sootsim 0.1.185 → 0.1.186

package/dist-lib/vite.cjs

@@ -1,4 +1,4 @@
-/*! sootsim v0.1.185 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
+/*! sootsim v0.1.186 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
 let __sootsim_import_meta_url = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; } catch {}
 "use strict";
 var __create = Object.create;
@@ -109,7 +109,32 @@ function isDaemonLockfileFresh(lock, now = Date.now()) {
 // src/runtime-assets.ts
 var import_fs = __toESM(require("fs"), 1);
 var import_path = __toESM(require("path"), 1);
+var import_url = require("url");
 var SOOTSIM_RUNTIME_MISSING_MESSAGE = "[sootsim] no engine runtime installed \u2014 run `sootsim setup`, or `sootsim runtime install`";
+var _monorepoRootCache;
+function findMonorepoRoot() {
+  if (_monorepoRootCache !== void 0) return _monorepoRootCache;
+  let dir = import_path.default.dirname((0, import_url.fileURLToPath)(__sootsim_import_meta_url));
+  for (let i = 0; i < 12 && dir !== import_path.default.dirname(dir); i++) {
+    if (import_fs.default.existsSync(import_path.default.join(dir, "packages/sootsim-engine/package.json")) && import_fs.default.existsSync(import_path.default.join(dir, "public/sootsim"))) {
+      _monorepoRootCache = dir;
+      return dir;
+    }
+    dir = import_path.default.dirname(dir);
+  }
+  _monorepoRootCache = null;
+  return null;
+}
+function resolveDevCheckoutRuntimeRoot() {
+  if (process.env.SOOTSIM_HOME && readActiveRuntime()) return null;
+  const root = findMonorepoRoot();
+  if (!root) return null;
+  const devBuild = import_path.default.join(root, "public/sootsim");
+  if (import_fs.default.existsSync(import_path.default.join(devBuild, "index.html")) && import_fs.default.existsSync(import_path.default.join(devBuild, "engine/index.html")) && import_fs.default.existsSync(import_path.default.join(devBuild, "engine-tenant/worker.js"))) {
+    return devBuild;
+  }
+  return null;
+}
 var MIME_TYPES = {
   ".js": "application/javascript",
   ".mjs": "application/javascript",
@@ -145,6 +170,8 @@ var ROOT_RUNTIME_PATHS = [
   "/preview-sw.js"
 ];
 function resolveActiveRuntimeRoot() {
+  const devRoot = resolveDevCheckoutRuntimeRoot();
+  if (devRoot) return devRoot;
   const active = readActiveRuntime();
   if (!active) return null;
   const dir = runtimeDir(active);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sootsim",
-  "version": "0.1.185",
+  "version": "0.1.186",
   "description": "sootsim CLI + vite/metro plugins + skills registry. bridge client for driving the proprietary sootsim-engine over WebSocket.",
   "author": "Tamagui LLC",
   "license": "MIT",

package/src/home-paths.ts

@@ -332,6 +332,12 @@ export interface DevBridgeLockfile {
   platform: NodeJS.Platform
   bridgePort: number
   runtimePort: number
+  /** http port of the vite shell dev server that owns this bridge (e.g. 5173).
+   *  optional: lockfiles written before this field existed still parse, and
+   *  readers fall back to the default shell URL. this is what lets the CLI
+   *  resolve the shell base URL and the bridge port from the SAME world
+   *  instead of mixing dev bridge + daemon runtime (the split-brain bug). */
+  shellPort?: number
   cwd: string
   startedAt: number
   heartbeatAt: number
@@ -387,7 +393,8 @@ export function readDevBridgeLockfile(): DevBridgeLockfile | null {
         typeof parsed.runtimePort === 'number' &&
         typeof parsed.cwd === 'string' &&
         typeof parsed.startedAt === 'number' &&
-        typeof parsed.heartbeatAt === 'number'
+        typeof parsed.heartbeatAt === 'number' &&
+        (parsed.shellPort === undefined || typeof parsed.shellPort === 'number')
       ) {
         return parsed as DevBridgeLockfile
       }

