@gitroll/tacitt-cli 0.6.11 → 0.6.12

package/README.md

@@ -1,3 +1,5 @@
+<!-- index: Package guide | Documents public npm Manual/Skill installation, intentional updates and bundled notices. -->
+
 # Tacitt CLI
 
 Local session review, privacy decisions and reviewed export/Send for coding agents.
@@ -79,3 +81,5 @@ at [gitroll-dev/tacitt-cli](https://github.com/gitroll-dev/tacitt-cli). The
 repository contains proprietary source; public visibility does not grant an
 open-source license. All rights are reserved; reuse requires separate permission
 from the rights holders.
+
+For a custom Passport deployment, set `SESS_PILOT_PASSPORT_WEB_ORIGIN` to its trusted profile website origin alongside the custom API origin. The published-ID lookup uses the declared web origins for the standard production and development APIs.

package/bin/INDEX.md

@@ -3,7 +3,9 @@
 > Audience: contributors and reviewers
 > Ownership: root-maintained distribution boundary
 
-| Entry                    | Kind            | Responsibility                                                                                     |
-| ------------------------ | --------------- | -------------------------------------------------------------------------------------------------- |
-| [INDEX.md](INDEX.md)     | Directory index | Navigates the minimal executable boundary.                                                         |
-| [tacitt.cjs](tacitt.cjs) | Executable shim | Checks supported Node before loading the packaged ESM CLI and emits safe startup failure guidance. |
+<!-- index-entries
+./ | Executable prerequisite | Checks Node before application imports for npm/npx startup.
+INDEX.md | Directory index | Navigates the minimal executable boundary.
+-->
+
+The entry table is not committed: run `pnpm run write:indexes`, then open `INDEX.local.md` in this directory.

package/bin/tacitt.cjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+// index: Executable shim | Checks supported Node before loading the packaged ESM CLI and emits safe startup failure guidance.
 // This boundary must parse before loading Node24-only application modules.
 const [major, minor] = process.versions.node.split('.').map(Number)
 if (major !== 24 || minor < 19) {

package/dist/{agent-setup-DdfF3zch.mjs → agent-setup-B12VbvN_.mjs}

@@ -1,5 +1,5 @@
-import "./locate-Cx52Zqxv.mjs";
-import "./src-D1iONla3.mjs";
+import "./locate-D-ZaHpI0.mjs";
+import "./src-Do-qzuMn.mjs";
 import { z } from "zod";
 import { Worker } from "node:worker_threads";
 //#region apps/cli/src/agent-setup/index.ts

package/dist/agent-setup-worker.mjs

@@ -1,8 +1,8 @@
-import { J as listAgentSetup } from "./src-DlVbGB32.mjs";
-import { Nn as createStaticProcessor, _n as workspaceSchema, hn as sessionSchema } from "./locate-Cx52Zqxv.mjs";
-import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-wZx_v0Ih.mjs";
-import { bi as effectiveTreatmentSchema, ct as maximumAgentSetupSessions } from "./src-D1iONla3.mjs";
-import "./agent-setup-DdfF3zch.mjs";
+import { X as listAgentSetup } from "./src-DeNJ8vOD.mjs";
+import { Nn as createStaticProcessor, _n as workspaceSchema, hn as sessionSchema } from "./locate-D-ZaHpI0.mjs";
+import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-CKQlTA2Z.mjs";
+import { Pi as effectiveTreatmentSchema, ct as maximumAgentSetupSessions } from "./src-Do-qzuMn.mjs";
+import "./agent-setup-B12VbvN_.mjs";
 import { z } from "zod";
 import { parentPort, workerData } from "node:worker_threads";
 //#region apps/cli/src/agent-setup/worker.ts

