@amalgm/core 0.1.0

package/dist/supervision/health.d.ts

@@ -0,0 +1,218 @@
+/**
+ * Runtime health contracts — the probe side of supervision.
+ *
+ * Axiom 5: supervision flows one way. The CLI parent probes its runtime
+ * children over `/healthz`; the children never probe back. This module owns
+ * both ends of that contract as pure decision logic:
+ *
+ *   - the healthz body every runtime service publishes,
+ *   - the parent-side validator that judges a probe answer,
+ *   - the health/restart policies and the child supervision machine that
+ *     turns probe results and exits into restart/degrade decisions.
+ *
+ * The host performs the actual HTTP request, process spawn, and kill; this
+ * module decides. Engine sources (production until cutover, axiom 9):
+ * `runtime/scripts/amalgm-mcp/server/routes/health.js` and
+ * `packages/amalgm/lib/supervisor.js`.
+ */
+/**
+ * The healthz body law (engine `server/routes/health.js:11-23`).
+ *
+ * `/healthz` is a liveness signal: the parent supervisor kills the service
+ * after repeated slow answers. It therefore always answers HTTP 200, performs
+ * no I/O, and starts no follow-up work — operational counts belong on
+ * diagnostic routes. (The engine learned this the hard way: letting the
+ * liveness probe inspect the user's state store made a large, healthy
+ * installation look dead by blocking its own event loop.)
+ *
+ * The body carries exactly these six keys and nothing else.
+ */
+export interface RuntimeHealthzBody {
+    readonly status: 'ok';
+    readonly service: string;
+    readonly runtime_label: string;
+    readonly runtime_instance_id: string;
+    readonly pid: number;
+    readonly activeAgentConversations: number;
+}
+/** `/healthz` always answers 200 — liveness is proven by answering at all. */
+export declare const HEALTHZ_STATUS_CODE = 200;
+/**
+ * Build the healthz body.
+ *
+ * KNOWN ENGINE BUG (health.js:17): the engine publishes the raw,
+ * un-normalized `AMALGM_RUNTIME_LABEL` (`process.env... || 'main'`). Aliases
+ * like `'canary'` therefore leak into the body verbatim, which breaks the
+ * UI's token binding — the UI compares against normalized labels
+ * (`main`/`preview`/`local`) and refuses to attach to a runtime that calls
+ * itself `canary`. This builder takes an ALREADY-NORMALIZED label; the host
+ * resolves the label through the identity module before publishing. The
+ * wound stays documented here until the engine adopts the SDK and deletes
+ * its raw read.
+ *
+ * The gauge (`activeAgentConversations`) is injected: reading it must be a
+ * synchronous in-memory read, never I/O — see the contract rule above.
+ */
+export declare function buildRuntimeHealthzBody(fields: {
+    service: string;
+    runtimeLabel: string;
+    runtimeInstanceId: string;
+    pid: number;
+    activeAgentConversations: number;
+}): RuntimeHealthzBody;
+export type HealthBodyVerdict = {
+    readonly healthy: true;
+    readonly reason: null;
+} | {
+    readonly healthy: false;
+    readonly reason: 'bad_status_code' | 'unparseable_body' | 'runtime_instance_mismatch' | 'service_mismatch';
+};
+/**
+ * Parent-side health-body validator — the decision half of the engine's
+ * `checkServiceHealth` (`packages/amalgm/lib/supervisor.js:940-985`); the
+ * HTTP transport half stays with the host. The laws, in engine order:
+ *
+ *   1. `statusCode < 200 || statusCode >= 500` → unhealthy.
+ *   2. An unparseable JSON body → unhealthy. An empty body parses as `{}`
+ *      (the engine parses `text || '{}'`).
+ *   3. `runtime_instance_id || runtimeInstanceId` must equal the expected
+ *      instance id (when one is expected) — a healthy answer from a STALE
+ *      runtime is an unhealthy answer; this is what catches an old process
+ *      squatting on the port.
+ *   4. `body.service`, if present at all, must equal the expected service.
+ *      An absent `service` key passes (older runtimes; axiom 7).
