@intentic/machine 1.233.0

package/dist/sync/tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.d.ts","sourceRoot":"","sources":["../../src/sync/tunnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AA6BjD,eAAO,MAAM,WAAW,cAAe,MAAM,KAAG,MAM/C,CAAC;AAGF,eAAO,MAAM,YAAY,eAAgB,MAAM,KAAG,MAAmF,CAAC;AAiCtI,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC9B;AAMD,eAAO,MAAM,aAAa,aACZ,SAAS;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,KAC9G,SAAS,YAAY,EAGsE,CAAC;AAI/F,eAAO,MAAM,gBAAgB,WAAY,MAAM,UAAU,YAAY,WAAW,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,KAAG,IA6E3G,CAAC;AAeF,eAAO,MAAM,cAAc,WAAkB,YAAY,OAAO,GAAG,KAAG,OAAO,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CA4B9G,CAAC;AASF,eAAO,MAAM,gBAAgB,QAAS,GAAG;IAGjC,SAAS,YAAkB,SAAS,YAAY,EAAE,KAAG,OAAO,CAAC,IAAI,CAAC;IAsBlE,OAAO,QAAY,OAAO,CAAC,IAAI,CAAC;CAMvC,CAAC;AAQF,eAAO,MAAM,WAAW,SAAgB,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,OAAO,CAmBlF,CAAC"}

package/dist/sync/tunnel.js

@@ -0,0 +1,160 @@
+import { connect, createServer } from "node:net";
+const SSH_PORT_BASE = 24000;
+const SSH_PORT_SPAN = 4000;
+export const syncSshPort = (sandboxId) => {
+    const hex = (/[0-9a-f]{6}/i.exec(sandboxId)?.[0] ?? "000000").toLowerCase();
+    return SSH_PORT_BASE + (Number.parseInt(hex, 16) % SSH_PORT_SPAN);
+};
+export const sshSocketUrl = (sandboxUrl) => `${sandboxUrl.replace(/\/$/, "").replace(/^http/, "ws")}/system/sync/ssh`;
+const BUFFER_HIGH = 1_048_576;
+const BUFFER_LOW = 262_144;
+const DRAIN_POLL_MS = 50;
+const OPEN_TIMEOUT_MS = 10_000;
+const frameOf = (chunk) => {
+    const frame = new Uint8Array(chunk.byteLength);
+    frame.set(chunk);
+    return frame;
+};
+export const tunnelTargets = (pairings) => pairings
+    .filter((pairing) => pairing.syncToken !== undefined)
+    .map(({ sandboxId, sandboxUrl, syncToken }) => ({ sandboxId, sandboxUrl, syncToken }));
+export const bridgeConnection = (socket, target, onError) => {
+    const ws = new WebSocket(sshSocketUrl(target.sandboxUrl), { headers: { "x-intentic-sync": target.syncToken } });
+    ws.binaryType = "arraybuffer";
+    const queued = [];
+    let open = false;
+    let drain;
+    socket.pause();
+    const close = () => {
+        clearInterval(drain);
+        drain = undefined;
+        clearTimeout(handshake);
+        socket.destroy();
+        if (ws.readyState === WebSocket.OPEN || ws.readyState === WebSocket.CONNECTING) {
+            ws.close();
+        }
+    };
+    const handshake = setTimeout(() => {
+        onError(`the sync transport to ${target.sandboxId} did not open within ${OPEN_TIMEOUT_MS / 1000}s: the sandbox is not answering`);
+        close();
+    }, OPEN_TIMEOUT_MS);
+    socket.on("data", (chunk) => {
+        if (!open) {
+            queued.push(chunk);
+            return;
+        }
+        ws.send(frameOf(chunk));
+        if (drain === undefined && ws.bufferedAmount > BUFFER_HIGH) {
+            socket.pause();
+            drain = setInterval(() => {
+                if (ws.bufferedAmount < BUFFER_LOW) {
+                    clearInterval(drain);
+                    drain = undefined;
+                    socket.resume();
+                }
+            }, DRAIN_POLL_MS);
+        }
+    });
+    socket.on("close", close);
+    socket.on("error", close);
+    ws.addEventListener("open", () => {
+        open = true;
+        clearTimeout(handshake);
+        for (const chunk of queued) {
+            ws.send(frameOf(chunk));
+        }
+        queued.length = 0;
+        socket.resume();
+    });
+    ws.addEventListener("message", (event) => {
+        const data = event.data;
+        if (data instanceof ArrayBuffer) {
+            socket.write(Buffer.from(data));
+        }
+        else if (typeof data === "string") {
+            socket.write(Buffer.from(data, "binary"));
+        }
+    });
+    ws.addEventListener("error", () => {
+        onError(`the sync transport to ${target.sandboxId} could not be opened`);
+        close();
+    });
+    ws.addEventListener("close", close);
+};
+export const startSshTunnel = async (target, log) => {
+    const port = syncSshPort(target.sandboxId);
+    const sockets = new Set();
+    const server = createServer((socket) => {
+        sockets.add(socket);
+        socket.on("close", () => sockets.delete(socket));
+        bridgeConnection(socket, target, (message) => log(message));
+    });
+    const bound = await new Promise((resolve) => {
+        server.once("error", (error) => {
+            log(error.code === "EADDRINUSE"
+                ? `port ${port} is already taken, so ${target.sandboxId} has no sync transport on this machine. Free it and restart the mirror watcher.`
+                : `the sync transport for ${target.sandboxId} could not listen on ${port}: ${error.message}`);
+            resolve(false);
+        });
+        server.listen(port, "127.0.0.1", () => resolve(true));
+    });
+    if (!bound) {
+        return undefined;
+    }
+    return async () => {
+        for (const socket of sockets) {
+            socket.destroy();
+        }
+        await new Promise((resolve) => server.close(() => resolve()));
+    };
+};
+export const createTunnelPool = (log) => {
+    const running = new Map();
+    return {
+        reconcile: async (targets) => {
+            const wanted = new Set(targets.map((target) => target.sandboxId));
+            for (const [sandboxId, stop] of running) {
+                if (!wanted.has(sandboxId)) {
+                    running.delete(sandboxId);
+                    await stop();
+                    log(`  sync transport for ${sandboxId} stopped: it is no longer paired`);
+                }
+            }
+            for (const target of targets) {
+                if (running.has(target.sandboxId)) {
+                    continue;
+                }
+                const stop = await startSshTunnel(target, log);
+                if (stop !== undefined) {
+                    running.set(target.sandboxId, stop);
+                    log(`  sync transport for ${target.sandboxId} listening on 127.0.0.1:${syncSshPort(target.sandboxId)}`);
+                }
+            }
+        },
+        stopAll: async () => {
+            const stops = [...running.values()];
+            running.clear();
+            await Promise.all(stops.map(async (stop) => await stop()));
+        },
+    };
+};
+const READY_POLL_MS = 100;
+export const tunnelReady = async (port, timeoutMs) => {
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        const open = await new Promise((resolve) => {
+            const probe = connect(port, "127.0.0.1");
+            const settle = (value) => {
+                probe.destroy();
+                resolve(value);
+            };
+            probe.once("connect", () => settle(true));
+            probe.once("error", () => settle(false));
+        });
+        if (open || Date.now() >= deadline) {
+            return open;
+        }
+        await new Promise((resolve) => setTimeout(resolve, READY_POLL_MS));
+    }
+};
+//# sourceMappingURL=tunnel.js.map

