@intentic/sandbox-contract 1.312.0 → 1.313.0

package/src/text/shell-regions.test.ts

@@ -0,0 +1,38 @@
+import { heredocBodies } from "./shell-regions.js";
+
+// The one heredoc scan the policy classifier and the daemon's command readers share, pinned by exact offset.
+
+const bodiesOf = (command: string): string[] => heredocBodies(command).map(({ start, end }) => command.slice(start, end));
+
+test("a body starts on the line after its opener, not at the newline, and ends where its terminator's line starts", () => {
+    expect(heredocBodies("cat <<EOF\nx\nEOF")).toEqual([{ start: 10, end: 12 }]);
+    const command = "cat > f <<'EOF'\nline one\nline two\nEOF\nls";
+    expect(heredocBodies(command)).toEqual([{ start: command.indexOf("line one"), end: command.indexOf("EOF\nls") }]);
+    expect(bodiesOf(command)).toEqual(["line one\nline two\n"]);
+});
+
+test("`<<` ends only at a terminator in the first column: an indented one is body, as bash reads it", () => {
+    const command = "cat <<EOF\n  x\n  EOF\n\tEOF\nrm -rf /";
+    expect(heredocBodies(command)).toEqual([{ start: 10, end: command.length }]);
+});
+
+test("`<<-` ends at a tab-indented terminator", () => {
+    const command = "cat <<-EOF\n\tx\n\tEOF\nls";
+    expect(heredocBodies(command)).toEqual([{ start: 11, end: 14 }]);
+    expect(bodiesOf(command)).toEqual(["\tx\n"]);
+});
+
+test("the terminator is the whole word on its line, quoted delimiters included", () => {
+    expect(bodiesOf("cat <<EOF\nEOFX\nxEOF\nEOF\nls")).toEqual(["EOFX\nxEOF\n"]);
+    expect(bodiesOf(`cat <<'END'\n$HOME\nEND`)).toEqual(["$HOME\n"]);
+    expect(bodiesOf(`cat <<"END"\n$HOME\nEND`)).toEqual(["$HOME\n"]);
+});
+
+test("an unterminated body runs to the end of the command, and an opener with no line after it has none", () => {
+    expect(heredocBodies("cat <<'EOF'\nrm -rf /")).toEqual([{ start: 12, end: 20 }]);
+    expect(heredocBodies("cat <<EOF")).toEqual([]);
+});
+
+test("every heredoc in the command is found, in order", () => {
+    expect(bodiesOf("cat <<A >a\n1\nA\ncat <<-B >b\n\t2\n\tB\nls")).toEqual(["1\n", "\t2\n"]);
+});

package/src/text/shell-regions.ts

@@ -30,9 +30,8 @@ const ASSIGNMENT = /^[A-Za-z_][A-Za-z0-9_]*=/;
 // `<<EOF`, `<<-EOF`, quoted or not; the delimiter's quoting only affects expansion, not classification here.
 const HEREDOC_OPEN = /<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1/g;
 
-// Found in their own pass, first: a heredoc body is line-oriented and can hold anything, an odd quote count in it would
-// desync the word scanner.
-const heredocBodies = (command: string): CommandSpan[] => {
+// Heredoc bodies in order, each from the line after its opener to its terminator's line; as in bash, only `<<-` indents that.
+export const heredocBodies = (command: string): CommandSpan[] => {
     const bodies: CommandSpan[] = [];
     for (const open of command.matchAll(HEREDOC_OPEN)) {
         const indented = command.slice(open.index, open.index + 3).startsWith("<<-");
@@ -158,6 +157,7 @@ const scanWords = (command: string, skip: readonly CommandSpan[]): ShellWord[] =
 // Unsorted and possibly overlapping; callers only ask containment of them. Computed once per command by the classifier
 // and shared across every table.
 export const inertRegions = (command: string): CommandSpan[] => {
+    // First, in a pass of their own: a body can hold anything, and an odd quote count in it would desync the word scanner.
     const bodies = heredocBodies(command);
     const regions: CommandSpan[] = [...bodies];
     const words = scanWords(command, bodies);

package/src/text/transcript-fold.test.ts

@@ -43,6 +43,19 @@ describe("foldTurn", () => {
         ]);
     });
 
