@ours.network/fleet 1.1.0-nightly.20 → 1.1.0-nightly.21

package/dist/spawn.js

@@ -1,5 +1,5 @@
 import { spawn as spawnChild } from 'node:child_process';
-import { closeSync, existsSync, mkdirSync, openSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { parse, stringify } from 'yaml';
 import { agentDir, defaultConfigPath } from './paths.js';
@@ -22,9 +22,12 @@ export function agentDefinitionFromSpawn(o) {
     if (o.agentDefinition) {
         if (o.brain !== undefined || o.role !== undefined || o.cwd !== undefined
             || o.coordinator !== undefined || o.approval !== undefined || o.filesystem !== undefined
-            || o.unattended !== undefined || o.isolationFile !== undefined || o.monitorConfig !== undefined)
+            || o.unattended !== undefined || o.isolationFile !== undefined || o.monitorConfig !== undefined
+            || o.loopsFile !== undefined)
             throw new Error('canonical agentDefinition conflicts with separate Agent fields');
         const definition = structuredClone(o.agentDefinition);
+        if (o.noLoops === true && definition.loops !== undefined)
+            throw new Error('canonical agentDefinition loops conflict with explicit no-loops policy');
         if (o.identity)
             definition.identity = o.identity;
         return definition;
@@ -46,12 +49,21 @@ export function agentDefinitionFromSpawn(o) {
         ...(permissions ? { permissions } : {}),
         ...(o.isolationFile ? { isolation: readIsolationFile(o.isolationFile) } : {}),
         ...(o.monitorConfig ? { monitor: structuredClone(o.monitorConfig) } : {}),
+        ...(o.loopsFile ? { loops: readLoopsFile(o.loopsFile) } : {}),
     };
 }
 function resolvedSpawn(o) {
     const definition = agentDefinitionFromSpawn(o);
-    const cfg = loadConfig(o.configPath, { additionalAgent: { id: o.name, definition } });
-    return { definition, role: findRole(cfg, o.name) };
+    const cfg = loadConfig(o.configPath, {
+        additionalAgent: { id: o.name, definition, temporary: o.temp === true },
+    });
+    const role = findRole(cfg, o.name);
+    if (o.temp)
+        role.temporaryLoopSource = o.loopSource
+            ?? (role.temporaryLoops?.length ? 'agent-template' : 'omitted');
+    if (o.noLoops === true)
+        role.temporaryLoops = [];
+    return { definition, role };
 }
 /**
  * Read and validate an `--isolation-file`. The file is the existing
@@ -78,7 +90,37 @@ export function readIsolationFile(path) {
         throw new Error(`--isolation-file ${path}: ${problems.join('; ')}`);
     return cfg;
 }
+/** Read a private canonical temporary-loop override before any creation side effect. */
+export function readLoopsFile(path) {
+    const stat = lstatSync(path);
+    const uid = process.getuid?.();
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1_000_000
+        || (uid !== undefined && stat.uid !== uid) || (stat.mode & 0o777) !== 0o600)
+        throw new Error(`${path}: loops file must be an owner-only regular file no larger than 1 MB`);
+    let raw;
+    try {
+        raw = parse(readFileSync(path, 'utf8'));
+    }
+    catch (error) {
+        throw new Error(`--loops-file ${path}: ${error.message}`);
+    }
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)
+        || !Object.hasOwn(raw, 'loops')
+        || Object.keys(raw).some(key => key !== 'loops'))
+        throw new Error(`${path}: expected exactly a top-level loops: mapping`);
+    const loops = raw.loops;
+    if (!loops || typeof loops !== 'object' || Array.isArray(loops)
+        || !Object.keys(loops).length)
+        throw new Error(`${path}: loops must be a non-empty mapping; use --no-loops to disable loops`);
+    return structuredClone(loops);
+}
 export function validateSpawnOpts(o) {
+    if (o.loopsFile && o.noLoops === true)
+        throw new Error('--loops-file and --no-loops are mutually exclusive');
+    if ((o.loopsFile || o.noLoops === true || o.agentDefinition?.loops !== undefined) && !o.temp)
+        throw new Error('temporary Agent loops require --temp');
+    if (o.loopsFile)
+        readLoopsFile(o.loopsFile);
     if (o.approval && !['ask', 'auto', 'allow', 'deny'].includes(o.approval))
         throw new Error(`invalid --approval '${o.approval}'; allowed: ask, auto, allow (deprecated alias: deny)`);
     if (o.filesystem && !['read-only', 'workspace', 'unrestricted'].includes(o.filesystem))
@@ -149,7 +191,7 @@ export function spawnDryRun(o) {
  * `env`, `bio`, `persona` and `harness_options` are deliberately absent: the
  * record exists to be read, and must not become a place credentials collect.