package/dist/sync/tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/sync/tunnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AA2B3E,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAU,EAAE;IAIrD,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,OAAO,aAAa,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC;AACtE,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC;AAKtI,MAAM,WAAW,GAAG,SAAS,CAAC;AAC9B,MAAM,UAAU,GAAG,OAAO,CAAC;AAC3B,MAAM,aAAa,GAAG,EAAE,CAAC;AAezB,MAAM,eAAe,GAAG,MAAM,CAAC;AAK/B,MAAM,OAAO,GAAG,CAAC,KAAa,EAA2B,EAAE;IACvD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,aAAa,GAAG,CACzB,QAA6G,EACtF,EAAE,CACzB,QAAQ;KACH,MAAM,CAAC,CAAC,OAAO,EAA2B,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;KAC7E,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAI/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,MAAoB,EAAE,OAAkC,EAAQ,EAAE;IAK/G,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,EAAW,CAAC,CAAC;IACzH,EAAE,CAAC,UAAU,GAAG,aAAa,CAAC;IAI9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,KAAiC,CAAC;IACtC,MAAM,CAAC,KAAK,EAAE,CAAC;IAEf,MAAM,KAAK,GAAG,GAAS,EAAE;QACrB,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,KAAK,GAAG,SAAS,CAAC;QAClB,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;YAC7E,EAAE,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACL,CAAC,CAAC;IAKF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,OAAO,CAAC,yBAAyB,MAAM,CAAC,SAAS,wBAAwB,eAAe,GAAG,IAAI,iCAAiC,CAAC,CAAC;QAClI,KAAK,EAAE,CAAC;IACZ,CAAC,EAAE,eAAe,CAAC,CAAC;IAEpB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO;QACX,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,IAAI,EAAE,CAAC,cAAc,GAAG,WAAW,EAAE,CAAC;YACzD,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBACrB,IAAI,EAAE,CAAC,cAAc,GAAG,UAAU,EAAE,CAAC;oBACjC,aAAa,CAAC,KAAK,CAAC,CAAC;oBACrB,KAAK,GAAG,SAAS,CAAC;oBAClB,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpB,CAAC;YACL,CAAC,EAAE,aAAa,CAAC,CAAC;QACtB,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE1B,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;QAC7B,IAAI,GAAG,IAAI,CAAC;QACZ,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,MAAM,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAmB,EAAE,EAAE;QACnD,MAAM,IAAI,GAAY,KAAK,CAAC,IAAI,CAAC;QACjC,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9C,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;QAG9B,OAAO,CAAC,yBAAyB,MAAM,CAAC,SAAS,sBAAsB,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC,CAAC;AAeF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,MAAoB,EAAE,GAAQ,EAA8C,EAAE;IAC/G,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QAC3C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QACjD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YAClD,GAAG,CACC,KAAK,CAAC,IAAI,KAAK,YAAY;gBACvB,CAAC,CAAC,QAAQ,IAAI,yBAAyB,MAAM,CAAC,SAAS,iFAAiF;gBACxI,CAAC,CAAC,0BAA0B,MAAM,CAAC,SAAS,wBAAwB,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CACnG,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,IAAmB,EAAE;QAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC;AACN,CAAC,CAAC;AASF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAQ,EAAE,EAAE;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IACvD,OAAO;QACH,SAAS,EAAE,KAAK,EAAE,OAAgC,EAAiB,EAAE;YACjE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAClE,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAE1B,MAAM,IAAI,EAAE,CAAC;oBACb,GAAG,CAAC,wBAAwB,SAAS,kCAAkC,CAAC,CAAC;gBAC7E,CAAC;YACL,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChC,SAAS;gBACb,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC/C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBACpC,GAAG,CAAC,wBAAwB,MAAM,CAAC,SAAS,2BAA2B,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC5G,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,EAAE,KAAK,IAAmB,EAAE;YAC/B,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;KACJ,CAAC;AACN,CAAC,CAAC;AAMF,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAAE,SAAiB,EAAoB,EAAE;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QAEN,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE;gBACpC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACvE,CAAC;AACL,CAAC,CAAC"}

