@cpajs/cpa 0.0.0-stage → 0.0.1-alpha-2

package/dist/server/process.d.ts

@@ -0,0 +1,27 @@
+import { type ChildProcess } from 'node:child_process';
+import type { ExitResult, LogLine } from './types.ts';
+export interface SpawnOptions {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    redact: (text: string) => string;
+    onLog?: ((log: LogLine) => void) | undefined;
+}
+/** A spawned CPA process with line-buffered, redacted output and idempotent stop. */
+export declare class ManagedProcess {
+    #private;
+    readonly child: ChildProcess;
+    readonly exited: Promise<ExitResult>;
+    readonly recentLogs: LogLine[];
+    /** Set when the process could not be spawned at all. */
+    spawnError: Error | undefined;
+    exitResult: ExitResult | undefined;
+    constructor(binaryPath: string, args: readonly string[], options: SpawnOptions);
+    onLine(listener: (log: LogLine) => void): () => void;
+    output(): string;
+    /**
+     * Sends SIGTERM and waits up to `timeoutMs` before SIGKILL. On Windows Node
+     * can only terminate the process forcefully, so both steps are immediate.
+     */
+    stop(timeoutMs: number): Promise<ExitResult>;
+}
+//# sourceMappingURL=process.d.ts.map

package/dist/server/process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/server/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAgBtD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACjC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC9C;AAED,qFAAqF;AACrF,qBAAa,cAAc;;IACzB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,CAAM;IACpC,wDAAwD;IACxD,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IAOnC,YAAY,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAsB7E;IAkCD,MAAM,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAGnD;IAED,MAAM,IAAI,MAAM,CAEf;IAED;;;OAGG;IACH,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAc3C;CACF"}

package/dist/server/process.js

@@ -0,0 +1,114 @@
+import { spawn } from 'node:child_process';
+const MAX_RECENT_LINES = 200;
+// Children still running when the parent exits are killed so they never outlive it.
+const live = new Set();
+let exitHookInstalled = false;
+function trackChild(child) {
+    live.add(child);
+    if (exitHookInstalled)
+        return;
+    exitHookInstalled = true;
+    process.once('exit', () => {
+        for (const c of live)
+            c.kill('SIGKILL');
+    });
+}
+/** A spawned CPA process with line-buffered, redacted output and idempotent stop. */
+export class ManagedProcess {
+    child;
+    exited;
+    recentLogs = [];
+    /** Set when the process could not be spawned at all. */
+    spawnError;
+    exitResult;
+    #redact;
+    #onLog;
+    #lineListeners = new Set();
+    #stopping;
+    constructor(binaryPath, args, options) {
+        this.#redact = options.redact;
+        this.#onLog = options.onLog;
+        this.child = spawn(binaryPath, [...args], {
+            cwd: options.cwd,
+            env: options.env,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            windowsHide: true,
+        });
+        trackChild(this.child);
+        this.exited = new Promise((resolve) => {
+            this.child.once('error', (error) => {
+                this.spawnError = error;
+                // 'exit' is not emitted when spawning fails.
+                if (this.child.pid === undefined)
+                    this.#finish(resolve, { code: null, signal: null });
+            });
+            this.child.once('close', (code, signal) => this.#finish(resolve, { code, signal }));
+        });
+        this.#pipe(this.child.stdout, 'stdout');
+        this.#pipe(this.child.stderr, 'stderr');
+    }
+    #finish(resolve, result) {
+        if (this.exitResult)
+            return;
+        this.exitResult = result;
+        live.delete(this.child);
+        resolve(result);
+    }
+    #pipe(stream, name) {
+        if (!stream)
+            return;
+        stream.setEncoding('utf8');
+        let pending = '';
+        const emit = (raw) => {
+            const log = { stream: name, line: this.#redact(raw.replace(/\r$/, '')) };
+            this.recentLogs.push(log);
+            if (this.recentLogs.length > MAX_RECENT_LINES)
+                this.recentLogs.shift();
+            for (const listener of this.#lineListeners)
+                listener(log);
+            this.#onLog?.(log);
+        };
+        stream.on('data', (chunk) => {
+            pending += chunk;
+            let index;
+            while ((index = pending.indexOf('\n')) !== -1) {
+                emit(pending.slice(0, index));
+                pending = pending.slice(index + 1);
+            }
+        });
+        stream.on('end', () => {
+            if (pending)
+                emit(pending);
+            pending = '';
+        });
+    }
+    onLine(listener) {
+        this.#lineListeners.add(listener);
+        return () => this.#lineListeners.delete(listener);
+    }
+    output() {
+        return this.recentLogs.map((l) => l.line).join('\n');
+    }
+    /**
+     * Sends SIGTERM and waits up to `timeoutMs` before SIGKILL. On Windows Node
+     * can only terminate the process forcefully, so both steps are immediate.
+     */
+    stop(timeoutMs) {
+        if (this.exitResult)
+            return Promise.resolve(this.exitResult);
+        this.#stopping ??= (async () => {
+            this.child.kill('SIGTERM');
+            let timer;
+            const timedOut = new Promise((resolve) => {
+                timer = setTimeout(() => resolve('timeout'), timeoutMs);
+            });
+            const first = await Promise.race([this.exited, timedOut]);
+            clearTimeout(timer);
+            if (first === 'timeout')
+                this.child.kill('SIGKILL');
+            return this.exited;
+        })();
+        return this.#stopping;
+    }
+}
+//# sourceMappingURL=process.js.map

