blun-king-cli 9.1.602 → 9.1.604

package/bin/agentspine-king-host-runner.mjs

@@ -1,109 +1,109 @@
-import { randomUUID } from 'node:crypto';
-
-export const MAX_RAW_BYTES = 64 * 1024;
-export const MAX_CHECKPOINT_BYTES = 16 * 1024;
-export const MAX_TICK_MS = 1_800_000;
-export const RESULT_SCHEMA = 'agentspine.blun-step-result/v1';
-const HOST_ENVIRONMENT_KEYS = [
-  'AGENTSPINE_GATEWAY_CONTEXT', 'AGENTSPINE_ENTITY_ID', 'AGENTSPINE_PROJECT_ID',
-  'AGENTSPINE_HOST', 'AGENTSPINE_GATEWAY_QUEUE_ID', 'AGENTSPINE_GATEWAY_ATTEMPT',
-  'AGENTSPINE_GROUP_ID', 'AGENTSPINE_GOAL_ID', 'AGENTSPINE_GOAL_STEP_ID',
-  'AGENTSPINE_PLAN_DEFINITIONS_DIGEST', 'AGENTSPINE_CHANNEL_EVENT_ID',
-  'AGENTSPINE_CHANNEL_PROVIDER', 'AGENTSPINE_PORTAL_REF', 'AGENTSPINE_THREAD_REF',
-];
-
-function goalSessionKaos(kaos, environment) {
-  if (environment === undefined) return kaos;
-  if (!environment || typeof environment !== 'object' || Array.isArray(environment)
-    || Object.entries(environment).some(([key, value]) => !HOST_ENVIRONMENT_KEYS.includes(key)
-      || typeof value !== 'string' || value.includes('\0'))) throw new Error('GOAL_WORKER_ENVIRONMENT_INVALID');
-  if (typeof kaos?.withEnv !== 'function') throw new Error('GOAL_WORKER_ENVIRONMENT_REQUIRED');
-  // Replace the complete per-tick scope without changing process.env or the base Kaos.
-  return kaos.withEnv(Object.fromEntries(HOST_ENVIRONMENT_KEYS.map(key => [key, environment[key] ?? ''])));
-}
-
-export function buildGoalPrompt(item) {
-  return 'Execute exactly one bounded goal-plan tick. Return exactly one visible final JSON object.\n'
-    + JSON.stringify({ schema: 'agentspine.blun-step-request/v1', goal: item.goal, goalStep: item.goalStep,
-      selfHelpPolicy: item.selfHelpPolicy, requiredResult: { schema: RESULT_SCHEMA,
-        fields: ['text', 'checkpoint', 'completed', 'blocked', 'blocker', 'knowledgeGap', 'selfHelp', 'execution'],
-        rule: 'Every tick requires a non-null checkpoint; only report completed work backed by verification.' } });
-}
-
-export function parseGoalResult(text) {
-  if (Buffer.byteLength(text, 'utf8') > MAX_RAW_BYTES) throw new Error('GOAL_STEP_RESULT_EXCEEDS_64_KIB');
-  let value;
-  try { value = JSON.parse(text.trim()); } catch { throw new Error('GOAL_STEP_RESULT_INVALID_JSON'); }
-  if (!value || value.schema !== RESULT_SCHEMA || typeof value.text !== 'string'
-    || !value.text.trim() || value.text.length > 16000
-    || (value.completed !== undefined && typeof value.completed !== 'boolean')
-    || (value.blocked !== undefined && typeof value.blocked !== 'boolean')
-    || (value.completed === true && value.blocked === true)) throw new Error('GOAL_STEP_RESULT_INVALID');
-  if (value.checkpoint === undefined || value.checkpoint === null) throw new Error('GOAL_STEP_CHECKPOINT_REQUIRED');
-  if (Buffer.byteLength(JSON.stringify(value.checkpoint), 'utf8') > MAX_CHECKPOINT_BYTES) {
-    throw new Error('GOAL_STEP_CHECKPOINT_TOO_LARGE');
-  }
-  return value;
-}
-
-export function runSessionStep(session, item, timeoutMs, signal) {
-  return new Promise((resolve, reject) => {
-    let ended = false;
-    let text = '';
-    let turnId;
-    let unsubscribe = () => {};
-    const finish = (error) => {
