@zixt/host 0.0.83 → 0.0.85

package/dist/index.js

@@ -31,7 +31,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.83",
+  version: "0.0.85",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -16805,6 +16805,7 @@ var ListTasksResponse = external_exports.object({
 // ../../packages/contracts/src/protocol.ts
 var PROTOCOL_VERSION = 8;
 var BROWSER_PROFILE_INVENTORY_PAGE_SIZE = 200;
+var HELLO_UNWOUND_ASSIGNMENT_LIMIT = 1e3;
 var TASK_CANCEL_ACK_EVENT = "zixt.task.cancel.acknowledged";
 var TASK_CREDENTIAL_ROLLOVER_ACK_EVENT = "zixt.task.credential_rollover.acknowledged";
 var UnwoundAssignmentRef = external_exports.object({
@@ -18051,7 +18052,7 @@ var HelloFrame = external_exports.object({
    * prior socket died. Optional for rolling v5 hosts; repeated references are
    * idempotent and remain presence/host/org/epoch fenced by the cloud.
    */
-  unwoundAssignments: external_exports.array(UnwoundAssignmentRef).max(1e3).optional()
+  unwoundAssignments: external_exports.array(UnwoundAssignmentRef).max(HELLO_UNWOUND_ASSIGNMENT_LIMIT).optional()
 });
 var BrowserProfileInventoryFrame = external_exports.object({
   type: external_exports.literal("browser.profile.inventory"),
@@ -18176,6 +18177,8 @@ var CLOSE_CODES = {
   replacedByNewerConnection: 4003,
   revoked: 4004
 };
+var UNSUPPORTED_PROTOCOL_CLOSE_REASON = "unsupported protocol version";
+var CLOSE_REASON_MAX_BYTES = 123;
 
 // ../../packages/contracts/src/manager.ts
 var MANAGER_DEFAULT_MODEL = "gpt-5.6-luna";
@@ -21315,6 +21318,17 @@ function operationGrantRetryCause(code) {
   }
   return "GitHub is temporarily unavailable for credential issuance";
 }
+function closeDetail(reason) {
+  if (reason === void 0) return void 0;
+  const raw = typeof reason === "string" ? reason : reason.toString("utf8");
+  let printable = "";
+  for (const character of raw) {
+    const code = character.codePointAt(0) ?? 0;
+    printable += code < 32 || code === 127 ? " " : character;
+  }
+  const text = printable.trim().slice(0, CLOSE_REASON_MAX_BYTES);
+  return text.length > 0 ? text : void 0;
+}
 var HostClient = class _HostClient {
   constructor(opts) {
     this.opts = opts;
@@ -21687,9 +21701,13 @@ var HostClient = class _HostClient {
       const inventoryConfigured = Boolean(
         this.opts.browser?.profileInventoryPages || this.opts.browser?.profileInventory
       );
-      const unwoundAssignments = [...this.pendingUnwoundAssignments.values()].sort(
+      const disclaimable = [...this.pendingUnwoundAssignments.values()].sort(
         (left, right) => left.taskId === right.taskId ? left.epoch - right.epoch : left.taskId.localeCompare(right.taskId)
       );
+      const unwoundAssignments = disclaimable.slice(0, HELLO_UNWOUND_ASSIGNMENT_LIMIT);
+      if (disclaimable.length > unwoundAssignments.length) {
+        this.opts.onDisclaimerBacklog?.(disclaimable.length, unwoundAssignments.length);
+      }
       this.send(
         {
           type: "hello",
@@ -21721,14 +21739,14 @@ var HostClient = class _HostClient {
         if (this.ws === ws) ws.terminate();
