@halcyonlabs/app 0.47.0-halcyon.363 → 0.47.0-halcyon.371

package/dist/index.d.ts

@@ -83,8 +83,8 @@ declare const appSettingsSchema: z$1.ZodObject<{
     providerOrder: z$1.ZodArray<z$1.ZodString>;
     defaultProviderId: z$1.ZodNullable<z$1.ZodString>;
     providerCompletedTurnDisplay: z$1.ZodRecord<z$1.ZodString, z$1.ZodEnum<{
-        flat: "flat";
         collapse: "collapse";
+        flat: "flat";
     }>>;
     streamerMode: z$1.ZodBoolean;
     allowFastServiceTier: z$1.ZodBoolean;
@@ -105,8 +105,8 @@ declare const appSettingsUpdateSchema: z$1.ZodUnion<readonly [z$1.ZodObject<{
     providerOrder: z$1.ZodArray<z$1.ZodString>;
     defaultProviderId: z$1.ZodNullable<z$1.ZodString>;
     providerCompletedTurnDisplay: z$1.ZodRecord<z$1.ZodString, z$1.ZodEnum<{
-        flat: "flat";
         collapse: "collapse";
+        flat: "flat";
     }>>;
     streamerMode: z$1.ZodBoolean;
     managedBranchPrefix: z$1.ZodString;
@@ -143,8 +143,8 @@ declare const appSettingsUpdateSchema: z$1.ZodUnion<readonly [z$1.ZodObject<{
     providerOrder: z$1.ZodArray<z$1.ZodString>;
     defaultProviderId: z$1.ZodNullable<z$1.ZodString>;
     providerCompletedTurnDisplay: z$1.ZodRecord<z$1.ZodString, z$1.ZodEnum<{
-        flat: "flat";
         collapse: "collapse";
+        flat: "flat";
     }>>;
     streamerMode: z$1.ZodBoolean;
     machineServerUrl: z$1.ZodNullable<z$1.ZodString>;
@@ -316,8 +316,8 @@ declare const appKeybindingOverridesSchema: z$1.ZodArray<z$1.ZodObject<{
         shift: z$1.ZodBoolean;
     }, z$1.core.$strict>>;
     platform: z$1.ZodOptional<z$1.ZodEnum<{
-        windows: "windows";
         mac: "mac";
+        windows: "windows";
         linux: "linux";
     }>>;
 }, z$1.core.$strict>>;
@@ -628,8 +628,8 @@ declare const hostSchema: z$1.ZodObject<{
         }, z$1.core.$strip>>;
     }, z$1.core.$strip>;
     maxPermissionMode: z$1.ZodEnum<{
-        auto: "auto";
         full: "full";
+        auto: "auto";
         "accept-edits": "accept-edits";
     }>;
     delivery: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodObject<{
@@ -3176,8 +3176,8 @@ declare const threadEventSchema: z$1.ZodUnion<readonly [z$1.ZodIntersection<z$1.
         }>;
         permissionMode: z$1.ZodEnum<{
             readonly: "readonly";
-            auto: "auto";
             full: "full";
+            auto: "auto";
             "accept-edits": "accept-edits";
             "workspace-write": "workspace-write";
         }>;
@@ -3975,8 +3975,8 @@ type ReasoningLevel = z$1.infer<typeof reasoningLevelSchema>;
 declare const serviceTierSchema: z$1.ZodString;
 type ServiceTier = z$1.infer<typeof serviceTierSchema>;
 declare const permissionModeSchema: z$1.ZodEnum<{
-    auto: "auto";
     full: "full";
+    auto: "auto";
     "accept-edits": "accept-edits";
 }>;
 type PermissionMode = z$1.infer<typeof permissionModeSchema>;
@@ -4145,8 +4145,8 @@ declare const resolvedThreadExecutionOptionsSchema: z$1.ZodObject<{
     serviceTier: z$1.ZodString;
     reasoningLevel: z$1.ZodString;
     permissionMode: z$1.ZodEnum<{
-        auto: "auto";
         full: "full";
+        auto: "auto";
         "accept-edits": "accept-edits";
     }>;
     source: z$1.ZodEnum<{
@@ -4162,8 +4162,8 @@ declare const projectExecutionDefaultsSchema: z$1.ZodObject<{
     serviceTier: z$1.ZodString;
     reasoningLevel: z$1.ZodString;
     permissionMode: z$1.ZodEnum<{
-        auto: "auto";
         full: "full";
+        auto: "auto";
         "accept-edits": "accept-edits";
     }>;
 }, z$1.core.$strip>;
@@ -4203,8 +4203,8 @@ declare const providerInfoSchema: z$1.ZodObject<{
         supportsFork: z$1.ZodBoolean;
         supportsSessionRewind: z$1.ZodBoolean;
         permissionModes: z$1.ZodArray<z$1.ZodEnum<{
-            auto: "auto";
             full: "full";
+            auto: "auto";
             "accept-edits": "accept-edits";
         }>>;
         modelCatalogScope: z$1.ZodEnum<{
@@ -4240,8 +4240,8 @@ declare const providerInfoSchema: z$1.ZodObject<{
         }, z$1.core.$strip>;
     }, z$1.core.$strip>], "kind">>;
     completedTurnDisplay: z$1.ZodEnum<{
-        flat: "flat";
         collapse: "collapse";
+        flat: "flat";
     }>;
     available: z$1.ZodBoolean;
     strings: z$1.ZodOptional<z$1.ZodObject<{