+    // The sandbox's composed words (a land's breakage sent back into the live turn) are not the owner's: the row says who
+    // spoke them and what for, and a person's steer carries neither.
+    it("writes the sandbox's steer down with its speaker and errand, and a person's with neither", () => {
+        const events: AgentEvent[] = [
+            { kind: "steer", text: "the land broke main", sentAt: SENT_AT + 1, voice: "sandbox", errand: "land-breakage" },
+            { kind: "steer", text: "and the docs", sentAt: SENT_AT + 2 },
+        ];
+        expect(foldOf("ship it", events).slice(1)).toEqual([
+            { role: "user", text: "the land broke main", sentAt: SENT_AT + 1, speaker: { kind: "sandbox" }, errand: "land-breakage" },
+            { role: "user", text: "and the docs", sentAt: SENT_AT + 2 },
+        ]);
+    });
+
     it("does not retire a bubble that has written no prose", () => {
         const events: AgentEvent[] = [
             { kind: "tool_call", id: "t1", name: "Read", category: "read", status: "completed" },

package/src/text/transcript-fold.ts

@@ -129,7 +129,7 @@ const undelivered = (unattended: boolean): string =>
 const memoryPress = (event: Extract<AgentEvent, { kind: "error" }>): "sendAnyway" | "sandboxMemory" =>
     event.memory === undefined ? "sendAnyway" : "sandboxMemory";
 
-// A memory hold is asked once and never again that spell (memory-admission.ts), so the next send always runs. A turn the
+// A memory hold is asked once and never again that spell (resource-budget.ts), so the next send always runs. A turn the
 // sandbox started itself (a fix press, a peer's message, a re-run) was never in a composer: its message stays above, and
 // the press asks the sandbox to run the turn it kept rather than sending a queue that holds nothing.
 const heldRow = (event: Extract<AgentEvent, { kind: "error" }>): TranscriptRow => {
@@ -455,13 +455,22 @@ export class TranscriptFold {
             return this.pushRow(unspoken);
         }
         // A steer also closes the bubble, or the next answer would print over it mid-call.
-        const patches = this.pushRow({
-            role: "user",
-            text: event.text,
-            sentAt: event.sentAt,
-            ...(event.attachments === undefined ? {} : { attachments: [...event.attachments] }),
-            ...(event.messageId === undefined ? {} : { messageId: event.messageId }),
-        });
+        const row: TranscriptRow = { role: "user", text: event.text, sentAt: event.sentAt };
+        if (event.attachments !== undefined) {
+            row.attachments = [...event.attachments];
+        }
+        if (event.messageId !== undefined) {
+            row.messageId = event.messageId;
+        }
+        // The sandbox's own words say so on the row, so a reader never shows them as the owner's; an agent's words
+        // come as their own card (agentWords), which names the agent.
+        if (event.voice === "sandbox") {
+            row.speaker = { kind: "sandbox" };
+        }
+        if (event.errand !== undefined) {
+            row.errand = event.errand;
+        }
+        const patches = this.pushRow(row);
         // Anchors pair by position with the checkpoints only a person's steer reserves.
         if (event.voice === undefined) {
             this.steerRows.push(this.rows.length - 1);

package/dist/chores/fix-deps.d.ts

@@ -1,10 +0,0 @@
-export declare const FIX_DEPS_AUTOMATION: {
-    readonly id: "fix-dependency-breakage";
-    readonly title: "Fix what a dependency change broke";
-    readonly event: "deps.broken";
-    readonly holdForSeconds: 60;
-    readonly guard: `test "$(printf '%s' "$AUTOMATION_PAYLOAD" | jq -r '.deps.attempt // 1')" -le 2`;
-    readonly guardNote: "stops after 2 attempts";
-    readonly prompt: string;
-};
-//# sourceMappingURL=fix-deps.d.ts.map