package/dist/upgrade.d.ts

@@ -0,0 +1,36 @@
+import type { Log } from "@intentic/local-agent";
+export declare const agentPath: string;
+export declare const assetUrl: () => string;
+export type Probe = {
+    readonly kind: "version";
+    readonly version: string;
+} | {
+    readonly kind: "no-version-command";
+} | {
+    readonly kind: "unusable";
+};
+export type UpgradeOutcome = {
+    readonly kind: "current";
+    readonly version: string;
+    readonly note?: string;
+} | {
+    readonly kind: "upgraded";
+    readonly from: string;
+    readonly to: string;
+} | {
+    readonly kind: "failed";
+    readonly reason: string;
+};
+export interface UpgradeExec {
+    readonly fetchTo: (url: string, dest: string) => Promise<void>;
+    readonly probe: (binary: string) => Probe;
+    readonly swap: (from: string, to: string) => Promise<void>;
+    readonly stopWatcher: () => Promise<number | undefined>;
+    readonly startWatcher: () => Promise<void>;
+    readonly watcherAlive: () => Promise<boolean>;
+    readonly discard: (path: string) => Promise<void>;
+}
+export declare const runUpgrade: (exec: UpgradeExec, url: string, installed: string, force: boolean, log: Log) => Promise<UpgradeOutcome>;
+export declare const realUpgradeExec: (stopWatcher: () => Promise<number | undefined>, startWatcher: () => Promise<void>, alive: () => Promise<boolean>) => UpgradeExec;
+export declare const upgradeMessage: (outcome: UpgradeOutcome) => string;
+//# sourceMappingURL=upgrade.d.ts.map

