@husk-ai/core 0.1.1

package/dist/audit.d.ts

@@ -0,0 +1,65 @@
+/**
+ * What the computer was asked to do, and what happened.
+ *
+ * Agent runs have always persisted their events. The MCP path -- Claude Code or
+ * Cursor calling `shell`, `write_file`, `browser_click` against a real machine
+ * -- recorded nothing durable at all: one `log.info` to stderr at startup and
+ * silence thereafter. That is the integration husk exists for, and it was the
+ * one with no answer to "what did it actually do in there".
+ *
+ * The shape is deliberately small, because an audit log nobody can read is the
+ * same as no audit log:
+ *
+ *   - one NDJSON line per tool call, appended, never rewritten
+ *   - one file per computer, so a machine's whole history is `cat`-able
+ *   - arguments summarised rather than stored whole; a 200 KB `write_file`
+ *     body is not evidence, its path and size are
+ *   - secrets passed through the same redactor as every other output, because
+ *     the log is exactly where a leaked token would sit undisturbed for months
+ *
+ * Fire-and-forget by design: auditing must never fail the operation it is
+ * describing, and a full disk should cost you the record, not the work.
+ */
+export interface AuditEntry {
+    /** ISO 8601, when the call returned. */
+    at: string;
+    computerId: string;
+    /** Where the call came in from: `mcp`, `api`, `cli`. */
+    via: string;
+    tool: string;
+    /** Short, redacted summary of the arguments -- never the full payload. */
+    args: string;
+    ok: boolean;
+    durationMs: number;
+    /** First line of the failure, when there was one. */
+    error?: string;
+}
+/**
+ * A one-line description of a call's arguments.
+ *
+ * Values are truncated hard and the whole thing is redacted, so a token passed
+ * as an argument does not get a permanent home in the log.
+ */
+export declare function summariseArgs(args: Record<string, unknown>): string;
+/** `~/.husk/audit/<computerId>.ndjson` -- one file per machine. */
+export declare function auditPath(computerId: string): string;
+/**
+ * Append one entry. Never throws.
+ *
+ * The caller is on the response path of a tool the model is waiting for, so
+ * this does not block it and cannot break it.
+ */
+export declare function recordAudit(entry: AuditEntry): Promise<void>;
+/**
+ * Time a call and record it, whatever the outcome.
+ *
+ * Wrapping rather than two call sites so a future tool cannot be added and
+ * quietly skip the log -- which is how the MCP path came to have none.
+ */
+export declare function audited<T>(meta: {
+    computerId: string;
+    via: string;
+    tool: string;
+    args: Record<string, unknown>;
+}, run: () => Promise<T>, failed?: (value: T) => string | undefined): Promise<T>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,UAAU;IACzB,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAiBnE;AAED,mEAAmE;AACnE,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAQlE;AAED;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACtF,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACrB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,GAAG,SAAS,GACxC,OAAO,CAAC,CAAC,CAAC,CA0BZ"}

package/dist/audit.js

@@ -0,0 +1,87 @@
+import { appendFile, mkdir } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { paths } from './config.js';
+import { redact } from './util.js';
+/** Keep a summary readable and bounded; the full payload is not the point. */
+const MAX_ARG_CHARS = 300;
+/**
+ * A one-line description of a call's arguments.
+ *
+ * Values are truncated hard and the whole thing is redacted, so a token passed
+ * as an argument does not get a permanent home in the log.
+ */
+export function summariseArgs(args) {
+    const parts = [];
+    for (const [k, v] of Object.entries(args)) {
+        if (v === undefined)
+            continue;
+        let shown;
+        if (typeof v === 'string') {
+            // Long strings are a body, not an argument. Say how big instead.
+            shown = v.length > 80 ? `<${v.length} chars>` : v;
+        }
+        else if (typeof v === 'object' && v !== null) {
+            shown = Array.isArray(v) ? `<${v.length} items>` : '<object>';
+        }
+        else {
+            shown = String(v);
+        }
+        parts.push(`${k}=${shown}`);
+    }
+    const joined = parts.join(' ');
+    return redact(joined.length > MAX_ARG_CHARS ? `${joined.slice(0, MAX_ARG_CHARS)}…` : joined);
+}
+/** `~/.husk/audit/<computerId>.ndjson` -- one file per machine. */
+export function auditPath(computerId) {
+    return join(paths().data, 'audit', `${computerId}.ndjson`);
+}
+/**
+ * Append one entry. Never throws.
