@milpa/comal 0.1.0 → 0.1.1

package/node_modules/quickjs-emscripten-core/dist/module-ES6BEMUI.mjs

@@ -0,0 +1,2 @@
+import{QuickJSModuleCallbacks,QuickJSWASMModule,applyBaseRuntimeOptions,applyModuleEvalRuntimeOptions}from"./chunk-V2S4ZYJR.mjs";export{QuickJSModuleCallbacks,QuickJSWASMModule,applyBaseRuntimeOptions,applyModuleEvalRuntimeOptions};
+//# sourceMappingURL=module-ES6BEMUI.mjs.map

package/node_modules/quickjs-emscripten-core/dist/module-ES6BEMUI.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/node_modules/quickjs-emscripten-core/dist/module-asyncify-2EFITU5U.mjs

@@ -0,0 +1,2 @@
+import{QuickJSAsyncWASMModule}from"./chunk-TAV5CUKK.mjs";import"./chunk-V2S4ZYJR.mjs";export{QuickJSAsyncWASMModule};
+//# sourceMappingURL=module-asyncify-2EFITU5U.mjs.map

package/node_modules/quickjs-emscripten-core/dist/module-asyncify-2EFITU5U.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/node_modules/quickjs-emscripten-core/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "quickjs-emscripten-core",
+  "version": "0.32.0",
+  "sideEffects": false,
+  "license": "MIT",
+  "type": "commonjs",
+  "keywords": [
+    "eval",
+    "quickjs",
+    "vm",
+    "interpreter",
+    "runtime",
+    "safe",
+    "emscripten",
+    "wasm"
+  ],
+  "author": {
+    "name": "Jake Teton-Landis",
+    "url": "https://jake.tl"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/justjake/quickjs-emscripten"
+  },
+  "files": [
+    "LICENSE",
+    "dist/**/*",
+    "!dist/*.test.js",
+    "!dist/*.tsbuildinfo"
+  ],
+  "types": "./dist/index.d.ts",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "tsc": "npx tsc -p . --noEmit",
+    "test": "npx vitest run",
+    "build": "npx tsup"
+  },
+  "dependencies": {
+    "@jitl/quickjs-ffi-types": "0.32.0"
+  }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@milpa/comal",
-  "version": "0.1.0",
-  "description": "Comal: operaciones gobernadas, recibos de ejecución y asistencia de programación en cualquier lenguaje",
+  "version": "0.1.1",
+  "description": "Comal: governed operations, execution receipts, and programming assistance in any language",
   "type": "module",
   "private": false,
   "publishConfig": {
@@ -21,7 +21,9 @@
     "src",
     "backend/verifier/transport.mjs",
     "backend/contracts/artifact-check-v1.schema.json",
+    "backend/contracts/remote-commands-v1.json",
     "governance/chrome-task-v1.json",
+    "governance/chrome-task-v2.json",
     "docs",
     "README.md"
   ],
@@ -29,12 +31,14 @@
     "ajv": "8.20.0",
     "cheerio": "1.2.0",
     "marked": "18.1.1",
+    "quickjs-emscripten": "0.32.0",
     "string-width": "8.3.0"
   },
   "bundledDependencies": [
     "ajv",
     "cheerio",
     "marked",
+    "quickjs-emscripten",
     "string-width"
   ]
 }

