@sleep2agi/agent-network 2.3.0-preview.135 → 2.3.0-preview.137

package/dist/src/opencode-agent-node-pair.d.ts

@@ -1,9 +1,9 @@
-export declare const PAIRED_AGENT_NETWORK_VERSION = "2.3.0-preview.135";
-export declare const PAIRED_AGENT_NODE_VERSION = "2.5.0-preview.102";
-export declare const PAIRED_AGENT_NODE_SPEC = "@sleep2agi/agent-node@2.5.0-preview.102";
-export declare const OPENCODE_AGENT_NETWORK_VERSION = "2.3.0-preview.135";
-export declare const OPENCODE_AGENT_NODE_VERSION = "2.5.0-preview.102";
-export declare const OPENCODE_AGENT_NODE_SPEC = "@sleep2agi/agent-node@2.5.0-preview.102";
+export declare const PAIRED_AGENT_NETWORK_VERSION = "2.3.0-preview.137";
+export declare const PAIRED_AGENT_NODE_VERSION = "2.5.0-preview.104";
+export declare const PAIRED_AGENT_NODE_SPEC = "@sleep2agi/agent-node@2.5.0-preview.104";
+export declare const OPENCODE_AGENT_NETWORK_VERSION = "2.3.0-preview.137";
+export declare const OPENCODE_AGENT_NODE_VERSION = "2.5.0-preview.104";
+export declare const OPENCODE_AGENT_NODE_SPEC = "@sleep2agi/agent-node@2.5.0-preview.104";
 export type PairedAgentNodeResolution = {
     spec: string;
     args: string[];

package/dist/src/opencode-free-tier.d.ts

@@ -0,0 +1,27 @@
+/**
+ * #540 — OpenCode Zen's free tier rejects any request in which a tool is
+ * disabled or a permission is denied, answering
+ * "OpenCode's free tier can only be used from within OpenCode" (measured on
+ * opencode-ai 1.18.1 and 1.18.34 with `{"tools":{"bash":false}}`). Our default
+ * safe preset disables every built-in tool, so a free Zen model on a default
+ * node fails every task. `anet node create` must say so instead of promising
+ * that free models "can still start".
+ *
+ * The default preset itself is intentionally NOT changed here.
+ */
+/** OpenCode Zen free models are `opencode/<id>-free`. */
+export declare function isOpencodeZenFreeModel(model: string | undefined | null): boolean;
+/** Replaces the old "Keyless/free models can still start without a credential." */
+export declare const OPENCODE_KEYLESS_FREE_MODEL_NOTE: string;
+/** The exact command that sets flags.opencodeUnsafeTools=true in a node config. */
+export declare function opencodeUnsafeToolsCommand(configFile: string): string;
+/**
+ * Warning lines for a node whose model is a Zen free model while the safe
+ * preset is active. Empty when the combination is not the failing one.
+ */
+export declare function opencodeFreeTierSafePresetWarning(opts: {
+    nodeId: string;
+    model: string | undefined | null;
+    unsafeTools: boolean;
+    configFile: string;
+}): string[];

package/dist/src/opencode-generation-record.d.ts

@@ -0,0 +1,24 @@
+import { type OpencodeGeneration } from "./opencode-versions";
+export declare const OPENCODE_GENERATION_FIELD = "opencodeGeneration";
+/** Profile about to be serialised by saveProfile: add the generation when it
+ *  is missing, otherwise return the very same object. */
+export declare function stampOpencodeGeneration<T extends Record<string, any>>(profile: T, generation?: OpencodeGeneration): T;
+/**
+ * Raw `config.json` text → the same text with `opencodeGeneration` appended,
+ * or null when nothing should be written:
+ *   – the field is already present (whatever its value), or
+ *   – the file is not valid JSON / not an object, or
+ *   – the file is not in the canonical `JSON.stringify(_, null, 2) + "\n"`
+ *     form saveProfile writes (hand-edited). Re-serialising such a file could
+ *     touch bytes of other fields, and an absent field already means V1.
+ * In the canonical case the result differs from the input only by the one
+ * appended key, so every other field keeps its exact bytes.
+ */
+export declare function recordOpencodeGenerationInConfigText(raw: string, generation?: OpencodeGeneration): string | null;
+/** Start-time backfill for a node created before #542. IO is injected so the
+ *  caller keeps its own symlink-safe private-file reader/writer. Never throws:
+ *  the record is advisory and an absent field already reads as V1. */
+export declare function backfillOpencodeGeneration(io: {
+    read: () => string | undefined;
+    write: (body: string) => void;
+}): boolean;