package/dist/server/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/server/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAI9D,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,oFAAoF;AACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgB,CAAC;AACrC,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,SAAS,UAAU,CAAC,KAAmB;IACrC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,iBAAiB;QAAE,OAAO;IAC9B,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACxB,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AASD,qFAAqF;AACrF,MAAM,OAAO,cAAc;IAChB,KAAK,CAAe;IACpB,MAAM,CAAsB;IAC5B,UAAU,GAAc,EAAE,CAAC;IACpC,wDAAwD;IACxD,UAAU,CAAoB;IAC9B,UAAU,CAAyB;IAE1B,OAAO,CAA2B;IAClC,MAAM,CAAuC;IAC7C,cAAc,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5D,SAAS,CAAkC;IAE3C,YAAY,UAAkB,EAAE,IAAuB,EAAE,OAAqB;QAC5E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YACxC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEvB,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;YAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;gBACxB,6CAA6C;gBAC7C,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS;oBAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,OAAqC,EAAE,MAAkB;QAC/D,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAC5B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAuB,EAAE,IAAuB;QACpD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;YACjC,MAAM,GAAG,GAAY,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,gBAAgB;gBAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACvE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc;gBAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,OAAO,IAAI,KAAK,CAAC;YACjB,IAAI,KAAa,CAAC;YAClB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC9B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACpB,IAAI,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,OAAO,GAAG,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,QAAgC;QACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,SAAiB;QACpB,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,KAAiC,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;gBAClD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1D,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/server/readiness.d.ts

@@ -0,0 +1,13 @@
+/** Hostname to connect to for a configured bind host. */
+export declare function connectHost(bindHost: string): string;
+export declare function formatOrigin(protocol: 'http' | 'https', host: string, port: number): string;
+/**
+ * Single `GET /healthz` probe. Certificate checks are skipped because the probe
+ * only targets the child process this package just started.
+ */
+export declare function probeHealth(origin: string, timeoutMs: number): Promise<boolean>;
+/** Asks the OS for a currently free TCP port on `host`. */
+export declare function findFreePort(host: string): Promise<number>;
+/** Resolves to true when nothing is listening on `host:port`. */
+export declare function isPortFree(host: string, port: number): Promise<boolean>;
+//# sourceMappingURL=readiness.d.ts.map

