@almyty/runner 1.2.0

package/dist/coding-agents/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/coding-agents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/coding-sessions.d.ts

@@ -0,0 +1,80 @@
+import { ProcessManager } from './process-manager.js';
+import { type CodingAgentSpec } from './coding-agents/index.js';
+import { type SpawnOptions } from './types.js';
+/**
+ * Daemon-side registry of interactive coding sessions — the runner half of
+ * the chat-to-runner coding bridge.
+ *
+ * A coding session is one spawned coding CLI (claude, codex, gemini, ...)
+ * driven line-based over stdio (pipe mode, NOT a PTY — full terminal
+ * emulation is deliberately out of scope for v1). Output chunks are
+ * ANSI-stripped and pushed upstream as `coding.output` event envelopes via
+ * the emitter the daemon wires in (the same channel heartbeats ride); exit
+ * is pushed as `coding.exit`.
+ *
+ * Sessions are namespaced under a synthetic workspace (`coding:<sessionId>`)
+ * so they reuse the ProcessManager's bookkeeping, capacity accounting, and
+ * cross-workspace isolation without inventing a parallel process table.
+ */
+export interface CodingStartInput {
+    /** The task prompt handed to the CLI as its final positional argument. */
+    task: string;
+    /** Working directory; defaults to the daemon user's home. */
+    cwd?: string;
+    /** Model pin, where the CLI supports a plain --model flag. */
+    model?: string;
+    /** Extra argv appended before the task. */
+    extraArgs?: string[];
+}
+export interface CodingSessionRecord {
+    sessionId: string;
+    /** Coding-agent platform id (claude, codex, ...). */
+    agent: string;
+    binary: string;
+    processId: string;
+    workspaceId: string;
+    cwd: string;
+    task: string;
+    startedAt: string;
+    status: 'running' | 'exited' | 'killed';
+    exitCode: number | null;
+}
+export type CodingEventPayload = {
+    kind: 'coding.output';
+    sessionId: string;
+    agent: string;
+    data: string;
+    seq: number;
+} | {
+    kind: 'coding.exit';
+    sessionId: string;
+    agent: string;
+    exitCode: number | null;
+    signal: string | null;
+};
+export type CodingEmitter = (payload: CodingEventPayload) => void;
+export declare class CodingSessionManager {
+    private readonly processes;
+    private readonly emit;
+    private readonly sessions;
+    constructor(processes: ProcessManager, emit: CodingEmitter);
+    /**
+     * Build the SpawnOptions for a session WITHOUT starting it, so the caller
+     * (handlers.ts) can run the result through the execution policy first —
+     * the same gate process.spawn and agent.spawn go through.
+     */
+    buildStartOptions(spec: CodingAgentSpec, input: CodingStartInput): SpawnOptions;
+    /** Spawn the CLI and start streaming its output as coding.* events. */
+    start(spec: CodingAgentSpec, input: CodingStartInput, opts: SpawnOptions): Promise<CodingSessionRecord>;
+    /** Write a line of input to the session's stdin. */
+    input(sessionId: string, data: string): void;
+    /** Snapshot one session (throws if unknown). */
+    status(sessionId: string): CodingSessionRecord & {
+        idleMs: number | null;
+    };
+    /** All sessions, newest last. */
+    list(): CodingSessionRecord[];
+    /** Stop a session (TERM by default, KILL when force). Idempotent. */
+    stop(sessionId: string, force?: boolean): CodingSessionRecord;
+    private getOrThrow;
+}

package/dist/coding-sessions.js

@@ -0,0 +1,121 @@
+import { randomUUID } from 'crypto';
+import { homedir } from 'os';
+import { buildAgentSpawn, stripVtEscapes, } from './coding-agents/index.js';
+import { RunnerError, RUNNER_ERROR_CODES } from './types.js';
+export class CodingSessionManager {
+    processes;
+    emit;
+    sessions = new Map();
+    constructor(processes, emit) {
+        this.processes = processes;
+        this.emit = emit;
+    }
+    /**
+     * Build the SpawnOptions for a session WITHOUT starting it, so the caller
+     * (handlers.ts) can run the result through the execution policy first —
+     * the same gate process.spawn and agent.spawn go through.
+     */
+    buildStartOptions(spec, input) {
+        const opts = buildAgentSpawn(spec, {
+            autoApprove: true,
+            model: input.model,
+            cwd: input.cwd ?? homedir(),
+            extraArgs: [...(input.extraArgs ?? []), input.task],
+        });
+        // Line-based stdio for v1: no PTY, stdout/stderr piped and merged.