package/dist/src/opencode-package-binary.d.ts

@@ -24,3 +24,18 @@ export declare function validateOpencodePackageBinary(rawBinary: string, options
 export declare const OPENCODE_VERIFIER_PLATFORMS: ReadonlySet<NodeJS.Platform>;
 export declare function opencodeVerifierSupportsPlatform(platform?: NodeJS.Platform): boolean;
 export declare function resolveOpencodePackageBinaryFromPath(searchPath: string, options: ValidateOpencodePackageBinaryOptions, platform?: NodeJS.Platform): string;
+/**
+ * Board #541 — resolve the first trusted package entrypoint matching any of
+ * `acceptedVersions`, trying each version across the whole PATH in order (the
+ * release pin first), and report which exact version was admitted. Every
+ * candidate still goes through the full `validateOpencodePackageBinary`
+ * identity gate; only the accepted version set is wider. When nothing matches,
+ * the error from the first (release-pin) attempt is rethrown so diagnostics
+ * keep naming the pin the operator should install.
+ */
+export declare function resolveAcceptedOpencodePackageBinaryFromPath(searchPath: string, options: Omit<ValidateOpencodePackageBinaryOptions, "expectedVersion"> & {
+    acceptedVersions: readonly string[];
+}, platform?: NodeJS.Platform): {
+    binary: string;
+    version: string;
+};

package/dist/src/opencode-pin.d.ts

@@ -1,8 +1,25 @@
 /**
  * Version this branch was validated against by the maintainers.
- * Bumped when a new opencode-ai release passes the full Docker/E2E gate.
+ * Bumped when a new opencode-ai release passes the full Docker/E2E gate —
+ * in the shared supported-versions table (`opencode-versions.ts`, #542),
+ * which agent-node's package gate reads from its byte-identical copy.
  */
-export declare const OPENCODE_BUILTIN_PIN = "1.18.1";
+export declare const OPENCODE_BUILTIN_PIN = "1.18.34";
+/**
+ * Earlier release pins that remain accepted for one transition window so a
+ * host still holding the previous exact install keeps starting after an anet
+ * upgrade (board #541). Each entry passed the full Docker/E2E gate when it was
+ * the pin; start prints `opencodeLegacyPinNote()` so the operator upgrades.
+ * Derived from the shared supported-versions table (#542: v1 accepted
+ * versions minus the pin) — agent-node's gate reads the same table.
+ */
+export declare const OPENCODE_TRANSITION_VERSIONS: readonly string[];
+/** Versions a start may accept, preferred first: the release pin, then the
+ * transition versions. The order matters — a PATH holding both resolves to
+ * the release pin. */
+export declare function acceptedOpencodeVersions(pin?: string): string[];
+/** One-line upgrade note when a start accepted a transition version, else null. */
+export declare function opencodeLegacyPinNote(found: string, pin?: string): string | null;
 /** Exact upstream remediation shared by every CLI failure path. */
 export declare function opencodeExactInstallCommand(version?: string): string;
 /** Preserve package-identity diagnostics while always leaving a missing or

package/dist/src/opencode-versions.d.ts

@@ -0,0 +1,32 @@
+export type OpencodeGeneration = "v1" | "v2";
+export type OpencodeSupportStatus = "supported" | "preview" | "unsupported";
+export interface OpencodeGenerationSupport {
+    readonly generation: OpencodeGeneration;
+    /** npm package that provides the `opencode` executable. */
+    readonly packageName: string;
+    /** Release pin: the exact version a fresh install is told to use.
+     *  null when no version of this generation is vetted. */
+    readonly pin: string | null;
+    /** Every exact version a start may accept, preferred first (pin first).
+     *  Empty when the generation is unsupported. */
+    readonly acceptedVersions: readonly string[];
+    readonly status: OpencodeSupportStatus;
+}
+/** The V1 release pin. Kept as its own literal line so shell suites can
+ *  read it with a single anchored sed (tests/test1225…/run.sh). */
+export declare const OPENCODE_V1_PIN = "1.18.34";
+export declare const OPENCODE_SUPPORTED_VERSIONS: readonly OpencodeGenerationSupport[];
+/** Generation assumed for every node record that does not name one. */
+export declare const OPENCODE_DEFAULT_GENERATION: OpencodeGeneration;
+export declare function isOpencodeGeneration(value: unknown): value is OpencodeGeneration;
+export declare function opencodeGenerationSupport(generation: OpencodeGeneration): OpencodeGenerationSupport;
+/** Exact versions a start may accept for `generation`, preferred first.
+ *  Always empty for an unsupported generation. */
+export declare function acceptedOpencodeVersionsFor(generation: OpencodeGeneration): readonly string[];
+export declare function isAcceptedOpencodeVersionFor(generation: OpencodeGeneration, version: string): boolean;
+/** Generation recorded on a node config; a config without one (every node
+ *  created before #542) is V1. An unrecognised value is returned as
+ *  undefined so callers can refuse it instead of guessing. */
+export declare function opencodeGenerationOfConfig(config: {
+    opencodeGeneration?: unknown;
+} | null | undefined): OpencodeGeneration | undefined;