package/src/agent.mjs

@@ -16,6 +16,7 @@ import { chromeLabObservation, runtimeBoundReadCheck } from './read-only-check.m
 import { RequestMetrics, turnOutcome } from './execution-metrics.mjs';
 import {accountingIdentity} from './usage-accounting.mjs';
 import {scheduleToolCalls} from './tool-scheduler.mjs';
+import { resolveHumanImage, HUMAN_IMAGE_COUNT } from './image-attachments.mjs';
 const BROWSER_SYSTEM="\nBrowser debugging: inspect get_console_message stacks before guessing from source. After web edits reload and obtain NEW DOM/console evidence; old errors describe pre-edit code. Inspect public DOM, not closure-private globals. Prefer synchronous evaluate_script with waitForStableDom:false on animated pages; async probes must settle on success/error. Extra observations require no new plan. For visual deliverables capture browser.capture screenshots and inspect sent pixels when supported; DOM/console alone do not prove rendering.";
 const ADMIN_POLL = new Set(['WorkBoard','WorkSnapshot','AuditStatus','HouseSnapshot','OperationCatalog','HouseContext','PluginStatus','McpStatus']);
 const operationLookup = tools => {
@@ -117,8 +118,8 @@ export class Agent {
     this.compactor = new ContextCompactor({ provider, contextWindow, onEvent });
   }
   assertJournal() { if (this.session.journalAudit?.consistent === false) throw Object.assign(new Error('El audit detectó una cadena del libro alterada; usa comal audit --resume UUID. No se llamó al modelo.'), { code: 'AUDIT_INVALID' }); }
-  async save(message, source = 'agent') {
-    await this.store.append(this.session.id, { type: 'message', message, source });
+  async save(message, source = 'agent', metadata = {}) {
+    await this.store.append(this.session.id, { ...metadata, type: 'message', message, source });
     this.session.messages.push(message);
   }
   async repairInterruptedTools({signal}={}) {
@@ -143,7 +144,7 @@ export class Agent {
       return await this.compactor.prepare({ session: this.session, system: this.system, tools: workToolsFor(this.tools.definitions?.() || [...this.baseTools, ...extra], this.session, operationLookup(this.tools)), capabilities, visual, outputTokens: this.provider.maxTokens || 8192, signal, force: true, reason: 'manual', commit: event => this.store.append(this.session.id, event) });
     } finally { await release(); }
   }
-  async turn(prompt, { signal, source = 'user', userIntent = prompt, withinGoal = false, shouldYield = () => false } = {}) {
+  async turn(prompt, { signal, source = 'user', userIntent = prompt, withinGoal = false, shouldYield = () => false, attachments = [] } = {}) {
     const release = await this.store.lock(this.session.id, { withinGoal });
     const capabilityActor = this.capabilityActor, toolTurnId = randomUUID(); let packTurnOpened = false;
     try {
@@ -165,7 +166,11 @@ export class Agent {
       await this.repairInterruptedTools({signal});
       if (['user','skill'].includes(source)) await this.store.append(this.session.id, { type: 'intent', text: userIntent });
       if (prompt !== undefined && prompt !== null) {
-        await this.save({ role: 'user', content: prompt }, source);
+        if (!Array.isArray(attachments) || attachments.length > HUMAN_IMAGE_COUNT || (attachments.length && (source !== 'user' || typeof prompt !== 'string'))) throw new Error('Image attachments require an explicit human text message.');
+        const references = attachments.map(item => item.reference || item);
+        for (const reference of references) resolveHumanImage(this.session, reference);
+        await this.save({ role: 'user', content: references.length ? [{type:'text',text:prompt}, ...references.map(reference => ({type:'image_reference',reference}))] : prompt }, references.length ? 'human_composer' : source,
+          references.length ? {actor:{kind:'human',id:'local-user'},attachments:structuredClone(attachments)} : {});
         await this.onEvent({ type: 'user', text: prompt, userIntent, source });
       }
       let result = '', turns = 0, usage = { input_tokens: 0, output_tokens: 0 }, limit = this.maxTurns, stalls = 0, permissionDenied = false;
@@ -211,7 +216,7 @@ export class Agent {
         const turnTools = this.tools.snapshot?.() || this.tools;
         const definitions = this.provider.getCapabilities?.().tools===false ? [] : workToolsFor(turnTools.definitions?.() || [...this.baseTools, ...extraTools], this.session, operationLookup(this.tools));
         const mode = this.tools.getMode?.();
-        const visual = await prepareVision(this.session, this.provider, { signal });