package/dist/chores/fix-deps.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fix-deps.d.ts","sourceRoot":"","sources":["../../src/chores/fix-deps.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;aAC5B,EAAE,EAAE,yBAAyB;aAC7B,KAAK,EAAE,oCAAoC;aAC3C,KAAK,EAAE,aAAa;aACpB,cAAc,EAAE,EAAE;aAClB,KAAK,EAAE,gFAAgF;aACvF,SAAS,EAAE,wBAAwB;aACnC,MAAM;CAWA,CAAC"}

package/dist/chores/fix-deps.js

@@ -1,19 +0,0 @@
-export const FIX_DEPS_AUTOMATION = {
-    id: "fix-dependency-breakage",
-    title: "Fix what a dependency change broke",
-    event: "deps.broken",
-    holdForSeconds: 60,
-    guard: `test "$(printf '%s' "$AUTOMATION_PAYLOAD" | jq -r '.deps.attempt // 1')" -le 2`,
-    guardNote: "stops after 2 attempts",
-    prompt: "A landed change drifted this workspace's dependencies; the daemon reinstalled them and ran the project's own checks, " +
-        "and they failed. The payload names the project (`deps.project`), the check command (`deps.command`), how it exited " +
-        "(`deps.exitCode`) and the tail of its output (`deps.logTail`); the full log is in the project's `--verify` terminal.\n\n" +
-        "Re-run only what failed to see it first-hand (the failing package's tests or typecheck, not the whole check command), then fix the ROOT CAUSE. That usually means updating call " +
-        "sites, types or tests to match what actually changed: never loosening or deleting the checks, pinning or downgrading " +
-        "dependencies just to silence them, or editing generated files. If the breakage needs a decision only the owner can " +
-        "make (an intentional breaking upgrade, a license change, a dependency that should be dropped), stop and say exactly " +
-        "that instead of guessing.\n\n" +
-        "Finish by re-running what failed and reporting what was broken, what you changed, and whether it passes now; the " +
-        "daemon runs the whole check again once your fix lands.",
-};
-//# sourceMappingURL=fix-deps.js.map

package/dist/chores/fix-deps.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fix-deps.js","sourceRoot":"","sources":["../../src/chores/fix-deps.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAC/B,EAAE,EAAE,yBAAyB;IAC7B,KAAK,EAAE,oCAAoC;IAC3C,KAAK,EAAE,aAAa;IACpB,cAAc,EAAE,EAAE;IAClB,KAAK,EAAE,gFAAgF;IACvF,SAAS,EAAE,wBAAwB;IACnC,MAAM,EACF,uHAAuH;QACvH,qHAAqH;QACrH,0HAA0H;QAC1H,kLAAkL;QAClL,uHAAuH;QACvH,qHAAqH;QACrH,sHAAsH;QACtH,+BAA+B;QAC/B,mHAAmH;QACnH,wDAAwD;CACtD,CAAC"}

package/dist/front/terminal-frames.d.ts

@@ -1,17 +0,0 @@
-import type { TerminalUpgrade } from "./generated/wire.js";
-export declare const TERMINAL_UPGRADE: TerminalUpgrade;
-export declare const WEBTRANSPORT_PATH = "/system/transport";
-export type TerminalFrame = {
-    readonly kind: "pane" | "ping" | "pong";
-    readonly bytes: Uint8Array;
-} | {
-    readonly kind: "message";
-    readonly text: string;
-} | {
-    readonly kind: "close";
-    readonly code?: number;
-    readonly reason: string;
-};
-export declare const encodeTerminalFrame: (frame: TerminalFrame) => Uint8Array;
-export declare const terminalFrameReader: (maxBytes: number) => ((chunk: Uint8Array) => TerminalFrame[]);
-//# sourceMappingURL=terminal-frames.d.ts.map

package/dist/front/terminal-frames.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"terminal-frames.d.ts","sourceRoot":"","sources":["../../src/front/terminal-frames.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,eAAO,MAAM,gBAAgB,EAAE,eAAqC,CAAC;AAIrE,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAOrD,MAAM,MAAM,aAAa,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAEnD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAwBlF,eAAO,MAAM,mBAAmB,UAAW,aAAa,KAAG,UAO1D,CAAC;AAuBF,eAAO,MAAM,mBAAmB,aAAc,MAAM,KAAG,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,aAAa,EAAE,CA2B7F,CAAC"}