package/dist/cli.mjs

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { _ as longCommands, a as readAgentPresence, b as traceStartup, d as serveDetached, f as guardDetachedStartup, g as businessCommands, h as parseOptions, i as invoke, l as awaitingPassport, m as helpText, n as readOperation, o as createRuntime, p as createRenderActivity, r as waitOperation, s as executorEventSchema, t as cancelOperation, u as hostDrives, v as permissionDiagnostic, y as startupFailure } from "./query-AMZerUh8.mjs";
-import { it as openPrivateFile, rt as makePrivateDirectory } from "./src-DlVbGB32.mjs";
-import { A as createExecutionPort, I as inBackgroundStatusPoll, j as startHost, k as readStateDump } from "./job-BKsifhyv.mjs";
-import { an as safeField, in as safeCode, nn as ApplicationError } from "./locate-Cx52Zqxv.mjs";
-import { gi as stateSchema, rt as readWorkspaceOutcomes, ut as resolveFailureLocation, xn as reviewTransportBytes } from "./src-D1iONla3.mjs";
-import { vt as isCoordinationBusy } from "./heap-CV8Eca8V.mjs";
+import { _ as permissionDiagnostic, a as readAgentPresence, d as packageIdentity, f as createRenderActivity, g as longCommands, h as businessCommands, i as invoke, l as serveDetached, m as parseOptions, n as readOperation, o as createRuntime, p as helpText, r as waitOperation, s as executorEventSchema, t as cancelOperation, u as guardDetachedStartup, v as startupFailure, y as traceStartup } from "./query-BYDcNKy2.mjs";
+import { at as makePrivateDirectory, ot as openPrivateFile } from "./src-DeNJ8vOD.mjs";
+import { A as createExecutionPort, I as inBackgroundStatusPoll, j as startHost, k as readStateDump } from "./job-CBuIMTQ0.mjs";
+import { an as safeField, in as safeCode, nn as ApplicationError } from "./locate-D-ZaHpI0.mjs";
+import { Ai as stateSchema, Kr as hostDrives, Wr as awaitingPassport, rt as readWorkspaceOutcomes, ut as resolveFailureLocation, yn as reviewTransportBytes } from "./src-Do-qzuMn.mjs";
+import { vt as isCoordinationBusy } from "./heap-Blrat--4.mjs";
 import { constants, createReadStream, write } from "node:fs";
 import { z } from "zod";
 import { lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, writeFile } from "node:fs/promises";
@@ -149,6 +149,7 @@ function hostFinished(now, endedAt, settledAt) {
 	return now - endedAt >= 108e5 || settledAt !== void 0 && now - settledAt >= 18e5;
 }
 async function serve(options, journeyId) {
+	const detached = process.env["TACITT_DETACHED_STARTUP"] === "1" && process.send !== void 0;
 	guardDetachedStartup();
 	let initializing;
 	let shutdownPhase = "application-and-account";
@@ -309,19 +310,19 @@ async function serve(options, journeyId) {
 					const ended = journey?.phase === "completed" || journey?.abandonedAt !== void 0;
 					const send = (await inBackgroundStatusPoll(async () => journeys?.get({})))?.journeyId === journeyId ? (await journeySend?.get({ journeyId }))?.send : null;
 					const waiting = Boolean(send && awaitingPassport(send));
-					const driving = Boolean(send && hostDrives(send));
+					const driving = Boolean(journey && send && hostDrives(journey, send));
 					const now = Date.now();
 					endedAt = ended ? endedAt ?? now : void 0;
 					settledAt = ended && !waiting ? settledAt ?? now : void 0;
 					if (endedAt !== void 0 && hostFinished(now, endedAt, settledAt)) return scheduleStop();
-					if (driving && send && journeySend) {
+					if (driving && journey && send && journeySend) {
 						let previous = send;
 						while (!hostLife.signal.aborted) {
 							const result = await journeySend.advance({
 								journeyId,
 								sendId: previous.id
 							}, hostLife.signal);
-							if (result.status !== "applied" || !result.send || !hostDrives(result.send) || result.send.revision === previous.revision) break;
+							if (result.status !== "applied" || !result.send || !hostDrives(journey, result.send) || result.send.revision === previous.revision) break;
 							if ((await inBackgroundStatusPoll(async () => journeys?.get({})))?.journeyId !== journeyId) break;
 							previous = result.send;
 						}
@@ -334,14 +335,16 @@ async function serve(options, journeyId) {
 			const url = new URL(host.url);
 			url.searchParams.set("view", "skill");
 			url.searchParams.set("journey", journeyId);
-			process.stdout.write(`${JSON.stringify({
+			const ready = {
 				ok: true,
 				event: "ready",
 				result: {
 					url: url.href,
