@bjorntech/key-ferry 0.0.0-stage → 0.1.4

package/dist/services/process.js

@@ -0,0 +1,208 @@
+import { spawn } from "node:child_process";
+import { Context, Data, Duration, Effect, Layer } from "effect";
+/** Deliberately contains no command, arguments, or captured output. */
+export class ProcessError extends Data.TaggedError("ProcessError") {
+}
+export class Process extends Context.Service()("key-ferry/Process") {
+}
+const defaultMaxBytes = 1024 * 1024;
+const defaultGraceMs = 500;
+const safeMessage = (phase, code) => `${phase} failed (${code})`;
+const error = (phase, code, extra = {}) => new ProcessError({ phase, code, message: safeMessage(phase, code), ...extra });
+const kill = (child, graceMs) => Effect.callback((resume) => {
+    let settled = false;
+    let timer;
+    const finish = () => {
+        if (!settled) {
+            settled = true;
+            if (timer)
+                clearTimeout(timer);
+            child.removeListener("close", finish);
+            resume(Effect.void);
+        }
+    };
+    child.once("close", finish);
+    if (child.exitCode !== null || child.signalCode !== null)
+        return finish();
+    try {
+        child.kill("SIGTERM");
+    }
+    catch {
+        return finish();
+    }
+    timer = setTimeout(() => {
+        if (child.exitCode === null && child.signalCode === null) {
+            try {
+                child.kill("SIGKILL");
+            }
+            catch {
+                // The process may have exited between the check and kill.
+            }
+        }
+        finish();
+    }, Math.max(0, graceMs));
+    return Effect.sync(() => {
+        if (timer)
+            clearTimeout(timer);
+        child.removeListener("close", finish);
+    });
+});
+const spawnRaw = (input) => Effect.acquireRelease(Effect.callback((resume) => {
+    let child;
+    try {
+        // shell is intentionally absent. Never inherit or mutate global env.
+        child = spawn(input.executable, [...input.args], {
+            cwd: input.cwd,
+            // An omitted environment is intentionally isolated. Callers that
+            // need the trusted Varlock resolver environment must pass it
+            // deliberately; never inherit the host process environment.
+            env: input.env ? { ...input.env } : {},
+            shell: false,
+            detached: false,
+            stdio: ["ignore", "ignore", "ignore"],
+        });
+    }
+    catch {
+        resume(Effect.fail(error("spawn", "spawn-failed")));
+        return;
+    }
+    const completion = Effect.callback((done) => {
+        const close = (code, signal) => {
+            child.removeListener("error", onError);
+            if (code === 0)
+                done(Effect.succeed({ code, signal }));
+            else
+                done(Effect.fail(error("exit", code === null ? "signal" : "non-zero", {
+                    exitCode: code ?? undefined,
+                    signal: signal ?? undefined,
+                })));
+        };
+        const onError = () => done(Effect.fail(error("running", "io")));
+        child.once("close", close);
+        child.once("error", onError);
+        return Effect.sync(() => {
+            child.removeListener("close", close);
+            child.removeListener("error", onError);
+        });
+    });
+    let stopped = false;
+    const stop = Effect.suspend(() => {
+        if (stopped)
+            return Effect.void;
+        stopped = true;
+        // A stop is bounded by kill's grace period, but must not be
+        // interruptible between SIGTERM and the SIGKILL fallback. Otherwise
+        // an interrupted stop can clear the fallback timer while `stopped`
+        // prevents scope finalization from trying again.
+        return Effect.uninterruptible(kill(child, input.terminateGraceMs ?? defaultGraceMs));
+    });
+    resume(Effect.succeed({
+        pid: child.pid,
+        completion,
+        health: Effect.sync(() => ({
+            pid: child.pid,
+            running: child.exitCode === null && child.signalCode === null,
+            exit: child.exitCode !== null || child.signalCode !== null
+                ? { code: child.exitCode, signal: child.signalCode }
+                : undefined,
+        })),
+        stop,
+    }));
+}), (process) => process.stop.pipe(Effect.catch(() => Effect.void)));
+const run = (input) => {
+    const maxBytes = input.maxBytes ?? defaultMaxBytes;
+    const spawned = Effect.callback((resume, signal) => {
+        let child;
+        try {
+            child = spawn(input.executable, [...input.args], {
+                cwd: input.cwd,
+                env: input.env ? { ...input.env } : {},
+                shell: false,
+                detached: false,
+                stdio: ["ignore", "pipe", "pipe"],
+            });
+        }
+        catch {
+            resume(Effect.fail(error("spawn", "spawn-failed")));
+            return;
+        }
+        let stdout = "";
+        let stderr = "";
+        let limited = false;
+        const onData = (which) => (chunk) => {
+            if (which === "stdout")
+                stdout += chunk.toString("utf8");
+            else
+                stderr += chunk.toString("utf8");
+            if ((which === "stdout" ? Buffer.byteLength(stdout) : Buffer.byteLength(stderr)) > maxBytes &&
+                !limited) {
+                limited = true;
+                try {
+                    child.kill("SIGTERM");
+                }
+                catch {
+                    /* already exited */
+                }
+                setTimeout(() => {
+                    if (child.exitCode === null && child.signalCode === null) {
+                        try {
+                            child.kill("SIGKILL");
+                        }
+                        catch {
+                            /* already exited */
+                        }
+                    }
+                }, defaultGraceMs);
+            }
+        };
+        const out = onData("stdout");
+        const err = onData("stderr");
+        child.stdout?.on("data", out);
+        child.stderr?.on("data", err);
+        const close = (code, sig) => {
+            if (limited)
+                resume(Effect.fail(error("capture-limit", "capture-limit")));
+            else if (code === 0)
+                resume(Effect.succeed({ code, signal: sig, stdout, stderr }));
+            else
+                resume(Effect.fail(error("exit", code === null ? "signal" : "non-zero", {
+                    exitCode: code ?? undefined,
+                    signal: sig ?? undefined,
+                })));
+        };
+        child.once("close", close);
+        child.once("error", () => resume(Effect.fail(error("running", "io"))));
+        signal.addEventListener("abort", () => {
+            try {
+                child.kill("SIGTERM");
+            }
+            catch {
+                /* already exited */
+            }
+            setTimeout(() => {
+                if (child.exitCode === null && child.signalCode === null) {
+                    try {
+                        child.kill("SIGKILL");
+                    }
+                    catch {
+                        /* already exited */
+                    }
+                }
+            }, defaultGraceMs);
+        }, { once: true });
+        return Effect.sync(() => {
+            child.stdout?.removeListener("data", out);
+            child.stderr?.removeListener("data", err);
+            child.removeListener("close", close);
+        });
+    });
+    const bounded = input.timeoutMs === undefined
+        ? spawned
+        : spawned.pipe(Effect.timeoutOrElse({
+            duration: Duration.millis(input.timeoutMs),
+            orElse: () => Effect.fail(error("timeout", "timeout")),
+        }));
+    return bounded;
+};
+export const ProcessLive = Layer.succeed(Process, Process.of({ run, spawn: spawnRaw }));
+//# sourceMappingURL=process.js.map