package/dist/front/terminal-frames.js

@@ -1,79 +0,0 @@
-export const TERMINAL_UPGRADE = "intentic-terminal";
-export const WEBTRANSPORT_PATH = "/system/transport";
-const HEADER_BYTES = 5;
-const KINDS = ["pane", "message", "close", "ping", "pong"];
-const utf8 = new TextEncoder();
-const strictUtf8 = new TextDecoder("utf-8", { fatal: true });
-const payloadOf = (frame) => {
-    switch (frame.kind) {
-        case "message":
-            return utf8.encode(frame.text);
-        case "close": {
-            if (frame.code === undefined) {
-                return new Uint8Array(0);
-            }
-            const reason = utf8.encode(frame.reason);
-            const payload = new Uint8Array(2 + reason.length);
-            new DataView(payload.buffer).setUint16(0, frame.code);
-            payload.set(reason, 2);
-            return payload;
-        }
-        default:
-            return frame.bytes;
-    }
-};
-export const encodeTerminalFrame = (frame) => {
-    const payload = payloadOf(frame);
-    const encoded = new Uint8Array(HEADER_BYTES + payload.length);
-    encoded[0] = KINDS.indexOf(frame.kind);
-    new DataView(encoded.buffer).setUint32(1, payload.length);
-    encoded.set(payload, HEADER_BYTES);
-    return encoded;
-};
-const frameOf = (kind, payload) => {
-    switch (kind) {
-        case "message":
-            return { kind, text: strictUtf8.decode(payload) };
-        case "close": {
-            if (payload.length === 0) {
-                return { kind, reason: "" };
-            }
-            if (payload.length < 2) {
-                throw new Error("a close frame's code is two bytes");
-            }
-            const code = new DataView(payload.buffer, payload.byteOffset, 2).getUint16(0);
-            return { kind, code, reason: strictUtf8.decode(payload.subarray(2)) };
-        }
-        default:
-            return { kind, bytes: payload };
-    }
-};
-export const terminalFrameReader = (maxBytes) => {
-    let pending = new Uint8Array(0);
-    return (chunk) => {
-        const joined = new Uint8Array(pending.length + chunk.length);
-        joined.set(pending);
-        joined.set(chunk, pending.length);
-        const view = new DataView(joined.buffer);
-        const frames = [];
-        let at = 0;
-        while (joined.length - at >= HEADER_BYTES) {
-            const kind = KINDS[joined[at] ?? KINDS.length];
-            if (kind === undefined) {
-                throw new Error(`no terminal frame is of kind ${joined[at]}`);
-            }
-            const length = view.getUint32(at + 1);
-            if (length > maxBytes) {
-                throw new Error(`a terminal frame of ${length} bytes is past ${maxBytes}`);
-            }
-            if (joined.length - at - HEADER_BYTES < length) {
-                break;
-            }
-            frames.push(frameOf(kind, joined.subarray(at + HEADER_BYTES, at + HEADER_BYTES + length)));
-            at += HEADER_BYTES + length;
-        }
-        pending = joined.slice(at);
-        return frames;
-    };
-};
-//# sourceMappingURL=terminal-frames.js.map

package/dist/front/terminal-frames.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"terminal-frames.js","sourceRoot":"","sources":["../../src/front/terminal-frames.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,gBAAgB,GAAoB,mBAAmB,CAAC;AAIrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD,MAAM,YAAY,GAAG,CAAC,CAAC;AAGvB,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAQpE,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,MAAM,UAAU,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE7D,MAAM,SAAS,GAAG,CAAC,KAAoB,EAAc,EAAE;IACnD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,SAAS;YACV,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,OAAO,EAAE,CAAC;YACX,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACvB,OAAO,OAAO,CAAC;QACnB,CAAC;QACD;YACI,OAAO,KAAK,CAAC,KAAK,CAAC;IAC3B,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAoB,EAAc,EAAE;IACpE,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,IAA4B,EAAE,OAAmB,EAAiB,EAAE;IACjF,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,SAAS;YACV,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,KAAK,OAAO,EAAE,CAAC;YACX,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAChC,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,CAAC;QACD;YACI,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;AACL,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAA4C,EAAE;IAC9F,IAAI,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,IAAI,EAAE,GAAG,CAAC,CAAC;QACX,OAAO,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,YAAY,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACtC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,kBAAkB,QAAQ,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,YAAY,GAAG,MAAM,EAAE,CAAC;gBAC7C,MAAM;YACV,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,YAAY,EAAE,EAAE,GAAG,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3F,EAAE,IAAI,YAAY,GAAG,MAAM,CAAC;QAChC,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;AACN,CAAC,CAAC"}

