@tealbrick/kit 0.3.0-rc.7 → 0.3.0-rc.8

package/dist/buzz.js

@@ -0,0 +1,262 @@
+import { chmod, copyFile, lstat, mkdir, readFile, readdir, rename, stat, unlink, writeFile } from 'node:fs/promises';
+import { createHash } from 'node:crypto';
+import { execFile } from 'node:child_process';
+import { homedir } from 'node:os';
+import { delimiter, dirname, isAbsolute, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { promisify } from 'node:util';
+/** Buzz Desktop managed-agent provider (client Mac) and its agent host (Mac running buzz-acp + kit native acp). */
+const run = promisify(execFile);
+const assets = fileURLToPath(new URL('../assets/buzz/', import.meta.url));
+export const PROVIDER_MARKER = 'tealbrick-buzz-provider';
+export const buzzUsage = `Usage: tealbrick buzz provider install [--name NAME] [--bin-dir DIRECTORY] [--force]
+       tealbrick buzz host setup [--owners-dir DIRECTORY] [--buzz-app PATH] [--node PATH] [--kit-cli PATH] [--respond-to-default owner-only|anyone]
+       tealbrick buzz host remove <label>`;
+async function kitVersion() { return JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8')).version; }
+function flagsOf(args, values, switches) {
+    const flags = {};
+    for (let i = 0; i < args.length; i++) {
+        const name = /^--([a-z-]+)$/.exec(args[i])?.[1];
+        if (!name || flags[name] !== undefined)
+            throw Error('kit_buzz_invalid_arguments');
+        if (switches.includes(name)) {
+            flags[name] = true;
+            continue;
+        }
+        if (!values.includes(name) || !args[i + 1] || args[i + 1].startsWith('--'))
+            throw Error('kit_buzz_invalid_arguments');
+        flags[name] = args[++i];
+    }
+    return flags;
+}
+function expand(path, home) { return resolve(path === '~' ? home : path.startsWith('~/') ? join(home, path.slice(2)) : path); }
+async function exists(path) { try {
+    await stat(path);
+    return true;
+}
+catch {
+    return false;
+} }
+async function writeAtomic(path, body, mode) {
+    const tmp = `${path}.${process.pid}.tmp`;
+    await writeFile(tmp, body, { mode });
+    await chmod(tmp, mode);
+    await rename(tmp, path);
+}
+/** Paths end up in a shell script and in buzz-acp's comma-separated BUZZ_ACP_AGENT_ARGS. */
+function hostPath(name, path) {
+    if (!isAbsolute(path) || /[,\x00-\x1f\x7f]/.test(path))
+        throw Error(`kit_buzz_${name}_path_invalid`);
+    return path;
+}
+function shellQuote(value) { return `'${value.replace(/'/g, `'\\''`)}'`; }
+async function python3Ok() { try {
+    await run('/usr/bin/python3', ['-c', 'import json, plistlib']);
+    return true;
+}
+catch {
+    return false;
+} }
+export async function installProvider(options = {}) {
+    const home = options.home ?? homedir(), name = options.name ?? 'tealbrick-mac';
+    if (!/^[a-z0-9-]{3,40}$/.test(name))
+        throw Error('kit_buzz_provider_name_invalid');
+    const binDir = expand(options.binDir ?? '~/.local/bin', home), path = join(binDir, `buzz-backend-${name}`);
+    let existing;
+    try {
+        existing = await readFile(path, 'utf8');
+    }
+    catch (error) {
+        if (error?.code !== 'ENOENT')
+            throw error;
+    }
+    if (existing !== undefined && !existing.split('\n', 3).some(line => line.includes(PROVIDER_MARKER)) && !options.force)
+        throw Error('kit_buzz_provider_foreign_file');
+    const version = await kitVersion();
+    const body = (await readFile(join(assets, 'buzz-backend-provider.py'), 'utf8')).replaceAll('__TB_PROVIDER_ID__', name).replaceAll('__TB_KIT_VERSION__', version);
+    await mkdir(binDir, { recursive: true });
+    await writeAtomic(path, body, 0o755);
+    const onPath = (process.env.PATH ?? '').split(delimiter).some(entry => entry && resolve(entry) === binDir);
+    return { path, name, version, updated: existing !== undefined, discoverable: onPath || binDir === join(home, '.local', 'bin'), python3: await python3Ok() };
+}
+async function npmInstallKit(prefix, version) {
+    const local = join(dirname(process.execPath), 'npm');
+    const npm = await exists(local) ? local : 'npm';
+    try {
+        await run(npm, ['install', '--prefix', prefix, '--no-audit', '--no-fund', '--save-exact', `@tealbrick/kit@${version}`], { maxBuffer: 16 * 1024 * 1024 });
