@lensagent/core 0.1.0 → 0.1.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lensagent/core",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Lens Harness kernel and HTTP server.",
   "license": "MIT",
   "repository": {
@@ -14,8 +14,10 @@
   "exports": {
     ".": {
       "types": "./dist/launch.d.ts",
-      "import": "./dist/launch.js"
-    }
+      "import": "./dist/launch.js",
+      "default": "./dist/launch.js"
+    },
+    "./package.json": "./package.json"
   },
   "types": "./dist/launch.d.ts",
   "bin": {
@@ -24,8 +26,8 @@
   "lens": {
     "component": "lens-core",
     "protocols": {
-      "facet-core-api": 4,
-      "core-executor-rpc": 4
+      "facet-core-api": 5,
+      "core-executor-rpc": 10
     }
   },
   "files": [
@@ -48,14 +50,20 @@
     "ai": "7.0.52",
     "ajv": "8.20.0",
     "better-sqlite3": "13.0.3",
-    "fastify": "5.11.2",
+    "dom-serializer": "3.1.1",
+    "fastify": "5.12.5",
+    "htmlparser2": "12.0.0",
     "json-canonicalize": "2.0.0",
-    "jsonc-parser": "3.3.1"
+    "jsonc-parser": "3.3.1",
+    "quickjs-emscripten": "0.32.0",
+    "turndown": "7.2.4",
+    "yaml": "2.9.1"
   },
   "devDependencies": {
     "@eslint/js": "9.39.2",
     "@types/better-sqlite3": "7.6.13",
     "@types/node": "24.10.1",
+    "@types/turndown": "5.0.6",
     "eslint": "9.39.2",
     "tsx": "4.21.0",
     "typescript": "5.9.3",
@@ -66,8 +74,10 @@
     "dev": "tsx src/entry/node.ts",
     "start": "node dist/entry/node.js",
     "storage:rebuild": "tsx src/entry/rebuild.ts",
+    "pair:approve": "tsx src/entry/pair.ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "lint": "eslint .",
-    "secret-scan": "node scripts/secret-scan.mjs"
+    "test": "node scripts/run-tests.mjs",
+    "betterleaks": "node scripts/betterleaks.mjs"
   }
 }

package/proto/executor.proto

@@ -3,12 +3,14 @@ syntax = "proto3";
 package lens.executor.v1;
 
 service Executor {
+  rpc QueryTaskAudit(QueryTaskAuditRequest) returns (QueryTaskAuditResponse);
   rpc Health(HealthRequest) returns (HealthResponse);
   rpc Identity(IdentityRequest) returns (IdentityResponse);
   rpc Shutdown(ShutdownRequest) returns (ShutdownResponse);
   rpc ReadFile(ReadFileRequest) returns (ReadFileResponse);
-  rpc WriteFile(WriteFileRequest) returns (WriteFileResponse);
-  rpc EditFile(EditFileRequest) returns (EditFileResponse);
+  rpc ViewImage(ReadFileRequest) returns (ViewImageResponse);
+  rpc EditFile(EditFileRequest) returns (FileChangeResponse);
+  rpc PatchFile(PatchFileRequest) returns (FileChangeResponse);
   rpc RevertCall(RevertCallRequest) returns (RevertCallResponse);
   rpc DescribeCallHistory(DescribeCallHistoryRequest) returns (DescribeCallHistoryResponse);
   rpc DeleteCallHistory(DeleteCallHistoryRequest) returns (DeleteCallHistoryResponse);
@@ -16,8 +18,6 @@ service Executor {
   rpc Grep(GrepRequest) returns (GrepResponse);
   rpc BrowseProject(BrowseProjectRequest) returns (BrowseProjectResponse);
   rpc RunCommand(RunCommandRequest) returns (RunCommandResponse);
-  rpc GitRun(GitRunRequest) returns (GitRunResponse);
-  rpc InternetSearch(InternetSearchRequest) returns (InternetSearchResponse);
   rpc ListAllowedParent(ListAllowedParentRequest) returns (ListAllowedParentResponse);
   rpc ValidateWorkspacePaths(ValidateWorkspacePathsRequest) returns (ValidateWorkspacePathsResponse);
   rpc OpenInFileManager(OpenInFileManagerRequest) returns (OpenInFileManagerResponse);
@@ -70,44 +70,89 @@ message ReadFileRequest {
   repeated string workspace_paths = 1;
   string path = 2;
   bool full_access = 3;
+  int64 start_line = 4; // 1-based; zero defaults to 1.
+  int32 max_lines = 5; // Zero defaults to 2000; at most 10000.
+  int32 max_bytes = 6; // Zero defaults to 65536; otherwise 4..262144.
+  int64 offset = 7; // UTF-8 byte offset for continuation; excludes start_line > 1.
 }
 message ReadFileResponse {
   string content = 1;
   bool truncated = 2;
+  int64 offset = 3;
+  int64 next_offset = 4;
+  bool eof = 5;
+  int64 size_bytes = 6;
+  string kind = 7; // file | directory; directory content lists sorted names, with / for directories.
+  int64 total_entries = 8; // Directory entry count, zero for a file.
+  EvidenceReceipt evidence = 9;
 }
 
