@ravefox/space 0.2.1 → 0.4.0

package/src/lib/turn-failure-notice.js

@@ -1,177 +0,0 @@
-/**
- * A seat that can't run a turn goes quiet (2026-11-06).
- *
- * The turn fails, the run loop opens the circuit and retries in 15 minutes, and
- * the only trace is a line in a terminal the person in the pod may not own.
- * They see their @mention go unanswered, with no reason. The wrapper, not the
- * model, posts one plain line instead, since no model turn can run. It names
- * the cause and who can fix it. It never quotes the error text, which is vendor
- * output and can carry key material.
- *
- * The failure classes in spawn-retry.js are too loose for this. They only pick a
- * backoff, so a stray "401" or "billing" in a stack trace costs a slower retry.
- * Here the match becomes a statement to a person, so each line below fires only
- * on a wording a seat has logged, a walk has produced, a vendor publishes, or
- * the wrapper or our own gateway config writes. A failure that matches none of
- * them posts nothing, which is what it did before.
- */
-import { PUBLIC_MCP_NOT_READY_CODE, PUBLIC_TOOL_FAILED_CODE } from './public-tool-error.js';
-import { PUBLIC_CODEX_VERSION_CODE } from './adapters/tested-version.js';
-import { classifySpawnFailure, GATEWAY_BUDGET_RE, SPAWN_FAILURE_CLASS } from './spawn-retry.js';
-import { modelUnavailableFailure } from './model-unavailable.js';
-
-/** How long one cause stays posted in a pod before the seat may post it again. */
-export const CANT_ANSWER_NOTICE_WINDOW_MS = 60 * 60 * 1000;
-
-const LOGIN_FAILED_WORDINGS = [
-  // Not `(upstream 401)` alone: adapterFailure writes that for any "status 401"
-  // in a tail, including a tool's stderr. A failed Codex turn is its own report.
-  /^codex turn failed \(upstream 401\)/,
-  /\bupstream refused 401\b/, // the same refusal, read from pi's stream
-  /^\w+ exited(?: with code)? \d+: 401\b/, // pi's text, which names no upstream
-  /workspace routing discovery unauthorized/,
-  // Any other text carrying Claude Code's wording keeps this general line.
-  /(?:^|: | \| )Not logged in · Please run \/login/,
-  /API Error: 400 This API key is not scoped to a workspace/,
-  // The wrapper's own refusals of a Claude login (adapters/claude.js).
-  /the Claude login on this machine expires in/,
-  /refusing a Claude login/,
-];
-// F436: what Claude Code prints, and exits 1 on, when it has no login on the
-// computer (2.1.318, walked on windows-latest). No key is wrong and no allowance
-// is spent: someone signs in to Claude Code there, and the next turn works.
-// Anchored on the claude adapter's own exit line, first in its tail or after
-// the stderr | stdout join, because this match acks the message unanswered:
-// the same words from another adapter or a tool keep the general login line.
-const CLAUDE_SIGNED_OUT_WORDINGS = [
-  /^claude exited(?: with code)? \d+: (?:[^\n]*? \| )?Not logged in · Please run \/login/,
-];
-const WONT_START_WORDINGS = [
-  /^spawn \S+ ENOENT/,
-  /^\w+ adapter: \S+ (?:is not set|is missing)/, // the seat has no provider key
-];
-// The vendors' credit wordings open at the adapter's own label or the claude
-// adapter's stderr | stdout join, because any `: ` or status number can open a
-// log line. An unknown label stays silent. `upstream refused` is the line the run
-// loop builds for pi, and the pi adapter puts its label before it when a refused
-// turn exits 0 after an interim message (F320). The transports are how a CLI
-// wraps a refusal it keeps whole.
-const ADAPTER_LABEL = String.raw`(?:claude|codex|pi|opencode|goose|qwen|dsh|Hermes)(?: turn failed)?(?: exited(?: with code)? \d+)?(?: \(upstream \d{3}\))?`;
-const OWN_LEAD = String.raw`(?:^(?:${ADAPTER_LABEL}(?:: upstream refused \d{3})?|upstream refused \d{3}): | \| )`;
-const TRANSPORT = String.raw`(?:unexpected status \d{3}[^:\n]*: |API Error: \d{3} |Error code: \d{3} - |Error running remote compact task: )*`;
-const OPENAI_CODE = '(?:insufficient_quota|credit_balance_exhausted)';
-const ownWording = (wording) => new RegExp(`${OWN_LEAD}${TRANSPORT}${wording}`);
-
-// Not the whole of QUOTA_RE, which also holds "billing" and "quota" for backoff.