+ */
+export declare function validateHealthBody(input: {
+    statusCode: number;
+    body: string | Record<string, unknown>;
+    expectedRuntimeInstanceId?: string;
+    expectedService?: string;
+}): HealthBodyVerdict;
+export interface ChildHealthPolicy {
+    readonly graceMs: number;
+    readonly intervalMs: number;
+    readonly timeoutMs: number;
+    readonly maxFailures: number;
+}
+/** Engine `supervisor.js:70-75`: the default child health policy. */
+export declare const CHILD_HEALTH_POLICY: ChildHealthPolicy;
+/**
+ * Engine `supervisor.js:77-80`: chat-server override — model turns hold the
+ * event loop longer, so probes get a longer timeout and a bigger budget.
+ */
+export declare const CHAT_SERVER_HEALTH_POLICY: {
+    readonly timeoutMs: number;
+    readonly maxFailures: number;
+};
+/** Engine `supervisor.js:304-309`: per-service policy resolution. */
+export declare function healthPolicyForService(serviceName: string): ChildHealthPolicy;
+export interface ChildRestartPolicy {
+    readonly initialDelayMs: number;
+    readonly maxDelayMs: number;
+    readonly stableAfterMs: number;
+    readonly maxRestarts: number;
+    readonly windowMs: number;
+}
+/** Engine `supervisor.js:62-68`: the child restart budget. */
+export declare const CHILD_RESTART_POLICY: ChildRestartPolicy;
+/**
+ * The ready deadline (engine `supervisor.js:1112-1114`): how long a child
+ * gets to become healthy before startup is declared failed —
+ * `graceMs + ((intervalMs + timeoutMs) * maxFailures)`.
+ * Defaults: 8000 + ((10000 + 2500) * 3) = 45500ms.
+ */
+export declare function readyDeadlineMs(policy?: ChildHealthPolicy): number;
+/**
+ * Status vocabulary for a supervised child (axiom 8 — exactly these four).
+ * The engine additionally writes a transient `'stopping'` marker during
+ * shutdown (`supervisor.js:1183`); that is a teardown breadcrumb, not a
+ * supervision state, and is deliberately outside this vocabulary.
+ */
+export type ChildStatus = 'starting' | 'running' | 'restarting' | 'degraded';
+export type HealthProbeDecision = 
+/** Probe passed while already `running` — reset the failure count, nothing else. */
+{
+    readonly action: 'none';
+}
+/** First passing probe: the child is now `running` and its ready promise settles. */
+ | {
+    readonly action: 'mark-running';
+}
+/** Failure inside `graceMs` of launch — retried without counting (engine `supervisor.js:1049-1051`). */
+ | {
+    readonly action: 'retry-within-grace';
+}
+/** A counted failure below the budget. `log` matches the engine byte for byte (framing newline excluded). */
+ | {
+    readonly action: 'count-failure';
+    readonly failures: number;
+    readonly log: string;
+}
+/**
+ * The budget is spent (engine `supervisor.js:1060-1077`): SIGTERM the
+ * child, SIGKILL it after `sigkillAfterMs` if it lingers. The exit event
+ * then drives the restart machinery.
+ */
+ | {
+    readonly action: 'restart';
+    readonly reason: 'health_check_failed';
+    readonly sigkillAfterMs: 5000;
+    readonly log: string;
+};
+export type ChildExitDecision = 
+/** Relaunch after `delayMs`; the delay doubles per attempt up to `maxDelayMs`. */
+{
+    readonly action: 'restart-after';
+    readonly delayMs: number;
+    readonly log: string;
+}
+/**
+ * The restart budget is exhausted (engine `supervisor.js:1087-1098`). The
+ * child is parked; per axiom 5 the state is reported honestly, and only a
+ * supervisor restart hands out a fresh budget.
+ */
+ | {
+    readonly action: 'degrade';
+    readonly state: 'degraded';
+    readonly reason: 'restart_limit_exceeded';
+    readonly next_retry_at: null;
+    readonly log: string;
+};
+/**
+ * The child supervision machine (engine `supervisor.js:1034-1102` and
+ * `supervisor.js:1146-1171`), decisions as data. The host owns timers,
+ * spawning, and signals; this machine owns the counting:
+ *
+ *   - probe failures within `graceMs` of a launch retry without counting;
+ *   - the failure log is `health check failed (${n}/${max})`;
+ *   - at `maxFailures` the decision is restart (`health_check_failed`,
+ *     SIGKILL escalation after 5000ms);
+ *   - exits after `stableAfterMs` of runtime reset the backoff and the
+ *     crash window; earlier exits consume the `maxRestarts`-per-`windowMs`
+ *     budget with doubling backoff, and exhausting it parks the child
+ *     `degraded` with `next_retry_at: null`.
