@avow-finance/sdk 0.0.0-stage → 0.2.0

package/dist/node/runner-session.js

@@ -0,0 +1,100 @@
+import { mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { isSessionId, newSessionId } from '@avow-finance/spec';
+import { isAddressEqual } from 'viem';
+import { readSessionStanding } from '../sandbox/session.js';
+import { takenUpTo } from './platform.js';
+/** How long before Avow's relay closes a session the runner moves to a new one, in seconds. */
+export const SESSION_MARGIN = 600n;
+const systemClock = () => BigInt(Math.floor(Date.now() / 1000));
+/** The session id kept in the sandbox folder, or null when there's none in the form it's kept. */
+function keptId(dir) {
+    try {
+        const { id } = JSON.parse(readFileSync(join(dir, 'session.json'), 'utf8'));
+        return typeof id === 'string' && isSessionId(id) ? id : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Keeps a session in the sandbox folder, with the runner's process id for the MCP server to find,
+ * clears the run numbers of every other session, and goes on from the relay's last run.
+ */
+function useSession(dir, id, lastRun) {
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    writeFileSync(join(dir, 'session.json'), `${JSON.stringify({ id, pid: process.pid })}\n`, {
+        mode: 0o600,
+    });
+    try {
+        for (const name of readdirSync(join(dir, 'runs'))) {
+            if (name !== id)
+                rmSync(join(dir, 'runs', name), { recursive: true, force: true });
+        }
+    }
+    catch {
+        // No run has been numbered yet.
+    }
+    takenUpTo(dir, id, lastRun);
+}
+function newSession(dir) {
+    const id = newSessionId();
+    useSession(dir, id, 0);
+    return { id, fresh: true, endsAt: null };
+}
+/**
+ * The session the runner reports to, kept in the sandbox folder with the business, so the screen
+ * a developer has open keeps working across restarts. A restart keeps it while Avow's relay holds
+ * it for the business's account and takes its events for more than `SESSION_MARGIN`. On a first
+ * run, after `npm run fresh`, or once a session has closed, it's a new session, and the runner
+ * announces the agent's authority to it.
+ *
+ * The account comes from business.json, and nothing checks it here, since that takes the
+ * passphrase. The sealed key opens only for the account it was sealed for, so a file that names
+ * another business's account can make the runner keep that business's session, but nothing the
+ * runner signs can reach it, and Avow's relay refuses this business's agent's events there.
+ */
+export async function keepSession(m) {
+    const now = m.now ?? systemClock;
+    const kept = keptId(m.dir);
+    if (!kept || !m.account)
+        return newSession(m.dir);
+    const standing = await readSessionStanding({
+        apiUrl: m.apiUrl,
+        sessionId: kept,
+        ...(m.fetch ? { fetch: m.fetch } : {}),
+    }).catch(() => undefined);
+    if (standing === undefined) {
+        m.log?.("Avow's relay didn't say whether your session is still open, so the runner keeps it.");
+        useSession(m.dir, kept, 0);
+        return { id: kept, fresh: false, endsAt: null };
+    }
+    const ours = standing.business !== null &&
+        isAddressEqual(standing.business.account, m.account) &&
+        standing.endsAt !== null &&
+        standing.endsAt > now() + SESSION_MARGIN;
+    if (!ours)
+        return newSession(m.dir);
+    useSession(m.dir, kept, standing.lastRun);
+    return { id: kept, fresh: false, endsAt: standing.endsAt };
+}
+/**
+ * The session for the next run, the same one until Avow's relay is about to stop taking its
+ * events. Then it's a new one, which the runner announces the authority to again.
+ */
+export async function sessionForNextRun(session, m) {
+    const now = m.now ?? systemClock;
+    let { endsAt } = session;
+    if (endsAt === null) {
+        const standing = await readSessionStanding({
+            apiUrl: m.apiUrl,
+            sessionId: session.id,
+            ...(m.fetch ? { fetch: m.fetch } : {}),
+        }).catch(() => undefined);
+        endsAt = standing?.endsAt ?? null;
+    }
+    if (endsAt !== null && endsAt <= now() + SESSION_MARGIN)
+        return newSession(m.dir);
+    return { ...session, endsAt };
+}
+//# sourceMappingURL=runner-session.js.map

