@proagentstore/cli 0.4.106 → 0.4.108

package/dist/browser-runner/coding/run-objective.js

@@ -1,8 +1,13 @@
 // The run's objective, delivered verbatim with a turn and attributed to the platform (#1019).
+import { RunnerInputError } from "../errors.js";
 const ORIGIN_KINDS = new Set(["account", "supervisor", "trigger", "unverified"]);
-/** Bounds on the constraint lines a run objective may carry: they are labels, never an essay. */
-const MAX_CONSTRAINTS = 20;
-const MAX_CONSTRAINT_CHARS = 500;
+/**
+ * Bounds on the constraint lines one objective envelope carries (#1019). Mirrored by the cloud
+ * (workers/api/src/lib/coding-objective-delivery.ts), which never sends an envelope past them. Nothing is
+ * cut to fit: a partial set would have the engine read the objective without a constraint that binds it.
+ */
+export const MAX_OBJECTIVE_CONSTRAINTS = 20;
+export const MAX_OBJECTIVE_CONSTRAINT_CHARS = 500;
 /** A run objective as the cloud sent it, or undefined — narrowed, because any caller can POST here (#1019). */
 export function runObjective(raw) {
     const o = raw;
@@ -13,10 +18,31 @@ export function runObjective(raw) {
     // A label longer than a label is not shortened into a different claim — it is dropped.
     const label = typeof origin?.by === "string" ? origin.by.replace(/\s+/g, " ").trim() : "";
     const by = label.length <= 128 ? label : "";
-    // Over-long or excess lines are dropped, never shortened: a truncated constraint is a different one.
-    const lines = Array.isArray(o.constraints) ? o.constraints.filter((c) => typeof c === "string" && !!c.trim() && c.length <= MAX_CONSTRAINT_CHARS).slice(0, MAX_CONSTRAINTS) : [];
+    const lines = objectiveConstraints(o.constraints);
     return { runId: o.runId, text: o.text, origin: by ? { kind, by } : { kind }, ...(lines.length ? { constraints: lines } : {}) };
 }
+/**
+ * The constraint lines, whole — or a refusal of the ENVELOPE, before anything runs (#1019). Never filtered or
+ * cut: dropping one line would deliver the objective as if that constraint did not bind.
+ */
+function objectiveConstraints(raw) {
+    if (raw === undefined)
+        return [];
+    const refuse = (why) => {
+        throw new RunnerInputError(`Run objective refused, nothing was run: its constraints ${why}. A partial set is never delivered.`);
+    };
+    if (!Array.isArray(raw))
+        return refuse("are not a list");
+    if (raw.length > MAX_OBJECTIVE_CONSTRAINTS)
+        return refuse(`number ${raw.length}, over the ${MAX_OBJECTIVE_CONSTRAINTS} one envelope carries`);
+    for (const c of raw) {
+        if (typeof c !== "string" || !c.trim())
+            return refuse("include an entry that is not a constraint line");
+        if (c.length > MAX_OBJECTIVE_CONSTRAINT_CHARS)
+            return refuse(`include a ${c.length}-character line, over ${MAX_OBJECTIVE_CONSTRAINT_CHARS}`);
+    }
+    return raw;
+}
 /** The attribution sentence: only what the platform verified about the author, never more. */
 function attribution(runId, origin) {
     const by = origin.by ? ` (${origin.by})` : "";

package/dist/browser-runner/coding/runtime.js

@@ -267,6 +267,8 @@ export class CodingRuntime {
                 const seen = inputId ? session.inputs.check(inputId, digest) : "new";
                 if (seen !== "new")
                     return { ...this.snapshot(sessionId), ...(seen === "duplicate" ? { duplicateInput: inputId } : { inputConflict: inputId }) };
+                // Narrowed BEFORE the input is accepted: an envelope whose constraints cannot be delivered whole is refused here (400), never run.
+                const objective = runObjective(action.objective);
                 // Narrowed rather than trusted: this runner is a published package any caller can
                 // POST to, and an unrecognised author must read as "unstated", not become a label.
                 session.input(action.text, {
@@ -274,7 +276,7 @@ export class CodingRuntime {
                     replay: typeof action.replay === "string" ? action.replay : undefined,
                     inputId,
                     digest,
-                    objective: runObjective(action.objective),
+                    objective,
                 });
                 break;
             }

package/dist/index.js

@@ -1725,6 +1725,13 @@ function policyScheduleAction(previous, next, wasAuthoritative) {
   if (!wasAuthoritative || !previous.autoUpdate) return "start";
   return "keep";
 }
+function acceptPolicyResponse(local, wasAuthoritative, response) {
+  const remote = policyFromResponse(response);
+  if (!remote) return null;
+  const action = policyScheduleAction(local, remote, wasAuthoritative);
+  const ownerTransition = action === "cancel" || !local.autoUpdate;
+  return { policy: ownerTransition ? { ...local, ...remote } : { ...local, autoUpdate: remote.autoUpdate }, action };
+}
 function mayAutomaticallyRestart(input) {
   return input.authoritative && input.enabled && input.workObserved && input.busy.length === 0;
 }
@@ -1980,18 +1987,17 @@ async function connectViaRelay(instanceIds, localUrl, runnerToken, opts, force =
   };
   const acceptAutoUpdatePolicy = (response) => {
     if (!autoUpdateKey) return;
-    const policy = policyFromResponse(response);
-    if (!policy) return;
-    const action = policyScheduleAction(autoUpdatePolicy, policy, autoUpdatePolicyAuthoritative);
-    autoUpdatePolicy = { ...autoUpdatePolicy, ...policy };
+    const accepted = acceptPolicyResponse(autoUpdatePolicy, autoUpdatePolicyAuthoritative, response);
+    if (!accepted) return;
+    autoUpdatePolicy = accepted.policy;
     autoUpdatePolicyAuthoritative = true;
     if (autoUpdateKey) saveAutoUpdatePolicy(autoUpdateKey, autoUpdatePolicy);
-    if (action === "cancel") {
+    if (accepted.action === "cancel") {
       scheduleAutomaticUpdate(false, true);
       return;
     }
     if (refreshingAutomaticPolicy) return;
-    if (action === "start") {
+    if (accepted.action === "start") {
       scheduleAutomaticUpdate(true);
     }
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.106",
+  "version": "0.4.108",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",