@openparachute/agent 0.1.1 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (598) hide show
  1. package/.parachute/module.json +124 -8
  2. package/LICENSE +2 -16
  3. package/README.md +118 -166
  4. package/package.json +32 -43
  5. package/scripts/spawn-agent.ts +371 -0
  6. package/src/_parked/interactive-spawn.test.ts +324 -0
  7. package/src/_parked/interactive-spawn.ts +701 -0
  8. package/src/agent-defs.test.ts +1504 -0
  9. package/src/agent-defs.ts +1702 -0
  10. package/src/agent-mcp-config.test.ts +115 -0
  11. package/src/agent-mcp-config.ts +115 -0
  12. package/src/agents.test.ts +360 -0
  13. package/src/agents.ts +379 -0
  14. package/src/auth.test.ts +46 -0
  15. package/src/auth.ts +140 -0
  16. package/src/backends/attached-queue.test.ts +376 -0
  17. package/src/backends/attached-queue.ts +372 -0
  18. package/src/backends/programmatic.test.ts +1715 -0
  19. package/src/backends/programmatic.ts +927 -0
  20. package/src/backends/registry.test.ts +1494 -0
  21. package/src/backends/registry.ts +1202 -0
  22. package/src/backends/stream-json.test.ts +570 -0
  23. package/src/backends/stream-json.ts +392 -0
  24. package/src/backends/types.ts +223 -0
  25. package/src/bridge.ts +417 -0
  26. package/src/channel-backend-wiring.test.ts +237 -0
  27. package/src/credentials.test.ts +274 -0
  28. package/src/credentials.ts +380 -0
  29. package/src/cron.test.ts +342 -0
  30. package/src/cron.ts +380 -0
  31. package/src/daemon-agent-def-api.test.ts +166 -0
  32. package/src/daemon-agent-defs-api.test.ts +953 -0
  33. package/src/daemon-agent-env-api.test.ts +338 -0
  34. package/src/daemon-attached-queue-store.test.ts +65 -0
  35. package/src/daemon-config-api.test.ts +962 -0
  36. package/src/daemon-jobs-api.test.ts +271 -0
  37. package/src/daemon-vault-chat.test.ts +250 -0
  38. package/src/daemon.test.ts +746 -0
  39. package/src/daemon.ts +3314 -0
  40. package/src/def-vaults.test.ts +136 -0
  41. package/src/def-vaults.ts +165 -0
  42. package/src/delivery-state.test.ts +110 -0
  43. package/src/delivery-state.ts +154 -0
  44. package/src/effective-env.test.ts +114 -0
  45. package/src/effective-env.ts +184 -0
  46. package/src/env-compat.ts +39 -0
  47. package/src/grants.test.ts +638 -0
  48. package/src/grants.ts +675 -0
  49. package/src/hub-jwt.test.ts +161 -0
  50. package/src/hub-jwt.ts +182 -0
  51. package/src/jobs.test.ts +245 -0
  52. package/src/jobs.ts +266 -0
  53. package/src/mcp-http.test.ts +265 -0
  54. package/src/mcp-http.ts +771 -0
  55. package/src/mint-token.test.ts +152 -0
  56. package/src/mint-token.ts +139 -0
  57. package/src/module-manifest.test.ts +158 -0
  58. package/src/oauth-discovery.ts +134 -0
  59. package/src/programmatic-wiring.test.ts +838 -0
  60. package/src/registry.test.ts +227 -0
  61. package/src/registry.ts +228 -0
  62. package/src/resolve-port.test.ts +64 -0
  63. package/src/routing.test.ts +184 -0
  64. package/src/routing.ts +76 -0
  65. package/src/runner.test.ts +506 -0
  66. package/src/runner.ts +255 -0
  67. package/src/sandbox/config.test.ts +150 -0
  68. package/src/sandbox/config.ts +102 -0
  69. package/src/sandbox/egress.test.ts +113 -0
  70. package/src/sandbox/egress.ts +123 -0
  71. package/src/sandbox/index.ts +180 -0
  72. package/src/sandbox/live-seatbelt.test.ts +277 -0
  73. package/src/sandbox/mounts.test.ts +154 -0
  74. package/src/sandbox/mounts.ts +133 -0
  75. package/src/sandbox/sandbox.test.ts +168 -0
  76. package/src/sandbox/types.ts +382 -0
  77. package/src/services-manifest.test.ts +106 -0
  78. package/src/services-manifest.ts +95 -0
  79. package/src/spa-serve.test.ts +116 -0
  80. package/src/spa-serve.ts +116 -0
  81. package/src/spawn-agent-cli.test.ts +172 -0
  82. package/src/spawn-agent.test.ts +1218 -0
  83. package/src/spawn-agent.ts +569 -0
  84. package/src/spawn-deps.test.ts +54 -0
  85. package/src/spawn-deps.ts +166 -0
  86. package/src/telegram/api.ts +153 -0
  87. package/src/terminal-assets.test.ts +50 -0
  88. package/src/terminal-assets.ts +79 -0
  89. package/src/terminal-ui.ts +305 -0
  90. package/src/terminal.test.ts +530 -0
  91. package/src/terminal.ts +458 -0
  92. package/src/transport.ts +270 -0
  93. package/src/transports/http-ui.test.ts +455 -0
  94. package/src/transports/http-ui.ts +201 -0
  95. package/src/transports/telegram.test.ts +174 -0
  96. package/src/transports/telegram.ts +426 -0
  97. package/src/transports/vault.test.ts +2011 -0
  98. package/src/transports/vault.ts +1790 -0
  99. package/src/ui-kit.test.ts +178 -0
  100. package/src/ui-kit.ts +402 -0
  101. package/tsconfig.json +8 -14
  102. package/web/ui/tsconfig.json +2 -1
  103. package/.claude/scheduled_tasks.lock +0 -1
  104. package/.claude/settings.json +0 -5
  105. package/.claude/skills/add-atomic-chat-tool/SKILL.md +0 -243
  106. package/.claude/skills/add-atomic-chat-tool/atomic-chat-mcp-stdio.ts +0 -229
  107. package/.claude/skills/add-codex/SKILL.md +0 -161
  108. package/.claude/skills/add-dashboard/SKILL.md +0 -138
  109. package/.claude/skills/add-dashboard/resources/dashboard-pusher.ts +0 -495
  110. package/.claude/skills/add-emacs/SKILL.md +0 -296
  111. package/.claude/skills/add-gcal-tool/SKILL.md +0 -210
  112. package/.claude/skills/add-gchat/REMOVE.md +0 -6
  113. package/.claude/skills/add-gchat/SKILL.md +0 -92
  114. package/.claude/skills/add-gchat/VERIFY.md +0 -3
  115. package/.claude/skills/add-github/REMOVE.md +0 -6
  116. package/.claude/skills/add-github/SKILL.md +0 -148
  117. package/.claude/skills/add-github/VERIFY.md +0 -3
  118. package/.claude/skills/add-gmail-tool/SKILL.md +0 -229
  119. package/.claude/skills/add-imessage/REMOVE.md +0 -6
  120. package/.claude/skills/add-imessage/SKILL.md +0 -113
  121. package/.claude/skills/add-imessage/VERIFY.md +0 -3
  122. package/.claude/skills/add-karpathy-llm-wiki/SKILL.md +0 -110
  123. package/.claude/skills/add-karpathy-llm-wiki/llm-wiki.md +0 -75
  124. package/.claude/skills/add-linear/REMOVE.md +0 -6
  125. package/.claude/skills/add-linear/SKILL.md +0 -168
  126. package/.claude/skills/add-linear/VERIFY.md +0 -3
  127. package/.claude/skills/add-macos-statusbar/SKILL.md +0 -133
