@jigging/jig 0.1.0-alpha.27 → 0.1.0-alpha.29

package/libexec/evaluator/project-evaluator-worker.js

@@ -504,7 +504,6 @@ function reachableAuthorModules(modules, entryProjectPath) {
 // src/internal/project-evaluator-worker.ts
 var PROTOCOL = PRIVATE_AUTHOR_EVALUATOR_PROTOCOL;
 var MAX_REQUEST_BYTES = 2 * 1024 * 1024;
-var VM_TIMEOUT_MS = 1000;
 var SDK_ENTRY = process.env.JIG_EVALUATOR_SDK ?? `${PRIVATE_AUTHOR_EVALUATOR_DIRECTORY}/project-evaluator-sdk.bundle.js`;
 delete process.env.JIG_EVALUATOR_SDK;
 var EVALUATION_CODES = new Set([
@@ -732,17 +731,11 @@ function evaluate(code) {
     codeGeneration: { strings: false, wasm: false },
     name: "jig-author-declaration"
   });
-  new vm.Script(guestBootstrap(), { filename: "/jig-bootstrap.js" }).runInContext(context, {
-    timeout: VM_TIMEOUT_MS
-  });
+  new vm.Script(guestBootstrap(), { filename: "/jig-bootstrap.js" }).runInContext(context);
   const invocation = `${code}
 (__jigModule.exports, __jigRequire, __jigModule, "/author.ts", "/");`;
-  new vm.Script(invocation, { filename: "/author.ts" }).runInContext(context, {
-    timeout: VM_TIMEOUT_MS
-  });
-  const exports = new vm.Script("__jigModule.exports").runInContext(context, {
-    timeout: VM_TIMEOUT_MS
-  });
+  new vm.Script(invocation, { filename: "/author.ts" }).runInContext(context);
+  const exports = new vm.Script("__jigModule.exports").runInContext(context);
   if (!isRecord(exports) || Object.keys(exports).length !== 1 || !("default" in exports)) {
     throw tagged("PROJECT_DEFAULT_EXPORT", "compiled author module did not expose one default value");
   }
@@ -816,9 +809,6 @@ function tagged(code, message) {
 function errorCode(error) {
   if (error instanceof PrivateAuthorEvaluatorChildError)
     return error.code;
-  if (typeof error === "object" && error !== null && "code" in error && error.code === "ERR_SCRIPT_EXECUTION_TIMEOUT") {
-    return "PROJECT_EVALUATION_LIMIT";
-  }
   if (typeof error === "object" && error !== null && "code" in error && typeof error.code === "string" && EVALUATION_CODES.has(error.code)) {
     return error.code;
   }

package/libexec/installed-cli.js

@@ -9081,13 +9081,13 @@ import { fileURLToPath as fileURLToPath5 } from "url";
 // src/cli.ts
 import { randomBytes as randomBytes7 } from "crypto";
 import { lstat as lstat19 } from "fs/promises";
-import { basename as basename4, resolve as resolve11 } from "path";
+import { basename as basename5, resolve as resolve11 } from "path";
 import { createInterface } from "readline";
 import { setTimeout as delay } from "timers/promises";
 // package.json
 var package_default = {
   name: "@jigging/jig",
-  version: "0.1.0-alpha.27",
+  version: "0.1.0-alpha.29",
   description: "A local, secure host for admitted FLOW packages",
   license: "SEE LICENSE IN LICENSE.md",
   repository: {
@@ -26119,10 +26119,20 @@ function privateMacosExecutionPlan(intent, allocation) {
     return value;
   };
   const embedded = (value) => {
-    let result2 = value;
-    for (const [destination, source] of mappings)
-      result2 = result2.split(destination).join(source);
-    return result2.split("/jig-output").join(join4(data, "output")).split("/tmp/").join(`${join4(data, "tmp")}/`);
+    try {
+      let changed = false;
+      const parsed = JSON.parse(value, (_name, entry) => {
+        if (typeof entry !== "string")
+          return entry;
+        const relocated = path(entry);
+        if (relocated !== entry)
+          changed = true;
+        return relocated;
+      });
+      return changed ? JSON.stringify(parsed) : value;
+    } catch {
+      return path(value);
+    }
   };
   const environment = Object.fromEntries(Object.entries(intent.environment ?? {}).map(([name, value]) => [
     name,
@@ -34718,8 +34728,7 @@ import { join as join18 } from "path";
