@acpus/runtime 0.1.0

package/dist/supervisor-discovery.js

@@ -0,0 +1,186 @@
+/**
+ * Supervisor discovery and lazy ensure.
+ *
+ * `ensureWorkspaceSupervisor()` is the single entry point for CLI commands
+ * that need a running supervisor. It reads metadata, health-checks an existing
+ * supervisor, and spawns a new one if none is alive — with a lock to
+ * serialize concurrent ensure calls.
+ */
+import { readFileSync, rmSync, existsSync, openSync, closeSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { spawn } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { acquireSupervisorLock } from "./supervisor-lock.js";
+const SUPERVISOR_METADATA_FILE = "supervisor.json";
+/**
+ * Ensure a Run Supervisor is running for the given workspace.
+ * Returns its metadata on success, throws on failure.
+ */
+export async function ensureWorkspaceSupervisor(workspace, options) {
+    const absWorkspace = resolve(workspace);
+    const stateDir = join(absWorkspace, ".acpus", "state");
+    const metadataPath = join(stateDir, SUPERVISOR_METADATA_FILE);
+    // 1. Try existing metadata
+    const existing = tryReadMetadata(metadataPath);
+    if (existing) {
+        const validated = await validateExistingSupervisor(existing, absWorkspace);
+        if (validated)
+            return validated;
+        // Stale — clean up
+        try {
+            rmSync(metadataPath);
+        }
+        catch { /* ignore */ }
+    }
+    // 2. Acquire lock
+    const release = await acquireSupervisorLock(stateDir);
+    // 3. Re-check metadata (another process may have started supervisor while we waited)
+    try {
+        const afterLock = tryReadMetadata(metadataPath);
+        if (afterLock) {
+            const validated = await validateExistingSupervisor(afterLock, absWorkspace);
+            if (validated) {
+                await release();
+                return validated;
+            }
+            try {
+                rmSync(metadataPath);
+            }
+            catch { /* ignore */ }
+        }
+        // 4. Spawn supervisor
+        const metadata = await spawnSupervisor(absWorkspace, stateDir, options?.idleTimeoutMs);
+        return metadata;
+    }
+    finally {
+        await release();
+    }
+}
+function tryReadMetadata(path) {
+    if (!existsSync(path))
+        return undefined;
+    try {
+        const raw = readFileSync(path, "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+}
+async function validateExistingSupervisor(meta, expectedWorkspace) {
+    // Validate schema version
+    if (meta.schemaVersion !== 1)
+        return undefined;
+    // Validate workspace matches
+    if (resolve(meta.workspace) !== resolve(expectedWorkspace))
+        return undefined;
+    // Validate endpoint is localhost
+    if (!meta.endpoint.startsWith("http://127.0.0.1:"))
+        return undefined;
+    // Health check
+    try {
+        const res = await fetch(`${meta.endpoint}/health`);
+        if (!res.ok)
+            return undefined;
+        const health = await res.json();
+        if (!health.ok)
+            return undefined;
+        if (health.pid !== meta.pid)
+            return undefined;
+        if (health.endpoint !== meta.endpoint)
+            return undefined;
+        return meta;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function spawnSupervisor(workspace, stateDir, idleTimeoutMs) {
+    const metadataPath = join(stateDir, SUPERVISOR_METADATA_FILE);
+    // Resolve entry script path and command
+    const entry = resolveEntryPath();
+    const args = [...entry.args, "--state-dir", stateDir, "--workspace", workspace];
+    if (idleTimeoutMs !== undefined) {
+        args.push("--idle-timeout", String(idleTimeoutMs));
+    }
+    // Redirect stdout/stderr to supervisor.log
+    const logPath = join(stateDir, "supervisor.log");
+    let logFd;
+    try {
+        logFd = openSync(logPath, "a");
+    }
+    catch {
+        // If we can't open the log, use 'ignore'
+    }
+    // Build a filtered environment: pass through everything except known
+    // sensitive keys that the supervisor child has no business inheriting.
+    const SENSITIVE_PREFIXES = [
+        "AWS_", "GCP_", "GOOGLE_", "AZURE_", "VAULT_", "KUBERNETES_",
+        "DOCKER_", "SSH_", "GPG_", "PGPASS"
+    ];
+    const filteredEnv = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        if (value === undefined)
+            continue;
+        if (SENSITIVE_PREFIXES.some((p) => key.startsWith(p)))
+            continue;
+        filteredEnv[key] = value;
+    }
+    const child = spawn(entry.cmd, args, {
+        detached: true,
+        stdio: ["ignore", logFd ?? "ignore", logFd ?? "ignore"],
+        env: filteredEnv
+    });
+    child.unref();
+    // Close our copy of the log fd (child inherited it)
+    if (logFd !== undefined) {
+        try {
+            closeSync(logFd);
+        }
+        catch { /* ignore */ }
+    }
+    // Wait for supervisor.json to appear (poll every 100ms up to 15s)
+    const maxWaitMs = 15_000;
+    const start = Date.now();
+    try {
+        while (Date.now() - start < maxWaitMs) {
+            const meta = tryReadMetadata(metadataPath);
+            if (meta) {
+                // Health check the endpoint
+                try {
+                    const res = await fetch(`${meta.endpoint}/health`);
+                    if (res.ok)
+                        return meta;
+                }
+                catch { /* ignore */ }
+            }
+            await new Promise((r) => setTimeout(r, 100));
+        }
+        throw new Error(`Supervisor failed to start within ${maxWaitMs / 1000}s`);
+    }
+    catch (err) {
+        // Kill the orphaned child process if we timed out or failed
+        try {
+            child.kill("SIGKILL");
+        }
+        catch { /* ignore */ }
+        throw err;
+    }
+}
+/**
+ * Resolve the entry script path and command for spawning the supervisor.
+ * If running via tsx, use tsx to run the TypeScript source.
+ * If running as built JS, use node to run the compiled JS.
+ */
+function resolveEntryPath() {
+    const runtimeDir = fileURLToPath(new URL(".", import.meta.url));
+    const tsEntry = join(runtimeDir, "supervisor-entry.ts");
+    // If the TS source exists, we're in development mode (running from source via tsx)
+    if (existsSync(tsEntry)) {
+        return { cmd: "npx", args: ["tsx", tsEntry] };
+    }
+    // Production: use the compiled JS
+    const jsEntry = join(runtimeDir, "supervisor-entry.js");
+    return { cmd: "node", args: [jsEntry] };
+}
+//# sourceMappingURL=supervisor-discovery.js.map