 					journeyId
 				}
-			})}\n`);
+			};
+			if (detached) process.send?.(ready);
+			else process.stdout.write(`${JSON.stringify(ready)}\n`);
 		} else {
 			process.stdout.write(`Open this private URL to review sessions:\n${host.url}\nBundle library: ${runtime.library.path}${runtime.library.source === "fallback" ? ` (fallback from ${runtime.library.fallbackFrom})` : ""}\nLocal diagnostic logs: ${join(runtime.stateDir, "diagnostics")}\n`);
 			initializing = runtime.application.initialize().catch((error) => {
@@ -377,13 +380,6 @@ async function serve(options, journeyId) {
 	}
 }
 //#endregion
-//#region apps/cli/src/package-identity.ts
-/** Release identity stays independent of producer/processing format versions. */
-const packageIdentity = Object.freeze(z.object({
-	name: z.literal("@gitroll/tacitt-cli"),
-	version: z.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/)
-}).parse(JSON.parse(await readFile(new URL("../package.json", import.meta.url), "utf8"))));
-//#endregion
 //#region apps/cli/skills/tacitt/scripts/local-cli.mjs
 const fail = () => {
 	throw new Error("LOCAL_CLI_BINDING_INVALID");
@@ -514,14 +510,15 @@ async function exists(path) {
 		throw error;
 	}
 }
-async function filesAt(directory, prefix = "") {
+async function filesAt(directory, prefix = "", source = false) {
 	const info = await lstat(directory);
 	if (!info.isDirectory() || info.isSymbolicLink()) collision();
 	const files = /* @__PURE__ */ new Map();
 	for (const item of (await readdir(directory, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name))) {
+		if (source && item.name === "INDEX.local.md") continue;
 		const path = join(directory, item.name);
 		const key = `${prefix}${item.name}`;
-		if (item.isDirectory()) for (const [name, value] of await filesAt(path, `${key}/`)) files.set(name, value);
+		if (item.isDirectory()) for (const [name, value] of await filesAt(path, `${key}/`, source)) files.set(name, value);
 		else if (item.isFile()) files.set(key, await readFile(path));
 		else collision();
 	}
@@ -554,10 +551,10 @@ async function createRelease(identity, source, directory, local) {
 	const root = join(directory, "releases", identity.version);
 	const render = (value) => helperCommands(value, root, local?.binding.nodePath ?? "node");
 	const entry = render(template).replaceAll("](references/", `](releases/${identity.version}/references/`).replaceAll("](scripts/", `](releases/${identity.version}/scripts/`).replace(marker, () => `<!-- sess-pilot-managed:${identity.version} -->\n\nCLI release: \`${identity.name}@${identity.version}\`. ${instructions}`);
-	const files = await filesAt(join(source, "references"), "references/");
+	const files = await filesAt(join(source, "references"), "references/", true);
 	for (const [name, value] of files) if (name.endsWith(".md")) files.set(name, Buffer.from(render(value.toString("utf8")).replaceAll("](../SKILL.md", "](../../../SKILL.md")));
 	const scripts = join(source, "scripts");
-	if (await exists(scripts)) for (const [name, value] of await filesAt(scripts, "scripts/")) files.set(name, value);
+	if (await exists(scripts)) for (const [name, value] of await filesAt(scripts, "scripts/", true)) files.set(name, value);
 	if (receipt !== null) files.set("cli-binding.json", Buffer.from(receipt));
 	return {
 		identity,
@@ -1062,12 +1059,15 @@ async function reviewStream(options) {
 				id = call.id;
 				if (!streamProcedures.has(call.procedure)) throw new ApplicationError("INVALID_ARGUMENTS");
 				if (call.procedure === "journey.respond" && !z.object({ action: z.object({ kind: z.enum(["review-interrupted", "review-reader-closed"]) }) }).safeParse(call.input).success) throw new ApplicationError("INVALID_ARGUMENTS");
-				const result = await invoke(runtime, call.procedure, call.input ?? null, abort.signal);
-				const output = call.procedure === "journey.respond" ? z.object({ status: z.enum([
-					"applied",
-					"replayed",
-					"stale"
-				]) }).parse(result) : result;
+				const result = await invoke(runtime, call.procedure, call.input ?? null, abort.signal, "review-helper");
+				const output = call.procedure === "journey.respond" ? z.object({
+					status: z.enum([
+						"applied",
+						"replayed",
+						"stale"
+					]),
+					state: z.object({ revision: z.number().int().nonnegative() })
+				}).parse(result) : result;
 				await writeJson({
 					id,
 					ok: true,

