@jigging/jig 0.1.0-alpha.1 → 0.1.0-alpha.11

package/libexec/linux-rootless-supervisor.js

@@ -241,16 +241,14 @@ function bubblewrapArguments(configuration) {
     "--unshare-all",
     ...configuration.network === "inherited" ? ["--share-net"] : [],
     "--unshare-user",
-    "--disable-userns",
-    "--assert-userns-disabled",
+    ...configuration.nestedUserNamespaces ? [] : ["--disable-userns", "--assert-userns-disabled"],
     "--as-pid-1",
     "--die-with-parent",
     "--new-session",
     "--clearenv",
     "--proc",
     "/proc",
-    "--remount-ro",
-    "/proc",
+    ...configuration.nestedUserNamespaces ? [] : ["--remount-ro", "/proc"],
     "--dev",
     "/dev",
     "--tmpfs",
@@ -367,6 +365,7 @@ function requireStart(value) {
     "environment",
     "limits",
     "mechanismDigest",
+    "nestedUserNamespaces",
     "network",
     "ownerDigest",
     "ownerStateAllocationDigest",
@@ -379,7 +378,7 @@ function requireStart(value) {
     "sealedPlanDigest",
     "supervisorPath"
   ];
-  if (configuration === null || typeof configuration !== "object" || Array.isArray(configuration) || Object.keys(configuration).sort().join("\x00") !== keys.sort().join("\x00") || !absolute(configuration.delegatedCgroup) || !absolute(configuration.bunHostLibraryPath) || !absolute(configuration.runCgroup) || posix.dirname(configuration.runCgroup) !== configuration.delegatedCgroup || !/^jig-run-[a-z0-9][a-z0-9-]{0,47}-[0-9a-f]{24}$/.test(posix.basename(configuration.runCgroup)) || !configuration.runCgroup.startsWith("/sys/fs/cgroup/") || !absolute(configuration.ownerStateDirectory) || !absolute(configuration.bunPath) || !absolute(configuration.bubblewrapPath) || !absolute(configuration.supervisorPath) || typeof configuration.mechanismDigest !== "string" || !DIGEST.test(configuration.mechanismDigest) || typeof configuration.ownerDigest !== "string" || !DIGEST.test(configuration.ownerDigest) || typeof configuration.sealedPlanDigest !== "string" || !DIGEST.test(configuration.sealedPlanDigest) || typeof configuration.ownerStateAllocationDigest !== "string" || !DIGEST.test(configuration.ownerStateAllocationDigest) || typeof configuration.ownerToken !== "string" || !OWNER_TOKEN.test(configuration.ownerToken) || configuration.network !== "isolated" && configuration.network !== "inherited" || !positiveInteger(configuration.payloadUid) || !positiveInteger(configuration.payloadGid) || !validLimits(configuration.limits) || !validMounts(configuration.readOnlyMounts) || !validEnvironment(configuration.environment) || !Array.isArray(configuration.command) || configuration.command.length === 0 || !absolute(configuration.command[0]) || configuration.command.some((part) => typeof part !== "string" || part.includes("\x00"))) {
+  if (configuration === null || typeof configuration !== "object" || Array.isArray(configuration) || Object.keys(configuration).sort().join("\x00") !== keys.sort().join("\x00") || !absolute(configuration.delegatedCgroup) || !absolute(configuration.bunHostLibraryPath) || !absolute(configuration.runCgroup) || posix.dirname(configuration.runCgroup) !== configuration.delegatedCgroup || !/^jig-run-[a-z0-9][a-z0-9-]{0,47}-[0-9a-f]{24}$/.test(posix.basename(configuration.runCgroup)) || !configuration.runCgroup.startsWith("/sys/fs/cgroup/") || !absolute(configuration.ownerStateDirectory) || !absolute(configuration.bunPath) || !absolute(configuration.bubblewrapPath) || !absolute(configuration.supervisorPath) || typeof configuration.mechanismDigest !== "string" || !DIGEST.test(configuration.mechanismDigest) || typeof configuration.ownerDigest !== "string" || !DIGEST.test(configuration.ownerDigest) || typeof configuration.sealedPlanDigest !== "string" || !DIGEST.test(configuration.sealedPlanDigest) || typeof configuration.ownerStateAllocationDigest !