  128. package/.claude/skills/add-macos-statusbar/add/src/statusbar.swift +0 -147
  129. package/.claude/skills/add-matrix/REMOVE.md +0 -6
  130. package/.claude/skills/add-matrix/SKILL.md +0 -148
  131. package/.claude/skills/add-matrix/VERIFY.md +0 -3
  132. package/.claude/skills/add-ollama-provider/SKILL.md +0 -179
  133. package/.claude/skills/add-ollama-tool/SKILL.md +0 -193
  134. package/.claude/skills/add-opencode/SKILL.md +0 -229
  135. package/.claude/skills/add-parallel/SKILL.md +0 -290
  136. package/.claude/skills/add-resend/REMOVE.md +0 -6
  137. package/.claude/skills/add-resend/SKILL.md +0 -93
  138. package/.claude/skills/add-resend/VERIFY.md +0 -3
  139. package/.claude/skills/add-signal/REMOVE.md +0 -13
  140. package/.claude/skills/add-signal/SKILL.md +0 -318
  141. package/.claude/skills/add-signal/VERIFY.md +0 -5
  142. package/.claude/skills/add-slack/REMOVE.md +0 -6
  143. package/.claude/skills/add-slack/SKILL.md +0 -112
  144. package/.claude/skills/add-slack/VERIFY.md +0 -3
  145. package/.claude/skills/add-teams/REMOVE.md +0 -6
  146. package/.claude/skills/add-teams/SKILL.md +0 -207
  147. package/.claude/skills/add-teams/VERIFY.md +0 -3
  148. package/.claude/skills/add-vercel/SKILL.md +0 -147
  149. package/.claude/skills/add-vercel/container-skills/vercel-cli/SKILL.md +0 -103
  150. package/.claude/skills/add-webex/REMOVE.md +0 -6
  151. package/.claude/skills/add-webex/SKILL.md +0 -88
  152. package/.claude/skills/add-webex/VERIFY.md +0 -3
  153. package/.claude/skills/add-wechat/REMOVE.md +0 -49
  154. package/.claude/skills/add-wechat/SKILL.md +0 -170
  155. package/.claude/skills/add-wechat/scripts/wire-dm.ts +0 -172
  156. package/.claude/skills/add-whatsapp/SKILL.md +0 -264
  157. package/.claude/skills/add-whatsapp-cloud/REMOVE.md +0 -6
  158. package/.claude/skills/add-whatsapp-cloud/SKILL.md +0 -95
  159. package/.claude/skills/add-whatsapp-cloud/VERIFY.md +0 -3
  160. package/.claude/skills/claw/SKILL.md +0 -131
  161. package/.claude/skills/claw/scripts/claw +0 -374
  162. package/.claude/skills/convert-to-apple-container/SKILL.md +0 -212
  163. package/.claude/skills/customize/SKILL.md +0 -110
  164. package/.claude/skills/debug/SKILL.md +0 -349
  165. package/.claude/skills/get-qodo-rules/SKILL.md +0 -122
  166. package/.claude/skills/get-qodo-rules/references/output-format.md +0 -41
  167. package/.claude/skills/get-qodo-rules/references/pagination.md +0 -33
  168. package/.claude/skills/get-qodo-rules/references/repository-scope.md +0 -26
  169. package/.claude/skills/init-first-agent/SKILL.md +0 -120
  170. package/.claude/skills/init-onecli/SKILL.md +0 -270
  171. package/.claude/skills/manage-channels/SKILL.md +0 -87
  172. package/.claude/skills/manage-mounts/SKILL.md +0 -47
  173. package/.claude/skills/migrate-from-openclaw/MIGRATE_CRONS.md +0 -100
  174. package/.claude/skills/migrate-from-openclaw/SKILL.md +0 -447
  175. package/.claude/skills/migrate-from-openclaw/scripts/discover-openclaw.ts +0 -734
  176. package/.claude/skills/migrate-from-openclaw/scripts/extract-channel-credentials.ts +0 -476
  177. package/.claude/skills/migrate-nanoclaw/SKILL.md +0 -484
  178. package/.claude/skills/migrate-nanoclaw/diagnostics.md +0 -51
  179. package/.claude/skills/qodo-pr-resolver/SKILL.md +0 -326
  180. package/.claude/skills/qodo-pr-resolver/resources/providers.md +0 -329
  181. package/.claude/skills/update-nanoclaw/SKILL.md +0 -243
  182. package/.claude/skills/update-nanoclaw/diagnostics.md +0 -48
  183. package/.claude/skills/update-skills/SKILL.md +0 -130
  184. package/.claude/skills/use-native-credential-proxy/SKILL.md +0 -167
  185. package/.claude/skills/x-integration/SKILL.md +0 -417
  186. package/.claude/skills/x-integration/agent.ts +0 -243
  187. package/.claude/skills/x-integration/host.ts +0 -155
  188. package/.claude/skills/x-integration/lib/browser.ts +0 -148
  189. package/.claude/skills/x-integration/lib/config.ts +0 -62
  190. package/.claude/skills/x-integration/scripts/like.ts +0 -56
  191. package/.claude/skills/x-integration/scripts/post.ts +0 -66
  192. package/.claude/skills/x-integration/scripts/quote.ts +0 -80
  193. package/.claude/skills/x-integration/scripts/reply.ts +0 -74
  194. package/.claude/skills/x-integration/scripts/retweet.ts +0 -62
  195. package/.claude/skills/x-integration/scripts/setup.ts +0 -87
  196. package/.github/CODEOWNERS +0 -10
  197. package/.github/PULL_REQUEST_TEMPLATE.md +0 -18
  198. package/.github/workflows/bump-version.yml +0 -35
  199. package/.github/workflows/ci.yml +0 -39
  200. package/.github/workflows/label-pr.yml +0 -40
  201. package/.github/workflows/update-tokens.yml +0 -43
  202. package/.husky/pre-commit +0 -1
  203. package/.mcp.json +0 -3
  204. package/.nvmrc +0 -1
  205. package/.prettierrc +0 -4
  206. package/CHANGELOG.md +0 -221
  207. package/CLAUDE.md +0 -307
  208. package/CODE_OF_CONDUCT.md +0 -128
  209. package/CONTRIBUTING.md +0 -159
  210. package/CONTRIBUTORS.md +0 -26
  211. package/LICENSE-NANOCLAW-MIT +0 -21
  212. package/README_ja.md +0 -194
  213. package/README_zh.md +0 -194
  214. package/assets/nanoclaw-favicon.png +0 -0
  215. package/assets/nanoclaw-icon.png +0 -0
  216. package/assets/nanoclaw-logo-dark.png +0 -0
  217. package/assets/nanoclaw-logo.png +0 -0
  218. package/assets/nanoclaw-profile.jpeg +0 -0
  219. package/assets/nanoclaw-sales.png +0 -0
  220. package/assets/social-preview.jpg +0 -0
  221. package/config-examples/mount-allowlist.json +0 -25
  222. package/container/.dockerignore +0 -2
  223. package/container/CLAUDE.md +0 -21
  224. package/container/Dockerfile +0 -121
  225. package/container/agent-runner/bun.lock +0 -243
  226. package/container/agent-runner/package.json +0 -22
  227. package/container/agent-runner/scripts/sdk-signal-probe.ts +0 -169
  228. package/container/agent-runner/src/config.ts +0 -55
  229. package/container/agent-runner/src/db/connection.ts +0 -267
  230. package/container/agent-runner/src/db/index.ts +0 -20
  231. package/container/agent-runner/src/db/messages-in.ts +0 -138
  232. package/container/agent-runner/src/db/messages-out.ts +0 -143
  233. package/container/agent-runner/src/db/session-routing.ts +0 -30