 // src/internal/native-agent-executable.ts
 import { constants as constants22 } from "fs";
 import { access as access4, lstat as lstat11, readlink as readlink2, realpath as realpath11 } from "fs/promises";
-import { delimiter, dirname as dirname9, isAbsolute as isAbsolute3, join as join16, relative as relative2, resolve as resolve7, sep } from "path";
-
+import { basename, delimiter, dirname as dirname9, isAbsolute as isAbsolute3, join as join16, relative as relative2, resolve as resolve7, sep } from "path";
 class PrivateNativeAgentExecutableUnavailableError extends Error {
   client;
   constructor(client) {
@@ -34754,7 +34763,9 @@ async function resolvePrivateNativeAgentExecutable(client, environment, projectD
           throw error;
       }
     }
-  } catch {
+  } catch (error) {
+    if (error instanceof PrivateAcpSetupError)
+      throw error;
     throw new PrivateNativeAgentExecutableUnavailableError(client);
   }
   throw new PrivateNativeAgentExecutableUnavailableError(client);
@@ -34810,6 +34821,8 @@ async function outsideProject(candidate, forbidden) {
 }
 async function executable(candidate) {
   const path2 = await realpath11(candidate);
+  if (basename(path2) === "volta-shim")
+    throw new PrivateAcpSetupError("wrapper");
   const information = await lstat11(path2);
   if (!information.isFile() || (information.mode & 73) === 0) {
     throw Object.assign(new Error("not an executable file"), { code: "EACCES" });
@@ -35502,7 +35515,7 @@ async function ordinaryFile(path2, label) {
 // src/internal/codex-agent-provider.ts
 import { lstat as lstat15, readFile as readFile4, realpath as realpath15 } from "fs/promises";
 import { homedir as homedir2 } from "os";
-import { basename, dirname as dirname12, join as join19 } from "path";
+import { basename as basename2, dirname as dirname12, join as join19 } from "path";
 var CODEX_CLIENT = "openai-codex";
 var SANDBOX_LAUNCHER_PATH2 = "/agent/codex-agent-launcher.js";
 var SANDBOX_ADAPTER_PATH2 = "/agent/codex-acp.js";
@@ -35549,7 +35562,9 @@ async function openPrivateCodexAgentProvider(releaseRoot, environment = process.
   let executablePath;
   try {
     executablePath = await resolvePrivateNativeAgentExecutable("codex", environment, projectDirectory);
-  } catch {
+  } catch (error) {
+    if (error instanceof PrivateAcpSetupError)
+      throw error;
     throw new PrivateCodexExecutableUnavailableError("the native Codex executable is unavailable");
   }
   let runtime;
@@ -35815,7 +35830,7 @@ async function nativeBubblewrapFor(executablePath, environment, projectDirectory
   const executableDirectory = dirname12(executablePath);
   const adjacent = join19(executableDirectory, "codex-resources", "bwrap");
   const packageResource = join19(executableDirectory, "..", "codex-resources", "bwrap");
-  const candidates = basename(executableDirectory) === "bin" ? [packageResource, adjacent] : [adjacent, packageResource];
+  const candidates = basename2(executableDirectory) === "bin" ? [packageResource, adjacent] : [adjacent, packageResource];
   try {
     for (const candidate of candidates) {
       let path2;
@@ -41273,7 +41288,7 @@ function hasCode3(error, code2) {
 import { randomBytes as randomBytes6 } from "crypto";
 import { constants as constants24 } from "fs";
 import { lstat as lstat17, open as open14, realpath as realpath18 } from "fs/promises";
-import { basename as basename2, dirname as dirname14, resolve as resolve9 } from "path";
+import { basename as basename3, dirname as dirname14, resolve as resolve9 } from "path";
 init_file_input();
 async function installedDescriptor(selector, destination) {
   let name;
@@ -41308,7 +41323,7 @@ async function importContract(source, destination, signal) {
   try {
     signal?.throwIfAborted();
     const selected = source.startsWith("npm:") ? await installedDescriptor(source, destination) : source;
