pi-subagents 0.80.0 → 0.82.0

package/bundle/chunk-RMQFMMAT.js

@@ -0,0 +1,416 @@
+// src/runs/shared/rex-machine.ts
+import { spawnSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+var REX_LOCAL_MACHINE = "local";
+var REX_EXIT_GONE = 3;
+var REX_EXIT_UNREACHABLE = 4;
+function isRexLocalMachine(machine) {
+  return machine?.provider === "rex" && !("target" in machine);
+}
+var REX_BUNDLE_BIN = "Library/Application Support/com.superlogical.rex/RexServer/Versions/Current/Rex Server.app/Contents/MacOS/rex";
+var REX_CALL_TIMEOUT_MS = 15e3;
+var REX_MAX_OUTPUT = 1024 * 1024;
+function rexGlobalArgs(server) {
+  return server ? ["--autostart=false", "-S", server] : ["--autostart=false"];
+}
+function executable(file) {
+  try {
+    fs.accessSync(file, fs.constants.X_OK);
+    return fs.statSync(file).isFile();
+  } catch {
+    return false;
+  }
+}
+function resolveRexBinary(env = process.env) {
+  const fromDir = env.REX_BIN_DIR ? [path.join(env.REX_BIN_DIR, "rex")] : [];
+  const fromPath = (env.PATH ?? "").split(path.delimiter).filter((dir) => path.isAbsolute(dir)).map((dir) => path.join(dir, "rex"));
+  const found = [...fromDir, ...fromPath, path.join(os.homedir(), REX_BUNDLE_BIN)].find(executable);
+  if (!found) throw new Error("The Rex CLI was not found: set REX_BIN_DIR, put rex on PATH, or install Rex.");
+  return found;
+}
+function rexCommandEnv(source = process.env) {
+  const { REX_SESSION: _session, REX_BLOCK: _block, REX_SERVER: _server, ...env } = source;
+  return env;
+}
+function sessionConfirmed(stdout, session) {
+  try {
+    const parsed = JSON.parse(stdout);
+    return parsed?.session_id === session;
+  } catch {
+    return false;
+  }
+}
+function resolveRexLocalPlacement(input) {
+  if (process.platform === "win32") throw new Error("Machine 'local' runs the child in a Rex pane, which is not supported on Windows.");
+  const env = input.env ?? process.env, session = env.REX_SESSION?.trim(), server = env.REX_SERVER?.trim();
+  if (!session) throw new Error("Machine 'local' opens the child in a new tab of this Rex session, but this Pi is not running inside Rex (REX_SESSION is not set).");
+  const result = spawnSync(resolveRexBinary(env), [...rexGlobalArgs(server), "session", "inspect", session, "--json"], { encoding: "utf8", env: rexCommandEnv(env), timeout: REX_CALL_TIMEOUT_MS, maxBuffer: REX_MAX_OUTPUT, windowsHide: true });
+  if (result.error) throw new Error(`Could not ask Rex about this session: ${result.error.message}`, { cause: result.error });
+  if (result.status === REX_EXIT_GONE) throw new Error(`Machine 'local' needs this Pi's Rex session, but the Rex server does not know session ${session}.`);
+  if (result.status === REX_EXIT_UNREACHABLE) throw new Error("Machine 'local' needs the Rex server, but it is unreachable.");
+  if (result.status !== 0) throw new Error(`rex session inspect exited with code ${result.status}: ${(result.stderr || result.stdout).trim().slice(0, 512)}`);
+  if (!sessionConfirmed(result.stdout, session)) throw new Error(`The Rex server did not confirm session ${session}.`);
+  const stepCwd = input.stepCwd?.trim();
+  const home = stepCwd === "~" || stepCwd?.startsWith("~/") ? path.join(os.homedir(), stepCwd.slice(1)) : void 0;
+  const requested = home ?? (stepCwd ? path.resolve(input.cwd, stepCwd) : input.cwd);
+  let cwd;
+  try {
+    cwd = fs.realpathSync(requested);
+  } catch (error) {
+    throw new Error(`Machine 'local' cwd does not exist: ${requested}.`, { cause: error });
+  }
+  if (!fs.statSync(cwd).isDirectory()) throw new Error(`Machine 'local' cwd is not a directory: ${requested}.`);
+  const machine = { provider: "rex", id: REX_LOCAL_MACHINE, session, cwd };
+  if (server) machine.server = server;
+  return machine;
+}
+
+// src/runs/shared/herdr-connection.ts
+import { spawn, spawnSync as spawnSync2 } from "node:child_process";
+import * as fs2 from "node:fs";
+import * as net from "node:net";
+import * as os2 from "node:os";