package/dist/server/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../src/server/readiness.ts"],"names":[],"mappings":"AAIA,yDAAyD;AACzD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIpD;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/E;AAED,2DAA2D;AAC3D,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW1D;AAED,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQvE"}

package/dist/server/readiness.js

@@ -0,0 +1,56 @@
+import { request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import { createServer } from 'node:net';
+/** Hostname to connect to for a configured bind host. */
+export function connectHost(bindHost) {
+    if (bindHost === '' || bindHost === '0.0.0.0')
+        return '127.0.0.1';
+    if (bindHost === '::' || bindHost === '[::]')
+        return '::1';
+    return bindHost;
+}
+export function formatOrigin(protocol, host, port) {
+    const h = host.includes(':') && !host.startsWith('[') ? `[${host}]` : host;
+    return `${protocol}://${h}:${port}`;
+}
+/**
+ * Single `GET /healthz` probe. Certificate checks are skipped because the probe
+ * only targets the child process this package just started.
+ */
+export function probeHealth(origin, timeoutMs) {
+    const url = new URL('/healthz', origin);
+    const request = url.protocol === 'https:' ? httpsRequest : httpRequest;
+    return new Promise((resolve) => {
+        const req = request(url, { method: 'GET', timeout: timeoutMs, rejectUnauthorized: false }, (res) => {
+            res.resume();
+            resolve(res.statusCode === 200);
+        });
+        req.on('timeout', () => req.destroy());
+        req.on('error', () => resolve(false));
+        req.end();
+    });
+}
+/** Asks the OS for a currently free TCP port on `host`. */
+export function findFreePort(host) {
+    return new Promise((resolve, reject) => {
+        const server = createServer();
+        server.unref();
+        server.once('error', reject);
+        server.listen({ host: connectHost(host), port: 0, exclusive: true }, () => {
+            const address = server.address();
+            const port = typeof address === 'object' && address ? address.port : 0;
+            server.close(() => (port ? resolve(port) : reject(new Error('Could not allocate a free port.'))));
+        });
+    });
+}
+/** Resolves to true when nothing is listening on `host:port`. */
+export function isPortFree(host, port) {
+    return new Promise((resolve) => {
+        const server = createServer();
+        server.unref();
+        server.once('error', (error) => resolve(error.code !== 'EADDRINUSE'));
+        // An empty bind host means all interfaces, which is what CPA binds in that case.
+        server.listen({ host: host === '' ? undefined : host, port, exclusive: true }, () => server.close(() => resolve(true)));
+    });
+}
+//# sourceMappingURL=readiness.js.map

package/dist/server/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../src/server/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,yDAAyD;AACzD,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAClE,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA0B,EAAE,IAAY,EAAE,IAAY;IACjF,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,OAAO,GAAG,QAAQ,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,SAAiB;IAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YACjG,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;YACxE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC;QAC7F,iFAAiF;QACjF,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1H,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/redact.d.ts

@@ -0,0 +1,3 @@
+/** Replaces every occurrence of the given secrets with `[REDACTED]`. */
+export declare function createRedactor(secrets: Iterable<string | undefined>): (text: string) => string;
+//# sourceMappingURL=redact.d.ts.map

package/dist/server/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/server/redact.ts"],"names":[],"mappings":"AAEA,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAU9F"}

package/dist/server/redact.js

@@ -0,0 +1,16 @@
+const MIN_SECRET_LENGTH = 4;
+/** Replaces every occurrence of the given secrets with `[REDACTED]`. */
+export function createRedactor(secrets) {
+    const values = [...new Set([...secrets].filter((s) => typeof s === 'string' && s.length >= MIN_SECRET_LENGTH))]
+        // Longest first so a secret containing another one is fully masked.
+        .sort((a, b) => b.length - a.length);
+    if (values.length === 0)
+        return (text) => text;
+    return (text) => {
+        let out = text;
+        for (const value of values)
+            out = out.split(value).join('[REDACTED]');
+        return out;
+    };
+}
+//# sourceMappingURL=redact.js.map