-      if (ended) return;
-      ended = true; clearTimeout(timer); unsubscribe(); signal?.removeEventListener('abort', aborted);
-      if (error) { reject(error); return; }
-      try { resolve(parseGoalResult(text)); } catch (error) { reject(error); }
-    };
-    const aborted = () => finish(new Error('GOAL_WORKER_STOP_REQUESTED'));
-    const timer = setTimeout(() => finish(new Error('GOAL_STEP_DEADLINE')), timeoutMs);
-    unsubscribe = session.onEvent((event) => {
-      if (event.sessionId !== session.id || event.agentId !== 'main') return;
-      if (event.type === 'turn.started' && turnId === undefined) { turnId = event.turnId; return; }
-      if (event.type === 'error') { finish(new Error('GOAL_STEP_SESSION_ERROR')); return; }
-      if (turnId === undefined || event.turnId !== turnId) return;
-      if (event.type === 'turn.step.started' || event.type === 'turn.step.retrying') text = '';
-      if (event.type === 'assistant.delta') {
-        text += event.delta;
-        if (Buffer.byteLength(text, 'utf8') > MAX_RAW_BYTES) finish(new Error('GOAL_STEP_RESULT_EXCEEDS_64_KIB'));
-      }
-      if (event.type === 'turn.ended') finish(event.reason === 'completed' ? null : new Error('GOAL_STEP_TURN_NOT_COMPLETED'));
-    });
-    signal?.addEventListener('abort', aborted, { once: true });
-    if (signal?.aborted) aborted();
-    if (!ended) Promise.resolve().then(() => { if (!ended) return session.prompt(buildGoalPrompt(item)); }).catch(finish);
-  });
-}
-
-export function createGoalHostFactory({ harness, workDir, model, permission, tickTimeoutMs = MAX_TICK_MS,
-  cleanupTimeoutMs = 10000, sessionOptions, onSession, signal }) {
-  if (!Number.isInteger(tickTimeoutMs) || tickTimeoutMs < 1000 || tickTimeoutMs > MAX_TICK_MS
-    || !Number.isInteger(cleanupTimeoutMs) || cleanupTimeoutMs < 1 || cleanupTimeoutMs > 60000) {
-    throw new Error('GOAL_WORKER_TIMEOUT_OUT_OF_RANGE');
-  }
-  if (!['manual', 'auto', 'yolo'].includes(permission)) throw new Error('GOAL_WORKER_PERMISSION_REQUIRED');
-  return async (item) => {
-    if (item.projectRoot !== workDir || !item.goal) throw new Error('GOAL_WORKER_SCOPE_MISMATCH');
-    const session = await harness.createSession({ ...sessionOptions, id: 'worker-' + randomUUID(),
-      workDir, model, permission, kaos: goalSessionKaos(sessionOptions?.kaos, item.hostEnvironment),
-      metadata: { gatewayQueueId: item.queueId, gatewayAttempt: item.attempts } });
-    onSession?.(session);
-    let started = false;
-    return { sessionId: session.id,
-      async run() {
-        if (started) throw new Error('GOAL_WORKER_SESSION_ALREADY_RUN');
-        started = true;
-        return runSessionStep(session, item, tickTimeoutMs, signal);
-      },
-      async quiesce() {
-        const proof = await session.quiesce({ deadlineAt: Date.now() + cleanupTimeoutMs });
-        if (proof.status === 'quiescent' && proof.sessionId === session.id && proof.remaining.length === 0) {
-          await session.close();
-        }
-        return proof;
-      } };
-  };
-}
+import { randomUUID } from 'node:crypto';
+
+export const MAX_RAW_BYTES = 64 * 1024;
+export const MAX_CHECKPOINT_BYTES = 16 * 1024;
+export const MAX_TICK_MS = 1_800_000;
