@zixt/host 0.0.84 → 0.0.86

package/dist/index.js

@@ -31,7 +31,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.84",
+  version: "0.0.86",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -25828,14 +25828,26 @@ setTimeout(() => { if (!launched) fail(); }, 130000).unref();
 var InstallerContainmentError = class extends Error {
   name = "InstallerContainmentError";
 };
+function describeInstallerExit(code, signal) {
+  if (signal !== null) return `was killed by ${signal}`;
+  if (code === null) return "ended without reporting an exit code";
+  return `exited with code ${code}`;
+}
 async function installRelease(version2, options = {}) {
-  if (!VERSION_DIR.test(version2)) return null;
+  const fail = (reason, detail) => {
+    options.onFailure?.({ version: version2, reason, detail });
+    return null;
+  };
+  if (!VERSION_DIR.test(version2)) {
+    return fail("unsupported_version", "that is not a release name this Host can install");
+  }
   const platform = options.platform ?? process.platform;
   const root = options.root ?? versionsRoot();
   const prefix = join8(root, version2);
   const entry = installedReleaseEntry(version2, root);
   if (await validReleaseAtPrefix(prefix, version2)) return entry;
-  if (options.signal?.aborted) return null;
+  if (options.signal?.aborted)
+    return fail("cancelled", "this Host was stopping before npm started");
   const installerCommand = options.installerCommand ?? await resolveInstallerCommand({ platform });
   await mkdir5(root, { recursive: true, mode: 448 });
   const staging = join8(root, `.install-${version2}-${process.pid}-${crypto.randomUUID()}`);
@@ -25870,9 +25882,12 @@ async function installRelease(version2, options = {}) {
   let child;
   try {
     child = spawnInstaller(staging, version2);
-  } catch {
+  } catch (error52) {
     await rm5(staging, { recursive: true, force: true }).catch(() => void 0);
-    return null;
+    return fail(
+      "installer_unavailable",
+      `${installerCommand} could not be started (${error52 instanceof Error ? error52.message : "unknown error"})`
+    );
   }
   let resolveChildExited;
   const childExited = new Promise((resolveExit) => {
@@ -25894,6 +25909,8 @@ async function installRelease(version2, options = {}) {
     installerContainmentSetupError = error52;
     return null;
   }) : Promise.resolve(null);
+  const timeoutMs = options.timeoutMs ?? INSTALL_TIMEOUT_MS;
+  const outcome = { code: null, signal: null, timedOut: false, spawnError: null };
   const installed = await new Promise((resolve18, reject3) => {
     let finished = false;
     let cleanupStarted = false;
@@ -25948,13 +25965,21 @@ async function installRelease(version2, options = {}) {
         }
       })();
     };
-    const timer = setTimeout(requestCleanup, options.timeoutMs ?? INSTALL_TIMEOUT_MS);
+    const timer = setTimeout(() => {
+      outcome.timedOut = true;
+      requestCleanup();
+    }, timeoutMs);
     timer.unref?.();
-    child.once("error", () => {
+    child.once("error", (error52) => {
+      outcome.spawnError = error52.message;
       observeExit();
       requestCleanup();
     });
-    child.once("exit", (code) => {
+    child.once("exit", (code, signal) => {
+      if (!usesWindowsInstallerGuardian) {
+        outcome.code = code;
+        outcome.signal = signal;
+      }
       observeExit();
       if (usesWindowsInstallerGuardian) {
         requestCleanup();
@@ -25974,6 +25999,9 @@ async function installRelease(version2, options = {}) {
         }
         const code = message.code;
         if (code !== null && (typeof code !== "number" || !Number.isInteger(code))) return;
+        outcome.code = code;
+        const signal = message.signal;
+        outcome.signal = typeof signal === "string" ? signal : null;
         successfulCleanupResult = code === 0;
         requestCleanup();
       });
@@ -26004,8 +26032,32 @@ async function installRelease(version2, options = {}) {
     if (options.signal?.aborted) requestCleanup();
   });
   try {
-    if (options.signal?.aborted || !installed || !await validReleaseAtPrefix(staging, version2)) {
-      return null;
+    if (options.signal?.aborted) {
+      return fail("cancelled", "this Host was stopping before the install finished");
+    }
+    if (!installed) {
+      if (outcome.timedOut) {
+        return fail(
+          "installer_timed_out",
+          `${installerCommand} was still running after ${Math.round(timeoutMs / 1e3)}s and was stopped`
+        );
+      }
+      if (outcome.spawnError !== null) {
+        return fail(
+          "installer_unavailable",
+          `${installerCommand} failed to run (${outcome.spawnError})`
+        );
+      }
+      return fail(
+        "installer_failed",
+        `${installerCommand} install ${PACKAGE_NAME}@${version2} ${describeInstallerExit(outcome.code, outcome.signal)}`
+      );
+    }
+    if (!await validReleaseAtPrefix(staging, version2)) {
+      return fail(