+    }
+    catch {
+        throw Error('kit_buzz_kit_install_failed');
+    }
+    return join(prefix, 'node_modules', '@tealbrick', 'kit', 'dist', 'cli.js');
+}
+async function bundleVersion(app) {
+    const plist = join(app, 'Contents', 'Info.plist');
+    try {
+        const { stdout } = await run('/usr/bin/plutil', ['-extract', 'CFBundleShortVersionString', 'raw', '-o', '-', plist]);
+        if (stdout.trim())
+            return stdout.trim();
+    }
+    catch { }
+    try {
+        const text = await readFile(plist, 'utf8');
+        return /<key>CFBundleShortVersionString<\/key>\s*<string>([^<]+)<\/string>/.exec(text)?.[1] ?? 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+async function sha256(path) { return createHash('sha256').update(await readFile(path)).digest('hex'); }
+export async function setupBuzzHost(options = {}) {
+    const home = options.home ?? homedir(), version = await kitVersion();
+    if (options.respondToDefault !== undefined && !['owner-only', 'anyone'].includes(options.respondToDefault))
+        throw Error('kit_buzz_respond_to_default_invalid');
+    const ownersDir = hostPath('owners_dir', expand(options.ownersDir ?? '~/agents/tealbrick-connections', home));
+    const app = expand(options.buzzApp ?? '/Applications/Buzz.app', home);
+    const node = hostPath('node', expand(options.node ?? process.execPath, home));
+    if (!(await stat(node).catch(() => undefined))?.isFile())
+        throw Error('kit_buzz_node_missing');
+    const sources = { buzz: join(app, 'Contents', 'MacOS', 'buzz'), 'buzz-acp': join(app, 'Contents', 'MacOS', 'buzz-acp') };
+    for (const source of Object.values(sources))
+        if (!(await stat(source).catch(() => undefined))?.isFile())
+            throw Error('kit_buzz_app_binaries_missing');
+    const root = join(home, 'agents', 'buzz'), bin = join(root, 'bin'), runtime = join(root, 'runtime');
+    for (const dir of [root, bin, runtime]) {
+        await mkdir(dir, { recursive: true, mode: 0o700 });
+        await chmod(dir, 0o700);
+    }
+    const buzzBin = hostPath('buzz_bin', join(bin, 'buzz')), buzzAcpBin = hostPath('buzz_acp_bin', join(bin, 'buzz-acp'));
+    // Copy then rename, so a running buzz-acp keeps its inode and a Buzz.app update never changes agents silently.
+    for (const [source, target] of [[sources.buzz, buzzBin], [sources['buzz-acp'], buzzAcpBin]]) {
+        const tmp = `${target}.${process.pid}.tmp`;
+        await copyFile(source, tmp);
+        await chmod(tmp, 0o755);
+        await rename(tmp, target);
+    }
+    const kitCli = hostPath('kit_cli', options.kitCli ? expand(options.kitCli, home) : await (options.installKit ?? npmInstallKit)(runtime, version));
+    if (!(await stat(kitCli).catch(() => undefined))?.isFile())
+        throw Error('kit_buzz_kit_cli_missing');
+    const host = { version: 1, kitVersion: version, node, kitCli, ownersDir, buzzBin, buzzAcpBin, buzzAppVersion: await bundleVersion(app),
+        buzzSha256: { buzz: await sha256(buzzBin), 'buzz-acp': await sha256(buzzAcpBin) } };
+    await writeAtomic(join(root, 'host.json'), JSON.stringify(host, null, 1) + '\n', 0o600);
+    const values = { NODE: node, KIT_CLI: kitCli, OWNERS_DIR: ownersDir, BUZZ_BIN: buzzBin, BUZZ_ACP_BIN: buzzAcpBin };
+    const runner = (await readFile(join(assets, 'buzz-run.sh'), 'utf8')).replace(/@@([A-Z_]+)@@/g, (_, key) => { if (!Object.hasOwn(values, key))
+        throw Error('kit_buzz_asset_placeholder_unknown'); return shellQuote(values[key]); });
+    await writeAtomic(join(bin, 'buzz-run.sh'), runner, 0o700);
+    for (const script of ['buzz-plist.py', 'tb-provider-apply.py'])
+        await writeAtomic(join(bin, script), await readFile(join(assets, script)), 0o700);
+    if (options.respondToDefault)
+        await writeAtomic(join(root, 'fleet-defaults.json'), JSON.stringify({ respond_to: options.respondToDefault }) + '\n', 0o600);
+    const owners = [];
+    try {
+        for (const entry of await readdir(ownersDir, { withFileTypes: true }))
+            if (entry.isDirectory() && /^[a-z0-9-]{2,32}$/.test(entry.name) && await exists(join(ownersDir, entry.name, '.tealbrick', 'native-serve.json')))
+                owners.push(entry.name);
+    }
+    catch { }
+    const warnings = [];