+export const RESULT_SCHEMA = 'agentspine.blun-step-result/v1';
+const HOST_ENVIRONMENT_KEYS = [
+  'AGENTSPINE_GATEWAY_CONTEXT', 'AGENTSPINE_ENTITY_ID', 'AGENTSPINE_PROJECT_ID',
+  'AGENTSPINE_HOST', 'AGENTSPINE_GATEWAY_QUEUE_ID', 'AGENTSPINE_GATEWAY_ATTEMPT',
+  'AGENTSPINE_GROUP_ID', 'AGENTSPINE_GOAL_ID', 'AGENTSPINE_GOAL_STEP_ID',
+  'AGENTSPINE_PLAN_DEFINITIONS_DIGEST', 'AGENTSPINE_CHANNEL_EVENT_ID',
+  'AGENTSPINE_CHANNEL_PROVIDER', 'AGENTSPINE_PORTAL_REF', 'AGENTSPINE_THREAD_REF',
+];
+
+function goalSessionKaos(kaos, environment) {
+  if (environment === undefined) return kaos;
+  if (!environment || typeof environment !== 'object' || Array.isArray(environment)
+    || Object.entries(environment).some(([key, value]) => !HOST_ENVIRONMENT_KEYS.includes(key)
+      || typeof value !== 'string' || value.includes('\0'))) throw new Error('GOAL_WORKER_ENVIRONMENT_INVALID');
+  if (typeof kaos?.withEnv !== 'function') throw new Error('GOAL_WORKER_ENVIRONMENT_REQUIRED');
+  // Replace the complete per-tick scope without changing process.env or the base Kaos.
+  return kaos.withEnv(Object.fromEntries(HOST_ENVIRONMENT_KEYS.map(key => [key, environment[key] ?? ''])));
+}
+
+export function buildGoalPrompt(item) {
+  return 'Execute exactly one bounded goal-plan tick. Return exactly one visible final JSON object.\n'
+    + JSON.stringify({ schema: 'agentspine.blun-step-request/v1', goal: item.goal, goalStep: item.goalStep,
+      selfHelpPolicy: item.selfHelpPolicy, requiredResult: { schema: RESULT_SCHEMA,
+        fields: ['text', 'checkpoint', 'completed', 'blocked', 'blocker', 'knowledgeGap', 'selfHelp', 'execution'],
+        rule: 'Every tick requires a non-null checkpoint; only report completed work backed by verification.' } });
+}
+
+export function parseGoalResult(text) {
+  if (Buffer.byteLength(text, 'utf8') > MAX_RAW_BYTES) throw new Error('GOAL_STEP_RESULT_EXCEEDS_64_KIB');
+  let value;
+  try { value = JSON.parse(text.trim()); } catch { throw new Error('GOAL_STEP_RESULT_INVALID_JSON'); }
+  if (!value || value.schema !== RESULT_SCHEMA || typeof value.text !== 'string'
+    || !value.text.trim() || value.text.length > 16000
+    || (value.completed !== undefined && typeof value.completed !== 'boolean')
+    || (value.blocked !== undefined && typeof value.blocked !== 'boolean')
+    || (value.completed === true && value.blocked === true)) throw new Error('GOAL_STEP_RESULT_INVALID');
+  if (value.checkpoint === undefined || value.checkpoint === null) throw new Error('GOAL_STEP_CHECKPOINT_REQUIRED');
+  if (Buffer.byteLength(JSON.stringify(value.checkpoint), 'utf8') > MAX_CHECKPOINT_BYTES) {
+    throw new Error('GOAL_STEP_CHECKPOINT_TOO_LARGE');
+  }
+  return value;
+}
+
+export function runSessionStep(session, item, timeoutMs, signal) {
+  return new Promise((resolve, reject) => {
+    let ended = false;
+    let text = '';
+    let turnId;
+    let unsubscribe = () => {};
+    const finish = (error) => {
+      if (ended) return;
+      ended = true; clearTimeout(timer); unsubscribe(); signal?.removeEventListener('abort', aborted);
+      if (error) { reject(error); return; }
+      try { resolve(parseGoalResult(text)); } catch (error) { reject(error); }
