@symerian/symi 2.6.41 → 2.7.0

package/skills/long-task/scripts/detach-task.sh

@@ -0,0 +1,135 @@
+#!/usr/bin/env bash
+# detach-task.sh — launch a long-running command fully detached from the
+# calling agent turn, so it survives the agent-turn timeout (default 30 min).
+#
+# Usage:
+#   detach-task.sh <task-id> <workdir> <command...>
+#
+# Creates in <workdir>:
+#   task-<id>.pid       — PID of the detached process
+#   task-<id>.cmd       — literal command line (for future agent turns to see)
+#   task-<id>.started   — ISO-8601 start timestamp
+#   task-<id>.log       — combined stdout + stderr (grows as task runs)
+#   task-<id>.status    — "running pid=<N> started=<ISO>"
+#                         → "complete rc=<N> ended=<ISO>" on clean exit
+#                         → "aborted rc=<N> signal=<NAME>" on SIGTERM/INT/HUP
+#
+# Exit code: 0 on successful spawn, 1 on missing args, 2 on invalid args,
+#            3 on workdir creation failure.
+#
+# Hardening notes (2.7.0):
+# - task-id is validated against an allow-list ([a-zA-Z0-9._-], 1–60 chars,
+#   must not start with '.' or '-'). Prevents path traversal via task-id.
+# - workdir must be an absolute path.
+# - Status file is written via tmp + mv so concurrent readers never see a
+#   half-written file and the "stuck at running after SIGTERM" failure mode
+#   is eliminated.
+# - Child shell has a TERM/INT/HUP trap that records an "aborted" status
+#   before exiting, so external kill signals leave a deterministic record.
+#
+# Design notes:
+# - setsid + nohup + disown: triple-armor against SIGHUP when the parent
+#   shell exits. The subprocess gets its own session.
+# - stdin closed, stdout/stderr redirected to the log file. No terminal.
+# - The wrapper shell exits immediately after spawning; does NOT wait.
+
+set -euo pipefail
+
+if [[ $# -lt 3 ]]; then
+  echo "usage: $0 <task-id> <workdir> <command...>" >&2
+  exit 1
+fi
+
+raw_task_id="$1"
+workdir="$2"
+shift 2
+
+# --- task-id validation -----------------------------------------------------
+if [[ -z "$raw_task_id" ]]; then
+  echo "detach-task: task-id must not be empty" >&2
+  exit 2
+fi
+if [[ ${#raw_task_id} -gt 60 ]]; then
+  echo "detach-task: task-id exceeds 60 chars" >&2
+  exit 2
+fi
+if [[ "$raw_task_id" =~ [^a-zA-Z0-9._-] ]]; then
+  echo "detach-task: task-id contains illegal chars (allowed: alphanumeric, dot, dash, underscore): $raw_task_id" >&2
+  exit 2
+fi
+case "$raw_task_id" in
+  .* | -*)
+    echo "detach-task: task-id must not start with dot or dash: $raw_task_id" >&2
+    exit 2
+    ;;
+esac
+task_id="$raw_task_id"
+
+# --- workdir validation -----------------------------------------------------
+if [[ "$workdir" != /* ]]; then
+  echo "detach-task: workdir must be an absolute path: $workdir" >&2
+  exit 2
+fi
+if ! mkdir -p "$workdir"; then
+  echo "detach-task: cannot create workdir: $workdir" >&2
+  exit 3
+fi
+
+pid_file="$workdir/task-${task_id}.pid"
+cmd_file="$workdir/task-${task_id}.cmd"
+started_file="$workdir/task-${task_id}.started"
+log_file="$workdir/task-${task_id}.log"
+status_file="$workdir/task-${task_id}.status"
+
+# --- atomic status writer (parent) -----------------------------------------
+write_status_atomic() {
+  local _payload="$1"
+  local _tmp="${status_file}.$$.${RANDOM}.tmp"
+  printf '%s\n' "$_payload" > "$_tmp"
+  mv -f "$_tmp" "$status_file"
+}
+
+printf '%s\n' "$*" > "$cmd_file"
+started_at="$(date -u -Iseconds)"
+printf '%s\n' "$started_at" > "$started_file"
+write_status_atomic "running started=$started_at"
+
+# --- detached child --------------------------------------------------------
+# The inner `bash -c` inherits status/log paths as positional args so we
+# never string-interpolate paths into the script body. The inner script
+# re-implements the atomic writer (functions don't cross process boundaries
+# via `bash -c`). A TERM/INT/HUP trap catches external kill signals and
+# writes a terminal "aborted" status before exiting with the signal's code.