+ *
+ * The caller is on the response path of a tool the model is waiting for, so
+ * this does not block it and cannot break it.
+ */
+export async function recordAudit(entry) {
+    try {
+        const file = auditPath(entry.computerId);
+        await mkdir(dirname(file), { recursive: true });
+        await appendFile(file, `${JSON.stringify(entry)}\n`, 'utf8');
+    }
+    catch {
+        // An audit log that can break the thing it audits is worse than none.
+    }
+}
+/**
+ * Time a call and record it, whatever the outcome.
+ *
+ * Wrapping rather than two call sites so a future tool cannot be added and
+ * quietly skip the log -- which is how the MCP path came to have none.
+ */
+export async function audited(meta, run, failed) {
+    const started = Date.now();
+    const base = {
+        computerId: meta.computerId,
+        via: meta.via,
+        tool: meta.tool,
+        args: summariseArgs(meta.args),
+    };
+    try {
+        const value = await run();
+        // A tool that reports failure in its result rather than by throwing --
+        // which is how MCP tools signal errors -- must not be logged as a success.
+        const why = failed?.(value);
+        void recordAudit({ ...base, at: new Date().toISOString(), ok: !why, durationMs: Date.now() - started, ...(why ? { error: why } : {}) });
+        return value;
+    }
+    catch (err) {
+        void recordAudit({
+            ...base,
+            at: new Date().toISOString(),
+            ok: false,
+            durationMs: Date.now() - started,
+            error: redact(String(err.message ?? err).split('\n')[0] ?? ''),
+        });
+        throw err;
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAwCnC,8EAA8E;AAC9E,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAA6B;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAI,KAAa,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,iEAAiE;YACjE,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/C,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/F,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,UAAU,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAiB;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAsF,EACtF,GAAqB,EACrB,MAAyC;IAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;KAC/B,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,GAAG,EAAE,CAAC;QAC1B,uEAAuE;QACvE,2EAA2E;QAC3E,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACxI,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,WAAW,CAAC;YACf,GAAG,IAAI;YACP,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAE,GAAa,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC1E,CAAC,CAAC;QACH,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/browse.d.ts

@@ -0,0 +1,66 @@
+import type { Computer } from './types/computer.js';
+import type { NetworkPolicy } from './types/computer.js';
+/**
+ * Browsing, from inside the computer.
+ *
+ * The point is not to reimplement a browser. The point is that the agent's
+ * browser, its terminal and its filesystem are all views of the *same machine*.
+ * A `fetch()` from the host process is a different machine with a different IP,
+ * a different DNS view and a different egress path -- so a page the human sees
+ * in the console is not necessarily the page the agent got, and a network policy
+ * scoped to the computer would not apply to it.
+ *
+ * Everything here runs as a script in the computer. It needs only python3 or
+ * curl, both of which the husk images and a stock WSL both have.
+ */
+/**
+ * The serialisable half of a browse request -- exactly what goes over the wire.
+ *
+ * Split from `BrowseRequest` because the route schema is `.strict()`: a client
+ * that reused a type carrying `signal` would send it and get a 422.
+ */
+export interface BrowseBody {
+    url: string;
+    /** Follow redirects. Defaults to true. */
+    follow?: boolean;
+    /** Give up after this many seconds. Defaults to 30. */
+    timeoutSec?: number;
+    /** Cap the extracted text. Defaults to 200 KB. */
+    maxBytes?: number;
+}
+export interface BrowseRequest extends BrowseBody {
+    signal?: AbortSignal;
+}
+export interface BrowseLink {
+    text: string;
+    href: string;
+}
+export interface BrowsePage {
+    /** The URL actually loaded, after redirects. */
+    url: string;
+    requestedUrl: string;
+    status: number;
+    contentType: string;
+    title: string;
+    /** Readable text, tags stripped, whitespace collapsed. */
+    text: string;
+    links: BrowseLink[];
+    /** Bytes actually read, i.e. after any truncation. */
+    bytes: number;
+    /** What the server claimed in Content-Length, when it said. Null otherwise. */
+    totalBytes: number | null;
+    truncated: boolean;
+    elapsedMs: number;
+    /** The tool that did the fetch, so the console can say so. */
+    via: 'python3' | 'curl';
+}
+/**
+ * Load a page from inside `computer`, honouring its network policy.
