@moinulmoin/eden 0.6.0 → 0.7.1

package/README.md

@@ -12,15 +12,15 @@ If you already have an Eve project, start with `eden deploy`.
 Use any one of these package managers:
 
 ```sh
-npm install --global @moinulmoin/eden@0.6.0
+npm install --global @moinulmoin/eden@0.7.1
 ```
 
 ```sh
-pnpm add --global @moinulmoin/eden@0.6.0
+pnpm add --global @moinulmoin/eden@0.7.1
 ```
 
 ```sh
-bun add --global @moinulmoin/eden@0.6.0
+bun add --global @moinulmoin/eden@0.7.1
 ```
 
 Then confirm the CLI is available:
@@ -126,12 +126,16 @@ Run `eden <command> --help` for command-specific options.
 
 - Deploy does not replace the Eve project's providers, databases, Workflow
   World, authentication, schedules, channels, or sandbox.
-- Container disk and memory are wiped when the Container sleeps. Durable
-  state needs a project-configured, Cloudflare-reachable Workflow World such
-  as Postgres (for example `@workflow/world-postgres`).
-- Schedules do not fire while the Container sleeps.
-- This release uses one logical Container instance (`basic`, 1 GiB) and does
-  not promise horizontal scaling or custom domains.
+- Container files survive sleep via snapshots, and image updates now carry
+  Eve's sandbox sessions — every conversation's files — across the image
+  change through the Durable Object's storage (capped at 1 GiB compressed).
+  The rest of `/workspace` still resets to the new image. Durable Workflow
+  state across updates needs a project-configured
+  World, such as Postgres or `@moinulmoin/eden-world-cloudflare`.
+- Standard 5-field cron schedules wake the Container; unsupported cron forms
+  only run while it is awake.
+- This release uses one logical Container instance (`standard-1`, 1/2 vCPU,
+  4 GiB) and does not promise horizontal scaling or custom domains.
 - Bun is an installer only; Node remains the runtime.
 
 ## Documentation

package/dist/eve-control-plane.js

@@ -7,8 +7,8 @@ import { createServer, } from "node:net";
 import { execFile, spawn, } from "node:child_process";
 import { fileURLToPath, } from "node:url";
 import { promisify, } from "node:util";
-import { EveCliError, } from "./eve.js";
-import { buildEveProjectSnapshot, createDockerEveProjectBuilder, revalidateEveProjectCandidateInputs, EvePackagingError, } from "./eve-packaging.js";
+import { EveCliError, EVE_NAME_PATTERN, } from "./eve.js";
+import { buildEveProjectSnapshot, createDockerEveProjectBuilder, revalidateEveProjectCandidateInputs, EvePackagingError, IMAGE_ID_PATTERN, } from "./eve-packaging.js";
 import { buildEveRuntimeImage, discardEveRuntimeImage, revalidateEveRuntimeCandidate, validateEveHostRequirements, } from "./eve-runtime-image.js";
 import { EveRuntimeConfigError, prepareEveRuntimeInjection, redactEveRuntimeOutput, } from "./eve-runtime-config.js";
 import { createEveHostConfig, generateEveHostWorkerSource, parseEveScheduleCron, resolveStableWorkersDevOrigin, } from "@moinulmoin/eden-runtime-cloudflare";
@@ -64,6 +64,8 @@ function mapPackagingCheck(value) {
                 return "VAL-SEC-003";
             case "DOCKER_PLATFORM_BLOCKED":
                 return "VAL-BUILD-005";
+            case "EVE_SANDBOX_RESUME_PATCH":
+                return value.id;
             default:
                 return `EVE-${value.id}`;
         }
@@ -521,7 +523,7 @@ async function readWorkersDevSubdomain(accountId) {
             ? result.subdomain
             : undefined;
         return typeof subdomain === "string" &&
-            /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(subdomain)
+            EVE_NAME_PATTERN.test(subdomain)
             ? subdomain
             : undefined;
     }
@@ -537,34 +539,34 @@ async function readWorkersDevSubdomain(accountId) {
 export function exactTargetContainerEntries(value, name) {
     return exactContainerEntries(value, boundedResourceName(name, "container"));
 }
-async function defaultCloudflareRead(request) {
-    const account = await readWranglerJson(["whoami", "--json"]);
+async function readExactTargetInventory(workerName, containerApp) {
     const containers = await readWranglerJson([
-        "containers",
-        "list",
-        "--json",