package/src/host/bridge-host.ts

@@ -30,6 +30,7 @@ import {
   type DevBridgeLockfile,
   type SharedConfig,
 } from '../home-paths.ts'
+import { resolveDevCheckoutRuntimeRoot } from '../runtime-assets.ts'
 import { updateRuntimeToLatest } from '../runtime-delivery.ts'
 import { AgentHost, type AgentHostOptions } from './agent-host.ts'
 import {
@@ -224,6 +225,11 @@ export interface BridgeHostOptions {
    *  this so local CLI commands prefer the live source bridge over a standalone
    *  daemon or stale default-port listener. */
   writeDevLockfile?: boolean
+  /** resolve the http port of the vite shell dev server that hosts this
+   *  bridge (e.g. 5173). called on every dev-lockfile write so the port
+   *  fills in once the vite server is actually listening. only meaningful
+   *  with writeDevLockfile. */
+  getShellPort?: () => number | null
   /** the sootbean origin this daemon's runtimes should talk to for auth,
    *  billing, and preview uploads — inlined into served runtime html as
    *  `window.__sootsimSootbeanOrigin`. without it the engine's origin.ts
@@ -397,6 +403,7 @@ export class SootSimBridgeHost {
   private automationSimActiveGraceMs: number
   private shouldWriteLockfile: boolean
   private shouldWriteDevLockfile: boolean
+  private getShellPort: (() => number | null) | null
   private sootbeanOrigin: string | null = null
   private effectivePort = 0
   private startedAt = 0
@@ -431,6 +438,7 @@ export class SootSimBridgeHost {
     // default off — callers that want the lockfile (sootsim serve) opt in.
     this.shouldWriteLockfile = opts.writeLockfile === true
     this.shouldWriteDevLockfile = opts.writeDevLockfile === true
+    this.getShellPort = opts.getShellPort ?? null
     // fallback freely on port collision regardless of who owns the lockfile.
     // serve.ts already refuses to start if a fresh daemon.json exists, so
     // two daemons can't race the lockfile. without this, an unrelated process
@@ -1164,12 +1172,14 @@ export class SootSimBridgeHost {
   }
 
   private buildDevLockfileSnapshot(): DevBridgeLockfile {
+    const shellPort = this.getShellPort?.() ?? null
     return {
       schema: 1,
       pid: process.pid,
       platform: process.platform,
       bridgePort: this.effectivePort,
       runtimePort: this.effectivePort,
+      ...(shellPort && shellPort > 0 ? { shellPort } : {}),
       cwd: process.cwd(),
       startedAt: this.startedAt,
       heartbeatAt: Date.now(),
@@ -1187,7 +1197,11 @@ export class SootSimBridgeHost {
 
   private refreshActiveRuntime() {
     this.activeRuntimeVersion = readActiveRuntime()
-    this.activeRuntimeDirPath = getActiveRuntimeDir()
+    // mode boundary (see runtime-assets resolveDevCheckoutRuntimeRoot): inside
+    // the soot monorepo dev checkout serve the fresh dev-stack build so local
+    // engine edits reach previews without a publish; otherwise the installed
+    // runtime. the version above stays the installed version for display.
+    this.activeRuntimeDirPath = resolveDevCheckoutRuntimeRoot() ?? getActiveRuntimeDir()
   }
 
   private runServerScan(): Promise<DiscoveredServer[]> {

package/src/runtime-assets.ts

@@ -4,11 +4,78 @@
 
 import fs from 'fs'
 import path from 'path'
+import { fileURLToPath } from 'url'
 import { readActiveRuntime, runtimeDir } from './home-paths'
 
 export const SOOTSIM_RUNTIME_MISSING_MESSAGE =
   '[sootsim] no engine runtime installed — run `sootsim setup`, or `sootsim runtime install`'
 