+ *
+ * All timestamps are injected epoch-ms — the machine never reads a clock.
+ * An illegal transition throws: it is a programming error in the host, not
+ * a process condition.
+ */
+export declare class ChildSupervisionMachine {
+    private readonly healthPolicy;
+    private readonly restartPolicy;
+    private state;
+    private failures;
+    private startedAt;
+    private restartDelayMs;
+    private restartHistory;
+    constructor(healthPolicy?: ChildHealthPolicy, restartPolicy?: ChildRestartPolicy);
+    get status(): ChildStatus;
+    get healthFailures(): number;
+    private setState;
+    /** The host spawned (or respawned) the process at `now`. */
+    launched(now: number): void;
+    /** The host completed a health probe at `now` with result `ok`. */
+    probe(ok: boolean, now: number): HealthProbeDecision;
+    /** The child process exited at `now` (and the host wants it kept alive). */
+    exited(now: number): ChildExitDecision;
+}
+//# sourceMappingURL=health.d.ts.map

package/dist/supervision/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/supervision/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAC3C;AAED,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,wBAAwB,EAAE,MAAM,CAAC;CAClC,GAAG,kBAAkB,CASrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACjD;IACE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,MAAM,EACX,iBAAiB,GACjB,kBAAkB,GAClB,2BAA2B,GAC3B,kBAAkB,CAAC;CACxB,CAAC;AAEN;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,iBAAiB,CAsBpB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,EAAE,iBAKjC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAGjG,CAAC;AAEF,qEAAqE;AACrE,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,CAK7E;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,8DAA8D;AAC9D,eAAO,MAAM,oBAAoB,EAAE,kBAMlC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,GAAE,iBAAuC,GAAG,MAAM,CAEvF;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,UAAU,CAAC;AAS7E,MAAM,MAAM,mBAAmB;AAC7B,oFAAoF;AAClF;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC7B,qFAAqF;GACnF;IAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAAE;AACrC,wGAAwG;GACtG;IAAE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE;AAC3C,6GAA6G;GAC3G;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACvF;;;;GAIG;GACD;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,MAAM,MAAM,iBAAiB;AAC3B,kFAAkF;AAChF;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACtF;;;;GAIG;GACD;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,uBAAuB;IAQhC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa;IARhC,OAAO,CAAC,KAAK,CAA2B;IACxC,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,cAAc,CAAgB;gBAGnB,YAAY,GAAE,iBAAuC,EACrD,aAAa,GAAE,kBAAyC;IAK3E,IAAI,MAAM,IAAI,WAAW,CAExB;IAED,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,OAAO,CAAC,QAAQ;IAUhB,4DAA4D;IAC5D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAM3B,mEAAmE;IACnE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB;IAqBpD,4EAA4E;IAC5E,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB;CAyBvC"}

package/dist/supervision/health.js

@@ -0,0 +1,227 @@
+/**
+ * Runtime health contracts — the probe side of supervision.
+ *
+ * Axiom 5: supervision flows one way. The CLI parent probes its runtime
+ * children over `/healthz`; the children never probe back. This module owns
+ * both ends of that contract as pure decision logic:
+ *
+ *   - the healthz body every runtime service publishes,
+ *   - the parent-side validator that judges a probe answer,
+ *   - the health/restart policies and the child supervision machine that
+ *     turns probe results and exits into restart/degrade decisions.
+ *
+ * The host performs the actual HTTP request, process spawn, and kill; this
+ * module decides. Engine sources (production until cutover, axiom 9):
+ * `runtime/scripts/amalgm-mcp/server/routes/health.js` and
+ * `packages/amalgm/lib/supervisor.js`.
+ */
+/** `/healthz` always answers 200 — liveness is proven by answering at all. */
+export const HEALTHZ_STATUS_CODE = 200;
+/**
+ * Build the healthz body.