+import * as path2 from "node:path";
+var MAX_DISCOVERY_BYTES = 256 * 1024;
+var MAX_RPC_BYTES = 4 * 1024 * 1024;
+var SUBSCRIPTION_ACK_TIMEOUT_MS = 15e3;
+var HERDR_REMOTE_PATH = "$HOME/.local/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin";
+var HERDR_SSH_BASE = ["-T", "-o", "BatchMode=yes", "-o", "NumberOfPasswordPrompts=0", "-o", "StrictHostKeyChecking=yes", "-o", "ConnectTimeout=10", "-o", "ConnectionAttempts=1", "-o", "ForwardAgent=no", "-o", "ExitOnForwardFailure=yes", "-o", "ServerAliveInterval=15", "-o", "ServerAliveCountMax=4", "-o", "SendEnv=-*", "-o", "SetEnv=PI_SUBAGENTS_SSH_GUARD="];
+function hardenedSshEnv(source = process.env) {
+  return { PATH: process.platform === "win32" ? source.PATH : "/usr/bin:/bin:/usr/sbin:/sbin", ...source.SystemRoot ? { SystemRoot: source.SystemRoot } : {}, ...source.WINDIR ? { WINDIR: source.WINDIR } : {} };
+}
+function herdrSshArgs(source = process.env) {
+  return [...HERDR_SSH_BASE, ...source.SSH_AUTH_SOCK ? ["-o", `IdentityAgent=${source.SSH_AUTH_SOCK}`] : []];
+}
+var HerdrRpcError = class extends Error {
+  code;
+  requestId;
+  constructor(message, requestId, code) {
+    super(message);
+    this.name = "HerdrRpcError";
+    this.requestId = requestId;
+    this.code = code;
+  }
+};
+var HerdrTransportError = class extends Error {
+  constructor(message, options) {
+    super(message, options);
+    this.name = "HerdrTransportError";
+  }
+};
+function decodeHerdrJsonLine(line) {
+  try {
+    return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(line));
+  } catch {
+    throw new Error("Herdr emitted malformed JSON or UTF-8.");
+  }
+}
+function shellQuoteRemote(value) {
+  return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function remoteShellCommand(script, args = []) {
+  return `sh -c ${shellQuoteRemote(`PATH="${HERDR_REMOTE_PATH}"; export PATH; ${script}`)} sh${args.map((arg) => ` ${shellQuoteRemote(arg)}`).join("")}`;
+}
+function canonicalHerdrSession(session) {
+  return session && session !== "default" ? session : null;
+}
+function sshEnvCommand(session, command) {
+  const selected = canonicalHerdrSession(session), assignment = selected ? ` HERDR_SESSION=${shellQuoteRemote(selected)}` : "";
+  return `/usr/bin/env -u HERDR_SOCKET_PATH -u HERDR_SESSION${assignment} ${remoteShellCommand(command)}`;
+}
+function runHerdrRemoteCommand(machine, command, options = {}) {
+  return spawnSync2(options.sshBin ?? "ssh", [...herdrSshArgs(options.env), machine.target, command], { encoding: "utf8", env: hardenedSshEnv(options.env), timeout: options.timeout ?? 15e3, maxBuffer: options.maxBuffer ?? MAX_DISCOVERY_BYTES, windowsHide: true });
+}
+function runHerdrRemoteCommandAsync(machine, command, options = {}) {
+  return runBoundedCommand(options.sshBin ?? "ssh", [...herdrSshArgs(options.env), machine.target, command], { env: hardenedSshEnv(options.env), timeout: options.timeout, maxBuffer: options.maxBuffer });
+}
+function runBoundedCommand(file, args, options) {
+  return new Promise((resolve2) => {
+    const child = spawn(file, args, { env: options.env, stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
+    const stdout = [], stderr = [], maxBuffer = options.maxBuffer ?? MAX_DISCOVERY_BYTES;
+    let stdoutBytes = 0, stderrBytes = 0, error, settled = false, escalation;
+    const finish = (status, spawnError = error) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      if (escalation) clearTimeout(escalation);
+      resolve2({ status, stdout: Buffer.concat(stdout).toString("utf8"), stderr: Buffer.concat(stderr).toString("utf8"), ...spawnError ? { error: spawnError } : {} });
+    };
+    const terminate = () => {
+      child.kill("SIGTERM");
+      escalation ??= setTimeout(() => {
+        if (!settled) {
+          child.kill("SIGKILL");
+          finish(child.exitCode ?? null);
+        }
+      }, 1e3);
+      escalation.unref?.();
+    };
+    const collect = (target, stream) => (chunk) => {