+// --- dev-checkout mode boundary --------------------------------------------
+//
+// there is exactly one rule for which engine gets served: INSIDE the soot
+// monorepo dev checkout the fresh dev-stack build (public/sootsim, kept current
+// by `bun dev`'s watch:sootsim) IS the engine; OUTSIDE it (a published CLI in a
+// user's project, or an isolated home) the installed runtime IS. this is a mode
+// boundary, not a preference or a runtime fallback chain — the check is
+// structural (the monorepo layout is present next to this module) and
+// deterministic (the dev build's files exist). it exists because the daemon and
+// the /__soot plugin otherwise serve ~/.sootsim/runtimes/<active>, a PUBLISHED
+// runtime that `bun dev` never refreshes, so local engine edits are invisible
+// until a manual publish — the silent trap that cost a full night of
+// already-fixed bugs re-reproducing.
+//
+// the isolated CI headless path (scripts/local-publish-runtime.sh) sets
+// SOOTSIM_HOME to a dedicated dir precisely to validate the published-runtime
+// code path; keying off that EXISTING isolation env keeps it (and packaged
+// electron with a custom home) on the installed runtime.
+let _monorepoRootCache: string | null | undefined
+
+function findMonorepoRoot(): string | null {
+  if (_monorepoRootCache !== undefined) return _monorepoRootCache
+  let dir = path.dirname(fileURLToPath(import.meta.url))
+  // walk up until we find the soot monorepo: it has packages/sootsim-engine and
+  // a public/sootsim dev-build output slot. bounded by the filesystem root.
+  for (let i = 0; i < 12 && dir !== path.dirname(dir); i++) {
+    if (
+      fs.existsSync(path.join(dir, 'packages/sootsim-engine/package.json')) &&
+      fs.existsSync(path.join(dir, 'public/sootsim'))
+    ) {
+      _monorepoRootCache = dir
+      return dir
+    }
+    dir = path.dirname(dir)
+  }
+  _monorepoRootCache = null
+  return null
+}
+
+/** the fresh dev-stack engine build to serve when running inside the soot
+ *  monorepo dev checkout, or null when the installed runtime should serve
+ *  (published CLI, packaged electron, or an isolated SOOTSIM_HOME). */
+export function resolveDevCheckoutRuntimeRoot(): string | null {
+  // an explicit home that has a STAGED/active runtime is the isolation the
+  // CI/local-publish path sets up to validate the installed-runtime code path —
+  // honor that staged runtime. an explicit home with NO active runtime is just
+  // an isolated dev daemon (own lockfile, doesn't clobber ~/.sootsim), which
+  // still wants the dev build; and the default home (SOOTSIM_HOME unset) always
+  // does. keying on "explicit home + a runtime deliberately staged there" keeps
+  // it structural, not a bespoke toggle.
+  if (process.env.SOOTSIM_HOME && readActiveRuntime()) return null
+  const root = findMonorepoRoot()
+  if (!root) return null
+  const devBuild = path.join(root, 'public/sootsim')
+  // require the runtime shape the installed runtime also has, so serving it is
+  // a drop-in (index.html shell + engine/ + engine-tenant/worker.js tenant).
+  if (
+    fs.existsSync(path.join(devBuild, 'index.html')) &&
+    fs.existsSync(path.join(devBuild, 'engine/index.html')) &&
+    fs.existsSync(path.join(devBuild, 'engine-tenant/worker.js'))
+  ) {
+    return devBuild
+  }
+  return null
+}
+
 const MIME_TYPES: Record<string, string> = {
   '.js': 'application/javascript',
   '.mjs': 'application/javascript',
@@ -46,6 +113,9 @@ const ROOT_RUNTIME_PATHS = [
 ]
 
 export function resolveActiveRuntimeRoot(): string | null {
+  // mode boundary: inside the dev checkout the dev-stack build is the engine.
+  const devRoot = resolveDevCheckoutRuntimeRoot()
+  if (devRoot) return devRoot
   const active = readActiveRuntime()
   if (!active) return null
   const dir = runtimeDir(active)

package/src/vite-plugin.ts

@@ -598,6 +598,15 @@ export function wsBridgePlugin(): Plugin {
               portOffset: process.env.PORT_OFFSET,
             }),
             writeDevLockfile: true,
+            // resolved on every lockfile heartbeat: the address is null until
+            // vite's http server is listening, then the real bound port. lets
+            // CLI commands resolve the shell base URL from the same lockfile
+            // that names the bridge port (one world, no split-brain).
+            getShellPort: () => {
+              const addr = server.httpServer?.address()
+              if (addr && typeof addr === 'object') return addr.port
+              return server.config.server.port || null
+            },
           })
           bridgeHost.start?.({ silent: true })
         })