+setsid nohup bash -c '
+  set -u
+  _status="$1"
+  _log="$2"
+  shift 2
+  _write() {
+    local _tmp="${_status}.$$.${RANDOM}.tmp"
+    printf "%s\n" "$1" > "$_tmp" && mv -f "$_tmp" "$_status"
+  }
+  _on_signal() {
+    local _sig="$1"
+    local _rc=$?
+    _write "aborted rc=$_rc signal=$_sig ended=$(date -u -Iseconds)" 2>/dev/null || true
+    exit "$_rc"
+  }
+  trap "_on_signal TERM" TERM
+  trap "_on_signal INT"  INT
+  trap "_on_signal HUP"  HUP
+  "$@" > "$_log" 2>&1
+  rc=$?
+  _write "complete rc=$rc ended=$(date -u -Iseconds)"
+' -- "$status_file" "$log_file" "$@" < /dev/null > /dev/null 2>&1 &
+
+pid=$!
+disown "$pid" 2>/dev/null || true
+printf '%d\n' "$pid" > "$pid_file"
+
+# Finalise the parent status with the PID once known. The child may race us
+# and overwrite with "complete" if the command was very fast — that's fine,
+# the mv is atomic and the final state wins.
+write_status_atomic "running pid=$pid started=$started_at"
+
+echo "spawned task=$task_id pid=$pid log=$log_file status=$status_file"

package/dist/register.configure-D-XV6_Nb.js

@@ -1,148 +0,0 @@
-import "./paths-Cqn-zk3M.js";
-import { B as theme } from "./utils-B-0b9bGM.js";
-import "./thinking-EAliFiVK.js";
-import "./reply-CjYJHt_H.js";
-import "./registry-Cja8eT7G.js";
-import { f as defaultRuntime } from "./subsystem-D9vIQve0.js";
-import "./exec-CWkblSrI.js";
-import "./agent-scope-CgUHAtCo.js";
-import "./model-selection-CyFvYcRt.js";
-import "./github-copilot-token-DAu1a6BX.js";
-import "./boolean-BsqeuxE6.js";
-import "./env-DPCHYPeH.js";
-import "./message-channel-aT-I_DTX.js";
-import "./send-CQVnyJyF.js";
-import "./config-Dz95lSBW.js";
-import "./manifest-registry-C4BxOMWX.js";
-import "./runner-DRv0uCK_.js";
-import "./image-BWmcNF8N.js";
-import "./models-config-CFFjJPe7.js";
-import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-BgdB5kvy.js";
-import "./sandbox-B6N8cV4d.js";
-import "./chrome-DU2ZysN3.js";
-import "./tailscale-D5dKabOc.js";
-import "./auth-B741uFtk.js";
-import "./server-context-CCBZN8a0.js";
-import "./frontmatter-DWQhtOo7.js";
-import "./skills-6jdJQ5ZL.js";
-import "./routes-BAZTZNuQ.js";
-import "./redact-f-Q-hFt_.js";
-import "./errors-BF3TeRH2.js";
-import "./fs-safe-CUjO1ca2.js";
-import "./paths-BBm9fwuG.js";
-import "./ssrf-BCYMnxkM.js";
-import "./image-ops-1OJMSAUX.js";
-import "./store-r1DJSDq-.js";
-import "./ports-BOmtxoTv.js";
-import "./trash-DcMh1i4B.js";
-import "./sessions-Cpgnq0pA.js";
-import "./dock-BhS32F6E.js";
-import "./plugins-DKDeQZF0.js";
-import "./accounts-DDuIpcln.js";
-import "./accounts-bK-Yqdwx.js";
-import "./accounts-DyJN4_vR.js";
-import "./bindings-DFaVVCsf.js";
-import "./logging-w5jq5901.js";
-import "./send-DVm0du0_.js";
-import "./paths-CyhzMxFA.js";
-import "./tool-images-DvUBlqjX.js";