+ *
+ * KNOWN ENGINE BUG (health.js:17): the engine publishes the raw,
+ * un-normalized `AMALGM_RUNTIME_LABEL` (`process.env... || 'main'`). Aliases
+ * like `'canary'` therefore leak into the body verbatim, which breaks the
+ * UI's token binding — the UI compares against normalized labels
+ * (`main`/`preview`/`local`) and refuses to attach to a runtime that calls
+ * itself `canary`. This builder takes an ALREADY-NORMALIZED label; the host
+ * resolves the label through the identity module before publishing. The
+ * wound stays documented here until the engine adopts the SDK and deletes
+ * its raw read.
+ *
+ * The gauge (`activeAgentConversations`) is injected: reading it must be a
+ * synchronous in-memory read, never I/O — see the contract rule above.
+ */
+export function buildRuntimeHealthzBody(fields) {
+    return {
+        status: 'ok',
+        service: fields.service,
+        runtime_label: fields.runtimeLabel,
+        runtime_instance_id: fields.runtimeInstanceId,
+        pid: fields.pid,
+        activeAgentConversations: fields.activeAgentConversations,
+    };
+}
+/**
+ * Parent-side health-body validator — the decision half of the engine's
+ * `checkServiceHealth` (`packages/amalgm/lib/supervisor.js:940-985`); the
+ * HTTP transport half stays with the host. The laws, in engine order:
+ *
+ *   1. `statusCode < 200 || statusCode >= 500` → unhealthy.
+ *   2. An unparseable JSON body → unhealthy. An empty body parses as `{}`
+ *      (the engine parses `text || '{}'`).
+ *   3. `runtime_instance_id || runtimeInstanceId` must equal the expected
+ *      instance id (when one is expected) — a healthy answer from a STALE
+ *      runtime is an unhealthy answer; this is what catches an old process
+ *      squatting on the port.
+ *   4. `body.service`, if present at all, must equal the expected service.
+ *      An absent `service` key passes (older runtimes; axiom 7).
+ */
+export function validateHealthBody(input) {
+    if (input.statusCode < 200 || input.statusCode >= 500) {
+        return { healthy: false, reason: 'bad_status_code' };
+    }
+    let body;
+    if (typeof input.body === 'string') {
+        try {
+            body = JSON.parse(input.body || '{}');
+        }
+        catch {
+            return { healthy: false, reason: 'unparseable_body' };
+        }
+    }
+    else {
+        body = input.body;
+    }
+    const runtimeInstanceId = String(body['runtime_instance_id'] || body['runtimeInstanceId'] || '');
+    if (input.expectedRuntimeInstanceId && runtimeInstanceId !== input.expectedRuntimeInstanceId) {
+        return { healthy: false, reason: 'runtime_instance_mismatch' };
+    }
+    if (input.expectedService && body['service'] && body['service'] !== input.expectedService) {
+        return { healthy: false, reason: 'service_mismatch' };
+    }
+    return { healthy: true, reason: null };
+}
+/** Engine `supervisor.js:70-75`: the default child health policy. */
+export const CHILD_HEALTH_POLICY = {
+    graceMs: 8000,
+    intervalMs: 10000,
+    timeoutMs: 2500,
+    maxFailures: 3,
+};
+/**
+ * Engine `supervisor.js:77-80`: chat-server override — model turns hold the
+ * event loop longer, so probes get a longer timeout and a bigger budget.
+ */
+export const CHAT_SERVER_HEALTH_POLICY = {
+    timeoutMs: 15000,
+    maxFailures: 6,
+};
+/** Engine `supervisor.js:304-309`: per-service policy resolution. */
+export function healthPolicyForService(serviceName) {
+    return {
+        ...CHILD_HEALTH_POLICY,
+        ...(serviceName === 'chat-server' ? CHAT_SERVER_HEALTH_POLICY : {}),
+    };
+}
+/** Engine `supervisor.js:62-68`: the child restart budget. */
+export const CHILD_RESTART_POLICY = {
+    initialDelayMs: 1000,
+    maxDelayMs: 30000,
+    stableAfterMs: 30000,
+    maxRestarts: 8,
+    windowMs: 60000,
+};
+/**
+ * The ready deadline (engine `supervisor.js:1112-1114`): how long a child
+ * gets to become healthy before startup is declared failed —
+ * `graceMs + ((intervalMs + timeoutMs) * maxFailures)`.