  234. package/container/agent-runner/src/db/session-state.test.ts +0 -100
  235. package/container/agent-runner/src/db/session-state.ts +0 -79
  236. package/container/agent-runner/src/destinations.ts +0 -135
  237. package/container/agent-runner/src/formatter.test.ts +0 -167
  238. package/container/agent-runner/src/formatter.ts +0 -260
  239. package/container/agent-runner/src/index.ts +0 -110
  240. package/container/agent-runner/src/integration.test.ts +0 -121
  241. package/container/agent-runner/src/mcp-tools/agents.instructions.md +0 -26
  242. package/container/agent-runner/src/mcp-tools/agents.ts +0 -66
  243. package/container/agent-runner/src/mcp-tools/core.instructions.md +0 -27
  244. package/container/agent-runner/src/mcp-tools/core.ts +0 -262
  245. package/container/agent-runner/src/mcp-tools/index.ts +0 -22
  246. package/container/agent-runner/src/mcp-tools/interactive.instructions.md +0 -22
  247. package/container/agent-runner/src/mcp-tools/interactive.ts +0 -169
  248. package/container/agent-runner/src/mcp-tools/scheduling.instructions.md +0 -40
  249. package/container/agent-runner/src/mcp-tools/scheduling.ts +0 -299
  250. package/container/agent-runner/src/mcp-tools/self-mod.instructions.md +0 -25
  251. package/container/agent-runner/src/mcp-tools/self-mod.ts +0 -120
  252. package/container/agent-runner/src/mcp-tools/server.ts +0 -54
  253. package/container/agent-runner/src/mcp-tools/types.ts +0 -6
  254. package/container/agent-runner/src/poll-loop.test.ts +0 -248
  255. package/container/agent-runner/src/poll-loop.ts +0 -437
  256. package/container/agent-runner/src/providers/claude.ts +0 -379
  257. package/container/agent-runner/src/providers/factory.test.ts +0 -19
  258. package/container/agent-runner/src/providers/factory.ts +0 -13
  259. package/container/agent-runner/src/providers/index.ts +0 -6
  260. package/container/agent-runner/src/providers/mock.ts +0 -77
  261. package/container/agent-runner/src/providers/provider-registry.ts +0 -33
  262. package/container/agent-runner/src/providers/types.ts +0 -82
  263. package/container/agent-runner/src/scheduling/task-script.ts +0 -121
  264. package/container/agent-runner/src/timezone.test.ts +0 -93
  265. package/container/agent-runner/src/timezone.ts +0 -107
  266. package/container/agent-runner/tsconfig.json +0 -14
  267. package/container/build.sh +0 -48
  268. package/container/entrypoint.sh +0 -16
  269. package/container/skills/agent-browser/SKILL.md +0 -159
  270. package/container/skills/frontend-engineer/SKILL.md +0 -157
  271. package/container/skills/self-customize/SKILL.md +0 -87
  272. package/container/skills/slack-formatting/SKILL.md +0 -94
  273. package/container/skills/vercel-cli/SKILL.md +0 -111
  274. package/container/skills/welcome/SKILL.md +0 -85
  275. package/docs/APPLE-CONTAINER-NETWORKING.md +0 -90
  276. package/docs/BRANCH-FORK-MAINTENANCE.md +0 -81
  277. package/docs/README.md +0 -25
  278. package/docs/SDK_DEEP_DIVE.md +0 -643
  279. package/docs/SECURITY.md +0 -162
  280. package/docs/agent-runner-details.md +0 -749
  281. package/docs/api-details.md +0 -365
  282. package/docs/architecture-diagram.html +0 -422
  283. package/docs/architecture-diagram.md +0 -215
  284. package/docs/architecture.md +0 -751
  285. package/docs/audit/2026-04-30-channel-endpoint-audit.md +0 -36
  286. package/docs/build-and-runtime.md +0 -80
  287. package/docs/cross-mount-stress/README.md +0 -112
  288. package/docs/cross-mount-stress/container-writer-retry.mjs +0 -55
  289. package/docs/cross-mount-stress/container-writer-slow.mjs +0 -42
  290. package/docs/cross-mount-stress/container-writer.mjs +0 -47
  291. package/docs/cross-mount-stress/host-writer-retry.mjs +0 -55
  292. package/docs/cross-mount-stress/host-writer-slow.mjs +0 -43
  293. package/docs/cross-mount-stress/host-writer.mjs +0 -47
  294. package/docs/db-central.md +0 -316
  295. package/docs/db-session.md +0 -183
  296. package/docs/db.md +0 -119
  297. package/docs/design/2026-04-29-vault-management-ui.md +0 -231
  298. package/docs/design/2026-04-30-channel-wiring-rework.md +0 -234
  299. package/docs/design/2026-05-01-channel-wiring-approvals-deep-dive.md +0 -272
  300. package/docs/design/2026-05-02-channel-policy-and-approval-routing.md +0 -250
  301. package/docs/docker-sandboxes.md +0 -359
  302. package/docs/isolation-model.md +0 -88
  303. package/docs/ollama.md +0 -79
  304. package/docs/parachute-integration.md +0 -109
  305. package/docs/post-night-rebirth-reflections.md +0 -151
  306. package/eslint.config.js +0 -32
  307. package/pnpm-workspace.yaml +0 -8
  308. package/repo-tokens/README.md +0 -113
  309. package/repo-tokens/action.yml +0 -186
  310. package/repo-tokens/badge.svg +0 -23
  311. package/repo-tokens/examples/green.svg +0 -14
  312. package/repo-tokens/examples/red.svg +0 -14
  313. package/repo-tokens/examples/yellow-green.svg +0 -14
  314. package/repo-tokens/examples/yellow.svg +0 -14
  315. package/scripts/chat.ts +0 -101
  316. package/scripts/cleanup-sessions.sh +0 -150
  317. package/scripts/init-cli-agent.ts +0 -171
  318. package/scripts/init-first-agent.ts +0 -377
  319. package/scripts/parachute.ts +0 -158
  320. package/scripts/run-migrations.ts +0 -105
  321. package/scripts/sanity-live-poll.ts +0 -95
  322. package/scripts/seed-discord.ts +0 -79
  323. package/scripts/test-v2-agent.ts +0 -106
  324. package/scripts/test-v2-channel-e2e.ts +0 -265
  325. package/scripts/test-v2-host.ts +0 -184
  326. package/src/channels/adapter.ts +0 -214
  327. package/src/channels/ask-question.ts +0 -46
  328. package/src/channels/channel-registry.test.ts +0 -421
  329. package/src/channels/channel-registry.ts +0 -313
  330. package/src/channels/chat-sdk-bridge.test.ts +0 -84
  331. package/src/channels/chat-sdk-bridge.ts +0 -652
  332. package/src/channels/cli.ts +0 -276
  333. package/src/channels/discord.ts +0 -90
  334. package/src/channels/index.ts +0 -17
  335. package/src/channels/telegram-markdown-sanitize.test.ts +0 -78
  336. package/src/channels/telegram-markdown-sanitize.ts +0 -55
  337. package/src/channels/telegram-pairing.test.ts +0 -254
  338. package/src/channels/telegram-pairing.ts +0 -339
  339. package/src/channels/telegram.ts +0 -279