package/dist/codex-title-worker.mjs

@@ -1,9 +1,9 @@
-import { i as errorCode } from "./model-C1UXkHh9.mjs";
+import { i as errorCode } from "./model-DR9odhWP.mjs";
 import { a as titleHintLimits, i as encodeTitleError, o as titleInputSchema, t as assertTitleHeap } from "./heap-1FYhGds4.mjs";
 import { stat } from "node:fs/promises";
 import { isAbsolute, join } from "node:path";
-import { DatabaseSync } from "node:sqlite";
 import { parentPort, workerData } from "node:worker_threads";
+import { DatabaseSync } from "node:sqlite";
 //#region packages/harnesses/src/metadata/codex-database/files.ts
 const absent = (error) => ["ENOENT", "ENOTDIR"].includes(errorCode(error) ?? "");
 async function databaseFile(path) {

package/dist/configured-preview-worker.mjs

@@ -1,8 +1,8 @@
-import { Y as createConfiguredPreviewStream } from "./src-DlVbGB32.mjs";
-import { Nn as createStaticProcessor, _n as workspaceSchema, hn as sessionSchema } from "./locate-Cx52Zqxv.mjs";
-import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-wZx_v0Ih.mjs";
-import { bi as effectiveTreatmentSchema } from "./src-D1iONla3.mjs";
-import { a as classifyRecord, n as assertPreviewHeap, t as runPreview } from "./run-CaPktPhH.mjs";
+import { Z as createConfiguredPreviewStream } from "./src-DeNJ8vOD.mjs";
+import { Nn as createStaticProcessor, _n as workspaceSchema, hn as sessionSchema } from "./locate-D-ZaHpI0.mjs";
+import { l as createNativeAdapters, u as createGitNameSeedProvider } from "./src-CKQlTA2Z.mjs";
+import { Pi as effectiveTreatmentSchema } from "./src-Do-qzuMn.mjs";
+import { a as classifyRecord, n as assertPreviewHeap, t as runPreview } from "./run-DQ9xyKSt.mjs";
 import { z } from "zod";
 import { parentPort, workerData } from "node:worker_threads";
 //#region apps/cli/src/preview/run.ts

