alasio 5.1.0 → 7.0.0

package/dist/src/sandbox/names.js

@@ -0,0 +1,44 @@
+/**
+ * Naming for session filesystems. A workspace is one of two kinds (see
+ * ../workspace/kind.ts): a folder, or a session filesystem identified by a volume id.
+ * A volume id is what alasio generates and stores, and its session's Sandbox, Service and
+ * volume claim are named for it.
+ */
+import { Schema } from "effect";
+/**
+ * The longest a volume id is: a DNS label's 63 characters, less a claim template's name
+ * of up to CLAIM_TEMPLATE_MAX and the hyphen after it, so its volume claims' names,
+ * `<template>-<id>` (../kube/sandboxes.ts claimName), are DNS labels too, as alasio's
+ * admission policy of its clones holds them to (cli/src/manifests/admission.ts).
+ */
+export const VOLUME_ID_MAX = 58;
+/** The longest a claim template's name is, of which a volume id's claims are named. */
+export const CLAIM_TEMPLATE_MAX = 63 - 1 - VOLUME_ID_MAX;
+/**
+ * A volume id is a DNS label of 3–58 characters from `[a-z0-9-]` that starts and ends
+ * with a letter or digit, as the names of the Sandbox, its Service and its pod must be,
+ * and short enough for its claims' (VOLUME_ID_MAX). alasio generates ids that already
+ * satisfy this, and this guards against any that would not.
+ */
+const VOLUME_ID_PATTERN = new RegExp(`^[a-z0-9][a-z0-9-]{1,${VOLUME_ID_MAX - 2}}[a-z0-9]$`, "u");
+/** A volume id, as what comes from outside alasio is decoded. */
+const VolumeId = Schema.String.check(Schema.isPattern(VOLUME_ID_PATTERN));
+/**
+ * A session's token, `<volumeId>.<random>` (../kube/sandboxes.ts newToken), decoded into
+ * the session it names and the rest.
+ */
+export const SessionToken = Schema.TemplateLiteralParser([VolumeId, ".", Schema.NonEmptyString]);
+export function isValidVolumeId(volumeId) {
+    return typeof volumeId === "string" && VOLUME_ID_PATTERN.test(volumeId);
+}
+export function assertValidVolumeId(volumeId) {
+    if (!isValidVolumeId(volumeId)) {
+        throw new Error(`invalid session volume id: ${JSON.stringify(volumeId)} (need 3–${VOLUME_ID_MAX} chars of [a-z0-9-], starting and ending with a letter or digit)`);
+    }
+    return volumeId;
+}
+/** A fresh volume id, e.g. `fs-1a2b3c4d5e`, valid by construction. */
+export function newVolumeId(random = () => crypto.randomUUID()) {
+    return `fs-${random().replace(/-/g, "").slice(0, 12)}`;
+}
+//# sourceMappingURL=names.js.map

package/dist/src/sandbox/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/sandbox/names.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEhC,uFAAuF;AACvF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,CAAC,GAAG,aAAa,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,wBAAwB,aAAa,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;AAEjG,iEAAiE;AACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAE1E;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;AAEjG,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,aAAa,kEAAkE,CAAC,CAAC;IACrK,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,MAAM,GAAiB,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE;IAC1E,OAAO,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACzD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alasio",
-  "version": "5.1.0",
+  "version": "7.0.0",
   "description": "alasio: coding agents you talk to from Telegram, installed and run with npx alasio",
   "type": "module",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "node": ">=24"
   },
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.build.json && cp ../cluster/node/config-v3.toml.tmpl dist/cluster/node/",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
     "start": "node ./src/main.ts"
   },
   "dependencies": {

package/dist/cluster/node/config-v3.toml.tmpl

@@ -1,12 +0,0 @@
-{{ template "base" . }}
-
-[plugins.'io.containerd.cri.v1.runtime'.containerd.runtimes.runsc]
-  runtime_type = "io.containerd.runsc.v1"
-{{- if .SystemdCgroup }}
-
-# Where systemd runs the machine, kubelet's cgroups are systemd's, and runsc places its
-# sandboxes' through systemd too, as runsc.toml beside this file says.
-[plugins.'io.containerd.cri.v1.runtime'.containerd.runtimes.runsc.options]
-  TypeUrl = "io.containerd.runsc.v1.options"
-  ConfigPath = "/var/lib/rancher/k3s/agent/etc/containerd/runsc.toml"
-{{- end }}