@@ -4444,8 +4444,8 @@ declare const threadQueuedMessageSchema: z$1.ZodObject<{
     model: z$1.ZodString;
     reasoningLevel: z$1.ZodString;
     permissionMode: z$1.ZodEnum<{
-        auto: "auto";
         full: "full";
+        auto: "auto";
         "accept-edits": "accept-edits";
     }>;
     serviceTier: z$1.ZodString;
@@ -5766,9 +5766,9 @@ declare const hostDaemonCommandRegistry: {
     }, z$1.core.$strict>, z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
         kind: z$1.ZodLiteral<"wording">;
         status: z$1.ZodEnum<{
-            unavailable: "unavailable";
             pass: "pass";
             revise: "revise";
+            unavailable: "unavailable";
         }>;
     }, z$1.core.$strict>, z$1.ZodObject<{
         kind: z$1.ZodLiteral<"review">;
@@ -6129,8 +6129,8 @@ declare const hostDaemonCommandRegistry: {
             skillFilePath: z$1.ZodString;
         }, z$1.core.$strict>], "kind">>;
         instructionMode: z$1.ZodEnum<{
-            append: "append";
             replace: "replace";
+            append: "append";
         }>;
         type: z$1.ZodLiteral<"thread.rewind.prepare">;
         leaseId: z$1.ZodString;
@@ -6278,8 +6278,8 @@ declare const hostDaemonCommandRegistry: {
             skillFilePath: z$1.ZodString;
         }, z$1.core.$strict>], "kind">>;
         instructionMode: z$1.ZodEnum<{
-            append: "append";
             replace: "replace";
+            append: "append";
         }>;
         type: z$1.ZodLiteral<"thread.start">;
         requestId: z$1.ZodString;
@@ -6742,8 +6742,8 @@ declare const hostDaemonCommandRegistry: {
                 envPassthrough: z$1.ZodArray<z$1.ZodString>;
             }, z$1.core.$strict>;
             instructionMode: z$1.ZodEnum<{
-                append: "append";
                 replace: "replace";
+                append: "append";
             }>;
             projectId: z$1.ZodString;
             providerId: z$1.ZodString;
@@ -6958,8 +6958,8 @@ declare const hostDaemonCommandRegistry: {
                 envPassthrough: z$1.ZodArray<z$1.ZodString>;
             }, z$1.core.$strict>;
             instructionMode: z$1.ZodEnum<{
-                append: "append";
                 replace: "replace";
+                append: "append";
             }>;
             projectId: z$1.ZodString;
             providerId: z$1.ZodString;
@@ -7860,13 +7860,13 @@ declare const hostDaemonCommandRegistry: {
         modifiedAtMs: z$1.ZodOptional<z$1.ZodNumber>;
         sha256: z$1.ZodString;
     }, z$1.core.$strip>, z$1.ZodObject<{
+        path: z$1.ZodString;
         contentEncoding: z$1.ZodEnum<{
             base64: "base64";
             utf8: "utf8";
         }>;
         sha256: z$1.ZodString;
         sizeBytes: z$1.ZodNumber;
-        path: z$1.ZodString;
         mimeType: z$1.ZodOptional<z$1.ZodString>;
         modifiedAtMs: z$1.ZodOptional<z$1.ZodNumber>;
         notModified: z$1.ZodLiteral<true>;
@@ -8184,8 +8184,8 @@ declare const hostDaemonCommandRegistry: {
         installed: z$1.ZodBoolean;
         installSource: z$1.ZodEnum<{
             notInstalled: "notInstalled";
-            external: "external";
             npmGlobal: "npmGlobal";
+            external: "external";
         }>;
         currentVersion: z$1.ZodNullable<z$1.ZodString>;
         latestVersion: z$1.ZodNullable<z$1.ZodString>;
@@ -8735,8 +8735,8 @@ declare const providerCliStatusResponseSchema: z$1.ZodRecord<z$1.ZodString, z$1.
     installed: z$1.ZodBoolean;
     installSource: z$1.ZodEnum<{
         notInstalled: "notInstalled";
-        external: "external";
         npmGlobal: "npmGlobal";
+        external: "external";
     }>;
     currentVersion: z$1.ZodNullable<z$1.ZodString>;
     latestVersion: z$1.ZodNullable<z$1.ZodString>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@halcyonlabs/app",
-  "version": "0.47.0-halcyon.363",
+  "version": "0.47.0-halcyon.371",
   "description": "bb app launcher for npx",
   "keywords": [
     "bb",
@@ -105,7 +105,7 @@
     "node": "^22.19.0 || ^24.0.0 || ^26.0.0"
   },
   "moonletRelease": {
-    "summary": "Prepare dormant mail helpers, dispatchers and units under admission (#373)"
+    "summary": "Give complete Rust validation a bounded window (#387)"
   },
   "license": "SEE LICENSE IN LICENSE"
 }

