@halcyonlabs/app 0.47.0-halcyon.32 → 0.47.0-halcyon.33

package/dist/index.d.ts

@@ -280,8 +280,8 @@ declare const appKeybindingOverridesSchema: z$1.ZodArray<z$1.ZodObject<{
         shift: z$1.ZodBoolean;
     }, z$1.core.$strict>>;
     platform: z$1.ZodOptional<z$1.ZodEnum<{
-        windows: "windows";
         mac: "mac";
+        windows: "windows";
         linux: "linux";
     }>>;
 }, z$1.core.$strict>>;
@@ -591,9 +591,9 @@ declare const hostSchema: z$1.ZodObject<{
         }, z$1.core.$strip>>;
     }, z$1.core.$strip>;
     maxPermissionMode: z$1.ZodEnum<{
-        full: "full";
         auto: "auto";
         "accept-edits": "accept-edits";
+        full: "full";
     }>;
     lastSeenAt: z$1.ZodNullable<z$1.ZodNumber>;
     lastRejectedProtocolVersion: z$1.ZodNullable<z$1.ZodNumber>;
@@ -2824,9 +2824,9 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
         tell: "tell";
     }>;
     initiator: z$1.ZodEnum<{
-        user: "user";
         system: "system";
         agent: "agent";
+        user: "user";
     }>;
     request: z$1.ZodObject<{
         method: z$1.ZodEnum<{
@@ -2847,9 +2847,9 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
         tell: "tell";
     }>;
     initiator: z$1.ZodEnum<{
-        user: "user";
         system: "system";
         agent: "agent";
+        user: "user";
     }>;
     senderThreadId: z$1.ZodNullable<z$1.ZodString>;
     systemMessageKind: z$1.ZodOptional<z$1.ZodEnum<{
@@ -2955,12 +2955,12 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
                 }>;
                 name: z$1.ZodString;
                 source: z$1.ZodEnum<{
-                    skill: "skill";
                     command: "command";
+                    skill: "skill";
                 }>;
                 origin: z$1.ZodEnum<{
-                    user: "user";
                     project: "project";
+                    user: "user";
                     builtin: "builtin";
                 }>;
                 label: z$1.ZodString;
@@ -3045,12 +3045,12 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
                 }>;
                 name: z$1.ZodString;
                 source: z$1.ZodEnum<{
-                    skill: "skill";
                     command: "command";
+                    skill: "skill";
                 }>;
                 origin: z$1.ZodEnum<{
-                    user: "user";
                     project: "project";
+                    user: "user";
                     builtin: "builtin";
                 }>;
                 label: z$1.ZodString;
@@ -3123,9 +3123,9 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
         }>;
         permissionMode: z$1.ZodEnum<{
             readonly: "readonly";
-            full: "full";
             auto: "auto";
             "accept-edits": "accept-edits";
+            full: "full";
             "workspace-write": "workspace-write";
         }>;
     }, z$1.core.$strip>;
@@ -3144,9 +3144,9 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
         tell: "tell";
     }>;
     initiator: z$1.ZodEnum<{
-        user: "user";
         system: "system";
         agent: "agent";
+        user: "user";
     }>;
     request: z$1.ZodObject<{
         method: z$1.ZodEnum<{
@@ -3191,10 +3191,10 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
     interaction: z$1.ZodUnion<readonly [z$1.ZodObject<{
         id: z$1.ZodString;
         status: z$1.ZodEnum<{
-            resolved: "resolved";
             pending: "pending";
             interrupted: "interrupted";
             resolving: "resolving";
+            resolved: "resolved";
         }>;
         statusReason: z$1.ZodNullable<z$1.ZodString>;
         origin: z$1.ZodObject<{
@@ -3327,10 +3327,10 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
     }, z$1.core.$strip>, z$1.ZodObject<{
         id: z$1.ZodString;
         status: z$1.ZodEnum<{
-            resolved: "resolved";
             pending: "pending";
             interrupted: "interrupted";
             resolving: "resolving";
+            resolved: "resolved";
         }>;
         statusReason: z$1.ZodNullable<z$1.ZodString>;
         origin: z$1.ZodObject<{
@@ -3363,10 +3363,10 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
     }, z$1.core.$strip>, z$1.ZodObject<{
         id: z$1.ZodString;
         status: z$1.ZodEnum<{
-            resolved: "resolved";
             pending: "pending";
             interrupted: "interrupted";
             resolving: "resolving";
+            resolved: "resolved";
         }>;
         statusReason: z$1.ZodNullable<z$1.ZodString>;
         origin: z$1.ZodObject<{
@@ -3414,10 +3414,10 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
     }, z$1.core.$strip>, z$1.ZodObject<{
         id: z$1.ZodString;
         status: z$1.ZodEnum<{
-            resolved: "resolved";
             pending: "pending";
             interrupted: "interrupted";
             resolving: "resolving";
+            resolved: "resolved";
         }>;
         statusReason: z$1.ZodNullable<z$1.ZodString>;
         origin: z$1.ZodObject<{
@@ -3440,10 +3440,10 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
     providerId: z$1.ZodString;
     providerRequestId: z$1.ZodString;
     status: z$1.ZodEnum<{
-        resolved: "resolved";
         pending: "pending";
         interrupted: "interrupted";
         resolving: "resolving";
+        resolved: "resolved";
     }>;
     resolution: z$1.ZodDefault<z$1.ZodNullable<z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
         decision: z$1.ZodLiteral<"allow_once">;
@@ -3492,10 +3492,10 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
     providerId: z$1.ZodString;
     providerRequestId: z$1.ZodString;
     status: z$1.ZodEnum<{
-        resolved: "resolved";
         pending: "pending";
         interrupted: "interrupted";
         resolving: "resolving";
+        resolved: "resolved";
     }>;
     resolution: z$1.ZodDefault<z$1.ZodNullable<z$1.ZodObject<{
         kind: z$1.ZodLiteral<"user_answer">;
@@ -3617,10 +3617,10 @@ declare const providerPendingInteractionSchema: z$1.ZodUnion<readonly [z$1.ZodOb
     id: z$1.ZodString;
     threadId: z$1.ZodString;
     status: z$1.ZodEnum<{
-        resolved: "resolved";
         pending: "pending";
         interrupted: "interrupted";
         resolving: "resolving";
+        resolved: "resolved";
     }>;
     statusReason: z$1.ZodNullable<z$1.ZodString>;
     createdAt: z$1.ZodNumber;
@@ -3767,10 +3767,10 @@ declare const providerPendingInteractionSchema: z$1.ZodUnion<readonly [z$1.ZodOb
     id: z$1.ZodString;
     threadId: z$1.ZodString;
     status: z$1.ZodEnum<{
-        resolved: "resolved";
         pending: "pending";
         interrupted: "interrupted";
         resolving: "resolving";
+        resolved: "resolved";
     }>;
     statusReason: z$1.ZodNullable<z$1.ZodString>;
     createdAt: z$1.ZodNumber;
@@ -3812,10 +3812,10 @@ declare const providerPendingInteractionSchema: z$1.ZodUnion<readonly [z$1.ZodOb
     id: z$1.ZodString;
     threadId: z$1.ZodString;
     status: z$1.ZodEnum<{
-        resolved: "resolved";
         pending: "pending";
         interrupted: "interrupted";
         resolving: "resolving";
+        resolved: "resolved";
     }>;
     statusReason: z$1.ZodNullable<z$1.ZodString>;
     createdAt: z$1.ZodNumber;
@@ -3846,10 +3846,10 @@ declare const pluginPendingInteractionSchema: z$1.ZodObject<{
     id: z$1.ZodString;
     threadId: z$1.ZodString;
     status: z$1.ZodEnum<{
-        resolved: "resolved";
         pending: "pending";
         interrupted: "interrupted";
         resolving: "resolving";
+        resolved: "resolved";
     }>;
     statusReason: z$1.ZodNullable<z$1.ZodString>;
     createdAt: z$1.ZodNumber;
@@ -3922,9 +3922,9 @@ type ReasoningLevel = z$1.infer<typeof reasoningLevelSchema>;
 declare const serviceTierSchema: z$1.ZodString;
 type ServiceTier = z$1.infer<typeof serviceTierSchema>;
 declare const permissionModeSchema: z$1.ZodEnum<{
-    full: "full";
     auto: "auto";
     "accept-edits": "accept-edits";
+    full: "full";
 }>;
 type PermissionMode = z$1.infer<typeof permissionModeSchema>;
 declare const promptTextMentionSchema: z$1.ZodObject<{
@@ -3963,12 +3963,12 @@ declare const promptTextMentionSchema: z$1.ZodObject<{
         }>;
         name: z$1.ZodString;
         source: z$1.ZodEnum<{
-            skill: "skill";
             command: "command";
+            skill: "skill";
         }>;
         origin: z$1.ZodEnum<{
-            user: "user";
             project: "project";
+            user: "user";
             builtin: "builtin";
         }>;
         label: z$1.ZodString;
@@ -4028,12 +4028,12 @@ declare const promptInputSchema: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
             }>;
             name: z$1.ZodString;
             source: z$1.ZodEnum<{
-                skill: "skill";
                 command: "command";
+                skill: "skill";
             }>;
             origin: z$1.ZodEnum<{
-                user: "user";
                 project: "project";
+                user: "user";
                 builtin: "builtin";
             }>;
             label: z$1.ZodString;
@@ -4092,9 +4092,9 @@ declare const resolvedThreadExecutionOptionsSchema: z$1.ZodObject<{
     serviceTier: z$1.ZodString;
     reasoningLevel: z$1.ZodString;
     permissionMode: z$1.ZodEnum<{
-        full: "full";
         auto: "auto";
         "accept-edits": "accept-edits";
+        full: "full";
     }>;
     source: z$1.ZodEnum<{
         "client/thread/start": "client/thread/start";
@@ -4109,9 +4109,9 @@ declare const projectExecutionDefaultsSchema: z$1.ZodObject<{
     serviceTier: z$1.ZodString;
     reasoningLevel: z$1.ZodString;
     permissionMode: z$1.ZodEnum<{
-        full: "full";
         auto: "auto";
         "accept-edits": "accept-edits";
+        full: "full";
     }>;
 }, z$1.core.$strip>;
 type ProjectExecutionDefaults = z$1.infer<typeof projectExecutionDefaultsSchema>;
@@ -4150,9 +4150,9 @@ declare const providerInfoSchema: z$1.ZodObject<{
         supportsFork: z$1.ZodBoolean;
         supportsSessionRewind: z$1.ZodBoolean;
         permissionModes: z$1.ZodArray<z$1.ZodEnum<{
-            full: "full";
             auto: "auto";
             "accept-edits": "accept-edits";
+            full: "full";
         }>>;
         modelCatalogScope: z$1.ZodEnum<{
             workspace: "workspace";
@@ -4292,9 +4292,9 @@ declare const threadQueuedMessageSchema: z$1.ZodObject<{
     }>>;
     originPluginId: z$1.ZodNullable<z$1.ZodString>;
     initiator: z$1.ZodEnum<{
-        user: "user";
         system: "system";
         agent: "agent";
+        user: "user";
     }>;
     senderThreadId: z$1.ZodNullable<z$1.ZodString>;
     threadId: z$1.ZodString;
@@ -4340,12 +4340,12 @@ declare const threadQueuedMessageSchema: z$1.ZodObject<{
                 }>;
                 name: z$1.ZodString;
                 source: z$1.ZodEnum<{
-                    skill: "skill";
                     command: "command";
+                    skill: "skill";
                 }>;
                 origin: z$1.ZodEnum<{
-                    user: "user";
                     project: "project";
+                    user: "user";
                     builtin: "builtin";
                 }>;
                 label: z$1.ZodString;
@@ -4391,9 +4391,9 @@ declare const threadQueuedMessageSchema: z$1.ZodObject<{
     model: z$1.ZodString;
     reasoningLevel: z$1.ZodString;
     permissionMode: z$1.ZodEnum<{
-        full: "full";
         auto: "auto";
         "accept-edits": "accept-edits";
+        full: "full";
     }>;
     serviceTier: z$1.ZodString;
     groupWithNext: z$1.ZodBoolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@halcyonlabs/app",
-  "version": "0.47.0-halcyon.32",
+  "version": "0.47.0-halcyon.33",
   "description": "bb app launcher for npx",
   "keywords": [
     "bb",

package/server/dist/builtin-plugins/orbit/dist/assets/orbit/bundle/scripts/orbit-job-supervisor

@@ -391,6 +391,13 @@ class Workspaces:
                 raise ValueError('An unrecorded workspace cannot be removed.')