+        opts.pty = false;
+        return opts;
+    }
+    /** Spawn the CLI and start streaming its output as coding.* events. */
+    async start(spec, input, opts) {
+        const sessionId = `cs_${randomUUID()}`;
+        const workspaceId = `coding:${sessionId}`;
+        const handle = await this.processes.spawn(workspaceId, opts);
+        const record = {
+            sessionId,
+            agent: spec.id,
+            binary: opts.binary,
+            processId: handle.processId,
+            workspaceId,
+            cwd: opts.cwd ?? homedir(),
+            task: input.task,
+            startedAt: new Date().toISOString(),
+            status: 'running',
+            exitCode: null,
+        };
+        const session = { record, seq: 0, unsubscribe: () => { } };
+        session.unsubscribe = this.processes.observe(workspaceId, handle.processId, {
+            onData: (chunk) => {
+                // Strip ANSI/VT sequences so the chat transcript gets plain text.
+                // Escape sequences split across chunk boundaries can leak fragments;
+                // acceptable for v1 line-based output.
+                const clean = stripVtEscapes(chunk);
+                if (!clean)
+                    return;
+                session.seq += 1;
+                this.emit({
+                    kind: 'coding.output',
+                    sessionId,
+                    agent: spec.id,
+                    data: clean,
+                    seq: session.seq,
+                });
+            },
+            onExit: (info) => {
+                record.status = info.signal ? 'killed' : 'exited';
+                record.exitCode = info.exitCode;
+                session.unsubscribe();
+                this.emit({
+                    kind: 'coding.exit',
+                    sessionId,
+                    agent: spec.id,
+                    exitCode: info.exitCode,
+                    signal: info.signal,
+                });
+            },
+        });
+        this.sessions.set(sessionId, session);
+        return record;
+    }
+    /** Write a line of input to the session's stdin. */
+    input(sessionId, data) {
+        const session = this.getOrThrow(sessionId);
+        if (session.record.status !== 'running') {
+            throw new RunnerError(`coding session ${sessionId} has already exited`, RUNNER_ERROR_CODES.PROCESS_ALREADY_EXITED);
+        }
+        const line = data.endsWith('\n') ? data : `${data}\n`;
+        this.processes.write(session.record.workspaceId, session.record.processId, line);
+    }
+    /** Snapshot one session (throws if unknown). */
+    status(sessionId) {
+        const session = this.getOrThrow(sessionId);
+        let idleMs = null;
+        try {
+            idleMs = this.processes.snapshot(session.record.workspaceId, session.record.processId).idleMs;
+        }
+        catch {
+            // Process already forgotten; the record still answers.
+        }
+        return { ...session.record, idleMs };
+    }
+    /** All sessions, newest last. */
+    list() {
+        return [...this.sessions.values()].map((s) => ({ ...s.record }));
+    }
+    /** Stop a session (TERM by default, KILL when force). Idempotent. */
+    stop(sessionId, force = false) {
+        const session = this.getOrThrow(sessionId);
+        if (session.record.status === 'running') {
+            this.processes.signal(session.record.workspaceId, session.record.processId, force ? 'KILL' : 'TERM');
+        }
+        return { ...session.record };
+    }
+    getOrThrow(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            throw new RunnerError(`unknown coding session ${sessionId}`, RUNNER_ERROR_CODES.PROCESS_NOT_FOUND);
+        }
+        return session;
+    }
+}
+//# sourceMappingURL=coding-sessions.js.map

package/dist/coding-sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-sessions.js","sourceRoot":"","sources":["../src/coding-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,cAAc,GAEf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAqB,MAAM,YAAY,CAAC;AA6DhF,MAAM,OAAO,oBAAoB;IAIZ;IACA;IAJF,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEvD,YACmB,SAAyB,EACzB,IAAmB;QADnB,cAAS,GAAT,SAAS,CAAgB;QACzB,SAAI,GAAJ,IAAI,CAAe;IACnC,CAAC;IAEJ;;;;OAIG;IACH,iBAAiB,CAAC,IAAqB,EAAE,KAAuB;QAC9D,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE;YACjC,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE;YAC3B,SAAS,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;SACpD,CAAC,CAAC;QACH,mEAAmE;QACnE,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,KAAK,CACT,IAAqB,EACrB,KAAuB,EACvB,IAAkB;QAElB,MAAM,SAAS,GAAG,MAAM,UAAU,EAAE,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,UAAU,SAAS,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAwB;YAClC,SAAS;YACT,KAAK,EAAE,IAAI,CAAC,EAAE;