package/dist/services/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/services/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAIhE,uEAAuE;AACvE,MAAM,OAAO,YAAa,SAAQ,IAAI,CAAC,WAAW,CAAC,cAAc,CAM/D;CAAG;AAgDL,MAAM,OAAO,OAAQ,SAAQ,OAAO,CAAC,OAAO,EAA2B,CAAC,mBAAmB,CAAC;CAAG;AAE/F,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;AACpC,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,WAAW,GAAG,CAAC,KAAmB,EAAE,IAA0B,EAAU,EAAE,CAC9E,GAAG,KAAK,YAAY,IAAI,GAAG,CAAC;AAE9B,MAAM,KAAK,GAAG,CACZ,KAAmB,EACnB,IAA0B,EAC1B,QAA4D,EAAE,EAC9D,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAEpF,MAAM,IAAI,GAAG,CAAC,KAAmB,EAAE,OAAe,EAAqC,EAAE,CACvF,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAgD,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,MAAM,EAAE,CAAC;IAC1E,IAAI,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;IACD,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE;QACH,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;YAC5D,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC;IACX,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CACrB,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACtB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,CACf,KAAiB,EAC8C,EAAE,CACjE,MAAM,CAAC,cAAc,CACnB,MAAM,CAAC,QAAQ,CAA+B,CAAC,MAAM,EAAE,EAAE;IACvD,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,qEAAqE;QACrE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE;YAC/C,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,iEAAiE;YACjE,6DAA6D;YAC7D,4DAA4D;YAC5D,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE;YACtC,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAA4B,CAAC,IAAI,EAAE,EAAE;QACrE,MAAM,KAAK,GAAG,CAAC,IAAmB,EAAE,MAA6B,EAAE,EAAE;YACnE,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;;gBAErD,IAAI,CACF,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE;oBACnD,QAAQ,EAAE,IAAI,IAAI,SAAS;oBAC3B,MAAM,EAAE,MAAM,IAAI,SAAS;iBAC5B,CAAC,CACH,CACF,CAAC;QACN,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAChC,OAAO,GAAG,IAAI,CAAC;QACf,4DAA4D;QAC5D,oEAAoE;QACpE,mEAAmE;QACnE,iDAAiD;QACjD,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,gBAAgB,IAAI,cAAc,CAAC,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IACH,MAAM,CACJ,MAAM,CAAC,OAAO,CAAC;QACb,GAAG,EAAE,KAAK,CAAC,GAAI;QACf,UAAU;QACV,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACzB,GAAG,EAAE,KAAK,CAAC,GAAI;YACf,OAAO,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAC7D,IAAI,EACF,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;gBAClD,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE;gBACpD,CAAC,CAAC,SAAS;SAChB,CAAC,CAAC;QACH,IAAI;KACL,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,EACF,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAChE,CAAC;AAEJ,MAAM,GAAG,GAAG,CAAC,KAAe,EAA0C,EAAE;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,eAAe,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QAC1E,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE;gBAC/C,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE;gBACtC,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;YAC/D,IAAI,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;;gBACpD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtC,IACE,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ;gBACvF,CAAC,OAAO,EACR,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,oBAAoB;gBACtB,CAAC;gBACD,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;wBACzD,IAAI,CAAC;4BACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACxB,CAAC;wBAAC,MAAM,CAAC;4BACP,oBAAoB;wBACtB,CAAC;oBACH,CAAC;gBACH,CAAC,EAAE,cAAc,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,CAAC,IAAmB,EAAE,GAA0B,EAAE,EAAE;YAChE,IAAI,OAAO;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;iBACrE,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;;gBAEjF,MAAM,CACJ,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE;oBACnD,QAAQ,EAAE,IAAI,IAAI,SAAS;oBAC3B,MAAM,EAAE,GAAG,IAAI,SAAS;iBACzB,CAAC,CACH,CACF,CAAC;QACN,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,gBAAgB,CACrB,OAAO,EACP,GAAG,EAAE;YACH,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;YACD,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;oBACzD,IAAI,CAAC;wBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,oBAAoB;oBACtB,CAAC;gBACH,CAAC;YACH,CAAC,EAAE,cAAc,CAAC,CAAC;QACrB,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1C,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1C,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GACX,KAAK,CAAC,SAAS,KAAK,SAAS;QAC3B,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;SACvD,CAAC,CACH,CAAC;IACR,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC"}