+      const bytes = stream === "stdout" ? stdoutBytes += chunk.byteLength : stderrBytes += chunk.byteLength;
+      if (bytes > maxBuffer) {
+        error ??= new Error(`${stream} maxBuffer length exceeded`);
+        terminate();
+      } else target.push(chunk);
+    };
+    child.stdout.on("data", collect(stdout, "stdout"));
+    child.stderr.on("data", collect(stderr, "stderr"));
+    child.once("error", (spawnError) => finish(null, spawnError));
+    child.once("close", (status) => finish(status));
+    const timer = setTimeout(terminate, options.timeout ?? 15e3);
+    timer.unref?.();
+  });
+}
+function parseHerdrEndpoint(value, expectedSession) {
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    throw new Error("Remote Herdr endpoint discovery returned malformed JSON.");
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Remote Herdr endpoint discovery returned no endpoint.");
+  const p = parsed;
+  if (typeof p.socket !== "string" || !path2.posix.isAbsolute(p.socket) || typeof p.version !== "string" || typeof p.protocol !== "number") throw new Error("Remote Herdr endpoint discovery returned incomplete identity.");
+  const session = canonicalHerdrSession(typeof p.session === "string" ? p.session : null), expected = canonicalHerdrSession(expectedSession);
+  if (expected !== session) throw new Error(`Remote Herdr session identity mismatch: expected ${expected ?? "default"}, received ${session ?? "default"}.`);
+  if (p.running !== true || p.compatible !== true || p.endpoint_compatible === false) throw new Error("The selected remote Herdr session is stopped or incompatible.");
+  return { socket: p.socket, session, version: p.version, protocol: p.protocol, compatible: true, running: true };
+}
+async function discoverHerdrEndpoint(machine, options = {}) {
+  const discovery = 'herdr_path=$(command -v herdr) || exit 127; case "$herdr_path" in /*/herdr) ;; *) exit 126;; esac; exec "$herdr_path" status server --json';
+  const result = await runHerdrRemoteCommandAsync(machine, sshEnvCommand(machine.session, discovery), { ...options, timeout: 15e3, maxBuffer: MAX_DISCOVERY_BYTES });
+  if (result.error) throw new Error(`Remote Herdr discovery failed: ${result.error.message}`);
+  if (result.status !== 0) throw new Error(`Remote Herdr discovery failed with code ${result.status}: ${(result.stderr || result.stdout).trim()}`);
+  return parseHerdrEndpoint(result.stdout, machine.session);
+}
+var SocketRpcClient = class {
+  #socketPath;
+  #subscriptionAckTimeoutMs;
+  #next = 0;
+  constructor(socketPath, subscriptionAckTimeoutMs = SUBSCRIPTION_ACK_TIMEOUT_MS) {
+    this.#socketPath = socketPath;
+    this.#subscriptionAckTimeoutMs = subscriptionAckTimeoutMs;
+  }
+  call(method, params = {}, timeoutMs = 15e3) {
+    return new Promise((resolve2, reject) => {
+      const socket = net.createConnection(this.#socketPath);
+      let bytes = 0;
+      let data = Buffer.alloc(0);
+      let finished = false;
+      const id = String(++this.#next);
+      const timer = setTimeout(() => finish(new HerdrTransportError(`Herdr RPC '${method}' timed out.`)), timeoutMs);
+      timer.unref?.();
+      const finish = (error, value) => {
+        if (finished) return;
+        finished = true;
+        clearTimeout(timer);
+        socket.destroy();
+        error ? reject(error) : resolve2(value);
+      };
+      socket.on("connect", () => socket.write(`${JSON.stringify({ id, method, params })}
+`));
+      socket.on("data", (chunk) => {
+        bytes += chunk.byteLength;
+        if (bytes > MAX_RPC_BYTES) {
+          finish(new Error("Herdr RPC response exceeded its byte bound."));
+          return;
+        }
+        data = Buffer.concat([data, chunk]);
+        const newline = data.indexOf(10);
+        if (newline < 0) return;
+        let frame;
+        try {
+          frame = decodeHerdrJsonLine(data.subarray(0, newline));
+        } catch {
+          finish(new Error("Herdr RPC returned malformed JSON or UTF-8."));