package/dist/supervisor-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-discovery.js","sourceRoot":"","sources":["../src/supervisor-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,YAAY,EACZ,MAAM,EACN,UAAU,EACV,QAAQ,EACR,SAAS,EAEV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAiB,EACjB,OAAoC;IAEpC,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAE9D,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC3E,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,mBAAmB;QACnB,IAAI,CAAC;YAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAEtD,qFAAqF;IACrF,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAC5E,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,OAAO,EAAE,CAAC;gBAChB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,CAAC;gBAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,sBAAsB;QACtB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACvF,OAAO,QAAQ,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,IAAwB,EACxB,iBAAyB;IAEzB,0BAA0B;IAC1B,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/C,6BAA6B;IAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,iBAAiB,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7E,iCAAiC;IACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAAE,OAAO,SAAS,CAAC;IAErE,eAAe;IACf,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuD,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QACjC,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC9C,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,QAAgB,EAChB,aAAsB;IAEtB,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAE9D,wCAAwC;IACxC,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IAEjC,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IAChF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,2CAA2C;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACjD,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,kBAAkB,GAAG;QACzB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa;QAC5D,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ;KACpC,CAAC;IACF,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAChE,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;QACnC,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,QAAQ,EAAE,KAAK,IAAI,QAAQ,CAAC;QACvD,GAAG,EAAE,WAAW;KACjB,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,oDAAoD;IACpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC;YAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,kEAAkE;IAClE,MAAM,SAAS,GAAG,MAAM,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YAC3C,IAAI,IAAI,EAAE,CAAC;gBACT,4BAA4B;gBAC5B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,SAAS,CAAC,CAAC;oBACnD,IAAI,GAAG,CAAC,EAAE;wBAAE,OAAO,IAAI,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4DAA4D;QAC5D,IAAI,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACrD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB;IACvB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAExD,mFAAmF;IACnF,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,kCAAkC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACxD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AAC1C,CAAC"}

