@rebon/cli-win32-x64 1.2.0 → 1.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (98) hide show
  1. package/LICENSE +202 -0
  2. package/NOTICE +10 -0
  3. package/README.md +203 -144
  4. package/THIRD_PARTY_NOTICES.txt +1232 -128
  5. package/bin/rebon.js +22 -22
  6. package/lib/windows-managed.js +390 -390
  7. package/package.json +9 -2
  8. package/payload/compose-runtime/package.json +17 -17
  9. package/payload/compose-runtime/payload/compose/shims/dsh-anonymous-user-id.js +10 -10
  10. package/payload/compose-runtime/payload/compose/shims/dsh-credentials.js +13 -13
  11. package/payload/compose-runtime/payload/compose/shims/dsh-launch-environment.js +21 -21
  12. package/payload/compose-runtime/payload/compose/shims/dsh-llm.js +313 -313
  13. package/payload/compose-runtime/payload/compose/shims/dsh-settings.js +43 -43
  14. package/payload/compose-runtime/payload/compose/shims/dsh-tools.js +20 -20
  15. package/payload/compose-runtime/payload/compose/shims/dsh-web.js +10 -10
  16. package/payload/compose-runtime/payload/compose/shims/llm-adapter.js +32 -32
  17. package/payload/compose-runtime/payload/compose/shims/zod-lite.js +49 -49
  18. package/payload/compose-runtime/payload/vendor/cordis/LICENSE +21 -0
  19. package/payload/compose-runtime/payload/vendor/cordis/index.js +1530 -1530
  20. package/payload/compose-runtime/payload/vendor/cosmokit/LICENSE +21 -21
  21. package/payload/compose-runtime/payload/vendor/cosmokit/index.mjs +357 -357
  22. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-agent +21 -21
  23. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-agent-loop +21 -21
  24. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-llm-core +21 -21
  25. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-llm-deepseek +21 -21
  26. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-logger-console +21 -21
  27. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-scope +21 -21
  28. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-session +21 -21
  29. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-system-prompt +21 -21
  30. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-timeout +21 -21
  31. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-timer +21 -21
  32. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-tool-todo +21 -21
  33. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-tool-web +21 -21
  34. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-tools-schema +21 -21
  35. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-turndown +21 -0
  36. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-turndown-plugin-gfm +21 -0
  37. package/payload/compose-runtime/payload/vendor/dsh/LICENSE-web-search-exa +21 -21
  38. package/payload/compose-runtime/payload/vendor/dsh/agent-loop.js +1193 -1193
  39. package/payload/compose-runtime/payload/vendor/dsh/agent.js +714 -714
  40. package/payload/compose-runtime/payload/vendor/dsh/llm-core.js +269 -269
  41. package/payload/compose-runtime/payload/vendor/dsh/llm-deepseek.js +672 -672
  42. package/payload/compose-runtime/payload/vendor/dsh/logger-console.js +83 -83
  43. package/payload/compose-runtime/payload/vendor/dsh/scope.js +287 -287
  44. package/payload/compose-runtime/payload/vendor/dsh/session.js +1668 -1668
  45. package/payload/compose-runtime/payload/vendor/dsh/system-prompt.js +309 -309
  46. package/payload/compose-runtime/payload/vendor/dsh/timeout.js +100 -100
  47. package/payload/compose-runtime/payload/vendor/dsh/timer.js +128 -128
  48. package/payload/compose-runtime/payload/vendor/dsh/tool-todo.js +143 -143
  49. package/payload/compose-runtime/payload/vendor/dsh/tool-web.js +1527 -1527
  50. package/payload/compose-runtime/payload/vendor/dsh/tools-schema.js +849 -849
  51. package/payload/compose-runtime/payload/vendor/dsh/web-search-exa.js +122 -122
  52. package/payload/compose-runtime/payload/vendor/eventsource-parser/LICENSE +21 -21
  53. package/payload/compose-runtime/payload/vendor/eventsource-parser/index.js +177 -177
  54. package/payload/compose-runtime/payload/vendor/eventsource-parser/stream.js +48 -48
  55. package/payload/compose-runtime/payload/vendor/schemastery/LICENSE +21 -0
  56. package/payload/compose-runtime/payload/vendor/schemastery/index.mjs +656 -656
  57. package/payload/compose-runtime/payload-manifests.json +48 -48