  340. package/src/channels/trust-hint.test.ts +0 -48
  341. package/src/channels/trust-hint.ts +0 -75
  342. package/src/claude-md-compose.migrate.test.ts +0 -64
  343. package/src/claude-md-compose.ts +0 -205
  344. package/src/command-gate.ts +0 -63
  345. package/src/config.test.ts +0 -93
  346. package/src/config.ts +0 -108
  347. package/src/container-config.ts +0 -167
  348. package/src/container-runner.test.ts +0 -32
  349. package/src/container-runner.ts +0 -576
  350. package/src/container-runtime.test.ts +0 -169
  351. package/src/container-runtime.ts +0 -92
  352. package/src/db/_bun-sqlite-shim.ts +0 -88
  353. package/src/db/agent-activity.test.ts +0 -155
  354. package/src/db/agent-activity.ts +0 -121
  355. package/src/db/agent-groups.ts +0 -77
  356. package/src/db/connection.migrate.test.ts +0 -143
  357. package/src/db/connection.ts +0 -224
  358. package/src/db/db-v2.test.ts +0 -440
  359. package/src/db/dropped-messages.ts +0 -44
  360. package/src/db/index.ts +0 -40
  361. package/src/db/messaging-groups.ts +0 -252
  362. package/src/db/migrations/001-initial.ts +0 -112
  363. package/src/db/migrations/002-chat-sdk-state.ts +0 -36
  364. package/src/db/migrations/008-dropped-messages.ts +0 -27
  365. package/src/db/migrations/009-drop-pending-credentials.ts +0 -13
  366. package/src/db/migrations/010-engage-modes.ts +0 -103
  367. package/src/db/migrations/011-pending-sender-approvals.ts +0 -40
  368. package/src/db/migrations/012-channel-registration.ts +0 -48
  369. package/src/db/migrations/013-approval-render-metadata.ts +0 -27
  370. package/src/db/migrations/014-secrets.ts +0 -44
  371. package/src/db/migrations/015-secrets-drop-host-pattern.ts +0 -18
  372. package/src/db/migrations/016-secret-assignments.ts +0 -30
  373. package/src/db/migrations/017-agent-activity.ts +0 -40
  374. package/src/db/migrations/018-oauth-app-configs.ts +0 -34
  375. package/src/db/migrations/019-oauth-app-connections.ts +0 -48
  376. package/src/db/migrations/020-agent-app-connections.ts +0 -28
  377. package/src/db/migrations/021-pending-oauth-states.ts +0 -35
  378. package/src/db/migrations/022-app-connections-provider.ts +0 -25
  379. package/src/db/migrations/023-agent-group-secret-mode.test.ts +0 -124
  380. package/src/db/migrations/023-agent-group-secret-mode.ts +0 -65
  381. package/src/db/migrations/024-collapse-approvals.test.ts +0 -249
  382. package/src/db/migrations/024-collapse-approvals.ts +0 -182
  383. package/src/db/migrations/025-secret-mode-check.test.ts +0 -155
  384. package/src/db/migrations/025-secret-mode-check.ts +0 -49
  385. package/src/db/migrations/026-user-dms-bot-id.test.ts +0 -116
  386. package/src/db/migrations/026-user-dms-bot-id.ts +0 -54
  387. package/src/db/migrations/027-provider-credentials.ts +0 -41
  388. package/src/db/migrations/_test-helpers.ts +0 -41
  389. package/src/db/migrations/index.ts +0 -127
  390. package/src/db/migrations/module-agent-to-agent-destinations.ts +0 -84
  391. package/src/db/migrations/module-approvals-pending-approvals.ts +0 -42
  392. package/src/db/migrations/module-approvals-title-options.ts +0 -40
  393. package/src/db/schema.ts +0 -258
  394. package/src/db/session-db.test.ts +0 -93
  395. package/src/db/session-db.ts +0 -325
  396. package/src/db/sessions.ts +0 -241
  397. package/src/delivery.test.ts +0 -148
  398. package/src/delivery.ts +0 -445
  399. package/src/env.ts +0 -74
  400. package/src/group-folder.test.ts +0 -35
  401. package/src/group-folder.ts +0 -44
  402. package/src/group-init.ts +0 -92
  403. package/src/host-core.test.ts +0 -456
  404. package/src/host-sweep.test.ts +0 -146
  405. package/src/host-sweep.ts +0 -287
  406. package/src/index.ts +0 -227
  407. package/src/install-slug.ts +0 -33
  408. package/src/log.test.ts +0 -81
  409. package/src/log.ts +0 -117
  410. package/src/mcp/http.ts +0 -72
  411. package/src/mcp/server.ts +0 -92
  412. package/src/mcp/stdio.ts +0 -51
  413. package/src/mcp/tools/activity.ts +0 -88
  414. package/src/mcp/tools/agent-groups.ts +0 -183
  415. package/src/mcp/tools/approvals.ts +0 -122
  416. package/src/mcp/tools/channels.ts +0 -199
  417. package/src/mcp/tools/index.ts +0 -27
  418. package/src/mcp/tools/oauth.ts +0 -48
  419. package/src/mcp/tools/secrets.ts +0 -169
  420. package/src/mcp/tools/sessions.ts +0 -135
  421. package/src/mcp/types.ts +0 -51
  422. package/src/modules/agent-to-agent/agent-route.test.ts +0 -46
  423. package/src/modules/agent-to-agent/agent-route.ts +0 -223
  424. package/src/modules/agent-to-agent/create-agent.ts +0 -127
  425. package/src/modules/agent-to-agent/db/agent-destinations.ts +0 -135
  426. package/src/modules/agent-to-agent/index.ts +0 -22
  427. package/src/modules/agent-to-agent/write-destinations.ts +0 -59
  428. package/src/modules/approvals/agent.md +0 -45
  429. package/src/modules/approvals/index.ts +0 -21
  430. package/src/modules/approvals/picks.test.ts +0 -291
  431. package/src/modules/approvals/primitive.ts +0 -279
  432. package/src/modules/approvals/project.md +0 -27
  433. package/src/modules/approvals/response-handler.ts +0 -87
  434. package/src/modules/index.ts +0 -24
  435. package/src/modules/interactive/agent.md +0 -21
  436. package/src/modules/interactive/index.ts +0 -69
  437. package/src/modules/interactive/project.md +0 -12
  438. package/src/modules/mount-security/index.ts +0 -448
  439. package/src/modules/mount-security/migrate.test.ts +0 -91
  440. package/src/modules/permissions/access.ts +0 -28
  441. package/src/modules/permissions/channel-approval.test.ts +0 -389
  442. package/src/modules/permissions/channel-approval.ts +0 -188
  443. package/src/modules/permissions/db/agent-group-members.ts +0 -44
  444. package/src/modules/permissions/db/pending-channel-approvals.test.ts +0 -86
  445. package/src/modules/permissions/db/pending-channel-approvals.ts +0 -66
  446. package/src/modules/permissions/db/pending-sender-approvals.ts +0 -60
  447. package/src/modules/permissions/db/user-dms.ts +0 -58
  448. package/src/modules/permissions/db/user-roles.ts +0 -85
  449. package/src/modules/permissions/db/users.ts +0 -38
  450. package/src/modules/permissions/index.ts +0 -421
