@amalgm/shell 0.1.0

package/dist/machine-host.js

@@ -0,0 +1,340 @@
+import { randomBytes, randomUUID } from "node:crypto";
+import { existsSync, readdirSync, rmSync } from "node:fs";
+import { homedir as osHomedir, hostname, platform, release } from "node:os";
+import { join } from "node:path";
+import { buildRootManifest, joinMachine, mergeRecordAuth, resumeMachine, scopedAmalgmDir, userMachineDir, } from "@amalgm/core/identity";
+import { bootShell } from "./boot.js";
+import { atomicJson, atomicJsonSet, ensurePrivateDir, readJson, } from "./filesystem.js";
+import { shellReleaseCatalog, shellReleaseVerifier } from "./release-catalog.js";
+import { UserGroundHost } from "./user-ground-host.js";
+/** The production effects around Core's machine-setup operation. It does not
+ * decide ordering, readiness, or installation selection; those remain Core. */
+export class MachineHost {
+    options;
+    homedir;
+    amalgmRoot;
+    deviceFile;
+    ports;
+    selectedUserEmail;
+    groundHost = null;
+    running = new Set();
+    constructor(options) {
+        this.options = options;
+        this.homedir = options.homedir ?? osHomedir();
+        this.amalgmRoot = options.amalgmRoot ?? join(this.homedir, "amalgm");
+        this.deviceFile = join(this.amalgmRoot, ".amalgm", "device.json");
+        this.selectedUserEmail = normalizeEmail(options.userEmail);
+        this.ensureInstallationRoot();
+        const deviceStore = {
+            load: async () => readJson(this.deviceFile),
+            save: async (device) => atomicJson(this.deviceFile, device),
+        };
+        const machineStore = {
+            load: async () => this.loadMachine(),
+            save: async (machine) => this.saveMachine(machine),
+            markReady: async () => {
+                const paths = this.paths();
+                atomicJson(paths.status, { ready: true, updatedAt: new Date().toISOString() });
+            },
+        };
+        const controlPlane = {
+            start: (body) => postJson(this.options.appUrl, "/api/auth/computer-setup/cli/start", body),
+            poll: (body) => postJson(this.options.appUrl, "/api/auth/computer-setup/cli/poll", body),
+            redeem: (body) => postJson(this.options.appUrl, "/api/auth/computer-setup/redeem", body),
+            register: async (token, body) => {
+                const response = await postJson(this.options.appUrl, "/api/computers/register", body, token);
+                const email = normalizeEmail(response.user_email);
+                if (!email)
+                    throw Object.assign(new Error("registration did not return a user email"), {
+                        code: "missing_user_email",
+                    });
+                this.selectedUserEmail = email;
+                return response;
+            },
+            refreshProxy: (token, body) => postJson(this.options.appUrl, "/api/computers/proxy-token", body, token),
+        };
+        const installer = {
+            install: async (plan) => {
+                const releaseDir = join(this.amalgmRoot, ".amalgm", "managed", "releases", plan.releaseId);
+                ensurePrivateDir(releaseDir);
+                atomicJson(join(releaseDir, "services.json"), {
+                    releaseId: plan.releaseId,
+                    services: plan.services,
+                    runtimeVersion: this.options.runtimeVersion,
+                });
+                return { id: plan.releaseId };
+            },
+            rollback: async (installed) => {
+                const target = join(this.amalgmRoot, ".amalgm", "managed", "releases", installed.id);
+                rmSync(target, { recursive: true, force: true });
+            },
+        };
+        const userGround = {
+            converge: async (identity) => {
+                const machine = await this.loadMachine();
+                if (!machine)
+                    throw Object.assign(new Error("machine state is not durable"), { code: "machine_state_missing" });
+                const record = mergeRecordAuth(machine.publicRecord, machine.secretAuth) ?? {};
+                const tunnelUrl = text(record.tunnel_url);
+                const tunnelToken = text(record.tunnel_token);
+                if (!tunnelUrl || !tunnelToken) {
+                    throw Object.assign(new Error("machine tunnel credentials are missing"), { code: "tunnel_credentials_missing" });
+                }
+                await this.groundHost?.close();
+                this.groundHost = new UserGroundHost({
+                    amalgmRoot: this.amalgmRoot,
+                    deviceId: identity.deviceId,
+                    tunnelUrl,
+                    tunnelToken,
+                    runtimeVersion: this.options.runtimeVersion,
+                });
+                return this.groundHost.port.converge(identity);
+            },
+        };
+        const runtime = {
+            start: async (machine) => this.startRuntime(machine),
