@decibelsystems/tools 2.2.0-beta.0 → 3.1.0

package/dist/runtime/ensureRuntime.js

@@ -0,0 +1,276 @@
+/**
+ * ensureRuntime — the one lifecycle primitive.
+ *
+ * Every surface that needs the Decibel runtime (MCP adapters, the CLI, the
+ * VS Code extension, shell hooks) calls this. None of them should carry their
+ * own "is the daemon up? should I start it?" logic — that duplication is how
+ * five subtly different startup behaviours end up in one codebase.
+ *
+ * Two things this deliberately does NOT do:
+ *
+ *   1. It does not use the PID file as the source of truth. `~/.decibel/daemon.pid`
+ *      goes stale — an unclean exit leaves a pid pointing at nothing, or worse,
+ *      at a recycled pid belonging to an unrelated process. A successful
+ *      `/health` response is the only proof the runtime is actually serving.
+ *
+ *   2. It does not check-then-spawn. When six clients start at once, six
+ *      "is it running? no → start it" sequences race and you get six daemons
+ *      fighting over one port. Startup is arbitrated by an atomic O_EXCL lock
+ *      file: exactly one caller wins the right to spawn, and the losers wait
+ *      for the winner's daemon rather than starting their own.
+ */
+import { spawn } from 'child_process';
+import { openSync, closeSync, writeSync, unlinkSync, statSync, mkdirSync } from 'fs';
+import { join, dirname } from 'path';
+import { homedir } from 'os';
+import { fileURLToPath } from 'url';
+import { RUNTIME_PROTOCOL_VERSION, isProtocolCompatible } from './protocol.js';
+import { localJson } from './localHttp.js';
+import { advertisedPort } from './daemonMeta.js';
+const DECIBEL_HOME = join(homedir(), '.decibel');
+const META_PATH = join(DECIBEL_HOME, 'daemon.meta');
+const LOCK_PATH = join(DECIBEL_HOME, 'runtime.lock');
+/** Default port the daemon binds. Overridden by daemon.meta or DECIBEL_DAEMON_PORT. */
+export const DEFAULT_RUNTIME_PORT = 4888;
+/** A lock older than this is presumed abandoned (holder crashed mid-spawn). */
+const LOCK_STALE_MS = 30_000;
+/** How long to wait for a runtime — ours or someone else's — to become healthy. */
+const DEFAULT_STARTUP_TIMEOUT_MS = 15_000;
+/** Gap between `/health` polls while waiting for startup. */
+const POLL_INTERVAL_MS = 150;
+/** Per-probe HTTP timeout. Short: a healthy local daemon answers in single-digit ms. */
+const PROBE_TIMEOUT_MS = 1_500;
+/** Thrown when a runtime is serving but speaks an incompatible protocol. */
+export class RuntimeProtocolMismatchError extends Error {
+    serverVersion;
+    clientVersion;
+    constructor(serverVersion, clientVersion, reason) {
+        super(`Decibel runtime protocol mismatch: ${reason}. ` +
+            `Restart the runtime so it matches this client (\`decibel-tools --daemon restart\`), ` +
+            `or upgrade the client to match the running runtime.`);
+        this.serverVersion = serverVersion;
+        this.clientVersion = clientVersion;
+        this.name = 'RuntimeProtocolMismatchError';
+    }
+}
+/** Thrown when no runtime is serving and one could not be started. */
+export class RuntimeUnavailableError extends Error {
+    constructor(port, detail) {
+        super(`Decibel runtime is not available on 127.0.0.1:${port}: ${detail}. ` +
+            `Start it manually with \`decibel-tools --daemon\` and check ` +
+            `~/.decibel/logs/daemon.log for why it did not come up.`);
+        this.name = 'RuntimeUnavailableError';
+    }
+}
+// ============================================================================
+// Port discovery
+// ============================================================================
+/**
+ * Resolve the port to talk to, in precedence order:
+ *   explicit option → DECIBEL_DAEMON_PORT → daemon.meta → default.