             if manifest['state'] == 'closed':
                 return manifest
+            # bb defers its own process check to this one when it cannot read
+            # every process (desktop sessions, macOS), so this one must refuse.
+            users, unreadable = workspace_users(self.workspace_root / (self.prefix + job_id))
+            if users or unreadable:
+                raise ValueError('The work folder is still in use; it was kept. '
+                                 + (f'Processes using it: {", ".join(map(str, users))}.' if users else
+                                    f'Processes that could not be checked: {", ".join(map(str, unreadable))}.'))
             if manifest['state'] in ('reserved', 'running'):
                 manifest = self.save_transition(manifest, 'stopping', 'finished')
             if manifest['state'] == 'stopping':
@@ -774,6 +781,111 @@ def ensure_directory(path, mode=0o700):
         raise
 
 
+def workspace_users(path):
+    """Processes whose cwd, root, an open file or a mapping is under path.
+
+    Returns (users, unreadable) as sorted pids. Retirement runs this as root,
+    which can read every process, so a process it still cannot read is
+    reported rather than assumed idle. An unprivileged caller (the tests) only
+    sees its own uid's processes. A process that exits during the scan is not
+    using the folder, and this process (the remover itself) is never counted.
+    """
+    workspace = os.path.realpath(path)
+    scan = darwin_workspace_users if sys.platform == 'darwin' else linux_workspace_users
+    users, unreadable = scan(workspace)
+    return sorted(set(users)), sorted(set(unreadable) - set(users))
+
+
+def path_under(name, workspace):
+    if name.endswith(' (deleted)'):
+        name = name[:-len(' (deleted)')]
+    return name == workspace or name.startswith(workspace.rstrip('/') + '/')
+
+
+def linux_workspace_users(workspace):
+    privileged = os.geteuid() == 0
+    users, unreadable = [], []
+    for entry in os.listdir('/proc'):
+        if not entry.isdigit() or int(entry) == os.getpid():
+            continue
+        pid, directory = int(entry), '/proc/' + entry
+        try:
+            with open(directory + '/status', encoding='utf-8', errors='replace') as stream:
+                status = stream.read()
+            if re.search(r'^State:\s+[ZX]', status, re.M):
+                continue
+            with open(directory + '/stat', encoding='utf-8', errors='replace') as stream:
+                fields = stream.read().rpartition(')')[2].split()
+            # Kernel threads (PF_KTHREAD) have no user address space or files.
+            if len(fields) > 6 and int(fields[6]) & 0x00200000:
+                continue
+            uids = re.search(r'^Uid:\s+(\d+)\s+(\d+)\s+(\d+)\s+(\d+)', status, re.M)
+            if uids is None:
+                unreadable.append(pid)
+                continue
+            if not privileged and os.getuid() not in map(int, uids.groups()):
+                continue
+            names = [os.readlink(directory + '/cwd'), os.readlink(directory + '/root')]
+            for fd in os.listdir(directory + '/fd'):
+                try:
+                    names.append(os.readlink(directory + '/fd/' + fd))
+                except FileNotFoundError:
+                    pass
+            with open(directory + '/maps', encoding='utf-8', errors='replace') as stream:
+                for line in stream:
+                    fields = line.rstrip('\n').split(None, 5)
+                    if len(fields) == 6:
+                        names.append(fields[5])
+        except (FileNotFoundError, ProcessLookupError):
+            if os.path.exists(directory):
+                unreadable.append(pid)
+            continue
+        except OSError:
+            unreadable.append(pid)
+            continue
+        if any(path_under(name, workspace) for name in names):
+            users.append(pid)
+    return users, unreadable
+
+
+def darwin_workspace_users(workspace):
+    """lsof lists every process's cwd, root, program, mappings and open files.
+
+    ps runs first: a process it lists that lsof does not, and that still
+    exists afterwards, could not be read.
+    """
+    import subprocess
+    privileged = os.geteuid() == 0
+    listed = subprocess.run(['/bin/ps', '-A', '-o', 'pid=,uid=,stat='], capture_output=True, text=True, check=True)
+    expected = set()
+    for line in listed.stdout.splitlines():
+        fields = line.split()
+        if len(fields) < 3 or fields[2].startswith('Z') or int(fields[0]) == os.getpid():
+            continue
+        if privileged or int(fields[1]) == os.getuid():
+            expected.add(int(fields[0]))
+    files = subprocess.run(['/usr/sbin/lsof', '-n', '-P', '-w', '-F', 'pn'], capture_output=True, text=True, errors='replace')
+    if files.returncode != 0:
+        raise ValueError('Could not list open files to check the work folder: ' + files.stderr.strip()[-500:])
+    users, seen, pid = [], set(), None
+    for line in files.stdout.splitlines():
+        if line.startswith('p'):
+            pid = int(line[1:])
+            seen.add(pid)
+        elif line.startswith('n') and pid is not None and pid != os.getpid() and path_under(line[1:], workspace):
+            users.append(pid)
+    unreadable = []
+    for missing in sorted(expected - seen):
+        try:
+            os.kill(missing, 0)
+        except ProcessLookupError:
+            continue
+        except PermissionError:
+            pass
+        unreadable.append(missing)
+    return users, unreadable
+
+
 def managed_request(request):
     """Called only by the server through the existing root manager connection."""
     if os.geteuid() != 0:

package/server/dist/builtin-plugins/orbit/dist/assets/orbit/revision

@@ -1 +1 @@
-b31d8fee690848acbbafda68bfda91e92b08813c
+ac9bce3a1b992f6e6167102e6f62eaca3fb8cd20

package/server/dist/builtin-plugins/orbit/dist/server.js

@@ -363,7 +363,7 @@ if [ -f "$mail" ] && [ ! -L "$mail" ]; then
   mv -f "$mail.new" "$mail"
 fi
 sudo -u ${qe(o)} mkdir -p ${qe(`${i}/journal`)}
-[ -e ${qe(`${i}/open-loops.md`)} ] || sudo -u ${qe(o)} sh -c ${qe(`printf '# Open loops\\n\\n## Index\\n\\n## Done\\n' > ${i}/open-loops.md`)}`}),_=>_.code!==255);if(f.code!==0)throw new Error(`installing the Orbit conversation's directory: ${f.stderr.trim()}`);kt(t).assertLegacySync();let v=await w5(t,r.id);if(v)return kt(t).assertLegacySync(),await t.sdk.threads.update({threadId:v,title:Tr(c.identity)}).catch(()=>{}),v;kt(t).assertLegacySync();let w=await t.sdk.threads.spawn({projectId:n,title:Tr(c.identity),prompt:l?v5(Tr(c.identity),st(c.identity),l,r.name):y5(Tr(c.identity),st(c.identity)),environment:{type:"host",hostId:r.id,workspace:{type:"unmanaged",path:ba}},...Qo(Ts,!0),model:c.models.orbit,pinned:!0});return await DA(t,w.id),t.log.info(`started the Orbit conversation ${w.id} on ${r.name}`),w.id}s(TC,"ensureFront");function gt(t,e,r,n){let i=!1;t.background.schedule(e,r,()=>{i||(i=!0,Promise.resolve().then(n).catch(o=>t.log.warn(`${e}: ${o instanceof Error?o.message:String(o)}`)).finally(()=>{i=!1}))})}s(gt,"scheduleInBackground");import{z as pp}from"zod";import{createHash as V5}from"node:crypto";var jA=new Map([["orbit",new Set(["route spawn","route tell","schedule add","schedule list","schedule cancel","prefs show","prefs propose","threads list","threads start","threads archive","thread outcome","relay"])]]),xt="ORB",EC=/^ORB-[1-9][0-9]{0,8}$/,E5=/^[a-z]+(-[a-z]+)*$/,kC=32,ly={list:{on:"project",values:["--status","--priority","--label","--search","--sort","--limit"],switches:["--active","--json"],required:[]},show:{on:"key",values:[],switches:["--json"],required:[]},create:{on:"project",values:["--title","--description","--priority","--label","--due","--parent"],switches:["--json"],required:["--title"]},update:{on:"key",values:["--status","--priority","--title","--description","--due","--add-label","--remove-label","--parent"],switches:["--no-due","--json"],required:[]},comment:{on:"key",values:["--body"],switches:["--json"],required:["--body"]},"label list":{on:"project",values:[],switches:["--json"],required:[]},"label create":{on:"project",values:["--name"],switches:["--json"],required:["--name"]}};function LA(t){let e=t[0]==="label"?2:1,r=t.length>=e?t.slice(0,e).join(" "):void 0,n=t.slice(e),i=r!==void 0&&Object.hasOwn(ly,r)?ly[r]:void 0;i||se(`of bb tasks, station runs only ${Object.keys(ly).join(", ")}, in the ${xt} project`);let o,a=0,c=new Set;for(let l=0;l<n.length;l++){let u=n[l];if(!u.startsWith("-")){(i.on!=="key"||o!==void 0)&&se(`bb tasks ${r} takes no argument ${JSON.stringify(u)}`),EC.test(u)||se(`bb tasks ${r} works only on ${xt}-<n> tasks, not ${JSON.stringify(u)}`),o=u;continue}if(i.on==="project"&&u==="--project"){n[++l]!==xt&&se(`bb tasks ${r} works only in the ${xt} project`),a+=1;continue}if(i.switches.includes(u))continue;i.values.includes(u)||se(`bb tasks ${r}: ${u} isn't open to station`);let d=n[++l];(d===void 0||d.startsWith("-"))&&se(`bb tasks ${r}: ${u} takes one value, not starting with -`),u==="--parent"&&!EC.test(d)&&se(`bb tasks ${r}: --parent is a ${xt}-<n> task, not ${JSON.stringify(d)}`),u==="--name"&&c.has(u)&&se(`bb tasks ${r}: one --name`),u==="--name"&&!