+        };
+        this.ports = {
+            deviceStore,
+            machineStore,
+            controlPlane,
+            catalog: { load: async () => shellReleaseCatalog, verifier: shellReleaseVerifier },
+            installer,
+            userGround,
+            runtime,
+            presentation: {
+                showSetup: (input) => this.options.showSetup?.(input),
+            },
+            diagnostics: {
+                write: (event) => this.options.diagnostic?.(event),
+            },
+            nowIso: () => new Date().toISOString(),
+            nowMs: () => Date.now(),
+            randomUuid: randomUUID,
+            sleep: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),
+        };
+    }
+    join(input) {
+        return joinMachine({
+            ...input,
+            appUrl: this.options.appUrl,
+            platform: `${platform()}-${release()}`,
+            appVersion: this.options.runtimeVersion,
+            runtimeLabel: this.options.runtimeLabel ?? "main",
+            branch: this.options.branch ?? "main",
+        }, this.ports);
+    }
+    resume() {
+        this.resolveUserForResume();
+        return resumeMachine(this.ports);
+    }
+    selectedPaths() {
+        return this.paths();
+    }
+    async close() {
+        const runtimes = [...this.running];
+        this.running.clear();
+        for (const runtime of runtimes)
+            await runtime.stop().catch(() => undefined);
+        await this.groundHost?.close();
+        this.groundHost = null;
+    }
+    ensureInstallationRoot() {
+        ensurePrivateDir(this.amalgmRoot);
+        const manifestFile = join(this.amalgmRoot, ".amalgm-root.json");
+        const existing = readJson(manifestFile);
+        const manifest = buildRootManifest(existing, {
+            nowIso: () => new Date().toISOString(),
+            randomHex: (bytes) => randomBytes(bytes).toString("hex"),
+        });
+        if (!existing?.installationId)
+            atomicJson(manifestFile, manifest);
+    }
+    paths(email = this.requireSelectedUser()) {
+        const userRoot = scopedAmalgmDir(this.amalgmRoot, email);
+        const device = readJson(this.deviceFile);
+        const deviceId = text(device?.device_id);
+        if (!deviceId)
+            throw Object.assign(new Error("physical device identity is missing"), { code: "device_missing" });
+        const machineDir = userMachineDir(userRoot, deviceId);
+        return {
+            userRoot,
+            machineDir,
+            publicRecord: join(machineDir, "computer.json"),
+            secretAuth: join(machineDir, "auth.json"),
+            installation: join(machineDir, "installation.json"),
+            status: join(machineDir, "status.json"),
+        };
+    }
+    requireSelectedUser() {
+        if (!this.selectedUserEmail) {
+            throw Object.assign(new Error("select a user with --user before resuming this machine"), {
+                code: "user_selection_required",
+            });
+        }
+        return this.selectedUserEmail;
+    }
+    resolveUserForResume() {
+        if (this.selectedUserEmail)
+            return;
+        const usersRoot = join(this.amalgmRoot, "users");
+        const device = readJson(this.deviceFile);
+        const deviceId = text(device?.device_id);
+        if (!deviceId || !existsSync(usersRoot))
+            return;
+        const candidates = [];
+        for (const entry of readdirSync(usersRoot, { withFileTypes: true })) {
+            if (!entry.isDirectory())
+                continue;
+            const userRoot = join(usersRoot, entry.name);
+            const manifest = readJson(join(userRoot, ".amalgm-user.json"));
+            const email = normalizeEmail(manifest?.canonicalEmail || entry.name);
+            const status = readJson(join(userMachineDir(userRoot, deviceId), "status.json"));
+            if (email && status?.ready === true)
+                candidates.push(email);
+        }
+        if (candidates.length === 1)
+            this.selectedUserEmail = candidates[0];
+        else if (candidates.length > 1) {
+            throw Object.assign(new Error(`multiple users are ready on this machine: ${candidates.join(", ")}`), {
+                code: "user_selection_required",
+            });
+        }
+    }
+    async loadMachine() {
+        if (!this.selectedUserEmail)
+            this.resolveUserForResume();
+        if (!this.selectedUserEmail)
+            return null;
+        const paths = this.paths();
+        const publicRecord = readJson(paths.publicRecord);
+        const secretAuth = readJson(paths.secretAuth);
+        const installation = readJson(paths.installation);
+        const status = readJson(paths.status);
+        if (!publicRecord || !secretAuth || !installation || !status)
+            return null;
+        return { publicRecord, secretAuth, installation, ready: status.ready === true };
+    }