+ *
+ * daemon.meta is a *hint*, not proof of life — it records the port the daemon
+ * last bound. We still confirm with /health before trusting anything.
+ */
+export function resolveRuntimePort(explicit) {
+    if (explicit)
+        return explicit;
+    const fromEnv = process.env.DECIBEL_DAEMON_PORT;
+    if (fromEnv) {
+        const parsed = Number(fromEnv);
+        if (Number.isInteger(parsed) && parsed > 0 && parsed < 65536)
+            return parsed;
+    }
+    // An advertisement whose pid is dead is treated as absent, not followed —
+    // falling back to the default beats dialling a corpse (ISS-0179).
+    return advertisedPort() ?? DEFAULT_RUNTIME_PORT;
+}
+// ============================================================================
+// Health probe
+// ============================================================================
+/**
+ * GET /health. Returns null when nothing is listening or the response is not a
+ * usable health payload — callers treat null as "no runtime here", never as an
+ * error worth surfacing.
+ */
+export async function probeRuntime(port) {
+    try {
+        const res = await localJson(`http://127.0.0.1:${port}/health`, {
+            timeoutMs: PROBE_TIMEOUT_MS,
+        });
+        if (!res.ok)
+            return null;
+        if (typeof res.body?.status !== 'string')
+            return null;
+        return res.body;
+    }
+    catch {
+        return null;
+    }
+}
+// ============================================================================
+// Startup arbitration
+// ============================================================================
+/**
+ * Try to become the process responsible for spawning the runtime.
+ *
+ * `wx` is O_EXCL: the create either succeeds atomically or fails because
+ * someone else holds it. That is the whole arbitration mechanism — no
+ * read-then-write window for a second caller to slip through.
+ *
+ * A lock whose mtime is older than LOCK_STALE_MS is presumed abandoned (its
+ * holder crashed between acquiring and spawning) and is removed so startup can
+ * proceed. Without that, one crashed spawn would wedge every future client.
+ */
+function tryAcquireStartupLock() {
+    mkdirSync(DECIBEL_HOME, { recursive: true });
+    try {
+        const fd = openSync(LOCK_PATH, 'wx');
+        writeSync(fd, JSON.stringify({ pid: process.pid, at: new Date().toISOString() }));
+        closeSync(fd);
+        return true;
+    }
+    catch (err) {
+        if (err.code !== 'EEXIST')
+            throw err;
+    }
+    // Held by someone. Abandoned?
+    try {
+        const age = Date.now() - statSync(LOCK_PATH).mtimeMs;
+        if (age > LOCK_STALE_MS) {
+            unlinkSync(LOCK_PATH);
+            return tryAcquireStartupLock();
+        }
+    }
+    catch {
+        // Vanished between our EEXIST and the stat — the holder finished. Retry once.
+        try {
+            const fd = openSync(LOCK_PATH, 'wx');
+            writeSync(fd, JSON.stringify({ pid: process.pid, at: new Date().toISOString() }));
+            closeSync(fd);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    return false;
+}
+function releaseStartupLock() {
+    try {
+        unlinkSync(LOCK_PATH);
+    }
+    catch {
+        // Already gone (stolen as stale, or cleaned up elsewhere). Nothing to do.
+    }
+}
+/** Default runtime entry point: dist/server.js in this package. */
+function defaultServerEntry() {
+    // src/runtime/ensureRuntime.ts → dist/runtime/ensureRuntime.js at runtime,
+    // so ../server.js resolves to dist/server.js in both layouts.
+    return join(dirname(fileURLToPath(import.meta.url)), '..', 'server.js');
+}
+/**
+ * Spawn the daemon fully detached so it outlives this client. A runtime that
+ * dies when the terminal that happened to start it closes is not a shared
+ * runtime.