package/dist/server/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/server/redact.ts"],"names":[],"mappings":"AAAA,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,OAAqC;IAClE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC,CAAC;QAC1H,oEAAoE;SACnE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;IAC/C,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtE,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/targets.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Platform targets for the prebuilt CLIProxyAPI binaries.
+ *
+ * This list is the single source of truth for both the runtime binary lookup
+ * and the build/assembly scripts, so it must stay free of Node-only imports.
+ */
+/** How a target binary is produced. */
+export type TargetBuild = 
+/** CGO enabled, dynamic library plugins supported (matches the upstream default build). */
+'plugin'
+/** CGO disabled, statically linked, no dynamic library plugins (upstream "no-plugin"). */
+ | 'portable';
+/** The strongest verification CI performs for a target. */
+export type TargetVerification = 
+/** Started natively on a matching runner and smoke-tested over HTTP. */
+'native'
+/** Started under QEMU user-mode emulation and smoke-tested over HTTP. */
+ | 'emulated'
+/** Only cross-compiled; the binary is never executed in CI. */
+ | 'cross-compiled';
+export interface Target {
+    /** Package suffix, e.g. `linux-x64-gnu` → `@cpajs/linux-x64-gnu`. */
+    readonly id: string;
+    /** `process.platform` value. */
+    readonly os: NodeJS.Platform;
+    /** `process.arch` value. */
+    readonly cpu: NodeJS.Architecture;
+    /** npm `libc` constraint. Omitted for static binaries that run on any libc. */
+    readonly libc?: 'glibc' | 'musl';
+    readonly goos: string;
+    readonly goarch: string;
+    /** Extra Go environment, e.g. `GOARM`. */
+    readonly goenv?: Readonly<Record<string, string>>;
+    readonly build: TargetBuild;
+    readonly verification: TargetVerification;
+    /** Human-readable caveats shown in docs and errors. */
+    readonly notes?: string;
+}
+export declare const NPM_SCOPE = "@cpajs";
+export declare const TARGETS: readonly Target[];
+/**
+ * Node platforms deliberately not covered, with the reason. Checked by
+ * cross-compiling the pinned source with CGO disabled.
+ */
+export declare const UNSUPPORTED_PLATFORMS: Readonly<Record<string, string>>;
+export declare function packageName(target: Target): string;
+export declare function binaryName(target: Pick<Target, 'os'>): string;
+//# sourceMappingURL=targets.d.ts.map

package/dist/server/targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../src/server/targets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,uCAAuC;AACvC,MAAM,MAAM,WAAW;AACrB,2FAA2F;AACzF,QAAQ;AACV,0FAA0F;GACxF,UAAU,CAAC;AAEf,2DAA2D;AAC3D,MAAM,MAAM,kBAAkB;AAC5B,wEAAwE;AACtE,QAAQ;AACV,yEAAyE;GACvE,UAAU;AACZ,+DAA+D;GAC7D,gBAAgB,CAAC;AAErB,MAAM,WAAW,MAAM;IACrB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC7B,4BAA4B;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,SAAS,WAAW,CAAC;AAElC,eAAO,MAAM,OAAO,EAAE,SAAS,MAAM,EAmEpC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlE,CAAC;AAEF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,MAAM,CAE7D"}

