@probnaya/057-cli 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE.md +55 -0
- package/NOTICE.md +109 -0
- package/README.md +196 -0
- package/bin/057.mjs +36 -0
- package/dist/057-mark.svg +9 -0
- package/dist/assets/index-57shDcHR.css +1 -0
- package/dist/assets/index-s97wO9Og.js +626 -0
- package/dist/favicon-16.png +0 -0
- package/dist/favicon-32.png +0 -0
- package/dist/index.html +17 -0
- package/dist-server/057.mjs +132 -0
- package/package.json +66 -0
package/LICENSE.md
ADDED
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
# PolyForm Internal Use License 1.0.0
|
|
2
|
+
|
|
3
|
+
<https://polyformproject.org/licenses/internal-use/1.0.0>
|
|
4
|
+
|
|
5
|
+
## Acceptance
|
|
6
|
+
|
|
7
|
+
In order to get any license under these terms, you must agree to them as both strict obligations and conditions to all your licenses.
|
|
8
|
+
|
|
9
|
+
## Copyright License
|
|
10
|
+
|
|
11
|
+
The licensor grants you a copyright license for the software to do everything you might do with the software that would otherwise infringe the licensor's copyright in it for any permitted purpose. However, you may only make changes or new works based on the software according to [Changes and New Works License](#changes-and-new-works-license), and you may not distribute the software.
|
|
12
|
+
|
|
13
|
+
## Changes and New Works License
|
|
14
|
+
|
|
15
|
+
The licensor grants you an additional copyright license to make changes and new works based on the software for any permitted purpose.
|
|
16
|
+
|
|
17
|
+
## Patent License
|
|
18
|
+
|
|
19
|
+
The licensor grants you a patent license for the software that covers patent claims the licensor can license, or becomes able to license, that you would infringe by using the software.
|
|
20
|
+
|
|
21
|
+
## Fair Use
|
|
22
|
+
|
|
23
|
+
You may have "fair use" rights for the software under the law. These terms do not limit them.
|
|
24
|
+
|
|
25
|
+
## Internal Business Use
|
|
26
|
+
|
|
27
|
+
Use of the software for the internal business operations of you and your company is use for a permitted purpose.
|
|
28
|
+
|
|
29
|
+
## No Other Rights
|
|
30
|
+
|
|
31
|
+
These terms do not allow you to sublicense or transfer any of your licenses to anyone else, or prevent the licensor from granting licenses to anyone else. These terms do not imply any other licenses.
|
|
32
|
+
|
|
33
|
+
## Patent Defense
|
|
34
|
+
|
|
35
|
+
If you make any written claim that the software infringes or contributes to infringement of any patent, your patent license for the software granted under these terms ends immediately. If your company makes such a claim, your patent license ends immediately for work on behalf of your company.
|
|
36
|
+
|
|
37
|
+
## Violations
|
|
38
|
+
|
|
39
|
+
The first time you are notified in writing that you have violated any of these terms, or done anything with the software not covered by your licenses, your licenses can nonetheless continue if you come into full compliance with these terms, and take practical steps to correct past violations, within 32 days of receiving notice. Otherwise, all your licenses end immediately.
|
|
40
|
+
|
|
41
|
+
## No Liability
|
|
42
|
+
|
|
43
|
+
***As far as the law allows, the software comes as is, without any warranty or condition, and the licensor will not be liable to you for any damages arising out of these terms or the use or nature of the software, under any kind of legal claim.***
|
|
44
|
+
|
|
45
|
+
## Definitions
|
|
46
|
+
|
|
47
|
+
The **licensor** is the individual or entity offering these terms, and the **software** is the software the licensor makes available under these terms.
|
|
48
|
+
|
|
49
|
+
**You** refers to the individual or entity agreeing to these terms.
|
|
50
|
+
|
|
51
|
+
**Your company** is any legal entity, sole proprietorship, or other kind of organization that you work for, plus all organizations that have control over, are under the control of, or are under common control with that organization. **Control** means ownership of substantially all the assets of an entity, or the power to direct its management and policies by vote, contract, or otherwise. Control can be direct or indirect.
