@hachej/boring-agent 0.1.111 → 0.2.0

package/dist/server/index.js

@@ -1,274 +0,0 @@
-import {
-  AgentDirectoryCompilerError,
-  AgentFleetCompilationError,
-  AgentFleetCompilationErrorCode,
-  AuthoredAgentMaterializationError,
-  CHANNELS_ENV_FLAG,
-  CHANNEL_DURABLE_STREAM_REQUIRED,
-  CHANNEL_INBOUND_PARKED,
-  CHANNEL_OUTBOUND_PARKED,
-  CHANNEL_RUNTIME_FILE_NAME,
-  CHANNEL_TURN_STALLED,
-  CHANNEL_UNKNOWN_BINDING,
-  ChannelBindingStore,
-  ChannelInboundService,
-  ChannelIntentionService,
-  ChannelMessageRouter,
-  ChannelOutboundService,
-  ChannelSessionCreateTimeoutError,
-  DEFAULT_AGENT_FLEET,
-  DEFAULT_AGENT_TYPE_ID,
-  DEFAULT_PI_RESOURCE_DIGEST_LIMITS,
-  DEFAULT_READONLY_WORKSPACE_PATHS,
-  EmbeddedAgentGateway,
-  FleetConfigError,
-  InMemoryAgentRequestLedger,
-  MANAGED_AGENT_MCP_DELIVERY_RULE,
-  MANAGED_AGENT_MCP_ORIGIN_SURFACE,
-  MIN_REQUEST_RETENTION_MS,
-  ManagedAgentMcpDelegateController,
-  ManagedAgentMcpError,
-  PI_OAUTH_CREDENTIAL_FIELD_ID_V1,
-  REMOTE_WORKER_EXCLUSIVE_BINARY_CREATE_CAPABILITY,
-  REMOTE_WORKER_PROVIDER,
-  REMOTE_WORKER_RUNTIME_CWD,
-  RUNTIME_FILESYSTEM_BINDING_DUPLICATE_CODE,
-  RUNTIME_READONLY_FILESYSTEM_POLICY_INVALID_CODE,
-  RemoteWorkerClient,
-  RemoteWorkerClientError,
-  RuntimeFilesystemBindingConfigurationError,
-  RuntimeReadonlyFilesystemPolicyError,
-  SqliteAgentRequestLedger,
-  TrustedAgentCompositionError,
-  UV_SETUP_COMMANDS,
-  WORKER_INTERNAL_TOKEN_HEADER,
-  WORKER_REQUEST_ID_HEADER,
-  WORKER_WORKSPACE_ID_HEADER,
-  applyCspHeaders,
-  areChannelsEnabled,
-  assembleNextTurn,
-  assertChannelDurability,
-  autoDetectMode,
-  buildDeploymentSnapshotRecipe,
-  compileAgentDirectory,
-  compilePersonaPackageDirectory,
-  constantTimeTokenEqual,
-  createAgentHost,
-  createAgentHostChannelRuntime,
-  createAgentHostChannelStorage,
-  createAuthMiddleware,
-  createBlaxelSandboxModeAdapter,
-  createBoundWorkspaceAgentDispatcher,
-  createChannelIntentionRuntime,
-  createConfiguredAgentHostAgentSpec,
-  createDirectModeAdapter,
-  createEnvironmentProvisioningFingerprint,
-  createHostSideCredentialResolverV1,
-  createInMemoryCredentialBackendV1,
-  createInMemoryCredentialVaultPersistenceV1,
-  createInMemoryCredentialVersionAnchorV1,
-  createLocalCredentialVersionAnchorFromEnvV1,
-  createLocalFileCredentialVersionAnchorV1,
-  createLocalKekWorkspaceKekProviderFromEnvV1,
-  createLocalModeAdapter,
-  createManagedAgentMcpDelegateController,
-  createManagedAgentMcpHttpHandler,
-  createManagedAgentMcpServer,
-  createOpenAiCodexOAuthBrokerV1,
-  createPiResourceDigestFence,
-  createPiResourceDigestInput,
-  createPluginDiagnosticsTool,
-  createPostgresCredentialVaultPersistenceV1,
-  createProviderRuntimeModeAdapter,
-  createRemoteWorkerModeAdapter,
-  createRemoteWorkerSandbox,
-  createRemoteWorkerWorkspace,
-  createResolvedAgentDigest,
-  createResolvedRuntimeScopeIdentity,
-  createSandboxRuntimeModeAdapter,