package/dist-cli/chunks/beta-X6YPQVZH.js

@@ -1,2 +0,0 @@
-/*! sootsim v0.1.185 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{a,b,c,d}from"./chunk-M3P67TBN.js";import"./chunk-GX6MKIFC.js";export{d as BETA_ASK_HEADLINE,b as BETA_LABEL,c as BETA_TAGLINE,a as IS_BETA};

package/dist-cli/chunks/chunk-7OAUPGLN.js

@@ -1,23 +0,0 @@
-/*! sootsim v0.1.185 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */
-import{a as A,d as W,f as x}from"./chunk-E5DE33BU.js";import{I as v,J as P,K as T,L as C,j as k}from"./chunk-BI56RR3G.js";import{WebSocket as I}from"ws";function E(){if(k()){let n=P();if(n&&C(n))return n.bridgePort}let e=v();return e&&T(e)?e.bridgePort:7668}var w=class extends Error{lock;constructor(n,i){super(n),this.name="BridgeSimLockedError",this.lock=i}};function L(e){return e==="flag"?"via --sim":e==="saved"?"saved via `sootsim use`":"primary fallback \u2014 no sim pinned"}function V(e,n={}){let i=new Set,a=n.port??E(),l=n.commandTimeoutMs??15e3,r,m="none",h=new Set(n.stripBooleanFlags??[]),b=new Set(n.stripValueFlags??[]);for(let t=0;t<e.length;t++){let d=e[t];if(d==="--port"||d==="-p"){i.add(t),t+1<e.length&&(i.add(t+1),a=Number(e[t+1])),t++;continue}if(d.startsWith("--port=")){i.add(t),a=Number(d.slice(7));continue}if(d==="--timeout"){i.add(t),t+1<e.length&&(i.add(t+1),l=Number(e[t+1])),t++;continue}if(d==="--sim"||d==="--session"||d==="--tab"){i.add(t),t+1<e.length&&(i.add(t+1),r=e[t+1]?.trim()||void 0,m="flag"),t++;continue}let s=d.startsWith("--sim=")?d.slice(6):d.startsWith("--session=")?d.slice(10):d.startsWith("--tab=")?d.slice(6):void 0;if(s!==void 0){i.add(t),r=s.trim()||void 0,m="flag";continue}if(h.has(d)){i.add(t);continue}b.has(d)&&(i.add(t),t+1<e.length&&i.add(t+1),t++)}if(!r){let t=W();t&&(r=t.trim()||void 0,m="saved")}return{positional:e.filter((t,d)=>!i.has(d)),wsPort:a,simId:r,simIdSource:m,commandTimeoutMs:l}}function M(e,n={}){let i=1,a=n.commandTimeoutMs??15e3,l=new Map,r=new I(`ws://localhost:${e}`),m=A(),h=new Promise((s,o)=>{r.on("open",()=>{try{r.send(JSON.stringify({type:"bridge:hello",id:0,cliIdentityKey:m.key,cliIdentitySource:m.source,cliLabel:n.cliLabel}))}catch{}s()}),r.on("error",c=>{let g=c.message?`: ${c.message}`:"";o(new Error(`could not connect to ws://localhost:${e}${g}`))})}),b=!1,t=!1;function d(s,o){if(t||process.env.SOOTSIM_QUIET_TARGET_NOTICE==="1"||s.startsWith("bridge:")||s==="focus"||s==="close")return;t=!0;let c=o??"primary",g=L(o?n.simIdSource:"none");process.stderr.write(`  \u2192 ${c} (${g})
-`)}return r.on("message",s=>{let o;try{o=JSON.parse(s.toString())}catch{return}if(o.id===0)return;let c=l.get(o.id);c&&(l.delete(o.id),o._otherCliCount>0&&!b&&(b=!0,process.stderr.write(`
-  \u26A0 ${o._otherCliCount} other CLI identity/identities are driving this sim
-  taps, scrolls, and keyboard input from multiple agents will collide on
-  the same screen state (this is not a bridge throughput limit).
-  use \`sootsim open --new\` for an isolated sim per agent.
-