  58. package/payload/compose-runtime/src/bridge.mjs +193 -195
  59. package/payload/compose-runtime/src/credentials-runtime.mjs +50 -50
  60. package/payload/compose-runtime/src/eventsource-stream.mjs +48 -48
  61. package/payload/compose-runtime/src/index.mjs +7 -7
  62. package/payload/compose-runtime/src/llm-runtime.mjs +326 -326
  63. package/payload/compose-runtime/src/loader.mjs +78 -78
  64. package/payload/compose-runtime/src/loop-assembly.mjs +237 -237
  65. package/payload/compose-runtime/src/payload.mjs +49 -49
  66. package/payload/compose-runtime/src/plugin.mjs +59 -59
  67. package/payload/compose-runtime/src/realm.mjs +223 -223
  68. package/payload/compose-runtime/src/registry.mjs +191 -191
  69. package/payload/compose-runtime/src/resolve.mjs +115 -115
  70. package/payload/compose-runtime/src/systemprompt-runtime.mjs +67 -67
  71. package/payload/compose-runtime/src/tools-runtime.mjs +239 -239
  72. package/payload/compose-runtime/src/web-runtime.mjs +209 -209
  73. package/payload/plugin-host/package.json +11 -11
  74. package/payload/plugin-host/src/bridge.mjs +64 -64
  75. package/payload/plugin-host/src/cli.mjs +147 -147
  76. package/payload/plugin-host/src/framing.mjs +113 -113
  77. package/payload/plugin-host/src/host.mjs +691 -691
  78. package/payload/plugin-host/src/json.mjs +208 -208
  79. package/payload/plugin-host/src/lifecycle.mjs +114 -114
  80. package/payload/plugin-host/src/loader.mjs +183 -183
  81. package/payload/plugin-host/src/methods.mjs +377 -377
  82. package/payload/plugin-host/src/ownership.mjs +57 -57
  83. package/payload/plugin-host/src/protocol.mjs +129 -129
  84. package/payload/plugin-host/src/sdk.mjs +7 -7
  85. package/payload/rebon-boa-helper.exe +0 -0
  86. package/payload/rebon-browser-mcp.exe +0 -0
  87. package/payload/rebon-computer-use.exe +0 -0
  88. package/payload/rebon-lsp-mcp.exe +0 -0
  89. package/payload/rebon.exe +2 -2
  90. package/payload/sandbox-win.exe +0 -0
  91. package/scripts/postinstall.js +112 -112
  92. package/payload/compose-runtime/payload/compose/credentials-runtime.js +0 -38
  93. package/payload/compose-runtime/payload/compose/llm-runtime.js +0 -330
  94. package/payload/compose-runtime/payload/compose/loop-assembly.js +0 -149
  95. package/payload/compose-runtime/payload/compose/serve-dispatch.js +0 -82
  96. package/payload/compose-runtime/payload/compose/systemprompt-runtime.js +0 -74
  97. package/payload/compose-runtime/payload/compose/tools-runtime.js +0 -228
  98. package/payload/compose-runtime/payload/compose/web-runtime.js +0 -204
@@ -1,43 +1,43 @@
1
- // Embedded-runtime shim of `@deepseek-ai/dsh-settings`.
2
- //
3
- // The composition host has no user-settings document and no hot reload: a
4
- // plugin's configuration is its composition entry, fixed for the process
5
- // lifetime. `installSettingsSection` therefore resolves statically — the
6
- // source is the entry config, `onChange` never fires — which matches dsh's
7
- // own behavior in a composition that mounts no settings service (its real
8
- // implementation rides `ctx.inject(['settings'], …)` and simply never runs).
9
-
10
- const NAMESPACE_PATTERN = /^[a-z][a-z0-9-]*$/;
11
-
12
- /** Brand a raw string as a SettingsNamespace (lowercase kebab-case). */
13
- export function settingsNamespace(value) {
14
- if (!NAMESPACE_PATTERN.test(value)) {
15
- throw new TypeError(`settings namespace "${value}" must match ${String(NAMESPACE_PATTERN)}`);
16
- }
17
- return value;
18
- }
19
-
20
- /** Structural JSON equality (dsh deepEqualJson semantics). */
21
- export function deepEqualJson(a, b) {
22
- if (a === b) return true;
23
- if (typeof a !== typeof b) return false;
24
- if (a === null || b === null || typeof a !== 'object') return false;
25
- const aIsArray = Array.isArray(a);
26
- if (aIsArray !== Array.isArray(b)) return false;
27
- if (aIsArray) {
28
- if (a.length !== b.length) return false;
29
- return a.every((item, i) => deepEqualJson(item, b[i]));
30
- }
31
- const aKeys = Object.keys(a);
32
- const bKeys = Object.keys(b);
33
- if (aKeys.length !== bKeys.length) return false;
34
- return aKeys.every((key) => Object.hasOwn(b, key) && deepEqualJson(a[key], b[key]));
35
- }
36
-
37
- /**
38
- * Static section install: the entry config is the whole source, once.