package/dist/server/targets.js

@@ -0,0 +1,90 @@
+/**
+ * Platform targets for the prebuilt CLIProxyAPI binaries.
+ *
+ * This list is the single source of truth for both the runtime binary lookup
+ * and the build/assembly scripts, so it must stay free of Node-only imports.
+ */
+export const NPM_SCOPE = '@cpajs';
+export const TARGETS = [
+    { id: 'darwin-x64', os: 'darwin', cpu: 'x64', goos: 'darwin', goarch: 'amd64', build: 'plugin', verification: 'native' },
+    { id: 'darwin-arm64', os: 'darwin', cpu: 'arm64', goos: 'darwin', goarch: 'arm64', build: 'plugin', verification: 'native' },
+    { id: 'win32-x64', os: 'win32', cpu: 'x64', goos: 'windows', goarch: 'amd64', build: 'plugin', verification: 'native' },
+    { id: 'win32-arm64', os: 'win32', cpu: 'arm64', goos: 'windows', goarch: 'arm64', build: 'plugin', verification: 'native' },
+    {
+        id: 'win32-ia32',
+        os: 'win32',
+        cpu: 'ia32',
+        goos: 'windows',
+        goarch: '386',
+        build: 'portable',
+        verification: 'native',
+        notes: 'Not built upstream. Smoke-tested under WOW64 on an x64 runner.',
+    },
+    { id: 'linux-x64-gnu', os: 'linux', cpu: 'x64', libc: 'glibc', goos: 'linux', goarch: 'amd64', build: 'plugin', verification: 'native', notes: 'Requires glibc 2.17 or newer.' },
+    { id: 'linux-arm64-gnu', os: 'linux', cpu: 'arm64', libc: 'glibc', goos: 'linux', goarch: 'arm64', build: 'plugin', verification: 'native', notes: 'Requires glibc 2.17 or newer.' },
+    { id: 'linux-x64-musl', os: 'linux', cpu: 'x64', libc: 'musl', goos: 'linux', goarch: 'amd64', build: 'portable', verification: 'native' },
+    { id: 'linux-arm64-musl', os: 'linux', cpu: 'arm64', libc: 'musl', goos: 'linux', goarch: 'arm64', build: 'portable', verification: 'native' },
+    {
+        id: 'linux-arm',
+        os: 'linux',
+        cpu: 'arm',
+        goos: 'linux',
+        goarch: 'arm',
+        goenv: { GOARM: '7' },
+        build: 'portable',
+        verification: 'emulated',
+        notes: 'ARMv7 or newer (GOARM=7). Static binary for both glibc and musl. Not built upstream.',
+    },
+    { id: 'linux-ia32', os: 'linux', cpu: 'ia32', goos: 'linux', goarch: '386', build: 'portable', verification: 'native', notes: 'Not built upstream.' },
+    { id: 'linux-riscv64', os: 'linux', cpu: 'riscv64', goos: 'linux', goarch: 'riscv64', build: 'portable', verification: 'emulated', notes: 'Not built upstream.' },
+    { id: 'linux-ppc64', os: 'linux', cpu: 'ppc64', goos: 'linux', goarch: 'ppc64le', build: 'portable', verification: 'emulated', notes: 'Little-endian ppc64le only. Not built upstream.' },
+    { id: 'linux-s390x', os: 'linux', cpu: 's390x', goos: 'linux', goarch: 's390x', build: 'portable', verification: 'emulated', notes: 'Not built upstream.' },
+    { id: 'linux-loong64', os: 'linux', cpu: 'loong64', goos: 'linux', goarch: 'loong64', build: 'portable', verification: 'emulated', notes: 'Not built upstream.' },
+    {
+        id: 'linux-mips',
+        os: 'linux',
+        cpu: 'mips',
+        goos: 'linux',
+        goarch: 'mips',
+        goenv: { GOMIPS: 'softfloat' },
+        build: 'portable',
+        verification: 'emulated',
+        notes: 'Big-endian 32-bit MIPS, soft float. Not built upstream.',
+    },
+    {
+        id: 'linux-mipsel',
+        os: 'linux',
+        cpu: 'mipsel',
+        goos: 'linux',
+        goarch: 'mipsle',
+        goenv: { GOMIPS: 'softfloat' },
+        build: 'portable',
+        verification: 'emulated',
+        notes: 'Little-endian 32-bit MIPS, soft float. Not built upstream.',
+    },
+    { id: 'freebsd-x64', os: 'freebsd', cpu: 'x64', goos: 'freebsd', goarch: 'amd64', build: 'plugin', verification: 'cross-compiled', notes: 'Cross-compiled against a FreeBSD 14 sysroot, as upstream does.' },
+    { id: 'freebsd-arm64', os: 'freebsd', cpu: 'arm64', goos: 'freebsd', goarch: 'arm64', build: 'portable', verification: 'cross-compiled' },
+    { id: 'freebsd-ia32', os: 'freebsd', cpu: 'ia32', goos: 'freebsd', goarch: '386', build: 'portable', verification: 'cross-compiled', notes: 'Not built upstream.' },
+    { id: 'openbsd-x64', os: 'openbsd', cpu: 'x64', goos: 'openbsd', goarch: 'amd64', build: 'portable', verification: 'cross-compiled', notes: 'Not built upstream.' },
+    { id: 'openbsd-arm64', os: 'openbsd', cpu: 'arm64', goos: 'openbsd', goarch: 'arm64', build: 'portable', verification: 'cross-compiled', notes: 'Not built upstream.' },
+    { id: 'netbsd-x64', os: 'netbsd', cpu: 'x64', goos: 'netbsd', goarch: 'amd64', build: 'portable', verification: 'cross-compiled', notes: 'Not built upstream.' },
+];
+/**
+ * Node platforms deliberately not covered, with the reason. Checked by
+ * cross-compiling the pinned source with CGO disabled.
+ */
+export const UNSUPPORTED_PLATFORMS = {
+    'android-*': 'Link fails: github.com/wlynxg/anet references net.zoneCache, which Go no longer allows.',
+    'sunos-x64': 'Compile fails: syscall.Flock is undefined on solaris/illumos; pion/transport needs SO_REUSEPORT.',
+    'aix-ppc64': 'Compile fails: syscall.Flock is undefined on aix.',
+    'linux-mips64el': 'No matching Node.js process.arch value.',
+    'haiku-*': 'Not a Go target.',
+    'cygwin-*': 'Use the win32 packages.',
+};
+export function packageName(target) {
+    return `${NPM_SCOPE}/${target.id}`;
+}
+export function binaryName(target) {
+    return target.os === 'win32' ? 'cli-proxy-api.exe' : 'cli-proxy-api';
+}
+//# sourceMappingURL=targets.js.map