+    async saveMachine(machine) {
+        const recordEmail = normalizeEmail(machine.publicRecord.user_email);
+        if (recordEmail)
+            this.selectedUserEmail = recordEmail;
+        const paths = this.paths();
+        atomicJsonSet([
+            [paths.publicRecord, machine.publicRecord],
+            [paths.secretAuth, machine.secretAuth],
+            [paths.installation, machine.installation],
+            [paths.status, { ready: machine.ready, updatedAt: new Date().toISOString() }],
+        ]);
+    }
+    async startRuntime(machine) {
+        const record = mergeRecordAuth(machine.publicRecord, machine.secretAuth) ?? {};
+        const userId = text(record.user_id);
+        const userEmail = normalizeEmail(record.user_email);
+        const computerId = text(record.computer_id);
+        const deviceId = text(record.device_id);
+        const tunnelUrl = text(record.tunnel_url);
+        const tunnelToken = text(record.tunnel_token);
+        const proxyToken = text(record.proxy_token);
+        if (!userId || !userEmail || !computerId || !deviceId || !tunnelUrl || !tunnelToken || !proxyToken) {
+            throw Object.assign(new Error("runtime identity or credentials are incomplete"), { code: "runtime_identity_incomplete" });
+        }
+        const runtimeToken = randomBytes(32).toString("base64url");
+        const env = {
+            ...process.env,
+            AMALGM_ROOT: this.amalgmRoot,
+            AMALGM_USER_EMAIL: userEmail,
+            AMALGM_USER_ID: userId,
+            AMALGM_DEVICE_ID: deviceId,
+            AMALGM_COMPUTER_ID: computerId,
+            AMALGM_RUNTIME_LABEL: this.options.runtimeLabel ?? "main",
+            AMALGM_BRANCH: this.options.branch ?? "main",
+            AMALGM_RUNTIME_TOKEN: runtimeToken,
+            AMALGM_PROXY_TOKEN: proxyToken,
+            AMALGM_PROXY_URL: this.options.proxyUrl ?? "https://amalgm-api-proxy-v2.fly.dev",
+        };
+        let shell = null;
+        try {
+            if (!this.groundHost)
+                throw new Error("Files must converge before the runtime starts");
+            shell = await bootShell({
+                env,
+                homedir: this.homedir,
+                amalgmRoot: this.amalgmRoot,
+                userEmail,
+                deviceId,
+                runtimeToken,
+            });
+            await new Promise((resolve, reject) => {
+                shell?.gateway.once("error", reject);
+                shell?.gateway.listen(this.options.runtimePort ?? 0, "127.0.0.1", () => resolve());
+            });
+            const address = shell.gateway.address();
+            if (!address || typeof address === "string")
+                throw new Error("runtime gateway did not bind a TCP port");
+            await this.groundHost.activateRuntimeTunnel(address.port, runtimeToken);
+            const running = {
+                evidence: {
+                    userId,
+                    computerId,
+                    deviceId,
+                    services: machine.installation.services,
+                    tunnelsAuthenticated: true,
+                    proxyContext: { userId, computerId },
+                },
+                stop: async () => {
+                    this.running.delete(running);
+                    await this.groundHost?.stopRuntimeTunnel();
+                    await shell?.close();
+                    shell = null;
+                },
+            };
+            this.running.add(running);
+            return running;
+        }
+        catch (error) {
+            await this.groundHost?.stopRuntimeTunnel().catch(() => undefined);
+            await shell?.close().catch(() => undefined);
+            throw error;
+        }
+    }
+}
+function normalizeEmail(value) {
+    const email = text(value).toLowerCase();
+    return email || null;
+}
+function text(value) {
+    return typeof value === "string" ? value.trim() : "";
+}
+async function postJson(baseUrl, path, body, token = "") {
+    const response = await fetch(`${baseUrl.replace(/\/$/, "")}${path}`, {
+        method: "POST",
+        headers: {
+            accept: "application/json",
+            "content-type": "application/json",
+            ...(token ? { authorization: `Bearer ${token}` } : {}),
+        },
+        body: JSON.stringify(body),
+    });
+    const content = await response.text();
+    let payload = {};
+    try {
+        payload = content ? JSON.parse(content) : {};
+    }
+    catch {
+        payload = { text: content };
+    }
+    if (!response.ok) {
+        const error = Object.assign(new Error(`${response.status} ${text(payload.error) || response.statusText}`), {
+            code: `http_${response.status}`,
+            status: response.status,
+            payload,
+        });
+        throw error;
+    }
+    return payload;
+}
+export function defaultMachineName() {
+    return hostname() || "Amalgm machine";
+}
+//# sourceMappingURL=machine-host.js.map