  451. package/src/modules/permissions/permissions.test.ts +0 -358
  452. package/src/modules/permissions/sender-approval.test.ts +0 -470
  453. package/src/modules/permissions/sender-approval.ts +0 -165
  454. package/src/modules/permissions/user-dm.ts +0 -200
  455. package/src/modules/provider-credentials/db.ts +0 -121
  456. package/src/modules/provider-credentials/index.ts +0 -12
  457. package/src/modules/provider-credentials/spawn.test.ts +0 -206
  458. package/src/modules/provider-credentials/spawn.ts +0 -114
  459. package/src/modules/scheduling/actions.ts +0 -113
  460. package/src/modules/scheduling/db.test.ts +0 -282
  461. package/src/modules/scheduling/db.ts +0 -148
  462. package/src/modules/scheduling/index.ts +0 -34
  463. package/src/modules/scheduling/recurrence.test.ts +0 -98
  464. package/src/modules/scheduling/recurrence.ts +0 -54
  465. package/src/modules/self-mod/agent.md +0 -30
  466. package/src/modules/self-mod/apply.ts +0 -85
  467. package/src/modules/self-mod/index.ts +0 -30
  468. package/src/modules/self-mod/project.md +0 -39
  469. package/src/modules/self-mod/request.ts +0 -91
  470. package/src/modules/typing/index.ts +0 -165
  471. package/src/oauth/agent-app-connections.ts +0 -103
  472. package/src/oauth/app-configs.test.ts +0 -64
  473. package/src/oauth/app-configs.ts +0 -114
  474. package/src/oauth/app-connections.test.ts +0 -109
  475. package/src/oauth/app-connections.ts +0 -178
  476. package/src/oauth/crypto.ts +0 -56
  477. package/src/oauth/flow.ts +0 -104
  478. package/src/oauth/providers/google.test.ts +0 -38
  479. package/src/oauth/providers/google.ts +0 -46
  480. package/src/oauth/providers/index.ts +0 -48
  481. package/src/oauth/state-store.test.ts +0 -54
  482. package/src/oauth/state-store.ts +0 -93
  483. package/src/parachute/README.md +0 -27
  484. package/src/parachute/create-agent.test.ts +0 -83
  485. package/src/parachute/create-agent.ts +0 -122
  486. package/src/parachute/group-status.test.ts +0 -165
  487. package/src/parachute/group-status.ts +0 -136
  488. package/src/parachute/types.ts +0 -41
  489. package/src/parachute/vault-mcp.test.ts +0 -251
  490. package/src/parachute/vault-mcp.ts +0 -232
  491. package/src/platform-id.test.ts +0 -104
  492. package/src/platform-id.ts +0 -109
  493. package/src/providers/index.ts +0 -6
  494. package/src/providers/provider-container-registry.ts +0 -58
  495. package/src/response-registry.ts +0 -45
  496. package/src/router.ts +0 -530
  497. package/src/secrets/crypto.test.ts +0 -45
  498. package/src/secrets/crypto.ts +0 -55
  499. package/src/secrets/index.ts +0 -355
  500. package/src/secrets/master-key.ts +0 -70
  501. package/src/secrets/secrets.test.ts +0 -354
  502. package/src/session-manager.migrate.test.ts +0 -59
  503. package/src/session-manager.ts +0 -433
  504. package/src/startup-bootstrap.test.ts +0 -226
  505. package/src/startup-bootstrap.ts +0 -207
  506. package/src/state-sqlite.ts +0 -182
  507. package/src/timezone.test.ts +0 -64
  508. package/src/timezone.ts +0 -37
  509. package/src/types.ts +0 -230
  510. package/src/web/auth.test.ts +0 -335
  511. package/src/web/auth.ts +0 -214
  512. package/src/web/discord-validate.test.ts +0 -77
  513. package/src/web/discord-validate.ts +0 -88
  514. package/src/web/hub-discovery.test.ts +0 -98
  515. package/src/web/hub-discovery.ts +0 -69
  516. package/src/web/routes/activity.ts +0 -106
  517. package/src/web/routes/agent-provider.test.ts +0 -282
  518. package/src/web/routes/agent-provider.ts +0 -309
  519. package/src/web/routes/approvals.ts +0 -185
  520. package/src/web/routes/apps.ts +0 -434
  521. package/src/web/routes/channels-mg-detail.test.ts +0 -324
  522. package/src/web/routes/channels-mga-detail.test.ts +0 -425
  523. package/src/web/routes/channels.ts +0 -489
  524. package/src/web/routes/oauth-providers.ts +0 -42
  525. package/src/web/routes/secrets.test.ts +0 -175
  526. package/src/web/routes/secrets.ts +0 -282
  527. package/src/web/routes/sessions.ts +0 -123
  528. package/src/web/routes/settings.test.ts +0 -106
  529. package/src/web/routes/settings.ts +0 -247
  530. package/src/web/routes/setup-status.ts +0 -205
  531. package/src/web/routes/vaults.test.ts +0 -389
  532. package/src/web/routes/vaults.ts +0 -225
  533. package/src/web/server-version.test.ts +0 -16
  534. package/src/web/server.ts +0 -1003
  535. package/src/web/services-manifest.test.ts +0 -120
  536. package/src/web/services-manifest.ts +0 -61
  537. package/src/web/static-serve.test.ts +0 -255
  538. package/src/web/static-serve.ts +0 -104
  539. package/src/web/telegram-validate.test.ts +0 -116
  540. package/src/web/telegram-validate.ts +0 -107
  541. package/src/web/vault-proxy.test.ts +0 -214
  542. package/src/web/vault-proxy.ts +0 -120
  543. package/src/web/wire-channel.ts +0 -181
  544. package/src/webhook-server.ts +0 -134
  545. package/vitest.config.ts +0 -18
  546. package/web/README.md +0 -63
  547. package/web/ui/index.html +0 -13
  548. package/web/ui/package.json +0 -35
  549. package/web/ui/pnpm-lock.yaml +0 -2164
  550. package/web/ui/scripts/verify-base.mjs +0 -31
  551. package/web/ui/src/App.tsx +0 -88
  552. package/web/ui/src/components/ActivityFeed.tsx +0 -444
  553. package/web/ui/src/components/AgentGroupPicker.tsx +0 -263
  554. package/web/ui/src/components/AgentProviderCards.tsx +0 -220
  555. package/web/ui/src/components/CredentialForm.tsx +0 -214
  556. package/web/ui/src/components/ScopeGrants.tsx +0 -74
  557. package/web/ui/src/components/StatusDot.tsx +0 -43
  558. package/web/ui/src/components/VaultPicker.tsx +0 -127
  559. package/web/ui/src/components/setup/AdapterInstallStep.tsx +0 -178
  560. package/web/ui/src/components/setup/AgentGroupStep.tsx +0 -43
  561. package/web/ui/src/components/setup/ChannelPickStep.tsx +0 -74
  562. package/web/ui/src/components/setup/DoneStep.tsx +0 -49
  563. package/web/ui/src/components/setup/PrereqStep.tsx +0 -129
  564. package/web/ui/src/components/setup/TestConnectionStep.tsx +0 -108
  565. package/web/ui/src/components/setup/TestMessageStep.tsx +0 -104
  566. package/web/ui/src/components/setup/WireChannelStep.tsx +0 -166
  567. package/web/ui/src/components/setup/types.ts +0 -105