package/dist/protocol/tunnel-lanes.d.ts

@@ -1,10 +0,0 @@
-export type TunnelLane = "interactive" | "bulk";
-export declare const INGRESS_LANE_HEADER = "x-intentic-lane";
-export declare const tunnelLaneNamed: (header: string | string[] | undefined) => TunnelLane;
-export declare const tunnelLaneOf: (host: string, method: string, path: string) => TunnelLane;
-export declare const tunnelLaneTable: () => {
-    readonly method: string;
-    readonly path: string;
-    readonly lane: TunnelLane;
-}[];
-//# sourceMappingURL=tunnel-lanes.d.ts.map

package/dist/protocol/tunnel-lanes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tunnel-lanes.d.ts","sourceRoot":"","sources":["../../src/protocol/tunnel-lanes.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,MAAM,CAAC;AAGhD,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD,eAAO,MAAM,eAAe,WAAY,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,KAAG,UAA0D,CAAC;AAInI,eAAO,MAAM,YAAY,SAAU,MAAM,UAAU,MAAM,QAAQ,MAAM,KAAG,UAOzE,CAAC;AAIF,eAAO,MAAM,eAAe,QAAO;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,EACR,CAAC"}

package/dist/protocol/tunnel-lanes.js

@@ -1,16 +0,0 @@
-import { sandboxSubdomain } from "../ids/hostnames.js";
-import { hostOwnerId } from "./ingress-contract.js";
-import { RAW_ROUTE_LIST } from "./raw-routes.js";
-import { servedRoute } from "./routes.js";
-export const INGRESS_LANE_HEADER = "x-intentic-lane";
-export const tunnelLaneNamed = (header) => (header === "bulk" ? "bulk" : "interactive");
-export const tunnelLaneOf = (host, method, path) => {
-    const id = hostOwnerId(host);
-    const label = host.split(":")[0]?.split(".")[0] ?? "";
-    if (id === undefined || label !== sandboxSubdomain(id)) {
-        return "bulk";
-    }
-    return servedRoute(RAW_ROUTE_LIST, [], method, path)?.meta.lane ?? "interactive";
-};
-export const tunnelLaneTable = () => RAW_ROUTE_LIST.map(({ method, path, meta }) => ({ method, path, lane: meta.lane ?? "interactive" }));
-//# sourceMappingURL=tunnel-lanes.js.map

package/dist/protocol/tunnel-lanes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tunnel-lanes.js","sourceRoot":"","sources":["../../src/protocol/tunnel-lanes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAU1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAqC,EAAc,EAAE,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AAInI,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,IAAY,EAAc,EAAE;IACnF,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,EAAE,KAAK,SAAS,IAAI,KAAK,KAAK,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QACrD,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,WAAW,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,aAAa,CAAC;AACrF,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAoF,EAAE,CACjH,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC"}

package/dist/protocol/upgrade-relay.d.ts

@@ -1,4 +0,0 @@
-import type { ClientRequest } from "node:http";
-import type { Duplex } from "node:stream";
-export declare const relayUpgrade: (upstream: ClientRequest, socket: Duplex, head: Buffer) => void;
-//# sourceMappingURL=upgrade-relay.d.ts.map

package/dist/protocol/upgrade-relay.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"upgrade-relay.d.ts","sourceRoot":"","sources":["../../src/protocol/upgrade-relay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C,eAAO,MAAM,YAAY,aAAc,aAAa,UAAU,MAAM,QAAQ,MAAM,KAAG,IAuBpF,CAAC"}