package/dist/machine-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-host.js","sourceRoot":"","sources":["../src/machine-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAqB,IAAI,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,aAAa,EACb,eAAe,EACf,cAAc,GAQf,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,SAAS,EAAoB,MAAM,WAAW,CAAC;AACxD,OAAO,EACL,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,QAAQ,GACT,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAgCvD;+EAC+E;AAC/E,MAAM,OAAO,WAAW;IACb,OAAO,CAAqB;IAC5B,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,UAAU,CAAS;IACnB,KAAK,CAAoB;IAE1B,iBAAiB,CAAgB;IACjC,UAAU,GAA0B,IAAI,CAAC;IACzC,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEvD,YAAY,OAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAE9B,MAAM,WAAW,GAAG;YAClB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAA4C,IAAI,CAAC,UAAU,CAAC;YACtF,IAAI,EAAE,KAAK,EAAE,MAAiD,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;SACvG,CAAC;QACF,MAAM,YAAY,GAAG;YACnB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE;YACpC,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YACjE,SAAS,EAAE,KAAK,IAAI,EAAE;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC3B,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACjF,CAAC;SACF,CAAC;QACF,MAAM,YAAY,GAA4B;YAC5C,KAAK,EAAE,CAAC,IAAU,EAAE,EAAE,CAAC,QAAQ,CAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,oCAAoC,EAAE,IAAI,CAChE;YACD,IAAI,EAAE,CAAC,IAAU,EAAE,EAAE,CAAC,QAAQ,CAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,mCAAmC,EAAE,IAAI,CAC/D;YACD,MAAM,EAAE,CAAC,IAAU,EAAE,EAAE,CAAC,QAAQ,CAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,iCAAiC,EAAE,IAAI,CAC7D;YACD,QAAQ,EAAE,KAAK,EAAE,KAAa,EAAE,IAAU,EAAE,EAAE;gBAC5C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7F,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,KAAK;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,EAAE;wBACrF,IAAI,EAAE,oBAAoB;qBAC3B,CAAC,CAAC;gBACH,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;gBAC/B,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,YAAY,EAAE,CAAC,KAAa,EAAE,IAAU,EAAE,EAAE,CAC1C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,4BAA4B,EAAE,IAAI,EAAE,KAAK,CAAC;SAC3E,CAAC;QACF,MAAM,SAAS,GAAG;YAChB,OAAO,EAAE,KAAK,EAAE,IAAsB,EAA6B,EAAE;gBACnE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3F,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAC7B,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE;oBAC5C,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;iBAC5C,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,SAA2B,EAAE,EAAE;gBAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;gBACrF,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;SACF,CAAC;QACF,MAAM,UAAU,GAAmB;YACjC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzC,IAAI,CAAC,OAAO;oBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAChH,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC9C,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBACnH,CAAC;gBACD,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,cAAc,CAAC;oBACnC,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,SAAS;oBACT,WAAW;oBACX,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;iBAC5C,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;SACF,CAAC;QACF,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,KAAK,EAAE,OAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;SACpE,CAAC;QAEF,IAAI,CAAC,KAAK,GAAG;YACX,WAAW;YACX,YAAY;YACZ,YAAY;YACZ,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,mBAAmB,EAAE,QAAQ,EAAE,oBAAoB,EAAE;YAClF,SAAS;YACT,UAAU;YACV,OAAO;YACP,YAAY,EAAE;gBACZ,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC;aACtD;YACD,WAAW,EAAE;gBACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC;aACnD;YACD,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;YACvB,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;SACrF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAA+F;QAClG,OAAO,WAAW,CAAC;YACjB,GAAG,KAAK;YACR,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,QAAQ,EAAE,GAAG,QAAQ,EAAE,IAAI,OAAO,EAAE,EAAE;YACtC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YACvC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,MAAM;YACjD,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM;SACtC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAEO,sBAAsB;QAC5B,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,QAAQ,CAA0C,YAAY,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE;YAC3C,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,cAAc;YAAE,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,mBAAmB,EAAE;QAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,QAAQ,CAAyB,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACjH,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtD,OAAO;YACL,QAAQ;YACR,UAAU;YACV,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC;YAC/C,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC;YACzC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC;YACnD,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC;SACxC,CAAC;IACJ,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wDAAwD,CAAC,EAAE;gBACvF,IAAI,EAAE,yBAAyB;aAChC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,oBAAoB;QAC1B,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAO;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,QAAQ,CAAyB,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO;QAChD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,QAAQ,CAA8B,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;YAC5F,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,QAAQ,CAAsB,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;YACtG,IAAI,KAAK,IAAI,MAAM,EAAE,KAAK,KAAK,IAAI;gBAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,CAAC,CAAW,CAAC;aACzE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;gBACnG,IAAI,EAAE,yBAAyB;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,QAAQ,CAAO,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,QAAQ,CAAO,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,QAAQ,CAAmB,KAAK,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,QAAQ,CAAsB,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC1E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAsB;QAC9C,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACpE,IAAI,WAAW;YAAE,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,aAAa,CAAC;YACZ,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC;YAC1C,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC;YACtC,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC;YAC1C,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAsB;QAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;YACnG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAsB;YAC7B,GAAG,OAAO,CAAC,GAAG;YACd,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,iBAAiB,EAAE,SAAS;YAC5B,cAAc,EAAE,MAAM;YACtB,gBAAgB,EAAE,QAAQ;YAC1B,kBAAkB,EAAE,UAAU;YAC9B,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,MAAM;YACzD,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM;YAC5C,oBAAoB,EAAE,YAAY;YAClC,kBAAkB,EAAE,UAAU;YAC9B,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,qCAAqC;SACjF,CAAC;QACF,IAAI,KAAK,GAAuB,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACvF,KAAK,GAAG,MAAM,SAAS,CAAC;gBACtB,GAAG;gBACH,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS;gBACT,QAAQ;gBACR,YAAY;aACb,CAAC,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACrC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACrF,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACxG,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE;oBACR,MAAM;oBACN,UAAU;oBACV,QAAQ;oBACR,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ;oBACvC,oBAAoB,EAAE,IAAI;oBAC1B,YAAY,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;iBACrC;gBACD,IAAI,EAAE,KAAK,IAAI,EAAE;oBACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAC7B,MAAM,IAAI,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC;oBAC3C,MAAM,KAAK,EAAE,KAAK,EAAE,CAAC;oBACrB,KAAK,GAAG,IAAI,CAAC;gBACf,CAAC;aACF,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClE,MAAM,KAAK,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAW,OAAe,EAAE,IAAY,EAAE,IAAU,EAAE,KAAK,GAAG,EAAE;IACrF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;QACnE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,OAAO,GAAS,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE;YACzG,IAAI,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO;SACR,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,OAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,QAAQ,EAAE,IAAI,gBAAgB,CAAC;AACxC,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/main.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { runCli } from "./cli.js";
+process.exitCode = await runCli();
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,CAAC,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC"}