-        "--per-page",
-        "100",
+        "containers", "list", "--json", "--per-page", "100",
     ]);
     const deployments = await readWranglerJson([
-        "deployments",
-        "list",
-        "--name",
-        request.name,
-        "--json",
+        "deployments", "list", "--name", workerName, "--json",
     ]);
+    return {
+        containers,
+        deployments,
+        containerEntries: exactContainerEntries(containers.value, containerApp),
+        deploymentEntries: exactDeploymentEntries(deployments.value),
+    };
+}
+async function defaultCloudflareRead(request) {
+    const account = await readWranglerJson(["whoami", "--json"]);
+    const { containers, deployments, containerEntries, deploymentEntries: listedDeployments } = await readExactTargetInventory(request.name, boundedResourceName(request.name, "container"));
     const accountId = authenticatedAccountId(account.value);
     const accountAccess = account.failed || accountId === undefined
         ? "unavailable"
         : "available";
-    const containerEntries = exactTargetContainerEntries(containers.value, request.name);
     const containerAccess = containers.failed || containerEntries === undefined
         ? "unavailable"
         : "available";
     const deploymentEntries = deployments.failed &&
         /(?:does not exist|not found)/iu.test(deployments.stderr ?? "")
         ? []
-        : exactDeploymentEntries(deployments.value);
+        : listedDeployments;
     const workersDevSubdomain = await readWorkersDevSubdomain(accountId);
     if (accountAccess === "unavailable" ||
         containerAccess === "unavailable" ||
@@ -1008,7 +1010,11 @@ async function writeEveDeploymentArtifacts(candidate, hostConfig, workerSource)
     });
     return { workerSourcePath, wranglerConfigPath };
 }
-function runWranglerWithInput(args, cwd, input) {
+/** Deadline for bounded Wrangler reads, secret writes, pushes, and deletions. */
+const WRANGLER_OPERATION_TIMEOUT_MS = 120_000;
+/** Deadline for `wrangler deploy`, whose Container image preparation alone can approach two minutes. */
+const WRANGLER_PUBLICATION_TIMEOUT_MS = 600_000;
+function runWranglerWithInput(args, cwd, input, timeoutMs = WRANGLER_OPERATION_TIMEOUT_MS) {
     return new Promise((resolveResult) => {
         const child = spawn(process.execPath, [wranglerEntrypoint, ...args], {
             cwd,
@@ -1035,7 +1041,7 @@ function runWranglerWithInput(args, cwd, input) {
                 stdout,
                 stderr: "The bounded Wrangler operation timed out.",
             });
-        }, 120_000);
+        }, timeoutMs);
         child.stdout.on("data", (chunk) => {
             stdout += chunk.toString();
         });
@@ -1154,7 +1160,7 @@ function defaultPublicationRunner() {
             "--env",
             request.identity.environment,
             "--strict",
-        ], dirname(request.wranglerConfigPath));
+        ], dirname(request.wranglerConfigPath), undefined, WRANGLER_PUBLICATION_TIMEOUT_MS);
         if (result.exitCode !== 0) {
             return {
                 status: "indeterminate",
@@ -1162,22 +1168,7 @@ function defaultPublicationRunner() {
                 ownershipEvidenceRetained: true,
             };
         }
-        const containers = await readWranglerJson([
-            "containers",
-            "list",
-            "--json",
-            "--per-page",
-            "100",
-        ]);
-        const containerEntries = exactContainerEntries(containers.value, request.hostConfig.container.applicationName);
-        const deployments = await readWranglerJson([
-            "deployments",
-            "list",
-            "--name",
-            request.identity.workerName,
-            "--json",
-        ]);
-        const deploymentEntries = exactDeploymentEntries(deployments.value);
+        const { containers, deployments, containerEntries, deploymentEntries } = await readExactTargetInventory(request.identity.workerName, request.hostConfig.container.applicationName);
         if (containers.failed ||
             containerEntries === undefined ||
             containerEntries.length !== 1 ||