package/dist/node/runner-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-session.js","sourceRoot":"","sources":["../../src/node/runner-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAgB,cAAc,EAAE,MAAM,MAAM,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAEzC,+FAA+F;AAC/F,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAA;AAoBlC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;AAE/D,kGAAkG;AAClG,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAqB,CAAA;QAC9F,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,EAAU,EAAE,OAAe;IAC1D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAChD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE;QACxF,IAAI,EAAE,KAAK;KACZ,CAAC,CAAA;IACF,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAClD,IAAI,IAAI,KAAK,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACpF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;IACzB,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AAC1C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,CAA+C;IAE/C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,WAAW,CAAA;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;QACzC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,IAAI;QACf,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACzB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,CAAC,CAAC,GAAG,EAAE,CAAC,qFAAqF,CAAC,CAAA;QAC9F,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACjD,CAAC;IACD,MAAM,IAAI,GACR,QAAQ,CAAC,QAAQ,KAAK,IAAI;QAC1B,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;QACpD,QAAQ,CAAC,MAAM,KAAK,IAAI;QACxB,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,CAAA;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACnC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAsB,EACtB,CAAiB;IAEjB,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,WAAW,CAAA;IAChC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IACxB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;YACzC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAA;IACnC,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACjF,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAA;AAC/B,CAAC"}

package/dist/node/runner.d.ts

@@ -0,0 +1,63 @@
+import type { SandboxSession } from '../sandbox/agent.js';
+import type { SandboxBusinessConfig } from '../sandbox/setup.js';
+/** How to run a file: TypeScript through the project's own tsx, JavaScript through Node. */
+export declare function command(file: string, cwd?: string): string[];
+/**
+ * The environment a child process gets. It's the runner's own, with every `AVOW_` variable taken
+ * out and only the session and run put back. The business's passphrase and key are never in it.
+ */
+export declare function childEnv(session: SandboxSession | null): NodeJS.ProcessEnv;
+/** Whether any process the runner started, or one of theirs, is still alive. */
+export declare function childrenAlive(): boolean;
+/**
+ * Waits for every process the runner started to be gone, and refuses when one outlives the wait.
+ * The runner asks for the passphrase only after this. A process that left the group it was started
+ * in isn't seen here, so `checkTerminal` looks for anything holding the terminal too.
+ */
+export declare function ensureChildrenGone(waitMs?: number): Promise<void>;
+/** A process that has the runner's terminal open. */
+export interface TerminalHolder {
+    pid: number;
+    command: string;
+}
+/**
+ * Every process apart from the runner and the ones that started it, such as npm and the shell, that
+ * has the runner's terminal open. Any of them could read what's typed there. It's null when this
+ * machine gives no way to tell, as on Windows, without a terminal, or without `lsof` outside Linux.
+ */
+export declare function otherTerminalHolders(): TerminalHolder[] | null;
+/**
+ * Checks the terminal before the runner asks for the passphrase. It refuses when it finds a process,
+ * apart from the runner and the ones that started it, holding the terminal open, and says so plainly
+ * where it can't look. It skips processes whose open files it can't read, and nothing stops a program
+ * running as the developer from opening the terminal later, so this closes what it can, and the
+ * business's key stays off the agent's machine in production.
+ */
+export declare function checkTerminal(log?: (line: string) => void): void;
+/**
+ * Runs the agent's file once, isolated as `runIsolated` runs it, with only the session in its
+ * environment. It reads the agent's item, and it gets no input, so it can't be asked for anything.
+ */
+export declare function runAgent(file: string, session: SandboxSession | null, options?: {
+    cwd?: string;
+    capture?: boolean;
+}): Promise<{
+    code: number;
+    output: string;
+}>;
+/**
+ * Prompts on the terminal, a line at a time. A passphrase is typed with nothing shown, and no line
+ * is kept in history, so no later prompt can bring one back.
+ */
+export declare function terminalPrompts(input?: NodeJS.ReadableStream, output?: NodeJS.WritableStream, tty?: boolean): {
+    ask: (prompt: string, hidden?: boolean) => Promise<string | null>;
+    onLine: (listener: (line: string) => void) => void;
+    print: (text: string) => void;
+    history: () => string[];
+};
+/**
+ * Reads the business's config from its file, isolated as the agent runs, so nothing in the file
+ * runs where the business's key is ever opened. The file's default export is the config.
+ */
+export declare function readBusinessConfig(file: string, cwd?: string): Promise<SandboxBusinessConfig>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/node/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/node/runner.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAGhE,4FAA4F;AAC5F,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,EAAE,CAO3E;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,GAAG,MAAM,CAAC,UAAU,CAU1E;AAkBD,gFAAgF;AAChF,wBAAgB,aAAa,IAAI,OAAO,CAUvC;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAWrE;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;CAChB;AAmDD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,EAAE,GAAG,IAAI,CA8B9D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkB,GAAG,IAAI,CAc7E;AAyCD;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,GAAG,IAAI,EAC9B,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAChD,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAO3C;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,KAAK,GAAE,MAAM,CAAC,cAA8B,EAC5C,MAAM,GAAE,MAAM,CAAC,cAA+B,EAC9C,GAAG,GAAE,OAAsC;kBAkBtB,MAAM;uBAsCD,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI;kBAX3B,MAAM;;EAoB5B;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAsBhC"}