package/server/dist/builtin-plugins/orbit/dist/assets/moonlet/recipes/base-linux/proton-bridge.sh

@@ -1,18 +1,61 @@
 #!/bin/bash
 set -euo pipefail
 umask 077
+mail_runtime_parent=/run
+[ "$(stat -c '%u:%a:%F' /)" = '0:755:directory' ] || exit 75
+[ ! -L "$mail_runtime_parent" ] && [ "$(stat -c '%u %a %F' "$mail_runtime_parent")" = '0 755 directory' ] || exit 75
 if ! mkdir -m 700 /run/orbit-bridge-mail-signin 2>/dev/null; then
   [ ! -L /run/orbit-bridge-mail-signin ] && [ "$(stat -c '%u %a %F' /run/orbit-bridge-mail-signin)" = '0 700 directory' ] || exit 75
 fi
+exec 9< "$mail_runtime_parent"
+exec 7< /run/orbit-bridge-mail-signin
+mail_runtime_mount=$(awk '$1 == "mnt_id:" {print $2}' /proc/self/fdinfo/9)
+[[ "$mail_runtime_mount" =~ ^[0-9]+$ ]] && [ "$(awk '$1 == "mnt_id:" {print $2}' /proc/self/fdinfo/7)" = "$mail_runtime_mount" ] || exit 75
 (set -o noclobber; : > /run/orbit-bridge-mail-signin/launch.lock.maintenance) 2>/dev/null || true
-[ ! -L /run/orbit-bridge-mail-signin/launch.lock.maintenance ] || exit 75
+mail_lock_type=$(stat -c '%F' /run/orbit-bridge-mail-signin/launch.lock.maintenance) || { echo "Mail admission metadata cannot be read" >&2; exit 75; }
+[ "$mail_lock_type" = 'regular empty file' ] || [ "$mail_lock_type" = 'regular file' ] || exit 75
 exec 8<> /run/orbit-bridge-mail-signin/launch.lock.maintenance
-[ "$(stat -Lc '%u %a %h %F' /proc/self/fd/8)" = '0 600 1 regular empty file' ] || [ "$(stat -Lc '%u %a %h %F' /proc/self/fd/8)" = '0 600 1 regular file' ] || exit 75
+mail_lock_info=$(stat -Lc '%u %a %h %F' /proc/self/fd/8) || { echo "Mail admission descriptor cannot be checked" >&2; exit 75; }
+[ "$mail_lock_info" = '0 600 1 regular empty file' ] || [ "$mail_lock_info" = '0 600 1 regular file' ] || exit 75
+[ "$(awk '$1 == "mnt_id:" {print $2}' /proc/self/fdinfo/8)" = "$mail_runtime_mount" ] || exit 75
+exec 7<&- 9<&-
 flock -x -w 5 8 || { echo "Mail is busy; retry the station update" >&2; exit 75; }
-if [ -e /var/lib/orbit-mail/retired ] || [ -e /var/lib/orbit-mail/installation-owned ]; then
+mail_ownership=$(/usr/bin/python3 -I -B - <<'ORBIT_MAIL_OWNERSHIP'
+import os
+import sys
+owned = False
+for name in ('retired', 'installation-owned'):
+    try:
+        os.lstat('/var/lib/orbit-mail/' + name)
+    except FileNotFoundError:
+        pass
+    except OSError as error:
+        sys.stderr.write('Mail ownership cannot be checked (errno=' + str(error.errno) + '); legacy setup refused\n')
+        sys.exit(75)
+    else:
+        owned = True
+print('protected' if owned else 'legacy')
+ORBIT_MAIL_OWNERSHIP
+) || exit 75
+if [ "$mail_ownership" = protected ]; then
   echo "Protected mail owns Bridge; the legacy recipe stays dormant"
   exit 0
 fi
+mail_path_state() {
+  /usr/bin/python3 -I -B - "$1" <<'ORBIT_MAIL_PATH'
+import os
+import sys
+try:
+    os.lstat(sys.argv[1])
+except FileNotFoundError:
+    print('absent')
+except OSError as error:
+    sys.stderr.write('Bridge setup metadata cannot be read (errno=' + str(error.errno) + '); setup refused\n')
+    sys.exit(75)
+else:
+    print('present')
+ORBIT_MAIL_PATH
+}
 export DEBIAN_FRONTEND=noninteractive
 bridge_version=3.18.0
 bridge_sha256=4a4b4f3efe5502d2fc1280a2abd3d3bae5091275b466d1148c1b7df27cd571b7
@@ -62,7 +105,8 @@ put() {
 