-import "./tool-display-D8N3rsYt.js";
-import "./fetch-guard-DOPkVbh3.js";
-import "./api-key-rotation-CzuPlV2t.js";
-import "./local-roots-aAFLQGkY.js";
-import "./sqlite-Dx3J_aSE.js";
-import "./model-catalog-8Son0J4O.js";
-import "./tokens-BuceUQDl.js";
-import "./with-timeout-CtVdu_1U.js";
-import "./deliver-B4KZ6-oZ.js";
-import "./diagnostic-CH0skkp6.js";
-import "./diagnostic-session-state-CUslJyKP.js";
-import "./send-B3RdXvjC.js";
-import "./model-tWhwnFf8.js";
-import "./reply-prefix-CE2YmmsD.js";
-import "./memory-cli-DDumUksr.js";
-import "./manager-D4LJSRyZ.js";
-import "./retry-BoS4e4X_.js";
-import "./target-errors-7AvoVa10.js";
-import "./chunk-1dhPX1NK.js";
-import "./markdown-tables-CEbN0fEm.js";
-import "./ir-DZam9q5M.js";
-import "./render-CXDO_kgw.js";
-import "./commands-BNLCWX6e.js";
-import "./commands-registry-BT0-zzs3.js";
-import "./client-jI1oE0_k.js";
-import "./call-DwpGquzW.js";
-import "./pairing-token-CX3NN_qj.js";
-import "./channel-activity-BOiuJS3t.js";
-import "./fetch-DTNGXEzX.js";
-import "./tables-BEzT0Da4.js";
-import "./send-Bm4ULEzh.js";
-import "./pairing-store-CK726Dzq.js";
-import "./proxy-DU7W9XSc.js";
-import { t as formatDocsLink } from "./links-3i1eUga4.js";
-import { n as runCommandWithRuntime } from "./cli-utils-DN_hM6ov.js";
-import "./help-format-B_-M23wP.js";
-import "./progress-jIePzvGA.js";
-import "./resolve-route-BMoTaVAH.js";
-import "./replies-BMqtgBhh.js";
-import "./skill-commands-Cxw-jNxU.js";
-import "./workspace-dirs-GpkFi6Kw.js";
-import "./pi-auth-json-zHckislA.js";
-import "./session-cost-usage-BXAI7CNH.js";
-import "./outbound-attachment-Bw-c5Cdp.js";
-import "./delivery-queue-CAxX6nGq.js";
-import "./send-9SapUCg7.js";
-import "./onboard-helpers-DFvWPFhU.js";
-import "./prompt-style-CnkMpSXt.js";
-import "./pairing-labels-DyXoD1DS.js";
-import "./exec-approvals-DXM2pQYL.js";
-import "./nodes-screen-8Bq7DiSa.js";
-import "./pi-tools.policy-DRWb_Cax.js";
-import "./control-service-BYKXzY4f.js";
-import "./stagger-CvFURHzt.js";
-import "./channel-selection-V2xDgw16.js";
-import "./runtime-guard-Dik20CVM.js";
-import "./catalog-NQ4pj9RI.js";
-import "./skills-status-C3ptXwnh.js";
-import "./note-DQ9BvHF2.js";
-import "./clack-prompter-DMuVyYP2.js";
-import "./plugin-auto-enable-CP0nONRL.js";
-import "./install-safe-path-D3Uz77u7.js";
-import "./npm-registry-spec-C0CPT3vr.js";
-import "./skill-scanner-hMtQbWPV.js";
-import "./installs-DQcRVF1U.js";
-import "./onboard-channels-Bp89ZT6Q.js";
-import "./daemon-runtime-mE1b-Q48.js";
-import "./systemd-DT6SbCim.js";
-import "./service-osK70kTZ.js";
-import "./widearea-dns-CyVOLgNE.js";
-import "./bonjour-discovery-DUQ6tE92.js";
-import "./health-en2N_Kqc.js";
-import "./control-ui-assets-B7moDVHX.js";
-import "./skills-install-CWVdJkLn.js";
-import "./shared-73T9fyuK.js";
-import "./auth-token-Cay2jwzn.js";
-import "./logging-KpicI3yD.js";
-import "./provider-auth-helpers-CJbHC_mv.js";
-import "./auth-choice-CiMf3Pjp.js";
-import "./openai-model-default-WqcGxyFM.js";
-import "./model-picker-CAm2Bftd.js";
-import { n as configureCommandFromSectionsArg, r as CONFIGURE_WIZARD_SECTIONS } from "./configure-CDOF87Fk.js";
-import "./systemd-linger-DCskIKcx.js";
-import "./onboard-custom-XiomtQr7.js";
-import "./health-format-DRCaak6L.js";
-import "./onboard-remote-BURDxwoE.js";
-import "./onboard-skills-CbzgBT1W.js";
-
-//#region src/cli/program/register.configure.ts
-function registerConfigureCommand(program) {
-	program.command("configure").description("Interactive setup wizard for credentials, channels, gateway, and agent defaults").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/configure", "docs.symi.ai/cli/configure")}\n`).option("--section <section>", `Configuration sections (repeatable). Options: ${CONFIGURE_WIZARD_SECTIONS.join(", ")}`, (value, previous) => [...previous, value], []).action(async (opts) => {
-		await runCommandWithRuntime(defaultRuntime, async () => {
-			await configureCommandFromSectionsArg(opts.section, defaultRuntime);
-		});
-	});
-}
-
-//#endregion
-export { registerConfigureCommand };

package/dist/web-CfVd3Mhp.js

@@ -1,110 +0,0 @@
-import "./paths-Cqn-zk3M.js";
-import "./utils-B-0b9bGM.js";
-import "./thinking-EAliFiVK.js";
-import "./reply-CjYJHt_H.js";
-import "./registry-Cja8eT7G.js";
-import "./subsystem-D9vIQve0.js";
-import "./exec-CWkblSrI.js";
-import "./agent-scope-CgUHAtCo.js";
-import "./model-selection-CyFvYcRt.js";
-import "./github-copilot-token-DAu1a6BX.js";
-import "./boolean-BsqeuxE6.js";
-import "./env-DPCHYPeH.js";
-import "./message-channel-aT-I_DTX.js";
-import "./send-CQVnyJyF.js";
-import "./config-Dz95lSBW.js";
-import "./manifest-registry-C4BxOMWX.js";
-import "./runner-DRv0uCK_.js";
-import "./image-BWmcNF8N.js";
-import "./models-config-CFFjJPe7.js";
-import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-BgdB5kvy.js";
-import "./sandbox-B6N8cV4d.js";
-import "./chrome-DU2ZysN3.js";
-import "./tailscale-D5dKabOc.js";
-import "./auth-B741uFtk.js";
-import "./server-context-CCBZN8a0.js";
-import "./frontmatter-DWQhtOo7.js";
-import "./skills-6jdJQ5ZL.js";
-import "./routes-BAZTZNuQ.js";
-import "./redact-f-Q-hFt_.js";
-import "./errors-BF3TeRH2.js";
-import "./fs-safe-CUjO1ca2.js";
-import "./paths-BBm9fwuG.js";
-import "./ssrf-BCYMnxkM.js";
-import "./image-ops-1OJMSAUX.js";
-import "./store-r1DJSDq-.js";
-import "./ports-BOmtxoTv.js";
-import "./trash-DcMh1i4B.js";
-import "./sessions-Cpgnq0pA.js";
-import "./dock-BhS32F6E.js";
-import "./plugins-DKDeQZF0.js";