== "string" || !DIGEST.test(configuration.ownerStateAllocationDigest) || typeof configuration.ownerToken !== "string" || !OWNER_TOKEN.test(configuration.ownerToken) || configuration.network !== "isolated" && configuration.network !== "inherited" || typeof configuration.nestedUserNamespaces !== "boolean" || !positiveInteger(configuration.payloadUid) || !positiveInteger(configuration.payloadGid) || !validLimits(configuration.limits) || !validMounts(configuration.readOnlyMounts) || !validEnvironment(configuration.environment) || !Array.isArray(configuration.command) || configuration.command.length === 0 || !absolute(configuration.command[0]) || configuration.command.some((part) => typeof part !== "string" || part.includes("\x00"))) {
     throw new Error("invalid rootless supervisor configuration");
   }
   return configuration;

package/libexec/preparation/bun-native-preparation-worker.js

@@ -21,12 +21,47 @@ function requirePrivateBunLockPolicy(value) {
   if (lock?.lockfileVersion !== 1 || workspaces === undefined || rootWorkspace === undefined || packages === undefined || Object.keys(workspaces).length !== 1 || lock.patchedDependencies !== undefined) {
     throw new TypeError("unsupported Bun lock source");
   }
+  requireRegistryDependencyMaps(rootWorkspace);
   for (const resolution of Object.values(packages)) {
-    if (!Array.isArray(resolution) || resolution.length !== 4 || !isExactRegistryResolution(resolution[0]) || typeof resolution[1] !== "string" || resolution[1] !== "" && resolution[1] !== "https://registry.npmjs.org" && resolution[1] !== "https://registry.npmjs.org/" || ordinaryRecord(resolution[2]) === undefined || !isExactIntegrity(resolution[3])) {
+    const metadata = Array.isArray(resolution) ? ordinaryRecord(resolution[2]) : undefined;
+    if (!Array.isArray(resolution) || resolution.length !== 4 || !isExactRegistryResolution(resolution[0]) || typeof resolution[1] !== "string" || resolution[1] !== "" && resolution[1] !== "https://registry.npmjs.org" && resolution[1] !== "https://registry.npmjs.org/" || metadata === undefined || !isExactIntegrity(resolution[3])) {
       throw new TypeError("unsupported Bun lock source");
     }
+    requireRegistryDependencyMaps(metadata);
   }
 }
+var DEPENDENCY_MAPS = Object.freeze([
+  "dependencies",
+  "devDependencies",
+  "optionalDependencies",
+  "peerDependencies"
+]);
+function requireRegistryDependencyMaps(container) {
+  for (const field of DEPENDENCY_MAPS) {
+    if (container[field] === undefined)
+      continue;
+    const dependencies = ordinaryRecord(container[field]);
+    if (dependencies === undefined)
+      throw new TypeError("unsupported Bun lock source");
+    for (const [name, request] of Object.entries(dependencies)) {
+      if (!isPackageName(name) || !isRegistryRequest(request)) {
+        throw new TypeError("unsupported Bun lock source");
+      }
+    }
+  }
+}
+function isRegistryRequest(value) {
+  if (typeof value !== "string" || Buffer.byteLength(value) > 512)
+    return false;
+  if (!value.startsWith("npm:"))
+    return isRegistrySelector(value);
+  const target = value.slice(4);
+  const separator = target.lastIndexOf("@");
+  return separator > 0 && isPackageName(target.slice(0, separator)) && isRegistrySelector(target.slice(separator + 1));
+}
+function isRegistrySelector(value) {
+  return value.length > 0 && /^[0-9A-Za-z._+*<>=~^| -]+$/.test(value);
+}
 function isExactRegistryResolution(value) {
   if (typeof value !== "string")
     return false;
@@ -35,8 +70,11 @@ function isExactRegistryResolution(value) {
     return false;
   const name = value.slice(0, separator);
   const version = value.slice(separator + 1);