39
- * `onChange` is deliberately never invoked — there is nothing to change.
40
- */
41
- export function installSettingsSection(_ctx, _ns, _schema, entry, hooks) {
42
- hooks.setSource(() => entry);
43
- }
1
+ // Embedded-runtime shim of `@deepseek-ai/dsh-settings`.
2
+ //
3
+ // The composition host has no user-settings document and no hot reload: a
4
+ // plugin's configuration is its composition entry, fixed for the process
5
+ // lifetime. `installSettingsSection` therefore resolves statically — the
6
+ // source is the entry config, `onChange` never fires — which matches dsh's
7
+ // own behavior in a composition that mounts no settings service (its real
8
+ // implementation rides `ctx.inject(['settings'], …)` and simply never runs).
9
+
10
+ const NAMESPACE_PATTERN = /^[a-z][a-z0-9-]*$/;
11
+
12
+ /** Brand a raw string as a SettingsNamespace (lowercase kebab-case). */
13
+ export function settingsNamespace(value) {
14
+ if (!NAMESPACE_PATTERN.test(value)) {
15
+ throw new TypeError(`settings namespace "${value}" must match ${String(NAMESPACE_PATTERN)}`);
16
+ }
17
+ return value;
18
+ }
19
+
20
+ /** Structural JSON equality (dsh deepEqualJson semantics). */
21
+ export function deepEqualJson(a, b) {
22
+ if (a === b) return true;
23
+ if (typeof a !== typeof b) return false;
24
+ if (a === null || b === null || typeof a !== 'object') return false;
25
+ const aIsArray = Array.isArray(a);
26
+ if (aIsArray !== Array.isArray(b)) return false;
27
+ if (aIsArray) {
28
+ if (a.length !== b.length) return false;
29
+ return a.every((item, i) => deepEqualJson(item, b[i]));
30
+ }
31
+ const aKeys = Object.keys(a);
32
+ const bKeys = Object.keys(b);
33
+ if (aKeys.length !== bKeys.length) return false;
34
+ return aKeys.every((key) => Object.hasOwn(b, key) && deepEqualJson(a[key], b[key]));
35
+ }
36
+
37
+ /**
38
+ * Static section install: the entry config is the whole source, once.
39
+ * `onChange` is deliberately never invoked — there is nothing to change.
40
+ */
41
+ export function installSettingsSection(_ctx, _ns, _schema, entry, hooks) {
42
+ hooks.setSource(() => entry);
43
+ }
@@ -1,20 +1,20 @@
1
- // `@deepseek-ai/dsh-tools` wrapper module (loop round). The schema layer
2
- // (defineTool + JSON Schema subset) stays the real vendored build; this
3
- // wrapper adds the scheduler-contract constants that live in dsh's
4
- // index.ts (NOT bundled — it is the 86KB ToolRuntime service half we
5
- // deliberately do not vendor; the composition host's tools seat implements
6
- // the same contract, see compose/tools-runtime.js).
7
- //
8
- // Symbol identity: every import of `@deepseek-ai/dsh-tools` resolves here,
9
- // so agent-loop's `ctx.tools[TOOL_RUNTIME_SCHEDULER]` lookup and the seat's
10
- // method installation share this one symbol.
11
- export * from '../../vendor/dsh/tools-schema.js';
12
-
13
- /** Scheduler entry point (dsh index.ts:466, transcribed contract). */
14
- export const TOOL_RUNTIME_SCHEDULER = Symbol('@deepseek-ai/dsh-tools.scheduler');
15
-
16
- /** Canonical error code for cancellation after a tool body was invoked. */
17
- export const TOOL_ABORTED = 'ABORTED';
18
-
19
- /** Canonical error code for cancellation before a tool body was invoked. */
20
- export const TOOL_ABORTED_BEFORE_DISPATCH = 'ABORTED_BEFORE_DISPATCH';
1
+ // `@deepseek-ai/dsh-tools` wrapper module (loop round). The schema layer
2
+ // (defineTool + JSON Schema subset) stays the real vendored build; this
3
+ // wrapper adds the scheduler-contract constants that live in dsh's
4
+ // index.ts (NOT bundled — it is the 86KB ToolRuntime service half we
5
+ // deliberately do not vendor; the composition host's tools seat implements
6
+ // the same contract, see compose/tools-runtime.js).