-const OUT_OF_ALLOWANCE_WORDINGS = [
-  /(?:^|: | \| )you['’]?ve (?:hit|reached) your [^\n]{0,40}?limit/i,
-  /\bout of credits\b/i,
-  GATEWAY_BUDGET_RE,
-  // An API key with no credit left, in the vendors' published text, case-sensitive.
-  // OpenAI's API (openai-cookbook error-codes, codex tests/suite/quota_exceeded.rs).
-  ownWording('You exceeded your current quota, please check your plan and billing details'),
-  // codex-rs source maps insufficient_quota, credit_balance_exhausted and the
-  // spend-limit codes to this text (CodexErr::QuotaExceeded). Not run on a binary.
-  ownWording(String.raw`Quota exceeded\. Check your plan and billing details`),
-  // OpenAI's error.type and error.code (guides/error-codes): bare, or in a body kept whole.
-  ownWording(String.raw`(?:\d{3} )?${OPENAI_CODE}\b`),
-  ownWording(String.raw`\{['"]error['"]: ?\{[^{}\n]{0,400}?['"](?:code|type)['"]: ?['"]${OPENAI_CODE}['"]`),
-  // Anthropic's API (about-claude/api-credits-for-subscribers): reduced, or in its body.
-  ownWording(String.raw`(?:\{"type":"error","error":\{"type":"invalid_request_error","message":")?Your credit balance is too low to access the Anthropic API`),
-  // Claude Code: the same page, and its errors page.
-  ownWording(String.raw`Credit balance (?:is )?too low(?: ·| \||\n|$)`),
-];
-
-const AGAIN = 'After that, send your message again if I still haven’t answered.';
-
-export const LOGIN_NOTICE = 'I can’t answer right now: the key or login on the computer I run on isn’t working. '
-  + `Whoever runs me needs to fix it and start me again. ${AGAIN}`;
-export const CLAUDE_SIGNED_OUT_NOTICE = 'I can’t answer right now: Claude Code isn’t signed in on the computer I run on. '
-  + `Whoever runs me needs to open Claude Code there and sign in. ${AGAIN}`;
-// What the seat's own log says, for whoever runs it.
-export const CLAUDE_SIGNED_OUT_FIX = 'Claude Code is not signed in on this computer: open Claude Code here and sign in '
-  + '(/login). The waiting message was acked, not held, so the next message starts a turn at once.';
-export const WONT_START_NOTICE = 'I can’t answer right now: the tool I run on wouldn’t start on my computer. '
-  + `Whoever runs me needs to fix that and start me again. ${AGAIN}`;
-export const OUT_OF_ALLOWANCE_NOTICE = 'I can’t answer right now: the AI account I run on has used up its allowance. '
-  + `It needs to reset, or whoever runs me needs to add more. ${AGAIN}`;
-
-// A turn that had posted, whose event the server had settled, and that then
-// stopped. The event won't come back, so this is all the person hears. Hedged,
-// because a kill can land after the last word: a checkpoint says the seat
-// finished an item, and part one of an answer has been enough to earn one.
-// The kernel exempts this exact text from its duplicate guard: change both
-// (CUT_OFF_LINE in agentMessageService.ts, pinned by a test).
-export const CUT_OFF_NOTICE = 'I got cut off before I could finish that, so please ask me again if anything is missing.';
-
-// F421: a public seat whose Commonly tools never came up. Its model would have
-// answered without reading the pod, so the wrapper withholds that answer and
-// says this instead; the event stays unacked and is answered once the tools work.
-export const TOOLS_UNAVAILABLE_NOTICE = 'I can’t answer right now: the tools I use to read and post here '
-  + `aren’t working on my computer. Whoever runs me needs to fix that. ${AGAIN}`;
-
-export const codexVersionNotice = (required) => 'I can’t answer right now: the computer I run on needs '
-  + `Codex ${required} or newer. Whoever runs me needs to upgrade it and start me again. ${AGAIN}`;
-
-const matches = (wordings, text) => wordings.some((wording) => wording.test(text));
-
-/** The cause a pod should hear about, and its line, or null when it should hear nothing. */
-export const cantAnswerNotice = (error) => {
-  // A public seat's withheld turn quotes a TOOL's error, not its own provider's.