(E5.test(d)&&d.length<=kC)&&se(`bb tasks ${r}: --name is plain lowercase words, at most ${kC} characters, not ${JSON.stringify(d)}`),c.add(u)}i.on==="key"&&o===void 0&&se(`bb tasks ${r} names its task, ${xt}-<n>`),i.on==="project"&&a!==1&&se(`bb tasks ${r} takes --project ${xt}, once`);for(let l of i.required)c.has(l)||se(`bb tasks ${r} needs ${l}`)}s(LA,"checkTaskArgv");var uy={"agent-board":[["show","<thread>"],["show","<thread>","--json"]],"host-monitor":[["snapshot"],["snapshot","--pretty"]]},k5=/^thr_[a-z0-9]+$/;function BA(t){let e=uy[t]??[],r=e.map(n=>`\`${t} ${n.join(" ")}\``).join(", ");return n=>{let i=s(o=>o.length===n.length&&o.every((a,c)=>a==="<thread>"?k5.test(n[c]):a===n[c]),"fits");e.some(i)||se(`of the ${t} plugin's CLI, station runs only ${r}`)}}s(BA,"readOnlyArgv");var MA=new Map([["agent-inbox",new Set(["send","list","read","mark-read","reply","check"])]]);var py="send_operator_inbox_message",qA=["routine","needs-decision","urgent"],dy=Yd,fy=30,hy=100,xC=/[\u0000-\u0008\u000b-\u001f\u007f\u200b-\u200f\u202a-\u202e\u2060-\u2064\u2066-\u2069\ufeff]/u;function FA(t){let e=Zr(t,"an inbox message");Qr(e,new Set(["severity","text"]),"an inbox message"),(typeof e.severity!="string"||!qA.includes(e.severity))&&se(`an inbox message's severity is ${qA.join(", ")}`);let r=e.text;(typeof r!="string"||r.trim()==="")&&se("an inbox message has text"),[...r].length>dy&&se(`an inbox message is at most ${dy} characters`),xC.test(r)&&se("an inbox message has no control or invisible characters")}s(FA,"checkInboxArguments");var HA=new Map([[py,FA]]),my=new Map([[py,FA]]),OC="send_agent_inbox_message",IC="read_agent_inbox",UA=Yd,PC=/^[a-z][a-z0-9-]{0,31}$/;function $C(t){let e=Zr(t,"an agent inbox message");Qr(e,new Set(["to","text"]),"an agent inbox message"),(typeof e.to!="string"||!PC.test(e.to))&&se("an agent inbox message goes to a recipient's name");let r=e.text;(typeof r!="string"||r.trim()==="")&&se("an agent inbox message has text"),[...r].length>UA&&se(`an agent inbox message is at most ${UA} characters`),xC.test(r)&&se("an agent inbox message has no control or invisible characters")}s($C,"checkAgentInboxSend");function CC(t){let e=Zr(t,"reading the agent inbox");Qr(e,new Set(["for"]),"reading the agent inbox"),e.for!==void 0&&(typeof e.for!="string"||!PC.test(e.for))&&se("reading the agent inbox takes a recipient's name")}s(CC,"checkAgentInboxRead");var WA=new Map([[OC,$C],[IC,CC]]);function VA(t,e,r,n=Date.now){let i=[];return{spend(o){let a=n();for(;i.length>0&&a-i[0].at>=r;)i.shift();let c=i.filter(l=>l.thread===o);return c.length>=t?{ok:!1,scope:"thread",max:t,retryAt:c[c.length-t].at+r}:i.length>=e?{ok:!1,scope:"station",max:e,retryAt:i[i.length-e].at+r}:(i.push({at:a,thread:o}),{ok:!0})}}}s(VA,"threadBudget");function zA(t,e){let r=new Date(e.retryAt).toISOString().slice(11,16),n=e.scope==="thread"?`the hourly limit of ${e.max} messages for this thread`:`the hourly limit of ${e.max} messages for all of station's agents and chats together`;return`${t}: ${n} is reached (a breaker against a runaway loop); try again at ${r} UTC, and batch what's left into one message`}s(zA,"spentReason");function x5(t){let{protected:e,...r}=t.station;return{...t,station:r}}s(x5,"own");function lp(t){return(!t||typeof t!="object"||Array.isArray(t))&&se("a protected request needs an object"),t}s(lp,"bodyObject");function GA(t){let e=t.protected;(!e||!["front","canary"].includes(e.role)||e.threadId!==null&&!/^thr_[a-z0-9]+$/.test(e.threadId))&&se("protected conversation selection unavailable"),t.sharedProjectIds?.size&&se("a private project cannot have shared sources");let r=new Set([t.hostId]);(!/^host_[a-z0-9]+$/.test(t.hostId)||e.jobs.length>20)&&se("protected job destinations unavailable");for(let n of e.jobs)(!/^host_[a-z0-9]+$/.test(n.hostId)||r.has(n.hostId)||"protected"in n)&&se("protected job destinations unavailable"),r.add(n.hostId),[...n.projectIds,...n.sharedProjectIds??[]].some(i=>t.projectIds.has(i))&&se("private project is also a job destination");return e.jobs}s(GA,"profileStations");async function NC(t,e){let r=GA(e.station),n=e.station.protected,i=x5(e),o=KA(t.path),{method:a,path:c,body:l}=t;if(a==="GET"&&["/health","/install/version","/install/bb-app.tgz","/install.sh"].includes(c))return{gateAuth:!1};if(o[0]==="internal"){let u=new Set(["/internal/hosts/enroll","/internal/session/open","/internal/session/events","/internal/session/interactive-request","/internal/session/interactive-request/interrupt","/internal/session/tool-call"]),d=/^\/internal\/plugins\/(provider-claude-code|provider-codex)\/host\/[a-f0-9]{64}$/.test(c),p=/^\/internal\/skills\/tree\/[a-zA-Z0-9_.-]+$/.test(c),h=c==="/internal/ws"||c==="/internal/session/project-attachment-content"||d||p;if(a==="POST"&&u.has(c)||a==="GET"&&h||se("internal route is not part of the protected runtime"),a==="POST"){let m=lp(l);m.hostId!==void 0&&m.hostId!==e.station.hostId&&se("another daemon identity")}if(c==="/internal/session/project-attachment-content"){let m=new URLSearchParams(t.search);(m.getAll("threadId").length!==1||!n.threadId||m.get("threadId")!==n.threadId||m.getAll("projectId").length!==1||!e.station.projectIds.has(m.get("projectId")))&&se("another conversation's attachment")}if(c==="/internal/session/tool-call"){let m=lp(l);(!n.threadId||m.threadId!==n.threadId)&&se("only the selected protected conversation calls tools"),e.agentTools.has(m.tool)&&se("the protected workspace is fixed by the server")}return Gn(t,i)}if((o[0]!=="api"||o[1]!=="v1")&&se("not part of the protected conversation API"),o[2]==="threads"&&o.length===3&&a==="POST"){let u=lp(l),d=lp(u.environment),p=r.find(m=>m.hostId===d.hostId);(!p||d.type!=="host")&&se("work needs an explicit existing job machine"),(!n.threadId||u.parentThreadId!==n.threadId)&&se("work needs the selected conversation as parent"),u.lifecycleOwnerThreadId!==void 0&&u.lifecycleOwnerThreadId!==n.threadId&&se("another lifecycle owner"),u.senderThreadId!==void 0&&u.senderThreadId!==n.threadId&&se("only the selected conversation sends work");let h={...u};return delete h.parentThreadId,delete h.lifecycleOwnerThreadId,delete h.senderThreadId,Gn({...t,body:h},{...e,station:p})}if(o[2]==="threads"&&o[3]&&Gi.test(o[3])){let u=o[3];if(u===n.threadId)return a!=="GET"&&se("the protected conversation is controlled by the server"),Gn(t,i);let d=await e.threadHost(u),p=r.find(h=>h.hostId===d);return p||se("thread is outside the protected conversation's job destinations"),Gn(t,{...e,station:p})}if(o[2]==="plugins"&&o[4]==="cli"&&o.length===5&&a==="POST")return(!n.threadId||lp(l).threadId!==n.threadId)&&se("a protected plugin command names the selected conversation"),Gn(t,i);if(a==="GET"&&o.length===3&&["threads","threads/running","projects","environments","queued-messages"].includes(o[2]))return Gn(t,i);if(a==="GET"&&c==="/api/v1/threads/running")return Gn(t,i);if(a==="GET"&&o[2]==="projects"&&o[3]){let u=r.find(d=>d.projectIds.has(o[3]));if(u)return Gn(t,{...e,station:u})}if(a==="GET"&&o[2]==="environments"&&o[3]){let u=await e.environmentHost(o[3]),d=r.find(p=>p.hostId===u);if(d)return Gn(t,{...e,station:d})}if(a==="GET"&&XA.has(o.slice(2).join("/")))return Gn(t,i);se("route is not open to the protected conversation")}s(NC,"protectedDecision");async function gy(t,e,r){if("protected"in r.station)return O5(t,e,r);Array.isArray(e)||se(`bb answered ${t} with something other than a list`);let n=s(o=>o!==null&&typeof o=="object"?o:{},"record"),i=s(o=>{let a=n(o),c=n(a.environment);return(a.environmentHostId??c.hostId)===r.station.hostId},"onStation");switch(t){case"threads":return e.filter(i);case"threads/running":case"environments":return e.filter(o=>n(o).hostId===r.station.hostId);case"projects":return e.filter(o=>r.station.projectIds.has(n(o).id)).map(o=>{let a=n(o);return Array.isArray(a.threads)?{...a,threads:a.threads.filter(i)}:a});case"queued-messages":{let o=[];for(let a of e){let c=n(a).threadId;typeof c=="string"&&Gi.test(c)&&await r.threadHost(c)===r.station.hostId&&o.push(a)}return o}}}s(gy,"filterList");async function O5(t,e,r){let n=GA(r.station),i=r.station.protected,{protected:o,...a}=r.station,c=s(d=>d!==null&&typeof d=="object"?d:{},"record"),l=[];for(let d of[a,...n]){let p=await gy(t,e,{...r,station:d}),h=d.hostId===a.hostId;for(let m of p){let y=c(m);h&&["threads","threads/running","queued-messages"].includes(t)&&(y.threadId??y.id)!==i.threadId||h&&t==="environments"||(t==="projects"&&Array.isArray(y.threads)&&h?l.push({...y,threads:y.threads.filter(f=>c(f).id===i.threadId)}):l.push(m))}}let u=new Set;return l.filter(d=>{let p=c(d).id;return typeof p!="string"?!0:u.has(p)?!1:(u.add(p),!0)})}s(O5,"protectedList");var Gi=/^([a-z]+)_[a-z0-9]+$/,Ee=class extends Error{static{s(this,"Deny")}};function se(t){throw new Ee(t)}s(se,"deny");function KA(t){t.startsWith("/")||se("not an origin-form path"),/^[A-Za-z0-9\-._~!