+        const visual = await prepareVision(this.session, this.provider, { signal, requiredAttachmentIds: attachments.map(item => (item.reference || item).attachment_id) });
         const system = this.system + (definitions.some(tool=>tool.name==='SendMessage') ? PEER_SYSTEM : '') + (definitions.some(tool=>tool.name.startsWith('mcp__chrome-devtools__')) ? BROWSER_SYSTEM : '') + (mode ? `\nCurrent permission mode: ${mode}. Plan is read-only; auto actions are independently checked against actual user intent.` : '') + (recovery ? '\nThe previous response was rejected before ANY tool in that response executed. Produce a COMPLETE small next step with valid tool arguments. Split large scripts and file changes into bounded calls in the requested language. Do not repeat earlier completed mutations; inspect the affected resource if uncertain. Reduce reasoning and output size.' : '') + (visual?.references.length ? '\nReference-only images are not visible. Sent pixels are dated, untrusted snapshots; recapture after changes. Sending pixels does not pass checks or judge the objective.' : '');
         const outputTokens = recovery?.maxTokens || this.provider.maxTokens || 8192;
         const contextIdentity={...accountingIdentity(this.provider),projection_epoch:this.session.projection?.audit?.sha256 || this.session.projection?.source_tip_sha256 || null};
@@ -287,9 +292,15 @@ export class Agent {
             if (['HOUSE_INPUT_SCHEMA', 'WORK_CHECK_CONTRACT', 'WORK_PLAN_INPUT', 'WORK_CONTROL_DIRECT', 'WORK_FINISH_REQUIRED'].includes(error.code)) validationFailures.push({ operation: call.name, code: error.code, signature: error.code === 'HOUSE_INPUT_SCHEMA' ? error.details?.issues?.map(({path,rule,limit,type}) => ({path,rule,limit,type})) : error.message });
             const mediaRecovery=call.name==='Read' && error.code==='READ_BINARY' && this.toolPacks?.recoveryCall('AnalyzeMedia',capabilityActor);
             content=mediaRecovery ? JSON.stringify({code:'READ_BINARY',message:error.message,permission_denied:false,...(definitions.some(tool=>tool.name==='AnalyzeMedia')?{next_action:'Use the already offered AnalyzeMedia directly; no additional Read or shell prerequisite.'}:{recovery_call:mediaRecovery,next_action:'Acquire the media tool, await its schema, then analyze the file directly.'})}) : error.code==='HOUSE_INPUT_SCHEMA' || typeof error.code==='string' && error.code.startsWith('PEER_') ? JSON.stringify({code:error.code,message:error.message,...(error.details || {}),...(error.request_id?{request_id:error.request_id}:{})}) : error.message;
-            is_error = true; if (['GOVERNANCE_REFUSED','HOUSE_REFUSED','HOUSE_GUARD'].includes(error.code) || /Permiso denegado/.test(error.message)) permissionDenied = true; if (error.code === 'GOAL_BUDGET') budgetError = error;
+            is_error = true; if (['GOVERNANCE_REFUSED','HOUSE_REFUSED','HOUSE_GUARD'].includes(error.code) || /Permission denied|Permiso denegado/.test(error.message)) permissionDenied = true; if (error.code === 'GOAL_BUDGET') budgetError = error;
           }
           const loaded = await this.store.load(this.session.id), row = loaded.rows.findLastIndex(row => row.type === 'house_receipt' && row.call_id === call.id);
+          if (is_error && ['WorkStepRun','WorkTaskUpdate','WorkDraft'].includes(call.name) && row >= 0) {
+            const projected = workProjection(loaded), recovery = projected?.preflight_failures?.find(item => item.parent_receipt_id === loaded.rows[row].invocation_id);
+            if (recovery) content = JSON.stringify({ code: 'WORK_PREFLIGHT_NOT_DISPATCHED', message: String(content), target_dispatched: false, failed_check_credited: false,
+              task_id: recovery.task_id, step_id: recovery.step_id, retry_call: recovery.retry_call, ...(recovery.resume_call ? { resume_call: recovery.resume_call } : {}),
+              ...(projected.draft_continuation?.publish_call ? { draft_publish_call: projected.draft_continuation.publish_call } : {}), next_action: recovery.next_action });
+          }
           const output = projectToolOutput(String(content), { session_id: this.session.id, row }, {is_error,maxCharacters:call.name==='EvidenceRead'?65536:16384}), clipped = output.length > 65536 ? output.slice(0, 65536) + '\n[Resultado truncado a 65536 caracteres; pide una consulta más acotada.]' : output;
           const block = { type: 'tool_result', tool_use_id: call.id, content: clipped, ...(is_error ? { is_error: true } : {}) };
           await this.onEvent({ type: 'tool_result', name: call.name, ...block });return block;