|
|
52
|
+
|
|
53
|
+
**Your licenses** are all the licenses granted to you for the software under these terms.
|
|
54
|
+
|
|
55
|
+
**Use** means anything you do with the software requiring one of your licenses.
|
package/NOTICE.md
ADDED
|
@@ -0,0 +1,109 @@
|
|
|
1
|
+
# Third-party notices
|
|
2
|
+
|
|
3
|
+
057's published package contains no runtime dependencies: `npm install @probnaya/057-cli` installs one tarball
|
|
4
|
+
and nothing else. It does, however, **redistribute compiled third-party code** inside its built
|
|
5
|
+
interface — `dist/assets/index-*.js` is a bundle, and React, React DOM, its scheduler and vgpu are
|
|
6
|
+
in it. Vite's module-preload bootstrap is also injected into that bundle. They appear as
|
|
7
|
+
devDependencies in `package.json` because they are needed to *build*, and that is the correct
|
|
8
|
+
classification; it does not remove the obligation to carry their notices, because their code is in
|
|
9
|
+
what you receive.
|
|
10
|
+
|
|
11
|
+
Each component below is MIT-licensed, and MIT requires that the copyright notice and permission
|
|
12
|
+
notice accompany substantial portions of the software. These third-party components remain under
|
|
13
|
+
their own MIT licences and are not relicensed under 057's PolyForm Internal Use licence. That is
|
|
14
|
+
what this file is for.
|
|
15
|
+
|
|
16
|
+
| Component | Version | License | Copyright |
|
|
17
|
+
| --- | --- | --- | --- |
|
|
18
|
+
| react | 19.2.8 | MIT | Meta Platforms, Inc. and affiliates |
|
|
19
|
+
| react-dom | 19.2.8 | MIT | Meta Platforms, Inc. and affiliates |
|
|
20
|
+
| scheduler | 0.27.0 | MIT | Meta Platforms, Inc. and affiliates |
|
|
21
|
+
| vgpu | 0.3.1 | MIT | Vercel, Inc. |
|
|
22
|
+
| Vite module-preload bootstrap | 7.3.6 | MIT | VoidZero Inc. and Vite contributors |
|
|
23
|
+
|
|
24
|
+
The Node runtime (`dist-server/057.mjs`) bundles only 057's own code and imports only Node
|
|
25
|
+
builtins. Its store is `node:sqlite`, which is part of Node itself and is not redistributed here.
|
|
26
|
+
|
|
27
|
+
No web fonts are bundled or fetched. The interface names IBM Plex Mono first in its type stack and
|
|
28
|
+
falls through to the system monospace when it is not installed locally, so no font is redistributed
|
|
29
|
+
and no font licence applies.
|
|
30
|
+
|
|
31
|
+
---
|
|
32
|
+
|
|
33
|
+
## React, React DOM, and scheduler
|
|
34
|
+
|
|
35
|
+
```
|
|
36
|
+
MIT License
|
|
37
|
+
|
|
38
|
+
Copyright (c) Meta Platforms, Inc. and affiliates.
|
|
39
|
+
|
|
40
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
41
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
42
|
+
in the Software without restriction, including without limitation the rights
|
|
43
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
44
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
45
|
+
furnished to do so, subject to the following conditions:
|
|
46
|
+
|
|
47
|
+
The above copyright notice and this permission notice shall be included in all
|
|
48
|
+
copies or substantial portions of the Software.
|
|
49
|
+
|
|
50
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
51
|
+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
52
|
+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
53
|
+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
54
|
+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
55
|
+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
56
|
+
SOFTWARE.