package/dist/parity.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The parity meter: the decomposed runtime's active target surface, derived
+ * from the kernel's own route table and probed over real HTTP against a booted
+ * shell. The target begins with the Engine contract and excludes only the
+ * owner-approved prefixes in Core's explicit retirement ledger.
+ *
+ * This measures SURFACE parity (does something answer on this route), not
+ * behavior parity. Probes are designed so a mounted surface always answers
+ * non-404; a 404 therefore means "nothing is mounted here".
+ */
+export interface ParityProbe {
+    readonly service: "gateway" | "portMonitor" | "chat" | "mcp";
+    /** The active target surface being measured — a route-table prefix or exact path. */
+    readonly surface: string;
+    readonly method: string;
+    readonly path: string;
+    readonly body?: string;
+    readonly note?: string;
+}
+export interface ParityResult extends ParityProbe {
+    readonly served: boolean;
+    readonly status: number;
+}
+export interface ParityOptions {
+    /** Base URL of a booted shell gateway, e.g. http://127.0.0.1:4123 */
+    base: string;
+    token: string;
+    /** A real turnId (capture it from the injected driver) so /raw-temp can replay. */
+    seedTurnId?: string;
+}
+export declare function engineSurfaceProbes(seed?: {
+    turnId?: string;
+}): ParityProbe[];
+export declare function measureEngineParity(options: ParityOptions): Promise<ParityResult[]>;
+export interface ParitySummary {
+    readonly served: string[];
+    readonly dead: string[];
+    readonly score: string;
+}
+export declare function paritySummary(results: ParityResult[]): ParitySummary;