package/dist/upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAwBjD,eAAO,MAAM,SAAS,QAAyC,CAAC;AAIhE,eAAO,MAAM,QAAQ,QAAO,MAC0F,CAAC;AAWvH,MAAM,MAAM,KAAK,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAmBrJ,MAAM,MAAM,cAAc,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAI3D,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxD,QAAQ,CAAC,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AAMD,eAAO,MAAM,UAAU,SAAgB,WAAW,OAAO,MAAM,aAAa,MAAM,SAAS,OAAO,OAAO,GAAG,KAAG,OAAO,CAAC,cAAc,CAyEpI,CAAC;AAIF,eAAO,MAAM,eAAe,gBACX,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,gBAChC,MAAM,OAAO,CAAC,IAAI,CAAC,SAC1B,MAAM,OAAO,CAAC,OAAO,CAAC,KAC9B,WAWD,CAAC;AAGH,eAAO,MAAM,cAAc,YAAa,cAAc,KAAG,MAQxD,CAAC"}

package/dist/upgrade.js

@@ -0,0 +1,95 @@
+import { spawnSync } from "node:child_process";
+import { chmod, rename, rm } from "node:fs/promises";
+import { join } from "node:path";
+import { DEV_VERSION, isNewer } from "@intentic/sandbox-contract";
+import { binDir } from "./sync/config.js";
+import { archToken, download, exe, osToken } from "./sync/mutagen.js";
+export const agentPath = join(binDir, `intentic-machine${exe}`);
+export const assetUrl = () => `https://github.com/intentic/intentic/releases/latest/download/intentic-machine-${osToken()}-${archToken()}${exe}`;
+const probeVersion = (binary) => {
+    const result = spawnSync(binary, ["version"], { encoding: "utf8", timeout: 30_000, windowsHide: true });
+    if (result.error !== undefined) {
+        return { kind: "unusable" };
+    }
+    const version = result.status === 0 ? /^\d+\.\d+\.\d+$/.exec(result.stdout.trim())?.[0] : undefined;
+    if (version !== undefined) {
+        return { kind: "version", version };
+    }
+    return { kind: result.status === 0 ? "unusable" : "no-version-command" };
+};
+export const runUpgrade = async (exec, url, installed, force, log) => {
+    const staged = `${agentPath}.new`;
+    const previous = `${agentPath}.previous`;
+    log(`Downloading the current agent…`);
+    try {
+        await exec.fetchTo(url, staged);
+    }
+    catch (error) {
+        await exec.discard(staged);
+        return { kind: "failed", reason: `the download failed (${error instanceof Error ? error.message : String(error)}), nothing was changed.` };
+    }
+    const probed = exec.probe(staged);
+    if (probed.kind === "unusable") {
+        await exec.discard(staged);
+        return { kind: "failed", reason: `what downloaded doesn't run as an agent, keeping the one you have.` };
+    }
+    if (probed.kind === "no-version-command") {
+        await exec.discard(staged);
+        return {
+            kind: "current",
+            version: installed,
+            note: `the published agent predates \`intentic-machine version\`, so it is older than the one on this machine, yours is kept.`,
+        };
+    }
+    const candidate = probed.version;
+    if (installed !== DEV_VERSION && !isNewer(candidate, installed)) {
+        await exec.discard(staged);
+        return { kind: "current", version: installed };
+    }
+    if (installed === DEV_VERSION && !force) {
+        await exec.discard(staged);
+        return {
+            kind: "current",
+            version: installed,
+            note: `this agent was built from source, not installed from a release. \`intentic-machine upgrade --force\` replaces it with the published ${candidate}.`,
+        };
+    }
+    const wasRunning = (await exec.stopWatcher()) !== undefined;
+    await exec.swap(agentPath, previous);
+    await exec.swap(staged, agentPath);
+    if (!wasRunning) {
+        await exec.discard(previous);
+        return { kind: "upgraded", from: installed, to: candidate };
+    }
+    await exec.startWatcher();
+    if (await exec.watcherAlive()) {
+        await exec.discard(previous);
+        return { kind: "upgraded", from: installed, to: candidate };
+    }
+    log(`The new agent didn't stay running: putting the previous one back.`);
+    await exec.swap(previous, agentPath);
+    await exec.startWatcher();
+    return { kind: "failed", reason: `the new agent (${candidate}) wouldn't start, so ${installed} was restored and is running again.` };
+};
+export const realUpgradeExec = (stopWatcher, startWatcher, alive) => ({
+    fetchTo: async (url, dest) => {
+        await download(url, dest);
+        await chmod(dest, 0o755);
+    },
+    probe: probeVersion,
+    swap: async (from, to) => await rename(from, to),
+    stopWatcher,
+    startWatcher,
+    watcherAlive: alive,
+    discard: async (path) => await rm(path, { force: true }).catch(() => undefined),
+});
+export const upgradeMessage = (outcome) => {
+    if (outcome.kind === "current") {
+        return outcome.note === undefined ? `Already on the current agent (${outcome.version}). Nothing to do.` : `Left as it is: ${outcome.note}`;
+    }
+    if (outcome.kind === "upgraded") {
+        return `Upgraded the agent: ${outcome.from} → ${outcome.to}.`;
+    }
+    return `Upgrade didn't happen: ${outcome.reason}`;
+};
+//# sourceMappingURL=upgrade.js.map