package/dist/supervisor-entry.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Supervisor entry point — minimal CLI for spawning as a child process.
+ *
+ * This is the target of `ensureWorkspaceSupervisor()`. It accepts only
+ * --state-dir (required), --workspace (required), and --idle-timeout (optional), then starts
+ * the Run Supervisor and blocks until shutdown.
+ *
+ * No Commander, no argument parsing beyond these two flags.
+ */
+export {};
+//# sourceMappingURL=supervisor-entry.d.ts.map

package/dist/supervisor-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-entry.d.ts","sourceRoot":"","sources":["../src/supervisor-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/supervisor-entry.js

@@ -0,0 +1,50 @@
+/**
+ * Supervisor entry point — minimal CLI for spawning as a child process.
+ *
+ * This is the target of `ensureWorkspaceSupervisor()`. It accepts only
+ * --state-dir (required), --workspace (required), and --idle-timeout (optional), then starts
+ * the Run Supervisor and blocks until shutdown.
+ *
+ * No Commander, no argument parsing beyond these two flags.
+ */
+import { resolve, join } from "node:path";
+import { openSync } from "node:fs";
+import { startRunSupervisor } from "./supervisor-runner.js";
+function parseArgs(args) {
+    let stateDir;
+    let workspace;
+    let idleTimeoutMs;
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === "--state-dir" && args[i + 1]) {
+            stateDir = args[++i];
+        }
+        else if (args[i] === "--workspace" && args[i + 1]) {
+            workspace = args[++i];
+        }
+        else if (args[i] === "--idle-timeout" && args[i + 1]) {
+            idleTimeoutMs = parseInt(args[++i], 10);
+        }
+    }
+    if (!stateDir) {
+        console.error("--state-dir is required");
+        process.exit(1);
+    }
+    if (!workspace) {
+        console.error("--workspace is required");
+        process.exit(1);
+    }
+    return { stateDir: resolve(stateDir), workspace: resolve(workspace), idleTimeoutMs };
+}
+// Redirect stdout/stderr to supervisor.log
+const logPath = join(resolve(parseArgs(process.argv.slice(2)).stateDir), "supervisor.log");
+const logFd = openSync(logPath, "a");
+const { stateDir, workspace, idleTimeoutMs } = parseArgs(process.argv.slice(2));
+startRunSupervisor({
+    stateDir,
+    workspace,
+    idleTimeoutMs
+}).catch((err) => {
+    console.error("Supervisor failed to start:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=supervisor-entry.js.map