7
+ //
8
+ // Symbol identity: every import of `@deepseek-ai/dsh-tools` resolves here,
9
+ // so agent-loop's `ctx.tools[TOOL_RUNTIME_SCHEDULER]` lookup and the seat's
10
+ // method installation share this one symbol.
11
+ export * from '../../vendor/dsh/tools-schema.js';
12
+
13
+ /** Scheduler entry point (dsh index.ts:466, transcribed contract). */
14
+ export const TOOL_RUNTIME_SCHEDULER = Symbol('@deepseek-ai/dsh-tools.scheduler');
15
+
16
+ /** Canonical error code for cancellation after a tool body was invoked. */
17
+ export const TOOL_ABORTED = 'ABORTED';
18
+
19
+ /** Canonical error code for cancellation before a tool body was invoked. */
20
+ export const TOOL_ABORTED_BEFORE_DISPATCH = 'ABORTED_BEFORE_DISPATCH';
@@ -1,10 +1,10 @@
1
- // Embedded-runtime shim of `@deepseek-ai/dsh-web` — the runtime symbols web
2
- // provider plugins consume. The service half (WebRuntime, `ctx.web`) is NOT
3
- // here: the composition host mounts its own seat (web-runtime.js); this
4
- // module carries the shared error class so a provider's `throw new
5
- // WebError(...)` and the runtime's own errors are one identity. Types are
6
- // erased at transpile time.
7
- import { HarnessError } from './dsh-llm.js';
8
-
9
- /** dsh types.ts: typed web error with a machine-routable open-string code. */
10
- export class WebError extends HarnessError {}
1
+ // Embedded-runtime shim of `@deepseek-ai/dsh-web` — the runtime symbols web
2
+ // provider plugins consume. The service half (WebRuntime, `ctx.web`) is NOT
3
+ // here: the composition host mounts its own seat (web-runtime.js); this
4
+ // module carries the shared error class so a provider's `throw new
5
+ // WebError(...)` and the runtime's own errors are one identity. Types are
6
+ // erased at transpile time.
7
+ import { HarnessError } from './dsh-llm.js';
8
+
9
+ /** dsh types.ts: typed web error with a machine-routable open-string code. */
10
+ export class WebError extends HarnessError {}
@@ -1,32 +1,32 @@
1
- // dsh's abstract LLM adapter, on its own so that importing it costs nothing
2
- // else.
3
- //
4
- // It used to live in `compose/llm-runtime.js`, which the `@deepseek-ai/dsh-llm`
5
- // shim re-exported it from. That made the base class every provider plugin
6
- // extends reachable only by evaluating a module that is bound to one host's
7
- // transport — harmless under deno_core, fatal on real Node, where the same
8
- // import chain reaches `globalThis.Deno.core` and every dsh package that
9
- // touches `@deepseek-ai/dsh-llm` fails to load.
10
- //
11
- // The class is the contract; the runtime is one implementation of the seat
12
- // that serves it. Keeping them in separate modules is what lets both hosts
13
- // hand plugins the same base class.
14
-
15
- /** dsh's abstract adapter: only `stream(options)` is required. */
16
- export class LlmAdapter {
17
- providerInfo(provider) {
18
- return { id: provider, name: provider };
19
- }
20
-
21
- providerRetryPolicy(_provider) {
22
- return undefined;
23
- }
24
-
25
- listModels(_provider) {
26
- return Promise.resolve([]);
27
- }
28
-
29
- resolveModel(provider, model) {
30
- return Promise.resolve({ provider, id: model, name: model });
31
- }
32
- }
1
+ // dsh's abstract LLM adapter, on its own so that importing it costs nothing
2
+ // else.
3
+ //
4
+ // It used to live in `compose/llm-runtime.js`, which the `@deepseek-ai/dsh-llm`
5
+ // shim re-exported it from. That made the base class every provider plugin
6
+ // extends reachable only by evaluating a module that is bound to one host's
7
+ // transport — harmless under deno_core, fatal on real Node, where the same
8
+ // import chain reaches `globalThis.Deno.core` and every dsh package that
9
+ // touches `@deepseek-ai/dsh-llm` fails to load.
10
+ //
11
+ // The class is the contract; the runtime is one implementation of the seat
12
+ // that serves it. Keeping them in separate modules is what lets both hosts
13
+ // hand plugins the same base class.