$&'()*+,;=:@%/]+$/.test(t)||se("characters outside a URL path");let e=t.slice(1).split("/"),r=!1;return e.forEach((n,i)=>{(n===""||n==="."||n===".."||/%(2e|2f|5c)/i.test(n))&&se(`unroutable path segment ${JSON.stringify(n)}`),!r&&n.includes("%")&&se(`escaped route segment ${JSON.stringify(n)}`),i>=2&&(n==="files"||n==="host-files")&&(r=!0)}),e}s(KA,"segments");function I5(t){let e=new Map;for(let[r,n]of new URLSearchParams(t))e.has(r)&&se(`duplicate query parameter ${r}`),e.set(r,n);return e}s(I5,"queryOf");var XA=new Set(["hosts","thread-sections","plugins","plugins/contributions","system/config","system/version","system/execution-options","system/providers","system/providers/state","system/providers/catalog","system/machine-providers","system/environment-providers"]),P5=new Set(["threads","threads/running","projects","environments","queued-messages"]),$5=new Set(["projectId","providerId","origin","lifecycleOwnerThreadId","visibility","title","input","model","serviceTier","reasoningLevel","permissionMode","executionInputSources","environment","parentThreadId","sectionId","pinned","sourceThreadId","sourceSeqEnd","startedOnBehalfOf","originKind","sendAt","senderThreadId"]),C5=new Set(["sourceThreadId","sourceSeqEnd","input","agentContextSeed","title","permissionMode","visibility","environment","origin","lifecycleOwnerThreadId"]),N5=new Set(["cols","rows","start","target","title"]),R5=new Set(["hostId","path","rootPath","content","contentEncoding","createParents","expectedSha256","mode","query","limit","includeHidden","excludeNames","includeFiles","includeDirectories","recursive","sourcePath","destinationPath"]),D5=new Set(["read","write","list","paths","mkdir","move","remove"]),j5=new Set(["argv","cwd","threadId","projectId"]);function Zr(t,e){return(t===null||typeof t!="object"||Array.isArray(t))&&se(`${e} needs a JSON object`),t}s(Zr,"objectBody");function Qr(t,e,r){for(let n of Object.keys(t))e.has(n)||se(`${r}: unknown field ${n}`)}s(Qr,"onlyFields");async function by(t,e){return"protected"in e.station?NC(t,e):Gn(t,e)}s(by,"decide");async function Gn(t,e){let{method:r,path:n,search:i="",body:o}=t,a=KA(n);if(a[0]==="internal"){let p=a.slice(1).join("/");return p==="hosts/enroll-key"&&se("enrollment keys are minted on the server's machine only"),p.startsWith("server-move")&&se("server moves are the server machine's business"),p==="session/tool-call"&&await M5(o,e),{gateAuth:!1}}if(r==="GET"&&(n==="/health"||n==="/install.sh"||n==="/install/version"||n==="/install/bb-app.tgz"))return{gateAuth:!1};if(a[0]==="ws"&&a[1]==="terminals"&&a.length===3)return await YA(a[2],e),{gateAuth:!1};(a[0]!=="api"||a[1]!=="v1")&&se("not part of bb's API");let l=r==="POST"&&a[2]==="plugins"&&a[4]==="cli"&&a.length===5&&e.pluginCommands?.has(a[3])&&o&&typeof o=="object"&&!Array.isArray(o)?{...o,argv:[]}:o,u=r==="POST"&&a.length===3&&a[2]==="threads";await U5(l,e,u);let d=await L5(r,a.slice(2),I5(i),o,e);return d?{gateAuth:!0,filter:d}:{gateAuth:!0}}s(Gn,"regularDecision");async function L5(t,e,r,n,i){let[o,a,...c]=e,l=c.join("/");if(o==="threads"&&c[0]==="interactions"&&c.length>=3&&["respond","resolve","cancel"].includes(c[2])&&se("only the user answers interactions"),o==="threads"&&a&&Gi.test(a))return $s(a,i);if(o==="environments"&&a&&Gi.test(a))return up(a,i);if(o==="terminals"&&a&&Gi.test(a))return YA(a,i);if(o==="hosts"&&a){if(a!==i.station.hostId&&se("another machine"),t==="GET"||t==="POST"&&l==="paths/exist")return;se("machine management")}if(o==="projects"&&a){if(yy(a,i),c[0]==="hosts"&&c[1]!==i.station.hostId&&se("another machine"),t==="GET"&&l!=="machine-environment"&&l!=="prompt-history"||t==="POST"&&(l==="attachments"||l==="attachments/copy"))return;se("changing the project")}let u=e.join("/");if(!(t==="GET"&&XA.has(u))){if(t==="GET"&&P5.has(u))return u;if(t==="GET"&&u==="terminals"){if(r.get("hostId")===i.station.hostId)return;let d=r.get("threadId");if(d!==void 0)return $s(d,i);let p=r.get("environmentId");if(p!==void 0)return up(p,i);se("terminals on another machine")}if(t==="POST"&&u==="threads")return H5(n,i);if(t==="POST"&&u==="threads/fork"){let d=Zr(n,"a fork");Qr(d,C5,"a fork"),d.sourceThreadId===void 0&&se("a fork needs its source"),d.origin==="plugin"&&se("plugin-origin threads"),d.environment!==void 0&&await RC(d.environment,i);let p=await i.threadProvider(dp(d.sourceThreadId,"thread"));(p===null||!vy.includes(p))&&se(`a fork of a thread on ${p??"an unknown provider"}: station's threads run on ${vy.join(" or ")}`),jC(p,d.permissionMode,!0);return}if(!(t==="POST"&&u==="threads/resolve-mentions")){if(t==="POST"&&u==="terminals"){let d=Zr(n,"a terminal");return Qr(d,N5,"a terminal"),W5(d.target,i)}if(t==="POST"&&o==="files"&&e.length===2&&D5.has(a)){let d=Zr(n,"a file operation");Qr(d,R5,"a file operation"),d.hostId!==i.station.hostId&&se("files on another machine (no hostId means the server's)");return}if(t==="POST"&&o==="plugins"&&e.length===3&&c[0]==="cli"){let d=Zr(n,"a plugin command");if(Qr(d,j5,"a plugin command"),i.pluginClis.has(a))return;let p=i.pluginArgv?.get(a);if(p){let f=d.argv;return(!Array.isArray(f)||!f.every(v=>typeof v=="string"))&&se("a plugin command's argv must be words"),p(f)}let h=i.pluginCommands?.get(a);h||se(`the ${a} plugin's CLI isn't allowed on station`),(typeof d.threadId!="string"||!d.threadId)&&se("a plugin command from station names its thread");let m=d.argv;(!Array.isArray(m)||!m.every(f=>typeof f=="string"))&&se("a plugin command's argv must be words");let y=m;!h.has(y.slice(0,2).join(" "))&&!h.has(y[0]??"")&&se(`only ${[...h].map(f=>`\`${a} ${f}\``).join(", ")} of the ${a} plugin's CLI are open to station`);return}se(`${t} /${u} isn't open to station`)}}}s(L5,"apiRoute");async function B5(t,e){if(e.orbitConversation)return await e.orbitConversation(t)!==null;let r=await e.orbitThread?.();return r!=null&&r===t}s(B5,"isOrbitConversation");async function M5(t,e){let r=t??{},n=r.tool;if(typeof n!="string"&&se(`agent tool ${String(n)} isn't allowed on station`),e.agentTools.has(n)){await $s(r.threadId,e);return}let i=e.stationTools?.get(n);if(i)return typeof r.threadId!="string"&&se(`${n} is called by one of station's threads`),await $s(r.threadId,e),i(r.arguments);let o=e.orbitTools?.get(n),a=e.threadTools?.get(n);if(!o&&!a&&se(`agent tool ${n} isn't allowed on station`),o&&typeof r.threadId=="string"&&await B5(r.threadId,e))return await $s(r.threadId,e),o(r.arguments);a||se(`${n} is only for the Orbit thread`),await $s(r.threadId,e).catch(l=>se(`${n} is only for the Orbit thread and station's agents and chats: ${l.message}`)),a(r.arguments);let c=e.spendThreadTool?.(n,r.threadId);c||se(`${n}: the gate isn't counting station's threads' messages, so it refuses them`),c.ok||se(zA(n,c))}s(M5,"toolCall");var q5=new Set(["type","kind","mode"]);async function U5(t,e,r=!1){let n=[],i,o=s((a,c,l)=>{if(c>64&&se("a body nested too deeply"),typeof a=="string"){if(l!==void 0&&q5.has(l))return;r&&c===1&&l==="projectId"?i=a:Gi.test(a)&&n.push(a)}else if(Array.isArray(a))for(let u of a)o(u,c+1);else if(a!==null&&typeof a=="object")for(let[u,d]of Object.entries(a))(u==="pluginSubmission"||u==="pluginMetadata"||u==="originPluginId")&&se(`plugin data (${u})`),o(d,c+1,u)},"walk");o(t,0),i!==void 0&&yy(i,e,!0);for(let a of new Set(n)){let c=Gi.exec(a)[1];c==="thr"?await $s(a,e):c==="env"?await up(a,e):c==="term"?await YA(a,e):c==="host"&&a!==e.station.hostId?se(`machine ${a} isn't station`):c==="proj"?yy(a,e):c==="src"&&se("project sources")}}s(U5,"references");function dp(t,e){return(typeof t!="string"||!Gi.test(t))&&se(`bad ${e} id`),t}s(dp,"checkedId");async function $s(t,e){let r=dp(t,"thread");await e.threadHost(r)!==e.station.hostId&&se(`thread ${r} isn't on station`)}s($s,"ownThread");async function up(t,e){let r=dp(t,"environment");await e.environmentHost(r)!==e.station.hostId&&se(`environment ${r} isn't on station`)}s(up,"ownEnvironment");async function YA(t,e){let r=dp(t,"terminal");await e.terminalHost(r)!==e.station.hostId&&se(`terminal ${r} isn't on station`)}s(YA,"ownTerminal");function yy(t,e,r=!1){let n=dp(t,"project");e.station.projectIds.has(n)||r&&e.station.sharedProjectIds?.has(n)||se(`project ${n} isn't station's`)}s(yy,"ownProject");var JA="orbit-job-folder";async function RC(t,e,r=!1){let n=Zr(t,"an environment");switch(n.type){case"provider":{if(!r)break;Qr(n,new Set(["type","environmentProviderId","machine","inputs"]),"an environment"),n.environmentProviderId!==JA&&se(`environment provider ${String(n.environmentProviderId)} isn't open to station`);let i=Zr(n.machine,"a machine");Qr(i,new Set(["type","hostId"]),"a machine"),(i.type!=="existing"||i.hostId!==e.station.hostId)&&se("a work folder on another machine"),n.inputs!==void 0&&Object.keys(Zr(n.inputs,"the inputs")).length>0&&se("a work folder's inputs are the plugin's");return}case"host":Qr(n,new Set(["type","hostId","workspace"]),"an environment"),n.hostId!