun.test.ts ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-schedules.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-service-rebind.bun.test.ts ./test/private-local-service-stop.bun.test.ts ./test/private-local-service-ensure.bun.test.ts ./test/private-local-service-identity.bun.test.ts ./test/private-local-service-kill-resume.bun.test.ts ./test/private-local-service-idle-owners.bun.test.ts ./test/private-local-service-idle-delegation.bun.test.ts ./test/private-local-mail-retry.bun.test.ts ./test/private-local-service-log-native.bun.test.ts ./test/private-local-service-log.bun.test.ts ./test/private-local-sqlite-lifetime.bun.test.ts ./test/private-sqlite-driver.bun.test.ts ./test/private-local-reload.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts ./test/local-extension-archive.bun.test.ts ./test/local-zookeeper-slot.bun.test.ts ./test/local-extension-skills.bun.test.ts ./test/private-local-sandbox-service.bun.test.ts ./test/private-local-native-service.bun.test.ts",
     "build:native": "fungi-apply-patch-build --out native/bin && node scripts/build-bwrap.mjs --out native/bin && node scripts/generate-native-digests.mjs",
     "test:patch": "node --test --test-timeout=30000 test/apply-patch.native.mjs",
     "test:sandbox:linux": "node --import tsx test/fixtures/local-sandbox-proof.mts",
@@ -169,7 +182,7 @@
     "format:check": "node ../../tooling/repository/scripts/format-package-check.mjs",
     "lint:anti-slop": "node ../../tooling/repository/scripts/lint-package-anti-slop.mjs",
     "test:unit": "node ../../tooling/repository/scripts/test-file-pool.mjs pnpm run test:node && pnpm run test:mesh-link && pnpm run test:bun:batch && pnpm run test:stop-all",
-    "test:merge": "pnpm run test:patch && case \"$(uname -s)\" in Darwin) pnpm run test:sandbox:macos ;; *) pnpm run test:sandbox:linux ;; esac",
+    "test:merge": "pnpm run test:sandbox:native && pnpm run test:patch && case \"$(uname -s)\" in Darwin) pnpm run test:sandbox:macos ;; *) pnpm run test:sandbox:linux ;; esac",
     "proof:goal-loop-sol": "bun scripts/goal-loop-model-proof.mjs",
     "proof:unpatched-login": "node scripts/prove-unpatched-login.mjs",
     "proof:sqlite-close": "bun test ./test/private-local-sqlite-close.bun.test.ts"