package/dist/protocol/upgrade-relay.js

@@ -1,25 +0,0 @@
-export const relayUpgrade = (upstream, socket, head) => {
-    upstream.on("error", () => socket.destroy());
-    upstream.on("response", (answer) => {
-        socket.end(`HTTP/1.1 ${answer.statusCode ?? 502} ${answer.statusMessage ?? ""}\r\n\r\n`);
-    });
-    upstream.on("upgrade", (answer, upstreamSocket, upstreamHead) => {
-        const lines = [];
-        for (let index = 0; index < answer.rawHeaders.length; index += 2) {
-            lines.push(`${answer.rawHeaders[index]}: ${answer.rawHeaders[index + 1]}`);
-        }
-        socket.write(`HTTP/1.1 101 Switching Protocols\r\n${lines.join("\r\n")}\r\n\r\n`);
-        if (upstreamHead.length > 0) {
-            socket.write(upstreamHead);
-        }
-        if (head.length > 0) {
-            upstreamSocket.write(head);
-        }
-        upstreamSocket.on("error", () => socket.destroy());
-        socket.on("error", () => upstreamSocket.destroy());
-        upstreamSocket.pipe(socket);
-        socket.pipe(upstreamSocket);
-    });
-    upstream.end();
-};
-//# sourceMappingURL=upgrade-relay.js.map

package/dist/protocol/upgrade-relay.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"upgrade-relay.js","sourceRoot":"","sources":["../../src/protocol/upgrade-relay.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAuB,EAAE,MAAc,EAAE,IAAY,EAAQ,EAAE;IACxF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE;QAC/B,MAAM,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,CAAC,aAAa,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,uCAAuC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,EAAE,CAAC;AACnB,CAAC,CAAC"}

package/src/chores/fix-deps.ts

@@ -1,23 +0,0 @@
-// Automations catalogue template for repairing dependency breakage; nothing creates it until the owner picks it. Wakes
-// on `deps.broken`, whose payload carries `deps.project`, `deps.command`, `deps.exitCode`, `deps.logTail` and
-// `deps.attempt` (consecutive reds since the last green). Once created, each fire holds for `holdForSeconds` before
-// starting, cancellable, never while another agent is mid-turn.
-export const FIX_DEPS_AUTOMATION = {
-    id: "fix-dependency-breakage",
-    title: "Fix what a dependency change broke",
-    event: "deps.broken",
-    holdForSeconds: 60,
-    guard: `test "$(printf '%s' "$AUTOMATION_PAYLOAD" | jq -r '.deps.attempt // 1')" -le 2`,
-    guardNote: "stops after 2 attempts",
-    prompt:
-        "A landed change drifted this workspace's dependencies; the daemon reinstalled them and ran the project's own checks, " +
-        "and they failed. The payload names the project (`deps.project`), the check command (`deps.command`), how it exited " +
-        "(`deps.exitCode`) and the tail of its output (`deps.logTail`); the full log is in the project's `--verify` terminal.\n\n" +
-        "Re-run only what failed to see it first-hand (the failing package's tests or typecheck, not the whole check command), then fix the ROOT CAUSE. That usually means updating call " +
-        "sites, types or tests to match what actually changed: never loosening or deleting the checks, pinning or downgrading " +
-        "dependencies just to silence them, or editing generated files. If the breakage needs a decision only the owner can " +
-        "make (an intentional breaking upgrade, a license change, a dependency that should be dropped), stop and say exactly " +
-        "that instead of guessing.\n\n" +
-        "Finish by re-running what failed and reporting what was broken, what you changed, and whether it passes now; the " +
-        "daemon runs the whole check again once your fix lands.",
-} as const;