package/dist/node/runner.js

@@ -0,0 +1,341 @@
+import { spawn, spawnSync } from 'node:child_process';
+import { mkdtempSync, readdirSync, readFileSync, readlinkSync, rmSync, writeFileSync, } from 'node:fs';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { createInterface } from 'node:readline';
+import { Writable } from 'node:stream';
+import { pathToFileURL } from 'node:url';
+import { RUNNER_ENV } from './platform.js';
+/** How to run a file: TypeScript through the project's own tsx, JavaScript through Node. */
+export function command(file, cwd = process.cwd()) {
+    if (!/\.[cm]?tsx?$/.test(file))
+        return [file];
+    try {
+        return [createRequire(join(cwd, 'package.json')).resolve('tsx/cli'), file];
+    }
+    catch {
+        throw new Error(`Running ${file} needs tsx. Install it with npm install tsx.`);
+    }
+}
+/**
+ * The environment a child process gets. It's the runner's own, with every `AVOW_` variable taken
+ * out and only the session and run put back. The business's passphrase and key are never in it.
+ */
+export function childEnv(session) {
+    const env = {};
+    for (const [name, value] of Object.entries(process.env)) {
+        if (!name.startsWith('AVOW_'))
+            env[name] = value;
+    }
+    if (session) {
+        env[RUNNER_ENV.session] = session.id;
+        env[RUNNER_ENV.run] = String(session.run);
+    }
+    return env;
+}
+/** The process groups the runner started, until each is gone. */
+const groups = new Set();
+/** Ends a child's whole process group, so nothing it left behind keeps running. */
+function killGroup(pid) {
+    if (process.platform === 'win32') {
+        spawnSync('taskkill', ['/pid', String(pid), '/T', '/F'], { stdio: 'ignore' });
+        return;
+    }
+    try {
+        process.kill(-pid, 'SIGKILL');
+    }
+    catch {
+        // The group is already gone.
+    }
+}
+/** Whether any process the runner started, or one of theirs, is still alive. */
+export function childrenAlive() {
+    for (const pid of groups) {
+        try {
+            process.kill(process.platform === 'win32' ? pid : -pid, 0);
+            return true;
+        }
+        catch {
+            groups.delete(pid);
+        }
+    }
+    return false;
+}
+/**
+ * Waits for every process the runner started to be gone, and refuses when one outlives the wait.
+ * The runner asks for the passphrase only after this. A process that left the group it was started
+ * in isn't seen here, so `checkTerminal` looks for anything holding the terminal too.
+ */
+export async function ensureChildrenGone(waitMs = 2000) {
+    const deadline = Date.now() + waitMs;
+    while (childrenAlive()) {
+        for (const pid of groups)
+            killGroup(pid);
+        if (Date.now() > deadline) {
+            throw new Error("A process the agent started is still running, so the runner won't ask for the passphrase. Stop it, then press Enter again.");
+        }
+        await new Promise((resolve) => setTimeout(resolve, 100));
+    }
+}
+/** The device of the terminal the runner reads from, or null when it reads from something else. */
+function terminalDevice() {
+    if (!process.stdin.isTTY)
+        return null;
+    const found = spawnSync('tty', [], { stdio: [0, 'pipe', 'ignore'], encoding: 'utf8' });
+    const device = found.status === 0 ? found.stdout.trim() : '';
+    return device.startsWith('/dev/') ? device : null;
+}
+/** Each process on Linux this user can see, with its parent, its command and the files it holds. */
+function linuxProcesses() {
+    return readdirSync('/proc')
+        .filter((name) => /^\d+$/.test(name))
+        .flatMap((name) => {
+        try {
+            const stat = readFileSync(`/proc/${name}/stat`, 'utf8');
+            const ppid = Number(stat.slice(stat.lastIndexOf(')') + 2).split(' ')[1]);
+            const command = readFileSync(`/proc/${name}/comm`, 'utf8').trim();
+            let files = [];
+            try {
+                files = readdirSync(`/proc/${name}/fd`).flatMap((fd) => {
+                    try {
+                        return [readlinkSync(`/proc/${name}/fd/${fd}`)];
+                    }
+                    catch {
+                        return [];
+                    }
+                });
+            }
+            catch {
+                // Another user's process, whose files this user can't see.
+            }
+            return [{ pid: Number(name), ppid, command, files }];
+        }
+        catch {
+            return [];
+        }
+    });
+}
+/** Each process `ps` lists, with its parent and its command. */
+function psProcesses() {
+    const listed = spawnSync('ps', ['-A', '-o', 'pid=,ppid=,comm='], {
+        stdio: ['ignore', 'pipe', 'ignore'],
+        encoding: 'utf8',
+    });
+    if (listed.status !== 0)
+        return null;
+    return listed.stdout.split('\n').flatMap((line) => {
+        const m = /^\s*(\d+)\s+(\d+)\s+(.*)$/.exec(line);
+        return m ? [{ pid: Number(m[1]), ppid: Number(m[2]), command: (m[3] ?? '').trim() }] : [];
+    });
+}
+/**
+ * Every process apart from the runner and the ones that started it, such as npm and the shell, that
+ * has the runner's terminal open. Any of them could read what's typed there. It's null when this