==e.station.hostId&&se("a thread on another machine (no hostId means the server's)");return;case"reuse":return Qr(n,new Set(["type","environmentId"]),"an environment"),up(n.environmentId,e);case"project-default":Qr(n,new Set(["type"]),"an environment");return}se(`environment type ${String(n.type)} isn't open to station`)}s(RC,"placement");var DC="claude-code",vy=[DC,"codex"];function jC(t,e,r){t!=="codex"||e===so||se(`a Codex thread with permission mode ${e===void 0?r?"left out (the fork would keep its source's, which may be from an earlier release setting)":"left out (bb would take auto)":String(e)}: station's Codex threads start with ${so}, as in bb thread spawn --provider codex --permission-mode ${so} (the station kernel enforces access; the release setting controls Codex approval questions)`)}s(jC,"stationPermission");function F5(t){t===void 0&&se(`a thread that names no provider (bb would take the project's remembered one): station's threads name one, as in bb thread spawn --provider ${DC}`),(typeof t!="string"||!vy.includes(t))&&se(`a thread on ${String(t)}: station's threads run on ${vy.join(" or ")}`)}s(F5,"stationProvider");async function H5(t,e){let r=Zr(t,"a thread");Qr(r,$5,"a thread"),r.senderThreadId!==void 0&&await $s(r.senderThreadId,e),F5(r.providerId),jC(r.providerId,r.permissionMode,!1),yy(r.projectId,e,!0),r.origin==="plugin"&&se("plugin-origin threads"),!e.station.projectIds.has(r.projectId)&&Zr(r.environment,"an environment").type==="project-default"&&se("a thread in a project with sources elsewhere is placed on station explicitly"),await RC(r.environment,e,!0)}s(H5,"createThread");async function W5(t,e){let r=Zr(t,"a terminal target");switch(r.kind){case"thread":return $s(r.threadId,e);case"environment":return up(r.environmentId,e);case"host_path":r.hostId!==e.station.hostId&&se("a terminal on another machine");return;default:se("unknown terminal target")}}s(W5,"terminalTarget");import{z as ZA}from"zod";var Ki=JA,LC=s(t=>V5("sha256").update(t).digest("hex").slice(0,32),"jobId"),z5=ZA.array(ZA.string().min(1).max(4096)).max(32).default(["report.md","evidence.md","job.log"]);function BC(t,e){t.experimental_environments.register({id:Ki,displayName:"Orbit work folder",description:"A temporary work folder. Declared results are saved before bb removes it.",icon:"Folder",requires:{},inputs:ZA.object({outputs:z5}).strict(),policy:{retireGraceMs:3e5,pathKeys:"per-attempt"},async availability({host:r}){try{return await e.location(r.id),{status:"available"}}catch{return{status:"unavailable",message:"This machine cannot create Orbit work folders."}}},async validate({host:r}){return await e.location(r.id),{action:"accept"}},async create({host:r,thread:n,pathKey:i,inputs:o,experimental_claimPath:a,signal:c,report:l}){let u=LC(i),d=`${await e.location(r.id)}/job-${u}`;if(!await a(d))throw new Error("The work folder could not be claimed.");return l.step("Creating the work folder"),await e.create(r.id,u,n.id,o.outputs,c),{status:"created",path:d,ownsPath:!0}},async remove({hostId:r,path:n,pathKey:i,signal:o,report:a}){if(r===null)return{status:"removed"};let c=LC(i),l=`${await e.location(r)}/job-${c}`;if(n!==null&&n!==l)throw new Error("The work folder path does not match its creation key.");return a.step("Saving declared results and removing the work folder"),await e.remove(r,c,o),{status:"removed"}}})}s(BC,"setupJobWorkspaces");var QA=pp.object({limited:pp.boolean(),bytes:pp.number().int().nonnegative(),files:pp.number().int().nonnegative(),free:pp.number().int().nonnegative()}).strict();function MC(t,e,r){let n=new AbortController;t.onDispose(()=>n.abort());let i=!1;async function o(){if(!(i||n.signal.aborted)){i=!0;try{let a=await t.sdk.environments.list({environmentProviderId:Ki,status:"ready",limit:100});for(let c of a){if(n.signal.aborted)return;if(!c.managed||c.environmentProviderId!==Ki||c.lifecycle.phase!=="active"||!c.path)continue;let l=/\/job-([a-f0-9]{32})$/.exec(c.path)?.[1];if(!l)throw new Error("A managed work folder has an invalid path.");let u=`work-storage-warning:${c.id}`,d;try{if(!QA.parse(await e.measure(c.hostId,l,n.signal)).limited){await t.storage.kv.delete(u);continue}d="The work folder exceeded its storage allowance or the station needs free space."}catch{d="The work folder's storage could not be checked."}let p=await t.sdk.environments.get({environmentId:c.id});if(p.path!==c.path||p.hostId!==c.hostId||p.environmentProviderId!==Ki||p.lifecycle.phase!=="active")continue;let h=[],m=!0;try{for(let f=0;;f+=100){let v=await t.sdk.threads.list({environmentId:c.id,archived:!1,includeHidden:!0,offset:f,limit:100});for(let w of v){let _=await t.sdk.threads.get({threadId:w.id});if(!_||_.environmentId!==c.id||_.archivedAt)continue;h.length<10&&h.push(`@thread:${_.id}`),await t.sdk.threads.stop({threadId:_.id});let A=await t.sdk.threads.get({threadId:_.id});if(A?.status==="active"||A?.status==="stopping")throw new Error("Work has not confirmed that it stopped.")}if(v.length<100)break}await e.stopFolder(c.hostId,l,n.signal)}catch{m=!1}let y=`${h.join(", ")} ${d} ${m?"Work was stopped.":"Stopping could not be confirmed."} The folder is kept. Handle its result and archive it when ready.`;t.log.warn(y),await t.storage.kv.get(u)!==y&&(await r(y),await t.storage.kv.set(u,y))}}finally{i=!1}}}return s(o,"tick"),gt(t,"managed-work-storage","* * * * *",o),{tick:o}}s(MC,"setupJobWatchdog");import{createHash as fJ}from"node:crypto";import{readFileSync as hJ}from"node:fs";import{join as mJ}from"node:path";ya();import{existsSync as rJ}from"node:fs";import{homedir as nJ}from"node:os";import{join as iJ}from"node:path";yo();Nr();var G5="tag:orbit",K5="2596A99EAAB33821893C0A79458CA832957F5868";function qC(t){return t==="linux"?"/usr/bin/tailscale":"/opt/homebrew/bin/tailscale"}s(qC,"tailscale");var X5=`if ! command -v tailscale >/dev/null; then
+[ -e ${qe(`${i}/open-loops.md`)} ] || sudo -u ${qe(o)} sh -c ${qe(`printf '# Open loops\\n\\n## Index\\n\\n## Done\\n' > ${i}/open-loops.md`)}`}),_=>_.code!==255);if(f.code!==0)throw new Error(`installing the Orbit conversation's directory: ${f.stderr.trim()}`);kt(t).assertLegacySync();let v=await w5(t,r.id);if(v)return kt(t).assertLegacySync(),await t.sdk.threads.update({threadId:v,title:Tr(c.identity)}).catch(()=>{}),v;kt(t).assertLegacySync();let w=await t.sdk.threads.spawn({projectId:n,title:Tr(c.identity),prompt:l?v5(Tr(c.identity),st(c.identity),l,r.name):y5(Tr(c.identity),st(c.identity)),environment:{type:"host",hostId:r.id,workspace:{type:"unmanaged",path:ba}},...Qo(Ts,!0),model:c.models.orbit,pinned:!0});return await DA(t,w.id),t.log.info(`started the Orbit conversation ${w.id} on ${r.name}`),w.id}s(TC,"ensureFront");function gt(t,e,r,n){let i=!1;t.background.schedule(e,r,()=>{i||(i=!0,Promise.resolve().then(n).catch(o=>t.log.warn(`${e}: ${o instanceof Error?o.message:String(o)}`)).finally(()=>{i=!1}))})}s(gt,"scheduleInBackground");import{z as pp}from"zod";import{createHash as V5}from"node:crypto";var jA=new Map([["orbit",new Set(["route spawn","route tell","schedule add","schedule list","schedule cancel","prefs show","prefs propose","threads list","threads start","threads archive","thread outcome","relay"])]]),xt="ORB",EC=/^ORB-[1-9][0-9]{0,8}$/,E5=/^[a-z]+(-[a-z]+)*$/,kC=32,ly={list:{on:"project",values:["--status","--priority","--label","--search","--sort","--limit"],switches:["--active","--json"],required:[]},show:{on:"key",values:[],switches:["--json"],required:[]},create:{on:"project",values:["--title","--description","--priority","--label","--due","--parent"],switches:["--json"],required:["--title"]},update:{on:"key",values:["--status","--priority","--title","--description","--due","--add-label","--remove-label","--parent"],switches:["--no-due","--json"],required:[]},comment:{on:"key",values:["--body"],switches:["--json"],required:["--body"]},"label list":{on:"project",values:[],switches:["--json"],required:[]},"label create":{on:"project",values:["--name"],switches:["--json"],required:["--name"]}};function LA(t){let e=t[0]==="label"?2:1,r=t.length>=e?t.slice(0,e).join(" "):void 0,n=t.slice(e),i=r!==void 0&&Object.hasOwn(ly,r)?ly[r]:void 0;i||se(`of bb tasks, station runs only ${Object.keys(ly).join(", ")}, in the ${xt} project`);let o,a=0,c=new Set;for(let l=0;l<n.length;l++){let u=n[l];if(!u.startsWith("-")){(i.on!=="key"||o!==void 0)&&se(`bb tasks ${r} takes no argument ${JSON.stringify(u)}`),EC.test(u)||se(`bb tasks ${r} works only on ${xt}-<n> tasks, not ${JSON.stringify(u)}`),o=u;continue}if(i.on==="project"&&u==="--project"){n[++l]!==xt&&se(`bb tasks ${r} works only in the ${xt} project`),a+=1;continue}if(i.switches.includes(u))continue;i.values.includes(u)||se(`bb tasks ${r}: ${u} isn't open to station`);let d=n[++l];(d===void 0||d.startsWith("-"))&&se(`bb tasks ${r}: ${u} takes one value, not starting with -`),u==="--parent"&&!EC.test(d)&&se(`bb tasks ${r}: --parent is a ${xt}-<n> task, not ${JSON.stringify(d)}`),u==="--name"&&c.has(u)&&se(`bb tasks ${r}: one --name`),u==="--name"&&!