+    if (!await python3Ok())
+        warnings.push('/usr/bin/python3 is not usable; install the Xcode Command Line Tools (xcode-select --install).');
+    if (!owners.length)
+        warnings.push(`No enrolled kit owners under ${ownersDir}; run \`tealbrick native setup\` and \`tealbrick native enroll\` in ${ownersDir}/<owner>.`);
+    return { hostJson: join(root, 'host.json'), ...host, scripts: ['buzz-run.sh', 'buzz-plist.py', 'tb-provider-apply.py'].map(name => join(bin, name)),
+        fleetDefaults: options.respondToDefault ?? null, owners, warnings };
+}
+const launchctl = args => run('/bin/launchctl', args).then(() => 0, (e) => typeof e?.code === 'number' ? e.code : 1);
+const AGENT_LABEL = /^[a-z0-9][a-z0-9-]{2,62}$/;
+/** Names under ~/agents/buzz that are host files, never agents. */
+const RESERVED_LABELS = ['bin', 'runtime', 'logs'];
+/**
+ * Remove one provider-managed agent from this host (Buzz Desktop has no undeploy operation): boot out its
+ * launchd unit, delete the plist and move ~/agents/buzz/<label> to ~/agents/buzz/.removed/<label>-<ts>
+ * (0700; it still holds the agent key until you delete it).
+ */
+export async function removeBuzzAgent(label, options = {}) {
+    if (!AGENT_LABEL.test(label) || RESERVED_LABELS.includes(label))
+        throw Error('kit_buzz_label_invalid');
+    const home = options.home ?? homedir(), uid = options.uid ?? process.getuid?.() ?? 0, unit = `com.tealbrick.buzz-acp.${label}`, service = `gui/${uid}/${unit}`;
+    const root = join(home, 'agents', 'buzz'), dir = join(root, label), plist = join(home, 'Library', 'LaunchAgents', `${unit}.plist`);
+    const exec = options.launchctl ?? launchctl;
+    const loaded = await exec(['print', service]) === 0;
+    if (loaded && await exec(['bootout', service]) !== 0)
+        throw Error('kit_buzz_bootout_failed');
+    const plistStat = await lstat(plist).catch(() => undefined);
+    if (plistStat) {
+        if (!plistStat.isFile() || plistStat.isSymbolicLink())
+            throw Error('kit_buzz_plist_unsafe');
+        await unlink(plist);
+    }
+    const dirStat = await lstat(dir).catch(() => undefined);
+    let movedTo;
+    if (dirStat) {
+        if (!dirStat.isDirectory() || dirStat.isSymbolicLink())
+            throw Error('kit_buzz_agent_dir_unsafe');
+        const removed = join(root, '.removed');
+        await mkdir(removed, { recursive: true, mode: 0o700 });
+        const removedStat = await lstat(removed);
+        if (!removedStat.isDirectory() || removedStat.isSymbolicLink())
+            throw Error('kit_buzz_removed_dir_unsafe');
+        await chmod(removed, 0o700);
+        movedTo = join(removed, `${label}-${(options.now?.() ?? new Date()).toISOString().replace(/[:.]/g, '-')}`);
+        await rename(dir, movedTo);
+        await chmod(movedTo, 0o700);
+    }
+    if (!loaded && !plistStat && !dirStat)
+        throw Error('kit_buzz_agent_not_found');
+    return { label, service, bootedOut: loaded, plistRemoved: !!plistStat, movedTo };
+}
+export async function buzzCommand(args) {
+    const [group, action, ...rest] = args;
+    if (!group || group === 'help' || group === '--help' || group === '-h') {
+        console.log(buzzUsage);
+        return;
+    }
+    if (group === 'provider' && action === 'install') {
+        const flags = flagsOf(rest, ['name', 'bin-dir'], ['force']);
+        const result = await installProvider({ ...(typeof flags.name === 'string' ? { name: flags.name } : {}), ...(typeof flags['bin-dir'] === 'string' ? { binDir: flags['bin-dir'] } : {}), force: flags.force === true });
+        console.log(`${result.updated ? 'Updated' : 'Installed'} Buzz Desktop provider ${result.name} (kit ${result.version}):\n  ${result.path}`);
+        if (!result.discoverable)
+            console.log(`Warning: ${dirname(result.path)} is not on PATH; Buzz Desktop looks in ~/.local/bin and on PATH.`);
+        if (!result.python3)
+            console.log('Warning: /usr/bin/python3 is not usable; install the Xcode Command Line Tools (xcode-select --install).');
+        console.log(`Next, in Buzz Desktop:
+  1. Restart Buzz Desktop so it finds the new provider.
+  2. Open Agents > New agent.
+  3. Set "Run on" to ${result.name} (Teal Brick · ${result.name}).