-`)),o.error?o._locked?c.reject(new w(o.error,o._locked)):c.reject(new Error(o.error)):c.resolve(o.result))}),r.on("close",(s,o)=>{let c=o?.toString()||"connection closed";for(let[g,u]of l)l.delete(g),u.reject(new Error(`sim disconnected: ${c} (code ${s})`))}),{async send(s,o){let c=o?.timeoutMs??a,g=async u=>{await h;let f=i++;return new Promise((F,S)=>{let B=setTimeout(()=>{l.delete(f),S(new Error(`command timed out after ${Math.round(c/1e3)}s`))},c);l.set(f,{resolve:p=>{clearTimeout(B),F(p)},reject:p=>{clearTimeout(B),S(p)}});let y={...s,id:f};y.simId===void 0&&u&&(y.simId=u),d(s.type??"",y.simId),r.send(JSON.stringify(y))})};try{return await g(n.simId)}catch(u){let f=u instanceof Error?u.message:String(u);throw n.simIdSource==="saved"&&n.simId&&s.simId===void 0&&f===`no sim connected with id ${n.simId}`?(x(),new Error(`saved sim ${n.simId} is gone; run \`sootsim list\` and \`sootsim use <sim>\`, or open a fresh sim`)):u}},async listSims(){let s=await this.send({type:"bridge:list-sims"});return Array.isArray(s)?s:[]},async openUrl(s,o={}){return this.send({type:"bridge:open",url:s,newWindow:o.newWindow===!0})},async focusSim(s){return this.send({type:"focus",simId:s})},async closeSim(s){return this.send({type:"close",simId:s})},async claim(s,o={}){return await this.send({type:"bridge:claim",simId:s,force:o.force===!0})},close(){try{r.readyState===I.OPEN&&r.send(JSON.stringify({type:"bridge:bye",id:0}))}catch{}r.close();let s=setTimeout(()=>{r.readyState!==I.CLOSED&&r.terminate()},250)}}}function j(e){return M(e.wsPort,{commandTimeoutMs:e.commandTimeoutMs,simId:e.simId,simIdSource:e.simIdSource})}function O(e,n){let i=e.filter(r=>r.readyState==="open"&&r.id!==n),a=i.find(r=>r.userFocused)??i.find(r=>r.userVisible===!0&&r.isPrimary)??i.find(r=>r.userVisible===!0)??i.find(r=>r.isPrimary);if(!a)return null;let l=[a.isPrimary?"primary":null,a.userVisible===!1?"hidden":a.userVisible===!0?"visible":null,a.userFocused?"focused":null].filter(Boolean);return`${a.id}${l.length?` [${l.join(", ")}]`:""}`}async function q(e){try{let n=await e.send({type:"evaluate",code:`(() => ({
-        hidden: document.hidden,
-        visibilityState: document.visibilityState,
-        hasFocus: typeof document.hasFocus === 'function' ? document.hasFocus() : null,
-        simId: window.__sootsimBridge?.id ?? window.SootSim?.state?.simId ?? null,
-        url: location.href
-      }))()`}),i=typeof n=="object"&&n!==null?n:{hidden:n===!0};if(i.hidden===!0===!0){let l=null;try{l=O(await e.listSims(),i.simId)}catch{}return process.stderr.write(`
-  \u26A0 target sim${i.simId?` ${i.simId}`:""} is hidden (document.hidden = true)
-`+(i.visibilityState?`  visibility: ${i.visibilityState}
-`:"")+`  animations and rAF callbacks are throttled \u2014 coordinates may be wrong
-  and launch/transition animations will not complete.
-`+(l?`  another open sim looks usable: ${l}; target it with --sim.
-`:"  run `sootsim list` to find the visible sim and target it with --sim.\n")+`  page-level window.focus() cannot unhide a browser tab.
-
-`),{hidden:!0,warned:!0,simId:i.simId}}return{hidden:!1,warned:!1,simId:i.simId}}catch{return{hidden:!1,warned:!1}}}async function J(e,n,i={}){let a={type:"evaluate",code:n};return i.acquireLock&&(a.acquireLock=!0),e.send(a)}async function U(e,n,...i){return e.send({type:"call",path:n,args:i})}async function H(e,n,...i){return e.send({type:"call",path:n,args:i,acquireLock:!0})}export{E as a,w as b,V as c,M as d,j as e,q as f,J as g,U as h,H as i};

package/dist-cli/chunks/chunk-IGJHME3T.js

@@ -1 +0,0 @@
-/*! sootsim v0.1.185 | (c) 2026 Tamagui LLC | Proprietary — see LICENSE */