+ * Defaults: 8000 + ((10000 + 2500) * 3) = 45500ms.
+ */
+export function readyDeadlineMs(policy = CHILD_HEALTH_POLICY) {
+    return policy.graceMs + ((policy.intervalMs + policy.timeoutMs) * policy.maxFailures);
+}
+const LEGAL = {
+    starting: ['starting', 'running', 'restarting', 'degraded'],
+    running: ['restarting', 'degraded'],
+    restarting: ['starting', 'restarting', 'degraded'],
+    degraded: [],
+};
+/**
+ * The child supervision machine (engine `supervisor.js:1034-1102` and
+ * `supervisor.js:1146-1171`), decisions as data. The host owns timers,
+ * spawning, and signals; this machine owns the counting:
+ *
+ *   - probe failures within `graceMs` of a launch retry without counting;
+ *   - the failure log is `health check failed (${n}/${max})`;
+ *   - at `maxFailures` the decision is restart (`health_check_failed`,
+ *     SIGKILL escalation after 5000ms);
+ *   - exits after `stableAfterMs` of runtime reset the backoff and the
+ *     crash window; earlier exits consume the `maxRestarts`-per-`windowMs`
+ *     budget with doubling backoff, and exhausting it parks the child
+ *     `degraded` with `next_retry_at: null`.
+ *
+ * All timestamps are injected epoch-ms — the machine never reads a clock.
+ * An illegal transition throws: it is a programming error in the host, not
+ * a process condition.
+ */
+export class ChildSupervisionMachine {
+    healthPolicy;
+    restartPolicy;
+    state = 'starting';
+    failures = 0;
+    startedAt = 0;
+    restartDelayMs;
+    restartHistory = [];
+    constructor(healthPolicy = CHILD_HEALTH_POLICY, restartPolicy = CHILD_RESTART_POLICY) {
+        this.healthPolicy = healthPolicy;
+        this.restartPolicy = restartPolicy;
+        this.restartDelayMs = restartPolicy.initialDelayMs;
+    }
+    get status() {
+        return this.state;
+    }
+    get healthFailures() {
+        return this.failures;
+    }
+    setState(next) {
+        if (!LEGAL[this.state].includes(next)) {
+            throw new Error(`illegal child transition "${this.state}" → "${next}" — ` +
+                'the order is starting → running → restarting → starting, with degraded terminal');
+        }
+        this.state = next;
+    }
+    /** The host spawned (or respawned) the process at `now`. */
+    launched(now) {
+        this.setState('starting');
+        this.failures = 0;
+        this.startedAt = now;
+    }
+    /** The host completed a health probe at `now` with result `ok`. */
+    probe(ok, now) {
+        if (ok) {
+            this.failures = 0;
+            if (this.state !== 'running') {
+                this.setState('running');
+                return { action: 'mark-running' };
+            }
+            return { action: 'none' };
+        }
+        if (now - this.startedAt < this.healthPolicy.graceMs) {
+            return { action: 'retry-within-grace' };
+        }
+        this.failures += 1;
+        const log = `health check failed (${this.failures}/${this.healthPolicy.maxFailures})`;
+        if (this.failures >= this.healthPolicy.maxFailures) {
+            this.setState('restarting');
+            return { action: 'restart', reason: 'health_check_failed', sigkillAfterMs: 5000, log };
+        }
+        return { action: 'count-failure', failures: this.failures, log };
+    }
+    /** The child process exited at `now` (and the host wants it kept alive). */
+    exited(now) {
+        const runtimeMs = now - this.startedAt;
+        if (runtimeMs >= this.restartPolicy.stableAfterMs) {
+            this.restartDelayMs = this.restartPolicy.initialDelayMs;
+            this.restartHistory = [];
+        }
+        this.restartHistory = this.restartHistory.filter((time) => now - time <= this.restartPolicy.windowMs);
+        if (this.restartHistory.length >= this.restartPolicy.maxRestarts) {
+            this.setState('degraded');
+            return {
+                action: 'degrade',
+                state: 'degraded',
+                reason: 'restart_limit_exceeded',
+                next_retry_at: null,
+                log: `entered degraded state after ${this.restartHistory.length} restarts in ${this.restartPolicy.windowMs}ms`,
+            };
+        }
+        this.restartHistory.push(now);
+        const delayMs = this.restartDelayMs;
+        this.restartDelayMs = Math.min(this.restartDelayMs * 2, this.restartPolicy.maxDelayMs);