package/dist/server/targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.js","sourceRoot":"","sources":["../../src/server/targets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqCH,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC;AAElC,MAAM,CAAC,MAAM,OAAO,GAAsB;IACxC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE;IACxH,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE;IAE5H,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE;IACvH,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE;IAC3H;QACE,EAAE,EAAE,YAAY;QAChB,EAAE,EAAE,OAAO;QACX,GAAG,EAAE,MAAM;QACX,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,QAAQ;QACtB,KAAK,EAAE,gEAAgE;KACxE;IAED,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,+BAA+B,EAAE;IAChL,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,+BAA+B,EAAE;IACpL,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE;IAC1I,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE;IAC9I;QACE,EAAE,EAAE,WAAW;QACf,EAAE,EAAE,OAAO;QACX,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;QACrB,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,UAAU;QACxB,KAAK,EAAE,sFAAsF;KAC9F;IACD,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACrJ,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACjK,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,iDAAiD,EAAE;IACzL,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAC3J,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACjK;QACE,EAAE,EAAE,YAAY;QAChB,EAAE,EAAE,OAAO;QACX,GAAG,EAAE,MAAM;QACX,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;QAC9B,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,UAAU;QACxB,KAAK,EAAE,yDAAyD;KACjE;IACD;QACE,EAAE,EAAE,cAAc;QAClB,EAAE,EAAE,OAAO;QACX,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;QAC9B,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,UAAU;QACxB,KAAK,EAAE,4DAA4D;KACpE;IAED,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,gEAAgE,EAAE;IAC5M,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE;IACzI,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAEnK,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACnK,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACvK,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,EAAE,qBAAqB,EAAE;CACjK,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAqC;IACrE,WAAW,EAAE,yFAAyF;IACtG,WAAW,EAAE,kGAAkG;IAC/G,WAAW,EAAE,mDAAmD;IAChE,gBAAgB,EAAE,yCAAyC;IAC3D,SAAS,EAAE,kBAAkB;IAC7B,UAAU,EAAE,yBAAyB;CACtC,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,GAAG,SAAS,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAA0B;IACnD,OAAO,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC;AACvE,CAAC"}