+          return;
+        }
+        const record = frame;
+        if (record.id !== id) {
+          finish(new Error("Herdr RPC response identity mismatch."));
+          return;
+        }
+        if (record.error) finish(new HerdrRpcError(String(record.error.message ?? "Herdr RPC failed."), id, typeof record.error.code === "string" ? record.error.code : void 0));
+        else finish(void 0, record.result);
+      });
+      socket.on("error", (error) => finish(new HerdrTransportError(error.message, { cause: error })));
+      socket.on("close", () => finish(new HerdrTransportError(`Herdr RPC '${method}' ended before a response.`)));
+    });
+  }
+  async subscribe(subscriptions, listener, onDisconnect) {
+    const socket = net.createConnection(this.#socketPath);
+    const id = String(++this.#next);
+    let buffer = Buffer.alloc(0), bytes = 0, acknowledged = false, intentional = false, notified = false, settled = false;
+    let resolveAck, rejectAck;
+    const acknowledgement = new Promise((resolve2, reject) => {
+      resolveAck = resolve2;
+      rejectAck = reject;
+    });
+    const failHandshake = (error) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      socket.destroy();
+      rejectAck(error);
+    };
+    const disconnect = (error) => {
+      if (intentional || notified) return;
+      notified = true;
+      if (!acknowledged) failHandshake(error);
+      else onDisconnect?.(error);
+    };
+    const timer = setTimeout(() => failHandshake(new Error("Herdr subscription acknowledgement timed out.")), this.#subscriptionAckTimeoutMs);
+    timer.unref?.();
+    socket.on("data", (chunk) => {
+      bytes += chunk.byteLength;
+      if (bytes > (acknowledged ? MAX_RPC_BYTES * 32 : MAX_RPC_BYTES)) {
+        disconnect(new Error("Herdr subscription exceeded its byte bound."));
+        socket.destroy();
+        return;
+      }
+      buffer = Buffer.concat([buffer, chunk]);
+      for (; ; ) {
+        const i = buffer.indexOf(10);
+        if (i < 0) break;
+        const line = buffer.subarray(0, i);
+        buffer = buffer.subarray(i + 1);
+        let value;
+        try {
+          value = decodeHerdrJsonLine(line);
+        } catch {
+          disconnect(new Error("Herdr subscription emitted malformed JSON or UTF-8."));
+          socket.destroy();
+          return;
+        }
+        const record = value;
+        if (!acknowledged) {
+          if (record.id === id) {
+            if (record.error) {
+              failHandshake(new HerdrRpcError(String(record.error.message ?? "Herdr subscription failed."), id, typeof record.error.code === "string" ? record.error.code : void 0));
+              return;
+            }
+            if (record.result?.type !== "subscription_started") {
+              failHandshake(new Error("Herdr subscription returned an invalid acknowledgement."));
+              return;
+            }
+            acknowledged = true;
+            settled = true;
+            clearTimeout(timer);
+            resolveAck();
+            continue;
+          }
+          if (record.id === "" && record.error && record.error.code === "invalid_request") {
+            failHandshake(new HerdrRpcError(String(record.error.message ?? "Herdr subscription request was invalid."), "", "invalid_request"));
+            return;
+          }
+          failHandshake(new Error("Herdr subscription emitted an event before acknowledgement."));
+          return;
+        }
+        if (record.error) {
+          disconnect(new HerdrRpcError(String(record.error.message ?? "Herdr subscription failed."), typeof record.id === "string" ? record.id : "", typeof record.error.code === "string" ? record.error.code : void 0));
+          socket.destroy();
+          return;
+        }
+        listener(value);
+      }
+    });
+    socket.on("error", (error) => disconnect(error));
+    socket.on("close", () => disconnect(new Error("Herdr subscription connection was lost.")));