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
## vgpu
|
|
60
|
+
|
|
61
|
+
```
|
|
62
|
+
MIT License
|
|
63
|
+
|
|
64
|
+
Copyright (c) 2025 Vercel, Inc.
|
|
65
|
+
|
|
66
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
67
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
68
|
+
in the Software without restriction, including without limitation the rights
|
|
69
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
70
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
71
|
+
furnished to do so, subject to the following conditions:
|
|
72
|
+
|
|
73
|
+
The above copyright notice and this permission notice shall be included in all
|
|
74
|
+
copies or substantial portions of the Software.
|
|
75
|
+
|
|
76
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
77
|
+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
78
|
+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
79
|
+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
80
|
+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
81
|
+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
82
|
+
SOFTWARE.
|
|
83
|
+
```
|
|
84
|
+
|
|
85
|
+
## Vite module-preload bootstrap
|
|
86
|
+
|
|
87
|
+
```
|
|
88
|
+
MIT License
|
|
89
|
+
|
|
90
|
+
Copyright (c) 2019-present, VoidZero Inc. and Vite contributors
|
|
91
|
+
|
|
92
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
93
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
94
|
+
in the Software without restriction, including without limitation the rights
|
|
95
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
96
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
97
|
+
furnished to do so, subject to the following conditions:
|
|
98
|
+
|
|
99
|
+
The above copyright notice and this permission notice shall be included in all
|
|
100
|
+
copies or substantial portions of the Software.
|
|
101
|
+
|
|
102
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
103
|
+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
104
|
+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
105
|
+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
106
|
+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
107
|
+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
108
|
+
SOFTWARE.
|
|
109
|
+
```
|
package/README.md
ADDED
|
@@ -0,0 +1,196 @@
|
|
|
1
|
+
PROBNAYA / 057
|
|
2
|
+
INSTRUMENT
|
|
3
|
+
|
|
4
|
+
Independent Computational Laboratory
|
|
5
|
+
|
|
6
|
+
# 057
|
|
7
|
+
|
|
8
|
+
A spatial interface for observing the shape of a computational workday.
|
|
9
|
+
|
|
10
|
+
**Infrastructure is permanent. Activity is temporary. The field remembers.**
|
|
11
|
+
|
|
12
|
+
```bash
|
|
13
|
+
npx @probnaya/057-cli
|
|
14
|
+
```
|
|
15
|
+
|
|
16
|
+
Then open the URL it prints. Nothing else is needed — no account, no configuration, no network.
|
|
17
|
+
|
|
18
|
+
> **First public experiment — v0.1.0.** 057 is being released early and narrowly, to find out
|
|
19
|
+
> whether the idea holds up on machines that are not the one it was built on. It supports **macOS
|
|
20
|
+
> and a WebGPU browser**, and nothing else honestly. The store format may change between 0.x
|
|
21
|
+
> releases. Read *Experimental limitations* before you rely on it.
|
|
22
|
+
|
|
23
|
+
## What it is
|
|
24
|
+
|
|
25
|
+
057 reads telemetry that already exists on your machine — the process table, and whatever state
|
|
26
|
+
your AI coding runtimes have written to disk — and renders it as a deformable field on the GPU.
|
|
27
|
+
|
|
28
|
+
FIELD is the product, not a decoration on top of it: a continuous computational medium, deformed
|
|
29
|
+
permanently by the machines you own and temporarily by what runs on them. You explore it by
|
|
30
|
+
trackpad — pan, pinch, and a semantic zoom that exposes more of the same thing rather than
|
|
31
|
+
switching to another screen. Zoom out past the surface and the day appears as sediment beneath the
|
|
32
|
+
live masses, one lane per machine, coloured by outcome.
|
|
33
|
+
|
|
34
|
+
It is an **instrument**, which commits it to one rule above all others: *it never shows a plausible
|
|
35
|
+
number in place of a gap.* If a source does not report something, 057 does not display it. Anything
|
|
36
|
+
computed rather than read is labelled with the assumption it rests on. There is no cost estimate
|
|
37
|
+
anywhere, because token counts are reported and money mostly is not.