-import { a as logWebSelfId, c as pickWebChannel, m as webAuthExists, r as WA_WEB_AUTH_DIR } from "./accounts-DDuIpcln.js";
-import "./accounts-bK-Yqdwx.js";
-import "./accounts-DyJN4_vR.js";
-import "./bindings-DFaVVCsf.js";
-import "./logging-w5jq5901.js";
-import "./send-DVm0du0_.js";
-import "./paths-CyhzMxFA.js";
-import "./tool-images-DvUBlqjX.js";
-import "./tool-display-D8N3rsYt.js";
-import "./fetch-guard-DOPkVbh3.js";
-import "./api-key-rotation-CzuPlV2t.js";
-import "./local-roots-aAFLQGkY.js";
-import "./sqlite-Dx3J_aSE.js";
-import "./model-catalog-8Son0J4O.js";
-import "./tokens-BuceUQDl.js";
-import "./with-timeout-CtVdu_1U.js";
-import "./deliver-B4KZ6-oZ.js";
-import "./diagnostic-CH0skkp6.js";
-import "./diagnostic-session-state-CUslJyKP.js";
-import "./send-B3RdXvjC.js";
-import "./model-tWhwnFf8.js";
-import "./reply-prefix-CE2YmmsD.js";
-import "./memory-cli-DDumUksr.js";
-import "./manager-D4LJSRyZ.js";
-import "./retry-BoS4e4X_.js";
-import "./target-errors-7AvoVa10.js";
-import "./chunk-1dhPX1NK.js";
-import "./markdown-tables-CEbN0fEm.js";
-import "./ir-DZam9q5M.js";
-import "./render-CXDO_kgw.js";
-import "./commands-BNLCWX6e.js";
-import "./commands-registry-BT0-zzs3.js";
-import "./client-jI1oE0_k.js";
-import "./call-DwpGquzW.js";
-import "./pairing-token-CX3NN_qj.js";
-import "./channel-activity-BOiuJS3t.js";
-import "./fetch-DTNGXEzX.js";
-import "./tables-BEzT0Da4.js";
-import "./send-Bm4ULEzh.js";
-import "./pairing-store-CK726Dzq.js";
-import "./proxy-DU7W9XSc.js";
-import "./links-3i1eUga4.js";
-import "./cli-utils-DN_hM6ov.js";
-import "./help-format-B_-M23wP.js";
-import "./progress-jIePzvGA.js";
-import "./resolve-route-BMoTaVAH.js";
-import "./replies-BMqtgBhh.js";
-import "./skill-commands-Cxw-jNxU.js";
-import "./workspace-dirs-GpkFi6Kw.js";
-import "./pi-auth-json-zHckislA.js";
-import "./session-cost-usage-BXAI7CNH.js";
-import "./outbound-attachment-Bw-c5Cdp.js";
-import "./delivery-queue-CAxX6nGq.js";
-import "./send-9SapUCg7.js";
-import "./onboard-helpers-DFvWPFhU.js";
-import "./prompt-style-CnkMpSXt.js";
-import "./pairing-labels-DyXoD1DS.js";
-import "./exec-approvals-DXM2pQYL.js";
-import "./nodes-screen-8Bq7DiSa.js";
-import "./pi-tools.policy-DRWb_Cax.js";
-import "./control-service-BYKXzY4f.js";
-import "./stagger-CvFURHzt.js";
-import "./channel-selection-V2xDgw16.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-Dwuj48T5.js";
-import { n as sendMessageWhatsApp } from "./outbound-wnv03tb3.js";
-import { i as waitForWaConnection, t as createWaSocket } from "./session-DsJGtM7g.js";
-import { t as loginWeb } from "./login-DODfJ3Dn.js";
-
-export { WA_WEB_AUTH_DIR, createWaSocket, logWebSelfId, loginWeb, monitorWebChannel, monitorWebInbox, pickWebChannel, sendMessageWhatsApp, waitForWaConnection, webAuthExists };