-  createStandaloneAgentHostApp,
-  createUserFilesystemBinding,
-  createValidatingAgentFleetCompiler,
-  createVaultCredentialStoreBackendV1,
-  createVaultCredentialStoreV1,
-  createVercelSandboxModeAdapter,
-  decodeBytesFromWorker,
-  deepLinkRoutes,
-  digestPiResourceInputs,
-  encodeBytesForWorker,
-  hasBwrap,
-  initializeLocalFileCredentialVersionAnchorV1,
-  loadConfiguredAgentFleet,
-  materializeAgentDirectory,
-  mergeRuntimeFilesystemBindings,
-  normalizeMeteringUsage,
-  normalizeRuntimeReadonlyFilesystemPolicy,
-  parseSkillMetadataFrontmatter,
-  prepareDeploymentSnapshot,
-  projectAgentRequestRunId,
-  projectAuthorizedSessionRunDetails,
-  provisionRuntimeWorkspace,
-  provisionWorkspaceRuntime,
-  registerAgentHostEnvironmentRoutes,
-  registerShareEntryResources,
-  resolveAgentDeployment,
-  resolveAgentInstructionFileRefs,
-  resolveBuiltinRuntimeLayoutRoot,
-  resolveDefaultAgentFleet,
-  resolveMode,
-  resolveRequestLedgerPath,
-  resolveRuntimeReadonlyFilesystemAccess,
-  resolveWorkspaceRoot,
-  runCredentialVaultPostgresMigrationsV1,
-  sandboxRuntimeHostOperations,
-  shapeChannelText,
-  shareResourceUri,
-  withResolvedCredential,
-  withRuntimeEnvContributions
-} from "../chunk-V3H5A3BR.js";
-import {
-  PI_PACKAGE_RESOURCE_FILTERS,
-  compactPiPackages,
-  createResourceSettingsManager,
-  mergePiPackageSources,
-  piPackageSourceKey
-} from "../chunk-42D6KAQV.js";
-import "../chunk-72KT6VWV.js";
-import "../chunk-7XAOVFSN.js";
-import "../chunk-YTUZFKB3.js";
-import "../chunk-KN72XWP7.js";
-import "../chunk-YGRQ4Q5P.js";
-import "../chunk-KJIEMSQP.js";
-export {
-  AgentDirectoryCompilerError,
-  AgentFleetCompilationError,
-  AgentFleetCompilationErrorCode,
-  AuthoredAgentMaterializationError,
-  CHANNELS_ENV_FLAG,
-  CHANNEL_DURABLE_STREAM_REQUIRED,
-  CHANNEL_INBOUND_PARKED,
-  CHANNEL_OUTBOUND_PARKED,
-  CHANNEL_RUNTIME_FILE_NAME,
-  CHANNEL_TURN_STALLED,
-  CHANNEL_UNKNOWN_BINDING,
-  ChannelBindingStore,
-  ChannelInboundService,
-  ChannelIntentionService,
-  ChannelMessageRouter,
-  ChannelOutboundService,
-  ChannelSessionCreateTimeoutError,
-  DEFAULT_AGENT_FLEET,
-  DEFAULT_AGENT_TYPE_ID,
-  DEFAULT_PI_RESOURCE_DIGEST_LIMITS,
-  DEFAULT_READONLY_WORKSPACE_PATHS,
-  EmbeddedAgentGateway,
-  FleetConfigError,
-  InMemoryAgentRequestLedger,
-  MANAGED_AGENT_MCP_DELIVERY_RULE,
-  MANAGED_AGENT_MCP_ORIGIN_SURFACE,
-  MIN_REQUEST_RETENTION_MS,
-  ManagedAgentMcpDelegateController,
-  ManagedAgentMcpError,
-  PI_OAUTH_CREDENTIAL_FIELD_ID_V1,
-  PI_PACKAGE_RESOURCE_FILTERS,
-  REMOTE_WORKER_EXCLUSIVE_BINARY_CREATE_CAPABILITY,
-  REMOTE_WORKER_PROVIDER,
-  REMOTE_WORKER_RUNTIME_CWD,
-  RUNTIME_FILESYSTEM_BINDING_DUPLICATE_CODE,
-  RUNTIME_READONLY_FILESYSTEM_POLICY_INVALID_CODE,
-  RemoteWorkerClient,
-  RemoteWorkerClientError,
-  RuntimeFilesystemBindingConfigurationError,
-  RuntimeReadonlyFilesystemPolicyError,
-  SqliteAgentRequestLedger,