+        this.setState('restarting');
+        return { action: 'restart-after', delayMs, log: `restart scheduled in ${delayMs}ms` };
+    }
+}
+//# sourceMappingURL=health.js.map

package/dist/supervision/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/supervision/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAuBH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAMvC;IACC,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,mBAAmB,EAAE,MAAM,CAAC,iBAAiB;QAC7C,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;KAC1D,CAAC;AACJ,CAAC;AAaD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAKlC;IACC,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,IAA6B,CAAC;IAClC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAA4B,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;IACjG,IAAI,KAAK,CAAC,yBAAyB,IAAI,iBAAiB,KAAK,KAAK,CAAC,yBAAyB,EAAE,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AASD,qEAAqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAiE;IACrG,SAAS,EAAE,KAAK;IAChB,WAAW,EAAE,CAAC;CACf,CAAC;AAEF,qEAAqE;AACrE,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,OAAO;QACL,GAAG,mBAAmB;QACtB,GAAG,CAAC,WAAW,KAAK,aAAa,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAUD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAuB;IACtD,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,KAAK;IACjB,aAAa,EAAE,KAAK;IACpB,WAAW,EAAE,CAAC;IACd,QAAQ,EAAE,KAAK;CAChB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAA4B,mBAAmB;IAC7E,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;AACxF,CAAC;AAUD,MAAM,KAAK,GAA0D;IACnE,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC;IAC3D,OAAO,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC;IACnC,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;IAClD,QAAQ,EAAE,EAAE;CACb,CAAC;AAuCF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,uBAAuB;IAQf;IACA;IARX,KAAK,GAAgB,UAAU,CAAC;IAChC,QAAQ,GAAG,CAAC,CAAC;IACb,SAAS,GAAG,CAAC,CAAC;IACd,cAAc,CAAS;IACvB,cAAc,GAAa,EAAE,CAAC;IAEtC,YACmB,eAAkC,mBAAmB,EACrD,gBAAoC,oBAAoB;QADxD,iBAAY,GAAZ,YAAY,CAAyC;QACrD,kBAAa,GAAb,aAAa,CAA2C;QAEzE,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;IACrD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,QAAQ,CAAC,IAAiB;QAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,CAAC,KAAK,QAAQ,IAAI,MAAM;gBACvD,iFAAiF,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,4DAA4D;IAC5D,QAAQ,CAAC,GAAW;QAClB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;IACvB,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,EAAW,EAAE,GAAW;QAC5B,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACzB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YACpC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,wBAAwB,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,GAAG,CAAC;QACtF,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;IACnE,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,GAAW;QAChB,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACvC,IAAI,SAAS,IAAI,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;YAClD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;YACxD,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAC9C,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CACpD,CAAC;QACF,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;YACjE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC1B,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,wBAAwB;gBAChC,aAAa,EAAE,IAAI;gBACnB,GAAG,EAAE,gCAAgC,IAAI,CAAC,cAAc,CAAC,MAAM,gBAAgB,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI;aAC/G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACvF,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,wBAAwB,OAAO,IAAI,EAAE,CAAC;IACxF,CAAC;CACF"}

package/dist/supervision/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @amalgm/core — supervision.
+ *
+ * The cascade that keeps everything running (axiom 5, one way only):
+ * launchd → CLI parent → runtime → app supervisor. This module carries the
+ * kernel's supervision contracts as pure decision logic — health contracts
+ * (probe side and push side), restart/degrade policy, updater laws, host
+ * launcher registration, and process identification. Hosts supply every
+ * effect (axiom 6); every threshold, vocabulary, and error string is
+ * byte-exact with the shipped engine (axiom 8).