  568. package/web/ui/src/lib/api.test.ts +0 -410
  569. package/web/ui/src/lib/api.ts +0 -1210
  570. package/web/ui/src/lib/auth.test.ts +0 -139
  571. package/web/ui/src/lib/auth.ts +0 -348
  572. package/web/ui/src/lib/channel-adapters.ts +0 -136
  573. package/web/ui/src/main.tsx +0 -19
  574. package/web/ui/src/routes/ApprovalsList.tsx +0 -294
  575. package/web/ui/src/routes/Apps.tsx +0 -613
  576. package/web/ui/src/routes/ChannelWireDetail.test.tsx +0 -233
  577. package/web/ui/src/routes/ChannelWireDetail.tsx +0 -403
  578. package/web/ui/src/routes/ChannelsList.tsx +0 -158
  579. package/web/ui/src/routes/GroupDetail.tsx +0 -755
  580. package/web/ui/src/routes/GroupList.tsx +0 -187
  581. package/web/ui/src/routes/MessagingGroupDetail.test.tsx +0 -233
  582. package/web/ui/src/routes/MessagingGroupDetail.tsx +0 -306
  583. package/web/ui/src/routes/NewGroupWizard.tsx +0 -390
  584. package/web/ui/src/routes/OAuthCallback.tsx +0 -56
  585. package/web/ui/src/routes/SecretsList.tsx +0 -921
  586. package/web/ui/src/routes/SessionsList.tsx +0 -220
  587. package/web/ui/src/routes/SettingsAgentProvider.tsx +0 -109
  588. package/web/ui/src/routes/SettingsApprovals.tsx +0 -234
  589. package/web/ui/src/routes/SetupWizard.tsx +0 -219
  590. package/web/ui/src/routes/VaultDetail.test.tsx +0 -361
  591. package/web/ui/src/routes/VaultDetail.tsx +0 -960
  592. package/web/ui/src/routes/VaultsList.tsx +0 -295
  593. package/web/ui/src/routes/WireChannelPage.tsx +0 -413
  594. package/web/ui/src/styles.css +0 -608
  595. package/web/ui/src/test/setup.ts +0 -23
  596. package/web/ui/src/vite-env.d.ts +0 -10
  597. package/web/ui/vite.config.ts +0 -34
  598. package/web/ui/vitest.config.ts +0 -25
package/src/spa-serve.test.ts ADDED
@@ -0,0 +1,116 @@
1
+ /**
2
+ * Tests for the v2 agent SPA bundle serving (`src/spa-serve.ts`) — the daemon's
3
+ * `/app` mount. Proves: a missing dist 503s with a build hint; the SPA shell is
4
+ * served for the mount root + client-routed paths; real assets serve with the
5
+ * right content-type; path traversal is blocked; the mount-path predicate is
6
+ * exact.
7
+ */
8
+ import { describe, test, expect, beforeAll, afterAll } from "bun:test";
9
+ import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from "fs";
10
+ import { join } from "path";
11
+ import { tmpdir } from "os";
12
+ import {
13
+ SPA_MOUNT,
14
+ isSpaPath,
15
+ serveSpa,
16
+ spaContentType,
17
+ spaDistDir,
18
+ } from "./spa-serve.ts";
19
+
20
+ describe("isSpaPath", () => {
21
+ test("matches the mount root + sub-paths only", () => {
22
+ expect(isSpaPath("/app")).toBe(true);
23
+ expect(isSpaPath("/app/")).toBe(true);
24
+ expect(isSpaPath("/app/agents")).toBe(true);
25
+ expect(isSpaPath("/app/assets/index-abc.js")).toBe(true);
26
+ // NOT the daemon-rendered HTML pages or other routes.
27
+ expect(isSpaPath("/agents")).toBe(false);
28
+ expect(isSpaPath("/apple")).toBe(false);
29
+ expect(isSpaPath("/api/agents")).toBe(false);
30
+ expect(isSpaPath("/")).toBe(false);
31
+ });
32
+ });
33
+
34
+ describe("spaContentType", () => {
35
+ test("maps the realistic Vite output extensions", () => {
36
+ expect(spaContentType("/x/index.html")).toContain("text/html");
37
+ expect(spaContentType("/x/index-abc.js")).toContain("javascript");
38
+ expect(spaContentType("/x/index-abc.css")).toContain("css");
39
+ expect(spaContentType("/x/logo.svg")).toBe("image/svg+xml");
40
+ expect(spaContentType("/x/unknown.bin")).toBe("application/octet-stream");
41
+ });
42
+ });
43
+
44
+ describe("spaDistDir", () => {
45
+ test("anchors to <installDir>/web/ui/dist", () => {
46
+ expect(spaDistDir("/opt/agent")).toBe("/opt/agent/web/ui/dist");
47
+ });
48
+ });
49
+
50
+ describe("serveSpa — missing bundle", () => {
51
+ test("503s with a build hint when dist/ is absent", async () => {
52
+ const res = serveSpa("/nonexistent/dist", "/app/");
53
+ expect(res.status).toBe(503);
54
+ expect(await res.text()).toContain("run `bun run build`");
55
+ });
56
+ });
57
+
58
+ describe("serveSpa — with a fixture bundle", () => {
59
+ let dist: string;
60
+
61
+ beforeAll(() => {
62
+ dist = mkdtempSync(join(tmpdir(), "agent-spa-test-"));
63
+ mkdirSync(join(dist, "assets"), { recursive: true });
64
+ writeFileSync(join(dist, "index.html"), "<!doctype html><div id=root></div>");
65
+ writeFileSync(join(dist, "assets", "index-abc.js"), "console.log('spa')");
66
+ writeFileSync(join(dist, "assets", "index-abc.css"), ".x{color:red}");
67
+ });
68
+
69
+ afterAll(() => {
70
+ rmSync(dist, { recursive: true, force: true });
71
+ });
72
+
73
+ test("serves the SPA shell at the mount root", async () => {
74
+ const res = serveSpa(dist, SPA_MOUNT);
75
+ expect(res.status).toBe(200);
76
+ expect(res.headers.get("content-type")).toContain("text/html");
77
+ expect(await res.text()).toContain("id=root");
78
+ });
79
+
80
+ test("serves the SPA shell for a client-routed path (no extension)", async () => {
81
+ const res = serveSpa(dist, "/app/agents");
82
+ expect(res.status).toBe(200);
83
+ expect(res.headers.get("content-type")).toContain("text/html");
84
+ expect(await res.text()).toContain("id=root");
85
+ });
86
+
87
+ test("serves a real JS asset with the right content-type", async () => {
88
+ const res = serveSpa(dist, "/app/assets/index-abc.js");
89
+ expect(res.status).toBe(200);
90
+ expect(res.headers.get("content-type")).toContain("javascript");
91
+ expect(await res.text()).toContain("spa");
92
+ });
93
+
94
+ test("serves a real CSS asset", async () => {
95
+ const res = serveSpa(dist, "/app/assets/index-abc.css");
96
+ expect(res.status).toBe(200);
97
+ expect(res.headers.get("content-type")).toContain("css");
98
+ });
99
+
100
+ test("an asset-shaped path that doesn't exist falls back to the SPA shell", async () => {
101
+ const res = serveSpa(dist, "/app/assets/missing.js");
102
+ expect(res.status).toBe(200);
103
+ expect(res.headers.get("content-type")).toContain("text/html");
104
+ });
105
+
106
+ test("blocks path traversal out of dist/", async () => {
107
+ // A `..`-containing path never enters the asset branch → SPA shell (not the
108
+ // escaped file). The 404 belt-and-braces guards the loosened case.