|
|
38
|
+
|
|
39
|
+
## Run it
|
|
40
|
+
|
|
41
|
+
```bash
|
|
42
|
+
npx @probnaya/057-cli
|
|
43
|
+
```
|
|
44
|
+
|
|
45
|
+
or, to keep it around:
|
|
46
|
+
|
|
47
|
+
```bash
|
|
48
|
+
npm install -g @probnaya/057-cli
|
|
49
|
+
057
|
|
50
|
+
```
|
|
51
|
+
|
|
52
|
+
```bash
|
|
53
|
+
057 # observe, and serve the interface on http://localhost:5057
|
|
54
|
+
057 status # where the store is, how big it is, what has contributed
|
|
55
|
+
057 compact # reclaim disk freed by retention
|
|
56
|
+
057 reset # delete the local store
|
|
57
|
+
057 --help
|
|
58
|
+
```
|
|
59
|
+
|
|
60
|
+
057 runs in the foreground and stops when you stop it. There is no daemon, no background service,
|
|
61
|
+
and nothing is installed into your login items. If `5057` is busy it takes the next free port and
|
|
62
|
+
prints it.
|
|
63
|
+
|
|
64
|
+
## Requirements
|
|
65
|
+
|
|
66
|
+
| | |
|
|
67
|
+
| --- | --- |
|
|
68
|
+
| **OS** | **macOS only.** The package declares `"os": ["darwin"]` and npm will refuse to install elsewhere — the process sampler reads a BSD process table and the Cursor reader looks in a macOS path. A 057 that silently mis-parsed your process table would be worse than one that will not start. |
|
|
69
|
+
| **Node** | 24.x. The package declares `>=22.5.0`, where the built-in SQLite the store needs first exists, but only 24 has been exercised. |
|
|
70
|
+
| **Browser** | A WebGPU browser: Chrome 113+, Edge 113+, or Safari 26+. Without WebGPU the interface says so plainly rather than falling back to something that is not FIELD. |
|
|
71
|
+
| **Network** | Only to download the package. Running 057 needs none. |
|
|
72
|
+
|
|
73
|
+
## What it reads, and what it keeps
|
|
74
|
+
|
|
75
|
+
**Observed:** this machine only. The process table, sampled every five seconds, and files the AI
|
|
76
|
+
coding runtimes on your machine have already written for their own purposes. 057 does not attach to
|
|
77
|
+
processes, does not read process memory, and does not watch your keyboard, screen, network or
|
|
78
|
+
filesystem at large.
|
|
79
|
+
|
|
80
|
+
**Stored:** hostname and machine name; working-directory and workspace paths; process and command
|
|
81
|
+
names; session and execution labels as the runtime recorded them; models, tools, token counts,
|
|
82
|
+
statuses and timings; and a timeline of when your machine was working.
|
|
83
|
+
|
|
84
|
+
**Never stored:** prompt and response bodies, file contents, keystrokes, screen or clipboard
|
|
85
|
+
contents, credentials, environment variables, network traffic, or full command lines. 057 keeps a
|
|
86
|
+
pointer to the record it read a fact from, never a copy of it.
|
|
87
|
+
|
|
88
|
+
**Where:** one SQLite database at `~/.057/events.db`, created owner-only (`0700`/`0600`). Nowhere
|
|
89
|
+
else. `O57_STORE` overrides it; `057 status` prints the path, size and permissions.
|
|
90
|
+
|
|
91
|
+
**Sent:** nothing. No account, no cloud, no synchronisation, no product analytics, no crash
|
|
92
|
+
reporting, no update check. The interface fetches nothing but its own local API — not even a web
|
|
93
|
+
font. The only connection is the loopback socket between your browser and the local server. This is
|
|
94
|
+
057's own behaviour; the runtimes it observes talk to their providers on their own terms.