       });
     });
-    ws.on("close", (code) => {
+    ws.on("close", (code, reason) => {
       if (inventoryRetryTimer) clearTimeout(inventoryRetryTimer);
-      void this.handleClose(ws, code, closeReason, frameTail);
+      void this.handleClose(ws, code, closeReason, frameTail, closeDetail(reason));
     });
     ws.on("error", () => {
     });
   }
-  async handleClose(ws, code, closeReason, frameTail = Promise.resolve()) {
+  async handleClose(ws, code, closeReason, frameTail = Promise.resolve(), detail) {
     if (this.ws !== ws) return;
     this.ws = void 0;
     this.protocolReady = false;
@@ -21767,13 +21785,18 @@ var HostClient = class _HostClient {
       await this.unwindAllRuns("host connection was replaced by a newer client", "client_shutdown");
       return;
     }
-    if (code === CLOSE_CODES.protocolError) {
-      this.opts.onStatus?.("incompatible");
+    const versionMismatch = code === CLOSE_CODES.protocolError && detail === UNSUPPORTED_PROTOCOL_CLOSE_REASON;
+    if (versionMismatch) {
+      this.opts.onStatus?.("incompatible", detail);
       this.stopped = true;
       await this.unwindAllRuns("host protocol is incompatible", "client_shutdown");
       return;
     }
-    this.opts.onStatus?.(closeReason === "heartbeat_timeout" ? "unresponsive" : "disconnected");
+    if (code === CLOSE_CODES.protocolError) {
+      this.opts.onStatus?.("rejected", detail);
+    } else {
+      this.opts.onStatus?.(closeReason === "heartbeat_timeout" ? "unresponsive" : "disconnected");
+    }
     if (this.stopped) return;
     await this.unwindAllRuns(
       closeReason === "heartbeat_timeout" ? "Zixt Cloud stopped answering heartbeat probes" : "host connection was lost",
@@ -28442,10 +28465,11 @@ var BLOCKED_STATEMENT = /\b(?:you (?:must|need to) (?:be )?(?:sign|log)(?:ged)?
 function authenticationWallGuidance(origin) {
   return [
     `This page is asking someone to sign in to ${origin}.`,
-    "You cannot type a password: if a saved website-login Credential covers this site, call browser_login with its name.",
+    "If a saved website-login Credential covers this site, call browser_login with its name.",
     "Otherwise stop here and use ask_user to ask the person to sign in at the Browser panel, naming the Browser in the question so their panel opens.",
+    "That is the route to ask for, because a saved login is filled by Host code, is never shown to you, and is scrubbed from anything you write.",
     "This browser and its profile outlive the run, so a person can sign in after your session checkpoints and you continue on the authenticated page.",
-    "Never ask for, accept, or type a password, token, or one-time code in chat.",
+    "A one-time code expires and a person is faster at their own password prompt, so do not ask for either instead of the handoff; if they choose to send you a credential anyway, use it without repeating it.",
     "If this Task cannot be verified without being signed in, ask now rather than reporting that limitation once you have already declared the work verified."