+    };
+    const aborted = () => finish(new Error('GOAL_WORKER_STOP_REQUESTED'));
+    const timer = setTimeout(() => finish(new Error('GOAL_STEP_DEADLINE')), timeoutMs);
+    unsubscribe = session.onEvent((event) => {
+      if (event.sessionId !== session.id || event.agentId !== 'main') return;
+      if (event.type === 'turn.started' && turnId === undefined) { turnId = event.turnId; return; }
+      if (event.type === 'error') { finish(new Error('GOAL_STEP_SESSION_ERROR')); return; }
+      if (turnId === undefined || event.turnId !== turnId) return;
+      if (event.type === 'turn.step.started' || event.type === 'turn.step.retrying') text = '';
+      if (event.type === 'assistant.delta') {
+        text += event.delta;
+        if (Buffer.byteLength(text, 'utf8') > MAX_RAW_BYTES) finish(new Error('GOAL_STEP_RESULT_EXCEEDS_64_KIB'));
+      }
+      if (event.type === 'turn.ended') finish(event.reason === 'completed' ? null : new Error('GOAL_STEP_TURN_NOT_COMPLETED'));
+    });
+    signal?.addEventListener('abort', aborted, { once: true });
+    if (signal?.aborted) aborted();
+    if (!ended) Promise.resolve().then(() => { if (!ended) return session.prompt(buildGoalPrompt(item)); }).catch(finish);
+  });
+}
+
+export function createGoalHostFactory({ harness, workDir, model, permission, tickTimeoutMs = MAX_TICK_MS,
+  cleanupTimeoutMs = 10000, sessionOptions, onSession, signal }) {
+  if (!Number.isInteger(tickTimeoutMs) || tickTimeoutMs < 1000 || tickTimeoutMs > MAX_TICK_MS
+    || !Number.isInteger(cleanupTimeoutMs) || cleanupTimeoutMs < 1 || cleanupTimeoutMs > 60000) {
+    throw new Error('GOAL_WORKER_TIMEOUT_OUT_OF_RANGE');
+  }
+  if (!['manual', 'auto', 'yolo'].includes(permission)) throw new Error('GOAL_WORKER_PERMISSION_REQUIRED');
+  return async (item) => {
+    if (item.projectRoot !== workDir || !item.goal) throw new Error('GOAL_WORKER_SCOPE_MISMATCH');
+    const session = await harness.createSession({ ...sessionOptions, id: 'worker-' + randomUUID(),
+      workDir, model, permission, kaos: goalSessionKaos(sessionOptions?.kaos, item.hostEnvironment),
+      metadata: { gatewayQueueId: item.queueId, gatewayAttempt: item.attempts } });
+    onSession?.(session);
+    let started = false;
+    return { sessionId: session.id,
+      async run() {
+        if (started) throw new Error('GOAL_WORKER_SESSION_ALREADY_RUN');
+        started = true;
+        return runSessionStep(session, item, tickTimeoutMs, signal);
+      },
+      async quiesce() {
+        const proof = await session.quiesce({ deadlineAt: Date.now() + cleanupTimeoutMs });
+        if (proof.status === 'quiescent' && proof.sessionId === session.id && proof.remaining.length === 0) {
+          await session.close();
+        }
+        return proof;
+      } };
+  };
+}

package/bin/agentspine-king-snapshot-policy.cjs

@@ -1,80 +1,80 @@
-'use strict';
-
-const { createHash } = require('node:crypto');
-const fs = require('node:fs');
-const path = require('node:path');
-
-const STAND_SCHEMA = 'blun.snapshot-stand/v1';
-const SHA256_RE = /^[a-f0-9]{64}$/iu;
-
-function sha256(value) {
-  return createHash('sha256').update(value).digest('hex');
-}
-
-function exactSha(value, label) {