-  // A tool that failed mid-turn usually means Commonly itself was unreachable,
-  // so a line could not reach the pod either; it stays silent and retries.
-  if (error?.code === PUBLIC_TOOL_FAILED_CODE) return null;
-  // Tools that never started leave the API reachable, and a stranger waiting.
-  if (error?.code === PUBLIC_MCP_NOT_READY_CODE) return { cause: 'tools-unavailable', text: TOOLS_UNAVAILABLE_NOTICE };
-  if (error?.code === PUBLIC_CODEX_VERSION_CODE) {
-    return { cause: 'codex-version', text: codexVersionNotice(error.requiredVersion) };
-  }
-  // claudeFailureTail drops tool and assistant JSON. This cut is for what can
-  // still arrive: a torn stream line, or an error event after stderr.
-  const text = String(error?.message ?? '').split(/(?:^|: | \| |\n)\{"type":/)[0];
-  // Before the general login line: this one names its own fix.
-  if (matches(CLAUDE_SIGNED_OUT_WORDINGS, text)) return { cause: 'claude-signed-out', text: CLAUDE_SIGNED_OUT_NOTICE };
-  // Before the allowance check: a 401 is settled, whatever else its body says.
-  if (matches(LOGIN_FAILED_WORDINGS, text)) return { cause: 'login', text: LOGIN_NOTICE };
-  if (matches(WONT_START_WORDINGS, text)) return { cause: 'wont-start', text: WONT_START_NOTICE };
-  if (classifySpawnFailure(error) === SPAWN_FAILURE_CLASS.QUOTA && matches(OUT_OF_ALLOWANCE_WORDINGS, text)) {
-    return { cause: 'out-of-allowance', text: OUT_OF_ALLOWANCE_NOTICE };
-  }
-  return null;
-};
-
-// F370 rough spot #11: Settings said "spawn failed" and nothing more; the cause
-// was only in the seat's log. The runner reports one of these fixed codes with
-// a failed outcome, never the error text. The server stores the code alone.
-export const SPAWN_FAILURE_REASONS = [
-  'claude-signed-out', 'login', 'wont-start', 'out-of-allowance', 'tools-unavailable', 'codex-version', 'model-unavailable',
-];
-// A shell's "found but can't run it" exit, on the adapter's own exit line.
-const NOT_EXECUTABLE_EXIT = /^\w+ exited(?: with code)? 126\b/;
-
-/** The failed spawn's reason code, or null when no known cause matches. */
-export const spawnFailureReason = (error) => {
-  if (!error) return null;
-  if (modelUnavailableFailure(error)) return 'model-unavailable';
-  const cause = cantAnswerNotice(error)?.cause;
-  if (SPAWN_FAILURE_REASONS.includes(cause)) return cause;
-  return NOT_EXECUTABLE_EXIT.test(String(error.message ?? '')) ? 'wont-start' : null;
-};
-
-/**
- * A turn that failed because Claude Code is signed out on this computer (F436).
- * It is a setup fault, not an outage: retrying cannot fix it, and holding the
- * event behind the 15-minute circuit kept the person waiting with no answer.
- * The run loop acks it instead and posts CLAUDE_SIGNED_OUT_NOTICE, and the
- * next event spawns at once, which is the re-probe.
- */
-export const isClaudeSignedOut = (error) => cantAnswerNotice(error)?.cause === 'claude-signed-out';
-
-/** The turn result a signed-out turn is acked with: a person's message is handed to another listener. */
-export const CLAUDE_SIGNED_OUT_REASON = 'claude-signed-out';
-export const claudeSignedOutResult = () => ({
-  outcome: 'error',
-  refused: { reason: 'delivery-refused' },
-  reason: CLAUDE_SIGNED_OUT_REASON,
-  details: { failureClass: 'configuration' },
-});

package/src/lib/unconfined-seat-guard.js

@@ -1,94 +0,0 @@
-/**
- * A seat with no sandbox answers only in pods confirmed private.
- *
- * An agent the adapters do not confine runs as its owner: their files, their
- * git and GitHub login, their shell. Anyone who can post in its pod can direct
- * it. Attach already refused a publicly readable pod, but not one anyone can
- * join, and nothing looked again once it ran, so a pod made joinable later
- * handed that access to whoever joined.