(E5.test(d)&&d.length<=kC)&&se(`bb tasks ${r}: --name is plain lowercase words, at most ${kC} characters, not ${JSON.stringify(d)}`),c.add(u)}i.on==="key"&&o===void 0&&se(`bb tasks ${r} names its task, ${xt}-<n>`),i.on==="project"&&a!==1&&se(`bb tasks ${r} takes --project ${xt}, once`);for(let l of i.required)c.has(l)||se(`bb tasks ${r} needs ${l}`)}s(LA,"checkTaskArgv");var uy={"agent-board":[["show","<thread>"],["show","<thread>","--json"]],"host-monitor":[["snapshot"],["snapshot","--pretty"]]},k5=/^thr_[a-z0-9]+$/;function BA(t){let e=uy[t]??[],r=e.map(n=>`\`${t} ${n.join(" ")}\``).join(", ");return n=>{let i=s(o=>o.length===n.length&&o.every((a,c)=>a==="<thread>"?k5.test(n[c]):a===n[c]),"fits");e.some(i)||se(`of the ${t} plugin's CLI, station runs only ${r}`)}}s(BA,"readOnlyArgv");var MA=new Map([["agent-inbox",new Set(["send","list","read","mark-read","reply","check"])]]);var py="send_operator_inbox_message",qA=["routine","needs-decision","urgent"],dy=Yd,fy=30,hy=100,xC=/[\u0000-\u0008\u000b-\u001f\u007f\u200b-\u200f\u202a-\u202e\u2060-\u2064\u2066-\u2069\ufeff]/u;function FA(t){let e=Zr(t,"an inbox message");Qr(e,new Set(["severity","text"]),"an inbox message"),(typeof e.severity!="string"||!qA.includes(e.severity))&&se(`an inbox message's severity is ${qA.join(", ")}`);let r=e.text;(typeof r!="string"||r.trim()==="")&&se("an inbox message has text"),[...r].length>dy&&se(`an inbox message is at most ${dy} characters`),xC.test(r)&&se("an inbox message has no control or invisible characters")}s(FA,"checkInboxArguments");var HA=new Map([[py,FA]]),my=new Map([[py,FA]]),OC="send_agent_inbox_message",IC="read_agent_inbox",UA=Yd,PC=/^[a-z][a-z0-9-]{0,31}$/;function $C(t){let e=Zr(t,"an agent inbox message");Qr(e,new Set(["to","text"]),"an agent inbox message"),(typeof e.to!="string"||!PC.test(e.to))&&se("an agent inbox message goes to a recipient's name");let r=e.text;(typeof r!="string"||r.trim()==="")&&se("an agent inbox message has text"),[...r].length>UA&&se(`an agent inbox message is at most ${UA} characters`),xC.test(r)&&se("an agent inbox message has no control or invisible characters")}s($C,"checkAgentInboxSend");function CC(t){let e=Zr(t,"reading the agent inbox");Qr(e,new Set(["for"]),"reading the agent inbox"),e.for!==void 0&&(typeof e.for!="string"||!PC.test(e.for))&&se("reading the agent inbox takes a recipient's name")}s(CC,"checkAgentInboxRead");var WA=new Map([[OC,$C],[IC,CC]]);function VA(t,e,r,n=Date.now){let i=[];return{spend(o){let a=n();for(;i.length>0&&a-i[0].at>=r;)i.shift();let c=i.filter(l=>l.thread===o);return c.length>=t?{ok:!1,scope:"thread",max:t,retryAt:c[c.length-t].at+r}:i.length>=e?{ok:!1,scope:"station",max:e,retryAt:i[i.length-e].at+r}:(i.push({at:a,thread:o}),{ok:!0})}}}s(VA,"threadBudget");function zA(t,e){let r=new Date(e.retryAt).toISOString().slice(11,16),n=e.scope==="thread"?`the hourly limit of ${e.max} messages for this thread`:`the hourly limit of ${e.max} messages for all of station's agents and chats together`;return`${t}: ${n} is reached (a breaker against a runaway loop); try again at ${r} UTC, and batch what's left into one message`}s(zA,"spentReason");function x5(t){let{protected:e,...r}=t.station;return{...t,station:r}}s(x5,"own");function lp(t){return(!t||typeof t!="object"||Array.isArray(t))&&se("a protected request needs an object"),t}s(lp,"bodyObject");function GA(t){let e=t.protected;(!e||!["front","canary"].includes(e.role)||e.threadId!==null&&!/^thr_[a-z0-9]+$/.test(e.threadId))&&se("protected conversation selection unavailable"),t.sharedProjectIds?.size&&se("a private project cannot have shared sources");let r=new Set([t.hostId]);(!/^host_[a-z0-9]+$/.test(t.hostId)||e.jobs.length>20)&&se("protected job destinations unavailable");for(let n of e.jobs)(!/^host_[a-z0-9]+$/.test(n.hostId)||r.has(n.hostId)||"protected"in n)&&se("protected job destinations unavailable"),r.add(n.hostId),[...n.projectIds,...n.sharedProjectIds??[]].some(i=>t.projectIds.has(i))&&se("private project is also a job destination");return e.jobs}s(GA,"profileStations");async function NC(t,e){let r=GA(e.station),n=e.station.protected,i=x5(e),o=KA(t.path),{method:a,path:c,body:l}=t;if(a==="GET"&&["/health","/install/version","/install/bb-app.tgz","/install.sh"].includes(c))return{gateAuth:!1};if(o[0]==="internal"){let u=new Set(["/internal/hosts/enroll","/internal/session/open","/internal/session/events","/internal/session/interactive-request","/internal/session/interactive-request/interrupt","/internal/session/tool-call"]),d=/^\/internal\/plugins\/(provider-claude-code|provider-codex)\/host\/[a-f0-9]{64}$/.test(c),p=/^\/internal\/skills\/tree\/[a-zA-Z0-9_.-]+$/.test(c),h=c==="/internal/ws"||c==="/internal/session/project-attachment-content"||d||p;if(a==="POST"&&u.has(c)||a==="GET"&&h||se("internal route is not part of the protected runtime"),a==="POST"){let m=lp(l);m.hostId!==void 0&&m.hostId!==e.station.hostId&&se("another daemon identity")}if(c==="/internal/session/project-attachment-content"){let m=new URLSearchParams(t.search);(m.getAll("threadId").length!==1||!n.threadId||m.get("threadId")!==n.threadId||m.getAll("projectId").length!==1||!e.station.projectIds.has(m.get("projectId")))&&se("another conversation's attachment")}if(c==="/internal/session/tool-call"){let m=lp(l);(!n.threadId||m.threadId!==n.threadId)&&se("only the selected protected conversation calls tools"),e.agentTools.has(m.tool)&&se("the protected workspace is fixed by the server")}return Gn(t,i)}if((o[0]!=="api"||o[1]!=="v1")&&se("not part of the protected conversation API"),o[2]==="threads"&&o.length===3&&a==="POST"){let u=lp(l),d=lp(u.environment),p=r.find(m=>m.hostId===d.hostId);(!p||d.type!=="host")&&se("work needs an explicit existing job machine"),(!n.threadId||u.parentThreadId!==n.threadId)&&se("work needs the selected conversation as parent"),u.lifecycleOwnerThreadId!==void 0&&u.lifecycleOwnerThreadId!==n.threadId&&se("another lifecycle owner"),u.senderThreadId!==void 0&&u.senderThreadId!==n.threadId&&se("only the selected conversation sends work");let h={...u};return delete h.parentThreadId,delete h.lifecycleOwnerThreadId,delete h.senderThreadId,Gn({...t,body:h},{...e,station:p})}if(o[2]==="threads"&&o[3]&&Gi.test(o[3])){let u=o[3];if(u===n.threadId)return a!=="GET"&&se("the protected conversation is controlled by the server"),Gn(t,i);let d=await e.threadHost(u),p=r.find(h=>h.hostId===d);return p||se("thread is outside the protected conversation's job destinations"),Gn(t,{...e,station:p})}if(o[2]==="plugins"&&o[4]==="cli"&&o.length===5&&a==="POST")return(!n.threadId||lp(l).threadId!==n.threadId)&&se("a protected plugin command names the selected conversation"),Gn(t,i);if(a==="GET"&&o.length===3&&["threads","threads/running","projects","environments","queued-messages"].includes(o[2]))return Gn(t,i);if(a==="GET"&&c==="/api/v1/threads/running")return Gn(t,i);if(a==="GET"&&o[2]==="projects"&&o[3]){let u=r.find(d=>d.projectIds.has(o[3]));if(u)return Gn(t,{...e,station:u})}if(a==="GET"&&o[2]==="environments"&&o[3]){let u=await e.environmentHost(o[3]),d=r.find(p=>p.hostId===u);if(d)return Gn(t,{...e,station:d})}if(a==="GET"&&XA.has(o.slice(2).join("/")))return Gn(t,i);se("route is not open to the protected conversation")}s(NC,"protectedDecision");async function gy(t,e,r){if("protected"in r.station)return O5(t,e,r);Array.isArray(e)||se(`bb answered ${t} with something other than a list`);let n=s(o=>o!==null&&typeof o=="object"?o:{},"record"),i=s(o=>{let a=n(o),c=n(a.environment);return(a.environmentHostId??c.hostId)===r.station.hostId},"onStation");switch(t){case"threads":return e.filter(i);case"threads/running":case"environments":return e.filter(o=>n(o).hostId===r.station.hostId);case"projects":return e.filter(o=>r.station.projectIds.has(n(o).id)).map(o=>{let a=n(o);return Array.isArray(a.threads)?{...a,threads:a.threads.filter(i)}:a});case"queued-messages":{let o=[];for(let a of e){let c=n(a).threadId;typeof c=="string"&&Gi.test(c)&&await r.threadHost(c)===r.station.hostId&&o.push(a)}return o}}}s(gy,"filterList");async function O5(t,e,r){let n=GA(r.station),i=r.station.protected,{protected:o,...a}=r.station,c=s(d=>d!==null&&typeof d=="object"?d:{},"record"),l=[];for(let d of[a,...n]){let p=await gy(t,e,{...r,station:d}),h=d.hostId===a.hostId;for(let m of p){let y=c(m);h&&["threads","threads/running","queued-messages"].includes(t)&&(y.threadId??y.id)!==i.threadId||h&&t==="environments"||(t==="projects"&&Array.isArray(y.threads)&&h?l.push({...y,threads:y.threads.filter(f=>c(f).id===i.threadId)}):l.push(m))}}let u=new Set;return l.filter(d=>{let p=c(d).id;return typeof p!="string"?!0:u.has(p)?!1:(u.add(p),!0)})}s(O5,"protectedList");var Gi=/^([a-z]+)_[a-z0-9]+$/,Ee=class extends Error{static{s(this,"Deny")}};function se(t){throw new Ee(t)}s(se,"deny");function KA(t){t.startsWith("/")||se("not an origin-form path"),/^[A-Za-z0-9\-._~!$&'()*+,;=:@%/]+$/.test(t)||se("characters outside a URL path");let e=t.slice(1).split("/"),r=!1;return e.forEach((n,i)=>{(n===""||n==="."||n===".."