109
+ const res = serveSpa(dist, "/app/../../etc/passwd");
110
+ // Either the shell (traversal filtered) or a 404 — never the escaped file.
111
+ expect([200, 404]).toContain(res.status);
112
+ if (res.status === 200) {
113
+ expect(res.headers.get("content-type")).toContain("text/html");
114
+ }
115
+ });
116
+ });
package/src/spa-serve.ts ADDED
@@ -0,0 +1,116 @@
1
+ /**
2
+ * Serve the built v2 agent SPA bundle (`web/ui/dist/`) at the daemon's `/app`
3
+ * mount — reachable at `<hub>/agent/app/` over the hub proxy (the hub strips the
4
+ * `/agent` prefix, so the daemon sees `/app/*`).
5
+ *
6
+ * This is ADDITIVE: it sits alongside the existing daemon-rendered HTML pages
7
+ * (`/agents`, `/home`, `/admin`, `/jobs`, `/terminal`, `/ui`), which stay mounted
8
+ * untouched. The design's incremental migration — operators compare the SPA with
9
+ * the HTML until the HTML retires in a later phase.
10
+ *
11
+ * Mirrors the hub's `serveSpa` (parachute-hub/src/hub-server.ts): asset URLs are
12
+ * origin-absolute (`/agent/app/assets/...`) per the Vite `base`, so the HTML
13
+ * loads correctly under the proxied mount; any non-asset path falls back to the
14
+ * SPA shell (react-router takes it from there). A missing `dist/` → 503 with a
15
+ * "run build" hint (the dev-checkout case).
16
+ */
17
+ import { existsSync } from "fs";
18
+ import { join, resolve } from "path";
19
+
20
+ /** The SPA mount the daemon serves the bundle under (post-stripPrefix). */
21
+ export const SPA_MOUNT = "/app";
22
+
23
+ /**
24
+ * Resolve the SPA bundle dir from the install root. Anchored to the package so a
25
+ * `bun src/daemon.ts` from any cwd finds `<repo>/web/ui/dist/`.
26
+ */
27
+ export function spaDistDir(installDir: string): string {
28
+ return join(installDir, "web", "ui", "dist");
29
+ }
30
+
31
+ /**
32
+ * True when `pathname` falls under the SPA mount (`/app`, `/app/`, `/app/...`).
33
+ * Asset requests (`/app/assets/...`) match too — they're served from `dist/`.
34
+ */
35
+ export function isSpaPath(pathname: string): boolean {
36
+ return pathname === SPA_MOUNT || pathname.startsWith(`${SPA_MOUNT}/`);
37
+ }
38
+
39
+ /**
40
+ * Pick a content type for the static assets Vite produces. Mismatches show up
41
+ * loud (a `.js` served as `text/html` is unmistakable); the list is trivially
42
+ * extensible.
43
+ */
44
+ export function spaContentType(pathname: string): string {
45
+ const ext = pathname.slice(pathname.lastIndexOf(".") + 1).toLowerCase();
46
+ switch (ext) {
47
+ case "html":
48
+ return "text/html; charset=utf-8";
49
+ case "js":
50
+ case "mjs":
51
+ return "application/javascript; charset=utf-8";
52
+ case "css":
53
+ return "text/css; charset=utf-8";
54
+ case "svg":
55
+ return "image/svg+xml";
56
+ case "png":
57
+ return "image/png";
58
+ case "ico":
59
+ return "image/x-icon";
60
+ case "woff2":
61
+ return "font/woff2";
62
+ case "woff":
63
+ return "font/woff";
64
+ case "json":
65
+ case "map":
66
+ return "application/json";
67
+ case "txt":
68
+ return "text/plain; charset=utf-8";
69
+ default:
70
+ return "application/octet-stream";
71
+ }
72
+ }
73
+
74
+ /**
75
+ * Serve a single file under the SPA mount, falling back to `index.html` for
76
+ * client-side-routed paths (anything that doesn't resolve to a real file under
77
+ * `dist/`). Path traversal is blocked twice: the asset-shape filter rejects
78
+ * sub-paths containing "..", and the resolved absolute path is checked to start
79
+ * with `dist/` before any read.
80
+ */
81
+ export function serveSpa(distDir: string, pathname: string): Response {
82
+ if (!existsSync(distDir)) {
83
+ return new Response(
84
+ "agent SPA bundle not found — run `bun run build` in web/ui/ to produce dist/",
85
+ { status: 503, headers: { "content-type": "text/plain; charset=utf-8" } },
86
+ );
87
+ }
88
+ // Strip the mount prefix: "/app" → "", "/app/" → "/", "/app/x" → "/x".
89
+ const sub = pathname === SPA_MOUNT ? "" : pathname.slice(SPA_MOUNT.length);
90
+ const indexPath = join(distDir, "index.html");
91
+
92
+ // Empty / mount-root / any non-asset request → the SPA shell. First defense
93
+ // against traversal: bare paths and anything containing ".." never enter the
94
+ // asset branch.
95
+ const looksLikeAsset = sub.length > 0 && /\.[a-z0-9]+$/i.test(sub) && !sub.includes("..");
96
+ if (!looksLikeAsset) {
97
+ return new Response(Bun.file(indexPath), {
98
+ headers: { "content-type": "text/html; charset=utf-8" },
99
+ });
100
+ }
101
+
102
+ const filePath = resolve(distDir, `.${sub}`);
103
+ // Second defense: refuse any resolved path that escapes dist/.
104
+ if (!filePath.startsWith(`${distDir}/`)) {
105
+ return new Response("not found", { status: 404 });
106
+ }
107
+ if (!existsSync(filePath)) {
108
+ // Asset request that doesn't resolve to a real file → the SPA shell.
109
+ return new Response(Bun.file(indexPath), {
110
+ headers: { "content-type": "text/html; charset=utf-8" },
111
+ });
112
+ }
113
+ return new Response(Bun.file(filePath), {
114
+ headers: { "content-type": spaContentType(filePath) },
115
+ });
116
+ }
package/src/spawn-agent-cli.test.ts ADDED
@@ -0,0 +1,172 @@
1
+ import { describe, test, expect } from "bun:test";
2
+ import { parseArgs, ArgError } from "../scripts/spawn-agent.ts";
3
+ import type { AgentChannelSpec } from "./sandbox/types.ts";
4
+
5
+ // These tests exercise ONLY the pure arg-parser (`parseArgs`) — no fs/tmux/mint
6
+ // side effect. The real-dep wiring (operator token, hub mint, sandbox, tmux) is
7
+ // covered by spawn-agent.test.ts against stubs; here we assert flags → the right
8
+ // AgentSpec, the --help short-circuit, and that bad args reject.