-  const digest = String(value || '').trim().toLowerCase();
-  if (!SHA256_RE.test(digest)) throw new Error(`${label} must be a SHA256 digest`);
-  return digest;
-}
-
-function isInside(root, candidate) {
-  const relative = path.relative(root, candidate);
-  return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));
-}
-
-function standMetadata(fsImpl, root, standPath) {
-  if (!isInside(root, standPath)) throw new Error('SNAPSHOT_STAND_OUTSIDE_WORKSPACE');
-  const parts = path.relative(root, standPath).split(path.sep);
-  let cursor = root;
-  let metadata;
-  for (let index = 0; index < parts.length; index++) {
-    cursor = path.join(cursor, parts[index]);
-    metadata = fsImpl.lstatSync(cursor, { bigint: true });
-    if (metadata.isSymbolicLink() || (index < parts.length - 1 ? !metadata.isDirectory() : !metadata.isFile())) {
-      throw new Error('SNAPSHOT_STAND_NOT_REGULAR');
-    }
-  }
-  if (!isInside(root, fsImpl.realpathSync(standPath))) throw new Error('SNAPSHOT_STAND_OUTSIDE_WORKSPACE');
-  return metadata;
-}
-
-function sameFile(left, right) {
-  return left.isFile() && right.isFile() && ['dev', 'ino', 'size', 'mtimeNs', 'ctimeNs']
-    .every(key => left[key] === right[key]);
-}
-
-function verifyWorkspaceSnapshot(input, options = {}) {
-  const fsImpl = options.fsImpl || fs;
-  const root = fsImpl.realpathSync(path.resolve(input.root));
-  const standPath = path.resolve(root, input.standFile || '.blun-snapshot-stand.json');
-  const metadata = standMetadata(fsImpl, root, standPath);
-  const descriptor = fsImpl.openSync(standPath, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW || 0));
-  let payload;
-  try {
-    const before = fsImpl.fstatSync(descriptor, { bigint: true });
-    if (!sameFile(metadata, before)) throw new Error('SNAPSHOT_STAND_CHANGED');
-    payload = fsImpl.readFileSync(descriptor);
-    const after = fsImpl.fstatSync(descriptor, { bigint: true });
-    if (!sameFile(before, after) || !sameFile(after, standMetadata(fsImpl, root, standPath))) {
-      throw new Error('SNAPSHOT_STAND_CHANGED');
-    }
-  } finally { fsImpl.closeSync(descriptor); }
-  const standSha256 = sha256(payload);
-  if (standSha256 !== exactSha(input.expectedStandSha256, 'expectedStandSha256')) {
-    throw new Error('SNAPSHOT_STAND_SHA256_MISMATCH');
-  }
-  let stand;
-  try { stand = JSON.parse(payload.toString('utf8')); }
-  catch { throw new Error('SNAPSHOT_STAND_INVALID_JSON'); }
-  if (stand?.schema !== STAND_SCHEMA || typeof stand.projectId !== 'string') {
-    throw new Error('SNAPSHOT_STAND_INVALID');
-  }
-  const snapshotSha256 = exactSha(stand.snapshotSha256, 'snapshotSha256');
-  if (snapshotSha256 !== exactSha(input.expectedSnapshotSha256, 'expectedSnapshotSha256')) {
-    throw new Error('SNAPSHOT_SHA256_MISMATCH');
-  }
-  if (stand.projectId !== input.projectId) throw new Error('SNAPSHOT_PROJECT_MISMATCH');
-  return Object.freeze({ root, standPath, standSha256, snapshotSha256, projectId: stand.projectId });
-}
-
-module.exports = { STAND_SCHEMA, verifyWorkspaceSnapshot };
+'use strict';
+
+const { createHash } = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+
+const STAND_SCHEMA = 'blun.snapshot-stand/v1';