-    const name = basename2(selected);
+    const name = basename3(selected);
     root = await open14(await realpath18(dirname14(resolve9(selected))), constants24.O_RDONLY | constants24.O_DIRECTORY | constants24.O_NOFOLLOW);
     const capture = (paths3) => captureOpenedPackageDirectory(selected, root, {
       includes: (path2) => paths3.some((p) => p === path2 || p.startsWith(`${path2}/`)),
@@ -41332,7 +41347,7 @@ async function importContract(source, destination, signal) {
     signal?.throwIfAborted();
     phase = "destination";
     const target = resolve9(destination);
-    const leaf = privateFilePath(basename2(target));
+    const leaf = privateFilePath(basename3(target));
     parent = await open14(await realpath18(dirname14(target)), constants24.O_RDONLY | constants24.O_DIRECTORY | constants24.O_NOFOLLOW);
     const allocation = privateChildLocation(parent, `.jig-contract-${randomBytes6(16).toString("hex")}`);
     await mkdirPrivateFile(allocation);
@@ -41492,7 +41507,7 @@ import {
   unlink as unlink3,
   writeFile as writeFile2
 } from "fs/promises";
-import { basename as basename3, join as join22, resolve as resolve10 } from "path";
+import { basename as basename4, join as join22, resolve as resolve10 } from "path";
 init_file_input();
 var DEFAULT_FILE_SYSTEM = {
   mkdir: mkdir6,
@@ -41501,7 +41516,7 @@ var DEFAULT_FILE_SYSTEM = {
   writeFile: writeFile2
 };
 var GREETING_SDK_VERSION = "0.1.0-alpha.13";
-var AGENT_ACP_VERSION = "0.1.0-alpha.6";
+var AGENT_ACP_VERSION = "0.1.0-alpha.7";
 
 class ProjectInitError extends Error {
   code;
@@ -41577,14 +41592,14 @@ async function createFlow(project, name, uses = [], signal) {
         throw new ProjectInitError("invalid", "JIG_NEW_EXISTS", "That Flow directory already exists. Choose a different name; existing files were not changed.");
       throw error;
     }
-    const projectName = basename3(resolve10(project)).toLowerCase().replace(/[^a-z0-9-]/g, "-").slice(0, 64);
+    const projectName = basename4(resolve10(project)).toLowerCase().replace(/[^a-z0-9-]/g, "-").slice(0, 64);
     const authoredAt = staged ?? destination;
     const declarations = Object.create(null);
     if (uses.length > 0)
       await mkdir6(join22(authoredAt, "contracts"));
     for (const { slot, source } of uses) {
       const imported = await importContract(source.startsWith("npm:") ? source : resolve10(project, source), join22(authoredAt, "contracts", slot), signal);
-      declarations[slot] = { contract: `./contracts/${slot}/${basename3(imported.descriptor)}` };
+      declarations[slot] = { contract: `./contracts/${slot}/${basename4(imported.descriptor)}` };
     }
     const files = {
       "FLOW.meta.json": `${JSON.stringify({ name, description: "Describe what this method does.", ...uses.length === 0 ? {} : { uses: declarations } }, null, 2)}
@@ -41611,7 +41626,7 @@ await handle(async (run) => {
         const flowsDirectory = await openPrivateChild(projectDirectory, "flows", constants25.O_RDONLY | constants25.O_DIRECTORY | constants25.O_NOFOLLOW);
         try {
           signal?.throwIfAborted();
-          privatePublishDirectory(flowsDirectory.fd, basename3(staged), name, projectDirectory.fd);
+          privatePublishDirectory(flowsDirectory.fd, basename4(staged), name, projectDirectory.fd);
           staged = undefined;
         } finally {
           await flowsDirectory.close();
@@ -42194,7 +42209,7 @@ async function executeImportContract(arguments_, runtime) {
   try {
     const result2 = await importContract(arguments_[1].startsWith("npm:") ? arguments_[1] : resolve11(runtime.currentDirectory, arguments_[1]), resolve11(runtime.currentDirectory, arguments_[2]), runtime.signal);
     runtime.writeOutput(`Imported ${result2.files} contract files into ${asciiJsonString(arguments_[2])}.