package/src/front/terminal-frames.fixture.json

@@ -1,55 +0,0 @@
-{
-    "session": "/system/transport",
-    "upgrade": "intentic-terminal",
-    "frames": [
-        {
-            "encoded": "00000000081b5b33316d68c3a9",
-            "frame": {
-                "kind": "pane",
-                "bytes": "1b5b33316d68c3a9"
-            }
-        },
-        {
-            "encoded": "010000001c7b2274797065223a22696e707574222c2264617461223a22c582227d",
-            "frame": {
-                "kind": "message",
-                "text": "{\"type\":\"input\",\"data\":\"ł\"}"
-            }
-        },
-        {
-            "encoded": "020000001703f0617574686f72697a6174696f6e207265766f6b6564",
-            "frame": {
-                "kind": "close",
-                "code": 1008,
-                "reason": "authorization revoked"
-            }
-        },
-        {
-            "encoded": "0200000000",
-            "frame": {
-                "kind": "close",
-                "reason": ""
-            }
-        },
-        {
-            "encoded": "0300000000",
-            "frame": {
-                "kind": "ping",
-                "bytes": ""
-            }
-        },
-        {
-            "encoded": "040000000101",
-            "frame": {
-                "kind": "pong",
-                "bytes": "01"
-            }
-        }
-    ],
-    "unreadable": [
-        "0500000000",
-        "01ffffffff",
-        "020000000103",
-        "0100000002c328"
-    ]
-}

package/src/front/terminal-frames.test.ts

@@ -1,63 +0,0 @@
-import { readFileSync } from "node:fs";
-import { TERMINAL_UPGRADE, type TerminalFrame, WEBTRANSPORT_PATH, encodeTerminalFrame, terminalFrameReader } from "./terminal-frames.js";
-
-interface FixtureFrame {
-    readonly kind: TerminalFrame["kind"];
-    readonly bytes?: string;
-    readonly text?: string;
-    readonly code?: number;
-    readonly reason?: string;
-}
-
-const FIXTURE = JSON.parse(readFileSync(new URL("./terminal-frames.fixture.json", import.meta.url), "utf8")) as {
-    session: string;
-    upgrade: string;
-    frames: { encoded: string; frame: FixtureFrame }[];
-    unreadable: string[];
-};
-
-const hex = (value: string): Uint8Array => Uint8Array.from(value.match(/../g) ?? [], (pair) => Number.parseInt(pair, 16));
-
-const frameOf = ({ kind, bytes, text, code, reason }: FixtureFrame): TerminalFrame => {
-    if (kind === "message") {
-        return { kind, text: text ?? "" };
-    }
-    if (kind === "close") {
-        return code === undefined ? { kind, reason: reason ?? "" } : { kind, code, reason: reason ?? "" };
-    }
-    return { kind, bytes: hex(bytes ?? "") };
-};
-
-const MAX = 16 * 1024 * 1024;
-
-test("the session's path and the upgrade are the ones the edge and the front answer", () => {
-    expect(FIXTURE.session).toBe(WEBTRANSPORT_PATH);
-    expect(FIXTURE.upgrade).toBe(TERMINAL_UPGRADE);
-});
-
-test("every frame the shared fixture names encodes to its bytes and reads back", () => {
-    expect(FIXTURE.frames.length).toBeGreaterThan(5);
-    for (const { encoded, frame } of FIXTURE.frames) {
-        expect(encodeTerminalFrame(frameOf(frame))).toEqual(hex(encoded));
-        expect(terminalFrameReader(MAX)(hex(encoded))).toEqual([frameOf(frame)]);
-    }
-});
-
-test("frames read the same however the stream's chunks cut them", () => {
-    const whole = hex(FIXTURE.frames.map(({ encoded }) => encoded).join(""));
-    const expected = FIXTURE.frames.map(({ frame }) => frameOf(frame));
-    for (const size of [1, 2, 3, 7, whole.length]) {
-        const read = terminalFrameReader(MAX);
-        const frames: TerminalFrame[] = [];
-        for (let at = 0; at < whole.length; at += size) {
-            frames.push(...read(whole.slice(at, at + size)));
-        }
-        expect(frames).toEqual(expected);
-    }
-});
-
-test("a frame no front sends ends the stream", () => {
-    for (const encoded of FIXTURE.unreadable) {
-        expect(() => terminalFrameReader(MAX)(hex(encoded))).toThrow();
-    }
-});