package/dist/tui.d.ts

@@ -0,0 +1,59 @@
+import { Plugin } from "@opencode/plugin/tui";
+export interface SafeStatusView {
+    readonly phase: string;
+    readonly generation: number;
+    readonly diagnostics?: readonly {
+        readonly server: string;
+        readonly code: string;
+        readonly message: string;
+    }[];
+    readonly error?: {
+        readonly code: string;
+        readonly message: string;
+        readonly retryable: boolean;
+    };
+}
+export interface TuiActions {
+    readonly status: () => Promise<SafeStatusView>;
+    readonly refresh: () => Promise<SafeStatusView>;
+    readonly doctor: () => Promise<SafeStatusView>;
+    readonly show: (title: string, message: string, variant: "info" | "success" | "warning" | "error") => void;
+}
+export declare function formatStatus(status: SafeStatusView): string;
+export declare function createCommands(actions: TuiActions): readonly [{
+    readonly id: "key-ferry.status";
+    readonly title: "Key Ferry: Status";
+    readonly description: "Show safe Key Ferry sidecar state";
+    readonly group: "Varlock";
+    readonly palette: true;
+    readonly slash: {
+        readonly name: "key-ferry-status";
+        readonly aliases: string[];
+    };
+    readonly run: () => Promise<void>;
+}, {
+    readonly id: "key-ferry.refresh";
+    readonly title: "Key Ferry: Refresh";
+    readonly description: "Refresh the protected project environment";
+    readonly group: "Varlock";
+    readonly palette: true;
+    readonly slash: {
+        readonly name: "key-ferry-refresh";
+        readonly aliases: string[];
+    };
+    readonly run: () => Promise<void>;
+}, {
+    readonly id: "key-ferry.doctor";
+    readonly title: "Key Ferry: Doctor";
+    readonly description: "Check Varlock readiness and protected connections";
+    readonly group: "Varlock";
+    readonly palette: true;
+    readonly slash: {
+        readonly name: "key-ferry-doctor";
+        readonly aliases: string[];
+    };
+    readonly run: () => Promise<void>;
+}];
+declare const _default: Plugin.Definition;
+export default _default;
+//# sourceMappingURL=tui.d.ts.map