 uid=$(id -u orbit)
 as_orbit() { sudo -u orbit env XDG_RUNTIME_DIR="/run/user/$uid" DBUS_SESSION_BUS_ADDRESS="unix:path=/run/user/$uid/bus" "$@"; }
-if [ -e /etc/systemd/user/orbit-proton-bridge.service ]; then
+legacy_unit=$(mail_path_state /etc/systemd/user/orbit-proton-bridge.service) || exit 75
+if [ "$legacy_unit" = present ]; then
   as_orbit systemctl --user stop orbit-proton-bridge.service 2>/dev/null || true
   systemctl --global disable orbit-proton-bridge.service >/dev/null 2>&1 || true
   rm -f /etc/systemd/user/orbit-proton-bridge.service
@@ -74,7 +118,8 @@ sudo -u orbit rm -f /home/orbit/.config/autostart/*[Bb]ridge*.desktop
 install -d -o root -g root -m 755 /var/db/orbit
 install -d -o bridge -g bridge -m 700 /var/db/orbit/bridge
 install -d -o root -g root -m 755 /var/db/orbit/bridge-mail
-if ! sudo -u bridge test -e /var/db/orbit/bridge/.local/share/keyrings/default; then
+legacy_keyring=$(mail_path_state /var/db/orbit/bridge/.local/share/keyrings/default) || exit 75
+if [ "$legacy_keyring" = absent ]; then
   sudo -u bridge mkdir -p /var/db/orbit/bridge/.local/share/keyrings
   printf '[keyring]\ndisplay-name=Default keyring\nctime=0\nmtime=0\nlock-on-idle=false\nlock-after=false\n' | sudo -u bridge tee /var/db/orbit/bridge/.local/share/keyrings/Default_keyring.keyring >/dev/null
   printf 'Default_keyring' | sudo -u bridge tee /var/db/orbit/bridge/.local/share/keyrings/default >/dev/null

package/server/dist/builtin-plugins/orbit/dist/assets/moonlet/revision

@@ -1 +1 @@
-ca9ef5088e0d12b1a0a62a0bcbf115659ef90104
+06034d1f797ca7e8b1f8c8e5b74a8199e34b3166