|
|
95
|
+
|
|
96
|
+
**Kept:** process observations 7 days, sessions and executions 90 days, machine identity forever.
|
|
97
|
+
Both windows are configurable. Deleting rows lets SQLite reuse the pages, so the store plateaus
|
|
98
|
+
rather than shrinks — `057 compact` is what returns disk.
|
|
99
|
+
|
|
100
|
+
**Deleted:** `057 reset`, or `rm -rf ~/.057`. Both are complete; there is nothing anywhere else.
|
|
101
|
+
Reset is permanent, and the OS-process half of your history cannot be re-collected.
|
|
102
|
+
|
|
103
|
+
That is the essential account; [the manual](https://057.probnaya.work/docs/data-and-privacy) gives the long one.
|
|
104
|
+
|
|
105
|
+
## Sources
|
|
106
|
+
|
|
107
|
+
057 builds **one world from every source at once**. Which of them you *show* is a filter, never a
|
|
108
|
+
different world. Every source is optional, and each is read read-only from state that runtime
|
|
109
|
+
already keeps — 057 does not modify them, does not require them to be running, and they never learn
|
|
110
|
+
it exists.
|
|
111
|
+
|
|
112
|
+
| Source | Read from | Override |
|
|
113
|
+
| --- | --- | --- |
|
|
114
|
+
| OS processes | this machine's process table | — |
|
|
115
|
+
| Claude Code | `~/.claude` | `CLAUDE_HOME` |
|
|
116
|
+
| Codex | `~/.codex` | `CODEX_HOME` |
|
|
117
|
+
| Cursor | `~/Library/Application Support/Cursor` | `CURSOR_GLOBAL_STORAGE` |
|
|
118
|
+
| Gemini CLI | `~/.gemini` | `GEMINI_HOME` |
|
|
119
|
+
| DeepSeek Harness | `~/.dsh` | `DSH_HOME` |
|
|
120
|
+
| 0x2F | `<workspace>/.work` | `WORK_ROOTS` |
|
|
121
|
+
|
|
122
|
+
**A machine with none of them installed is a valid mode, not a broken one.** It has a process table,
|
|
123
|
+
and 057 has something true to say about it; the header says `OS ONLY` rather than reporting six
|
|
124
|
+
failures. *Not installed here*, *installed with nothing to read* and *installed and failing* are
|
|
125
|
+
three different facts and are reported as three different things. Capability differences surface as
|
|
126
|
+
absent fields, never as invented ones — Cursor persists no token counts, so 057 shows none for
|
|
127
|
+
Cursor rather than estimating them.
|
|
128
|
+
|
|
129
|
+
A real failure is never quiet either: one failed round says nothing, several in a row is reported as
|
|
130
|
+
`SOURCE FAILING`, named, with the error. If none of these is on your machine, switch the header to
|
|
131
|
+
`SYNTHETIC` for a deterministic replay — clearly labelled, never mixed with real telemetry.
|
|
132
|
+
|
|
133
|
+
## Reading FIELD
|
|
134
|
+
|
|
135
|
+
Machines are permanent deformations in the medium. Work running on them disturbs it, relaxes back
|
|
136
|
+
slowly when it ends, and a session is the altitude at which its executions close into one contour.
|
|
137
|
+
Zoom out for the day beneath. Click anything for the record behind it.
|
|
138
|
+
|
|
139
|
+
That is the whole vocabulary. [The manual](https://057.probnaya.work/docs/field) walks through each term with what it looks like.