+ */
+export { HEALTHZ_STATUS_CODE, CHILD_HEALTH_POLICY, CHAT_SERVER_HEALTH_POLICY, CHILD_RESTART_POLICY, ChildSupervisionMachine, buildRuntimeHealthzBody, healthPolicyForService, readyDeadlineMs, validateHealthBody, type ChildExitDecision, type ChildHealthPolicy, type ChildRestartPolicy, type ChildStatus, type HealthBodyVerdict, type HealthProbeDecision, type RuntimeHealthzBody, } from './health.js';
+export { APP_HEALTH_POLICY, APP_ID_BODY_KEYS, APP_ID_REQUIRED_ERROR, APP_ID_REQUIRED_STATUS, APP_NOT_FOUND_ERROR, APP_NOT_FOUND_STATUS, HEARTBEAT_INTERVAL_BODY_KEYS, acceptsHealthSignals, appIdFromBody, clampIntervalMs, healthSignalRejection, heartbeatIntervalFromBody, heartbeatRecovery, snapshotEntry, sweepAppHealth, unresponsiveAfterMs, type AppHealthEntry, type AppHealthRecord, type AppHealthSnapshot, type AppHealthStatus, type AppRecoveryDecision, type AppSweepTransition, } from './app-health.js';
+export { APP_RESTART_POLICY, appExitDecision, explicitStartReset, recentCrashes, restartDelayMs, type AppDesiredState, type AppExitContext, type AppExitDecision, type AppStatus, } from './app-restart.js';
+export { AUTO_UPDATE_ENV_OVERRIDES, AUTO_UPDATE_POLICY, AUTO_UPDATE_STATUSES, NOT_SERVICE_MANAGED_REASON, NPM_UPDATE_CACHE_DIRNAME, UPDATE_TARGET_MISMATCH, autoUpdateIdleBlockedReason, autoUpdateSupported, comparePrerelease, compareVersions, distTagCheckFailedMessage, envDisablesAutoUpdate, envFlag, globalPrefixForPackageRoot, installFailedMessage, noVersionMessage, npmEnv, npmFailureDetail, npmInstallArgs, npmInstallTag, numberFromEnvValue, parseSemver, resolveAutoUpdateTimings, restartSuppressedDetail, shouldAutoUpdate, updateTargetMismatchError, type AutoUpdateStatus, type RuntimeIdleStatus, type Semver, type UpdateTargetMismatchError, } from './update.js';
+export { PS_LINE_PATTERN, RUNTIME_HEALTH_PATH, RUNTIME_INSTANCE_ARG_PATTERN, SUPERVISOR_COMMAND_SUFFIX, buildLaunchdPlist, buildSystemdUnit, buildWindowsStartupScript, commandLooksLikeAnySupervisor, commandLooksLikeRuntimeService, commandLooksLikeSupervisor, commandRuntimeInstanceId, decideOwnership, deferToExistingInstall, envMatchesAmalgmDir, launchdPlistPath, lockOwnedByAnother, normalizeMode, parsePort, parsePsLine, pathLooksLikeDesktopBundle, plistEscape, releaseAllowed, runtimeInstanceArg, runtimeLaunchServices, runtimePortsFromState, runtimePortsState, runtimeServiceMarkers, runtimeServiceSuffixes, serviceLabel, serviceLabelScope, serviceStateCanOwnRuntime, shellQuote, shippedRuntimeServices, stateMatchesRequest, systemdQuote, systemdUnavailableOutput, systemdUnitPath, vbsString, windowsStartupScriptPath, type OwnershipDecision, type ProcessIdentity, type RuntimeOwnerRecord, type RuntimeStatePorts, type ServiceDeclaration, type ServiceMode, type ServiceState, } from './service-registration.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/supervision/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/supervision/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,EACpB,aAAa,EACb,eAAe,EACf,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,SAAS,GACf,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,yBAAyB,EACzB,qBAAqB,EACrB,OAAO,EACP,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,MAAM,EACN,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,MAAM,EACX,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,4BAA4B,EAC5B,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,yBAAyB,EACzB,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,SAAS,EACT,WAAW,EACX,0BAA0B,EAC1B,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,iBAAiB,EACjB,yBAAyB,EACzB,UAAU,EACV,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EACZ,wBAAwB,EACxB,eAAe,EACf,SAAS,EACT,wBAAwB,EACxB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC"}

package/dist/supervision/index.js

@@ -0,0 +1,17 @@
+/**
+ * @amalgm/core — supervision.