+  4. Enter owner (the kit owner directory on the host) and host (the ssh alias or user@host of the agent host).
+  5. Create the agent. Desktop deploys it over ssh; the host must have run \`tealbrick buzz host setup\`.`);
+        return;
+    }
+    if (group === 'host' && action === 'setup') {
+        const flags = flagsOf(rest, ['owners-dir', 'buzz-app', 'node', 'kit-cli', 'respond-to-default'], []);
+        const str = (name) => typeof flags[name] === 'string' ? flags[name] : undefined;
+        const respond = str('respond-to-default');
+        if (respond !== undefined && respond !== 'owner-only' && respond !== 'anyone')
+            throw Error('kit_buzz_respond_to_default_invalid');
+        const result = await setupBuzzHost({ ownersDir: str('owners-dir'), buzzApp: str('buzz-app'), node: str('node'), kitCli: str('kit-cli'), respondToDefault: respond });
+        console.log(`Buzz agent host ready (kit ${result.kitVersion}, Buzz ${result.buzzAppVersion}).
+  host.json:  ${result.hostJson}
+  node:       ${result.node}
+  kit cli:    ${result.kitCli}
+  owners dir: ${result.ownersDir}${result.owners.length ? ` (enrolled: ${result.owners.join(', ')})` : ''}
+  buzz:       ${result.buzzBin}
+  buzz-acp:   ${result.buzzAcpBin}
+  fleet respond_to default: ${result.fleetDefaults ?? '(none; Desktop choice applies)'}`);
+        for (const warning of result.warnings)
+            console.log(`Warning: ${warning}`);
+        return;
+    }
+    if (group === 'host' && action === 'remove') {
+        if (rest.length !== 1)
+            throw Error('kit_buzz_invalid_arguments');
+        const result = await removeBuzzAgent(rest[0]);
+        console.log(`Removed Buzz agent ${result.label}:
+  launchd unit: ${result.bootedOut ? `booted out (${result.service})` : 'was not loaded'}
+  plist:        ${result.plistRemoved ? 'deleted' : 'not present'}
+  agent dir:    ${result.movedTo ? `moved to ${result.movedTo} (still holds the agent key; delete it when no longer needed)` : 'not present'}
+Also delete the agent in Buzz Desktop so it is not deployed again.`);
+        return;
+    }
+    console.error(buzzUsage);
+    process.exitCode = 2;
+}

package/dist/cli.js

@@ -20,6 +20,11 @@ async function main() {
         await nativeCommand(process.argv.slice(3), root);
         return;
     }
+    if (command === 'buzz') {
+        const { buzzCommand } = await import('./buzz.js');
+        await buzzCommand(process.argv.slice(3));
+        return;
+    }
     if (command === 'connect') {
         await runtimeOnboarding('connect', process.argv.slice(3), root);
         return;
@@ -41,7 +46,7 @@ async function main() {
         return;
     }
     if (command !== 'setup') {
-        console.log('Usage: tealbrick setup | status | apply <config.json>\n  tealbrick connect --workspace ID --node ID --agent ID [--issuer URL]\n  tealbrick app claim --workspace ID --node ID --binding REF --endpoint HTTPS_ORIGIN --company PARTITION [--issuer URL]\nInstalled dependencies expose nothing until activated. Rebuild/restart Eve after changing selection.');
+        console.log('Usage: tealbrick setup | status | apply <config.json>\n  tealbrick connect --workspace ID --node ID --agent ID [--issuer URL]\n  tealbrick app claim --workspace ID --node ID --binding REF --endpoint HTTPS_ORIGIN --company PARTITION [--issuer URL]\n  tealbrick buzz provider install | buzz host setup  (Buzz Desktop agents on a Mac host; see BUZZ.md)\nInstalled dependencies expose nothing until activated. Rebuild/restart Eve after changing selection.');
         return;
     }
     console.log('Setup requires Portal sign-in and saves an agent card in your chosen workspace. Other capabilities are optional.');

package/dist/index.d.ts

@@ -67,7 +67,7 @@ declare const schema: z.ZodObject<{
             }[] | undefined;
             spawns?: {
                 worker: string;
-                profile: "light" | "small" | "standard" | "browser";
+                profile: "small" | "light" | "standard" | "browser";
                 mode: "ephemeral" | "durable";
                 harnesses?: string[] | undefined;
                 bundles?: string[] | undefined;
@@ -150,7 +150,7 @@ declare const schema: z.ZodObject<{
                         kind: "user";
                         id: string;