+        "incomplete_release",
+        `${installerCommand} reported success but left no runnable ${PACKAGE_NAME}@${version2} in ${staging}`
+      );
     }
     if (await validReleaseAtPrefix(prefix, version2)) return entry;
     const existing = await lstat5(prefix).catch((error52) => {
@@ -26015,11 +26067,18 @@ async function installRelease(version2, options = {}) {
     if (existing) await rename3(prefix, quarantine);
     try {
       await rename3(staging, prefix);
-    } catch {
-      return await validReleaseAtPrefix(prefix, version2) ? entry : null;
+    } catch (error52) {
+      if (await validReleaseAtPrefix(prefix, version2)) return entry;
+      return fail(
+        "commit_failed",
+        `the validated tree could not be moved into ${prefix} (${error52 instanceof Error ? error52.message : "unknown error"})`
+      );
     }
     await syncDirectory3(root);
-    return await validReleaseAtPrefix(prefix, version2) ? entry : null;
+    return await validReleaseAtPrefix(prefix, version2) ? entry : fail(
+      "commit_failed",
+      `${prefix} is not a runnable ${PACKAGE_NAME}@${version2} after installing`
+    );
   } finally {
     await rm5(staging, { recursive: true, force: true }).catch(() => void 0);
     await rm5(quarantine, { recursive: true, force: true }).catch(() => void 0);
@@ -26601,7 +26660,10 @@ async function superviseHost(options = {}) {
     platform,
     workerDiagnosticsRoot
   ));
-  const install = options.installVersion ?? ((version2, signal) => installRelease(version2, signal ? { signal } : {}));
+  const install = options.installVersion ?? ((version2, signal, onFailure) => installRelease(version2, {
+    ...signal ? { signal } : {},
+    ...onFailure ? { onFailure } : {}
+  }));
   const cleanupWorker = options.cleanupWorker ?? (options.spawnWorker ? async () => {
   } : null);
   const createWorkerContainment = options.createWorkerContainment ?? (platform === "win32" && !options.spawnWorker ? async (target, identityNonce, signal) => {
@@ -27023,6 +27085,9 @@ async function superviseHost(options = {}) {
         if (!await waitAfterCrash(runtimeMs)) return 0;
         continue;
       }
+      log2(
+        `Zixt Host: worker on ${command.version ?? "the launched copy"} asked to update (exit ${effectiveCode}${watchdogTriggered ? `, announced ${announcedExitCode} before its teardown was contained` : ""}); checking the published release`
+      );
       if (watchdogTriggered) {
         await reportWorkerExit(workerExit, "installing the update it asked for anyway");
       }
@@ -27030,6 +27095,7 @@ async function superviseHost(options = {}) {
       if (orderlyValidatedBoundary) rollbackCandidate = null;
       const target = await published();
       let updateLanded = false;
+      let rejectedUpdate = null;
       if (target === null) {
         log2(
           "Zixt Host: a newer release was reported but the registry is unreachable; staying on the current version"
@@ -27042,13 +27108,22 @@ async function superviseHost(options = {}) {
         log2(`Zixt Host: already running ${target}; ignoring a repeated update request`);
       } else {
         let entry;
+        const attempt = { failure: null };
+        log2(`Zixt Host: installing ${target} over ${command.version ?? "the launched copy"}`);
         try {
-          entry = await install(target, shutdownController.signal);
+          entry = await install(target, shutdownController.signal, (failure2) => {
+            attempt.failure = failure2;
+          });
         } catch (error52) {
           if (error52 instanceof InstallerContainmentError) {
             log2(`Zixt Host: ${error52.message}; handing recovery to the stable launcher`);
             return 1;
           }
+          attempt.failure = {
+            version: target,
+            reason: "commit_failed",
+            detail: error52 instanceof Error ? error52.message : "unknown error"
+          };
           entry = null;
         }
         if (shuttingDown2) return 0;
@@ -27136,9 +27211,14 @@ async function superviseHost(options = {}) {
             }
           }
         } else {
-          log2(`Zixt Host: could not install ${target}; staying on the current version`);
+          const failure2 = attempt.failure;
+          log2(
+            `Zixt Host: could not install ${target} (${failure2 ? `${failure2.reason}: ${failure2.detail}` : "no reason reported"}); staying on ${command.version ?? "the launched copy"}`
+          );
+          if (failure2?.reason !== "cancelled") rejectedUpdate = target;
         }
       }
+      if (rejectedUpdate) command = { ...command, rejectedVersion: rejectedUpdate };
       unsatisfiableUpdates = updateLanded ? 0 : unsatisfiableUpdates + 1;
       if (unsatisfiableUpdates > 0) {
         if (!await waitOrShutdown(streakBackoffMs(unsatisfiableUpdates))) return 0;
@@ -28465,10 +28545,11 @@ var BLOCKED_STATEMENT = /\b(?:you (?:must|need to) (?:be )?(?:sign|log)(?:ged)?