package/dist/parity.js

@@ -0,0 +1,108 @@
+import { shippedRouteTable } from "@amalgm/core/transport";
+/**
+ * Representative child paths for prefixes whose mounted server 404s at its
+ * own root — the probe must elicit a non-404 from a served surface.
+ */
+const MCP_PROBE_PATHS = {
+    "/agents": "/agents/sessions",
+    "/browser": "/browser/health",
+};
+export function engineSurfaceProbes(seed) {
+    const table = shippedRouteTable;
+    const probes = [];
+    for (const path of table.gatewayExactPaths) {
+        probes.push({ service: "gateway", surface: path, method: "GET", path });
+    }
+    for (const prefix of table.gatewayPrefixes) {
+        probes.push({ service: "gateway", surface: prefix, method: "GET", path: prefix });
+    }
+    for (const prefix of table.portMonitorPrefixes) {
+        probes.push({ service: "portMonitor", surface: prefix, method: "GET", path: prefix });
+    }
+    const chatProbe = (surface) => {
+        switch (surface) {
+            case "/chat":
+                return {
+                    service: "chat",
+                    surface,
+                    method: "POST",
+                    path: "/chat",
+                    body: JSON.stringify({ sessionId: "parity-probe", prompt: "ping" }),
+                };
+            case "/raw-temp":
+                return {
+                    service: "chat",
+                    surface,
+                    method: "GET",
+                    path: `/raw-temp/${seed?.turnId ?? "parity-no-seed"}`,
+                    note: seed?.turnId ? undefined : "no seed turn — a served mount may still 404",
+                };
+            case "/active":
+                return { service: "chat", surface, method: "GET", path: "/active/parity-probe" };
+            case "/stop":
+                return { service: "chat", surface, method: "POST", path: "/stop/parity-probe" };
+            case "/egress":
+                return {
+                    service: "chat",
+                    surface,
+                    method: "POST",
+                    path: "/egress/parity-relay",
+                };
+            case "/mcp-relay":
+                return {
+                    service: "chat",
+                    surface,
+                    method: "POST",
+                    path: "/mcp-relay/parity-relay/amalgm",
+                };
+            default:
+                return { service: "chat", surface, method: "POST", path: `${surface}/parity-probe` };
+        }
+    };
+    for (const prefix of table.chatPrefixes)
+        probes.push(chatProbe(prefix));
+    for (const prefix of table.mcpPrefixes) {
+        if (prefix === "/mcp") {
+            probes.push({
+                service: "mcp",
+                surface: prefix,
+                method: "POST",
+                path: "/mcp/tools",
+                body: JSON.stringify({ method: "tools/list" }),
+                note: "brick MCP catalogs under /mcp/<brick>",
+            });
+            continue;
+        }
+        probes.push({
+            service: "mcp",
+            surface: prefix,
+            method: "GET",
+            path: MCP_PROBE_PATHS[prefix] ?? prefix,
+        });
+    }
+    return probes;
+}
+export async function measureEngineParity(options) {
+    const probes = engineSurfaceProbes({ turnId: options.seedTurnId });
+    const results = [];
+    for (const probe of probes) {
+        const response = await fetch(`${options.base}${probe.path}`, {
+            method: probe.method,
+            headers: {
+                authorization: `Bearer ${options.token}`,
+                ...(probe.body ? { "content-type": "application/json" } : {}),
+            },
+            body: probe.body,
+        });
+        // Status is the verdict; drain/cancel so streaming probes free their sockets.
+        await response.body?.cancel().catch(() => { });
+        results.push({ ...probe, served: response.status !== 404, status: response.status });
+    }
+    return results;
+}
+export function paritySummary(results) {
+    const served = results.filter((r) => r.served).map((r) => r.surface);
+    const dead = results.filter((r) => !r.served).map((r) => r.surface);
+    return { served, dead, score: `${served.length}/${results.length}` };
+}
+//# sourceMappingURL=parity.js.map