+ *
+ * The policy check happens here, on the parsed URL, rather than being left to
+ * the provider: the `local` provider cannot filter egress at the OS level, so
+ * this is the only place the declared policy becomes real for a fetch husk
+ * makes on the agent's behalf.
+ */
+export declare function browseInComputer(computer: Computer, req: BrowseRequest, policy?: NetworkPolicy): Promise<BrowsePage>;
+//# sourceMappingURL=browse.d.ts.map

package/dist/browse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browse.d.ts","sourceRoot":"","sources":["../src/browse.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;;;;;;;GAYG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,0CAA0C;IAC1C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,GAAG,EAAE,SAAS,GAAG,MAAM,CAAC;CACzB;AAgFD;;;;;;;GAOG;AAEH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,aAAa,EAClB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,UAAU,CAAC,CA0DrB"}

package/dist/browse.js

@@ -0,0 +1,217 @@
+import { HuskError } from './errors.js';
+import { assertUrlAllowed, ownsLoopback } from './net.js';
+/** Written into the computer once, then reused. */
+const FETCH_SCRIPT = String.raw `
+import json, re, sys, html, urllib.request, urllib.error, urllib.parse, time
+
+url, follow, timeout, max_bytes = sys.argv[1], sys.argv[2] == "1", float(sys.argv[3]), int(sys.argv[4])
+
+class NoRedirect(urllib.request.HTTPRedirectHandler):
+    def redirect_request(self, *a, **k):
+        return None
+
+opener = urllib.request.build_opener(*([] if follow else [NoRedirect]))
+req = urllib.request.Request(url, headers={
+    "User-Agent": "husk-browser/0.1 (+https://husk.sh)",
+    "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,text/plain;q=0.8,*/*;q=0.5",
+    "Accept-Language": "en",
+})
+
+started = time.time()
+status, final, ctype, raw, declared = 0, url, "", b"", None
+try:
+    with opener.open(req, timeout=timeout) as res:
+        status = res.status
+        final = res.geturl()
+        ctype = res.headers.get("Content-Type", "")
+        declared = res.headers.get("Content-Length")
+        raw = res.read(max_bytes + 1)
+except urllib.error.HTTPError as e:
+    status, final, ctype = e.code, e.geturl(), e.headers.get("Content-Type", "")
+    raw = e.read(max_bytes + 1)
+except Exception as e:
+    print(json.dumps({"error": str(e)}))
+    raise SystemExit(0)
+
+truncated = len(raw) > max_bytes
+raw = raw[:max_bytes]
+
+charset = "utf-8"
+m = re.search(r"charset=([\w-]+)", ctype, re.I)
+if m:
+    charset = m.group(1)
+body = raw.decode(charset, errors="replace")
+
+title, text, links = "", "", []
+if "html" in ctype.lower() or body.lstrip()[:15].lower().startswith(("<!doctype", "<html")):
+    t = re.search(r"<title[^>]*>(.*?)</title>", body, re.S | re.I)
+    title = html.unescape(t.group(1)).strip()[:300] if t else ""
+
+    for m in re.finditer(r'<a\s[^>]*href=["\']([^"\']+)["\'][^>]*>(.*?)</a>', body, re.S | re.I):
+        href = html.unescape(m.group(1)).strip()
+        if href.startswith(("#", "javascript:", "mailto:")):
+            continue
+        label = html.unescape(re.sub(r"<[^>]+>", " ", m.group(2)))
+        label = re.sub(r"\s+", " ", label).strip()
+        if not label:
+            continue
+        links.append({"text": label[:160], "href": urllib.parse.urljoin(final, href)})
+        if len(links) >= 300:
+            break
+
+    stripped = re.sub(r"(?is)<(script|style|noscript|template|svg)\b.*?</\1>", " ", body)
+    stripped = re.sub(r"(?i)<br\s*/?>|</p>|</div>|</li>|</h[1-6]>", "\n", stripped)
+    stripped = re.sub(r"<[^>]+>", " ", stripped)
+    text = html.unescape(stripped)
+    text = re.sub(r"[ \t\r\f\v]+", " ", text)
+    text = re.sub(r"\n\s*\n\s*\n+", "\n\n", text).strip()
+else:
+    text = body
+
+print(json.dumps({
+    "url": final, "status": status, "contentType": ctype, "title": title,
+    "text": text, "links": links, "bytes": len(raw), "truncated": truncated,
+    "totalBytes": int(declared) if declared and declared.isdigit() else None,
+    "elapsedMs": int((time.time() - started) * 1000),
+}))
+`;
+const SCRIPT_PATH = '/tmp/.husk-browse.py';
+/**
+ * Load a page from inside `computer`, honouring its network policy.