- *
- * So attach requires such a seat's pod to be confirmed private (publicRead and
- * communityListed reported false, joinPolicy invite-only:
- * workspace-trust.js `podIsConfirmedPrivate`), and before every turn the seat
- * re-reads its pods (GET /installations) and refuses the turn unless all of
- * them still are. There is no confined fallback: the seat's record was never
- * written for one, so a pod that is not private is a refused turn, and a read
- * that fails defers it. The Windows Codex opt-in keeps its own placement
- * (`unconfinedTurnPlacement`); this covers every other unconfined seat.
- *
- * "Confined" is what the adapters enforce, not what the file declares: a public
- * or workspace trust, or a shape one adapter enforces with no trust (claude's
- * `bwrap` mode, dsh's `isConfinedDsh` shape). Any other `sandbox.mode` with no
- * trust is spawned bare (claude, codex) or refused at spawn, so it is
- * unconfined here, and `mode: 'none'` always is.
- *
- * A legacy pod with no joinPolicy is reported 'open', and that is not only a
- * default: an agent may self-install into a pod an agent created unless it is
- * invite-only, so a missing value is not confirmed private.
- *
- * The test-only `stub` adapter runs nothing and is not checked.
- */
-import { normalizeSandboxTrust } from './environment.js';
-import { podIsConfirmedPrivate } from './workspace-trust.js';
-
-export const UNCONFINED_UNCHECKED_ADAPTERS = new Set(['stub']);
-
-// adapters/dsh.js isConfinedDsh's accepted shape, copied so this module stays
-// free of adapter imports; a test holds the two equal.
-const isConfinedDshShape = (sandbox) => {
-  if (!sandbox || typeof sandbox !== 'object' || sandbox.trust !== undefined) return false;
-  const { mode, network, ...rest } = sandbox;
-  return mode === 'workspace' && network?.policy === 'restricted'
-    && Object.keys(network).length === 1 && Object.keys(rest).length === 0;
-};
-
-// Confinement an adapter applies with no trust: claude wraps any `bwrap` mode
-// (adapters/claude.js), and dsh enforces its one shape. codex, opencode and the
-// rest apply a mode only under a public or workspace trust.
-const ADAPTER_OWN_CONFINEMENT = {
-  claude: (sandbox) => sandbox?.mode === 'bwrap',
-  dsh: isConfinedDshShape,
-};
-
-export const seatRunsUnconfined = ({ environment, adapterName }) => {
-  if (UNCONFINED_UNCHECKED_ADAPTERS.has(adapterName)) return false;
-  const sandbox = normalizeSandboxTrust(environment?.sandbox);
-  // An explicit 'none' is no sandbox whatever the trust says.
-  if (sandbox?.mode === 'none') return true;
-  if (sandbox?.trust === 'public' || sandbox?.trust === 'workspace') return false;
-  return !ADAPTER_OWN_CONFINEMENT[adapterName]?.(sandbox);
-};
-
-export const UNCONFINED_TURN_REFUSAL = 'This agent runs without a sandbox, with your own access to files, '
-  + 'commands and logins, so it answers only while every pod it is in is private and invite-only. '
-  + 'To fix it, the pod\'s owner opens it in Space and sets "Who can join" to Invite-only in its side '
-  + 'panel (and makes it private if it is public or listed in Community), or you remove this agent from that pod.';
-
-const MAX_PODS_NAMED = 3;
-
-const describePod = (pod) => {
-  const label = pod?.podName ? `"${pod.podName}" (${pod.podId})` : `pod ${pod?.podId || '(no id)'}`;
-  if (typeof pod?.publicRead !== 'boolean' || typeof pod?.communityListed !== 'boolean') {
-    return `${label} did not report whether it is private`;
-  }
-  if (pod.publicRead || pod.communityListed) return `${label} is public or listed in Community`;
-  return `${label} is open to join`;
-};
-
-/** Null when every pod is confirmed private, otherwise why the turn is refused, naming the pods. */
-export const unconfinedPodRefusalReason = (installations) => {
-  if (installations === null) return 'its pods could not be read';
-  if (!Array.isArray(installations) || installations.length === 0) return 'the server listed no pods for it';
-  const seen = new Set();
-  const notPrivate = installations.filter((pod) => {
-    if (podIsConfirmedPrivate(pod)) return false;
-    const key = String(pod?.podId || '');
-    if (seen.has(key)) return false;
-    seen.add(key);
-    return true;
-  });
-  if (!notPrivate.length) return null;
-  const named = notPrivate.slice(0, MAX_PODS_NAMED).map(describePod).join('; ');
-  const more = notPrivate.length - MAX_PODS_NAMED;
-  return more > 0 ? `${named}; and ${more} more` : named;
-};

package/src/lib/update-check.js

@@ -1,192 +0,0 @@
-/**
- * "Your CLI is N versions behind" — one line at `agent run` and `daemon run`
- * start-up (TASK-660, D213).