+ * machine gives no way to tell, as on Windows, without a terminal, or without `lsof` outside Linux.
+ */
+export function otherTerminalHolders() {
+    if (process.platform === 'win32')
+        return null;
+    const device = terminalDevice();
+    if (!device)
+        return null;
+    let processes;
+    let holders;
+    if (process.platform === 'linux') {
+        const seen = linuxProcesses();
+        processes = seen;
+        holders = seen.filter((p) => p.files.includes(device)).map((p) => p.pid);
+    }
+    else {
+        const listed = psProcesses();
+        const open = spawnSync('lsof', ['-t', device], {
+            stdio: ['ignore', 'pipe', 'ignore'],
+            encoding: 'utf8',
+        });
+        // lsof answers 1 when nothing has the file open.
+        if (!listed || open.error || (open.status !== 0 && open.status !== 1))
+            return null;
+        processes = listed;
+        holders = open.stdout.split('\n').flatMap((l) => (/^\d+$/.test(l.trim()) ? [Number(l)] : []));
+    }
+    const parent = new Map(processes.map((p) => [p.pid, p.ppid]));
+    const allowed = new Set();
+    for (let pid = process.pid; pid && !allowed.has(pid); pid = parent.get(pid)) {
+        allowed.add(pid);
+    }
+    const command = new Map(processes.map((p) => [p.pid, p.command]));
+    return [...new Set(holders)]
+        .filter((pid) => !allowed.has(pid))
+        .map((pid) => ({ pid, command: command.get(pid) ?? 'unknown' }));
+}
+/**
+ * Checks the terminal before the runner asks for the passphrase. It refuses when it finds a process,
+ * apart from the runner and the ones that started it, holding the terminal open, and says so plainly
+ * where it can't look. It skips processes whose open files it can't read, and nothing stops a program
+ * running as the developer from opening the terminal later, so this closes what it can, and the
+ * business's key stays off the agent's machine in production.
+ */
+export function checkTerminal(log = console.log) {
+    const others = otherTerminalHolders();
+    if (others === null) {
+        log("The runner can't see what else has this terminal open on this machine. Anything running as you can read what you type, so make sure nothing your agent started is still running.");
+        return;
+    }
+    if (others.length > 0) {
+        const named = others.map((p) => `${p.command} (process ${p.pid})`).join(', ');
+        throw new Error(`${named} ${others.length === 1 ? 'has' : 'have'} this terminal open and could read what you type, so the runner won't ask for the passphrase. Stop ${others.length === 1 ? 'it' : 'them'}, or run npm start in a new terminal, then press Enter.`);
+    }
+}
+/**
+ * Runs a file in a session of its own with no controlling terminal, its input closed and its output
+ * passed through pipes, so the runner hands it no way to the terminal the passphrase is typed in.
+ * Running as the developer, it could still open the terminal's device itself, which `checkTerminal`
+ * looks for. Once it exits, its whole process group is ended.
+ */
+function runIsolated(args, options) {
+    return new Promise((done) => {
+        const child = spawn(process.execPath, args, {
+            cwd: options.cwd,
+            env: options.env,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            detached: true,
+            windowsHide: true,
+        });
+        if (child.pid)
+            groups.add(child.pid);
+        let output = '';
+        let code = 1;
+        child.stdout.on('data', (chunk) => {
+            if (options.capture)
+                output += chunk.toString();
+            else
+                process.stdout.write(chunk);
+        });
+        child.stderr.on('data', (chunk) => {
+            process.stderr.write(chunk);
+        });
+        child.on('error', (error) => {
+            process.stderr.write(`${error.message}\n`);
+        });
+        child.on('exit', (exitCode) => {
+            code = exitCode ?? 1;
+            if (child.pid)
+                killGroup(child.pid);
+        });
+        child.on('close', () => done({ code, output }));
+    });
+}
+/**
+ * Runs the agent's file once, isolated as `runIsolated` runs it, with only the session in its
+ * environment. It reads the agent's item, and it gets no input, so it can't be asked for anything.
+ */
+export function runAgent(file, session, options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    return runIsolated(command(file, cwd), {
+        cwd,
+        env: childEnv(session),
+        capture: options.capture ?? false,
+    });
+}
+/**
+ * Prompts on the terminal, a line at a time. A passphrase is typed with nothing shown, and no line
+ * is kept in history, so no later prompt can bring one back.
+ */
+export function terminalPrompts(input = process.stdin, output = process.stdout, tty = Boolean(process.stdin.isTTY)) {
+    let muted = false;
+    const shown = new Writable({
+        write(chunk, encoding, done) {
+            if (!muted)
+                output.write(chunk, encoding);
+            done();
+        },
+    });
+    const lines = createInterface({ input, output: shown, terminal: tty, historySize: 0 });
+    let closed = false;
+    /** Whether a visible question's prompt is on the screen, waiting for its answer. */
+    let asking = false;
+    const waiting = new Set();