+ */
+function spawnRuntime(port, serverEntry) {
+    const child = spawn(process.execPath, [serverEntry, '--daemon', '--port', String(port)], {
+        detached: true,
+        stdio: 'ignore',
+        env: process.env,
+    });
+    child.unref();
+}
+/** Poll /health until it answers compatibly, or the deadline passes. */
+async function waitForHealthy(port, clientProtocol, deadline) {
+    while (Date.now() < deadline) {
+        const health = await probeRuntime(port);
+        if (health) {
+            const compat = isProtocolCompatible(health.protocol_version, clientProtocol);
+            if (!compat.compatible) {
+                throw new RuntimeProtocolMismatchError(health.protocol_version, clientProtocol, compat.reason);
+            }
+            return health;
+        }
+        await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+    }
+    return null;
+}
+// ============================================================================
+// Entry point
+// ============================================================================
+/**
+ * Return a handle to a healthy, protocol-compatible runtime, starting one if
+ * needed.
+ *
+ * Throws rather than degrading:
+ *   - RuntimeProtocolMismatchError when something is serving but speaks a
+ *     contract this client does not understand.
+ *   - RuntimeUnavailableError when nothing is serving and none could be started.
+ *
+ * Callers must not silently fall back to doing the work in-process. A client
+ * that quietly becomes a second writer is exactly the failure this runtime
+ * exists to prevent.
+ */
+export async function ensureRuntime(options = {}) {
+    const clientProtocol = options.protocolVersion ?? RUNTIME_PROTOCOL_VERSION;
+    const port = resolveRuntimePort(options.port);
+    const autoStart = options.autoStart !== false;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_STARTUP_TIMEOUT_MS;
+    // Fast path: something is already serving.
+    const existing = await probeRuntime(port);
+    if (existing) {
+        const compat = isProtocolCompatible(existing.protocol_version, clientProtocol);
+        if (!compat.compatible) {
+            throw new RuntimeProtocolMismatchError(existing.protocol_version, clientProtocol, compat.reason);
+        }
+        return toHandle(existing, port, false);
+    }
+    if (!autoStart) {
+        throw new RuntimeUnavailableError(port, 'nothing is listening and autoStart is disabled');
+    }
+    const deadline = Date.now() + timeoutMs;
+    // Arbitrate. Exactly one caller spawns; the rest wait for that one.
+    const isSpawner = tryAcquireStartupLock();
+    if (!isSpawner) {
+        const health = await waitForHealthy(port, clientProtocol, deadline);
+        if (health)
+            return toHandle(health, port, false);
+        throw new RuntimeUnavailableError(port, 'another process holds the startup lock but no runtime became healthy before the timeout');
+    }
+    try {
+        // Re-probe under the lock. Between our first probe and acquiring the lock,
+        // a previous holder may have finished starting one.
+        const raced = await probeRuntime(port);
+        if (raced) {
+            const compat = isProtocolCompatible(raced.protocol_version, clientProtocol);
+            if (!compat.compatible) {
+                throw new RuntimeProtocolMismatchError(raced.protocol_version, clientProtocol, compat.reason);
+            }
+            return toHandle(raced, port, false);
+        }
+        spawnRuntime(port, options.serverEntry ?? defaultServerEntry());
+        const health = await waitForHealthy(port, clientProtocol, deadline);
+        if (health)
+            return toHandle(health, port, true);
+        throw new RuntimeUnavailableError(port, `spawned a runtime but it did not report healthy within ${timeoutMs}ms`);
+    }
+    finally {
+        releaseStartupLock();
+    }
+}
+function toHandle(health, port, spawned) {
+    return {
+        url: `http://127.0.0.1:${port}`,
+        port,
+        pid: health.pid,
+        version: health.version,
+        protocolVersion: health.protocol_version ?? 'unknown',
+        licenseTier: health.license_tier,
+        spawned,
+        health,
+    };
+}
+//# sourceMappingURL=ensureRuntime.js.map