9
+
10
+ describe("parseArgs — name + channels + vault + egress + mounts → the right AgentSpec", () => {
11
+ test("a full invocation builds the complete spec", () => {
12
+ const { help, spec } = parseArgs([
13
+ "aaron-dev",
14
+ "--channel",
15
+ "aaron-dev",
16
+ "--channel",
17
+ "ops:read",
18
+ "--vault",
19
+ "default:read:#agent/message,#decision",
20
+ "--egress",
21
+ "registry.npmjs.org,github.com",
22
+ "--mount",
23
+ "/host/code:/work/code:ro",
24
+ "--mount",
25
+ "/host/cache:/work/cache:rw:shared-cache",
26
+ ]);
27
+ expect(help).toBe(false);
28
+ expect(spec).toBeDefined();
29
+ expect(spec!.name).toBe("aaron-dev");
30
+
31
+ // Channels: first is the wake channel (write by default); second scoped read.
32
+ expect(spec!.channels).toEqual([
33
+ { name: "aaron-dev" },
34
+ { name: "ops", access: "read" },
35
+ ] as AgentChannelSpec[]);
36
+
37
+ // Vault: name + access + tag-scope.
38
+ expect(spec!.vault).toEqual({
39
+ name: "default",
40
+ access: "read",
41
+ tags: ["#agent/message", "#decision"],
42
+ });
43
+
44
+ // Egress: additive host list, comma-split.
45
+ expect(spec!.egress).toEqual(["registry.npmjs.org", "github.com"]);
46
+
47
+ // Mounts: ro + rw-with-shared.
48
+ expect(spec!.mounts).toEqual([
49
+ { hostPath: "/host/code", mountPath: "/work/code", mode: "ro" },
50
+ { hostPath: "/host/cache", mountPath: "/work/cache", mode: "rw", shared: "shared-cache" },
51
+ ]);
52
+ });
53
+
54
+ test("a bare --channel defaults to write (back-compat single-threaded session)", () => {
55
+ const { spec } = parseArgs(["a", "--channel", "c"]);
56
+ expect(spec!.channels).toEqual([{ name: "c" }]);
57
+ });
58
+
59
+ test("--channel <name>:write is explicit write", () => {
60
+ const { spec } = parseArgs(["a", "--channel", "c:write"]);
61
+ expect(spec!.channels).toEqual([{ name: "c", access: "write" }]);
62
+ });
63
+
64
+ test("a minimal invocation (name + one channel) omits optional fields", () => {
65
+ const { spec } = parseArgs(["solo", "--channel", "solo"]);
66
+ expect(spec).toEqual({ name: "solo", channels: [{ name: "solo" }] });
67
+ expect(spec!.vault).toBeUndefined();
68
+ expect(spec!.egress).toBeUndefined();
69
+ expect(spec!.mounts).toBeUndefined();
70
+ });
71
+
72
+ test("--vault without a tag list omits tags", () => {
73
+ const { spec } = parseArgs(["a", "--channel", "c", "--vault", "default:write"]);
74
+ expect(spec!.vault).toEqual({ name: "default", access: "write" });
75
+ });
76
+
77
+ test("the FIRST channel is the wake channel (order preserved)", () => {
78
+ const { spec } = parseArgs(["a", "--channel", "first", "--channel", "second"]);
79
+ expect(spec!.channels[0]).toEqual({ name: "first" });
80
+ expect(spec!.channels[1]).toEqual({ name: "second" });
81
+ });
82
+
83
+ test("defaults omit filesystem/network; --full-read + --restricted set them + keep --egress", () => {
84
+ const def = parseArgs(["a", "--channel", "c"]).spec!;
85
+ expect(def.filesystem).toBeUndefined(); // default = workspace (scoped reads)
86
+ expect(def.network).toBeUndefined(); // default = open
87
+ const { spec } = parseArgs(["a", "--channel", "c", "--egress", "x.com", "--full-read", "--restricted"]);
88
+ expect(spec!.filesystem).toBe("full");
89
+ expect(spec!.network).toBe("restricted");
90
+ expect(spec!.egress).toEqual(["x.com"]); // additive hosts kept (used under restricted)
91
+ });
92
+ });
93
+
94
+ describe("parseArgs — --help short-circuits", () => {
95
+ test("--help returns help:true and builds no spec", () => {
96
+ const r = parseArgs(["--help"]);
97
+ expect(r.help).toBe(true);
98
+ expect(r.spec).toBeUndefined();
99
+ });
100
+
101
+ test("-h is the short alias", () => {
102
+ expect(parseArgs(["-h"]).help).toBe(true);
103
+ });
104
+
105
+ test("--help wins even with other args present", () => {
106
+ const r = parseArgs(["name", "--channel", "c", "--help"]);
107
+ expect(r.help).toBe(true);
108
+ expect(r.spec).toBeUndefined();
109
+ });
110
+ });
111
+
112
+ describe("parseArgs — bad args reject", () => {
113
+ test("missing name", () => {
114
+ expect(() => parseArgs(["--channel", "c"])).toThrow(ArgError);
115
+ expect(() => parseArgs(["--channel", "c"])).toThrow(/missing required <name>/);
116
+ });
117
+
118
+ test("no channels", () => {
119
+ expect(() => parseArgs(["just-a-name"])).toThrow(/at least one --channel/);
120
+ });
121
+
122
+ test("a second positional is rejected", () => {
123
+ expect(() => parseArgs(["a", "b", "--channel", "c"])).toThrow(/only one <name>/);
124
+ });
125
+
126
+ test("an unknown flag is rejected", () => {
127
+ expect(() => parseArgs(["a", "--channel", "c", "--bogus"])).toThrow(/unknown flag "--bogus"/);
128
+ });
129
+
130
+ test("a flag with a missing value is rejected", () => {
131
+ expect(() => parseArgs(["a", "--channel"])).toThrow(/--channel: expected a value/);
132
+ // A following flag is NOT consumed as the value.
133
+ expect(() => parseArgs(["a", "--channel", "--vault"])).toThrow(/--channel: expected a value/);
134
+ });
135
+
136
+ test("a bad channel access verb is rejected", () => {
137
+ expect(() => parseArgs(["a", "--channel", "c:admin"])).toThrow(/access must be "read" or "write"/);
138
+ });
139
+
140
+ test("an over-segmented channel is rejected", () => {
141
+ expect(() => parseArgs(["a", "--channel", "c:read:extra"])).toThrow(/extra ":"/);
142
+ });
143
+
144
+ test("a bad vault shape is rejected", () => {
145
+ expect(() => parseArgs(["a", "--channel", "c", "--vault", "default"])).toThrow(
146
+ /expected <name>:<read\|write>/,
147
+ );
148
+ expect(() => parseArgs(["a", "--channel", "c", "--vault", "default:admin"])).toThrow(
149
+ /access must be "read" or "write"/,
150
+ );
151
+ });
152
+
153
+ test("--vault given twice is rejected", () => {
154
+ expect(() =>
155
+ parseArgs(["a", "--channel", "c", "--vault", "default:read", "--vault", "other:write"]),
156
+ ).toThrow(/--vault may only be given once/);
157
+ });
158
+
159
+ test("a bad mount shape is rejected", () => {
160
+ expect(() => parseArgs(["a", "--channel", "c", "--mount", "/h:/m"])).toThrow(
161
+ /expected <hostPath:mountPath:ro\|rw/,
162
+ );
163
+ expect(() => parseArgs(["a", "--channel", "c", "--mount", "/h:/m:rx"])).toThrow(
164
+ /mode must be "ro" or "rw"/,
165
+ );
166
+ });
167
+
168
+ test("an empty egress list parses to no egress (not an error)", () => {
169
+ const { spec } = parseArgs(["a", "--channel", "c", "--egress", ""]);
170
+ expect(spec!.egress).toBeUndefined();
171
+ });
172
+ });