package/dist/server/types.d.ts

@@ -0,0 +1,87 @@
+import type { ChildProcess } from 'node:child_process';
+import type { CpaConfig } from '../client/types/config.ts';
+export interface LogLine {
+    stream: 'stdout' | 'stderr';
+    /** One line of output with secrets redacted and the trailing newline removed. */
+    line: string;
+}
+interface CommonServerOptions {
+    /** Use this executable instead of the bundled platform package. */
+    binaryPath?: string;
+    /**
+     * Working directory for CPA and home of the managed config file and auth
+     * directory. When omitted, a temporary directory is created and removed on stop.
+     */
+    stateDir?: string;
+    /**
+     * Management key passed to CPA through the `MANAGEMENT_PASSWORD` environment
+     * variable, so it never touches disk. Note that upstream treats this variable
+     * as allowing remote management access regardless of `management.allow-remote`.
+     */
+    managementKey?: string;
+    /** Extra CLI arguments, e.g. `['-local-model']`. Passed as an argv array, never through a shell. */
+    args?: readonly string[];
+    /** Environment for the child process. Defaults to `process.env`; entries set to `undefined` are removed. */
+    env?: Readonly<Record<string, string | undefined>>;
+    /** Maximum time to wait for `/healthz` to answer. Default 30 000 ms. */
+    startupTimeoutMs?: number;
+    /** Cancels startup. After startup it has no effect; call `stop()` instead. */
+    signal?: AbortSignal;
+    /** Receives every output line, redacted. */
+    onLog?: (log: LogLine) => void;
+    /** Additional strings to redact from logs and errors. */
+    redact?: readonly string[];
+    /** Default grace period for `stop()` before the process is killed. Default 10 000 ms. */
+    stopTimeoutMs?: number;
+}
+export interface StartWithConfigOptions extends CommonServerOptions {
+    /**
+     * Native CPA configuration. It is written to `<stateDir>/config.yaml` on
+     * every start, replacing whatever CPA persisted there during the last run.
+     */
+    config?: CpaConfig;
+    configPath?: never;
+    /** Bind host. Overrides `config.server.host`. Default `127.0.0.1`. */
+    host?: string;
+    /** Bind port. Overrides `config.server.port`. Default `0`, meaning a free port is picked. */
+    port?: number;
+}
+export interface StartWithConfigPathOptions extends CommonServerOptions {
+    /** Existing CPA config file, handed to CPA as-is. CPA may rewrite it (e.g. to hash `secret-key`). */
+    configPath: string;
+    config?: never;
+    host?: never;
+    port?: never;
+}
+export type StartServerOptions = StartWithConfigOptions | StartWithConfigPathOptions;
+export interface ExitResult {
+    code: number | null;
+    signal: NodeJS.Signals | null;
+}
+export interface StopOptions {
+    /** Grace period after the termination signal before the process is killed. */
+    timeoutMs?: number;
+}
+export interface CpaServer {
+    /** e.g. `http://127.0.0.1:8317`. Use as the client `baseUrl`. */
+    readonly origin: string;
+    /** Model API base URL (`<origin>/v1`) for OpenAI-compatible SDKs. */
+    readonly baseUrl: string;
+    readonly host: string;
+    readonly port: number;
+    readonly pid: number;
+    readonly binaryPath: string;
+    readonly configPath: string;
+    readonly stateDir: string;
+    /** The management key given in the options, if any. */
+    readonly managementKey: string | undefined;
+    readonly process: ChildProcess;
+    /** Recent output lines (redacted), oldest first. */
+    readonly recentLogs: readonly LogLine[];
+    /** Settles when the process exits, whether or not `stop()` was called. */
+    readonly exited: Promise<ExitResult>;
+    /** Terminates CPA gracefully, killing it after the grace period. Idempotent. */
+    stop(options?: StopOptions): Promise<ExitResult>;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/server/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,mBAAmB;IAC3B,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oGAAoG;IACpG,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,4GAA4G;IAC5G,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACnD,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/B,yDAAyD;IACzD,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,yFAAyF;IACzF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE;;;OAGG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6FAA6F;IAC7F,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA2B,SAAQ,mBAAmB;IACrE,qGAAqG;IACrG,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,KAAK,CAAC;CACd;AAED,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GAAG,0BAA0B,CAAC;AAErF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,SAAS,OAAO,EAAE,CAAC;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,gFAAgF;IAChF,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAClD"}