package/dist/runtime/ensureRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensureRuntime.js","sourceRoot":"","sources":["../../src/runtime/ensureRuntime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAgB,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACnG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AACjD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;AACpD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAErD,uFAAuF;AACvF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B,mFAAmF;AACnF,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C,6DAA6D;AAC7D,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,wFAAwF;AACxF,MAAM,gBAAgB,GAAG,KAAK,CAAC;AA8C/B,4EAA4E;AAC5E,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAE1C;IACA;IAFX,YACW,aAAiC,EACjC,aAAqB,EAC9B,MAAc;QAEd,KAAK,CACH,sCAAsC,MAAM,IAAI;YAC9C,sFAAsF;YACtF,qDAAqD,CACxD,CAAC;QARO,kBAAa,GAAb,aAAa,CAAoB;QACjC,kBAAa,GAAb,aAAa,CAAQ;QAQ9B,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,IAAY,EAAE,MAAc;QACtC,KAAK,CACH,iDAAiD,IAAI,KAAK,MAAM,IAAI;YAClE,8DAA8D;YAC9D,wDAAwD,CAC3D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAiB;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK;YAAE,OAAO,MAAM,CAAC;IAC9E,CAAC;IAED,0EAA0E;IAC1E,kEAAkE;IAClE,OAAO,cAAc,EAAE,IAAI,oBAAoB,CAAC;AAClD,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAgB,oBAAoB,IAAI,SAAS,EAAE;YAC5E,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACtD,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,SAAS,qBAAqB;IAC5B,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QAClF,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;QACrD,IAAI,GAAG,GAAG,aAAa,EAAE,CAAC;YACxB,UAAU,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,qBAAqB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACrC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;YAClF,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,UAAU,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,kBAAkB;IACzB,2EAA2E;IAC3E,8DAA8D;IAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,WAAmB;IACrD,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EACjD;QACE,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CACF,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,cAAsB,EACtB,QAAgB;IAEhB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACvB,MAAM,IAAI,4BAA4B,CACpC,MAAM,CAAC,gBAAgB,EACvB,cAAc,EACd,MAAM,CAAC,MAAM,CACd,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAgC,EAAE;IAElC,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,IAAI,wBAAwB,CAAC;IAC3E,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,0BAA0B,CAAC;IAElE,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,4BAA4B,CACpC,QAAQ,CAAC,gBAAgB,EACzB,cAAc,EACd,MAAM,CAAC,MAAM,CACd,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,gDAAgD,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,oEAAoE;IACpE,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;IAE1C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,MAAM;YAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,uBAAuB,CAC/B,IAAI,EACJ,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,2EAA2E;QAC3E,oDAAoD;QACpD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACvB,MAAM,IAAI,4BAA4B,CACpC,KAAK,CAAC,gBAAgB,EACtB,cAAc,EACd,MAAM,CAAC,MAAM,CACd,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,MAAM;YAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEhD,MAAM,IAAI,uBAAuB,CAC/B,IAAI,EACJ,0DAA0D,SAAS,IAAI,CACxE,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,kBAAkB,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAqB,EAAE,IAAY,EAAE,OAAgB;IACrE,OAAO;QACL,GAAG,EAAE,oBAAoB,IAAI,EAAE;QAC/B,IAAI;QACJ,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,eAAe,EAAE,MAAM,CAAC,gBAAgB,IAAI,SAAS;QACrD,WAAW,EAAE,MAAM,CAAC,YAAY;QAChC,OAAO;QACP,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/runtime/extensions.d.ts

@@ -0,0 +1,57 @@
+import type { FacadeSpec } from '../facades/types.js';
+import type { ToolSpec } from '../tools/types.js';
+export interface DecibelExtensionManifest {
+    /** Facade-style identifier, e.g. "senken". Must not collide with a core facade. */
+    name: string;
+    /** The extension's own version, independent of the runtime's. */
+    version: string;
+    /** Runtime wire contract this extension was built against. See protocol.ts. */
+    protocolVersion: string;
+    /** Extensions are never core — core is what ships in the package. */
+    tier: 'pro' | 'apps';
+}
+export interface DecibelExtension {
+    manifest: DecibelExtensionManifest;
+    facades: FacadeSpec[];
+    tools: ToolSpec[];
+}
+export interface RejectedExtension {
+    /** The allowlist entry as written, so the owner can find it in their config. */
+    entry: string;
+    reason: string;
+}
+export interface ExtensionLoadResult {
+    extensions: DecibelExtension[];
+    facades: FacadeSpec[];
+    tools: ToolSpec[];
+    rejected: RejectedExtension[];
+}
+/**
+ * Read the extension allowlist from ~/.decibel/config.yaml.
+ *
+ * Deliberately config-only. Reading a path from the environment would let
+ * anything that can set an env var — a plist, a shell profile, a parent
+ * process — choose code that runs in-process with full access, which is
+ * exactly the property the allowlist exists to provide.
+ */
+export declare function readAllowlist(): string[];
+/** Path rules, split out so the test suite can exercise them without a filesystem. */
+export declare function checkAllowlistEntry(entry: string): {
+    ok: true;
+    path: string;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Load every allowlisted extension.
+ *
+ * Never throws. A broken extension is reported in `rejected` and the runtime
+ * boots without it — one bad private module must not take down core. Callers
+ * that care (the daemon's startup log, /health) surface the rejections.
+ *
+ * @param reservedNames Facade names already registered. An extension may not
+ *   shadow one; that would let a private module silently replace `sentinel`.
+ */
+export declare function loadExtensions(reservedNames?: ReadonlySet<string>): Promise<ExtensionLoadResult>;
+//# sourceMappingURL=extensions.d.ts.map

package/dist/runtime/extensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../../src/runtime/extensions.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AASlD,MAAM,WAAW,wBAAwB;IACvC,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,eAAe,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,wBAAwB,CAAC;IACnC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B;AA6FD;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAKxC;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAsB7G;AAMD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,aAAa,GAAE,WAAW,CAAC,MAAM,CAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAyDjH"}

package/dist/runtime/extensions.js

@@ -0,0 +1,216 @@
+// ============================================================================
+// Extension Loader — EPIC-0038 Phase 7
+// ============================================================================
+// Private facades are not compiled into the published package. They arrive at
+// boot as extensions: modules named by absolute path in an allowlist under
+// ~/.decibel/config.yaml, registered into the same registry core facades use.
+//
+// The security model is registration, not permission. A facade that was never
+// registered cannot be dispatched to, cannot appear in tools/list, and cannot
+// be reached by a name-prefix trick — there is nothing on the other end. That
+// is a stronger guarantee than a runtime tier check, which is one missed branch
+// away from failing open. It replaces the DECIBEL_APPS env gate, which had the
+// opposite failure mode: the flag lived in a launchd plist, so regenerating the
+// plist silently dropped four facades with no error anywhere.
+//
+// TRUST BOUNDARY — read before changing anything here.
+// An extension runs in-process with the runtime's full filesystem and database
+// access. There is no sandbox and this loader does not pretend to be one. The
+// allowlist is what makes that proportionate: for single-user private use,
+// "the owner named this exact file" is a real boundary. It stops being one the
+// moment a path can come from somewhere other than the owner's config, so:
+//
+//   - Only absolute paths are accepted. A bare specifier ("senken") would be
+//     resolved by Node against node_modules, which makes the allowlist
+//     decorative — anything that can write a package into the tree chooses
+//     what runs.
+//   - The path is never read from the environment. Config file only.
+//   - An extension may not shadow an already-registered facade name.
+// ============================================================================
+import { existsSync } from 'fs';
+import { isAbsolute, normalize } from 'path';
+import { pathToFileURL } from 'url';
+import { loadConfig } from '../daemonConfig.js';
+import { log } from '../config.js';
+import { RUNTIME_PROTOCOL_VERSION, isProtocolCompatible } from './protocol.js';
+const EMPTY_RESULT = {
+    extensions: [],
+    facades: [],
+    tools: [],
+    rejected: [],
+};
+/** Facade names must look like facade names — this is also what the kernel keys on. */
+const NAME_PATTERN = /^[a-z][a-z0-9-]*$/;
+// ============================================================================
+// Manifest validation
+// ============================================================================
+function validateManifest(value) {
+    if (!value || typeof value !== 'object') {
+        return { ok: false, reason: 'manifest is missing or not an object' };
+    }
+    const m = value;
+    if (typeof m.name !== 'string' || !NAME_PATTERN.test(m.name)) {
+        return { ok: false, reason: `manifest.name must match ${NAME_PATTERN} (got ${JSON.stringify(m.name)})` };
+    }
+    if (typeof m.version !== 'string' || m.version.length === 0) {
+        return { ok: false, reason: 'manifest.version must be a non-empty string' };
+    }
+    if (m.tier !== 'pro' && m.tier !== 'apps') {
+        return { ok: false, reason: `manifest.tier must be "pro" or "apps" (got ${JSON.stringify(m.tier)}) — "core" is what ships in the package, so it cannot be an extension` };
+    }
+    if (typeof m.protocolVersion !== 'string') {
+        return { ok: false, reason: 'manifest.protocolVersion must be a string' };
+    }
+    // The extension is a client of the runtime's wire contract, so the runtime is
+    // the "server" side of the comparison. A stale extension fails here with a
+    // version mismatch rather than later with a missing endpoint.