@@ -1527,7 +1518,7 @@ async function runEveDeployment(request, options, collected) {
         throw deploymentFailure("EVE_ORIGIN_UNAVAILABLE", "The authenticated stable workers.dev origin did not match the exact Worker target.");
     }
     const imageDigest = runtimeEvidence.imageDigest;
-    if (imageDigest === undefined || !/^sha256:[0-9a-f]{64}$/u.test(imageDigest)) {
+    if (imageDigest === undefined || !IMAGE_ID_PATTERN.test(imageDigest)) {
         throw deploymentFailure("EVE_IMAGE_IDENTITY_UNAVAILABLE", "The deploy candidate did not provide an immutable runtime image digest.");
     }
     const targetKey = stableDeploymentKey(collected.projectId, accountId, request.environment, request.name);
@@ -1632,8 +1623,6 @@ async function runEveDeployment(request, options, collected) {
         accountId,
         workerName: identity.workerName,
         containerApplicationName: identity.containerApplicationName,
-        containerClassName: "EveHostDurableContainer",
-        containerBindingName: "EVE_CONTAINER",
         stableContainerInstanceName: identity.stableContainerInstanceName,
         deploymentId: identity.deploymentId,
         generationId: identity.generationId,
@@ -2027,7 +2016,6 @@ async function collectEvePreflight(request, options) {
             snapshot: null,
             toolchain: null,
             image: null,
-            runtime: null,
             secrets: {
                 runtimeVariableNames: [],
                 valuesRecorded: false,
@@ -2040,6 +2028,7 @@ async function collectEvePreflight(request, options) {
                 redactionRegisteredBeforeChildren: false,
             },
             checks: [],
+            sandboxResumePatch: "absent",
             candidateImageId: null,
             candidateImageRetainedLocally: false,
             writtenPaths: [],
@@ -2047,6 +2036,13 @@ async function collectEvePreflight(request, options) {
         };
     }
     checks.push(...packaging.checks.map(mapPackagingCheck));
+    if (packaging.sandboxResumePatch === "skipped") {
+        warnings.push({
+            id: "EVE_SANDBOX_RESUME_PATCH",
+            message: "Eve's just-bash file is not a version Eden knows; conversations may lose their sandbox after a skill change (eve#4440)",
+            remediation: "Pin Eve to a version Eden knows, or update Eden so its known Eve versions include yours.",
+        });
+    }
     const discardPackagingImage = async () => {
         if (packaging.candidateImageId === null ||
             builder.discard === undefined) {
@@ -2240,7 +2236,7 @@ async function collectEvePreflight(request, options) {
                 "VAL-BUILD-007",
             ];
             const runtimeProofComplete = requiredRuntimeChecks.every((id) => runtimeEvidence?.checks.some((value) => value.id === id && value.status === "passed"));
-            const runtimeImageIdentityValid = /^sha256:[0-9a-f]{64}$/u.test(runtimeEvidence.imageDigest ?? "");
+            const runtimeImageIdentityValid = IMAGE_ID_PATTERN.test(runtimeEvidence.imageDigest ?? "");
             if (!runtimeProofComplete) {
                 checks.push(check("VAL-BUILD-005", "failed", "The runtime seam did not return complete proof of Linux/amd64 image construction, official Eve-start boot, and real health.", "Return passed VAL-BUILD-005, VAL-BUILD-006, and VAL-BUILD-007 checks from the disposable runtime runner."));
             }
@@ -2672,24 +2668,10 @@ async function parseEveDeploymentRecord(recordPath, environment, name) {
 }
 async function defaultDestroyTargetRead(request) {
     const account = await readWranglerJson(["whoami", "--json"]);
-    const deployments = await readWranglerJson([
-        "deployments",
-        "list",
-        "--name",
-        request.workerName,
-        "--json",
-    ]);
-    const containers = await readWranglerJson([
-        "containers",
-        "list",
-        "--json",
-        "--per-page",
-        "100",
-    ]);
+    const { deployments, containerEntries: entries, deploymentEntries } = await readExactTargetInventory(request.workerName, request.containerApplicationName);
     const accountId = authenticatedAccountId(account.value);
     const workerExists = !deployments.failed &&
-        (exactDeploymentEntries(deployments.value)?.length ?? 0) > 0;
-    const entries = exactContainerEntries(containers.value, request.containerApplicationName);
+        (deploymentEntries?.length ?? 0) > 0;
     const firstContainer = entries === undefined ? undefined : entries[0];
     const ownedRepositories = request.registryRepositories;
     let registryTagsPresent;

package/dist/eve-packaging.d.ts

@@ -1,5 +1,5 @@
-import type { EveRuntimeInputIdentity } from "./eve-runtime-config.js";
-export type EvePackagingCode = "ROOT_INVALID" | "UNSUPPORTED_TOOLCHAIN" | "DEPENDENCY_AMBIGUITY" | "SOURCE_RACE" | "EVE_BUILD_FAILED" | "UNSUPPORTED_EVE_OUTPUT" | "RUNTIME_CLOSURE_INCOMPLETE" | "SECRET_EXCLUSION_FAILED" | "DOCKER_PLATFORM_BLOCKED" | "UNSUPPORTED_HOST_REQUIREMENT" | "EVE_HEALTH_FAILED" | "WORLD_MIGRATION_FAILED" | "CLEANUP_UNVERIFIED" | "PACKAGE_VERIFICATION_FAILED";
+import { type EveRuntimeInputIdentity } from "./eve-runtime-config.js";
+export type EvePackagingCode = "ROOT_INVALID" | "UNSUPPORTED_TOOLCHAIN" | "DEPENDENCY_AMBIGUITY" | "SOURCE_RACE" | "EVE_BUILD_FAILED" | "UNSUPPORTED_EVE_OUTPUT" | "RUNTIME_CLOSURE_INCOMPLETE" | "SECRET_EXCLUSION_FAILED" | "DOCKER_PLATFORM_BLOCKED" | "UNSUPPORTED_HOST_REQUIREMENT" | "EVE_HEALTH_FAILED" | "WORLD_MIGRATION_FAILED" | "CLEANUP_UNVERIFIED";
 export interface EveRuntimeConfigExclusion {
     /**
      * This path is opaque. The packaging worker only uses its lexical identity
@@ -101,6 +101,23 @@ export interface EveProjectOutput {
     readonly outputDigest: string;
     readonly fileCount: number;
 }
+/** Snapshot-relative root of Eve's prepared sandbox templates. */
+export declare const EVE_SANDBOX_CACHE_ROOT: ".eve/sandbox-cache";
+/**
+ * Evidence for the sandbox templates `eve build` prepared inside the isolated
+ * builder. Runtime sandboxes resolve their template at
+ * `<appRoot>/.eve/sandbox-cache/<provider>/templates/<key>`, so this tree must
+ * ship inside the runtime image or every `bash`/`read_file`/`write_file` call
+ * fails with "Sandbox template ... is not provisioned". `null` when this Eve
+ * build prepared no sandbox template.
+ */
+export interface EveSandboxCacheOutput {
+    readonly present: true;
+    readonly root: typeof EVE_SANDBOX_CACHE_ROOT;
+    readonly outputDigest: string;
+    readonly fileCount: number;
+    readonly totalBytes: number;
+}
 export interface EveProjectBuildCandidate {
     readonly generationId: string;
     readonly generationRoot: string;
@@ -122,6 +139,7 @@ export interface EveProjectBuildCandidate {
     readonly sourceDigest: string;
     readonly snapshotDigest: string;
     readonly generatedOutput: EveProjectOutput;
+    readonly sandboxCache: EveSandboxCacheOutput | null;
     readonly runtimeConfigInputIdentity?: string;
     readonly runtimeVariableNames: readonly string[];
 }
@@ -175,15 +193,6 @@ export interface EveProjectImage {
     };
     readonly generatedOutput: EveProjectOutput | null;
 }
-export interface EveProjectRuntime {
-    readonly listenHost: "0.0.0.0";
-    readonly listenPort: 8080;
-    readonly healthMethod: "GET";
-    readonly healthPath: "/eve/v1/health";
-    readonly healthStatus: "not-run";
-    readonly healthVerified: false;
-    readonly durableLocalFilesystemClaim: false;
-}
 export interface EveProjectSecretsEvidence {
     readonly runtimeVariableNames: readonly string[];
     readonly valuesRecorded: false;
@@ -228,9 +237,15 @@ export interface EveProjectPackagingResult {
     readonly snapshot: EveProjectSnapshot | null;
     readonly toolchain: EveProjectToolchain | null;
     readonly image: EveProjectImage | null;
-    readonly runtime: EveProjectRuntime | null;
     readonly secrets: EveProjectSecretsEvidence;
     readonly checks: readonly EvePackagingCheck[];
+    /**
+     * Outcome of the builder's temporary eve#4440 sandbox-resume patch:
+     * `applied` when the shipped just-bash binding carries it, `skipped` when
+     * the binding is a version Eden does not know, `absent` when this Eve
+     * build has no just-bash binding or packaging never reached the image.