-Use ${asciiJsonString(basename4(result2.descriptor))} in the caller's slot declaration, then review the project.
+Use ${asciiJsonString(basename5(result2.descriptor))} in the caller's slot declaration, then review the project.
 `);
     return 0;
   } catch (error) {
@@ -42350,7 +42365,7 @@ function shellWord(value) {
 async function executeReview(arguments_, runtime) {
   let resolutionNoticeShown = false;
   const parsed = parseReview(arguments_, runtime.currentDirectory);
-  runtime.progress.note(`Reviewing ${asciiJsonString(basename4(resolve11(runtime.currentDirectory, parsed.project)))}`);
+  runtime.progress.note(`Reviewing ${asciiJsonString(basename5(resolve11(runtime.currentDirectory, parsed.project)))}`);
   const result2 = await withProjectSession(parsed.project, runtime, async (session) => {
     const plan = await privateProfileSpan("project-planning", () => session.plan({ lockMode: "update" }));
     runtime.progress.complete(true);
@@ -42907,6 +42922,7 @@ function renderFailure(error, runtime) {
       PROJECT_BINDING_ATTACHMENTS_INVALID: "check the Binding attachment directories: use stable project-relative regular-file trees without links, protected state or nested mounts, within the file limits",
       PROJECT_BINDING_ATTACHMENT_UNDECLARED: "select only attachment names declared read-only in the Flow contract",
       PROJECT_BINDING_ATTACHMENTS_NOT_CAPTURED: "the selected Binding files could not be retained consistently; review stable source directories again",
+      PROJECT_CHECKPOINT_ATTACHMENT: "declare a read-write attachment in FLOW.contract.json for the root Flow that uses Run Checkpoint",
       PROJECT_BINDING_PACKAGE_MISSING: "the Binding references a Flow not selected by jig.ts; correct the path or project membership",
       PROJECT_ENTRYPOINT_INVALID: "Fix entrypoint in jig.ts: use an invokable Flow or Binding followed by valid jig run invocation arguments, project-relative paths, and declared unbound attachments or outgoing channels. Operator flags such as --verification are not project defaults.",
       PROJECT_DEFAULT_MISSING: "defaultProviders in jig.ts names a missing Flow or Binding; create the selected local Binding and include its Flow in discovery, or correct the selector. Provider selection does not create Bindings",
@@ -43174,7 +43190,7 @@ import { dirname as dirname16, join as join24 } from "path";
 import { randomBytes as randomBytes8 } from "crypto";
 import { closeSync as closeSync13, constants as constants27, fstatSync as fstatSync11 } from "fs";
 import { statfs as statfs3 } from "fs/promises";
-import { basename as basename5, dirname as dirname15, resolve as resolve12 } from "path";
+import { basename as basename6, dirname as dirname15, resolve as resolve12 } from "path";
 
 // src/internal/file-delivery-storage.ts
 import { constants as constants26 } from "fs";
@@ -43273,7 +43289,7 @@ class PrivateFileDeliveryOwner {
     let parent;
     try {
       this.signal.throwIfAborted();
-      const destination = resolve12(directory), parentPath = dirname15(destination), leaf = privateFilePath(basename5(destination));
+      const destination = resolve12(directory), parentPath = dirname15(destination), leaf = privateFilePath(basename6(destination));
       if (destination === parentPath || leaf.includes("/"))
         throw new TypeError("output requires a new directory");
       const selected = privateOpenFileRoot(parentPath);
@@ -54596,7 +54612,8 @@ function isCandidateDiagnosticCode(code2) {
     "PACKAGE_SPECIAL_FILE",
     "PACKAGE_SYMLINK",
     "PROJECT_FLOW_COLLISION",
-    "PROJECT_FLOW_MODE_UNSUPPORTED"
+    "PROJECT_FLOW_MODE_UNSUPPORTED",
+    "PROJECT_CHECKPOINT_ATTACHMENT"
   ].includes(code2);
 }
 function isRootIdentityLoss(error, owner) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jigging/jig",
-  "version": "0.1.0-alpha.27",
+  "version": "0.1.0-alpha.29",
   "description": "A local, secure host for admitted FLOW packages",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {