@scopebond/agent 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Avouro LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,42 @@
+# @scopebond/agent
+
+The Scopebond Agent keeps a computer connected to its Scopebond workspace without anyone running a command.
+It is one resident process per user. The hook (`@scopebond/hook`) keeps deciding every action on its own; the
+agent never takes part in a decision. It only keeps everything around the decisions working:
+
+- **Delivery.** It sends the records the hook queued, all of them, with backoff while the workspace is unreachable.
+  A record the workspace refuses on its own is kept as a gap and never holds up the rest.
+- **Rules and connection.** It runs the rules check, which brings the workspace's rules, reports this computer's
+  queue, and renews the machine credential before it expires.
+- **Repair.** It notices when an agent's settings lost the Scopebond hook entry (an update or a reset can remove it)
+  and, on request, puts it back without touching anything else in the file.
+- **Health.** It reports the same machine-readable status as `scopebond status --json` (`scopebond.status.v1`).
+
+## Use
+
+```bash
+npm install -g @scopebond/agent
+scopebond-agent autostart on      # start with your sign-in (Windows Run entry, macOS LaunchAgent, Linux systemd user unit)
+scopebond-agent status            # what it reports about this computer
+```
+
+On Windows, type `npx.cmd` instead of `npx` in PowerShell if you run it without installing.
+
+| Command | What it does |
+|---|---|
+| `scopebond-agent run` | Run in the foreground (what autostart starts) |
+| `scopebond-agent status [--json]` | Delivery state, records waiting and the last problem |
+| `scopebond-agent flush` | Deliver waiting records now |
+| `scopebond-agent repair` | Put the Scopebond hook back into agent settings that lost it |
+| `scopebond-agent autostart on\|off` | Start with your sign-in, or stop doing so |
+
+## Local control channel
+
+The agent listens on `127.0.0.1` only, on a random port, and every request must carry a random token. Port, token and
+process id are in `~/.scopebond/agent.json`, readable by you only. Routes: `GET /status`, `POST /flush`, `POST /repair`.
+Exactly one agent serves a computer's Scopebond home; a second one exits.
+
+## Status
+
+Experimental. A tray window with a one-click fix for every amber or red state, signed installers and signed updates
+are next.

package/dist/agent.d.ts

@@ -0,0 +1,26 @@
+import { type Harness, type StatusJson, type SyncOutcome } from "@scopebond/hook";
+export interface CycleOptions {
+    /** The Scopebond home this agent serves (the user's ~/.scopebond by default). */
+    dir: string;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+    /** Per-request timeout for the workspace, in milliseconds. */
+    timeoutMs?: number;
+}
+export interface CycleResult {
+    at: number;
+    connected: boolean;
+    delivered: number;
+    pending: number;
+    deliveryError: string | null;
+    rules: SyncOutcome["state"] | "skipped";
+    missingHookEntries: Harness[];
+}
+/** The agents on this computer whose user-level settings should hold the Scopebond hook. */
+export declare function expectedHarnesses(): Harness[];
+/** Agent settings that lost their Scopebond hook entry (an update or a reset can remove it). */
+export declare function missingHookEntries(harnesses?: Harness[]): Harness[];
+export declare function runCycle(options: CycleOptions): Promise<CycleResult>;
+/** The machine-readable status (scopebond.status.v1) for this computer, as the hook reports it. */
+export declare function computerStatus(dir: string, now?: number): StatusJson;
+//# sourceMappingURL=agent.d.ts.map

package/dist/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAWA,OAAO,EAGL,KAAK,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,WAAW,EAChD,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,YAAY;IAC3B,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IACxC,kBAAkB,EAAE,OAAO,EAAE,CAAC;CAC/B;AAED,4FAA4F;AAC5F,wBAAgB,iBAAiB,IAAI,OAAO,EAAE,CAE7C;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,SAAS,GAAE,OAAO,EAAwB,GAAG,OAAO,EAAE,CAExF;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAwC1E;AAED,mGAAmG;AACnG,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,UAAU,CAOpE"}

package/dist/agent.js

@@ -0,0 +1,79 @@
+// The Scopebond Agent's work, one cycle at a time. The hook still decides every action on its
+// own (enforcement never depends on the agent); the agent keeps everything around it working:
+// it delivers what the hook queued, keeps the workspace rules and the connection current, and
+// knows when the agent settings lost their hook entry. Every step is best-effort and bounded;
+// a cycle never throws.
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { createCloudExporter } from "@scopebond/gateway";
+import { SqliteCloudOutbox } from "@scopebond/gateway/node";
+import { createSigner } from "@scopebond/sdk";
+import { LOSSLESS_OUTBOX, OUTBOX_FILE, buildStatusJson, cursorDetected, codexDetected, hookVersion, ingestUrl, isHarnessConfigured, loadConnection, policyBuilds, recordDeliveryAttempt, syncPolicy, userHarnessFile, } from "@scopebond/hook";
+/** The agents on this computer whose user-level settings should hold the Scopebond hook. */
+export function expectedHarnesses() {
+    return ["claude", ...(cursorDetected() ? ["cursor"] : []), ...(codexDetected() ? ["codex"] : [])];
+}
+/** Agent settings that lost their Scopebond hook entry (an update or a reset can remove it). */
+export function missingHookEntries(harnesses = expectedHarnesses()) {
+    return harnesses.filter((h) => existsSync(userHarnessFile(h)) && !isHarnessConfigured(userHarnessFile(h)));
+}
+export async function runCycle(options) {
+    const now = options.now ?? Date.now;
+    const dir = options.dir;
+    const result = { at: now(), connected: false, delivered: 0, pending: 0, deliveryError: null, rules: "skipped", missingHookEntries: [] };
+    try {
+        result.missingHookEntries = missingHookEntries();
+    }
+    catch { /* reported as none */ }
+    const connection = loadConnection(dir);
+    if (!connection)
+        return result;
+    result.connected = true;
+    // 1. Deliver everything the hook queued, in batches, until the queue is empty or the workspace refuses.
+    try {
+        const outbox = new SqliteCloudOutbox(join(dir, OUTBOX_FILE), LOSSLESS_OUTBOX);
+        const before = outbox.status().pending;
+        const exporter = createCloudExporter({
+            url: ingestUrl(connection), credential: connection.credential, outbox,
+            flushMs: 24 * 60 * 60 * 1000, fetch: options.fetchImpl, now,
+        });
+        try {
+            const lastSuccess = exporter.status().lastSuccessAt;
+            await exporter.flush();
+            const status = exporter.status();
+            recordDeliveryAttempt(dir, status, now(), lastSuccess);
+            result.pending = status.pending;
+            result.delivered = Math.max(0, before - status.pending);
+            result.deliveryError = status.lastError;
+        }
+        finally {
+            exporter.stop();
+        }
+    }
+    catch (error) {
+        result.deliveryError = error.message;
+    }
+    // 2. The rules check: the workspace's rules, the queue report, and credential renewal when due.
+    try {
+        const keyFile = join(dir, "agent.key");
+        if (existsSync(keyFile)) {
+            const agentKid = createSigner({ privateKeyPem: readFileSync(keyFile, "utf8") }).kid;
+            const outcome = await syncPolicy(dir, { agentKid, hookVersion: hookVersion(), policyBuilds, fetchImpl: options.fetchImpl, timeoutMs: options.timeoutMs ?? 10_000 });
+            result.rules = outcome.state;
+        }
+    }
+    catch {
+        result.rules = "unavailable";
+    }
+    return result;
+}
+/** The machine-readable status (scopebond.status.v1) for this computer, as the hook reports it. */
+export function computerStatus(dir, now) {
+    const expected = expectedHarnesses();
+    const configured = (h) => expected.includes(h) && existsSync(userHarnessFile(h)) && isHarnessConfigured(userHarnessFile(h));
+    return buildStatusJson({
+        version: hookVersion(), activeDir: dir, candidateDirs: [dir], hasPolicy: existsSync(join(dir, "policy.json")),
+        agents: { claude: configured("claude"), cursor: configured("cursor"), codex: configured("codex") }, now,
+    });
+}
+//# sourceMappingURL=agent.js.map

package/dist/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,8FAA8F;AAC9F,8FAA8F;AAC9F,8FAA8F;AAC9F,wBAAwB;AAExB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EACpG,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,eAAe,GAEtG,MAAM,iBAAiB,CAAC;AAqBzB,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB;IAC/B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,OAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtH,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAAC,YAAuB,iBAAiB,EAAE;IAC3E,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAqB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,MAAM,GAAgB,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC;IACrJ,IAAI,CAAC;QAAC,MAAM,CAAC,kBAAkB,GAAG,kBAAkB,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC;IAC/B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IAExB,wGAAwG;IACxG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC;QACvC,MAAM,QAAQ,GAAG,mBAAmB,CAAC;YACnC,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,MAAM;YACrE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG;SAC5D,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC;YACpD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;YACjC,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;YACvD,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAChC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC;QAC1C,CAAC;gBAAS,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,aAAa,GAAI,KAAe,CAAC,OAAO,CAAC;IAClD,CAAC;IAED,gGAAgG;IAChG,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;YACpF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;YACpK,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC;IAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,GAAY;IACtD,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IACrI,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC7G,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG;KACxG,CAAC,CAAC;AACL,CAAC","sourcesContent":["// The Scopebond Agent's work, one cycle at a time. The hook still decides every action on its\n// own (enforcement never depends on the agent); the agent keeps everything around it working:\n// it delivers what the hook queued, keeps the workspace rules and the connection current, and\n// knows when the agent settings lost their hook entry. Every step is best-effort and bounded;\n// a cycle never throws.\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { createCloudExporter } from \"@scopebond/gateway\";\nimport { SqliteCloudOutbox } from \"@scopebond/gateway/node\";\nimport { createSigner } from \"@scopebond/sdk\";\nimport {\n  LOSSLESS_OUTBOX, OUTBOX_FILE, buildStatusJson, cursorDetected, codexDetected, hookVersion, ingestUrl,\n  isHarnessConfigured, loadConnection, policyBuilds, recordDeliveryAttempt, syncPolicy, userHarnessFile,\n  type Harness, type StatusJson, type SyncOutcome,\n} from \"@scopebond/hook\";\n\nexport interface CycleOptions {\n  /** The Scopebond home this agent serves (the user's ~/.scopebond by default). */\n  dir: string;\n  fetchImpl?: typeof fetch;\n  now?: () => number;\n  /** Per-request timeout for the workspace, in milliseconds. */\n  timeoutMs?: number;\n}\n\nexport interface CycleResult {\n  at: number;\n  connected: boolean;\n  delivered: number;\n  pending: number;\n  deliveryError: string | null;\n  rules: SyncOutcome[\"state\"] | \"skipped\";\n  missingHookEntries: Harness[];\n}\n\n/** The agents on this computer whose user-level settings should hold the Scopebond hook. */\nexport function expectedHarnesses(): Harness[] {\n  return [\"claude\", ...(cursorDetected() ? [\"cursor\" as const] : []), ...(codexDetected() ? [\"codex\" as const] : [])];\n}\n\n/** Agent settings that lost their Scopebond hook entry (an update or a reset can remove it). */\nexport function missingHookEntries(harnesses: Harness[] = expectedHarnesses()): Harness[] {\n  return harnesses.filter((h) => existsSync(userHarnessFile(h)) && !isHarnessConfigured(userHarnessFile(h)));\n}\n\nexport async function runCycle(options: CycleOptions): Promise<CycleResult> {\n  const now = options.now ?? Date.now;\n  const dir = options.dir;\n  const result: CycleResult = { at: now(), connected: false, delivered: 0, pending: 0, deliveryError: null, rules: \"skipped\", missingHookEntries: [] };\n  try { result.missingHookEntries = missingHookEntries(); } catch { /* reported as none */ }\n  const connection = loadConnection(dir);\n  if (!connection) return result;\n  result.connected = true;\n\n  // 1. Deliver everything the hook queued, in batches, until the queue is empty or the workspace refuses.\n  try {\n    const outbox = new SqliteCloudOutbox(join(dir, OUTBOX_FILE), LOSSLESS_OUTBOX);\n    const before = outbox.status().pending;\n    const exporter = createCloudExporter({\n      url: ingestUrl(connection), credential: connection.credential, outbox,\n      flushMs: 24 * 60 * 60 * 1000, fetch: options.fetchImpl, now,\n    });\n    try {\n      const lastSuccess = exporter.status().lastSuccessAt;\n      await exporter.flush();\n      const status = exporter.status();\n      recordDeliveryAttempt(dir, status, now(), lastSuccess);\n      result.pending = status.pending;\n      result.delivered = Math.max(0, before - status.pending);\n      result.deliveryError = status.lastError;\n    } finally { exporter.stop(); }\n  } catch (error) {\n    result.deliveryError = (error as Error).message;\n  }\n\n  // 2. The rules check: the workspace's rules, the queue report, and credential renewal when due.\n  try {\n    const keyFile = join(dir, \"agent.key\");\n    if (existsSync(keyFile)) {\n      const agentKid = createSigner({ privateKeyPem: readFileSync(keyFile, \"utf8\") }).kid;\n      const outcome = await syncPolicy(dir, { agentKid, hookVersion: hookVersion(), policyBuilds, fetchImpl: options.fetchImpl, timeoutMs: options.timeoutMs ?? 10_000 });\n      result.rules = outcome.state;\n    }\n  } catch { result.rules = \"unavailable\"; }\n  return result;\n}\n\n/** The machine-readable status (scopebond.status.v1) for this computer, as the hook reports it. */\nexport function computerStatus(dir: string, now?: number): StatusJson {\n  const expected = expectedHarnesses();\n  const configured = (h: Harness) => expected.includes(h) && existsSync(userHarnessFile(h)) && isHarnessConfigured(userHarnessFile(h));\n  return buildStatusJson({\n    version: hookVersion(), activeDir: dir, candidateDirs: [dir], hasPolicy: existsSync(join(dir, \"policy.json\")),\n    agents: { claude: configured(\"claude\"), cursor: configured(\"cursor\"), codex: configured(\"codex\") }, now,\n  });\n}\n"]}

package/dist/autostart.d.ts

@@ -0,0 +1,13 @@
+export declare const LABEL = "com.scopebond.agent";
+export declare function windowsRunCommand(node: string, cli: string): string;
+export declare function macLaunchAgent(node: string, cli: string, logFile: string): string;
+export declare function linuxUserUnit(node: string, cli: string): string;
+export declare function autostartPaths(home?: string): {
+    macPlist: string;
+    linuxUnit: string;
+    log: string;
+};
+/** Turn autostart on for this user. Returns a one-line description of what changed. */
+export declare function enableAutostart(cli: string, node?: string, platform?: NodeJS.Platform): string;
+export declare function disableAutostart(platform?: NodeJS.Platform): string;
+//# sourceMappingURL=autostart.d.ts.map

package/dist/autostart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autostart.d.ts","sourceRoot":"","sources":["../src/autostart.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,KAAK,wBAAwB,CAAC;AAO3C,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAejF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAc/D;AAED,wBAAgB,cAAc,CAAC,IAAI,SAAY;;;;EAM9C;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,SAAmB,EAAE,QAAQ,kBAAmB,GAAG,MAAM,CAkBzG;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,kBAAmB,GAAG,MAAM,CAgBpE"}

package/dist/autostart.js

@@ -0,0 +1,113 @@
+// Start the agent when the person signs in to the computer, per user, with no administrator
+// rights: a Run entry on Windows, a LaunchAgent on macOS, a systemd user unit on Linux. The
+// builders are pure (and tested); `enable`/`disable` apply them. The command pins this Node and
+// this agent's absolute path, so it never depends on a shell's PATH or npm's temporary cache.
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+export const LABEL = "com.scopebond.agent";
+const RUN_KEY = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";
+const RUN_VALUE = "ScopebondAgent";
+const quoteWin = (s) => `"${s.replace(/"/g, "")}"`;
+const xml = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+export function windowsRunCommand(node, cli) {
+    return `${quoteWin(node)} ${quoteWin(cli)} run`;
+}
+export function macLaunchAgent(node, cli, logFile) {
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${LABEL}</string>
+  <key>ProgramArguments</key>
+  <array><string>${xml(node)}</string><string>${xml(cli)}</string><string>run</string></array>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>
+  <key>StandardOutPath</key><string>${xml(logFile)}</string>
+  <key>StandardErrorPath</key><string>${xml(logFile)}</string>
+</dict>
+</plist>
+`;
+}
+export function linuxUserUnit(node, cli) {
+    const q = (s) => `"${s.replace(/(["\\])/g, "\\$1")}"`;
+    return `[Unit]
+Description=Scopebond Agent (delivers this computer's records to its Scopebond workspace)
+After=network-online.target
+
+[Service]
+ExecStart=${q(node)} ${q(cli)} run
+Restart=on-failure
+RestartSec=30
+
+[Install]
+WantedBy=default.target
+`;
+}
+export function autostartPaths(home = homedir()) {
+    return {
+        macPlist: join(home, "Library", "LaunchAgents", `${LABEL}.plist`),
+        linuxUnit: join(home, ".config", "systemd", "user", "scopebond-agent.service"),
+        log: join(home, ".scopebond", "agent.log"),
+    };
+}
+/** Turn autostart on for this user. Returns a one-line description of what changed. */
+export function enableAutostart(cli, node = process.execPath, platform = process.platform) {
+    const paths = autostartPaths();
+    if (platform === "win32") {
+        execFileSync("reg", ["add", RUN_KEY, "/v", RUN_VALUE, "/t", "REG_SZ", "/d", windowsRunCommand(node, cli), "/f"], { stdio: "ignore" });
+        return `added ${RUN_VALUE} to ${RUN_KEY}`;
+    }
+    if (platform === "darwin") {
+        mkdirSync(dirname(paths.macPlist), { recursive: true });
+        mkdirSync(dirname(paths.log), { recursive: true });
+        writeFileSync(paths.macPlist, macLaunchAgent(node, cli, paths.log));
+        try {
+            execFileSync("launchctl", ["load", "-w", paths.macPlist], { stdio: "ignore" });
+        }
+        catch { /* loads at next sign-in */ }
+        return `wrote ${paths.macPlist}`;
+    }
+    mkdirSync(dirname(paths.linuxUnit), { recursive: true });
+    writeFileSync(paths.linuxUnit, linuxUserUnit(node, cli));
+    try {
+        execFileSync("systemctl", ["--user", "daemon-reload"], { stdio: "ignore" });
+        execFileSync("systemctl", ["--user", "enable", "--now", "scopebond-agent.service"], { stdio: "ignore" });
+    }
+    catch {
+        return `wrote ${paths.linuxUnit} (enable it with: systemctl --user enable --now scopebond-agent)`;
+    }
+    return `wrote and enabled ${paths.linuxUnit}`;
+}
+export function disableAutostart(platform = process.platform) {
+    const paths = autostartPaths();
+    if (platform === "win32") {
+        try {
+            execFileSync("reg", ["delete", RUN_KEY, "/v", RUN_VALUE, "/f"], { stdio: "ignore" });
+        }
+        catch {
+            return "autostart was not on";
+        }
+        return `removed ${RUN_VALUE} from ${RUN_KEY}`;
+    }
+    if (platform === "darwin") {
+        if (!existsSync(paths.macPlist))
+            return "autostart was not on";
+        try {
+            execFileSync("launchctl", ["unload", "-w", paths.macPlist], { stdio: "ignore" });
+        }
+        catch { /* not loaded */ }
+        rmSync(paths.macPlist, { force: true });
+        return `removed ${paths.macPlist}`;
+    }
+    if (!existsSync(paths.linuxUnit))
+        return "autostart was not on";
+    try {
+        execFileSync("systemctl", ["--user", "disable", "--now", "scopebond-agent.service"], { stdio: "ignore" });
+    }
+    catch { /* not enabled */ }
+    rmSync(paths.linuxUnit, { force: true });
+    return `removed ${paths.linuxUnit}`;
+}
+//# sourceMappingURL=autostart.js.map

package/dist/autostart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autostart.js","sourceRoot":"","sources":["../src/autostart.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,4FAA4F;AAC5F,gGAAgG;AAChG,8FAA8F;AAE9F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,MAAM,KAAK,GAAG,qBAAqB,CAAC;AAC3C,MAAM,OAAO,GAAG,yDAAyD,CAAC;AAC1E,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC;AAC3D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAEhG,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,GAAW;IACzD,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAW,EAAE,OAAe;IACvE,OAAO;;;;4BAImB,KAAK;;mBAEd,GAAG,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,GAAG,CAAC;;;sCAGlB,GAAG,CAAC,OAAO,CAAC;wCACV,GAAG,CAAC,OAAO,CAAC;;;CAGnD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAW;IACrD,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC;IAC9D,OAAO;;;;;YAKG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;;;;;;CAM5B,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAI,GAAG,OAAO,EAAE;IAC7C,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC;QACjE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,CAAC;QAC9E,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAC/F,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtI,OAAO,SAAS,SAAS,OAAO,OAAO,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC;YAAC,YAAY,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAC7H,OAAO,SAAS,KAAK,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC;QAAC,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,yBAAyB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,CAAC;IAC9L,MAAM,CAAC;QAAC,OAAO,SAAS,KAAK,CAAC,SAAS,kEAAkE,CAAC;IAAC,CAAC;IAC5G,OAAO,qBAAqB,KAAK,CAAC,SAAS,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAC1D,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,sBAAsB,CAAC;QAAC,CAAC;QACtI,OAAO,WAAW,SAAS,SAAS,OAAO,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,sBAAsB,CAAC;QAC/D,IAAI,CAAC;YAAC,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACpH,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO,WAAW,KAAK,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAChE,IAAI,CAAC;QAAC,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAyB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC9I,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO,WAAW,KAAK,CAAC,SAAS,EAAE,CAAC;AACtC,CAAC","sourcesContent":["// Start the agent when the person signs in to the computer, per user, with no administrator\n// rights: a Run entry on Windows, a LaunchAgent on macOS, a systemd user unit on Linux. The\n// builders are pure (and tested); `enable`/`disable` apply them. The command pins this Node and\n// this agent's absolute path, so it never depends on a shell's PATH or npm's temporary cache.\n\nimport { execFileSync } from \"node:child_process\";\nimport { existsSync, mkdirSync, rmSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nexport const LABEL = \"com.scopebond.agent\";\nconst RUN_KEY = \"HKCU\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Run\";\nconst RUN_VALUE = \"ScopebondAgent\";\n\nconst quoteWin = (s: string) => `\"${s.replace(/\"/g, \"\")}\"`;\nconst xml = (s: string) => s.replace(/&/g, \"&amp;\").replace(/</g, \"&lt;\").replace(/>/g, \"&gt;\");\n\nexport function windowsRunCommand(node: string, cli: string): string {\n  return `${quoteWin(node)} ${quoteWin(cli)} run`;\n}\n\nexport function macLaunchAgent(node: string, cli: string, logFile: string): string {\n  return `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n  <key>Label</key><string>${LABEL}</string>\n  <key>ProgramArguments</key>\n  <array><string>${xml(node)}</string><string>${xml(cli)}</string><string>run</string></array>\n  <key>RunAtLoad</key><true/>\n  <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>\n  <key>StandardOutPath</key><string>${xml(logFile)}</string>\n  <key>StandardErrorPath</key><string>${xml(logFile)}</string>\n</dict>\n</plist>\n`;\n}\n\nexport function linuxUserUnit(node: string, cli: string): string {\n  const q = (s: string) => `\"${s.replace(/([\"\\\\])/g, \"\\\\$1\")}\"`;\n  return `[Unit]\nDescription=Scopebond Agent (delivers this computer's records to its Scopebond workspace)\nAfter=network-online.target\n\n[Service]\nExecStart=${q(node)} ${q(cli)} run\nRestart=on-failure\nRestartSec=30\n\n[Install]\nWantedBy=default.target\n`;\n}\n\nexport function autostartPaths(home = homedir()) {\n  return {\n    macPlist: join(home, \"Library\", \"LaunchAgents\", `${LABEL}.plist`),\n    linuxUnit: join(home, \".config\", \"systemd\", \"user\", \"scopebond-agent.service\"),\n    log: join(home, \".scopebond\", \"agent.log\"),\n  };\n}\n\n/** Turn autostart on for this user. Returns a one-line description of what changed. */\nexport function enableAutostart(cli: string, node = process.execPath, platform = process.platform): string {\n  const paths = autostartPaths();\n  if (platform === \"win32\") {\n    execFileSync(\"reg\", [\"add\", RUN_KEY, \"/v\", RUN_VALUE, \"/t\", \"REG_SZ\", \"/d\", windowsRunCommand(node, cli), \"/f\"], { stdio: \"ignore\" });\n    return `added ${RUN_VALUE} to ${RUN_KEY}`;\n  }\n  if (platform === \"darwin\") {\n    mkdirSync(dirname(paths.macPlist), { recursive: true });\n    mkdirSync(dirname(paths.log), { recursive: true });\n    writeFileSync(paths.macPlist, macLaunchAgent(node, cli, paths.log));\n    try { execFileSync(\"launchctl\", [\"load\", \"-w\", paths.macPlist], { stdio: \"ignore\" }); } catch { /* loads at next sign-in */ }\n    return `wrote ${paths.macPlist}`;\n  }\n  mkdirSync(dirname(paths.linuxUnit), { recursive: true });\n  writeFileSync(paths.linuxUnit, linuxUserUnit(node, cli));\n  try { execFileSync(\"systemctl\", [\"--user\", \"daemon-reload\"], { stdio: \"ignore\" }); execFileSync(\"systemctl\", [\"--user\", \"enable\", \"--now\", \"scopebond-agent.service\"], { stdio: \"ignore\" }); }\n  catch { return `wrote ${paths.linuxUnit} (enable it with: systemctl --user enable --now scopebond-agent)`; }\n  return `wrote and enabled ${paths.linuxUnit}`;\n}\n\nexport function disableAutostart(platform = process.platform): string {\n  const paths = autostartPaths();\n  if (platform === \"win32\") {\n    try { execFileSync(\"reg\", [\"delete\", RUN_KEY, \"/v\", RUN_VALUE, \"/f\"], { stdio: \"ignore\" }); } catch { return \"autostart was not on\"; }\n    return `removed ${RUN_VALUE} from ${RUN_KEY}`;\n  }\n  if (platform === \"darwin\") {\n    if (!existsSync(paths.macPlist)) return \"autostart was not on\";\n    try { execFileSync(\"launchctl\", [\"unload\", \"-w\", paths.macPlist], { stdio: \"ignore\" }); } catch { /* not loaded */ }\n    rmSync(paths.macPlist, { force: true });\n    return `removed ${paths.macPlist}`;\n  }\n  if (!existsSync(paths.linuxUnit)) return \"autostart was not on\";\n  try { execFileSync(\"systemctl\", [\"--user\", \"disable\", \"--now\", \"scopebond-agent.service\"], { stdio: \"ignore\" }); } catch { /* not enabled */ }\n  rmSync(paths.linuxUnit, { force: true });\n  return `removed ${paths.linuxUnit}`;\n}\n"]}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+// scopebond-agent: run, look at and control the Scopebond Agent for this user.
+//
+//   scopebond-agent run                 run in the foreground (what autostart starts)
+//   scopebond-agent status [--json]     what the running agent reports, or why it is not running
+//   scopebond-agent flush               deliver now
+//   scopebond-agent repair              put the Scopebond hook back where agent settings lost it
+//   scopebond-agent autostart on|off    start with this user's sign-in, or stop doing so
+import { realpathSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { isEphemeralPath, userHome } from "@scopebond/hook";
+import { computerStatus } from "./agent.js";
+import { disableAutostart, enableAutostart } from "./autostart.js";
+import { callAgent } from "./ipc.js";
+import { startService } from "./service.js";
+const [cmd = "help", ...rest] = process.argv.slice(2);
+const dir = process.env.SCOPEBOND_HOME ?? userHome();
+const cliPath = realpathSync(fileURLToPath(import.meta.url));
+function help() {
+    console.log(`Scopebond Agent — keeps this computer delivering to its Scopebond workspace.
+
+  scopebond-agent run                 run in the foreground (what autostart starts)
+  scopebond-agent status [--json]     what the agent reports about this computer
+  scopebond-agent flush               deliver waiting records now
+  scopebond-agent repair              put the Scopebond hook back where agent settings lost it
+  scopebond-agent autostart on|off    start with your sign-in, or stop doing so
+
+The hook keeps deciding every action on its own; the agent only keeps delivery, rules and the
+connection current. Home: ${dir}`);
+}
+async function main() {
+    switch (cmd) {
+        case "run": {
+            const service = await startService({ dir });
+            const stop = () => { void service.stop().finally(() => process.exit(0)); };
+            process.on("SIGINT", stop);
+            process.on("SIGTERM", stop);
+            return;
+        }
+        case "status": {
+            const live = await callAgent(dir, "GET", "/status");
+            const status = live ?? { ...computerStatus(dir), agent: null };
+            if (rest.includes("--json")) {
+                console.log(JSON.stringify(status, null, 2));
+                return;
+            }
+            const d = status.delivery;
+            console.log(`Scopebond Agent: ${live ? "running" : "not running"}`);
+            console.log(`  state            ${status.state}`);
+            console.log(`  connected        ${d.connected ? "yes" : "no"}`);
+            console.log(`  waiting to send  ${d.pending} record(s)${d.oldest_pending_age_s !== null ? `, oldest ${Math.round(d.oldest_pending_age_s / 60)} min` : ""}`);
+            if (d.last_error)
+                console.log(`  last problem     ${d.last_error}`);
+            if (!live)
+                console.log(`\nStart it with: scopebond-agent run   (or: scopebond-agent autostart on)`);
+            return;
+        }
+        case "flush":
+        case "repair": {
+            const answer = await callAgent(dir, "POST", `/${cmd}`, {}, 60_000);
+            if (!answer) {
+                console.error("The Scopebond Agent is not running. Start it with: scopebond-agent run");
+                process.exitCode = 1;
+                return;
+            }
+            console.log(JSON.stringify(answer, null, 2));
+            return;
+        }
+        case "autostart": {
+            const on = rest[0] === "on";
+            if (rest[0] !== "on" && rest[0] !== "off") {
+                console.error("usage: scopebond-agent autostart on|off");
+                process.exitCode = 1;
+                return;
+            }
+            if (on && isEphemeralPath(cliPath)) {
+                // npx runs from a cache npm clears; an autostart entry pointing there would stop working.
+                console.error("Install the agent first so autostart has a stable path: npm install -g @scopebond/agent");
+                process.exitCode = 1;
+                return;
+            }
+            console.log(on ? enableAutostart(cliPath) : disableAutostart());
+            return;
+        }
+        default:
+            help();
+            if (cmd !== "help" && cmd !== "--help")
+                process.exitCode = 1;
+    }
+}
+void main().catch((error) => { console.error(error.message); process.exitCode = 1; });
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,+EAA+E;AAC/E,EAAE;AACF,sFAAsF;AACtF,iGAAiG;AACjG,oDAAoD;AACpD,iGAAiG;AACjG,yFAAyF;AAEzF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,CAAC,GAAG,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,QAAQ,EAAE,CAAC;AACrD,MAAM,OAAO,GAAG,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE7D,SAAS,IAAI;IACX,OAAO,CAAC,GAAG,CAAC;;;;;;;;;4BASc,GAAG,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAqE,CAAC;YACxH,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtF,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5J,IAAI,CAAC,CAAC,UAAU;gBAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QACD,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;YAC5B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtI,IAAI,EAAE,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,0FAA0F;gBAC1F,OAAO,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;gBACzG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD;YACE,IAAI,EAAE,CAAC;YACP,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\n// scopebond-agent: run, look at and control the Scopebond Agent for this user.\n//\n//   scopebond-agent run                 run in the foreground (what autostart starts)\n//   scopebond-agent status [--json]     what the running agent reports, or why it is not running\n//   scopebond-agent flush               deliver now\n//   scopebond-agent repair              put the Scopebond hook back where agent settings lost it\n//   scopebond-agent autostart on|off    start with this user's sign-in, or stop doing so\n\nimport { realpathSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { isEphemeralPath, userHome } from \"@scopebond/hook\";\nimport { computerStatus } from \"./agent.js\";\nimport { disableAutostart, enableAutostart } from \"./autostart.js\";\nimport { callAgent } from \"./ipc.js\";\nimport { startService } from \"./service.js\";\n\nconst [cmd = \"help\", ...rest] = process.argv.slice(2);\nconst dir = process.env.SCOPEBOND_HOME ?? userHome();\nconst cliPath = realpathSync(fileURLToPath(import.meta.url));\n\nfunction help(): void {\n  console.log(`Scopebond Agent — keeps this computer delivering to its Scopebond workspace.\n\n  scopebond-agent run                 run in the foreground (what autostart starts)\n  scopebond-agent status [--json]     what the agent reports about this computer\n  scopebond-agent flush               deliver waiting records now\n  scopebond-agent repair              put the Scopebond hook back where agent settings lost it\n  scopebond-agent autostart on|off    start with your sign-in, or stop doing so\n\nThe hook keeps deciding every action on its own; the agent only keeps delivery, rules and the\nconnection current. Home: ${dir}`);\n}\n\nasync function main(): Promise<void> {\n  switch (cmd) {\n    case \"run\": {\n      const service = await startService({ dir });\n      const stop = () => { void service.stop().finally(() => process.exit(0)); };\n      process.on(\"SIGINT\", stop);\n      process.on(\"SIGTERM\", stop);\n      return;\n    }\n    case \"status\": {\n      const live = await callAgent(dir, \"GET\", \"/status\") as (ReturnType<typeof computerStatus> & { agent?: unknown }) | null;\n      const status = live ?? { ...computerStatus(dir), agent: null };\n      if (rest.includes(\"--json\")) { console.log(JSON.stringify(status, null, 2)); return; }\n      const d = status.delivery;\n      console.log(`Scopebond Agent: ${live ? \"running\" : \"not running\"}`);\n      console.log(`  state            ${status.state}`);\n      console.log(`  connected        ${d.connected ? \"yes\" : \"no\"}`);\n      console.log(`  waiting to send  ${d.pending} record(s)${d.oldest_pending_age_s !== null ? `, oldest ${Math.round(d.oldest_pending_age_s / 60)} min` : \"\"}`);\n      if (d.last_error) console.log(`  last problem     ${d.last_error}`);\n      if (!live) console.log(`\\nStart it with: scopebond-agent run   (or: scopebond-agent autostart on)`);\n      return;\n    }\n    case \"flush\":\n    case \"repair\": {\n      const answer = await callAgent(dir, \"POST\", `/${cmd}`, {}, 60_000);\n      if (!answer) { console.error(\"The Scopebond Agent is not running. Start it with: scopebond-agent run\"); process.exitCode = 1; return; }\n      console.log(JSON.stringify(answer, null, 2));\n      return;\n    }\n    case \"autostart\": {\n      const on = rest[0] === \"on\";\n      if (rest[0] !== \"on\" && rest[0] !== \"off\") { console.error(\"usage: scopebond-agent autostart on|off\"); process.exitCode = 1; return; }\n      if (on && isEphemeralPath(cliPath)) {\n        // npx runs from a cache npm clears; an autostart entry pointing there would stop working.\n        console.error(\"Install the agent first so autostart has a stable path: npm install -g @scopebond/agent\");\n        process.exitCode = 1;\n        return;\n      }\n      console.log(on ? enableAutostart(cliPath) : disableAutostart());\n      return;\n    }\n    default:\n      help();\n      if (cmd !== \"help\" && cmd !== \"--help\") process.exitCode = 1;\n  }\n}\n\nvoid main().catch((error) => { console.error((error as Error).message); process.exitCode = 1; });\n"]}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { runCycle, computerStatus, expectedHarnesses, missingHookEntries } from "./agent.js";
+export type { CycleOptions, CycleResult } from "./agent.js";
+export { startService, repairHookEntries, AGENT_VERSION } from "./service.js";
+export type { Service, ServiceOptions } from "./service.js";
+export { startControl, callAgent, readEndpoint, AGENT_FILE, TOKEN_HEADER } from "./ipc.js";
+export type { AgentEndpoint } from "./ipc.js";
+export { windowsRunCommand, macLaunchAgent, linuxUserUnit, enableAutostart, disableAutostart, autostartPaths, LABEL } from "./autostart.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC7F,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC9E,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC3F,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { runCycle, computerStatus, expectedHarnesses, missingHookEntries } from "./agent.js";
+export { startService, repairHookEntries, AGENT_VERSION } from "./service.js";
+export { startControl, callAgent, readEndpoint, AGENT_FILE, TOKEN_HEADER } from "./ipc.js";
+export { windowsRunCommand, macLaunchAgent, linuxUserUnit, enableAutostart, disableAutostart, autostartPaths, LABEL } from "./autostart.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE7F,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE3F,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["export { runCycle, computerStatus, expectedHarnesses, missingHookEntries } from \"./agent.js\";\nexport type { CycleOptions, CycleResult } from \"./agent.js\";\nexport { startService, repairHookEntries, AGENT_VERSION } from \"./service.js\";\nexport type { Service, ServiceOptions } from \"./service.js\";\nexport { startControl, callAgent, readEndpoint, AGENT_FILE, TOKEN_HEADER } from \"./ipc.js\";\nexport type { AgentEndpoint } from \"./ipc.js\";\nexport { windowsRunCommand, macLaunchAgent, linuxUserUnit, enableAutostart, disableAutostart, autostartPaths, LABEL } from \"./autostart.js\";\n"]}

package/dist/ipc.d.ts

@@ -0,0 +1,21 @@
+import { type Server } from "node:http";
+export declare const AGENT_FILE = "agent.json";
+export declare const TOKEN_HEADER = "x-scopebond-agent-token";
+export interface AgentEndpoint {
+    port: number;
+    token: string;
+    pid: number;
+    started_at: number;
+    version: string;
+}
+export type Handler = (body: unknown) => Promise<unknown> | unknown;
+export declare function readEndpoint(dir: string): AgentEndpoint | null;
+/** Start the control server. `routes` maps "METHOD /path" to a handler. */
+export declare function startControl(dir: string, version: string, routes: Record<string, Handler>): Promise<{
+    server: Server;
+    endpoint: AgentEndpoint;
+    close(): Promise<void>;
+}>;
+/** Call a running agent. Returns null when no agent answers. */
+export declare function callAgent(dir: string, method: "GET" | "POST", path: string, body?: unknown, timeoutMs?: number): Promise<unknown | null>;
+//# sourceMappingURL=ipc.d.ts.map

package/dist/ipc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc.d.ts","sourceRoot":"","sources":["../src/ipc.ts"],"names":[],"mappings":"AAKA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AAKjG,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,YAAY,4BAA4B,CAAC;AAEtD,MAAM,WAAW,aAAa;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAEhH,MAAM,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAI9D;AAED,2EAA2E;AAC3E,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAC;IAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CA8B9K;AAED,gEAAgE;AAChE,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAU7I"}

package/dist/ipc.js

@@ -0,0 +1,84 @@
+// The agent's local control channel: an HTTP server bound to 127.0.0.1 on a random port, with a
+// random token. Port, token and process id are written to agent.json in the Scopebond home (owner
+// read/write only), which is how the CLI and, later, the tray find it. Nothing listens beyond this
+// computer, and every request must carry the token.
+import { createServer } from "node:http";
+import { randomBytes, timingSafeEqual } from "node:crypto";
+import { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+export const AGENT_FILE = "agent.json";
+export const TOKEN_HEADER = "x-scopebond-agent-token";
+export function readEndpoint(dir) {
+    const file = join(dir, AGENT_FILE);
+    if (!existsSync(file))
+        return null;
+    try {
+        return JSON.parse(readFileSync(file, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+/** Start the control server. `routes` maps "METHOD /path" to a handler. */
+export async function startControl(dir, version, routes) {
+    const token = randomBytes(24).toString("base64url");
+    const expected = Buffer.from(token);
+    const server = createServer(async (req, res) => {
+        const send = (status, body) => { res.writeHead(status, { "content-type": "application/json", "cache-control": "no-store" }); res.end(JSON.stringify(body)); };
+        const offered = Buffer.from(String(req.headers[TOKEN_HEADER] ?? ""));
+        if (offered.length !== expected.length || !timingSafeEqual(offered, expected))
+            return send(401, { error: "unauthorized" });
+        const handler = routes[`${req.method} ${(req.url ?? "/").split("?")[0]}`];
+        if (!handler)
+            return send(404, { error: "not found" });
+        let raw = "";
+        for await (const chunk of req) {
+            raw += chunk;
+            if (raw.length > 64 * 1024)
+                return send(413, { error: "too large" });
+        }
+        try {
+            send(200, await handler(raw ? JSON.parse(raw) : null));
+        }
+        catch (error) {
+            send(500, { error: error.message.slice(0, 200) });
+        }
+    });
+    await new Promise((resolve, reject) => { server.once("error", reject); server.listen(0, "127.0.0.1", () => resolve()); });
+    const address = server.address();
+    const port = typeof address === "object" && address ? address.port : 0;
+    const endpoint = { port, token, pid: process.pid, started_at: Date.now(), version };
+    const file = join(dir, AGENT_FILE);
+    const temp = `${file}.${process.pid}.tmp`;
+    writeFileSync(temp, JSON.stringify(endpoint, null, 2) + "\n", { mode: 0o600 });
+    renameSync(temp, file);
+    return {
+        server, endpoint,
+        close: () => new Promise((resolve) => {
+            server.close(() => resolve());
+            // Only remove the file if it is still ours (a newer agent may have replaced it).
+            try {
+                if (readEndpoint(dir)?.pid === process.pid)
+                    rmSync(file, { force: true });
+            }
+            catch { /* best effort */ }
+        }),
+    };
+}
+/** Call a running agent. Returns null when no agent answers. */
+export async function callAgent(dir, method, path, body, timeoutMs = 5_000) {
+    const endpoint = readEndpoint(dir);
+    if (!endpoint)
+        return null;
+    try {
+        const res = await fetch(`http://127.0.0.1:${endpoint.port}${path}`, {
+            method, headers: { [TOKEN_HEADER]: endpoint.token, ...(body !== undefined ? { "content-type": "application/json" } : {}) },
+            body: body !== undefined ? JSON.stringify(body) : undefined, signal: AbortSignal.timeout(timeoutMs),
+        });
+        return res.ok ? await res.json() : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=ipc.js.map

package/dist/ipc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc.js","sourceRoot":"","sources":["../src/ipc.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,kGAAkG;AAClG,mGAAmG;AACnG,oDAAoD;AAEpD,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAMtD,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAkB,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAChG,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,OAAe,EAAE,MAA+B;IAC9F,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAC9E,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/K,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3H,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACvD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YAAC,GAAG,IAAI,KAAK,CAAC;YAAC,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAAC,CAAC;QACtH,IAAI,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QAC/D,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChI,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC;IACnG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvB,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9B,iFAAiF;YACjF,IAAI,CAAC;gBAAC,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG;oBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAChH,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,MAAsB,EAAE,IAAY,EAAE,IAAc,EAAE,SAAS,GAAG,KAAK;IAClH,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,QAAQ,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE;YAClE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC1H,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACpG,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC","sourcesContent":["// The agent's local control channel: an HTTP server bound to 127.0.0.1 on a random port, with a\n// random token. Port, token and process id are written to agent.json in the Scopebond home (owner\n// read/write only), which is how the CLI and, later, the tray find it. Nothing listens beyond this\n// computer, and every request must carry the token.\n\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from \"node:http\";\nimport { randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nexport const AGENT_FILE = \"agent.json\";\nexport const TOKEN_HEADER = \"x-scopebond-agent-token\";\n\nexport interface AgentEndpoint { port: number; token: string; pid: number; started_at: number; version: string }\n\nexport type Handler = (body: unknown) => Promise<unknown> | unknown;\n\nexport function readEndpoint(dir: string): AgentEndpoint | null {\n  const file = join(dir, AGENT_FILE);\n  if (!existsSync(file)) return null;\n  try { return JSON.parse(readFileSync(file, \"utf8\")) as AgentEndpoint; } catch { return null; }\n}\n\n/** Start the control server. `routes` maps \"METHOD /path\" to a handler. */\nexport async function startControl(dir: string, version: string, routes: Record<string, Handler>): Promise<{ server: Server; endpoint: AgentEndpoint; close(): Promise<void> }> {\n  const token = randomBytes(24).toString(\"base64url\");\n  const expected = Buffer.from(token);\n  const server = createServer(async (req: IncomingMessage, res: ServerResponse) => {\n    const send = (status: number, body: unknown) => { res.writeHead(status, { \"content-type\": \"application/json\", \"cache-control\": \"no-store\" }); res.end(JSON.stringify(body)); };\n    const offered = Buffer.from(String(req.headers[TOKEN_HEADER] ?? \"\"));\n    if (offered.length !== expected.length || !timingSafeEqual(offered, expected)) return send(401, { error: \"unauthorized\" });\n    const handler = routes[`${req.method} ${(req.url ?? \"/\").split(\"?\")[0]}`];\n    if (!handler) return send(404, { error: \"not found\" });\n    let raw = \"\";\n    for await (const chunk of req) { raw += chunk; if (raw.length > 64 * 1024) return send(413, { error: \"too large\" }); }\n    try { send(200, await handler(raw ? JSON.parse(raw) : null)); }\n    catch (error) { send(500, { error: (error as Error).message.slice(0, 200) }); }\n  });\n  await new Promise<void>((resolve, reject) => { server.once(\"error\", reject); server.listen(0, \"127.0.0.1\", () => resolve()); });\n  const address = server.address();\n  const port = typeof address === \"object\" && address ? address.port : 0;\n  const endpoint: AgentEndpoint = { port, token, pid: process.pid, started_at: Date.now(), version };\n  const file = join(dir, AGENT_FILE);\n  const temp = `${file}.${process.pid}.tmp`;\n  writeFileSync(temp, JSON.stringify(endpoint, null, 2) + \"\\n\", { mode: 0o600 });\n  renameSync(temp, file);\n  return {\n    server, endpoint,\n    close: () => new Promise<void>((resolve) => {\n      server.close(() => resolve());\n      // Only remove the file if it is still ours (a newer agent may have replaced it).\n      try { if (readEndpoint(dir)?.pid === process.pid) rmSync(file, { force: true }); } catch { /* best effort */ }\n    }),\n  };\n}\n\n/** Call a running agent. Returns null when no agent answers. */\nexport async function callAgent(dir: string, method: \"GET\" | \"POST\", path: string, body?: unknown, timeoutMs = 5_000): Promise<unknown | null> {\n  const endpoint = readEndpoint(dir);\n  if (!endpoint) return null;\n  try {\n    const res = await fetch(`http://127.0.0.1:${endpoint.port}${path}`, {\n      method, headers: { [TOKEN_HEADER]: endpoint.token, ...(body !== undefined ? { \"content-type\": \"application/json\" } : {}) },\n      body: body !== undefined ? JSON.stringify(body) : undefined, signal: AbortSignal.timeout(timeoutMs),\n    });\n    return res.ok ? await res.json() : null;\n  } catch { return null; }\n}\n"]}

package/dist/service.d.ts

@@ -0,0 +1,22 @@
+import { type Harness } from "@scopebond/hook";
+import { type CycleResult } from "./agent.js";
+export declare const AGENT_VERSION = "agent/1";
+export interface ServiceOptions {
+    dir: string;
+    intervalMs?: number;
+    fetchImpl?: typeof fetch;
+    log?: (line: string) => void;
+}
+export interface Service {
+    stop(): Promise<void>;
+    cycleNow(): Promise<CycleResult>;
+    port: number;
+}
+/** Put the Scopebond hook back into agent settings that lost it. A visible change: each one is
+ *  logged and returned, and only settings of agents this computer has are touched. */
+export declare function repairHookEntries(harnesses?: Harness[]): Array<{
+    harness: Harness;
+    file: string;
+}>;
+export declare function startService(options: ServiceOptions): Promise<Service>;
+//# sourceMappingURL=service.d.ts.map

package/dist/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiE,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC9G,OAAO,EAAmE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAG/G,eAAO,MAAM,aAAa,YAAY,CAAC;AAIvC,MAAM,WAAW,cAAc;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE;AAE5H,MAAM,WAAW,OAAO;IAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAElG;sFACsF;AACtF,wBAAgB,iBAAiB,CAAC,SAAS,GAAE,OAAO,EAAwB,GAAG,KAAK,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAOvH;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CA4C5E"}