                     };
-                    allow: ("capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "logs" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
+                    allow: ("logs" | "capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
                 } | {
                     operation: "shareRevoke";
                     worker: string;
@@ -194,7 +194,7 @@ declare const schema: z.ZodObject<{
                 }[] | undefined;
                 spawns?: {
                     worker: string;
-                    profile: "light" | "small" | "standard" | "browser";
+                    profile: "small" | "light" | "standard" | "browser";
                     mode: "ephemeral" | "durable";
                     harnesses?: string[] | undefined;
                     bundles?: string[] | undefined;
@@ -277,7 +277,7 @@ declare const schema: z.ZodObject<{
                             kind: "user";
                             id: string;
                         };
-                        allow: ("capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "logs" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
+                        allow: ("logs" | "capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
                     } | {
                         operation: "shareRevoke";
                         worker: string;
@@ -320,7 +320,7 @@ declare const schema: z.ZodObject<{
             }[] | undefined;
             spawns?: {
                 worker: string;
-                profile: "light" | "small" | "standard" | "browser";
+                profile: "small" | "light" | "standard" | "browser";
                 mode: "ephemeral" | "durable";
                 harnesses?: string[] | undefined;
                 bundles?: string[] | undefined;
@@ -403,7 +403,7 @@ declare const schema: z.ZodObject<{
                         kind: "user";
                         id: string;
                     };
-                    allow: ("capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "logs" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
+                    allow: ("logs" | "capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
                 } | {
                     operation: "shareRevoke";
                     worker: string;
@@ -447,7 +447,7 @@ declare const schema: z.ZodObject<{
                 }[] | undefined;
                 spawns?: {
                     worker: string;
-                    profile: "light" | "small" | "standard" | "browser";
+                    profile: "small" | "light" | "standard" | "browser";
                     mode: "ephemeral" | "durable";
                     harnesses?: string[] | undefined;
                     bundles?: string[] | undefined;
@@ -530,7 +530,7 @@ declare const schema: z.ZodObject<{
                             kind: "user";
                             id: string;
                         };
-                        allow: ("capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "logs" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
+                        allow: ("logs" | "capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
                     } | {
                         operation: "shareRevoke";
                         worker: string;
@@ -575,7 +575,7 @@ declare const schema: z.ZodObject<{
                 }[] | undefined;
                 spawns?: {
                     worker: string;
-                    profile: "light" | "small" | "standard" | "browser";
+                    profile: "small" | "light" | "standard" | "browser";
                     mode: "ephemeral" | "durable";
                     harnesses?: string[] | undefined;
                     bundles?: string[] | undefined;
@@ -658,7 +658,7 @@ declare const schema: z.ZodObject<{
                             kind: "user";
                             id: string;
                         };
-                        allow: ("capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "logs" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
+                        allow: ("logs" | "capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
                     } | {
                         operation: "shareRevoke";