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW;YACX,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,IAAI;SACf,CAAC;QAEF,MAAM,OAAO,GAAY,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;QACnE,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE;YAC1E,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAChB,kEAAkE;gBAClE,qEAAqE;gBACrE,uCAAuC;gBACvC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,eAAe;oBACrB,SAAS;oBACT,KAAK,EAAE,IAAI,CAAC,EAAE;oBACd,IAAI,EAAE,KAAK;oBACX,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACf,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAClD,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAChC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,aAAa;oBACnB,SAAS;oBACT,KAAK,EAAE,IAAI,CAAC,EAAE;oBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,SAAiB,EAAE,IAAY;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,WAAW,CACnB,kBAAkB,SAAS,qBAAqB,EAChD,kBAAkB,CAAC,sBAAsB,CAC1C,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;IAED,gDAAgD;IAChD,MAAM,CAAC,SAAiB;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAC9B,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,MAAM,CAAC,SAAS,CACzB,CAAC,MAAM,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;QACD,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IAED,iCAAiC;IACjC,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,qEAAqE;IACrE,IAAI,CAAC,SAAiB,EAAE,KAAK,GAAG,KAAK;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,SAAS,CAAC,MAAM,CACnB,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CACxB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC/B,CAAC;IAEO,UAAU,CAAC,SAAiB;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACnB,0BAA0B,SAAS,EAAE,EACrC,kBAAkB,CAAC,iBAAiB,CACrC,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/config.d.ts

@@ -0,0 +1,49 @@
+import { ResolvedConfig } from './types.js';
+/**
+ * Config layering, lowest precedence first:
+ *
+ *   1. Built-in defaults (most restrictive: container isolation,
+ *      no network, no installs)
+ *   2. ~/.almyty/config.json                                  (global user)
+ *   3. ./.almyty/config.json                                  (project-local)
+ *   4. Environment variables (ALMYTY_*)
+ *   5. CLI flags
+ *
+ * Backend overrides apply at registration time and only constrain
+ * (lower limits, smaller path allowlists, more deny patterns); they
+ * never escalate. Backend overrides aren't applied here — they merge
+ * in after the runner registers and the backend returns its
+ * effective config.
+ *
+ * The format mirrors the convention `@almyty/auth` already established:
+ * plain JSON, owner-readable, in `~/.almyty/`. No TOML, no YAML, no
+ * cosmiconfig.
+ */
+export declare const DEFAULT_BINARY_PROBE_LIST: string[];
+export declare const DEFAULT_BACKEND_URL = "https://api.almyty.com";
+export declare const DEFAULTS: ResolvedConfig;
+export declare const GLOBAL_CONFIG_PATH: string;
+export declare const PROJECT_CONFIG_PATH: string;
+/**
+ * Inputs to the loader, after argv has been parsed but before any
+ * file IO. The loader stays pure-ish: it takes filesystem readers and
+ * env as parameters so tests can substitute them without monkey-
+ * patching `fs` or `process.env`.
+ */
+export interface LoadConfigInputs {
+    /** CLI flag overrides. Highest precedence. */
+    flags?: Partial<ResolvedConfig> & {
+        configPath?: string;
+    };
+    /** Explicit env map. Defaults to process.env at call site. */
+    env?: Record<string, string | undefined>;
+    /** Filesystem reader. Defaults to fs.readFileSync. */
+    readFile?: (path: string) => string | null;
+    /** File existence check. */
+    exists?: (path: string) => boolean;
+    /** Override global config path (testing). */
+    globalPath?: string;
+    /** Override project config path (testing). */
+    projectPath?: string;
+}
+export declare function loadConfig(inputs?: LoadConfigInputs): ResolvedConfig;

package/dist/config.js

@@ -0,0 +1,180 @@
+import { existsSync, readFileSync } from 'fs';
+import { homedir } from 'os';
+import { join, isAbsolute, resolve as pathResolve } from 'path';
+import { allProbeBinaries } from './coding-agents/index.js';
+/**
+ * Config layering, lowest precedence first:
+ *
+ *   1. Built-in defaults (most restrictive: container isolation,
+ *      no network, no installs)
+ *   2. ~/.almyty/config.json                                  (global user)
+ *   3. ./.almyty/config.json                                  (project-local)
+ *   4. Environment variables (ALMYTY_*)
+ *   5. CLI flags
+ *
+ * Backend overrides apply at registration time and only constrain
+ * (lower limits, smaller path allowlists, more deny patterns); they
+ * never escalate. Backend overrides aren't applied here — they merge
+ * in after the runner registers and the backend returns its
+ * effective config.