+ *
+ * The policy check happens here, on the parsed URL, rather than being left to
+ * the provider: the `local` provider cannot filter egress at the OS level, so
+ * this is the only place the declared policy becomes real for a fetch husk
+ * makes on the agent's behalf.
+ */
+export async function browseInComputer(computer, req, policy) {
+    const effective = policy ?? computer.info.spec.network;
+    const parsed = assertUrlAllowed(req.url, effective, {
+        loopbackIsOwn: ownsLoopback(computer.info.provider),
+    });
+    const timeoutSec = req.timeoutSec ?? 30;
+    const maxBytes = req.maxBytes ?? 200 * 1024;
+    const follow = req.follow !== false;
+    const hasPython = await probe(computer, 'python3', req.signal);
+    if (!hasPython)
+        return await browseWithCurl(computer, parsed, { follow, timeoutSec, maxBytes, signal: req.signal });
+    await computer.writeFile(SCRIPT_PATH, FETCH_SCRIPT);
+    const result = await computer.exec({
+        cmd: ['python3', SCRIPT_PATH, parsed.toString(), follow ? '1' : '0', String(timeoutSec), String(maxBytes)],
+        timeoutSec: timeoutSec + 10,
+        maxOutputBytes: maxBytes + 64 * 1024,
+        ...(req.signal ? { signal: req.signal } : {}),
+    });
+    if (result.exitCode !== 0 && !result.stdout.trim()) {
+        throw new HuskError('E_EXEC_FAILED', `could not load ${parsed.hostname}`, {
+            hint: 'check the computer has egress with `husk exec <name> -- curl -sS -o /dev/null -w "%{http_code}" https://example.com`',
+            details: { stderr: result.stderr.slice(0, 500) },
+        });
+    }
+    let parsedOut;
+    try {
+        parsedOut = JSON.parse(lastJsonLine(result.stdout));
+    }
+    catch {
+        throw new HuskError('E_EXEC_FAILED', `the page fetcher returned something unreadable`, {
+            hint: 'this is a husk bug; the raw output is in details',
+            details: { stdout: result.stdout.slice(0, 500) },
+        });
+    }
+    if (typeof parsedOut.error === 'string') {
+        throw new HuskError('E_EXEC_FAILED', `could not load ${parsed.hostname}: ${parsedOut.error}`, {
+            hint: 'the machine reached the network but the request failed -- check the URL and the host',
+        });
+    }
+    return {
+        requestedUrl: parsed.toString(),
+        url: String(parsedOut.url ?? parsed.toString()),
+        status: Number(parsedOut.status ?? 0),
+        contentType: String(parsedOut.contentType ?? ''),
+        title: String(parsedOut.title ?? ''),
+        text: String(parsedOut.text ?? ''),
+        links: Array.isArray(parsedOut.links) ? parsedOut.links : [],
+        bytes: Number(parsedOut.bytes ?? 0),
+        totalBytes: typeof parsedOut.totalBytes === 'number' ? parsedOut.totalBytes : null,
+        truncated: Boolean(parsedOut.truncated),
+        elapsedMs: Number(parsedOut.elapsedMs ?? 0),
+        via: 'python3',
+    };
+}
+/** No python3: fall back to curl and return the body with no extraction. */
+async function browseWithCurl(computer, parsed, opts) {
+    const started = Date.now();
+    const args = [
+        'curl',
+        '-sS',
+        ...(opts.follow ? ['-L'] : []),
+        '-m',
+        String(opts.timeoutSec),
+        '-A',
+        'husk-browser/0.1 (+https://husk.sh)',
+        '-w',
+        '\\nHUSK_META %{http_code} %{content_type} %{url_effective}',
+        parsed.toString(),
+    ];
+    const res = await computer.exec({
+        cmd: args,
+        timeoutSec: opts.timeoutSec + 10,
+        maxOutputBytes: opts.maxBytes + 8192,
+        ...(opts.signal ? { signal: opts.signal } : {}),
+    });
+    if (res.exitCode !== 0) {
+        throw new HuskError('E_EXEC_FAILED', `could not load ${parsed.hostname}`, {
+            hint: 'this machine has neither python3 nor curl, so there is nothing here to fetch with. ' +
+                'Use a flavor whose image ships one -- `husk up <name> --flavor python` works today -- ' +
+                'or point computer.image at your own. On the container providers `computer.packages` ' +
+                'cannot help here: the root filesystem is mounted read-only on purpose, so no package ' +
+                'manager can run.',
+            details: { stderr: res.stderr.slice(0, 500) },
+        });
+    }
+    const meta = /\nHUSK_META (\d+) (\S*) (\S+)\s*$/.exec(res.stdout);
+    const body = meta ? res.stdout.slice(0, meta.index) : res.stdout;
+    return {
+        requestedUrl: parsed.toString(),
+        url: meta?.[3] ?? parsed.toString(),
+        status: meta ? Number(meta[1]) : 0,
+        contentType: meta?.[2] ?? '',
+        title: '',
+        text: stripTags(body),
+        links: [],
+        bytes: Buffer.byteLength(body, 'utf8'),
+        totalBytes: null,