   ].join(" ");
 }
@@ -34233,53 +34257,6 @@ function renderAttachmentSection(files) {
 
 // src/runners/ask-user-server.ts
 import { createServer as createServer2 } from "node:http";
-
-// src/runners/ask-user-secrets.ts
-var SECRET_NOUN_SOURCE = "(?:passwords?|passphrases?|api[ -]?keys?|access tokens?|auth tokens?|api tokens?|bearer tokens?|refresh tokens?|tokens?|secret keys?|client secrets?|private keys?|one[- ]time (?:code|password)s?|otps?|2fa codes?|mfa codes?|verification codes?|security codes?|session cookies?)";
-var SECRET_NOUN = new RegExp(String.raw`\b${SECRET_NOUN_SOURCE}\b`, "i");
-var SECRET_ENV_NAME = /\b[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)*_(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD|PAT)\b/;
-function namesSecret(sentence) {
-  return SECRET_NOUN.test(sentence) || SECRET_ENV_NAME.test(sentence);
-}
-var TRANSFER = "(?:paste|send|share|provide|supply|give|reply|respond|forward|drop|tell)";
-var REQUEST_PATTERNS = [
-  new RegExp(String.raw`^\s*(?:please\s+)?${TRANSFER}\b`, "i"),
-  new RegExp(String.raw`\b(?:can|could|would|will)\s+you\s+(?:please\s+)?${TRANSFER}\b`, "i"),
-  new RegExp(
-    String.raw`\b${TRANSFER}\b[^.?!]{0,40}\b(?:me|here|in chat|in the chat|in your (?:reply|answer|message)|below)\b`,
-    "i"
-  ),
-  new RegExp(String.raw`\b${TRANSFER}\b[^.?!]{0,20}\byour\b`, "i"),
-  new RegExp(
-    String.raw`\bwhat(?:'s| is|s|\s+are)\s+(?:the|your)\s+(?:[\w-]+\s+){0,2}${SECRET_NOUN_SOURCE}\b`,
-    "i"
-  )
-];
-var NEGATION = /\b(?:do not|don'?t|never|no need|without|rather than|instead of|avoid)\b/i;
-function namesSafeDestination(sentence) {
-  return /\bbrowser\b/i.test(sentence) || /\bcredentials?\s+(?:page|screen|tab|section|store|settings|panel|vault)\b/i.test(sentence) || /\b(?:add|adds|added|adding|store|stored|save|saved|create|created|put)\b[^.?!]{0,60}\bcredential/i.test(
-    sentence
-  );
-}
-var SECRET_IN_CHAT_REFUSAL = [
-  "Not delivered: Zixt never carries a password, token, or one-time code through chat (W5).",
-  "Ask for the capability instead of the value.",
-  "For a website, ask the person to sign in themselves at the Browser panel, or to add a website-login Credential whose name you can pass to browser_login.",
-  "For anything else, ask them to add it under Resources \u2192 Credentials as an UPPER_SNAKE_CASE name, which reaches your next run as an environment variable.",
-  "Then ask again without requesting the value."
-].join(" ");
-function secretSolicitationRefusal(question, context) {
-  const sentences = `${question}
-${context}`.split(/(?<=[.!?\n])\s+/).map((sentence) => sentence.trim()).filter((sentence) => sentence.length > 0);
-  for (const sentence of sentences) {
-    if (!namesSecret(sentence)) continue;
-    if (NEGATION.test(sentence) || namesSafeDestination(sentence)) continue;
-    if (REQUEST_PATTERNS.some((pattern) => pattern.test(sentence))) return SECRET_IN_CHAT_REFUSAL;
-  }
-  return null;
-}
-
-// src/runners/ask-user-server.ts
 var CADENCE_PROPS = {
   cadence_kind: {
     type: "string",
@@ -34299,7 +34276,7 @@ var CADENCE_PROPS = {
 var TOOLS = [
   {
     name: "ask_user",
-    description: "Ask the human supervising this task a question and wait for their answer. Use it whenever you need a decision, missing context, or plan approval before proceeding. When there are 2-5 concrete alternatives, provide them as choices; the person can still enter another answer. The answer arrives as text.",
+    description: "Ask the human supervising this task a question and wait for their answer. Use it whenever you need a decision, missing context, or plan approval before proceeding. When there are 2-5 concrete alternatives, provide them as choices; the person can still enter another answer. The answer arrives as text. For a credential, ask for the capability rather than the value: a Credential added under Resources reaches your next run as an environment variable and is scrubbed from everything you write, and a website sign-in belongs at the Browser panel. If the person chooses to send you a value here anyway, use it for this task and store it with set_secret if it should persist, but never print it, write it into a file you commit, or repeat it in your report.",