package/dist/supervisor-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-entry.js","sourceRoot":"","sources":["../src/supervisor-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,SAAS,SAAS,CAAC,IAAc;IAC/B,IAAI,QAA4B,CAAC;IACjC,IAAI,SAA6B,CAAC;IAClC,IAAI,aAAiC,CAAC;IAEtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7C,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACpD,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,gBAAgB,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvD,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;AACvF,CAAC;AAED,2CAA2C;AAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAC3F,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAErC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhF,kBAAkB,CAAC;IACjB,QAAQ;IACR,SAAS;IACT,aAAa;CACd,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/supervisor-lock.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Supervisor lock management using proper-lockfile.
+ *
+ * Provides a single entry point `acquireSupervisorLock()` that wraps
+ * `proper-lockfile.lock()` with the correct configuration for
+ * serializing concurrent `ensureWorkspaceSupervisor()` calls.
+ *
+ * The lock targets the Workspace state directory and creates a
+ * `supervisor.lock` directory as the lock marker.
+ */
+/**
+ * Acquire the supervisor lock for the given state directory.
+ *
+ * Returns a release callback that must be called when the lock is
+ * no longer needed (typically after the supervisor has been spawned
+ * and its metadata is confirmed).
+ *
+ * Configuration:
+ * - `stale: 20_000` — locks older than 20s are considered stale
+ *   (max spawn time is ~15s, giving 5s margin)
+ * - `update: 2_000` — mtime updated every 2s while lock is held
+ * - `retries: 30 × 500ms` — total wait up to 15s for competing processes
+ * - `onCompromised: 'warn'` — log but don't throw if lock is tampered
+ */
+export declare function acquireSupervisorLock(stateDir: string): Promise<() => Promise<void>>;
+//# sourceMappingURL=supervisor-lock.d.ts.map

package/dist/supervisor-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-lock.d.ts","sourceRoot":"","sources":["../src/supervisor-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAsB9B"}

package/dist/supervisor-lock.js

@@ -0,0 +1,49 @@
+/**
+ * Supervisor lock management using proper-lockfile.
+ *
+ * Provides a single entry point `acquireSupervisorLock()` that wraps
+ * `proper-lockfile.lock()` with the correct configuration for
+ * serializing concurrent `ensureWorkspaceSupervisor()` calls.
+ *
+ * The lock targets the Workspace state directory and creates a
+ * `supervisor.lock` directory as the lock marker.
+ */
+import lockfile from "proper-lockfile";
+import { mkdirSync } from "node:fs";
+import { join } from "node:path";
+const LOCK_NAME = "supervisor.lock";
+/**
+ * Acquire the supervisor lock for the given state directory.
+ *
+ * Returns a release callback that must be called when the lock is
+ * no longer needed (typically after the supervisor has been spawned
+ * and its metadata is confirmed).
+ *
+ * Configuration:
+ * - `stale: 20_000` — locks older than 20s are considered stale
+ *   (max spawn time is ~15s, giving 5s margin)
+ * - `update: 2_000` — mtime updated every 2s while lock is held
+ * - `retries: 30 × 500ms` — total wait up to 15s for competing processes
+ * - `onCompromised: 'warn'` — log but don't throw if lock is tampered
+ */
+export async function acquireSupervisorLock(stateDir) {
+    // Ensure state directory exists
+    mkdirSync(stateDir, { recursive: true });
+    const lockPath = join(stateDir, LOCK_NAME);
+    const release = await lockfile.lock(stateDir, {
+        stale: 20_000,
+        update: 2_000,
+        retries: {
+            retries: 30,
+            minTimeout: 500,
+            maxTimeout: 500,
+        },
+        // lockfilePath must be an absolute path pointing inside the locked directory
+        lockfilePath: lockPath,
+        onCompromised: (err) => {
+            console.warn(`Supervisor lock compromised: ${err.message}`);
+        },
+    });
+    return release;
+}
+//# sourceMappingURL=supervisor-lock.js.map

package/dist/supervisor-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-lock.js","sourceRoot":"","sources":["../src/supervisor-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAEpC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAgB;IAEhB,gCAAgC;IAChC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE;QAC5C,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SAChB;QACD,6EAA6E;QAC7E,YAAY,EAAE,QAAQ;QACtB,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,OAAO,CAAC,IAAI,CAAC,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/supervisor-runner.d.ts