+ *
+ * The cascade that keeps everything running (axiom 5, one way only):
+ * launchd → CLI parent → runtime → app supervisor. This module carries the
+ * kernel's supervision contracts as pure decision logic — health contracts
+ * (probe side and push side), restart/degrade policy, updater laws, host
+ * launcher registration, and process identification. Hosts supply every
+ * effect (axiom 6); every threshold, vocabulary, and error string is
+ * byte-exact with the shipped engine (axiom 8).
+ */
+export { HEALTHZ_STATUS_CODE, CHILD_HEALTH_POLICY, CHAT_SERVER_HEALTH_POLICY, CHILD_RESTART_POLICY, ChildSupervisionMachine, buildRuntimeHealthzBody, healthPolicyForService, readyDeadlineMs, validateHealthBody, } from './health.js';
+export { APP_HEALTH_POLICY, APP_ID_BODY_KEYS, APP_ID_REQUIRED_ERROR, APP_ID_REQUIRED_STATUS, APP_NOT_FOUND_ERROR, APP_NOT_FOUND_STATUS, HEARTBEAT_INTERVAL_BODY_KEYS, acceptsHealthSignals, appIdFromBody, clampIntervalMs, healthSignalRejection, heartbeatIntervalFromBody, heartbeatRecovery, snapshotEntry, sweepAppHealth, unresponsiveAfterMs, } from './app-health.js';
+export { APP_RESTART_POLICY, appExitDecision, explicitStartReset, recentCrashes, restartDelayMs, } from './app-restart.js';
+export { AUTO_UPDATE_ENV_OVERRIDES, AUTO_UPDATE_POLICY, AUTO_UPDATE_STATUSES, NOT_SERVICE_MANAGED_REASON, NPM_UPDATE_CACHE_DIRNAME, UPDATE_TARGET_MISMATCH, autoUpdateIdleBlockedReason, autoUpdateSupported, comparePrerelease, compareVersions, distTagCheckFailedMessage, envDisablesAutoUpdate, envFlag, globalPrefixForPackageRoot, installFailedMessage, noVersionMessage, npmEnv, npmFailureDetail, npmInstallArgs, npmInstallTag, numberFromEnvValue, parseSemver, resolveAutoUpdateTimings, restartSuppressedDetail, shouldAutoUpdate, updateTargetMismatchError, } from './update.js';
+export { PS_LINE_PATTERN, RUNTIME_HEALTH_PATH, RUNTIME_INSTANCE_ARG_PATTERN, SUPERVISOR_COMMAND_SUFFIX, buildLaunchdPlist, buildSystemdUnit, buildWindowsStartupScript, commandLooksLikeAnySupervisor, commandLooksLikeRuntimeService, commandLooksLikeSupervisor, commandRuntimeInstanceId, decideOwnership, deferToExistingInstall, envMatchesAmalgmDir, launchdPlistPath, lockOwnedByAnother, normalizeMode, parsePort, parsePsLine, pathLooksLikeDesktopBundle, plistEscape, releaseAllowed, runtimeInstanceArg, runtimeLaunchServices, runtimePortsFromState, runtimePortsState, runtimeServiceMarkers, runtimeServiceSuffixes, serviceLabel, serviceLabelScope, serviceStateCanOwnRuntime, shellQuote, shippedRuntimeServices, stateMatchesRequest, systemdQuote, systemdUnavailableOutput, systemdUnitPath, vbsString, windowsStartupScriptPath, } from './service-registration.js';
+//# sourceMappingURL=index.js.map

package/dist/supervision/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/supervision/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,GAQnB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,EACpB,aAAa,EACb,eAAe,EACf,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,mBAAmB,GAOpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,cAAc,GAKf,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,yBAAyB,EACzB,qBAAqB,EACrB,OAAO,EACP,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,MAAM,EACN,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,EAChB,yBAAyB,GAK1B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,4BAA4B,EAC5B,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,yBAAyB,EACzB,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,SAAS,EACT,WAAW,EACX,0BAA0B,EAC1B,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,iBAAiB,EACjB,yBAAyB,EACzB,UAAU,EACV,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EACZ,wBAAwB,EACxB,eAAe,EACf,SAAS,EACT,wBAAwB,GAQzB,MAAM,2BAA2B,CAAC"}