package/dist/parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parity.js","sourceRoot":"","sources":["../src/parity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAmC3D;;;GAGG;AACH,MAAM,eAAe,GAA2B;IAC9C,SAAS,EAAE,kBAAkB;IAC7B,UAAU,EAAE,iBAAiB;CAC9B,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,MAAM,KAAK,GAAG,iBAAiB,CAAC;IAChC,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,OAAe,EAAe,EAAE;QACjD,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,OAAO;gBACV,OAAO;oBACL,OAAO,EAAE,MAAM;oBACf,OAAO;oBACP,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;iBACpE,CAAC;YACJ,KAAK,WAAW;gBACd,OAAO;oBACL,OAAO,EAAE,MAAM;oBACf,OAAO;oBACP,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,aAAa,IAAI,EAAE,MAAM,IAAI,gBAAgB,EAAE;oBACrD,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,6CAA6C;iBAC/E,CAAC;YACJ,KAAK,SAAS;gBACZ,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;YACnF,KAAK,OAAO;gBACV,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;YAClF,KAAK,SAAS;gBACZ,OAAO;oBACL,OAAO,EAAE,MAAM;oBACf,OAAO;oBACP,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,sBAAsB;iBAC7B,CAAC;YACJ,KAAK,YAAY;gBACf,OAAO;oBACL,OAAO,EAAE,MAAM;oBACf,OAAO;oBACP,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,gCAAgC;iBACvC,CAAC;YACJ;gBACE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,eAAe,EAAE,CAAC;QACzF,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAExE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;gBAC9C,IAAI,EAAE,uCAAuC;aAC9C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAsB;IAC9D,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE;YAC3D,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;gBACxC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D;YACD,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QACH,8EAA8E;QAC9E,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAQD,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACvE,CAAC"}

package/dist/ports-host.d.ts

@@ -0,0 +1,8 @@
+import type { BrickMount } from "./gateway.js";
+/**
+ * The port-monitor and runtime-state surfaces, composed from kernel law.
+ * In the shell every service shares the one gateway port; the document
+ * shape is core's mirror-write law (`runtimeStatePortsPatch`), so what
+ * this serves is byte-shaped exactly like what the tunnels read.
+ */
+export declare function portsMounts(currentPort: () => number | null): BrickMount[];

package/dist/ports-host.js

@@ -0,0 +1,26 @@
+import { readRuntimePorts, runtimeStatePortsPatch } from "@amalgm/core/transport";
+/**
+ * The port-monitor and runtime-state surfaces, composed from kernel law.
+ * In the shell every service shares the one gateway port; the document
+ * shape is core's mirror-write law (`runtimeStatePortsPatch`), so what
+ * this serves is byte-shaped exactly like what the tunnels read.
+ */
+export function portsMounts(currentPort) {
+    const handle = async () => {
+        const port = currentPort() ?? 0;
+        const ports = readRuntimePorts(null, {
+            gateway: port,
+            portMonitor: port,
+            mcp: port,
+            chat: port,
+        });
+        return { ok: true, ...runtimeStatePortsPatch(ports) };
+    };
+    return [
+        { prefix: "/ports", handle },
+        { prefix: "/api/ports", handle },
+        { prefix: "/port-monitor", handle },
+        { prefix: "/runtime-state", handle },
+    ];
+}
+//# sourceMappingURL=ports-host.js.map

package/dist/ports-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports-host.js","sourceRoot":"","sources":["../src/ports-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAIlF;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,WAAgC;IAC1D,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,MAAM,IAAI,GAAG,WAAW,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE;YACnC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;IACxD,CAAC,CAAC;IACF,OAAO;QACL,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC5B,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE;QAChC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;QACnC,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE;KACrC,CAAC;AACJ,CAAC"}

package/dist/pty-host.d.ts

@@ -0,0 +1,14 @@
+import { PtySessionManager } from "@amalgm/core/pty";
+import type { BrickMount, BrickUpgradeMount } from "./gateway.js";
+export interface PtyHostConfig {
+    readonly env: NodeJS.ProcessEnv;
+    readonly defaultCwd: string;
+}
+export interface PtyHost {
+    readonly manager: PtySessionManager;
+    readonly mount: BrickMount;
+    readonly upgrade: BrickUpgradeMount;
+    close(): void;
+}
+/** Native effects for Core's PTY law; Engine reference local-gateway.js:33-47,333-346,777-904. */
+export declare function createPtyHost(config: PtyHostConfig): PtyHost;