@@ -0,0 +1,11 @@
+import type { SupervisorConfig, SupervisorMetadata } from "./types.js";
+/**
+ * Start the acpus Run Supervisor process.
+ *
+ * Binds to a random port (127.0.0.1:0), writes supervisor.json for discovery,
+ * handles graceful shutdown, startup recovery, and idle timeout.
+ *
+ * Returns the bound metadata so the caller (supervisor-entry) can signal readiness.
+ */
+export declare function startRunSupervisor(config?: SupervisorConfig): Promise<SupervisorMetadata>;
+//# sourceMappingURL=supervisor-runner.d.ts.map

package/dist/supervisor-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-runner.d.ts","sourceRoot":"","sources":["../src/supervisor-runner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAKvE;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,GAAE,gBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA8HnG"}

package/dist/supervisor-runner.js

@@ -0,0 +1,128 @@
+import { createSupervisorApp } from "./supervisor-app.js";
+import { RunStore } from "./store.js";
+import { AgentExecutor } from "./executors/agent.js";
+import { ProgramExecutor } from "./executors/program.js";
+import { writeFileSync, mkdirSync, rmSync, existsSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { serve } from "@hono/node-server";
+/**
+ * Start the acpus Run Supervisor process.
+ *
+ * Binds to a random port (127.0.0.1:0), writes supervisor.json for discovery,
+ * handles graceful shutdown, startup recovery, and idle timeout.
+ *
+ * Returns the bound metadata so the caller (supervisor-entry) can signal readiness.
+ */
+export async function startRunSupervisor(config = {}) {
+    const host = config.host ?? "127.0.0.1";
+    const port = config.port ?? 0; // 0 = random port
+    const workspace = resolve(config.workspace ?? process.cwd());
+    const stateDir = config.stateDir ?? join(workspace, ".acpus", "state");
+    config = { ...config, stateDir, workspace }; // Write computed paths back for createSupervisorApp.
+    const idleTimeoutMs = config.idleTimeoutMs ?? 5 * 60 * 1000; // 5 min default
+    const metadataFile = join(stateDir, "supervisor.json");
+    // Ensure state directory exists
+    mkdirSync(stateDir, { recursive: true });
+    const store = new RunStore(join(stateDir, "runs"));
+    const agentExecutor = new AgentExecutor();
+    const programExecutor = new ProgramExecutor();
+    // Startup recovery: reset orphaned running nodes to pending, set Run to paused.
+    // Only Runs with status "running" are recovered (crash, no graceful shutdown).
+    // After a graceful shutdown, paused nodes remain paused and the Run stays paused.
+    // The operator uses `acpus runs resume <runId>` to continue.
+    for (const runId of store.listRunIds()) {
+        const meta = store.readRunMeta(runId);
+        if (meta?.status === "running") {
+            let anyReset = false;
+            for (const nodeState of store.listNodeStates(runId)) {
+                // A node persisted as `running` or `awaiting` has no live execution or
+                // approval resolver after a crash, so reset it to `pending` so the
+                // resumed Run re-executes it (an awaiting Approval Gate re-awaits).
+                if (nodeState.state === "running" || nodeState.state === "awaiting") {
+                    nodeState.state = "pending";
+                    store.writeNodeState(runId, nodeState);
+                    anyReset = true;
+                }
+            }
+            if (anyReset) {
+                meta.status = "paused";
+                meta.updatedAt = new Date().toISOString();
+                store.writeRunMeta(runId, meta);
+            }
+        }
+    }
+    const { app, getLastActiveAt, runningCount, setHealthOverrides } = createSupervisorApp(config, store, agentExecutor, programExecutor);
+    // Start the HTTP server on random port
+    let httpServer;
+    const startedAt = new Date().toISOString();
+    let boundPort = 0;
+    await new Promise((resolve) => {
+        httpServer = serve({ fetch: app.fetch, port, hostname: host }, (info) => {
+            boundPort = info.port;
+            console.log(`acpus supervisor listening on ${info.address}:${info.port}`);
+            resolve();
+        });
+    });
+    const endpoint = `http://127.0.0.1:${boundPort}`;
+    // Write supervisor metadata for discovery
+    const metadata = {
+        schemaVersion: 1,
+        workspace,
+        pid: process.pid,
+        endpoint,
+        startedAt,
+        version: "0.1.0"
+    };
+    writeFileSync(metadataFile, JSON.stringify(metadata, null, 2), "utf8");
+    // Push health overrides so GET /health reports the correct endpoint/startedAt
+    setHealthOverrides({ startedAt, endpoint });
+    // ─── Idle shutdown ───────────────────────────────────────────────
+    const idleCheckInterval = setInterval(() => {
+        if (Date.now() - getLastActiveAt() > idleTimeoutMs && runningCount() === 0) {
+            console.log("Supervisor idle timeout — shutting down.");
+            shutdown();
+        }
+    }, 30_000);
+    // ─── Graceful shutdown ───────────────────────────────────────────
+    let shuttingDown = false;
+    function shutdown() {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        console.log("Shutting down supervisor...");
+        clearInterval(idleCheckInterval);
+        // Save all running nodes as paused, set Run metadata to paused
+        for (const runId of store.listRunIds()) {
+            const meta = store.readRunMeta(runId);
+            if (meta?.status === "running") {
+                for (const nodeState of store.listNodeStates(runId)) {
+                    if (nodeState.state === "running") {
+                        nodeState.state = "paused";
+                        store.writeNodeState(runId, nodeState);
+                    }
+                }
+                meta.status = "paused";
+                meta.updatedAt = new Date().toISOString();
+                store.writeRunMeta(runId, meta);
+            }
+        }
+        // Remove metadata file
+        try {
+            if (existsSync(metadataFile))
+                rmSync(metadataFile);
+        }
+        catch { /* ignore */ }
+        // Close the HTTP server gracefully, then exit
+        if (httpServer) {
+            httpServer.close(() => process.exit(0));
+            setTimeout(() => process.exit(0), 5000);
+        }
+        else {
+            process.exit(0);
+        }
+    }
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+    return metadata;
+}
+//# sourceMappingURL=supervisor-runner.js.map