14
+
15
+ /** dsh's abstract adapter: only `stream(options)` is required. */
16
+ export class LlmAdapter {
17
+ providerInfo(provider) {
18
+ return { id: provider, name: provider };
19
+ }
20
+
21
+ providerRetryPolicy(_provider) {
22
+ return undefined;
23
+ }
24
+
25
+ listModels(_provider) {
26
+ return Promise.resolve([]);
27
+ }
28
+
29
+ resolveModel(provider, model) {
30
+ return Promise.resolve({ provider, id: model, name: model });
31
+ }
32
+ }
@@ -1,49 +1,49 @@
1
- // Embedded-runtime shim of `zod` — construction surface only.
2
- //
3
- // Why it exists: vendored dsh plugins (tool-todo) build zod schema OBJECTS at
4
- // module load for the session-projection seam (`ctx.sessionProjections`),
5
- // which this composition never mounts — the schemas are constructed and then
6
- // never consulted. Bundling real zod would add ~530KB of dead code per
7
- // vendored plugin, so this shim satisfies module load with inert builders.
8
- //
9
- // Honesty boundary: NO validation semantics are provided. Any attempt to
10
- // actually validate through a shimmed schema (`parse`/`safeParse`) throws
11
- // loudly instead of silently accepting — if a projection consumer ever lands
12
- // (P2.9 session seat), replace this shim with a real vendored zod.
13
-
14
- function inert(kind) {
15
- return {
16
- __zodLite: kind,
17
- parse() {
18
- throw new Error(
19
- 'zod-lite shim: validation is not implemented (vendor real zod before consuming schemas)',
20
- );
21
- },
22
- safeParse() {
23
- throw new Error(
24
- 'zod-lite shim: validation is not implemented (vendor real zod before consuming schemas)',
25
- );
26
- },
27
- optional() {
28
- return inert(`${kind}?`);
29
- },
30
- nullable() {
31
- return inert(`${kind}|null`);
32
- },
33
- };
34
- }
35
-
36
- export const z = {
37
- union: () => inert('union'),
38
- array: () => inert('array'),
39
- object: () => inert('object'),
40
- string: () => inert('string'),
41
- number: () => inert('number'),
42
- boolean: () => inert('boolean'),
43
- literal: () => inert('literal'),
44
- null: () => inert('null'),
45
- undefined: () => inert('undefined'),
46
- unknown: () => inert('unknown'),
47
- };
48
-
49
- export default z;
1
+ // Embedded-runtime shim of `zod` — construction surface only.
2
+ //
3
+ // Why it exists: vendored dsh plugins (tool-todo) build zod schema OBJECTS at
4
+ // module load for the session-projection seam (`ctx.sessionProjections`),
5
+ // which this composition never mounts — the schemas are constructed and then
6
+ // never consulted. Bundling real zod would add ~530KB of dead code per
7
+ // vendored plugin, so this shim satisfies module load with inert builders.
8
+ //
9
+ // Honesty boundary: NO validation semantics are provided. Any attempt to
10
+ // actually validate through a shimmed schema (`parse`/`safeParse`) throws
11
+ // loudly instead of silently accepting — if a projection consumer ever lands,
12
+ // replace this shim with a real vendored zod.
13
+
14
+ function inert(kind) {
15
+ return {
16
+ __zodLite: kind,
17
+ parse() {
18
+ throw new Error(
19
+ 'zod-lite shim: validation is not implemented (vendor real zod before consuming schemas)',
20
+ );
21
+ },
22
+ safeParse() {
23
+ throw new Error(
24
+ 'zod-lite shim: validation is not implemented (vendor real zod before consuming schemas)',
25
+ );
26
+ },
27
+ optional() {
28
+ return inert(`${kind}?`);
29
+ },
30
+ nullable() {
31
+ return inert(`${kind}|null`);
32
+ },
33
+ };
34
+ }
35
+
36
+ export const z = {
37
+ union: () => inert('union'),
38
+ array: () => inert('array'),
39
+ object: () => inert('object'),
40
+ string: () => inert('string'),
41
+ number: () => inert('number'),
42
+ boolean: () => inert('boolean'),
43
+ literal: () => inert('literal'),
44
+ null: () => inert('null'),
45
+ undefined: () => inert('undefined'),
46
+ unknown: () => inert('unknown'),
47
+ };
48
+
49
+ export default z;
@@ -0,0 +1,21 @@
1
+ MIT License
2
+
3
+ Copyright (c) 2021-present Shigma
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy
6
+ of this software and associated documentation files (the "Software"), to deal
7
+ in the Software without restriction, including without limitation the rights
8
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
+ copies of the Software, and to permit persons to whom the Software is
10
+ furnished to do so, subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in all
13
+ copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
+ SOFTWARE.