+    lines.on('close', () => {
+        closed = true;
+        for (const resolve of waiting)
+            resolve(null);
+    });
+    const ask = (prompt, hidden = false) => new Promise((resolve) => {
+        if (closed)
+            return resolve(null);
+        waiting.add(resolve);
+        const answered = (answer) => {
+            muted = false;
+            asking = false;
+            waiting.delete(resolve);
+            if (hidden && tty)
+                output.write('\n');
+            resolve(answer);
+        };
+        // A hidden answer's prompt is written before the output is muted, so nothing typed shows. A
+        // visible one's goes to readline, which draws it again whenever it redraws the line.
+        if (hidden) {
+            output.write(prompt);
+            muted = true;
+            lines.question('', answered);
+        }
+        else {
+            asking = true;
+            lines.question(prompt, answered);
+        }
+    });
+    /**
+     * Writes output that arrives while a question may be waiting, such as the customer's reply while
+     * the developer types to the agent. The prompt's row is cleared first and drawn again under the
+     * output with whatever was typed so far, so output and typing never share a row.
+     */
+    const print = (text) => {
+        if (!asking || !tty || closed) {
+            output.write(text);
+            return;
+        }
+        output.write(`\r\u001b[2K${text}`);
+        // biome-ignore lint/suspicious/noControlCharactersInRegex: the rail's autowrap switches
+        const bare = text.replace(/\u001b\[\?7[lh]/g, '');
+        if (bare.endsWith('\n') || bare === '\r\u001b[2K')
+            lines.prompt(true);
+    };
+    /** Each line typed while no question waits for it, such as one typed to a busy agent. */
+    const onLine = (listener) => {
+        lines.on('line', listener);
+    };
+    return {
+        ask,
+        onLine,
+        print,
+        history: () => [...(lines.history ?? [])],
+    };
+}
+/**
+ * Reads the business's config from its file, isolated as the agent runs, so nothing in the file
+ * runs where the business's key is ever opened. The file's default export is the config.
+ */
+export async function readBusinessConfig(file, cwd = process.cwd()) {
+    const dir = mkdtempSync(join(tmpdir(), 'avow-business-'));
+    const loader = join(dir, 'read.mjs');
+    writeFileSync(loader, 'const m = await import(process.argv[2]); process.stdout.write(JSON.stringify(m.default ?? null))\n');
+    const url = pathToFileURL(resolve(cwd, file)).href;
+    const [first, ...rest] = command(file, cwd);
+    const args = first === file ? [loader, url] : [first, loader, url, ...rest.slice(1)];
+    try {
+        const { code, output } = await runIsolated(args, { cwd, env: childEnv(null), capture: true });
+        if (code !== 0)
+            throw new Error(`${file} didn't load, so nothing was signed.`);
+        const text = output;
+        const config = JSON.parse(text);
+        if (typeof config !== 'object' || config === null) {
+            throw new Error(`${file} has to export its business as its default export.`);
+        }
+        return config;
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/node/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/node/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EACL,WAAW,EACX,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAGxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAE1C,4FAA4F;AAC5F,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE;IAC/D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,8CAA8C,CAAC,CAAA;IAChF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,OAA8B;IACrD,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IAClD,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,EAAE,CAAA;QACpC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,iEAAiE;AACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;AAEhC,mFAAmF;AACnF,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC7E,OAAM;IACR,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAC1D,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAM,GAAG,IAAI;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAA;IACpC,OAAO,aAAa,EAAE,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,MAAM;YAAE,SAAS,CAAC,GAAG,CAAC,CAAA;QACxC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,4HAA4H,CAC7H,CAAA;QACH,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1D,CAAC;AACH,CAAC;AAQD,mGAAmG;AACnG,SAAS,cAAc;IACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACtF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5D,OAAO,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AACnD,CAAC;AAED,oGAAoG;AACpG,SAAS,cAAc;IACrB,OAAO,WAAW,CAAC,OAAO,CAAC;SACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACpC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAChB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,IAAI,OAAO,EAAE,MAAM,CAAC,CAAA;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACxE,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,IAAI,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YACjE,IAAI,KAAK,GAAa,EAAE,CAAA;YACxB,IAAI,CAAC;gBACH,KAAK,GAAG,WAAW,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;oBACrD,IAAI,CAAC;wBACH,OAAO,CAAC,YAAY,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