+ *
+ * The format mirrors the convention `@almyty/auth` already established:
+ * plain JSON, owner-readable, in `~/.almyty/`. No TOML, no YAML, no
+ * cosmiconfig.
+ */
+export const DEFAULT_BINARY_PROBE_LIST = [
+    // language runtimes, VCS, package managers, container runtimes
+    'node', 'python', 'python3', 'git',
+    'npm', 'pip', 'cargo', 'go', 'rustc',
+    'docker', 'podman',
+    // every coding-agent CLI we support (claude, codex, gemini, cursor-agent,
+    // opencode, crush, copilot, grok, hermes, vibe, openclaw, aider, + aliases)
+    ...allProbeBinaries(),
+];
+export const DEFAULT_BACKEND_URL = 'https://api.almyty.com';
+export const DEFAULTS = {
+    name: '',
+    labels: {},
+    config: {
+        // Most-restrictive defaults: container isolation, no installs,
+        // no network. Users opt out of any of these explicitly in config
+        // or via flags; the design point is that an unconfigured runner
+        // is the safest one.
+        defaultIsolation: 'container',
+        maxConcurrent: 4,
+        allowedCwdRoots: [],
+        denyPatterns: [],
+        networkBlocked: true,
+        installBlocked: true,
+    },
+    binaryProbeList: DEFAULT_BINARY_PROBE_LIST,
+    backendUrl: DEFAULT_BACKEND_URL,
+};
+export const GLOBAL_CONFIG_PATH = join(homedir(), '.almyty', 'config.json');
+export const PROJECT_CONFIG_PATH = join(process.cwd(), '.almyty', 'config.json');
+export function loadConfig(inputs = {}) {
+    const env = inputs.env ?? process.env;
+    const readFile = inputs.readFile ?? safeRead;
+    const exists = inputs.exists ?? existsSync;
+    const globalPath = inputs.globalPath ?? GLOBAL_CONFIG_PATH;
+    const projectPath = inputs.projectPath ?? PROJECT_CONFIG_PATH;
+    let resolved = clone(DEFAULTS);
+    // Layer 2: global config file.
+    if (exists(globalPath)) {
+        resolved = mergeIn(resolved, parseConfigFile(readFile(globalPath), globalPath));
+    }
+    // Layer 3: project-local config file.
+    if (exists(projectPath)) {
+        resolved = mergeIn(resolved, parseConfigFile(readFile(projectPath), projectPath));
+    }
+    // Layer 3.5: explicit --config <path> takes precedence over both
+    // global and project, but the spec orders it as a flag (layer 4).
+    // Treat it as a flag-driven file load: same precedence as flags.
+    if (inputs.flags?.configPath) {
+        const explicit = inputs.flags.configPath;
+        const abs = isAbsolute(explicit) ? explicit : pathResolve(process.cwd(), explicit);
+        if (!exists(abs)) {
+            throw new Error(`config file not found: ${abs}`);
+        }
+        resolved = mergeIn(resolved, parseConfigFile(readFile(abs), abs));
+    }
+    // Layer 4: env overrides. Limited to the few fields it makes sense
+    // to set without a config file: backend URL, runner name, isolation.
+    if (env.ALMYTY_URL)
+        resolved.backendUrl = env.ALMYTY_URL;
+    if (env.ALMYTY_RUNNER_NAME)
+        resolved.name = env.ALMYTY_RUNNER_NAME;
+    if (env.ALMYTY_RUNNER_ISOLATION) {
+        if (!isIsolation(env.ALMYTY_RUNNER_ISOLATION)) {
+            throw new Error(`ALMYTY_RUNNER_ISOLATION must be one of: container, host`);
+        }
+        resolved.config.defaultIsolation = env.ALMYTY_RUNNER_ISOLATION;
+    }
+    // Layer 5: CLI flags. Most have already been validated by the
+    // parser; we just merge.