||/%(2e|2f|5c)/i.test(n))&&se(`unroutable path segment ${JSON.stringify(n)}`),!r&&n.includes("%")&&se(`escaped route segment ${JSON.stringify(n)}`),i>=2&&(n==="files"||n==="host-files")&&(r=!0)}),e}s(KA,"segments");function I5(t){let e=new Map;for(let[r,n]of new URLSearchParams(t))e.has(r)&&se(`duplicate query parameter ${r}`),e.set(r,n);return e}s(I5,"queryOf");var XA=new Set(["hosts","thread-sections","plugins","plugins/contributions","system/config","system/version","system/execution-options","system/providers","system/providers/state","system/providers/catalog","system/machine-providers","system/environment-providers"]),P5=new Set(["threads","threads/running","projects","environments","queued-messages"]),$5=new Set(["projectId","providerId","origin","lifecycleOwnerThreadId","visibility","title","input","model","serviceTier","reasoningLevel","permissionMode","executionInputSources","environment","parentThreadId","sectionId","pinned","sourceThreadId","sourceSeqEnd","startedOnBehalfOf","originKind","sendAt","senderThreadId"]),C5=new Set(["sourceThreadId","sourceSeqEnd","input","agentContextSeed","title","permissionMode","visibility","environment","origin","lifecycleOwnerThreadId"]),N5=new Set(["cols","rows","start","target","title"]),R5=new Set(["hostId","path","rootPath","content","contentEncoding","createParents","expectedSha256","mode","query","limit","includeHidden","excludeNames","includeFiles","includeDirectories","recursive","sourcePath","destinationPath"]),D5=new Set(["read","write","list","paths","mkdir","move","remove"]),j5=new Set(["argv","cwd","threadId","projectId"]);function Zr(t,e){return(t===null||typeof t!="object"||Array.isArray(t))&&se(`${e} needs a JSON object`),t}s(Zr,"objectBody");function Qr(t,e,r){for(let n of Object.keys(t))e.has(n)||se(`${r}: unknown field ${n}`)}s(Qr,"onlyFields");async function by(t,e){return"protected"in e.station?NC(t,e):Gn(t,e)}s(by,"decide");async function Gn(t,e){let{method:r,path:n,search:i="",body:o}=t,a=KA(n);if(a[0]==="internal"){let p=a.slice(1).join("/");return p==="hosts/enroll-key"&&se("enrollment keys are minted on the server's machine only"),p.startsWith("server-move")&&se("server moves are the server machine's business"),p==="session/tool-call"&&await M5(o,e),{gateAuth:!1}}if(r==="GET"&&(n==="/health"||n==="/install.sh"||n==="/install/version"||n==="/install/bb-app.tgz"))return{gateAuth:!1};if(a[0]==="ws"&&a[1]==="terminals"&&a.length===3)return await YA(a[2],e),{gateAuth:!1};(a[0]!=="api"||a[1]!=="v1")&&se("not part of bb's API");let l=r==="POST"&&a[2]==="plugins"&&a[4]==="cli"&&a.length===5&&e.pluginCommands?.has(a[3])&&o&&typeof o=="object"&&!Array.isArray(o)?{...o,argv:[]}:o,u=r==="POST"&&a.length===3&&a[2]==="threads";await U5(l,e,u);let d=await L5(r,a.slice(2),I5(i),o,e);return d?{gateAuth:!0,filter:d}:{gateAuth:!0}}s(Gn,"regularDecision");async function L5(t,e,r,n,i){let[o,a,...c]=e,l=c.join("/");if(o==="threads"&&c[0]==="interactions"&&c.length>=3&&["respond","resolve","cancel"].includes(c[2])&&se("only the user answers interactions"),o==="threads"&&a&&Gi.test(a))return $s(a,i);if(o==="environments"&&a&&Gi.test(a))return up(a,i);if(o==="terminals"&&a&&Gi.test(a))return YA(a,i);if(o==="hosts"&&a){if(a!==i.station.hostId&&se("another machine"),t==="GET"||t==="POST"&&l==="paths/exist")return;se("machine management")}if(o==="projects"&&a){if(yy(a,i),c[0]==="hosts"&&c[1]!==i.station.hostId&&se("another machine"),t==="GET"&&l!=="machine-environment"&&l!=="prompt-history"||t==="POST"&&(l==="attachments"||l==="attachments/copy"))return;se("changing the project")}let u=e.join("/");if(!(t==="GET"&&XA.has(u))){if(t==="GET"&&P5.has(u))return u;if(t==="GET"&&u==="terminals"){if(r.get("hostId")===i.station.hostId)return;let d=r.get("threadId");if(d!==void 0)return $s(d,i);let p=r.get("environmentId");if(p!==void 0)return up(p,i);se("terminals on another machine")}if(t==="POST"&&u==="threads")return H5(n,i);if(t==="POST"&&u==="threads/fork"){let d=Zr(n,"a fork");Qr(d,C5,"a fork"),d.sourceThreadId===void 0&&se("a fork needs its source"),d.origin==="plugin"&&se("plugin-origin threads"),d.environment!==void 0&&await RC(d.environment,i);let p=await i.threadProvider(dp(d.sourceThreadId,"thread"));(p===null||!vy.includes(p))&&se(`a fork of a thread on ${p??"an unknown provider"}: station's threads run on ${vy.join(" or ")}`),jC(p,d.permissionMode,!0);return}if(!(t==="POST"&&u==="threads/resolve-mentions")){if(t==="POST"&&u==="terminals"){let d=Zr(n,"a terminal");return Qr(d,N5,"a terminal"),W5(d.target,i)}if(t==="POST"&&o==="files"&&e.length===2&&D5.has(a)){let d=Zr(n,"a file operation");Qr(d,R5,"a file operation"),d.hostId!==i.station.hostId&&se("files on another machine (no hostId means the server's)");return}if(t==="POST"&&o==="plugins"&&e.length===3&&c[0]==="cli"){let d=Zr(n,"a plugin command");if(Qr(d,j5,"a plugin command"),i.pluginClis.has(a))return;let p=i.pluginArgv?.get(a);if(p){let f=d.argv;return(!Array.isArray(f)||!f.every(v=>typeof v=="string"))&&se("a plugin command's argv must be words"),p(f)}let h=i.pluginCommands?.get(a);h||se(`the ${a} plugin's CLI isn't allowed on station`),(typeof d.threadId!="string"||!d.threadId)&&se("a plugin command from station names its thread");let m=d.argv;(!Array.isArray(m)||!m.every(f=>typeof f=="string"))&&se("a plugin command's argv must be words");let y=m;!h.has(y.slice(0,2).join(" "))&&!h.has(y[0]??"")&&se(`only ${[...h].map(f=>`\`${a} ${f}\``).join(", ")} of the ${a} plugin's CLI are open to station`);return}se(`${t} /${u} isn't open to station`)}}}s(L5,"apiRoute");async function B5(t,e){if(e.orbitConversation)return await e.orbitConversation(t)!==null;let r=await e.orbitThread?.();return r!=null&&r===t}s(B5,"isOrbitConversation");async function M5(t,e){let r=t??{},n=r.tool;if(typeof n!="string"&&se(`agent tool ${String(n)} isn't allowed on station`),e.agentTools.has(n)){await $s(r.threadId,e);return}let i=e.stationTools?.get(n);if(i)return typeof r.threadId!="string"&&se(`${n} is called by one of station's threads`),await $s(r.threadId,e),i(r.arguments);let o=e.orbitTools?.get(n),a=e.threadTools?.get(n);if(!o&&!a&&se(`agent tool ${n} isn't allowed on station`),o&&typeof r.threadId=="string"&&await B5(r.threadId,e))return await $s(r.threadId,e),o(r.arguments);a||se(`${n} is only for the Orbit thread`),await $s(r.threadId,e).catch(l=>se(`${n} is only for the Orbit thread and station's agents and chats: ${l.message}`)),a(r.arguments);let c=e.spendThreadTool?.(n,r.threadId);c||se(`${n}: the gate isn't counting station's threads' messages, so it refuses them`),c.ok||se(zA(n,c))}s(M5,"toolCall");var q5=new Set(["type","kind","mode"]);async function U5(t,e,r=!1){let n=[],i,o=s((a,c,l)=>{if(c>64&&se("a body nested too deeply"),typeof a=="string"){if(l!==void 0&&q5.has(l))return;r&&c===1&&l==="projectId"?i=a:Gi.test(a)&&n.push(a)}else if(Array.isArray(a))for(let u of a)o(u,c+1);else if(a!==null&&typeof a=="object")for(let[u,d]of Object.entries(a))(u==="pluginSubmission"||u==="pluginMetadata"||u==="originPluginId")&&se(`plugin data (${u})`),o(d,c+1,u)},"walk");o(t,0),i!==void 0&&yy(i,e,!0);for(let a of new Set(n)){let c=Gi.exec(a)[1];c==="thr"?await $s(a,e):c==="env"?await up(a,e):c==="term"?await YA(a,e):c==="host"&&a!==e.station.hostId?se(`machine ${a} isn't station`):c==="proj"?yy(a,e):c==="src"&&se("project sources")}}s(U5,"references");function dp(t,e){return(typeof t!="string"||!Gi.test(t))&&se(`bad ${e} id`),t}s(dp,"checkedId");async function $s(t,e){let r=dp(t,"thread");await e.threadHost(r)!==e.station.hostId&&se(`thread ${r} isn't on station`)}s($s,"ownThread");async function up(t,e){let r=dp(t,"environment");await e.environmentHost(r)!==e.station.hostId&&se(`environment ${r} isn't on station`)}s(up,"ownEnvironment");async function YA(t,e){let r=dp(t,"terminal");await e.terminalHost(r)!==e.station.hostId&&se(`terminal ${r} isn't on station`)}s(YA,"ownTerminal");function yy(t,e,r=!1){let n=dp(t,"project");e.station.projectIds.has(n)||r&&e.station.sharedProjectIds?.has(n)||se(`project ${n} isn't station's`)}s(yy,"ownProject");var JA="orbit-job-folder";async function RC(t,e,r=!1){let n=Zr(t,"an environment");switch(n.type){case"provider":{if(!r)break;Qr(n,new Set(["type","environmentProviderId","machine","inputs"]),"an environment"),n.environmentProviderId!==JA&&se(`environment provider ${String(n.environmentProviderId)} isn't open to station`);let i=Zr(n.machine,"a machine");Qr(i,new Set(["type","hostId"]),"a machine"),(i.type!=="existing"||i.hostId!==e.station.hostId)&&se("a work folder on another machine"),n.inputs!==void 0&&Object.keys(Zr(n.inputs,"the inputs")).length>0&&se("a work folder's inputs are the plugin's");return}case"host":Qr(n,new Set(["type","hostId","workspace"]),"an environment"),n.hostId!==e.station.hostId&&se("a thread on another machine (no hostId means the server's)");return;case"reuse":return Qr(n,new Set(["type","environmentId"]),"an environment"),up(n.environmentId,e);case"project-default":Qr(n,new Set(["type"]),"an environment");return}se(`environment type ${String(n.type)} isn't open to station`)}s(RC,"placement");var DC="claude-code",vy=[DC,"codex"];function jC(t,e,r){t!