;oBACjD,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,EAAE,CAAA;oBACX,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;YACD,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC,CAAC,CAAA;AACN,CAAC;AAED,gEAAgE;AAChE,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE;QAC/D,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnC,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAChD,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3F,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IAC7C,MAAM,MAAM,GAAG,cAAc,EAAE,CAAA;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,SAA2D,CAAA;IAC/D,IAAI,OAAiB,CAAA;IACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,cAAc,EAAE,CAAA;QAC7B,SAAS,GAAG,IAAI,CAAA;QAChB,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC1E,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,WAAW,EAAE,CAAA;QAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YAC7C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAA;QACF,iDAAiD;QACjD,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAClF,SAAS,GAAG,MAAM,CAAA;QAClB,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/F,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,IAAI,GAAG,GAAuB,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACjE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;SACzB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAG,GAA2B,OAAO,CAAC,GAAG;IACrE,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAA;IACrC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,GAAG,CACD,kLAAkL,CACnL,CAAA;QACD,OAAM;IACR,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7E,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,sGAAsG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,yDAAyD,CACnP,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,IAAc,EACd,OAAkE;IAElE,OAAO,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YAC1C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;QACF,IAAI,KAAK,CAAC,GAAG;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,IAAI,OAAO,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;;gBAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC5B,IAAI,GAAG,QAAQ,IAAI,CAAC,CAAA;YACpB,IAAI,KAAK,CAAC,GAAG;gBAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,OAA8B,EAC9B,OAAO,GAAwC,EAAE;IAEjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACxC,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE;QACrC,GAAG;QACH,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;KAClC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAK,GAA0B,OAAO,CAAC,KAAK,EAC5C,MAAM,GAA0B,OAAO,CAAC,MAAM,EAC9C,GAAG,GAAY,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IAE3C,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC;QACzB,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI;YACzB,IAAI,CAAC,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YACzC,IAAI,EAAE,CAAA;QACR,CAAC;KACF,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;IACtF,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,oFAAoF;IACpF,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAA;IACxD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,MAAM,GAAG,IAAI,CAAA;QACb,KAAK,MAAM,OAAO,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,MAAM,GAAG,KAAK,EAAE,EAAE,CAC7C,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QACrC,IAAI,MAAM;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;QAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACpB,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;YAClC,KAAK,GAAG,KAAK,CAAA;YACb,MAAM,GAAG,KAAK,CAAA;YACd,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACvB,IAAI,MAAM,IAAI,GAAG;gBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,CAAC,MAAM,CAAC,CAAA;QACjB,CAAC,CAAA;QACD,4FAA4F;QAC5F,qFAAqF;QACrF,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YACpB,KAAK,GAAG,IAAI,CAAA;YACZ,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,IAAI,CAAA;YACb,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAClC,CAAC;IACH,CAAC,CAAC,CAAA;IACJ;;;;OAIG;IACH,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAClB,OAAM;QACR,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAA;QAClC,wFAAwF;QACxF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAA;QACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,aAAa;YAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACvE,CAAC,CAAA;IACD,yFAAyF;IACzF,MAAM,MAAM,GAAG,CAAC,QAAgC,EAAE,EAAE;QAClD,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC5B,CAAC,CAAA;IACD,OAAO;QACL,GAAG;QACH,MAAM;QACN,KAAK;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAE,KAA2C,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;KACjF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAA;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACpC,aAAa,CACX,MAAM,EACN,oGAAoG,CACrG,CAAA;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAClD,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC3C,MAAM,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAe,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9F,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7F,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAA;QAC9E,MAAM,IAAI,GAAG,MAAM,CAAA;QACnB,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oDAAoD,CAAC,CAAA;QAC9E,CAAC;QACD,OAAO,MAA+B,CAAA;IACxC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC"}