-  const packageName = name.startsWith("@") ? /^@[a-z0-9][a-z0-9._~-]*\/[a-z0-9][a-z0-9._~-]*$/.test(name) : /^[a-z0-9][a-z0-9._~-]*$/.test(name);
-  return packageName && Buffer.byteLength(name) <= 214 && /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/.test(version);
+  return isPackageName(name) && /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/.test(version);
+}
+function isPackageName(value) {
+  const valid = value.startsWith("@") ? /^@[a-z0-9][a-z0-9._~-]*\/[a-z0-9][a-z0-9._~-]*$/.test(value) : /^[a-z0-9][a-z0-9._~-]*$/.test(value);
+  return valid && Buffer.byteLength(value) <= 214;
 }
 function isExactIntegrity(value) {
   if (typeof value !== "string")

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@jigging/jig",
-  "version": "0.1.0-alpha.1",
+  "version": "0.1.0-alpha.11",
   "description": "A local, secure host for admitted FLOW packages",
   "license": "MPL-2.0",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/jigmd/jig.git",
+    "url": "git+https://github.com/jiggy/jig.git",
     "directory": "packages/jig"
   },
   "homepage": "https://jig.md/",
   "bugs": {
-    "url": "https://github.com/jigmd/jig/issues"
+    "url": "https://github.com/jiggy/jig/issues"
   },
   "os": [
     "linux"
@@ -48,6 +48,19 @@
     "libexec/evaluator/project-evaluator-worker.js",
     "libexec/evaluator/project-evaluator-sdk.bundle.js",
     "libexec/evaluator/project-authoring-1.schema.json",
+    "libexec/agent/openai-agent-worker.js",
+    "libexec/agent/openai.LICENSE",
+    "libexec/agent/codex-agent-launcher.js",
+    "libexec/agent/codex-acp.js",
+    "libexec/agent/codex-acp.LICENSE",
+    "libexec/agent/codex-requirements.toml",
+    "libexec/agent/claude-agent-launcher.js",
+    "libexec/agent/claude-agent-acp.js",
+    "libexec/agent/claude-agent-acp.LICENSE",
+    "libexec/agent/claude-agent-sdk.LICENSE",
+    "libexec/agent/pi-agent-launcher.js",
+    "libexec/agent/pi-acp.js",
+    "libexec/agent/pi-acp.LICENSE",
     "libexec/preparation/bun-native-preparation-worker.js",
     "README.md",
     "LICENSE",
@@ -55,20 +68,26 @@
   ],
   "scripts": {
     "verify:build-bun": "bun -e \"if (Bun.version !== '1.3.3' || Bun.revision !== '274e01c737e85f8142070a9745b43a2ba09fce4c') throw new Error('Jig must be built with exact Bun 1.3.3 revision 274e01c737e85f8142070a9745b43a2ba09fce4c')\"",
-    "build": "bun run verify:build-bun && bun run clean && mkdir -p bin libexec/evaluator libexec/preparation && cp scripts/installed-jig.sh bin/jig && chmod 755 bin/jig && bun node_modules/typescript/bin/tsc -p tsconfig.json && bun build src/index.ts --target=bun --format=esm --outfile=dist/index.js && bun build src/installed-cli.ts --target=bun --format=esm --outfile=libexec/installed-cli.js && bun build src/internal/linux-rootless-supervisor.ts --target=bun --format=esm --outfile=libexec/linux-rootless-supervisor.js && bun build src/internal/project-evaluator-worker.ts --target=bun --format=esm --outfile=libexec/evaluator/project-evaluator-worker.js && bun build src/internal/bun-native-preparation-worker.ts --target=bun --format=esm --outfile=libexec/preparation/bun-native-preparation-worker.js && bun build src/project/evaluator-sdk-entry.ts --target=bun --format=esm --outfile=libexec/evaluator/project-evaluator-sdk.bundle.js && cp ../../docs/jig/spec/machine/project-authoring-1.schema.json libexec/evaluator/project-authoring-1.schema.json",