|
|
140
|
+
|
|
141
|
+
## The manual
|
|
142
|
+
|
|
143
|
+
This file is meant to be enough on its own: what 057 is, how to run it, what it reads and keeps,
|
|
144
|
+
how to delete it, and what it is licensed under. The full manual is at
|
|
145
|
+
**<https://057.probnaya.work/docs>** and covers each of these at length.
|
|
146
|
+
|
|
147
|
+
| | |
|
|
148
|
+
| --- | --- |
|
|
149
|
+
| [Getting started](https://057.probnaya.work/docs/getting-started) | Requirements, running, ports, the commands, configuration. |
|
|
150
|
+
| [Sources](https://057.probnaya.work/docs/sources) | What each source contributes, and what each state means. |
|
|
151
|
+
| [Data and privacy](https://057.probnaya.work/docs/data-and-privacy) | What is observed, stored, sent, kept and deleted. |
|
|
152
|
+
| [Reading FIELD](https://057.probnaya.work/docs/field) | How to read the interface. |
|
|
153
|
+
| [Troubleshooting](https://057.probnaya.work/docs/troubleshooting) | Failure modes, and which ones are safe to act on. |
|
|
154
|
+
|
|
155
|
+
## Experimental limitations
|
|
156
|
+
|
|
157
|
+
Stated plainly, because this is a 0.1.0 and you are the experiment.
|
|
158
|
+
|
|
159
|
+
- **macOS only, and WebGPU is required.** Neither is a "coming soon"; both are refusals to pretend.
|
|
160
|
+
- **The store format may change.** It is versioned and upgrades in place, and a store from a newer
|
|
161
|
+
057 is refused rather than downgraded — but a 0.x release may still ask you to reset.
|
|
162
|
+
- **Exits are inferred.** The process sampler is a five-second snapshot, not a kernel hook: it
|
|
163
|
+
cannot see an exit, only stop seeing a process, and everything derived from that says so. A
|
|
164
|
+
process that starts and exits within one interval is never observed at all.
|
|
165
|
+
- **Runtime formats drift.** 057 reads files those runtimes never promised anyone. A source can
|
|
166
|
+
stop working after an unrelated upgrade; it will say so rather than produce plausible nonsense.
|
|
167
|
+
- **A damaged store degrades rather than dies**, and an unwritable one is treated as a permissions
|
|
168
|
+
problem, never as a reason to delete an intact store.
|
|
169
|
+
- **There is no backup or export.** The store is a SQLite file; that is the export.
|
|
170
|
+
- **One machine.** No multi-machine view, no sync, no aggregation.
|
|
171
|
+
- **The interface is dense** and assumes a large screen for its full layout, though it works on a
|
|
172
|
+
phone held either way.
|
|
173
|
+
- **Frame rate depends on your machine, and 057 does not promise one.** It paces in whole display
|
|
174
|
+
refreshes and stops drawing when nothing moves; steady rather than fast is the intent.
|
|
175
|
+
|
|
176
|
+
## Security
|
|
177
|
+
|
|
178
|
+
057 binds `127.0.0.1`, and that default is what protects your telemetry: the API is unauthenticated
|
|
179
|
+
by design, because adding accounts to a local instrument would be adding the exact thing this
|
|
180
|
+
product does not have.
|
|
181
|
+
|
|
182
|
+
**Do not put 057 behind a reverse proxy, and do not set `O57_HOST` on a network you do not control.**
|
|
183
|
+
Either publishes an unauthenticated read of your hostname, your project paths, your session labels,
|
|
184
|
+
your models and a record of when you were at your machine, to anything that can reach that address.
|
|
185
|
+
057 warns you at startup if you do it. There is no auth to turn on.
|
|
186
|
+
|
|
187
|
+
If you find a security problem, please report it privately to the address in this package's npm
|
|
188
|
+
metadata rather than opening it publicly.
|
|
189
|
+
|
|
190
|
+
## Licence
|
|
191
|
+
|
|
192
|
+
057 is publicly installable, but v0.1.0 is not an open-source release. It is distributed under the
|
|
193
|
+
PolyForm Internal Use License 1.0.0: personal use and internal business or workplace use are
|
|
194
|
+
permitted, redistribution is not, and private modifications for permitted purposes remain governed
|
|
195
|
+
by the licence. See `LICENSE.md` for the terms. Third-party components retain their own licences as
|
|
196
|
+
documented in `NOTICE.md`.