package/src/front/terminal-frames.ts

@@ -1,102 +0,0 @@
-// A terminal's messages on a stream no WebSocket rides (a WebTransport one): a kind byte, a big-endian u32 length, then
-// that many bytes, one WebSocket message's worth each. The front's Rust codec reads the fixture this file's test reads.
-
-import type { TerminalUpgrade } from "./generated/wire.js";
-
-export const TERMINAL_UPGRADE: TerminalUpgrade = "intentic-terminal";
-
-// Where a browser opens its WebTransport session, on the address of the sandbox the session's streams reach; the edge
-// answers it, never the sandbox.
-export const WEBTRANSPORT_PATH = "/system/transport";
-
-const HEADER_BYTES = 5;
-
-// Indexed by the kind byte.
-const KINDS = ["pane", "message", "close", "ping", "pong"] as const;
-
-export type TerminalFrame =
-    | { readonly kind: "pane" | "ping" | "pong"; readonly bytes: Uint8Array }
-    | { readonly kind: "message"; readonly text: string }
-    // No code is a close that names none, as a WebSocket's may.
-    | { readonly kind: "close"; readonly code?: number; readonly reason: string };
-
-const utf8 = new TextEncoder();
-const strictUtf8 = new TextDecoder("utf-8", { fatal: true });
-
-const payloadOf = (frame: TerminalFrame): Uint8Array => {
-    switch (frame.kind) {
-        case "message":
-            return utf8.encode(frame.text);
-        case "close": {
-            if (frame.code === undefined) {
-                return new Uint8Array(0);
-            }
-            const reason = utf8.encode(frame.reason);
-            const payload = new Uint8Array(2 + reason.length);
-            new DataView(payload.buffer).setUint16(0, frame.code);
-            payload.set(reason, 2);
-            return payload;
-        }
-        default:
-            return frame.bytes;
-    }
-};
-
-export const encodeTerminalFrame = (frame: TerminalFrame): Uint8Array => {
-    const payload = payloadOf(frame);
-    const encoded = new Uint8Array(HEADER_BYTES + payload.length);
-    encoded[0] = KINDS.indexOf(frame.kind);
-    new DataView(encoded.buffer).setUint32(1, payload.length);
-    encoded.set(payload, HEADER_BYTES);
-    return encoded;
-};
-
-const frameOf = (kind: (typeof KINDS)[number], payload: Uint8Array): TerminalFrame => {
-    switch (kind) {
-        case "message":
-            return { kind, text: strictUtf8.decode(payload) };
-        case "close": {
-            if (payload.length === 0) {
-                return { kind, reason: "" };
-            }
-            if (payload.length < 2) {
-                throw new Error("a close frame's code is two bytes");
-            }
-            const code = new DataView(payload.buffer, payload.byteOffset, 2).getUint16(0);
-            return { kind, code, reason: strictUtf8.decode(payload.subarray(2)) };
-        }
-        default:
-            return { kind, bytes: payload };
-    }
-};
-
-// Whole frames out of a stream's chunks however the chunks cut them. Throws on a kind, a length past `maxBytes` or a
-// payload no front sends, since nothing after it on the stream can be framed.
-export const terminalFrameReader = (maxBytes: number): ((chunk: Uint8Array) => TerminalFrame[]) => {
-    let pending = new Uint8Array(0);
-    return (chunk) => {
-        const joined = new Uint8Array(pending.length + chunk.length);
-        joined.set(pending);
-        joined.set(chunk, pending.length);
-        const view = new DataView(joined.buffer);
-        const frames: TerminalFrame[] = [];
-        let at = 0;
-        while (joined.length - at >= HEADER_BYTES) {
-            const kind = KINDS[joined[at] ?? KINDS.length];
-            if (kind === undefined) {
-                throw new Error(`no terminal frame is of kind ${joined[at]}`);
-            }
-            const length = view.getUint32(at + 1);
-            if (length > maxBytes) {
-                throw new Error(`a terminal frame of ${length} bytes is past ${maxBytes}`);
-            }
-            if (joined.length - at - HEADER_BYTES < length) {
-                break;
-            }
-            frames.push(frameOf(kind, joined.subarray(at + HEADER_BYTES, at + HEADER_BYTES + length)));
-            at += HEADER_BYTES + length;
-        }
-        pending = joined.slice(at);
-        return frames;
-    };
-};