- *
- * A seat pinned to an old CLI fails in ways that look like platform bugs, and
- * nothing on the seat said it was old. This prints one line when the installed
- * CLI trails npm latest by UPDATE_NOTICE_MIN_BEHIND or more, and is otherwise
- * silent: offline, a slow registry, a malformed answer and
- * COMMONLY_NO_UPDATE_CHECK=1 all print nothing.
- *
- * It must never slow start-up. `startUpdateNotice` returns at once; the lookup
- * runs beside the poll loop, is capped at UPDATE_TIMEOUT_MS by its own timer
- * (a fetch that ignores its abort signal still cannot hold it), and is cached
- * for UPDATE_CACHE_TTL_MS so a restarting seat asks the registry once a day.
- */
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { exactVersion, parseVersion } from './mcp-server-version.js';
-import { DAEMON_SETUP_LINE, runsFromStableInstall } from './stable-install.js';
-import { NPM } from './cli-hint.js';
-
-export const CLI_PACKAGE = '@ravefox/space';
-export const REGISTRY_LATEST_URL = 'https://registry.npmjs.org/@ravefox%2fspace/latest';
-export const UPDATE_CHECK_OPT_OUT_ENV = 'COMMONLY_NO_UPDATE_CHECK';
-export const UPDATE_CACHE_TTL_MS = 24 * 60 * 60 * 1000;
-export const UPDATE_TIMEOUT_MS = 2000;
-// The CLI publishes often, so one or two releases behind is the normal gap
-// between a publish and a seat's next restart. Three is where it is stale.
-export const UPDATE_NOTICE_MIN_BEHIND = 3;
-
-export const updateCachePath = (home = homedir()) => join(home, '.commonly', 'update-check.json');
-
-/**
- * How far `installed` trails `latest`: 0 when equal or ahead, the patch gap
- * within one major.minor, and Infinity when latest is a newer minor or major
- * (the patch numbers of two release lines say nothing about the distance).
- * null when either side is not a version.
- */
-export const versionsBehind = (installed, latest) => {
-  const a = parseVersion(installed);
-  const b = parseVersion(latest);
-  if (!a || !b) return null;
-  if (a[0] !== b[0] || a[1] !== b[1]) {
-    return (b[0] > a[0] || (b[0] === a[0] && b[1] > a[1])) ? Infinity : 0;
-  }
-  return Math.max(0, b[2] - a[2]);
-};
-
-/** The one line to print, or null when there is nothing worth saying. */
-export const updateNoticeLine = ({
-  installed, latest, minBehind = UPDATE_NOTICE_MIN_BEHIND, fromSetup = runsFromStableInstall(),
-}) => {
-  const behind = versionsBehind(installed, latest);
-  if (behind === null || behind < minBehind) return null;
-  // Only the parsed triple is printed: the registry's string never reaches the log.
-  const from = exactVersion(installed);
-  const to = exactVersion(latest);
-  const gap = Number.isFinite(behind) ? `${behind} versions behind` : 'behind a newer release line';
-  // A `daemon setup` copy lives under $HOME and has no global install to update;
-  // running setup again updates it and restarts the daemon.