package/dist/supervisor-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-runner.js","sourceRoot":"","sources":["../src/supervisor-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAA2B,EAAE;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,kBAAkB;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvE,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,qDAAqD;IAClG,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,gBAAgB;IAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAEvD,gCAAgC;IAChC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC1C,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAE9C,gFAAgF;IAChF,+EAA+E;IAC/E,kFAAkF;IAClF,6DAA6D;IAC7D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpD,uEAAuE;gBACvE,mEAAmE;gBACnE,oEAAoE;gBACpE,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACpE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC;oBAC5B,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;oBACvC,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACvB,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC1C,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,mBAAmB,CACpF,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,CAC9C,CAAC;IAEF,uCAAuC;IACvC,IAAI,UAAgD,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,UAAU,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;YACtE,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,oBAAoB,SAAS,EAAE,CAAC;IAEjD,0CAA0C;IAC1C,MAAM,QAAQ,GAAuB;QACnC,aAAa,EAAE,CAAC;QAChB,SAAS;QACT,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ;QACR,SAAS;QACT,OAAO,EAAE,OAAO;KACjB,CAAC;IACF,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvE,8EAA8E;IAC9E,kBAAkB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE5C,oEAAoE;IAEpE,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;QACzC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,aAAa,IAAI,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,oEAAoE;IAEpE,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,SAAS,QAAQ;QACf,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAE3C,aAAa,CAAC,iBAAiB,CAAC,CAAC;QAEjC,+DAA+D;QAC/D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpD,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;wBAClC,SAAS,CAAC,KAAK,GAAG,QAAQ,CAAC;wBAC3B,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACvB,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC1C,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,YAAY,CAAC;gBAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAElF,8CAA8C;QAC9C,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhC,OAAO,QAAQ,CAAC;AAClB,CAAC"}