 function authenticationWallGuidance(origin) {
   return [
     `This page is asking someone to sign in to ${origin}.`,
-    "You cannot type a password: if a saved website-login Credential covers this site, call browser_login with its name.",
+    "If a saved website-login Credential covers this site, call browser_login with its name.",
     "Otherwise stop here and use ask_user to ask the person to sign in at the Browser panel, naming the Browser in the question so their panel opens.",
+    "That is the route to ask for, because a saved login is filled by Host code, is never shown to you, and is scrubbed from anything you write.",
     "This browser and its profile outlive the run, so a person can sign in after your session checkpoints and you continue on the authenticated page.",
-    "Never ask for, accept, or type a password, token, or one-time code in chat.",
+    "A one-time code expires and a person is faster at their own password prompt, so do not ask for either instead of the handoff; if they choose to send you a credential anyway, use it without repeating it.",
     "If this Task cannot be verified without being signed in, ask now rather than reporting that limitation once you have already declared the work verified."
   ].join(" ");
 }
@@ -34256,53 +34337,6 @@ function renderAttachmentSection(files) {
 
 // src/runners/ask-user-server.ts
 import { createServer as createServer2 } from "node:http";
-
-// src/runners/ask-user-secrets.ts
-var SECRET_NOUN_SOURCE = "(?:passwords?|passphrases?|api[ -]?keys?|access tokens?|auth tokens?|api tokens?|bearer tokens?|refresh tokens?|tokens?|secret keys?|client secrets?|private keys?|one[- ]time (?:code|password)s?|otps?|2fa codes?|mfa codes?|verification codes?|security codes?|session cookies?)";
-var SECRET_NOUN = new RegExp(String.raw`\b${SECRET_NOUN_SOURCE}\b`, "i");
-var SECRET_ENV_NAME = /\b[A-Z][A-Z0-9]*(?:_[A-Z0-9]+)*_(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD|PAT)\b/;
-function namesSecret(sentence) {
-  return SECRET_NOUN.test(sentence) || SECRET_ENV_NAME.test(sentence);
-}
-var TRANSFER = "(?:paste|send|share|provide|supply|give|reply|respond|forward|drop|tell)";
-var REQUEST_PATTERNS = [
-  new RegExp(String.raw`^\s*(?:please\s+)?${TRANSFER}\b`, "i"),
-  new RegExp(String.raw`\b(?:can|could|would|will)\s+you\s+(?:please\s+)?${TRANSFER}\b`, "i"),
-  new RegExp(
-    String.raw`\b${TRANSFER}\b[^.?!]{0,40}\b(?:me|here|in chat|in the chat|in your (?:reply|answer|message)|below)\b`,
-    "i"
-  ),
-  new RegExp(String.raw`\b${TRANSFER}\b[^.?!]{0,20}\byour\b`, "i"),
-  new RegExp(
-    String.raw`\bwhat(?:'s| is|s|\s+are)\s+(?:the|your)\s+(?:[\w-]+\s+){0,2}${SECRET_NOUN_SOURCE}\b`,
-    "i"
-  )
-];
-var NEGATION = /\b(?:do not|don'?t|never|no need|without|rather than|instead of|avoid)\b/i;
-function namesSafeDestination(sentence) {
-  return /\bbrowser\b/i.test(sentence) || /\bcredentials?\s+(?:page|screen|tab|section|store|settings|panel|vault)\b/i.test(sentence) || /\b(?:add|adds|added|adding|store|stored|save|saved|create|created|put)\b[^.?!]{0,60}\bcredential/i.test(
-    sentence
-  );
-}
-var SECRET_IN_CHAT_REFUSAL = [
-  "Not delivered: Zixt never carries a password, token, or one-time code through chat (W5).",
-  "Ask for the capability instead of the value.",
-  "For a website, ask the person to sign in themselves at the Browser panel, or to add a website-login Credential whose name you can pass to browser_login.",
-  "For anything else, ask them to add it under Resources \u2192 Credentials as an UPPER_SNAKE_CASE name, which reaches your next run as an environment variable.",
-  "Then ask again without requesting the value."