+    socket.on("connect", () => socket.write(`${JSON.stringify({ id, method: "events.subscribe", params: { subscriptions } })}
+`));
+    await acknowledgement;
+    return () => {
+      intentional = true;
+      clearTimeout(timer);
+      socket.destroy();
+    };
+  }
+};
+async function waitForSocket(socketPath, child) {
+  for (let attempt = 0; attempt < 100; attempt++) {
+    if (child.exitCode !== null) throw new Error(`SSH StreamLocal forwarding exited with code ${child.exitCode}.`);
+    try {
+      const stat = fs2.lstatSync(socketPath);
+      if (stat.isSocket()) {
+        fs2.chmodSync(socketPath, 384);
+        return;
+      }
+    } catch {
+    }
+    await new Promise((resolve2) => setTimeout(resolve2, 25));
+  }
+  throw new Error("SSH StreamLocal forwarding did not create its local socket.");
+}
+async function terminateChild(child) {
+  const wait = (ms) => child.exitCode !== null || child.signalCode !== null ? Promise.resolve() : Promise.race([new Promise((resolve2) => child.once("exit", () => resolve2())), new Promise((resolve2) => setTimeout(resolve2, ms))]);
+  if (child.exitCode === null && child.signalCode === null) child.kill("SIGTERM");
+  await wait(1e3);
+  if (child.exitCode === null && child.signalCode === null) {
+    child.kill("SIGKILL");
+    await wait(1e3);
+  }
+}
+function openSshSockets(machine, options) {
+  const dir = fs2.mkdtempSync(path2.join(os2.tmpdir(), "pi-subagents-herdr-"));
+  fs2.chmodSync(dir, 448);
+  const children = /* @__PURE__ */ new Set();
+  const forward = async (remotePath, name) => {
+    if (!path2.posix.isAbsolute(remotePath)) throw new Error("Remote socket path must be absolute.");
+    const local = path2.join(dir, `${name}.sock`);
+    const child = spawn(options.sshBin ?? "ssh", [...herdrSshArgs(options.env), "-N", "-o", "StreamLocalBindUnlink=yes", "-L", `${local}:${remotePath}`, machine.target], { env: hardenedSshEnv(options.env), stdio: "ignore", windowsHide: true });
+    children.add(child);
+    const stop = async () => {
+      await terminateChild(child);
+      children.delete(child);
+      try {
+        fs2.rmSync(local, { force: true });
+      } catch {
+      }
+    };
+    try {
+      await waitForSocket(local, child);
+    } catch (error) {
+      await stop();
+      throw error;
+    }
+    return { socketPath: local, close: stop };
+  };
+  return { forwardRemoteSocket: forward, close: async () => {
+    await Promise.all([...children].map(terminateChild));
+    children.clear();
+    fs2.rmSync(dir, { recursive: true, force: true });
+  } };
+}
+function sshMachineAccess(machine, options = {}) {
+  return { shellCommand: remoteShellCommand, run: (command, limits = {}) => runHerdrRemoteCommand(machine, command, { ...options, ...limits }), runAsync: (command, limits = {}) => runHerdrRemoteCommandAsync(machine, command, { ...options, ...limits }), openSockets: () => openSshSockets(machine, options) };
+}
+async function connectHerdrMachine(machine, options = {}) {
+  if (process.platform === "win32") throw new Error("Pane-native Herdr placement requires OpenSSH StreamLocal forwarding and is not supported on Windows.");
+  const endpoint = await discoverHerdrEndpoint(machine, options);
+  const sockets = sshMachineAccess(machine, options).openSockets();
+  const primary = await sockets.forwardRemoteSocket(endpoint.socket, "herdr").catch(async (error) => {
+    await sockets.close();
+    throw error;
+  });
+  return { endpoint, socketPath: primary.socketPath, client: new SocketRpcClient(primary.socketPath), forwardRemoteSocket: sockets.forwardRemoteSocket, close: sockets.close };
+}
+
+export {
+  remoteShellCommand,
+  runBoundedCommand,
+  sshMachineAccess,
+  connectHerdrMachine,
+  REX_LOCAL_MACHINE,
+  REX_EXIT_GONE,
+  REX_EXIT_UNREACHABLE,
+  isRexLocalMachine,
+  REX_BUNDLE_BIN,
+  REX_CALL_TIMEOUT_MS,
+  REX_MAX_OUTPUT,
+  rexGlobalArgs,
+  resolveRexBinary,
+  rexCommandEnv,
+  resolveRexLocalPlacement
+};