-  TrustedAgentCompositionError,
-  UV_SETUP_COMMANDS,
-  WORKER_INTERNAL_TOKEN_HEADER,
-  WORKER_REQUEST_ID_HEADER,
-  WORKER_WORKSPACE_ID_HEADER,
-  applyCspHeaders,
-  areChannelsEnabled,
-  assembleNextTurn,
-  assertChannelDurability,
-  autoDetectMode,
-  buildDeploymentSnapshotRecipe,
-  compactPiPackages,
-  compileAgentDirectory,
-  compilePersonaPackageDirectory,
-  constantTimeTokenEqual,
-  createAuthMiddleware as createAgentAuthMiddleware,
-  createAgentHost,
-  createAgentHostChannelRuntime,
-  createAgentHostChannelStorage,
-  createBlaxelSandboxModeAdapter,
-  createBoundWorkspaceAgentDispatcher,
-  createChannelIntentionRuntime,
-  createConfiguredAgentHostAgentSpec,
-  createDirectModeAdapter,
-  createEnvironmentProvisioningFingerprint,
-  createHostSideCredentialResolverV1,
-  createInMemoryCredentialBackendV1,
-  createInMemoryCredentialVaultPersistenceV1,
-  createInMemoryCredentialVersionAnchorV1,
-  createLocalCredentialVersionAnchorFromEnvV1,
-  createLocalFileCredentialVersionAnchorV1,
-  createLocalKekWorkspaceKekProviderFromEnvV1,
-  createLocalModeAdapter,
-  createManagedAgentMcpDelegateController,
-  createManagedAgentMcpHttpHandler,
-  createManagedAgentMcpServer,
-  createOpenAiCodexOAuthBrokerV1,
-  createPiResourceDigestFence,
-  createPiResourceDigestInput,
-  createPluginDiagnosticsTool,
-  createPostgresCredentialVaultPersistenceV1,
-  createProviderRuntimeModeAdapter,
-  createRemoteWorkerModeAdapter,
-  createRemoteWorkerSandbox,
-  createRemoteWorkerWorkspace,
-  createResolvedAgentDigest,
-  createResolvedRuntimeScopeIdentity,
-  createResourceSettingsManager,
-  createSandboxRuntimeModeAdapter,
-  createStandaloneAgentHostApp,
-  createUserFilesystemBinding,
-  createValidatingAgentFleetCompiler,
-  createVaultCredentialStoreBackendV1,
-  createVaultCredentialStoreV1,
-  createVercelSandboxModeAdapter,
-  decodeBytesFromWorker,
-  deepLinkRoutes,
-  digestPiResourceInputs,
-  encodeBytesForWorker,
-  hasBwrap,
-  initializeLocalFileCredentialVersionAnchorV1,
-  loadConfiguredAgentFleet,
-  materializeAgentDirectory,
-  mergePiPackageSources,
-  mergeRuntimeFilesystemBindings,
-  normalizeMeteringUsage,
-  normalizeRuntimeReadonlyFilesystemPolicy,
-  parseSkillMetadataFrontmatter,
-  piPackageSourceKey,
-  prepareDeploymentSnapshot,
-  projectAgentRequestRunId,
-  projectAuthorizedSessionRunDetails,
-  provisionRuntimeWorkspace,
-  provisionWorkspaceRuntime,
-  registerAgentHostEnvironmentRoutes,
-  registerShareEntryResources,
-  resolveAgentDeployment,
-  resolveAgentInstructionFileRefs,
-  resolveBuiltinRuntimeLayoutRoot,
-  resolveDefaultAgentFleet,
-  resolveMode,
-  resolveRequestLedgerPath,
-  resolveRuntimeReadonlyFilesystemAccess,
-  resolveWorkspaceRoot,
-  runCredentialVaultPostgresMigrationsV1,
-  sandboxRuntimeHostOperations,
-  shapeChannelText,
-  shareResourceUri,
-  withResolvedCredential,
-  withRuntimeEnvContributions
-};