+        truncated: res.truncated,
+        elapsedMs: Date.now() - started,
+        via: 'curl',
+    };
+}
+async function probe(computer, bin, signal) {
+    const r = await computer
+        .exec({
+        cmd: `command -v ${bin} >/dev/null 2>&1 && echo yes || echo no`,
+        timeoutSec: 20,
+        ...(signal ? { signal } : {}),
+    })
+        .catch(() => undefined);
+    return r?.stdout.includes('yes') ?? false;
+}
+/** The script prints one JSON object last; shells sometimes prepend noise. */
+function lastJsonLine(out) {
+    const lines = out.trimEnd().split('\n');
+    for (let i = lines.length - 1; i >= 0; i--) {
+        const line = lines[i].trim();
+        if (line.startsWith('{') && line.endsWith('}'))
+            return line;
+    }
+    return out.trim();
+}
+function stripTags(input) {
+    return input
+        .replace(/<(script|style)\b[\s\S]*?<\/\1>/gi, ' ')
+        .replace(/<[^>]+>/g, ' ')
+        .replace(/[ \t]+/g, ' ')
+        .replace(/\n\s*\n\s*\n+/g, '\n\n')
+        .trim();
+}
+//# sourceMappingURL=browse.js.map

package/dist/browse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browse.js","sourceRoot":"","sources":["../src/browse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AA+D1D,mDAAmD;AACnD,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyE9B,CAAC;AAEF,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAE3C;;;;;;;GAOG;AAEH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAkB,EAClB,GAAkB,EAClB,MAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;IACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE;QAClD,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;KACpD,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC;IAEpC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,SAAS;QAAE,OAAO,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpH,MAAM,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;QACjC,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1G,UAAU,EAAE,UAAU,GAAG,EAAE;QAC3B,cAAc,EAAE,QAAQ,GAAG,EAAE,GAAG,IAAI;QACpC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,kBAAkB,MAAM,CAAC,QAAQ,EAAE,EAAE;YACxE,IAAI,EAAE,sHAAsH;YAC5H,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACjD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAkC,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAA4B,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,gDAAgD,EAAE;YACrF,IAAI,EAAE,kDAAkD;YACxD,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACjD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,kBAAkB,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,EAAE,EAAE;YAC5F,IAAI,EAAE,sFAAsF;SAC7F,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE;QAC/B,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC;QACrC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC;QAChD,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;QAClC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,SAAS,CAAC,KAAsB,CAAC,CAAC,CAAC,EAAE;QAC9E,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;QACnC,UAAU,EAAE,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAClF,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC;QAC3C,GAAG,EAAE,SAAS;KACf,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,cAAc,CAC3B,QAAkB,EAClB,MAAW,EACX,IAAqF;IAErF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG;QACX,MAAM;QACN,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI;QACJ,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QACvB,IAAI;QACJ,qCAAqC;QACrC,IAAI;QACJ,4DAA4D;QAC5D,MAAM,CAAC,QAAQ,EAAE;KAClB,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;QAC9B,GAAG,EAAE,IAAI;QACT,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,EAAE;QAChC,cAAc,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI;QACpC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,kBAAkB,MAAM,CAAC,QAAQ,EAAE,EAAE;YACxE,IAAI,EACF,qFAAqF;gBACrF,wFAAwF;gBACxF,sFAAsF;gBACtF,uFAAuF;gBACvF,kBAAkB;YACpB,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACjE,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE;QAC/B,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE;QACnC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QAC5B,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;QACrB,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QACtC,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;QAC/B,GAAG,EAAE,MAAM;KACZ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,QAAkB,EAAE,GAAW,EAAE,MAAoB;IACxE,MAAM,CAAC,GAAG,MAAM,QAAQ;SACrB,IAAI,CAAC;QACJ,GAAG,EAAE,cAAc,GAAG,yCAAyC;QAC/D,UAAU,EAAE,EAAE;QACd,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,OAAO,CAAC,mCAAmC,EAAE,GAAG,CAAC;SACjD,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC;SACjC,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Where Husk keeps its state.