package/dist/tui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui.d.ts","sourceRoot":"","sources":["../src/tui.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS;QAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,EAAE,CAAC;IACJ,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;CACnG;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,CACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,KAC9C,IAAI,CAAC;CACX;AAuBD,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAO3D;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU;;;;;;;;0BAuBe,MAAM,EAAE;;;;;;;;;;;0BASN,MAAM,EAAE;;;;;;;;;;;0BASV,MAAM,EAAE;;;GAIxE;;AAED,wBAwBG"}

package/dist/tui.js

@@ -0,0 +1,93 @@
+import { Plugin } from "@opencode/plugin/tui";
+import { KeyFerryRpc } from "./rpc.js";
+const errorMessage = (error) => {
+    if (typeof error !== "object" || error === null)
+        return "Varlock is unavailable";
+    const code = "code" in error && typeof error.code === "string" ? error.code : "unavailable";
+    switch (code) {
+        case "invalid_config":
+            return "Varlock configuration is invalid";
+        case "start_failed":
+            return "Varlock could not start";
+        case "refresh_failed":
+            return "Varlock refresh failed";
+        case "timeout":
+            return "Varlock operation timed out";
+        case "not_ready":
+            return "Varlock is not ready";
+        case "protocol_error":
+            return "Varlock returned an invalid response";
+        default:
+            return "Varlock is unavailable";
+    }
+};
+export function formatStatus(status) {
+    const lines = status.error
+        ? [`${status.error.message} (${status.error.code})`]
+        : [`State: ${status.phase}`, `Generation: ${status.generation}`];
+    for (const item of status.diagnostics ?? [])
+        lines.push(`${item.server}: ${item.message} (${item.code})`);
+    return lines.join("\n");
+}
+export function createCommands(actions) {
+    const run = (title, operation, success) => async () => {
+        actions.show(title, "Working…", "info");
+        try {
+            const status = await operation();
+            actions.show(title, `${success}\n\n${formatStatus(status)}`, status.error ? "warning" : "success");
+        }
+        catch (error) {
+            actions.show(title, errorMessage(error), "error");
+        }
+    };
+    return [
+        {
+            id: "key-ferry.status",
+            title: "Key Ferry: Status",
+            description: "Show safe Key Ferry sidecar state",
+            group: "Varlock",
+            palette: true,
+            slash: { name: "key-ferry-status", aliases: ["vstatus"] },
+            run: run("Varlock status", actions.status, "Status loaded"),
+        },
+        {
+            id: "key-ferry.refresh",
+            title: "Key Ferry: Refresh",
+            description: "Refresh the protected project environment",
+            group: "Varlock",
+            palette: true,
+            slash: { name: "key-ferry-refresh", aliases: ["vrefresh"] },
+            run: run("Varlock refresh", actions.refresh, "Refresh completed"),
+        },
+        {
+            id: "key-ferry.doctor",
+            title: "Key Ferry: Doctor",
+            description: "Check Varlock readiness and protected connections",
+            group: "Varlock",
+            palette: true,
+            slash: { name: "key-ferry-doctor", aliases: ["vdoctor"] },
+            run: run("Varlock doctor", actions.doctor, "Check completed"),
+        },
+    ];
+}
+export default Plugin.define({
+    id: "key-ferry.tui",
+    setup(context) {
+        // The server RPC uses Effect Schema. The generated Promise client exposes
+        // the same validated wire contract, but its declaration only admits
+        // PortableDefinition, so this boundary is typed at the safe response.
+        const rpc = context.client.rpc(KeyFerryRpc);
+        const show = (title, message, variant) => context.ui.toast.show({ title, message, variant });
+        context.keymap.layer(() => ({
+            mode: "global",
+            priority: 20,
+            commands: createCommands({
+                status: () => rpc.status({}),
+                refresh: () => rpc.refresh({}),
+                doctor: () => rpc.doctor({}),
+                show,
+            }),
+        }));
+    },
+});
+//# sourceMappingURL=tui.js.map