                         worker: string;
@@ -704,7 +704,7 @@ declare const schema: z.ZodObject<{
             }[] | undefined;
             spawns?: {
                 worker: string;
-                profile: "light" | "small" | "standard" | "browser";
+                profile: "small" | "light" | "standard" | "browser";
                 mode: "ephemeral" | "durable";
                 harnesses?: string[] | undefined;
                 bundles?: string[] | undefined;
@@ -787,7 +787,7 @@ declare const schema: z.ZodObject<{
                         kind: "user";
                         id: string;
                     };
-                    allow: ("capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "logs" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
+                    allow: ("logs" | "capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
                 } | {
                     operation: "shareRevoke";
                     worker: string;
@@ -831,7 +831,7 @@ declare const schema: z.ZodObject<{
                 }[] | undefined;
                 spawns?: {
                     worker: string;
-                    profile: "light" | "small" | "standard" | "browser";
+                    profile: "small" | "light" | "standard" | "browser";
                     mode: "ephemeral" | "durable";
                     harnesses?: string[] | undefined;
                     bundles?: string[] | undefined;
@@ -914,7 +914,7 @@ declare const schema: z.ZodObject<{
                             kind: "user";
                             id: string;
                         };
-                        allow: ("capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "logs" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
+                        allow: ("logs" | "capabilities" | "auth" | "start" | "stop" | "wake" | "schedule" | "cool" | "status" | "exec" | "ssh" | "events" | "runs" | "assignments" | "leases" | "resident" | "list" | "inventory" | "monitor" | "roles" | "ingress")[];
                     } | {
                         operation: "shareRevoke";
                         worker: string;

package/dist/native-acp.d.ts

@@ -0,0 +1,36 @@
+import { type ClaudeSdk } from './native-claude.js';
+import { type BuzzDownload, type BuzzRun } from './native-buzz.js';
+/**
+ * Agent Client Protocol (ACP, JSON-RPC 2.0 over stdio) agent for this kit root, for chat harnesses
+ * such as Buzz's `buzz-acp`. It runs the SAME owner harness as `native serve` (profile, expert
+ * contracts, Portal grants, PreToolUse gate, traces) in-process; no HTTP, no extra credential.
+ * Messages are treated as untrusted. Payload approvals have no surface here: they are declined and
+ * the owner is told to continue in TBD, so a chat message can never approve an outward write.
+ * With a Buzz CLI, the owner session also gets the in-process `buzz` MCP tools (agent↔agent
+ * messaging) and each final answer is auto-posted with request/answer mention rules and a
+ * per-thread loop breaker. ACP `session/new` mcpServers are never attached (they could grant a shell).
+ */
+export { buzzRoute, buzzTrigger } from './native-buzz.js';
+export interface AcpDependencies {
+    claudeSdk?: ClaudeSdk;
+    log?: (event: Record<string, unknown>) => void;
+    env?: NodeJS.ProcessEnv;
+    input?: NodeJS.ReadableStream;
+    output?: NodeJS.WritableStream;
+    runtimeSync?: false;
+    /** Buzz CLI path: enables the buzz tools and posts each turn's final answer (identity comes from buzz-acp's injected BUZZ_* env). */
+    buzzCli?: string;
+    /** Injectable Buzz CLI runner (tests); behaves like buzzCli. */
+    buzz?: BuzzRun;
+    /** Injectable media downloader (tests); default `buzz media get` through buzzCli. */
+    download?: BuzzDownload;
+    /** Relay base URL for attachment URLs (default BUZZ_RELAY_URL). */
+    relayUrl?: string;
+    /** Overrides the auto-post transport only (legacy hook). */
+    send?: (args: string[], text: string) => Promise<boolean>;
+    /** Identity overrides (tests). Defaults: owner from BUZZ_AUTH_TAG, self derived from BUZZ_PRIVATE_KEY. */
+    ownerPubkey?: string;
+    selfPubkey?: string;
+    now?: () => number;
+}
+export declare function serveAcp(root: string, deps?: AcpDependencies): Promise<void>;