-message WriteFileRequest {
-  repeated string workspace_paths = 1;
-  string path = 2;
-  string content = 3;
-  bool full_access = 4;
-  // Identify the change in the Executor's file history. Both are required: the Executor records
-  // the exact before/after bytes under (workspace_id, call_id) so RevertCall can restore them.
-  string workspace_id = 5;
-  string call_id = 6;
+// Metadata only; filtered server-side to the requesting declared pairing identity.
+message QueryTaskAuditRequest {
+  string project_id = 1;
+  string task_id = 2;
+  int32 limit = 3;
+  string cursor = 4;
+}
+message QueryTaskAuditResponse {
+  repeated string events_json = 1;
+  string next_cursor = 2;
+  bool incomplete_tail = 3;
+  string integrity = 4;
+  string ordering = 5;
+  string scope = 6;
+  string completeness = 7;
 }
-message WriteFileResponse {
-  string relative_path = 1;
-  int64 bytes = 2;
+
+// Evidence for the actual returned payload. Not a hash/version of unreturned file bytes.
+message EvidenceReceipt {
+  string evidence_id = 1;
+  string content_sha256 = 2;
+  int64 returned_bytes = 3;
+  string scope = 4;
+  int64 offset = 5;
+  int64 next_offset = 6;
+  int64 source_size_bytes = 7;
+  bool complete = 8;
 }
 
+message ViewImageResponse {
+  string data = 1; // Base64-encoded image bytes, at most 5 MiB before encoding.
+  string media_type = 2;
+  EvidenceReceipt evidence = 3;
+}
+
+message FileEdit {
+  string old_string = 1;
+  string new_string = 2;
+  bool replace_all = 3;
+}
 message EditFileRequest {
   repeated string workspace_paths = 1;
   string path = 2;
-  string old_string = 3;
-  string new_string = 4;
-  bool replace_all = 5;
+  string operation = 3; // create | edit | rewrite
+  optional string content = 4; // Required for create/rewrite, including an empty string.
+  repeated FileEdit edits = 5; // Required for edit; applied in order, then committed once.
   bool full_access = 6;
   string workspace_id = 7;
   string call_id = 8;
 }
-message EditFileResponse {
-  string relative_path = 1;
-  int32 replacements = 2;
-  int64 bytes = 3;
+message PatchFileRequest {
+  repeated string workspace_paths = 1;
+  string path = 2;
+  string patch = 3; // Update hunks only; every hunk refers to the original file.
+  bool full_access = 4;
+  string workspace_id = 5;
+  string call_id = 6;
+}
+message FileChangeResponse {
+  string path = 1;
+  bool changed = 2;
+  int32 units_applied = 3;
+  int64 bytes_written = 4;
 }
 
-// Restores the files recorded for one or more previous WriteFile/EditFile Calls. The Executor
+// Restores the files recorded for one or more previous EditFile/PatchFile Calls. The Executor
 // orders them by its own per-Workspace sequence and verifies, for every path, that the content on
 // disk is still what the Call left behind. Any mismatch is reported in `conflicts` and nothing is
 // written unless `force` is set.
@@ -252,37 +297,6 @@ message RunCommandResponse {
   bool stderr_truncated = 7;
 }
 
-message GitRunRequest {
-  repeated string workspace_paths = 1;
-  repeated string args = 2;
-  string cwd = 3;
-  int32 timeout_ms = 4;
-  int32 output_limit_bytes = 5;
-  bool full_access = 6;
-}
-message GitRunResponse {
-  int32 exit_code = 1;
-  string stdout = 2;
-  string stderr = 3;
-  int64 duration_ms = 4;
-  bool stdout_truncated = 5;
-  bool stderr_truncated = 6;
-}
-
-message InternetSearchRequest {
-  string query = 1;
-  int32 max_results = 2;
-}
-message SearchResult {
-  string title = 1;
-  string url = 2;
-  string snippet = 3;
-}
-message InternetSearchResponse {
-  repeated SearchResult results = 1;
-  string provider = 2;
-}
-
 message ListAllowedParentRequest { string path = 1; }
 message ListAllowedParentResponse {
   string allowed_parent_dir = 1;