package/dist/service.js

@@ -0,0 +1,70 @@
+// The resident loop: one cycle now, then one every interval, sooner after a change is asked for,
+// backing off while the workspace is unreachable. Exactly one agent serves a Scopebond home: a
+// second one finds the first answering and exits.
+import { userHarnessFile, writeHarnessConfig, hookCommand, hookVersion } from "@scopebond/hook";
+import { computerStatus, expectedHarnesses, missingHookEntries, runCycle } from "./agent.js";
+import { callAgent, startControl } from "./ipc.js";
+export const AGENT_VERSION = "agent/1";
+const INTERVAL_MS = 60_000;
+const MAX_BACKOFF_MS = 15 * 60_000;
+/** Put the Scopebond hook back into agent settings that lost it. A visible change: each one is
+ *  logged and returned, and only settings of agents this computer has are touched. */
+export function repairHookEntries(harnesses = expectedHarnesses()) {
+    const repaired = [];
+    for (const harness of missingHookEntries(harnesses)) {
+        const file = writeHarnessConfig(userHarnessFile(harness), harness, hookCommand(harness));
+        repaired.push({ harness, file });
+    }
+    return repaired;
+}
+export async function startService(options) {
+    const log = options.log ?? ((line) => console.log(`${new Date().toISOString()} ${line}`));
+    if (await callAgent(options.dir, "GET", "/status", undefined, 2_000))
+        throw new Error("a Scopebond Agent is already running for this computer");
+    const interval = options.intervalMs ?? INTERVAL_MS;
+    let last = null;
+    let failures = 0;
+    let timer = null;
+    let running = null;
+    let stopped = false;
+    const cycle = async () => {
+        if (running)
+            return running;
+        running = runCycle({ dir: options.dir, fetchImpl: options.fetchImpl }).then((result) => {
+            last = result;
+            failures = result.deliveryError ? failures + 1 : 0;
+            if (result.delivered)
+                log(`delivered ${result.delivered} record(s); ${result.pending} waiting`);
+            if (result.deliveryError)
+                log(`delivery problem: ${result.deliveryError}`);
+            return result;
+        }).finally(() => { running = null; });
+        return running;
+    };
+    const schedule = () => {
+        if (stopped)
+            return;
+        const delay = failures ? Math.min(MAX_BACKOFF_MS, interval * 2 ** Math.min(failures, 6)) : interval;
+        timer = setTimeout(() => { void cycle().finally(schedule); }, delay);
+    };
+    const control = await startControl(options.dir, `${AGENT_VERSION} hook/${hookVersion()}`, {
+        "GET /status": () => ({ ...computerStatus(options.dir), agent: { pid: process.pid, version: AGENT_VERSION, last_cycle: last } }),
+        "POST /flush": async () => ({ cycle: await cycle() }),
+        "POST /repair": () => {
+            const repaired = repairHookEntries();
+            for (const r of repaired)
+                log(`repaired the Scopebond hook entry in ${r.file}`);
+            return { repaired };
+        },
+    });
+    log(`Scopebond Agent running for ${options.dir} (control on 127.0.0.1:${control.endpoint.port})`);
+    await cycle();
+    schedule();
+    return {
+        port: control.endpoint.port,
+        cycleNow: cycle,
+        stop: async () => { stopped = true; if (timer)
+            clearTimeout(timer); await running?.catch(() => undefined); await control.close(); },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,+FAA+F;AAC/F,kDAAkD;AAElD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAgB,MAAM,iBAAiB,CAAC;AAC9G,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,QAAQ,EAAoB,MAAM,YAAY,CAAC;AAC/G,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAEnD,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AACvC,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AAMnC;sFACsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,YAAuB,iBAAiB,EAAE;IAC1E,MAAM,QAAQ,GAA8C,EAAE,CAAC;IAC/D,KAAK,MAAM,OAAO,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,kBAAkB,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACzF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAuB;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAClG,IAAI,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAChJ,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC;IACnD,IAAI,IAAI,GAAuB,IAAI,CAAC;IACpC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,KAAK,GAAyC,IAAI,CAAC;IACvD,IAAI,OAAO,GAAgC,IAAI,CAAC;IAChD,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,KAAK,GAAG,KAAK,IAA0B,EAAE;QAC7C,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,OAAO,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACrF,IAAI,GAAG,MAAM,CAAC;YACd,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,SAAS;gBAAE,GAAG,CAAC,aAAa,MAAM,CAAC,SAAS,eAAe,MAAM,CAAC,OAAO,UAAU,CAAC,CAAC;YAChG,IAAI,MAAM,CAAC,aAAa;gBAAE,GAAG,CAAC,qBAAqB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;YAC3E,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,aAAa,SAAS,WAAW,EAAE,EAAE,EAAE;QACxF,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QAChI,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,EAAE,CAAC;QACrD,cAAc,EAAE,GAAG,EAAE;YACnB,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,GAAG,CAAC,wCAAwC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAChF,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC;KACF,CAAC,CAAC;IACH,GAAG,CAAC,+BAA+B,OAAO,CAAC,GAAG,0BAA0B,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAClG,MAAM,KAAK,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC;IACX,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QAC3B,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,KAAK,IAAI,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;KACpI,CAAC;AACJ,CAAC","sourcesContent":["// The resident loop: one cycle now, then one every interval, sooner after a change is asked for,\n// backing off while the workspace is unreachable. Exactly one agent serves a Scopebond home: a\n// second one finds the first answering and exits.\n\nimport { userHarnessFile, writeHarnessConfig, hookCommand, hookVersion, type Harness } from \"@scopebond/hook\";\nimport { computerStatus, expectedHarnesses, missingHookEntries, runCycle, type CycleResult } from \"./agent.js\";\nimport { callAgent, startControl } from \"./ipc.js\";\n\nexport const AGENT_VERSION = \"agent/1\";\nconst INTERVAL_MS = 60_000;\nconst MAX_BACKOFF_MS = 15 * 60_000;\n\nexport interface ServiceOptions { dir: string; intervalMs?: number; fetchImpl?: typeof fetch; log?: (line: string) => void }\n\nexport interface Service { stop(): Promise<void>; cycleNow(): Promise<CycleResult>; port: number }\n\n/** Put the Scopebond hook back into agent settings that lost it. A visible change: each one is\n *  logged and returned, and only settings of agents this computer has are touched. */\nexport function repairHookEntries(harnesses: Harness[] = expectedHarnesses()): Array<{ harness: Harness; file: string }> {\n  const repaired: Array<{ harness: Harness; file: string }> = [];\n  for (const harness of missingHookEntries(harnesses)) {\n    const file = writeHarnessConfig(userHarnessFile(harness), harness, hookCommand(harness));\n    repaired.push({ harness, file });\n  }\n  return repaired;\n}\n\nexport async function startService(options: ServiceOptions): Promise<Service> {\n  const log = options.log ?? ((line: string) => console.log(`${new Date().toISOString()} ${line}`));\n  if (await callAgent(options.dir, \"GET\", \"/status\", undefined, 2_000)) throw new Error(\"a Scopebond Agent is already running for this computer\");\n  const interval = options.intervalMs ?? INTERVAL_MS;\n  let last: CycleResult | null = null;\n  let failures = 0;\n  let timer: ReturnType<typeof setTimeout> | null = null;\n  let running: Promise<CycleResult> | null = null;\n  let stopped = false;\n\n  const cycle = async (): Promise<CycleResult> => {\n    if (running) return running;\n    running = runCycle({ dir: options.dir, fetchImpl: options.fetchImpl }).then((result) => {\n      last = result;\n      failures = result.deliveryError ? failures + 1 : 0;\n      if (result.delivered) log(`delivered ${result.delivered} record(s); ${result.pending} waiting`);\n      if (result.deliveryError) log(`delivery problem: ${result.deliveryError}`);\n      return result;\n    }).finally(() => { running = null; });\n    return running;\n  };\n  const schedule = () => {\n    if (stopped) return;\n    const delay = failures ? Math.min(MAX_BACKOFF_MS, interval * 2 ** Math.min(failures, 6)) : interval;\n    timer = setTimeout(() => { void cycle().finally(schedule); }, delay);\n  };\n\n  const control = await startControl(options.dir, `${AGENT_VERSION} hook/${hookVersion()}`, {\n    \"GET /status\": () => ({ ...computerStatus(options.dir), agent: { pid: process.pid, version: AGENT_VERSION, last_cycle: last } }),\n    \"POST /flush\": async () => ({ cycle: await cycle() }),\n    \"POST /repair\": () => {\n      const repaired = repairHookEntries();\n      for (const r of repaired) log(`repaired the Scopebond hook entry in ${r.file}`);\n      return { repaired };\n    },\n  });\n  log(`Scopebond Agent running for ${options.dir} (control on 127.0.0.1:${control.endpoint.port})`);\n  await cycle();\n  schedule();\n  return {\n    port: control.endpoint.port,\n    cycleNow: cycle,\n    stop: async () => { stopped = true; if (timer) clearTimeout(timer); await running?.catch(() => undefined); await control.close(); },\n  };\n}\n"]}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@scopebond/agent",
+  "version": "0.1.0",
+  "description": "The Scopebond Agent — one resident process per user that delivers this computer's signed records to its Scopebond workspace, keeps its rules and connection current, and reports its health, so nobody has to run a command to keep it working.",
+  "license": "Apache-2.0",
+  "author": "Avouro LLC",
+  "homepage": "https://github.com/avouro-com/scopebond/tree/main/packages/agent#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/avouro-com/scopebond.git",
+    "directory": "packages/agent"
+  },
+  "bugs": {
+    "url": "https://github.com/avouro-com/scopebond/issues"
+  },
+  "keywords": [
+    "scopebond",
+    "ai-agents",
+    "agent",
+    "delivery",
+    "claude-code"
+  ],
+  "engines": {
+    "node": ">=22.13"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "scopebond-agent": "dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@scopebond/gateway": "^0.12.0",
+    "@scopebond/sdk": "^0.1.3",
+    "@scopebond/hook": "^0.15.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "tsc -p tsconfig.json && node --test test/*.test.mjs"
+  }
+}