package/dist/server/pi-session-readability.d.ts

@@ -1,12 +0,0 @@
-interface PiSessionTranscriptReadabilityInput {
-    filePath: string;
-    sessionDir: string;
-    runtimeCwd: string;
-    expectedHeaderId: string;
-    headerVersion: number;
-    entries: readonly unknown[];
-}
-/** Validate an offline transcript through the same Pi loader/migrations used in production. */
-declare function isPiSessionTranscriptReadable(input: PiSessionTranscriptReadabilityInput): Promise<boolean>;
-
-export { type PiSessionTranscriptReadabilityInput, isPiSessionTranscriptReadable };

package/dist/server/pi-session-readability.js

@@ -1,23 +0,0 @@
-// src/server/harness/pi-coding-agent/sessionReadability.ts
-async function isPiSessionTranscriptReadable(input) {
-  try {
-    const {
-      CURRENT_SESSION_VERSION,
-      migrateSessionEntries,
-      SessionManager
-    } = await import("@mariozechner/pi-coding-agent");
-    if (input.headerVersion < CURRENT_SESSION_VERSION) {
-      const entries = structuredClone(input.entries);
-      migrateSessionEntries(entries);
-      const header = entries[0];
-      return header?.type === "session" && header.id === input.expectedHeaderId && header.version === CURRENT_SESSION_VERSION && entries.some((entry) => entry.type === "message");
-    }
-    const manager = SessionManager.open(input.filePath, input.sessionDir, input.runtimeCwd);
-    return manager.getHeader()?.id === input.expectedHeaderId && manager.getEntries().some((entry) => entry.type === "message");
-  } catch {
-    return false;
-  }
-}
-export {
-  isPiSessionTranscriptReadable
-};

package/dist/server/worker/index.d.ts

@@ -1,68 +0,0 @@
-import { FastifyInstance, FastifyRequest, FastifyReply, FastifyServerOptions } from 'fastify';
-import { BwrapResourceLimits } from '@hachej/boring-sandbox/providers/bwrap';
-import { SandboxProviderV1 } from '@hachej/boring-sandbox/shared';
-import { b as Workspace, c as Sandbox } from '../../sandbox-BMhut3kh.js';
-import { R as RemoteWorkerWorkspaceOp, a as RemoteWorkerWorkspaceResult } from '../../middleware-CaAEXpi5.js';
-
-interface WorkerConfig {
-    workspaceRoot: string;
-    internalToken: string;
-    port: number;
-    host: string;
-    execConcurrency: number;
-    bwrapNetwork: 'isolated' | 'shared';
-    resourceLimits: BwrapResourceLimits;
-}
-declare function loadWorkerConfig(): WorkerConfig;
-
-declare function registerWorkerRoutes(app: FastifyInstance, config: WorkerConfig, runtimeProvider?: SandboxProviderV1): Promise<void>;
-
-declare const WORKER_ERROR_CODES: {
-    readonly AUTH_INVALID: "auth_invalid";
-    readonly VALIDATION_ERROR: "validation_error";
-    readonly INVALID_WORKSPACE_ID: "invalid_workspace_id";
-    readonly NOT_IMPLEMENTED: "not_implemented";
-    readonly ALREADY_EXISTS: "REMOTE_WORKER_ALREADY_EXISTS";
-    readonly EXEC_CONCURRENCY_LIMIT: "exec_concurrency_limit";
-    readonly UNSUPPORTED_WORKSPACE_OP: "unsupported_workspace_op";
-};
-type WorkerErrorCode = (typeof WORKER_ERROR_CODES)[keyof typeof WORKER_ERROR_CODES];
-
-interface WorkerRuntime {
-    workspace: Workspace;
-    sandbox: Sandbox;
-    dispose(): Promise<void>;
-}
-declare function assertSafeWorkspaceId(workspaceId: string): string;
-declare function createWorkerRuntime(root: string, workspaceId: string, provider: SandboxProviderV1): Promise<WorkerRuntime>;
-declare function runWorkspaceOp(workspace: Workspace, op: RemoteWorkerWorkspaceOp): Promise<RemoteWorkerWorkspaceResult>;
-
-declare class ExecSemaphore {
-    private readonly limit;
-    private active;
-    constructor(limit: number);
-    run<T>(fn: () => Promise<T>): Promise<T>;
-}
-declare function buildExecEnv(input: Record<string, string> | undefined): Record<string, string>;
-
-declare function verifyInternalToken(request: FastifyRequest, reply: FastifyReply, expectedToken: string): boolean;
-
-interface CreateWorkerServerOptions {
-    /** Worker configuration. Defaults to {@link loadWorkerConfig} (reads env). */
-    config?: WorkerConfig;
-    /** Extra Fastify server options merged over the worker defaults. */
-    fastify?: FastifyServerOptions;
-    /** Host-owned worker provider (normally bwrap). */
-    runtimeProvider?: SandboxProviderV1;
-}
-interface WorkerServer {
-    app: FastifyInstance;
-    config: WorkerConfig;
-}
-/**
- * Build the internal worker Fastify server with worker routes registered.
- * Callers own listening/lifecycle.
- */
-declare function createWorkerServer(options?: CreateWorkerServerOptions): Promise<WorkerServer>;
-
-export { type CreateWorkerServerOptions, ExecSemaphore, WORKER_ERROR_CODES, type WorkerConfig, type WorkerErrorCode, type WorkerRuntime, type WorkerServer, assertSafeWorkspaceId, buildExecEnv, createWorkerRuntime, createWorkerServer, loadWorkerConfig, registerWorkerRoutes, runWorkspaceOp, verifyInternalToken };