+     */
+    readonly sandboxResumePatch: EveSandboxResumePatchStatus;
     readonly candidateImageId: string | null;
     readonly candidateImageRetainedLocally: boolean;
     readonly writtenPaths: readonly string[];
@@ -252,6 +267,64 @@ export declare class EvePackagingError extends Error {
         readonly remediation: string;
     });
 }
+/**
+ * Eden's temporary fix for upstream https://github.com/vercel/eve/issues/4440
+ * (repro: https://github.com/moinulmoin/eve-justbash-resume-repro).
+ * Eve's just-bash provider permanently refuses to resume a conversation once
+ * the sandbox template changes (skills, `agent/sandbox/workspace/`, or the
+ * sandbox definition) and never falls back, so one `eden deploy` update would
+ * break every existing conversation's sandbox forever. The isolated builder
+ * rewrites one file in the installed Eve copy so an existing session reopens
+ * against the current template instead of throwing; user files under
+ * `/workspace` always win over the template. The patch applies only when the
+ * target file's sha256 matches a known binding and selects that binding's
+ * replacement; it is removed entirely once upstream ships the fix.
+ */
+export declare const EVE_SANDBOX_RESUME_PATCH_KNOWN_SHA256 = "0ba0ac3a237c99af2f67a6028f1675bf7c04b22454b4ebfb4cd9d19e5bf5aaf8";
+/** Eve 0.79.1 stores a template key instead of an absolute template path. */
+export declare const EVE_SANDBOX_RESUME_PATCH_LATEST_SHA256 = "ab8b1ad7398af8f6fd2a1e91eb0d1ff8d2b9b9afe1836234f36ce0e896791c45";
+/** Marker the patched binding always contains; proves the patch shipped. */
+export declare const EVE_SANDBOX_RESUME_PATCH_SIGNATURE = "edenRefreshJustBashSessionSkills";
+/** The exact `resume()` implementation in Eve 0.68.0, 0.71.2, 0.72.1, and 0.79.1. */
+export declare const EVE_JUST_BASH_RESUME_ORIGINAL = "async resume(e,n,r){let i=requirePreparedJustBashArtifact(n),a=requireJustBashSessionState(r),o=createSandboxProviderIdentity({artifact:i,version:1}),s=sessionRootPath(e,i);if(a.generation!==o||a.rootPath!==s)throw Error(`just-bash session state is incompatible with this environment.`);if(!await pathExists(a.rootPath))throw Error(`just-bash session root \"${a.rootPath}\" no longer exists.`);return await openHandle(e,a.rootPath,t)}";
+/**
+ * The replacement `resume()`: a session whose template generation moved is
+ * contained to the same sessions directory and reopened with its authored
+ * skills refreshed from the current template. A session folder that is gone
+ * (for example a deploy that could not carry it) is recreated from the
+ * current template instead of failing every later sandbox call.
+ */
+export declare const EVE_SANDBOX_RESUME_PATCHED = "async resume(e,n,r){let i=requirePreparedJustBashArtifact(n),a=requireJustBashSessionState(r),o=createSandboxProviderIdentity({artifact:i,version:1}),s=sessionRootPath(e,i);if((a.generation!==o||a.rootPath!==s)&&dirname(a.rootPath)!==dirname(s))throw Error(`just-bash session state is incompatible with this environment.`);await ensureSessionRoot(i,a.rootPath);if(a.generation!==o)await edenRefreshJustBashSessionSkills(i.templateRootPath,a.rootPath);return await openHandle(e,a.rootPath,t)}";
+/**
+ * Eve 0.79.1 resolves the current template key under the runtime cache.