package/dist/node/service-child.d.ts

@@ -0,0 +1,2 @@
+export declare function runServiceChild(serviceUrl: string, inputPath: string): Promise<void>;
+//# sourceMappingURL=service-child.d.ts.map

package/dist/node/service-child.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-child.d.ts","sourceRoot":"","sources":["../../src/node/service-child.ts"],"names":[],"mappings":"AA6BA,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB1F"}

package/dist/node/service-child.js

@@ -0,0 +1,40 @@
+import { readFileSync } from 'node:fs';
+import { toWire } from '@avow-finance/spec';
+import { readBacking, tempoLockReader } from '@avow-finance/verifier';
+import { createPublicClient, http } from 'viem';
+import { decodeData } from '../session/data.js';
+import { isService } from '../session/service.js';
+import { serviceChecks, snapshotChain } from '../session/service-check.js';
+/**
+ * What runs in the developer's service process, which holds no key. It loads `service.ts`, then
+ * either writes its budget and switch, or runs `checkBeforeWork` on the job it was handed, with
+ * checks that read the chain and nothing else, and writes the verdict. Each answer is one line of
+ * JSON on its output.
+ */
+const systemClock = () => BigInt(Math.floor(Date.now() / 1000));
+/** The chain the checks read: Tempo's RPC for a live run, or what the fixture world handed over. */
+function chainOf(chain) {
+    if (chain.kind === 'snapshot')
+        return snapshotChain(chain.snapshot);
+    const client = createPublicClient({ transport: http(chain.url) });
+    return {
+        readers: [tempoLockReader(client, { factory: chain.factory, chainId: chain.chainId })],
+        backing: (lock, commitmentId, side, at) => readBacking(client, lock, commitmentId, side, { blockNumber: at }),
+    };
+}
+export async function runServiceChild(serviceUrl, inputPath) {
+    const input = decodeData(readFileSync(inputPath, 'utf8'));
+    const loaded = (await import(serviceUrl));
+    const service = loaded.default;
+    if (!isService(service)) {
+        throw new Error('service.ts has to export the service defineService makes as its default export');
+    }
+    if (input.mode === 'policy') {
+        const { budgetPerGpuHour, computeSwitch } = service.policy;
+        process.stdout.write(`${JSON.stringify({ budgetPerGpuHour: budgetPerGpuHour.toString(), computeSwitch })}\n`);
+        return;
+    }
+    const verdict = await service.checkBeforeWork(input.job, serviceChecks(chainOf(input.chain), systemClock));
+    process.stdout.write(`${JSON.stringify(toWire(verdict))}\n`);
+}
+//# sourceMappingURL=service-child.js.map