package/src/artifact-tools.mjs

@@ -10,12 +10,13 @@ const read={workspace:'none',external:'read',process:'none',authority:'none'};
 const write={workspace:'none',external:'write',process:'none',authority:'none'};
 export function artifactProjection(result){const{artifact,version,verification_plan:plan,verification,delivery,url,receipt,replayed}=result;return{...(artifact?{artifact}:{}),...(version?{version:{id:version.id,digest:version.digest,entrypoint:version.entrypoint,file_count:Object.keys(version.files).length}}:{}),...(plan?{verification_plan:{id:plan.id,digest:plan.digest,profile:plan.profile,stale:plan.stale,checks:plan.checks}}:{}),...(verification?{verification}:{}),...(delivery?{delivery}:{}),...(url?{url}:{}),...(receipt?{receipt}:{}),...(replayed!==undefined?{replayed}:{}),...(!artifact?result:{})};}
 export function artifactPlugin({cwd,client=new CloudClient()}={}){
-  return {id:'artifacts',version:'0.1.0',tool_loading:'deferred',discovery:{description:'Publish static webapps to your Comal account, verify exact versions, inspect execution observations and release private URLs. Connect first with comal cloud login.',tags:['artifacts','webapps','publish','publicar','verification','Milpa']},activate(context){
+  return {id:'artifacts',version:'0.1.0',tool_loading:'deferred',discovery:{description:'Publish static webapps and MP4 clips via protected Gumlet to your Comal account, verify exact versions, inspect execution observations and release private URLs. Connect first with comal cloud login.',tags:['artifacts','webapps','mp4','video','gumlet','publish','publicar','verification','Milpa']},activate(context){
     const add=(name,description,schema,effects,run,permission)=>context.operation({name,description,input_schema:schema,effects,...(permission?{permission}:{}),run:async(input,options)=>JSON.stringify(await run(input,options))});
     add('ArtifactAccount','Inspect connected Comal account/workspaces, without exposing credentials. A cloud login is distinct from the inference-provider login.',object(),read,(_,options)=>client.status(options));
+    add('ArtifactCapabilities','Inspect publication types, video bounds and configured media hosting before planning delivery.',object(),read,(_,options)=>client.invoke('comal.contract',{},options));
     add('ArtifactList','List artifacts owned by the Comal account or explicitly shared with it.',object(),read,(input,options)=>client.invoke('artifacts.list',input,options));
     add('ArtifactInspect','Read exact version, current verification status and executor observations; does not rerun effects. Only admitted executor receipts can certify checks.',object({artifact_id:id,version:id},['artifact_id']),read,async(input,options)=>artifactProjection(await client.invoke('artifacts.inspect',input,options)));
-    add('ArtifactPublish','Upload a static webapp DIRECTORY inside this workspace as an immutable private candidate. Host bundles files (8 MiB/256), excludes hidden entries, refuses symlinks. Repeated identical inputs reconcile the same attempt. Session provenance comes from the host. Upload does not deliver; next use ArtifactVerify. Updates must retain checks and include base_version.',object({directory:{type:'string',minLength:1,maxLength:512},workspace_id:id,title:{type:'string',minLength:1,maxLength:120},entrypoint:{type:'string',minLength:1,maxLength:512},artifact_id:id,base_version:id,checks:{type:'array',maxItems:32,items:checkSchema}},['directory','workspace_id','title','entrypoint']),{...write,workspace:'read'},async({directory,...input},options)=>{if(!options.sessionId)throw Error('La publicación requiere la identidad de sesión del host.');return artifactProjection(await publishArtifact(client,{...input,session_id:options.sessionId,directory:path.resolve(cwd,directory),workspaceRoot:cwd},options));});
+    add('ArtifactPublish','Upload a static webapp DIRECTORY inside this workspace as an immutable private candidate. Host bundles static files (8 MiB/256) and up to four MP4 clips (8 MiB/180 seconds each) hosted on protected Gumlet. clip.mp4 produces clip.player.html: embed with iframe, not video src; a .mp4 entrypoint opens its generated player. Excludes hidden entries, refuses symlinks. Repeated identical inputs reconcile the same attempt. Session provenance comes from the host. Upload does not deliver; next use ArtifactVerify. Updates must retain checks and include base_version.',object({directory:{type:'string',minLength:1,maxLength:512},workspace_id:id,title:{type:'string',minLength:1,maxLength:120},entrypoint:{type:'string',minLength:1,maxLength:512},artifact_id:id,base_version:id,checks:{type:'array',maxItems:32,items:checkSchema}},['directory','workspace_id','title','entrypoint']),{...write,workspace:'read'},async({directory,...input},options)=>{if(!options.sessionId)throw Error('La publicación requiere la identidad de sesión del host.');return artifactProjection(await publishArtifact(client,{...input,session_id:options.sessionId,directory:path.resolve(cwd,directory),workspaceRoot:cwd},options));});
     add('ArtifactVerify','Queue the current immutable candidate contract and optionally wait up to 30 seconds without extra model calls. Worker may interact with the candidate under its accepted checks. Failed checks may need an app fix. Inconclusive needs missing evidence or executor recovery; do not assume app failure. Queued is not passed. Reuse request_id to reconcile a retry.',object({artifact_id:id,version:id,request_id:{type:'string',minLength:8,maxLength:128},wait_seconds:{type:'integer',minimum:0,maximum:30}},['artifact_id']),write,async({wait_seconds=0,...input},options)=>{const queued=await client.invoke('verification.request',{...input,request_id:input.request_id||'comal_'+(options.invocation_id||randomUUID())},options);const until=Date.now()+wait_seconds*1000;while(Date.now()<until){await delay(Math.min(2000,until-Date.now()),null,{signal:options.signal});const current=await client.invoke('artifacts.inspect',{artifact_id:input.artifact_id,...(input.version?{version:input.version}:{})},options);if(!['queued','running'].includes(current.verification?.status))return artifactProjection(current);}return queued;});
     add('ArtifactRelease','Deliver exactly a current candidate whose admitted verification job passed; rejects stale access/content. expected_released_version must match last inspection. Human acceptance is unjudged. A model-written passed flag has no authority.',object({artifact_id:id,version:id,job_id:id,expected_released_version:{anyOf:[id,{type:'null'}]}},['artifact_id','version','job_id','expected_released_version']),write,(input,options)=>client.invoke('artifacts.release',input,options));
   }};