switchroom 0.18.14 → 0.18.15

package/dist/host-control/main.js

@@ -20496,13 +20496,62 @@ async function waitForConfigRecovery(opts) {
   return config;
 }
 
-// src/agents/compose.ts
-import { createHash } from "node:crypto";
-
 // src/agents/scaffold.ts
 import { join as join5, resolve as resolve5 } from "node:path";
 init_atomic();
 
+// src/agents/agent-uid.ts
+import { createHash } from "node:crypto";
+
+// src/broker-common/peercred-path.ts
+function matchSocketName(socketPath, patterns, maxNameLen) {
+  if (typeof socketPath !== "string" || socketPath.length === 0)
+    return null;
+  let name = null;
+  for (const re of patterns) {
+    const m = socketPath.match(re);
+    if (m && typeof m[1] === "string") {
+      name = m[1];
+      break;
+    }
+  }
+  if (name === null || name.length === 0)
+    return null;
+  if (maxNameLen !== undefined && name.length > maxNameLen)
+    return null;
+  return name;
+}
+function parseSocketIdentity(socketPath, spec) {
+  const name = matchSocketName(socketPath, spec.patterns, spec.maxNameLen);
+  if (name === null)
+    return null;
+  const operatorName = spec.operatorName ?? "operator";
+  if (name === operatorName)
+    return { kind: "operator" };
+  if (spec.reservedNames.has(name))
+    return null;
+  return { kind: "agent", name };
+}
+
+// src/vault/broker/peercred.ts
+var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
+function isReservedAgentName(name) {
+  return RESERVED_AGENT_NAMES.has(name);
+}
+
+// src/agents/agent-uid.ts
+var AGENT_UID_MIN = 10001;
+var AGENT_UID_MAX = 10999;
+function allocateAgentUid(name) {
+  if (isReservedAgentName(name)) {
+    throw new Error(`agent name '${name}' is reserved by switchroom for another identity kind ` + `(see vault/broker/peercred.ts:RESERVED_AGENT_NAMES). Pick a different name.`);
+  }
+  const hash = createHash("sha256").update(name).digest();
+  const u32 = hash.readUInt32BE(0);
+  const range = AGENT_UID_MAX - AGENT_UID_MIN + 1;
+  return AGENT_UID_MIN + u32 % range;
+}
+
 // src/config/timezone.ts
 var CONTAINER_DEFAULT_UTC_ZONES = new Set([
   "UTC",
@@ -20648,42 +20697,6 @@ import * as fs from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { join as join4 } from "node:path";
 
-// src/broker-common/peercred-path.ts
-function matchSocketName(socketPath, patterns, maxNameLen) {
-  if (typeof socketPath !== "string" || socketPath.length === 0)
-    return null;
-  let name = null;
-  for (const re of patterns) {
-    const m = socketPath.match(re);
-    if (m && typeof m[1] === "string") {
-      name = m[1];
-      break;
-    }
-  }
-  if (name === null || name.length === 0)
-    return null;
-  if (maxNameLen !== undefined && name.length > maxNameLen)
-    return null;
-  return name;
-}
-function parseSocketIdentity(socketPath, spec) {
-  const name = matchSocketName(socketPath, spec.patterns, spec.maxNameLen);
-  if (name === null)
-    return null;
-  const operatorName = spec.operatorName ?? "operator";
-  if (name === operatorName)
-    return { kind: "operator" };
-  if (spec.reservedNames.has(name))
-    return null;
-  return { kind: "agent", name };
-}
-
-// src/vault/broker/peercred.ts
-var RESERVED_AGENT_NAMES = new Set(["operator", "hostd"]);
-function isReservedAgentName(name) {
-  return RESERVED_AGENT_NAMES.has(name);
-}
-
 // src/vault/broker/protocol.ts
 var MAX_FRAME_BYTES = 64 * 1024;
 var AgentNameSchema = exports_external.string().min(1).max(64, "agent name max 64 chars").regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/, "agent name must be kebab-case ASCII (alnum + _- only, first char alnum)").refine((s) => !isReservedAgentName(s), {
@@ -21131,17 +21144,6 @@ var DOCKER_TELEGRAM_PLUGIN_PATH = "/opt/switchroom/telegram-plugin";
 var DOCKER_HOOKS_PATH = `${DOCKER_TELEGRAM_PLUGIN_PATH}/hooks`;
 
 // src/agents/compose.ts
-var AGENT_UID_MIN = 10001;
-var AGENT_UID_MAX = 10999;
-function allocateAgentUid(name) {
-  if (isReservedAgentName(name)) {
-    throw new Error(`agent name '${name}' is reserved by switchroom for another identity kind ` + `(see vault/broker/peercred.ts:RESERVED_AGENT_NAMES). Pick a different name.`);
-  }
-  const hash = createHash("sha256").update(name).digest();
-  const u32 = hash.readUInt32BE(0);
-  const range = AGENT_UID_MAX - AGENT_UID_MIN + 1;
-  return AGENT_UID_MIN + u32 % range;
-}
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
 // src/host-control/server.ts
@@ -26587,7 +26589,7 @@ import { existsSync as existsSync9, readFileSync as readFileSync7 } from "node:f
 import { dirname as dirname4, join as join7 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.18.14";
+var VERSION = "0.18.15";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {

package/dist/vault/approvals/kernel-server.js

@@ -18893,12 +18893,27 @@ function getNonce(db, request_id) {
 }
 
 // src/agents/compose.ts
-import { createHash } from "node:crypto";
 init_schema();
 
 // src/agents/scaffold.ts
 import { join as join4, resolve as resolve5 } from "node:path";
 init_atomic();
+
+// src/agents/agent-uid.ts
+import { createHash } from "node:crypto";
+var AGENT_UID_MIN = 10001;
+var AGENT_UID_MAX = 10999;
+function allocateAgentUid(name) {
+  if (isReservedAgentName(name)) {
+    throw new Error(`agent name '${name}' is reserved by switchroom for another identity kind ` + `(see vault/broker/peercred.ts:RESERVED_AGENT_NAMES). Pick a different name.`);
+  }
+  const hash = createHash("sha256").update(name).digest();
+  const u32 = hash.readUInt32BE(0);
+  const range = AGENT_UID_MAX - AGENT_UID_MIN + 1;
+  return AGENT_UID_MIN + u32 % range;
+}
+
+// src/agents/scaffold.ts
 init_schema();
 
 // src/config/users.ts
@@ -19100,17 +19115,6 @@ init_merge();
 init_paths();
 
 // src/agents/compose.ts
-var AGENT_UID_MIN = 10001;
-var AGENT_UID_MAX = 10999;
-function allocateAgentUid(name) {
-  if (isReservedAgentName(name)) {
-    throw new Error(`agent name '${name}' is reserved by switchroom for another identity kind ` + `(see vault/broker/peercred.ts:RESERVED_AGENT_NAMES). Pick a different name.`);
-  }
-  const hash = createHash("sha256").update(name).digest();
-  const u32 = hash.readUInt32BE(0);
-  const range = AGENT_UID_MAX - AGENT_UID_MIN + 1;
-  return AGENT_UID_MIN + u32 % range;
-}
 var BIND_MOUNT_EXACT_SOURCE_DENY = new Set(["/var/run/docker.sock"]);
 
 // src/vault/approvals/acl.ts