-].join(" ");
-function secretSolicitationRefusal(question, context) {
-  const sentences = `${question}
-${context}`.split(/(?<=[.!?\n])\s+/).map((sentence) => sentence.trim()).filter((sentence) => sentence.length > 0);
-  for (const sentence of sentences) {
-    if (!namesSecret(sentence)) continue;
-    if (NEGATION.test(sentence) || namesSafeDestination(sentence)) continue;
-    if (REQUEST_PATTERNS.some((pattern) => pattern.test(sentence))) return SECRET_IN_CHAT_REFUSAL;
-  }
-  return null;
-}
-
-// src/runners/ask-user-server.ts
 var CADENCE_PROPS = {
   cadence_kind: {
     type: "string",
@@ -34322,7 +34356,7 @@ var CADENCE_PROPS = {
 var TOOLS = [
   {
     name: "ask_user",
-    description: "Ask the human supervising this task a question and wait for their answer. Use it whenever you need a decision, missing context, or plan approval before proceeding. When there are 2-5 concrete alternatives, provide them as choices; the person can still enter another answer. The answer arrives as text.",
+    description: "Ask the human supervising this task a question and wait for their answer. Use it whenever you need a decision, missing context, or plan approval before proceeding. When there are 2-5 concrete alternatives, provide them as choices; the person can still enter another answer. The answer arrives as text. For a credential, ask for the capability rather than the value: a Credential added under Resources reaches your next run as an environment variable and is scrubbed from everything you write, and a website sign-in belongs at the Browser panel. If the person chooses to send you a value here anyway, use it for this task and store it with set_secret if it should persist, but never print it, write it into a file you commit, or repeat it in your report.",
     inputSchema: {
       type: "object",
       properties: {
@@ -35020,11 +35054,6 @@ function createAskUserServer() {
           }
           try {
             const context = typeof args["context"] === "string" ? args["context"] : "";
-            const refusal = secretSolicitationRefusal(question, context);
-            if (refusal) {
-              toolText(refusal, true);
-              return;
-            }
             const rawChoices = args["choices"];
             const parsedChoices = rawChoices === void 0 ? void 0 : QuestionChoices.safeParse(rawChoices);
             if (parsedChoices && !parsedChoices.success) {
@@ -40950,7 +40979,12 @@ function shutdown(exitCode = 0) {
   if (shuttingDown) process.exit(exitCode);
   shuttingDown = true;
   retainRunAssignments();
-  log.info("Stopping Zixt Host", { machine, activeTasks: activeSessions });
+  log.info("Stopping Zixt Host", {
+    machine,
+    activeTasks: activeSessions,
+    exit: exitCode,
+    reason: exitCode === UPDATE_EXIT_CODE ? "installing a Zixt Host update" : exitCode === DO_NOT_RESTART_EXIT_CODE ? "this Machine needs attention before it restarts" : "stop requested"
+  });
   beginWorkerShutdown({
     activeTasks: activeSessions,
     exitCode,
@@ -40963,6 +40997,9 @@ function shutdown(exitCode = 0) {
           machine,
           deadline: formatDuration(deadlineMs),
           exit: code,
+          // A stop that had to unwind live runs exits as a crash instead, so
+          // the honoured code can differ from the verdict this stop was for.
+          ...code === exitCode ? {} : { requested: exitCode },
           activeTasks: activeSessions,
           next: "The Host restarts automatically; report this if it repeats"
         }
@@ -40970,6 +41007,15 @@ function shutdown(exitCode = 0) {
     }
   });
 }
+var skippedRelease = process.env.ZIXT_HOST_REJECT_VERSION;
+if (packagedBuild && skippedRelease) {
+  log.warn("Skipping a Zixt Host release this Machine could not install", {
+    machine,
+    version: skippedRelease,
+    running: HOST_VERSION,
+    next: "This Machine keeps working and takes the next release; report it if it stays behind"
+  });
+}
 stopUpdateWatch = !packagedBuild ? () => {
 } : watchForUpdates({
   onUpdateAvailable: (version2) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.84",
+  "version": "0.0.86",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",