     inputSchema: {
       type: "object",
       properties: {
@@ -34997,11 +34974,6 @@ function createAskUserServer() {
           }
           try {
             const context = typeof args["context"] === "string" ? args["context"] : "";
-            const refusal = secretSolicitationRefusal(question, context);
-            if (refusal) {
-              toolText(refusal, true);
-              return;
-            }
             const rawChoices = args["choices"];
             const parsedChoices = rawChoices === void 0 ? void 0 : QuestionChoices.safeParse(rawChoices);
             if (parsedChoices && !parsedChoices.success) {
@@ -40411,16 +40383,26 @@ var colorOverride = forcedColor(cliOptions.color) ?? (process.env[HOST_CONSOLE_C
 var hostConsoleTail = [];
 var hostConsoleSequence = 0;
 var clientForConsole = {};
+function recordConsoleLine(line) {
+  const entry = { sequence: ++hostConsoleSequence, line };
+  hostConsoleTail.push(entry);
+  if (hostConsoleTail.length > 200) hostConsoleTail.shift();
+  clientForConsole.current?.hostConsoleLine(entry);
+}
 var log = createHostLogger({
   ...colorOverride === void 0 ? {} : { color: colorOverride },
   write: (line) => {
     console.error(line);
-    const entry = { sequence: ++hostConsoleSequence, line };
-    hostConsoleTail.push(entry);
-    if (hostConsoleTail.length > 200) hostConsoleTail.shift();
-    clientForConsole.current?.hostConsoleLine(entry);
+    recordConsoleLine(line);
   }
 });
+function replayConsoleLine(level, message, context) {
+  recordConsoleLine(
+    formatHostLogLine(level, message, context, {
+      ...colorOverride === void 0 ? {} : { color: colorOverride }
+    })
+  );
+}
 if (cliOptions.help) {
   process.stdout.write(`${hostHelpText()}
 `);
@@ -40805,6 +40787,14 @@ var client = new HostClient({
       forgetAcknowledgedAcceptedAssignments(assignments, acceptedAssignmentRoot)
     ]);
   },
+  onDisclaimerBacklog: (pending, reported) => {
+    log.warn("More unfinished Task claims than one connection can report", {
+      machine,
+      pending,
+      reported,
+      next: "The rest are reported as this Machine reconnects; report this if it does not clear"
+    });
+  },
   persistAcceptedAssignment: (assignment) => recordAcceptedAssignment(assignment, acceptedAssignmentRoot).then(() => void 0),
   forgetAcceptedAssignment: (assignment) => forgetAcceptedAssignment(assignment, acceptedAssignmentRoot),
   persistTerminalOutcome: (hostId, outcome) => recordTerminalOutcome(hostId, outcome, terminalOutcomeRoot),
@@ -40836,7 +40826,7 @@ var client = new HostClient({
   onUsableTelemetryReport: () => {
     reportWorkerReadiness();
   },
-  onStatus: (status) => {
+  onStatus: (status, detail) => {
     if (status === lastReportedStatus) return;
     lastReportedStatus = status;
     switch (status) {
@@ -40876,6 +40866,13 @@ var client = new HostClient({
         });
         queueMicrotask(() => shutdown(packagedBuild ? UPDATE_EXIT_CODE : DO_NOT_RESTART_EXIT_CODE));
         break;
+      case "rejected":
+        log.error("Zixt Cloud refused this Machine", {
+          ...connectionContext,
+          reason: detail ?? "the cloud gave no reason",
+          next: "Zixt keeps retrying; report this reason if the Machine stays offline, because no update changes it"
+        });
+        break;
     }
   },
   executor,
@@ -40893,7 +40890,7 @@ for (const { record: record2 } of reportedWorkerExits) {
     ...context,
     next: "This Machine restarted itself; report it if the same exit repeats"
   });
-  for (const line of record2.stderr) log.error("Previous worker output", { machine, line });
+  for (const line of record2.stderr) replayConsoleLine("error", "Previous worker output", { line });
 }
 log.info("Starting Zixt Host", connectionContext);
 client.start();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.83",
+  "version": "0.0.85",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",