+ *
+ * Everything lives under one directory so a user can delete it in one move,
+ * back it up in one move, and see exactly what we are storing.
+ */
+export interface HuskPaths {
+    /** Root: $HUSK_HOME, else ~/.husk */
+    root: string;
+    /** Registered husks, one directory per husk. */
+    husks: string;
+    /** Computer bookkeeping (metadata, not filesystems). */
+    computers: string;
+    /** Working directories for the `local` provider. */
+    workspaces: string;
+    /** Run transcripts and traces. */
+    runs: string;
+    /** Imported transcripts, cached. */
+    transcripts: string;
+    /** SQLite databases. */
+    data: string;
+    /** Downloaded assets, snapshot tarballs. */
+    cache: string;
+    /** Long-lived config: husk.config.json, credentials pointer. */
+    configFile: string;
+    /** Local overrides that must never be committed. */
+    envFile: string;
+}
+export declare function huskHome(): string;
+export declare function paths(): HuskPaths;
+/** Create every directory Husk expects. Safe to call repeatedly. */
+export declare function ensurePaths(p?: HuskPaths): HuskPaths;
+/** Global settings, read from ~/.husk/config.json and the environment. */
+export interface HuskConfig {
+    /** Preferred computer provider. 'auto' picks the best available. */
+    provider: string;
+    /** Preferred model alias. 'auto' picks the best available. */
+    model: string;
+    /** Control-plane bind address for `husk serve`. */
+    host: string;
+    port: number;
+    /** Refuse to spend more than this on a single run, whatever the husk says. */
+    maxCostUsd: number;
+    /** Hard cap on concurrently running computers. */
+    maxComputers: number;
+    /** Send nothing anywhere except the model provider you configured. */
+    telemetry: false;
+    logLevel: string;
+    /** Registry of aliases the user has pinned, e.g. { fast: 'groq/llama-3.3-70b' }. */
+    modelAliases: Record<string, string>;
+}
+export declare const DEFAULT_CONFIG: HuskConfig;
+/** Environment variable names Husk reads. Documented so `husk doctor` can list them. */
+export declare const ENV_KEYS: {
+    readonly anthropic: "ANTHROPIC_API_KEY";
+    readonly openai: "OPENAI_API_KEY";
+    readonly google: "GOOGLE_API_KEY";
+    readonly groq: "GROQ_API_KEY";
+    readonly openrouter: "OPENROUTER_API_KEY";
+    readonly together: "TOGETHER_API_KEY";
+    readonly deepseek: "DEEPSEEK_API_KEY";
+    readonly mistral: "MISTRAL_API_KEY";
+    readonly cerebras: "CEREBRAS_API_KEY";
+    readonly ollamaHost: "OLLAMA_HOST";
+    readonly lmstudioHost: "LMSTUDIO_HOST";
+    readonly fly: "FLY_API_TOKEN";
+    readonly discord: "DISCORD_BOT_TOKEN";
+    readonly slack: "SLACK_BOT_TOKEN";
+    readonly telegram: "TELEGRAM_BOT_TOKEN";
+};
+export declare const HUSK_PORT_DEFAULT = 7377;
+export declare const HUSK_USER_AGENT = "husk/0.1.0 (+https://husk.sh)";
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED,wBAAgB,KAAK,IAAI,SAAS,CAcjC;AAED,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,CAAC,GAAE,SAAmB,GAAG,SAAS,CAK7D;AAED,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,SAAS,EAAE,KAAK,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,eAAO,MAAM,cAAc,EAAE,UAU5B,CAAC;AAEF,wFAAwF;AACxF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;CAgBX,CAAC;AAEX,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,eAAO,MAAM,eAAe,kCAAkC,CAAC"}