package/dist/tui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui.js","sourceRoot":"","sources":["../src/tui.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAwBvC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,EAAE;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,wBAAwB,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;IAC5F,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,gBAAgB;YACnB,OAAO,kCAAkC,CAAC;QAC5C,KAAK,cAAc;YACjB,OAAO,yBAAyB,CAAC;QACnC,KAAK,gBAAgB;YACnB,OAAO,wBAAwB,CAAC;QAClC,KAAK,SAAS;YACZ,OAAO,6BAA6B,CAAC;QACvC,KAAK,WAAW;YACd,OAAO,sBAAsB,CAAC;QAChC,KAAK,gBAAgB;YACnB,OAAO,sCAAsC,CAAC;QAChD;YACE,OAAO,wBAAwB,CAAC;IACpC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK;QACxB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;QACpD,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,eAAe,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE;QACzC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAmB;IAChD,MAAM,GAAG,GACP,CAAC,KAAa,EAAE,SAAwC,EAAE,OAAe,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;QACvF,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CACV,KAAK,EACL,GAAG,OAAO,OAAO,YAAY,CAAC,MAAM,CAAC,EAAE,EACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;IAEJ,OAAO;QACL;YACE,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,mCAAmC;YAChD,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,IAAa;YACtB,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,SAAS,CAAa,EAAE;YACrE,GAAG,EAAE,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC;SAC5D;QACD;YACE,EAAE,EAAE,mBAAmB;YACvB,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,2CAA2C;YACxD,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,IAAa;YACtB,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,UAAU,CAAa,EAAE;YACvE,GAAG,EAAE,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,OAAO,EAAE,mBAAmB,CAAC;SAClE;QACD;YACE,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,mDAAmD;YAChE,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,IAAa;YACtB,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,SAAS,CAAa,EAAE;YACrE,GAAG,EAAE,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC;SAC9D;KACO,CAAC;AACb,CAAC;AAED,eAAe,MAAM,CAAC,MAAM,CAAC;IAC3B,EAAE,EAAE,eAAe;IACnB,KAAK,CAAC,OAAO;QACX,0EAA0E;QAC1E,oEAAoE;QACpE,sEAAsE;QACtE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,WAAgD,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,CACX,KAAa,EACb,OAAe,EACf,OAAiD,EACjD,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAExD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,cAAc,CAAC;gBACvB,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAA4B;gBACvD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAA4B;gBACzD,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAA4B;gBACvD,IAAI;aACL,CAAC;SACH,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC,CAAC"}

package/dist/varlock/manager.d.ts

@@ -0,0 +1,6 @@
+import { Layer } from "effect";
+import { ProjectKeyFerryManager, type ProjectKeyFerryManagerFactory, type ProjectKeyFerryManagerOptions, VarlockError } from "../contracts.js";
+import { Process } from "../services/process.js";
+export declare function makeProjectKeyFerryManager(options: ProjectKeyFerryManagerOptions, processLayer?: Layer.Layer<Process, never, never>): Layer.Layer<ProjectKeyFerryManager, VarlockError, never>;
+export declare const projectKeyFerryManagerFactory: ProjectKeyFerryManagerFactory;
+//# sourceMappingURL=manager.d.ts.map

package/dist/varlock/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/varlock/manager.ts"],"names":[],"mappings":"AAIA,OAAO,EAAoB,KAAK,EAAoB,MAAM,QAAQ,CAAC;AACnE,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,KAAK,6BAA6B,EAIlC,YAAY,EACb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,OAAO,EAKR,MAAM,wBAAwB,CAAC;AAwUhC,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,6BAA6B,EACtC,YAAY,GAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAe,GAC7D,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,YAAY,EAAE,KAAK,CAAC,CA0U1D;AAED,eAAO,MAAM,6BAA6B,EAAE,6BAE3C,CAAC"}