-  const update = fromSetup ? DAEMON_SETUP_LINE : `${NPM} install -g ${CLI_PACKAGE}@latest`;
-  return `your CLI is ${gap} (installed ${from}, latest ${to}). Update: ${update}`
-    + ` (silence with ${UPDATE_CHECK_OPT_OUT_ENV}=1)`;
-};
-
-const defaultReadText = (path) => (existsSync(path) ? readFileSync(path, 'utf8') : null);
-const defaultWriteText = (path, text) => {
-  mkdirSync(dirname(path), { recursive: true });
-  writeFileSync(path, text, { encoding: 'utf8', mode: 0o600 });
-};
-
-/** The cached latest version when the cache is younger than the TTL, else null. */
-export const readCachedLatest = ({ cachePath, now, readText = defaultReadText, ttlMs = UPDATE_CACHE_TTL_MS }) => {
-  let raw;
-  try {
-    raw = readText(cachePath);
-  } catch {
-    return null;
-  }
-  if (!raw) return null;
-  try {
-    const cache = JSON.parse(raw);
-    const checkedAt = Date.parse(cache?.checkedAt);
-    const latest = exactVersion(cache?.latest);
-    if (!Number.isFinite(checkedAt) || !latest) return null;
-    if (now - checkedAt < 0 || now - checkedAt >= ttlMs) return null;
-    return latest;
-  } catch {
-    return null;
-  }
-};
-
-/**
- * npm latest, or null on any failure. The timer is the cap, not the signal:
- * the signal asks fetch to stop, the race guarantees the answer is on time.
- */
-export const fetchLatestVersion = async ({
-  fetchImpl = globalThis.fetch,
-  timeoutMs = UPDATE_TIMEOUT_MS,
-  url = REGISTRY_LATEST_URL,
-} = {}) => {
-  if (typeof fetchImpl !== 'function') return null;
-  const controller = new AbortController();
-  let timer;
-  const deadline = new Promise((resolve) => {
-    timer = setTimeout(() => {
-      controller.abort();
-      resolve(null);
-    }, timeoutMs);
-    timer.unref?.();
-  });
-  const lookup = (async () => {
-    const res = await fetchImpl(url, { signal: controller.signal, headers: { accept: 'application/json' } });
-    if (!res?.ok) return null;
-    const body = await res.json();
-    return exactVersion(body?.version);
-  })().catch(() => null);
-  try {
-    return await Promise.race([lookup, deadline]);
-  } finally {
-    clearTimeout(timer);
-  }
-};
-
-/** The notice line for this start-up, or null. Never throws. */
-export const checkForCliUpdate = async ({
-  installedVersion,
-  env = process.env,
-  now = Date.now(),
-  cachePath = updateCachePath(),
-  fetchImpl = globalThis.fetch,
-  timeoutMs = UPDATE_TIMEOUT_MS,
-  readText = defaultReadText,
-  writeText = defaultWriteText,
-  minBehind = UPDATE_NOTICE_MIN_BEHIND,
-} = {}) => {
-  try {
-    if (env?.[UPDATE_CHECK_OPT_OUT_ENV] === '1') return null;
-    if (!parseVersion(installedVersion)) return null;
-    let latest = readCachedLatest({ cachePath, now, readText });
-    if (!latest) {
-      latest = await fetchLatestVersion({ fetchImpl, timeoutMs });
-      if (!latest) return null;
-      try {
-        writeText(cachePath, `${JSON.stringify({ checkedAt: new Date(now).toISOString(), latest })}\n`);
-      } catch {
-        // An unwritable cache costs one lookup per start, nothing more.
-      }
-    }
-    return updateNoticeLine({ installed: installedVersion, latest, minBehind });
-  } catch {
-    return null;
-  }
-};
-
-/**
- * Fire the check and return at once. The returned promise (for tests) settles
- * to the line that was logged, or null.
- */
-export const startUpdateNotice = (params = {}) => Promise.resolve()
-  // Everything, the argument destructuring and checkForCliUpdate's default
-  // parameters (homedir()) included, runs inside the chain, so the trailing
-  // catch is the only exit a failure has. Start-up never sees a throw or an
-  // unhandled rejection from here.
-  .then(async () => {
-    const { log, ...options } = params;
-    const line = await checkForCliUpdate(options);
-    if (line) {
-      try {
-        log(line);
-      } catch {
-        // A closed log sink is not start-up's problem.