package/dist/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAqBtE,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC;AAIhE,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CACjC,kFAAkF,OAAO,EAAE,IAAI,SAAS,EAAE,GAAG,GAAG,EAAE,CAAC;AAavH,MAAM,YAAY,GAAG,CAAC,MAAc,EAAS,EAAE;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAExG,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpG,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IAID,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;AAC7E,CAAC,CAAC;AAwBF,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,IAAiB,EAAE,GAAW,EAAE,SAAiB,EAAE,KAAc,EAAE,GAAQ,EAA2B,EAAE;IACrI,MAAM,MAAM,GAAG,GAAG,SAAS,MAAM,CAAC;IAClC,MAAM,QAAQ,GAAG,GAAG,SAAS,WAAW,CAAC;IACzC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtC,IAAI,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC;IAC/I,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAG7B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,oEAAoE,EAAE,CAAC;IAC5G,CAAC;IAID,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACvC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO;YACH,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,wHAAwH;SACjI,CAAC;IACN,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC;IAOjC,IAAI,SAAS,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IAMD,IAAI,SAAS,KAAK,WAAW,IAAI,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO;YACH,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,uIAAuI,SAAS,GAAG;SAC5J,CAAC;IACN,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,SAAS,CAAC;IAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAEd,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC1B,IAAI,MAAM,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAKD,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACzE,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,SAAS,wBAAwB,SAAS,qCAAqC,EAAE,CAAC;AACzI,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC3B,WAA8C,EAC9C,YAAiC,EACjC,KAA6B,EAClB,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAChD,WAAW;IACX,YAAY;IACZ,YAAY,EAAE,KAAK;IACnB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;CAClF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAuB,EAAU,EAAE;IAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,iCAAiC,OAAO,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/I,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,uBAAuB,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,EAAE,GAAG,CAAC;IAClE,CAAC;IACD,OAAO,0BAA0B,OAAO,CAAC,MAAM,EAAE,CAAC;AACtD,CAAC,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const MACHINE_VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,eAAe,EAAE,MAAsF,CAAC"}

package/dist/version.js

@@ -0,0 +1,2 @@
+export const MACHINE_VERSION = typeof INTENTIC_AGENT_VERSION === "string" ? INTENTIC_AGENT_VERSION : "0.0.0";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,MAAM,eAAe,GAAW,OAAO,sBAAsB,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@intentic/machine",
+  "version": "1.233.0",
+  "description": "The one agent that lives on a user's own computer: lets an intentic sandbox work on it (outbound WebSocket, MCP tools, scopes enforced here) and keeps folders and ports mirrored with it (Mutagen over tunnel SSH)",
+  "license": "MIT",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/intentic/intentic.git",
+    "directory": "_computers/machine"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "bin": {
+    "intentic-machine": "./dist/cli.js"
+  },
+  "dependencies": {
+    "@orpc/server": "1.14.13",
+    "@stricli/core": "1.3.0",
+    "tslib": "2.8.1",
+    "zod": "4.4.3",
+    "@intentic/constants": "1.233.0",
+    "@intentic/sandbox-contract": "1.233.0",
+    "@intentic/browser": "1.233.0",
+    "@intentic/local-agent": "1.233.0",
+    "@intentic/desktop": "1.233.0"
+  },
+  "devDependencies": {
+    "@orpc/client": "1.14.13",
+    "@orpc/contract": "1.14.13",
+    "@types/node": "24.13.2",
+    "@typescript/native-preview": "7.0.0-dev.20260707.2",
+    "vitest": "4.1.10",
+    "@intentic/testing": "0.0.0",
+    "@intentic/tsconfig": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsgo",
+    "typecheck": "tsgo --noEmit -p tsconfig.test.json",
+    "watch": "tsgo --build --watch",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}