+    const f = inputs.flags ?? {};
+    if (f.name)
+        resolved.name = f.name;
+    if (f.labels)
+        resolved.labels = { ...resolved.labels, ...f.labels };
+    if (f.backendUrl)
+        resolved.backendUrl = f.backendUrl;
+    if (f.config)
+        resolved.config = mergeRunnerConfig(resolved.config, f.config);
+    if (f.binaryProbeList && f.binaryProbeList.length > 0) {
+        resolved.binaryProbeList = f.binaryProbeList;
+    }
+    if (!resolved.name) {
+        // A runner without a name is meaningless: the backend keys
+        // single-runner enforcement on (user, org, name). Surface a
+        // clear error early rather than letting the registration call
+        // fail with a less-helpful message.
+        throw new Error('runner name is required (set via --name, ALMYTY_RUNNER_NAME, or config.name)');
+    }
+    // The runner's command channel (RCE-capable) and its bearer token ride
+    // this URL — refuse plaintext http:// to a remote host. http is allowed
+    // only for loopback (local dev).
+    try {
+        const u = new URL(resolved.backendUrl);
+        const host = u.hostname;
+        const loopback = host === 'localhost' || host === '127.0.0.1' || host === '::1' || host.endsWith('.localhost');
+        if (u.protocol !== 'https:' && !loopback) {
+            throw new Error(`Refusing an insecure ${u.protocol}// backend URL for a remote host: ${resolved.backendUrl}. ` +
+                'Use https:// (http is only allowed for localhost).');
+        }
+    }
+    catch (e) {
+        if (e instanceof Error && e.message.startsWith('Refusing'))
+            throw e;
+        throw new Error(`Invalid backend URL: ${resolved.backendUrl}`);
+    }
+    return resolved;
+}
+// ── helpers ─────────────────────────────────────────────────────────
+function safeRead(path) {
+    try {
+        return readFileSync(path, 'utf-8');
+    }
+    catch {
+        return null;
+    }
+}
+function parseConfigFile(text, path) {
+    if (!text)
+        return {};
+    try {
+        const parsed = JSON.parse(text);
+        return parsed && typeof parsed === 'object' ? parsed : {};
+    }
+    catch (err) {
+        throw new Error(`failed to parse ${path}: ${err.message}`);
+    }
+}
+function mergeIn(into, layer) {
+    return {
+        name: layer.name ?? into.name,
+        labels: { ...into.labels, ...(layer.labels ?? {}) },
+        backendUrl: layer.backendUrl ?? into.backendUrl,
+        binaryProbeList: layer.binaryProbeList && layer.binaryProbeList.length > 0
+            ? layer.binaryProbeList
+            : into.binaryProbeList,
+        config: layer.config ? mergeRunnerConfig(into.config, layer.config) : into.config,
+    };
+}
+function mergeRunnerConfig(base, layer) {
+    return {
+        defaultIsolation: layer.defaultIsolation ?? base.defaultIsolation,
+        maxConcurrent: layer.maxConcurrent ?? base.maxConcurrent,
+        allowedCwdRoots: layer.allowedCwdRoots ?? base.allowedCwdRoots,
+        denyPatterns: layer.denyPatterns ?? base.denyPatterns,
+        networkBlocked: layer.networkBlocked ?? base.networkBlocked,
+        installBlocked: layer.installBlocked ?? base.installBlocked,
+    };
+}
+function isIsolation(value) {
+    return value === 'container' || value === 'host';
+}
+function clone(value) {
+    return JSON.parse(JSON.stringify(value));
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,MAAM,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG5D;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,+DAA+D;IAC/D,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK;IAClC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO;IACpC,QAAQ,EAAE,QAAQ;IAClB,0EAA0E;IAC1E,4EAA4E;IAC5E,GAAG,gBAAgB,EAAE;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAE5D,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,MAAM,EAAE;QACN,+DAA+D;QAC/D,iEAAiE;QACjE,gEAAgE;QAChE,qBAAqB;QACrB,gBAAgB,EAAE,WAAW;QAC7B,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,EAAE;QACnB,YAAY,EAAE,EAAE;QAChB,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,IAAI;KACrB;IACD,eAAe,EAAE,yBAAyB;IAC1C,UAAU,EAAE,mBAAmB;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAuBjF,MAAM,UAAU,UAAU,CAAC,SAA2B,EAAE;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,mBAAmB,CAAC;IAE9D,IAAI,QAAQ,GAAmB,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE/C,+BAA+B;IAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACvB,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,sCAAsC;IACtC,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACxB,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,iEAAiE;IACjE,kEAAkE;IAClE,iEAAiE;IACjE,IAAI,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QACzC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,IAAI,GAAG,CAAC,UAAU;QAAE,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IACzD,IAAI,GAAG,CAAC,kBAAkB;QAAE,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACnE,IAAI,GAAG,CAAC,uBAAuB,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,gBAAgB,GAAG,GAAG,CAAC,uBAAuB,CAAC;IACjE,CAAC;IAED,8DAA8D;IAC9D,yBAAyB;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,CAAC,IAAI;QAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,IAAI,CAAC,CAAC,MAAM;QAAE,QAAQ,CAAC,MAAM,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IACpE,IAAI,CAAC,CAAC,UAAU;QAAE,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;IACrD,IAAI,CAAC,CAAC,MAAM;QAAE,QAAQ,CAAC,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,QAAQ,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,2DAA2D;QAC3D,4DAA4D;QAC5D,8DAA8D;QAC9D,oCAAoC;QACpC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,iCAAiC;IACjC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;QACxB,MAAM,QAAQ,GACZ,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAChG,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,wBAAwB,CAAC,CAAC,QAAQ,qCAAqC,QAAQ,CAAC,UAAU,IAAI;gBAC5F,oDAAoD,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,MAAM,CAAC,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uEAAuE;AAEvE,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAmB,EAAE,IAAY;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAoB,EAAE,KAA8B;IACnE,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI;QAC7B,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;QACnD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;QAC/C,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YACxE,CAAC,CAAC,KAAK,CAAC,eAAe;YACvB,CAAC,CAAC,IAAI,CAAC,eAAe;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM;KAClF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAkB,EAAE,KAA4B;IACzE,OAAO;QACL,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB;QACjE,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa;QACxD,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe;QAC9D,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;QACrD,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;QAC3D,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,MAAM,CAAC;AACnD,CAAC;AAED,SAAS,KAAK,CAAI,KAAQ;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/daemon.d.ts

@@ -0,0 +1,71 @@
+import { ResolvedConfig } from './types.js';
+export interface DaemonStatus {
+    pid: number;
+    startedAt: string;
+    runnerName: string;
+    backendUrl: string;
+    runnerId: string | null;
+    sessionId: string | null;
+    inUseProcesses: number;
+    connectionState: 'connecting' | 'online' | 'reconnecting' | 'fatal';
+}
+/**
+ * Runner daemon. Responsibilities, in order:
+ *
+ *   1. Resolve config (defaults <- files <- env <- flags).
+ *   2. Resolve credentials (env <- ~/.almyty/credentials.json).
+ *   3. Detect runtime info + probe binaries.
+ *   4. POST /runners/register with the snapshot.
+ *   5. Open the Streamable HTTP stream and start dispatching incoming
+ *      envelopes to handlers.
+ *   6. Heartbeat every 30s.
+ *   7. On SIGTERM / SIGINT: send a final shutdown envelope, wait
+ *      briefly for in-flight responses, then exit.
+ *
+ * The daemon writes its PID and a status snapshot to ~/.almyty/runner/
+ * so `almyty runner status` and `almyty runner stop` can find it.
+ */
+export declare class RunnerDaemon {
+    private resolved;
+    private client;
+    private processes;
+    private coding;
+    private runnerId;
+    private heartbeatTimer;
+    private status;
+    /** Guards against overlapping re-establish attempts. */
+    private reestablishing;
+    /** Consecutive failed re-establish attempts; bounds the retry loop. */
+    private sessionLostStreak;
+    /**
+     * Bootstraps the daemon. Returns when the runner has registered and
+     * the stream is open. Errors here exit the process; caller is the
+     * CLI's `start` command, which doesn't try to recover from a failed
+     * register/connect — just prints and dies.
+     */
+    start(flags: Partial<ResolvedConfig> & {
+        configPath?: string;
+    }): Promise<void>;
+    /**
+     * Exit signal flow. On the first SIGINT/SIGTERM, transition to
+     * draining and inform the backend; on the second, hard exit.
+     */
+    private installSignalHandlers;
+    private gracefulShutdown;
+    private wireClient;
+    private handleRequest;
+    private heartbeat;
+    /**
+     * Re-establish the command stream after a session-lost (404). Re-mints a
+     * session (hello envelope) and reopens the GET stream, with backoff. Only
+     * gives up — exiting fatal — after MAX_SESSION_LOST_STREAK consecutive
+     * failures, so a transient wrong-replica hit recovers transparently while a
+     * genuinely-down backend still terminates rather than spinning forever.
+     */
+    private reestablishSession;
+    private writeState;
+    private updateState;
+    private deleteState;
+}
+export declare function readStatus(): DaemonStatus | null;
+export declare function stopDaemon(): boolean;