-      }
-    }
-    return line;
-  })
-  .catch(() => null);
-
-let cachedCliVersion;
-/** This CLI's own version, from the package.json it shipped with. */
-export const installedCliVersion = () => {
-  if (cachedCliVersion === undefined) {
-    try {
-      const pkg = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8'));
-      cachedCliVersion = typeof pkg?.version === 'string' ? pkg.version : null;
-    } catch {
-      cachedCliVersion = null;
-    }
-  }
-  return cachedCliVersion;
-};

package/src/lib/upstream-refusal.js

@@ -1 +0,0 @@
-export * from '@commonlyai/seats/upstream-refusal';

package/src/lib/webhook-server.js

@@ -1,109 +0,0 @@
-/**
- * Local webhook server — receives forwarded events from the poller
- * and delivers them to the developer's agent process.
- *
- * The developer's agent code handles POST /cap (or custom path)
- * and returns { outcome, content? }.
- */
-
-import { createServer } from 'http';
-import { createHmac } from 'crypto';
-import { EMPTY_OUTPUT } from './claim-outcome.js';
-
-export const startWebhookServer = ({
-  port = 3001,
-  path = '/cap',
-  secret = null,
-  onEvent,   // async (event) => { outcome, content? }
-  onReady,   // (url) => void
-}) => new Promise((resolve, reject) => {
-  const server = createServer(async (req, res) => {
-    if (req.method !== 'POST' || req.url !== path) {
-      res.writeHead(404);
-      res.end();
-      return;
-    }
-
-    // Read body
-    const chunks = [];
-    req.on('data', (c) => chunks.push(c));
-    req.on('end', async () => {
-      const rawBody = Buffer.concat(chunks).toString('utf8');
-
-      // Verify signature if secret configured
-      if (secret) {
-        const sig = req.headers['x-commonly-signature'];
-        const expected = `sha256=${createHmac('sha256', secret).update(rawBody).digest('hex')}`;
-        if (sig !== expected) {
-          res.writeHead(401);
-          res.end(JSON.stringify({ error: 'Invalid signature' }));
-          return;
-        }
-      }
-
-      let event;
-      try { event = JSON.parse(rawBody); } catch {
-        res.writeHead(400);
-        res.end(JSON.stringify({ error: 'Invalid JSON' }));
-        return;
-      }
-
-      // A handler that returns nothing said nothing (#2753).
-      let result = { outcome: 'no_action', reason: EMPTY_OUTPUT };
-      try {
-        result = (await onEvent(event)) || { outcome: 'no_action', reason: EMPTY_OUTPUT };
-      } catch (err) {
-        result = { outcome: 'error', reason: err.message };
-      }
-
-      res.writeHead(200, { 'Content-Type': 'application/json' });
-      res.end(JSON.stringify(result));
-    });
-  });
-
-  server.on('error', reject);
-  server.listen(port, () => {
-    const url = `http://localhost:${port}${path}`;
-    onReady?.(url);
-    resolve({ server, url, close: () => server.close() });
-  });
-});
-
-/**
- * The handler `agent connect` serves on its own port. It only logs what
- * arrives, and no agent has read the event, so it states no outcome a read
- * would count as: the wake still settles, and the pod digest stays unread
- * (#2753).
- */
-export const logOnlyHandler = async (event) => {
-  console.log(`[local] ${event.type} from pod ${event.podId}`);
-  return { outcome: 'no_action', reason: EMPTY_OUTPUT };
-};
-
-/**
- * Forward a polled event to a local webhook server.
- * Used by `agent connect` to bridge polling → local HTTP.
- */
-export const forwardToLocalWebhook = async (event, webhookUrl, secret = null) => {
-  const payload = JSON.stringify(event);
-  const headers = {
-    'Content-Type': 'application/json',
-    'X-Commonly-Event': event.type,
-    'X-Commonly-Delivery': String(event._id),
-  };
-  if (secret) {
-    headers['X-Commonly-Signature'] = `sha256=${createHmac('sha256', secret).update(payload).digest('hex')}`;
-  }
-
-  const res = await fetch(webhookUrl, { method: 'POST', headers, body: payload });
-  if (!res.ok) throw new Error(`Local webhook returned HTTP ${res.status}`);
-  // Only a stated outcome counts. An empty or non-JSON body, or one without
-  // an outcome, is a handler that said nothing, the same as a CLI turn that
-  // printed nothing, so it must not read the pod digest (#2753).
-  let body = null;
-  try { body = await res.json(); } catch { body = null; }
-  if (!body || typeof body !== 'object' || typeof body.outcome !== 'string') {
-    return { outcome: 'no_action', reason: EMPTY_OUTPUT };
-  }
-  return body;
-};