package/dist/config.js

@@ -0,0 +1,61 @@
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { existsSync, mkdirSync } from 'node:fs';
+export function huskHome() {
+    return process.env.HUSK_HOME ? resolve(process.env.HUSK_HOME) : join(homedir(), '.husk');
+}
+export function paths() {
+    const root = huskHome();
+    return {
+        root,
+        husks: join(root, 'husks'),
+        computers: join(root, 'computers'),
+        workspaces: join(root, 'workspaces'),
+        runs: join(root, 'runs'),
+        transcripts: join(root, 'transcripts'),
+        data: join(root, 'data'),
+        cache: join(root, 'cache'),
+        configFile: join(root, 'config.json'),
+        envFile: join(root, '.env'),
+    };
+}
+/** Create every directory Husk expects. Safe to call repeatedly. */
+export function ensurePaths(p = paths()) {
+    for (const dir of [p.root, p.husks, p.computers, p.workspaces, p.runs, p.transcripts, p.data, p.cache]) {
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    return p;
+}
+export const DEFAULT_CONFIG = {
+    provider: 'auto',
+    model: 'auto',
+    host: '127.0.0.1',
+    port: 7377,
+    maxCostUsd: 5,
+    maxComputers: 8,
+    telemetry: false,
+    logLevel: 'info',
+    modelAliases: {},
+};
+/** Environment variable names Husk reads. Documented so `husk doctor` can list them. */
+export const ENV_KEYS = {
+    anthropic: 'ANTHROPIC_API_KEY',
+    openai: 'OPENAI_API_KEY',
+    google: 'GOOGLE_API_KEY',
+    groq: 'GROQ_API_KEY',
+    openrouter: 'OPENROUTER_API_KEY',
+    together: 'TOGETHER_API_KEY',
+    deepseek: 'DEEPSEEK_API_KEY',
+    mistral: 'MISTRAL_API_KEY',
+    cerebras: 'CEREBRAS_API_KEY',
+    ollamaHost: 'OLLAMA_HOST',
+    lmstudioHost: 'LMSTUDIO_HOST',
+    fly: 'FLY_API_TOKEN',
+    discord: 'DISCORD_BOT_TOKEN',
+    slack: 'SLACK_BOT_TOKEN',
+    telegram: 'TELEGRAM_BOT_TOKEN',
+};
+export const HUSK_PORT_DEFAULT = 7377;
+export const HUSK_USER_AGENT = 'husk/0.1.0 (+https://husk.sh)';
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AA+BhD,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,KAAK;IACnB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1B,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAClC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACtC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACxB,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1B,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,IAAe,KAAK,EAAE;IAChD,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACvG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAsBD,MAAM,CAAC,MAAM,cAAc,GAAe;IACxC,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,IAAI;IACV,UAAU,EAAE,CAAC;IACb,YAAY,EAAE,CAAC;IACf,SAAS,EAAE,KAAK;IAChB,QAAQ,EAAE,MAAM;IAChB,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF,wFAAwF;AACxF,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,IAAI,EAAE,cAAc;IACpB,UAAU,EAAE,oBAAoB;IAChC,QAAQ,EAAE,kBAAkB;IAC5B,QAAQ,EAAE,kBAAkB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,kBAAkB;IAC5B,UAAU,EAAE,aAAa;IACzB,YAAY,EAAE,eAAe;IAC7B,GAAG,EAAE,eAAe;IACpB,OAAO,EAAE,mBAAmB;IAC5B,KAAK,EAAE,iBAAiB;IACxB,QAAQ,EAAE,oBAAoB;CACtB,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,+BAA+B,CAAC"}