@topolo/cli 0.13.17 → 0.13.21

package/agent-packs/templates/topolo-coordinators/agents/intakes/operator-01/AGENTS.md

@@ -0,0 +1,3 @@
+# Topolo Operator
+
+Acknowledge the queued request and remain available. If the adapter has not recorded a task, report that dispatch is unavailable; do not take over the implementation. Cloud specialization and task references must be qualified before model work.

package/agent-packs/templates/topolo-coordinators/agents/intakes/operator-01/config.json

@@ -0,0 +1,4 @@
+{
+  "model": "gpt-6.1-sol",
+  "reasoningEffort": "low"
+}

package/agent-packs/templates/topolo-coordinators/pack.json

@@ -0,0 +1,56 @@
+{
+  "schemaVersion": 1,
+  "id": "topolo-coordinators",
+  "version": "1.0.0",
+  "name": "Topolo task coordinators",
+  "purpose": "Three human front doors; specialists are cloud definitions and single-use task workers, not precreated chats.",
+  "agents": [
+    {
+      "set": "intakes",
+      "id": "engineering",
+      "title": "Topolo Engineering",
+      "pinned": true,
+      "position": 0,
+      "sectionName": "Pinned",
+      "aliases": [
+        "engineering"
+      ]
+    },
+    {
+      "set": "intakes",
+      "id": "operator-01",
+      "title": "Topolo Operator",
+      "pinned": true,
+      "position": 1,
+      "sectionName": "Pinned",
+      "aliases": [
+        "operator-01"
+      ]
+    },
+    {
+      "set": "intakes",
+      "id": "cicd",
+      "title": "Topolo CI/CD",
+      "pinned": true,
+      "position": 2,
+      "sectionName": "Pinned",
+      "aliases": [
+        "cicd"
+      ]
+    }
+  ],
+  "dependencies": {
+    "applications": [
+      "app_topolo_agent",
+      "app_topolo_docs",
+      "app_topolo_bytes"
+    ],
+    "capabilities": [
+      "production credential-scoped Topolo CLI or MCP",
+      "conditional canonical task ownership before dispatch"
+    ],
+    "integrationNotes": [
+      "Authenticate on the new machine, install the cloud role catalog and bind the existing activated task dataset. Never restore conversation history or adopt old workers implicitly."
+    ]
+  }
+}