+ * Its ensureSessionRoot accepts that path, not the prepared artifact.
+ */
+export declare const EVE_SANDBOX_RESUME_PATCHED_LATEST = "async resume(e,n,r){let i=requirePreparedJustBashArtifact(n),a=requireJustBashSessionState(r),o=createSandboxProviderIdentity({artifact:i,version:1}),s=sessionRootPath(e,i);if((a.generation!==o||a.rootPath!==s)&&dirname(a.rootPath)!==dirname(s))throw Error(`just-bash session state is incompatible with this environment.`);let c=resolveTemplateRootPath(e.storagePath,i.templateKey);await ensureSessionRoot(c,a.rootPath);if(a.generation!==o)await edenRefreshJustBashSessionSkills(c,a.rootPath);return await openHandle(e,a.rootPath,t)}";
+/**
+ * Helpers appended to the patched binding. They use only identifiers the
+ * module already imports (`readdir`, `rm`, `join`, `pathExists`,
+ * `copyDirectoryAtomically`). Skills live at `$HOME/.agents/skills` inside a
+ * just-bash root, so the session keeps the same path relative to its `fs`
+ * directory as the template; the template's `fs` is scanned because `$HOME`
+ * is only known inside the sandbox.
+ */
+export declare const EVE_SANDBOX_RESUME_PATCH_HELPERS = "async function edenRefreshJustBashSessionSkills(e,t){let n=await edenFindTemplateSkillsRelativePath(join(e,\"fs\"));if(n===void 0)return;let r=join(t,\"fs\",n);await rm(r,{force:!0,recursive:!0}),await copyDirectoryAtomically(join(e,\"fs\",n),r)}\nasync function edenFindTemplateSkillsRelativePath(e){let t=[[\"\",0]];for(;t.length>0;){let n=t.shift(),r=n[0],i=n[1];if(i>3)continue;let a=[];try{a=await readdir(join(e,r),{withFileTypes:!0})}catch{a=[]}for(let o of a){if(!o.isDirectory())continue;let s=r===\"\"?o.name:r+\"/\"+o.name;if(o.name===\".agents\")return await pathExists(join(e,s,\"skills\"))?s+\"/skills\":void 0;t.push([s,i+1])}}return void 0}\n";
+/**
+ * The CommonJS patcher the isolated builder runs between the frozen install
+ * and `eve build` (and again for the production reinstall). It never touches
+ * project files, applies only against known sha256 hashes, verifies the
+ * replacement matched exactly once, validates the result with `node --check`,
+ * and breaks hardlinks by writing a temp file and renaming it into place.
+ */
+export declare const EVE_SANDBOX_RESUME_PATCH_SCRIPT: string;
+/** Outcome of the builder's sandbox-resume patch for the packaged image. */
+export type EveSandboxResumePatchStatus = "applied" | "skipped" | "absent";
+export declare function sha256(value: string | Buffer): string;
+export declare function jsonBytes(value: unknown): Buffer;
+export declare function isWithin(root: string, candidate: string): boolean;
+export declare function safeRelativePath(root: string, candidate: string): string;
+export declare const IMAGE_ID_PATTERN: RegExp;
+export declare function imageReference(nodeImage: EveNodeImage, reason: string, remediation: string): string;
 /**
  * The authored Eve project source the runtime stage must carry so `eve start`
  * can resolve the project context (agent/, agents/ workspaces, flat layouts,
@@ -259,6 +332,7 @@ export declare class EvePackagingError extends Error {
  * capture-time exclusion still applied; generated roots are never source.
  */
 export declare function eveSnapshotSourceEntries(snapshotRoot: string): Promise<readonly string[]>;
+export declare function safeError(error: EvePackagingError): EveProjectPackagingResult["error"];
 export declare function buildEveProjectSnapshot(options: EveProjectSnapshotOptions): Promise<EveProjectPackagingResult>;
 export declare function revalidateEveProjectCandidateInputs(candidate: EveProjectBuildCandidate, runtimeConfig?: EveRuntimeConfigExclusion): Promise<void>;
 export declare function createDockerEveProjectBuilder(options: {