+    "build": "bun run verify:build-bun && bun run clean && mkdir -p bin libexec/agent libexec/evaluator libexec/preparation && cp scripts/installed-jig.sh bin/jig && chmod 755 bin/jig && bun node_modules/typescript/bin/tsc -p tsconfig.json && bun build src/index.ts --target=bun --format=esm --outfile=dist/index.js && bun build src/installed-cli.ts --target=bun --format=esm --outfile=libexec/installed-cli.js && bun build src/internal/linux-rootless-supervisor.ts --target=bun --format=esm --outfile=libexec/linux-rootless-supervisor.js && bun build src/internal/project-evaluator-worker.ts --target=bun --format=esm --outfile=libexec/evaluator/project-evaluator-worker.js && bun build src/internal/openai-agent-worker.ts --target=bun --format=esm --outfile=libexec/agent/openai-agent-worker.js && bun build src/internal/codex-agent-launcher.ts --target=bun --format=esm --outfile=libexec/agent/codex-agent-launcher.js && cp node_modules/@agentclientprotocol/codex-acp/dist/index.js libexec/agent/codex-acp.js && cp node_modules/@agentclientprotocol/codex-acp/LICENSE libexec/agent/codex-acp.LICENSE && cp support/codex-requirements.toml libexec/agent/codex-requirements.toml && bun build src/internal/claude-agent-launcher.ts --target=bun --format=esm --outfile=libexec/agent/claude-agent-launcher.js && bun build node_modules/@agentclientprotocol/claude-agent-acp/dist/index.js --target=bun --format=esm --outfile=libexec/agent/claude-agent-acp.js && cp node_modules/@agentclientprotocol/claude-agent-acp/LICENSE libexec/agent/claude-agent-acp.LICENSE && cp node_modules/@anthropic-ai/claude-agent-sdk/LICENSE.md libexec/agent/claude-agent-sdk.LICENSE && bun build src/internal/pi-agent-launcher.ts --target=bun --format=esm --outfile=libexec/agent/pi-agent-launcher.js && bun build node_modules/pi-acp/dist/index.js --target=bun --format=esm --outfile=libexec/agent/pi-acp.js && cp node_modules/pi-acp/LICENSE libexec/agent/pi-acp.LICENSE && bun build src/internal/bun-native-preparation-worker.ts --target=bun --format=esm --outfile=libexec/preparation/bun-native-preparation-worker.js && bun build src/project/evaluator-sdk-entry.ts --target=bun --format=esm --outfile=libexec/evaluator/project-evaluator-sdk.bundle.js && cp ../../docs/jig/spec/machine/project-authoring-1.schema.json libexec/evaluator/project-authoring-1.schema.json && cp node_modules/openai/LICENSE libexec/agent/openai.LICENSE",
     "clean": "bun -e \"import { rm } from 'node:fs/promises'; for (const path of ['dist', 'bin', 'libexec']) await rm(path, { recursive: true, force: true })\"",
     "prepack": "bun run build",
     "test": "bun test",
     "test:package": "bun run build && bun test/package-smoke.ts",
-    "test:linux-rootless:proof-host": "bun run build && JIG_LINUX_ROOTLESS_HOSTILE=1 bun test test/linux-rootless-delegation-hostile.test.ts --timeout 30000 && JIG_LINUX_ROOTLESS_HOSTILE=1 bun test test/linux-rootless-run.test.ts --timeout 30000 && JIG_LINUX_ROOTLESS_HOSTILE=1 bun test test/bun-native-preparation.test.ts --timeout 120000 && JIG_LINUX_ROOTLESS_HOSTILE=1 bun test test/private-foreground.test.ts --timeout 30000",
+    "test:linux-rootless:proof-host": "bun run build && JIG_LINUX_ROOTLESS_HOSTILE=1 bun test test/linux-rootless-delegation-hostile.test.ts --timeout 30000 && JIG_LINUX_ROOTLESS_HOSTILE=1 bun test test/linux-rootless-run.test.ts --timeout 30000 && JIG_LINUX_ROOTLESS_HOSTILE=1 bun test test/bun-native-preparation.test.ts --timeout 120000 && JIG_LINUX_ROOTLESS_HOSTILE=1 bun test test/private-foreground.test.ts --timeout 30000 && JIG_LINUX_ROOTLESS_HOSTILE=1 bun test test/root-agent-run-lifecycle.test.ts --timeout 180000",
     "check": "bun run build && bun test"
   },
   "dependencies": {
     "@oven/bun-linux-x64-baseline": "1.3.3"
   },
   "devDependencies": {
+    "@agentclientprotocol/claude-agent-acp": "0.73.0",
+    "@agentclientprotocol/codex-acp": "1.8.0",
+    "@agentclientprotocol/sdk": "1.4.0",
     "@types/node": "24.13.3",
+    "openai": "7.9.0",
+    "pi-acp": "0.0.33",
     "typescript": "7.0.2",
-    "yaml": "2.9.0"
+    "yaml": "2.9.0",
+    "zod": "4.3.6"
   }
 }