=="codex"||e===so||se(`a Codex thread with permission mode ${e===void 0?r?"left out (the fork would keep its source's, which may be from an earlier release setting)":"left out (bb would take auto)":String(e)}: station's Codex threads start with ${so}, as in bb thread spawn --provider codex --permission-mode ${so} (the station kernel enforces access; the release setting controls Codex approval questions)`)}s(jC,"stationPermission");function F5(t){t===void 0&&se(`a thread that names no provider (bb would take the project's remembered one): station's threads name one, as in bb thread spawn --provider ${DC}`),(typeof t!="string"||!vy.includes(t))&&se(`a thread on ${String(t)}: station's threads run on ${vy.join(" or ")}`)}s(F5,"stationProvider");async function H5(t,e){let r=Zr(t,"a thread");Qr(r,$5,"a thread"),r.senderThreadId!==void 0&&await $s(r.senderThreadId,e),F5(r.providerId),jC(r.providerId,r.permissionMode,!1),yy(r.projectId,e,!0),r.origin==="plugin"&&se("plugin-origin threads"),!e.station.projectIds.has(r.projectId)&&Zr(r.environment,"an environment").type==="project-default"&&se("a thread in a project with sources elsewhere is placed on station explicitly"),await RC(r.environment,e,!0)}s(H5,"createThread");async function W5(t,e){let r=Zr(t,"a terminal target");switch(r.kind){case"thread":return $s(r.threadId,e);case"environment":return up(r.environmentId,e);case"host_path":r.hostId!==e.station.hostId&&se("a terminal on another machine");return;default:se("unknown terminal target")}}s(W5,"terminalTarget");import{z as ZA}from"zod";var Ki=JA,LC=s(t=>V5("sha256").update(t).digest("hex").slice(0,32),"jobId"),z5=ZA.array(ZA.string().min(1).max(4096)).max(32).default(["report.md","evidence.md","job.log"]);function BC(t,e){t.experimental_environments.register({id:Ki,displayName:"Orbit work folder",description:"A temporary work folder. Declared results are saved before bb removes it.",icon:"Folder",requires:{},inputs:ZA.object({outputs:z5}).strict(),policy:{retireGraceMs:3e5,pathKeys:"per-attempt",internal_DO_NOT_USE_removeChecksWorkspaceUse:!0},async availability({host:r}){try{return await e.location(r.id),{status:"available"}}catch{return{status:"unavailable",message:"This machine cannot create Orbit work folders."}}},async validate({host:r}){return await e.location(r.id),{action:"accept"}},async create({host:r,thread:n,pathKey:i,inputs:o,experimental_claimPath:a,signal:c,report:l}){let u=LC(i),d=`${await e.location(r.id)}/job-${u}`;if(!await a(d))throw new Error("The work folder could not be claimed.");return l.step("Creating the work folder"),await e.create(r.id,u,n.id,o.outputs,c),{status:"created",path:d,ownsPath:!0}},async remove({hostId:r,path:n,pathKey:i,signal:o,report:a}){if(r===null)return{status:"removed"};let c=LC(i),l=`${await e.location(r)}/job-${c}`;if(n!==null&&n!==l)throw new Error("The work folder path does not match its creation key.");return a.step("Saving declared results and removing the work folder"),await e.remove(r,c,o),{status:"removed"}}})}s(BC,"setupJobWorkspaces");var QA=pp.object({limited:pp.boolean(),bytes:pp.number().int().nonnegative(),files:pp.number().int().nonnegative(),free:pp.number().int().nonnegative()}).strict();function MC(t,e,r){let n=new AbortController;t.onDispose(()=>n.abort());let i=!1;async function o(){if(!(i||n.signal.aborted)){i=!0;try{let a=await t.sdk.environments.list({environmentProviderId:Ki,status:"ready",limit:100});for(let c of a){if(n.signal.aborted)return;if(!c.managed||c.environmentProviderId!==Ki||c.lifecycle.phase!=="active"||!c.path)continue;let l=/\/job-([a-f0-9]{32})$/.exec(c.path)?.[1];if(!l)throw new Error("A managed work folder has an invalid path.");let u=`work-storage-warning:${c.id}`,d;try{if(!QA.parse(await e.measure(c.hostId,l,n.signal)).limited){await t.storage.kv.delete(u);continue}d="The work folder exceeded its storage allowance or the station needs free space."}catch{d="The work folder's storage could not be checked."}let p=await t.sdk.environments.get({environmentId:c.id});if(p.path!==c.path||p.hostId!==c.hostId||p.environmentProviderId!==Ki||p.lifecycle.phase!=="active")continue;let h=[],m=!0;try{for(let f=0;;f+=100){let v=await t.sdk.threads.list({environmentId:c.id,archived:!1,includeHidden:!0,offset:f,limit:100});for(let w of v){let _=await t.sdk.threads.get({threadId:w.id});if(!_||_.environmentId!==c.id||_.archivedAt)continue;h.length<10&&h.push(`@thread:${_.id}`),await t.sdk.threads.stop({threadId:_.id});let A=await t.sdk.threads.get({threadId:_.id});if(A?.status==="active"||A?.status==="stopping")throw new Error("Work has not confirmed that it stopped.")}if(v.length<100)break}await e.stopFolder(c.hostId,l,n.signal)}catch{m=!1}let y=`${h.join(", ")} ${d} ${m?"Work was stopped.":"Stopping could not be confirmed."} The folder is kept. Handle its result and archive it when ready.`;t.log.warn(y),await t.storage.kv.get(u)!==y&&(await r(y),await t.storage.kv.set(u,y))}}finally{i=!1}}}return s(o,"tick"),gt(t,"managed-work-storage","* * * * *",o),{tick:o}}s(MC,"setupJobWatchdog");import{createHash as fJ}from"node:crypto";import{readFileSync as hJ}from"node:fs";import{join as mJ}from"node:path";ya();import{existsSync as rJ}from"node:fs";import{homedir as nJ}from"node:os";import{join as iJ}from"node:path";yo();Nr();var G5="tag:orbit",K5="2596A99EAAB33821893C0A79458CA832957F5868";function qC(t){return t==="linux"?"/usr/bin/tailscale":"/opt/homebrew/bin/tailscale"}s(qC,"tailscale");var X5=`if ! command -v tailscale >/dev/null; then
   . /etc/os-release
   case "$ID" in ubuntu|debian) ;; *) echo "the Tailscale integration supports Debian and Ubuntu, not $ID" >&2; exit 1 ;; esac
   [ -n "\${VERSION_CODENAME:-}" ] || { echo "no release codename in /etc/os-release" >&2; exit 1; }

package/server/dist/start-server.js

@@ -61204,7 +61204,8 @@ var init_host_policy = __esm({
     }).strict();
     environmentProviderPolicySchema = external_exports.object({
       retireGraceMs: external_exports.number().int().nonnegative().nullable().default(3e5),
-      pathKeys: external_exports.enum(["per-thread", "per-attempt"]).default("per-thread")
+      pathKeys: external_exports.enum(["per-thread", "per-attempt"]).default("per-thread"),
+      internal_DO_NOT_USE_removeChecksWorkspaceUse: external_exports.boolean().default(false)
     }).strict();
     MACHINE_PROVIDER_DESCRIPTION_MAX_CHARS = 200;
     LEGACY_UNKNOWN_MIGRATION_HASH = "legacy-unknown";
@@ -107696,6 +107697,8 @@ async function recoverEnvironmentCleanup(deps, environmentId) {
           "Recovery requires a failed, unused provider-managed environment"
         );
       const workspacePath = row.providerOwnsPath ? row.path : null;
+      const record2 = getEnvironmentProvider(row.environmentProviderId);
+      const removeChecksWorkspaceUse = workspacePath !== null && record2 !== void 0 && record2.pluginId === row.environmentProviderPluginId && record2.provider.policy.internal_DO_NOT_USE_removeChecksWorkspaceUse;
       await withEnvironmentCleanupSlot(deps.db, row.hostId, async () => {
         if (workspacePath !== null) {
           const inspection = await callHostOnlineRpc(deps, {
@@ -107707,11 +107710,12 @@ async function recoverEnvironmentCleanup(deps, environmentId) {
               path: workspacePath
             }
           });
-          if (!inspection.supported || inspection.active || inspection.pids.length > 0 || inspection.unreadablePids.length > 0)
+          const unsupported = !inspection.supported && !removeChecksWorkspaceUse;
+          if (unsupported || inspection.active || inspection.pids.length > 0 || inspection.unreadablePids.length > 0 && !removeChecksWorkspaceUse)
             throw new ApiError(
               409,
               "invalid_request",
-              `Recovery refused: ${!inspection.supported ? "process inspection requires Linux" : inspection.active ? "setup or a hook is still running" : inspection.pids.length > 0 ? `workspace processes remain (${inspection.pids.join(", ")})` : `cannot inspect same-user processes (${inspection.unreadablePids.join(", ")})`}`
+              `Recovery refused: ${unsupported ? "process inspection requires Linux" : inspection.active ? "setup or a hook is still running" : inspection.pids.length > 0 ? `workspace processes remain (${inspection.pids.join(", ")})` : `cannot inspect same-user processes (${inspection.unreadablePids.join(", ")})`}`
             );
         }
         const current = getEnvironment(deps.db, environmentId);
@@ -107753,6 +107757,13 @@ async function recoverEnvironmentCleanup(deps, environmentId) {
           });
         });
         await sweepProviderEnvironmentInSlot(deps, environmentId, signal);
+        const removed = getEnvironment(deps.db, environmentId);
+        if (removeChecksWorkspaceUse && removed?.teardownStatus !== "removed")
+          throw new ApiError(
+            409,
+            "invalid_request",
+            `Recovery did not remove the workspace: ${removed?.teardownMessage ?? "removal did not complete"}`
+          );
       });
     }
   }).done;