package/dist/node/service-child.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-child.js","sourceRoot":"","sources":["../../src/node/service-child.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACrE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAoB,MAAM,uBAAuB,CAAA;AACnE,OAAO,EAAwB,aAAa,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAGhG;;;;;GAKG;AAEH,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;AAE/D,oGAAoG;AACpG,SAAS,OAAO,CAAC,KAAiB;IAChC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACjE,OAAO;QACL,OAAO,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CACxC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;KACrE,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,SAAiB;IACzE,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAEE,CAAA;IAC1D,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAA0B,CAAA;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,IAAI,CACxF,CAAA;QACD,OAAM;IACR,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAC3C,KAAK,CAAC,GAAG,EACT,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CACjD,CAAA;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;AAC9D,CAAC"}

package/dist/node/service-excerpt.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The lines of a developer's service file that decided a first run: the compute budget, the
+ * compute switch, and `checkBeforeWork`, numbered as the file numbers them. The first run ends on
+ * these, so a developer sees the code that held their agent to its rules and where to change it.
+ */
+export interface ExcerptLine {
+    /** The line's number in the file, from 1. */
+    line: number;
+    text: string;
+}
+export interface ServiceExcerpt {
+    lines: ExcerptLine[];
+    /** The budget the file sets, in dollars per GPU-hour, when it sets one as a plain number. */
+    budget: number | null;
+}
+/**
+ * The deciding lines of a service file's source, or null when the file doesn't have the shape the
+ * starter wrote, since a developer who reshaped it knows where their rules are.
+ */
+export declare function serviceExcerpt(source: string): ServiceExcerpt | null;
+//# sourceMappingURL=service-excerpt.d.ts.map

package/dist/node/service-excerpt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-excerpt.d.ts","sourceRoot":"","sources":["../../src/node/service-excerpt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,WAAW,EAAE,CAAA;IACpB,6FAA6F;IAC7F,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAkBpE"}

package/dist/node/service-excerpt.js

@@ -0,0 +1,32 @@
+/**
+ * The lines of a developer's service file that decided a first run: the compute budget, the
+ * compute switch, and `checkBeforeWork`, numbered as the file numbers them. The first run ends on
+ * these, so a developer sees the code that held their agent to its rules and where to change it.
+ */
+/**
+ * The deciding lines of a service file's source, or null when the file doesn't have the shape the
+ * starter wrote, since a developer who reshaped it knows where their rules are.
+ */
+export function serviceExcerpt(source) {
+    const all = source.split('\n');
+    const find = (pattern) => all.findIndex((text) => pattern.test(text));
+    const budgetAt = find(/^\s*computeBudgetPerGpuHour\s*:/);
+    const switchAt = find(/^\s*bookCompute\s*:/);
+    const checkAt = find(/^\s*(async\s+)?checkBeforeWork\s*\(/);
+    if (checkAt === -1)
+        return null;
+    // The function ends at the first line back at its own indent that closes it.
+    const indent = /^\s*/.exec(all[checkAt] ?? '')?.[0] ?? '';
+    const endAt = all.findIndex((text, i) => i > checkAt && text.startsWith(`${indent}}`));
+    if (endAt === -1 || endAt - checkAt > 20)
+        return null;
+    const picked = [budgetAt, switchAt].filter((i) => i !== -1);
+    for (let i = checkAt; i <= endAt; i++)
+        picked.push(i);
+    const budget = budgetAt === -1 ? null : /:\s*(\d+(\.\d+)?)\s*,?\s*$/.exec(all[budgetAt] ?? '');
+    return {
+        lines: picked.map((i) => ({ line: i + 1, text: (all[i] ?? '').trimEnd() })),
+        budget: budget ? Number(budget[1]) : null,
+    };
+}
+//# sourceMappingURL=service-excerpt.js.map