package/dist/chunk-NYDIAYVY.js

@@ -0,0 +1,144 @@
+#!/usr/bin/env node
+
+// src/lib/claude-desktop-profile.ts
+import * as fs from "fs";
+import * as path from "path";
+import { createHash, randomUUID } from "crypto";
+import { spawnSync } from "child_process";
+function launchClaudeDesktopProfile(options, run = spawnSync) {
+  const root = fs.realpathSync(options.root), uid = process.getuid?.();
+  const ownedDirectory = (value) => {
+    const s = fs.lstatSync(value);
+    if (!path.isAbsolute(value) || fs.realpathSync(value) !== value || !s.isDirectory() || s.isSymbolicLink() || s.uid !== uid || s.mode & 18) throw Error("Exact owned private Desktop profile directories required.");
+    return value;
+  };
+  ownedDirectory(root);
+  const lock = path.join(root, ".claude-profile-launch.lock");
+  let lockfd;
+  if (options.apply) {
+    try {
+      lockfd = fs.openSync(lock, "wx", 384);
+      fs.writeFileSync(lockfd, JSON.stringify({ pid: process.pid }) + "\n");
+      fs.fsyncSync(lockfd);
+    } catch {
+      throw Error("Managed Desktop launch already has an owner; reconcile without duplicate launch.");
+    }
+  }
+  try {
+    const userData = ownedDirectory(options.userData), codeConfig = ownedDirectory(options.codeConfig);
+    if (userData === codeConfig || userData.startsWith(codeConfig + path.sep) || codeConfig.startsWith(userData + path.sep)) throw Error("Desktop and SDK profile directories must be distinct.");
+    const policy = JSON.parse(fs.readFileSync(options.policy, "utf8"));
+    if (policy.format !== "topolo-agent-execution-policy" || policy.pack !== options.pack || policy.installationConsent?.profile !== "full-access" || policy.installationConsent?.principalId === void 0) throw Error("Current reviewed full-access installation policy required for managed Desktop launch.");
+    const app = options.app ?? "/Applications/Claude.app", binary = path.join(app, "Contents/MacOS/Claude");
+    if (!path.isAbsolute(app) || fs.realpathSync(app) !== app || !fs.lstatSync(app).isDirectory() || !fs.lstatSync(binary).isFile()) throw Error("Installed physical Claude application required.");
+    const config = {
+      format: "topolo-claude-desktop-profile",
+      schemaVersion: 1,
+      root,
+      pack: options.pack,
+      userData,
+      codeConfig,
+      app,
+      consentDigest: createHash("sha256").update(JSON.stringify(policy.installationConsent)).digest("hex")
+    };
+    const directory = path.join(root, "claude");
+    fs.mkdirSync(directory, { recursive: true, mode: 448 });
+    ownedDirectory(directory);
+    const file = path.join(directory, "desktop-profile.json");
+    const read = () => {
+      const s = fs.lstatSync(file);
+      if (!s.isFile() || s.isSymbolicLink() || s.uid !== uid || s.mode & 63 || s.nlink !== 1) throw Error("Private owned Desktop profile receipt required.");
+      return JSON.parse(fs.readFileSync(file, "utf8"));
+    };
+    const before = fs.existsSync(file) ? read() : null;
+    if (before && JSON.stringify(before.profile) !== JSON.stringify(config)) throw Error("Managed Desktop profile identity or installation consent changed.");
+    const observed = run("/bin/ps", ["-axo", "pid=,uid=,command="], { encoding: "utf8", timeout: 1e4, maxBuffer: 1048576 });
+    if (observed.error || observed.status !== 0) throw Error("Desktop process ownership observation unavailable.");
+    const matches = String(observed.stdout).split("\n").map((line) => /^\s*(\d+)\s+(\d+)\s+(.+)$/.exec(line)).filter(Boolean).filter((m) => m[3].startsWith(binary + " ") && (m[3].endsWith(" --user-data-dir=" + userData) || m[3].includes(" --user-data-dir=" + userData + " --")));
+    if (matches.length > 1 || matches.some((m) => Number(m[2]) !== uid)) throw Error("Managed Desktop process ownership is ambiguous.");
+    const pid = matches.length ? Number(matches[0][1]) : null;
+    if (!options.apply) return { state: "desktop-profile-launch-preflight", profile: config, pid, nativeStartup: false };
+    if (before?.state === "launch-may-have-effects" && !pid) throw Error("Unacknowledged Desktop launch requires reconciliation; never launch a duplicate.");
+    if (before?.state && !["launch-may-have-effects", "native-profile-verified"].includes(before.state)) throw Error("Unknown Desktop profile launch state.");
+    if (pid && before) return { state: "desktop-profile-existing-unverified", profile: config, pid, nativeStartup: false };
+    if (!pid && before?.pid) {
+      try {
+        process.kill(before.pid, 0);
+        throw Error("Previous managed process is alive.");
+      } catch (error) {