package/dist/src/unsafe-package-path-reason.d.ts

@@ -9,9 +9,23 @@ export interface PathModeFacts {
 export type UnsafePathReason = "owner" | "group-writable" | "world-writable" | null;
 /** Which condition makes this path unsafe to execute from, if any. */
 export declare function classifyUnsafePath(facts: PathModeFacts): UnsafePathReason;
+export declare function describeUnsafePath(path: string, facts: PathModeFacts): string;
+export interface DirectoryModeFacts {
+    uid: number;
+    /** Full st_mode (the sticky bit 0o1000 matters here). */
+    mode: number;
+    processUid: number;
+    /** Is this the package root itself or one of its ancestors? Only changes the wording. */
+    ancestorOf?: string;
+}
 /**
- * Operator-facing explanation. Names the path, the offending bits, and the
- * command that fixes it — a message that says only "unsafe" leaves the reader
- * guessing between four different conditions.
+ * #535 (audit P1-2) — the DIRECTORY branch of the agent-node package check used
+ * to throw a bare "unsafe ownership or mode" with no path at all. In the audit
+ * the offender was an ANCESTOR, `/tmp` (1777), because the npx cache lived
+ * under a HOME in /tmp — and nothing in the message said so.
+ *
+ * Names the exact directory, what is wrong with it, and the command that fixes
+ * it. For a sticky world-writable directory (/tmp-like) the fix is NOT chmod —
+ * changing /tmp breaks the machine — but moving the npm cache out from under it.
  */
-export declare function describeUnsafePath(path: string, facts: PathModeFacts): string;
+export declare function describeUnsafeDirectory(path: string, facts: DirectoryModeFacts): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sleep2agi/agent-network",
-  "version": "2.3.0-preview.135",
+  "version": "2.3.0-preview.137",
   "description": "AI Agent Network CLI — Local-first multi-agent orchestration across 6 runtimes (Claude Code CLI / Claude Agent SDK / Codex SDK / Codex app-server / Grok Build ACP / OpenCode CLI) and 8+ LLM providers. Apache 2.0.",
   "type": "module",
   "main": "dist/src/client.js",
@@ -24,7 +24,7 @@
   "scripts": {
     "typecheck": "tsc --noEmit",
     "test:feishu-bridge": "bun tests/feishu-bridge-ackplaceholder.test.ts",
-    "build": "bun build src/client.ts --outdir dist/src --target node --minify && bun build src/daemon-capability-display.ts --outdir dist/src --target browser --minify && bun build bin/cli.ts --outdir dist/bin --target node --minify --external @sleep2agi/commhub-server --external bun:sqlite --external '../../server/*' && bun build src/node-server.ts --outdir dist/src --target node --minify && bun build src/im/feishu/worker.ts --outdir dist/src/im/feishu --target node --minify --external @larksuiteoapi/node-sdk && tsc --emitDeclarationOnly --declaration --outDir dist && npx javascript-obfuscator dist/bin/cli.js --output dist/bin/cli.js --compact true --string-array true --string-array-encoding base64 && npx javascript-obfuscator dist/src/client.js --output dist/src/client.js --compact true --string-array true && npx javascript-obfuscator dist/src/node-server.js --output dist/src/node-server.js --compact true --string-array true && cp bin/anet.cjs dist/bin/anet.cjs",
+    "build": "bun build src/client.ts --outdir dist/src --target node --minify && bun build src/daemon-capability-display.ts --outdir dist/src --target browser --minify && bun build bin/cli.ts --outdir dist/bin --target node --minify --external @sleep2agi/commhub-server --external bun:sqlite --external '../../server/*' && bun build src/node-server.ts --outdir dist/src --target node --minify && bun build src/im/feishu/worker.ts --outdir dist/src/im/feishu --target node --minify --external @larksuiteoapi/node-sdk && tsc --emitDeclarationOnly --declaration --outDir dist && npx javascript-obfuscator dist/bin/cli.js --output dist/bin/cli.js --compact true --string-array true --string-array-encoding base64 && npx javascript-obfuscator dist/src/client.js --output dist/src/client.js --compact true --string-array true && npx javascript-obfuscator dist/src/node-server.js --output dist/src/node-server.js --compact true --string-array true && node scripts/stamp-node-server-version.mjs && cp bin/anet.cjs dist/bin/anet.cjs",
     "prepublishOnly": "npm run build"
   },
   "keywords": [