+const SHA256_RE = /^[a-f0-9]{64}$/iu;
+
+function sha256(value) {
+  return createHash('sha256').update(value).digest('hex');
+}
+
+function exactSha(value, label) {
+  const digest = String(value || '').trim().toLowerCase();
+  if (!SHA256_RE.test(digest)) throw new Error(`${label} must be a SHA256 digest`);
+  return digest;
+}
+
+function isInside(root, candidate) {
+  const relative = path.relative(root, candidate);
+  return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));
+}
+
+function standMetadata(fsImpl, root, standPath) {
+  if (!isInside(root, standPath)) throw new Error('SNAPSHOT_STAND_OUTSIDE_WORKSPACE');
+  const parts = path.relative(root, standPath).split(path.sep);
+  let cursor = root;
+  let metadata;
+  for (let index = 0; index < parts.length; index++) {
+    cursor = path.join(cursor, parts[index]);
+    metadata = fsImpl.lstatSync(cursor, { bigint: true });
+    if (metadata.isSymbolicLink() || (index < parts.length - 1 ? !metadata.isDirectory() : !metadata.isFile())) {
+      throw new Error('SNAPSHOT_STAND_NOT_REGULAR');
+    }
+  }
+  if (!isInside(root, fsImpl.realpathSync(standPath))) throw new Error('SNAPSHOT_STAND_OUTSIDE_WORKSPACE');
+  return metadata;
+}
+
+function sameFile(left, right) {
+  return left.isFile() && right.isFile() && ['dev', 'ino', 'size', 'mtimeNs', 'ctimeNs']
+    .every(key => left[key] === right[key]);
+}
+
+function verifyWorkspaceSnapshot(input, options = {}) {
+  const fsImpl = options.fsImpl || fs;
+  const root = fsImpl.realpathSync(path.resolve(input.root));
+  const standPath = path.resolve(root, input.standFile || '.blun-snapshot-stand.json');
+  const metadata = standMetadata(fsImpl, root, standPath);
+  const descriptor = fsImpl.openSync(standPath, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW || 0));
+  let payload;
+  try {
+    const before = fsImpl.fstatSync(descriptor, { bigint: true });
+    if (!sameFile(metadata, before)) throw new Error('SNAPSHOT_STAND_CHANGED');
+    payload = fsImpl.readFileSync(descriptor);
+    const after = fsImpl.fstatSync(descriptor, { bigint: true });
+    if (!sameFile(before, after) || !sameFile(after, standMetadata(fsImpl, root, standPath))) {
+      throw new Error('SNAPSHOT_STAND_CHANGED');
+    }
+  } finally { fsImpl.closeSync(descriptor); }
+  const standSha256 = sha256(payload);
+  if (standSha256 !== exactSha(input.expectedStandSha256, 'expectedStandSha256')) {
+    throw new Error('SNAPSHOT_STAND_SHA256_MISMATCH');
+  }
+  let stand;
+  try { stand = JSON.parse(payload.toString('utf8')); }
+  catch { throw new Error('SNAPSHOT_STAND_INVALID_JSON'); }
+  if (stand?.schema !== STAND_SCHEMA || typeof stand.projectId !== 'string') {
+    throw new Error('SNAPSHOT_STAND_INVALID');
+  }
+  const snapshotSha256 = exactSha(stand.snapshotSha256, 'snapshotSha256');
+  if (snapshotSha256 !== exactSha(input.expectedSnapshotSha256, 'expectedSnapshotSha256')) {
+    throw new Error('SNAPSHOT_SHA256_MISMATCH');
+  }
+  if (stand.projectId !== input.projectId) throw new Error('SNAPSHOT_PROJECT_MISMATCH');
+  return Object.freeze({ root, standPath, standSha256, snapshotSha256, projectId: stand.projectId });
+}
+
+module.exports = { STAND_SCHEMA, verifyWorkspaceSnapshot };