+        if (error.code !== "ESRCH") throw Error("Previous managed Desktop process is not independently proven dead.");
+      }
+    }
+    const help = pid ? null : run("/usr/bin/open", ["-h"], { encoding: "utf8", timeout: 1e4, maxBuffer: 65536 });
+    if (help && (help.error || !String(help.stdout ?? "").concat(String(help.stderr ?? "")).includes("--env"))) throw Error("LaunchServices per-application environment capability unavailable.");
+    const record = { profile: config, operationId: randomUUID(), state: "launch-may-have-effects", history: before ? [...before.history ?? [], { operationId: before.operationId, state: before.state, pid: before.pid ?? null }] : [] };
+    const temporary = file + "." + record.operationId + ".tmp";
+    const fd = fs.openSync(temporary, "wx", 384);
+    try {
+      fs.writeFileSync(fd, JSON.stringify(record) + "\n");
+      fs.fsyncSync(fd);
+    } finally {
+      fs.closeSync(fd);
+    }
+    if (before && JSON.stringify(read()) !== JSON.stringify(before)) throw Error("Desktop profile receipt changed before launch.");
+    fs.renameSync(temporary, file);
+    const dirfd = fs.openSync(directory, "r");
+    try {
+      fs.fsyncSync(dirfd);
+    } finally {
+      fs.closeSync(dirfd);
+    }
+    if (pid) return { state: "desktop-profile-existing-unverified", profile: config, pid, nativeStartup: false };
+    const launched = run("/usr/bin/open", ["-n", "-a", app, "--env", "CLAUDE_CONFIG_DIR=" + codeConfig, "--args", "--user-data-dir=" + userData], { encoding: "utf8", timeout: 2e4, maxBuffer: 65536 });
+    if (launched.error || launched.status !== 0) throw Error("Desktop LaunchServices acknowledgement missing; preserve launch receipt without replay.");
+    return { state: "desktop-profile-launch-requested", profile: config, operationId: record.operationId, nativeStartup: false };
+  } finally {
+    if (lockfd !== void 0) {
+      fs.closeSync(lockfd);
+      fs.unlinkSync(lock);
+    }
+  }
+}
+function verifyClaudeDesktopProfileNative(expected, pid, app, manager, env) {
+  if (!expected || expected.format !== "topolo-claude-desktop-profile" || expected.schemaVersion !== 1 || app.getName() !== "Claude" || app.getPath("userData") !== expected.userData || manager.userDataPath !== expected.userData || env.CLAUDE_CONFIG_DIR !== expected.codeConfig)
+    throw Error("Native Desktop profile or SDK history root differs; do not import or recreate identities.");
+  return { state: "native-profile-verified", pid, userData: expected.userData, codeConfig: expected.codeConfig };
+}
+function readClaudeDesktopProfile(root) {
+  const file = path.join(root, "claude/desktop-profile.json");
+  if (!fs.existsSync(file)) return null;
+  const s = fs.lstatSync(file);
+  if (!s.isFile() || s.isSymbolicLink() || s.uid !== process.getuid?.() || s.mode & 63 || s.nlink !== 1 || s.size > 1048576) throw Error("Private owned Desktop profile receipt required.");
+  const record = JSON.parse(fs.readFileSync(file, "utf8"));
+  if (record.profile?.root !== root || !["launch-may-have-effects", "native-profile-verified"].includes(record.state)) throw Error("Desktop profile receipt differs.");
+  return record;
+}
+function acknowledgeClaudeDesktopProfile(root, before, proof) {
+  const file = path.join(root, "claude/desktop-profile.json");
+  if (JSON.stringify(readClaudeDesktopProfile(root)) !== JSON.stringify(before) || proof?.state !== "native-profile-verified" || !Number.isSafeInteger(proof.pid) || proof.pid < 1 || proof.userData !== before.profile.userData || proof.codeConfig !== before.profile.codeConfig) throw Error("Native profile acknowledgement or durable custody changed.");
+  if (before.state === "native-profile-verified" && before.pid === proof.pid) return before;
+  const row = { ...before, state: "native-profile-verified", pid: proof.pid, history: [...before.history ?? [], { operationId: before.operationId, state: before.state, pid: before.pid ?? null }] }, temporary = file + "." + randomUUID() + ".tmp";
+  const fd = fs.openSync(temporary, "wx", 384);
+  try {
+    fs.writeFileSync(fd, JSON.stringify(row) + "\n");
+    fs.fsyncSync(fd);
+  } finally {
+    fs.closeSync(fd);
+  }
+  if (JSON.stringify(readClaudeDesktopProfile(root)) !== JSON.stringify(before)) throw Error("Desktop profile changed during acknowledgement.");
+  fs.renameSync(temporary, file);
+  const dir = fs.openSync(path.dirname(file), "r");
+  try {
+    fs.fsyncSync(dir);
+  } finally {
+    fs.closeSync(dir);
+  }
+  return row;
+}
+
+export {
+  launchClaudeDesktopProfile,
+  verifyClaudeDesktopProfileNative,
+  readClaudeDesktopProfile,
+  acknowledgeClaudeDesktopProfile
+};