|
package/bin/057.mjs
ADDED
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
/**
|
|
3
|
+
* The `057` executable.
|
|
4
|
+
*
|
|
5
|
+
* Everything real is in `dist-server/057.mjs`; this launcher exists for two things that must
|
|
6
|
+
* happen *before* that module's imports are evaluated, which is why it is a separate file and not
|
|
7
|
+
* the top of the bundle.
|
|
8
|
+
*
|
|
9
|
+
* 1. The Node version check. 057's store is `node:sqlite`, which does not exist before Node 22.5.
|
|
10
|
+
* Without this the failure is a module-resolution error naming a builtin, which tells the user
|
|
11
|
+
* nothing about what to do.
|
|
12
|
+
*
|
|
13
|
+
* 2. The `node:sqlite` experimental warning. Node prints four lines to stderr the moment the module
|
|
14
|
+
* loads, about an implementation detail the user did not choose and cannot act on. It is
|
|
15
|
+
* filtered by its own text — narrowly, so every other warning Node has to offer still gets
|
|
16
|
+
* through.
|
|
17
|
+
*/
|
|
18
|
+
|
|
19
|
+
const [major, minor] = process.versions.node.split('.').map(Number);
|
|
20
|
+
if (major < 22 || (major === 22 && minor < 5)) {
|
|
21
|
+
console.error(
|
|
22
|
+
`\n 057 needs Node 22.5 or newer for its local store (node:sqlite); this is ` +
|
|
23
|
+
`${process.versions.node}.\n Node 24 is the supported version.\n`,
|
|
24
|
+
);
|
|
25
|
+
process.exit(1);
|
|
26
|
+
}
|
|
27
|
+
|
|
28
|
+
const emitWarning = process.emitWarning;
|
|
29
|
+
process.emitWarning = (warning, ...rest) => {
|
|
30
|
+
const text = typeof warning === 'string' ? warning : String(warning?.message ?? warning);
|
|
31
|
+
if (text.includes('SQLite is an experimental feature')) return;
|
|
32
|
+
return emitWarning.call(process, warning, ...rest);
|
|
33
|
+
};
|
|
34
|
+
|
|
35
|
+
const { main } = await import(new URL('../dist-server/057.mjs', import.meta.url));
|
|
36
|
+
await main(process.argv.slice(2));
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16">
|
|
2
|
+
<rect width="16" height="16" fill="#050608"></rect>
|
|
3
|
+
<g fill="none" stroke="#E6E3DB" stroke-width="1" stroke-linecap="round">
|
|
4
|
+
<path d="M0 9.5 C3.4 9.5 4.6 4.6 8 4.6 C11.4 4.6 12.6 9.5 16 9.5" opacity="0.92"></path>
|
|
5
|
+
<path d="M0 13.6 C4.4 13.6 5.2 11.1 8 11.1 C10.8 11.1 11.6 13.6 16 13.6" opacity="0.5"></path>
|
|
6
|
+
</g>
|
|
7
|
+
<circle cx="8" cy="7.4" r="2.8" fill="#F0C374" opacity="0.16"></circle>
|
|
8
|
+
<circle cx="8" cy="7.4" r="1.5" fill="#F0C374"></circle>
|
|
9
|
+
</svg>
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
*{box-sizing:border-box}html,body,#root{margin:0;height:100%;background:#050608}body{overscroll-behavior:none;-webkit-font-smoothing:antialiased}button:focus-visible{outline:1px solid rgba(240,195,116,.6);outline-offset:2px}::-webkit-scrollbar{width:9px;height:9px}::-webkit-scrollbar-thumb{background:#e6e3db24}::-webkit-scrollbar-track{background:transparent}@media(max-width:1120px){.hdr-tagline{display:none}}
|