  */
-function provenanceSettings(o, defaults) {
+function provenanceSettings(o, defaults, resolvedLoops = []) {
     const perms = (defaults.permissions ?? {});
     const callerDefaults = new Set(o.inheritedFromCaller ?? []);
     const tagged = (key, entry) => callerDefaults.has(key) ? { ...entry, source: 'caller-role' } : entry;
@@ -169,6 +211,16 @@ function provenanceSettings(o, defaults) {
             ? { value: 'declared via --isolation-file', source: 'cli' }
             : { value: defaults.isolation ? 'from fleet defaults' : undefined, source: defaults.isolation ? 'fleet-default' : 'built-in' },
         monitor: tagged('monitorConfig', provenanceOf(o.monitorConfig, defaults.monitor, { mode: 'fleet' })),
+        loops: {
+            value: o.noLoops ? { enabled: false, loops: [] }
+                : resolvedLoops.length ? resolvedLoops.map(loop => ({
+                    name: loop.name, enabled: loop.enabled, intervalMs: loop.intervalMs,
+                    initialDelayMs: loop.initialDelayMs, jitterMs: loop.jitterMs,
+                    prompt: { bytes: loop.promptBytes, sha256: loop.promptHash },
+                })) : 'omitted (legacy no temporary loops)',
+            source: o.loopSource === 'agent-template' ? 'agent-template'
+                : o.loopsFile || o.noLoops || o.loopSource === 'cli' ? 'cli' : 'built-in',
+        },
     };
 }
 /** Permanent spawn: persist one bare Agent document under the selected v2 root. */
@@ -232,7 +284,7 @@ export async function spawnPermanent(o, deps, creation = {}) {
         // launch still records how it was asked for.
         const provenance = buildProvenance({
             role: o.name, lifetime: 'permanent', fleetVersion: VERSION,
-            settings: provenanceSettings(o, cfg.defaults),
+            settings: provenanceSettings(o, cfg.defaults, prepared.role.temporaryLoops),
             surface: o.surface, creationActionId: o.creationActionId, callerRole: o.callerRole,
         });
         mkdirSync(agentDir(o.name), { recursive: true });
@@ -293,14 +345,19 @@ export async function spawnTemp(o, binPath, launch = independentSupervisor, crea
 }
 async function spawnTempInner(o, preparedRole, binPath, launch, tx, onStage) {
     const cfg = loadConfig(o.configPath);
+    const { temporaryLoops, ...launchRole } = preparedRole;
     const role = {
-        ...preparedRole, sourceFile: '(temp)', loops: undefined, roomMemberStartup: o.roomMemberStartup,
+        ...launchRole, sourceFile: '(temp)',
+        ...(o.noLoops === true ? { loops: [] }
+            : temporaryLoops?.length ? { loops: temporaryLoops } : { loops: undefined }),
+        temporaryLoopSource: o.loopSource ?? (temporaryLoops?.length ? 'agent-template' : 'omitted'),
+        roomMemberStartup: o.roomMemberStartup,
     };
     onStage?.('writing_role');
     const dir = applyRole(role, { temp: true, identityGuarantee: 'unverified' });
     const provenance = buildProvenance({
         role: o.name, lifetime: 'temporary', fleetVersion: VERSION,
-        settings: provenanceSettings(o, cfg.defaults),
+        settings: provenanceSettings(o, cfg.defaults, preparedRole.temporaryLoops),
         surface: o.surface, creationActionId: o.creationActionId, callerRole: o.callerRole,
     });
     writeProvenance(dir, provenance);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.1.0-nightly.20",
+  "version": "1.1.0-nightly.21",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",