package/dist/server/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/server/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,85 @@
 {
   "name": "@cpajs/cpa",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.0.1-alpha-2",
+  "description": "Run the official CLIProxyAPI from JavaScript and talk to its v8 management API with a typed client",
+  "license": "MIT",
+  "author": "akarachen",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AkaraChen/cpajs.git"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "files": [
+    "dist",
+    "src",
+    "!src/**/*.test.ts"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "default": "./dist/client/index.js"
+    },
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "default": "./dist/server/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "cpa:source": "node scripts/fetch-source.ts",
+    "cpa:build": "node scripts/build-binary.ts",
+    "cpa:verify": "node scripts/verify-binary.ts",
+    "packages:assemble": "node scripts/assemble-packages.ts",
+    "prepack": "pnpm run build",
+    "packages:pack": "node scripts/pack.ts",
+    "test:install": "node scripts/install-test.ts"
+  },
+  "dependencies": {
+    "yaml": "^2.9.1"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "typescript": "^7.0.2",
+    "vitest": "^5.0.5"
+  },
+  "packageManager": "pnpm@11.20.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "optionalDependencies": {
+    "@cpajs/darwin-x64": "0.0.1-alpha-2",
+    "@cpajs/darwin-arm64": "0.0.1-alpha-2",
+    "@cpajs/win32-x64": "0.0.1-alpha-2",
+    "@cpajs/win32-arm64": "0.0.1-alpha-2",
+    "@cpajs/win32-ia32": "0.0.1-alpha-2",
+    "@cpajs/linux-x64-gnu": "0.0.1-alpha-2",
+    "@cpajs/linux-arm64-gnu": "0.0.1-alpha-2",
+    "@cpajs/linux-x64-musl": "0.0.1-alpha-2",
+    "@cpajs/linux-arm64-musl": "0.0.1-alpha-2",
+    "@cpajs/linux-arm": "0.0.1-alpha-2",
+    "@cpajs/linux-ia32": "0.0.1-alpha-2",
+    "@cpajs/linux-riscv64": "0.0.1-alpha-2",
+    "@cpajs/linux-ppc64": "0.0.1-alpha-2",
+    "@cpajs/linux-s390x": "0.0.1-alpha-2",
+    "@cpajs/linux-loong64": "0.0.1-alpha-2",
+    "@cpajs/linux-mips": "0.0.1-alpha-2",
+    "@cpajs/linux-mipsel": "0.0.1-alpha-2",
+    "@cpajs/freebsd-x64": "0.0.1-alpha-2",
+    "@cpajs/freebsd-arm64": "0.0.1-alpha-2",
+    "@cpajs/freebsd-ia32": "0.0.1-alpha-2",
+    "@cpajs/openbsd-x64": "0.0.1-alpha-2",
+    "@cpajs/openbsd-arm64": "0.0.1-alpha-2",
+    "@cpajs/netbsd-x64": "0.0.1-alpha-2"
+  }
+}