package/dist/configured-session-worker.mjs

@@ -1,9 +1,22 @@
-import { h as captureConfiguredSessionJob, j as runConfiguredSessionJob, tt as safeError, u as runConfiguredScanJob, z as gitSeedsProvider } from "./src-DlVbGB32.mjs";
-import { d as runJourneyBaseJob, i as runJourneyOutputVerifyJob, n as runJourneyOutputJob, r as runJourneyOutputShardJob } from "./job-BKsifhyv.mjs";
-import { Nn as createStaticProcessor, br as processingSite, in as safeCode } from "./locate-Cx52Zqxv.mjs";
-import { l as createNativeAdapters } from "./src-wZx_v0Ih.mjs";
-import "./src-D1iONla3.mjs";
+import { N as runConfiguredSessionJob, V as gitSeedsProvider, _ as captureConfiguredSessionJob, f as runConfiguredScanJob, rt as safeError } from "./src-DeNJ8vOD.mjs";
+import { d as runJourneyBaseJob, i as runJourneyOutputVerifyJob, n as runJourneyOutputJob, r as runJourneyOutputShardJob } from "./job-CBuIMTQ0.mjs";
+import { Nn as createStaticProcessor, br as processingSite, in as safeCode } from "./locate-D-ZaHpI0.mjs";
+import { l as createNativeAdapters } from "./src-CKQlTA2Z.mjs";
+import "./src-Do-qzuMn.mjs";
 import { parentPort } from "node:worker_threads";
+//#region packages/artifact/src/configured/parallel/spool-claim.ts
+/** A worker may create a named file only after the host has recorded its cleanup ownership. */
+function claimWorkerSpool(path) {
+	if (!parentPort) throw new Error("ARTIFACT_PROCESSING_FAILED");
+	const receipt = new Int32Array(new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT));
+	parentPort.postMessage({
+		kind: "spool-claim",
+		path,
+		receipt: receipt.buffer
+	});
+	Atomics.wait(receipt, 0, 0);
+}
+//#endregion
 //#region apps/cli/src/configured-session-worker.ts
 const port = parentPort;
 const adapters = createNativeAdapters();
@@ -72,20 +85,14 @@ port?.on("message", async (message) => {
 			result: await runConfiguredScanJob(message.job, processingFor(message.job), signal, (bytes) => post({
 				kind: "source",
 				bytes
-			}), (path) => post({
-				kind: "spool",
-				path
-			}))
+			}), claimWorkerSpool)
 		});
 		else if (isJourneyOutputRequest(message)) post({
 			kind: "result",
 			result: await runJourneyOutputJob(message.job, {
 				adapters,
 				processor
-			}, signal, (path) => post({
-				kind: "spool",
-				path
-			}))
+			}, signal, claimWorkerSpool)
 		});
 		else if (isJourneyBaseRequest(message)) try {
 			post({
@@ -93,10 +100,7 @@ port?.on("message", async (message) => {
 				result: await runJourneyBaseJob(message.job, {
 					adapters,
 					processor
-				}, signal, (path) => post({
-					kind: "spool",
-					path
-				}))
+				}, signal, claimWorkerSpool)
 			});
 		} catch (error) {
 			post({
@@ -110,10 +114,7 @@ port?.on("message", async (message) => {
 			result: await runJourneyOutputShardJob(message.job, {
 				adapters,
 				processor
-			}, signal, (path) => post({
-				kind: "spool",
-				path
-			}))
+			}, signal, claimWorkerSpool)
 		});
 		else if (isJourneyOutputVerifyRequest(message)) post({
 			kind: "result",
@@ -126,10 +127,7 @@ port?.on("message", async (message) => {
 				result: await runConfiguredSessionJob(job, processingFor(job), signal, (bytes) => post({
 					kind: "source",
 					bytes
-				}), (path) => post({
-					kind: "spool",
-					path
-				}))
+				}), claimWorkerSpool)
 			});
 		}
 	} catch (error) {

package/dist/{frame-Bq2zRh-i.mjs → frame-B3He21G8.mjs}

@@ -1,4 +1,4 @@
-import { gr as ProcessingError } from "./locate-Cx52Zqxv.mjs";
+import { gr as ProcessingError } from "./locate-D-ZaHpI0.mjs";
 //#region packages/processing/src/compression/frame.ts
 function createZstdFrameCheck(fail = () => {
 	throw new ProcessingError("PROCESSING_INVALID_RECORD");