+    const compat = isProtocolCompatible(RUNTIME_PROTOCOL_VERSION, m.protocolVersion);
+    if (!compat.compatible) {
+        return { ok: false, reason: `protocol mismatch — ${compat.reason}` };
+    }
+    return {
+        ok: true,
+        manifest: {
+            name: m.name,
+            version: m.version,
+            protocolVersion: m.protocolVersion,
+            tier: m.tier,
+        },
+    };
+}
+function validateShape(value) {
+    if (!value || typeof value !== 'object') {
+        return { ok: false, reason: 'module does not export `extension`' };
+    }
+    const ext = value;
+    const manifestResult = validateManifest(ext.manifest);
+    if (!manifestResult.ok)
+        return manifestResult;
+    if (!Array.isArray(ext.facades) || ext.facades.length === 0) {
+        return { ok: false, reason: 'extension.facades must be a non-empty array' };
+    }
+    if (!Array.isArray(ext.tools) || ext.tools.length === 0) {
+        return { ok: false, reason: 'extension.tools must be a non-empty array' };
+    }
+    const manifest = manifestResult.manifest;
+    // Every facade the extension declares must carry the manifest's tier. An
+    // extension cannot smuggle a facade in at a laxer tier than it was allowed at.
+    for (const facade of ext.facades) {
+        if (!facade || typeof facade.name !== 'string' || !NAME_PATTERN.test(facade.name)) {
+            return { ok: false, reason: 'every entry in extension.facades must be a FacadeSpec with a valid name' };
+        }
+        if (facade.tier !== manifest.tier) {
+            return {
+                ok: false,
+                reason: `facade "${facade.name}" declares tier "${facade.tier}" but the manifest declares "${manifest.tier}"`,
+            };
+        }
+    }
+    return { ok: true, extension: ext };
+}
+// ============================================================================
+// Allowlist
+// ============================================================================
+/**
+ * Read the extension allowlist from ~/.decibel/config.yaml.
+ *
+ * Deliberately config-only. Reading a path from the environment would let
+ * anything that can set an env var — a plist, a shell profile, a parent
+ * process — choose code that runs in-process with full access, which is
+ * exactly the property the allowlist exists to provide.
+ */
+export function readAllowlist() {
+    const config = loadConfig();
+    const entries = config.extensions?.allow;
+    if (!Array.isArray(entries))
+        return [];
+    return entries.filter((e) => typeof e === 'string');
+}
+/** Path rules, split out so the test suite can exercise them without a filesystem. */
+export function checkAllowlistEntry(entry) {
+    const trimmed = entry.trim();
+    if (trimmed.length === 0) {
+        return { ok: false, reason: 'empty allowlist entry' };
+    }
+    if (!isAbsolute(trimmed)) {
+        return {
+            ok: false,
+            reason: 'not an absolute path — a bare specifier would be resolved against node_modules, which makes the allowlist decorative',
+        };
+    }
+    // normalize() collapses any ".." segments. Compare against the original so a
+    // path that only *looks* like the allowed one is rejected rather than quietly
+    // rewritten into something else.
+    const normalized = normalize(trimmed);
+    if (normalized !== trimmed) {
+        return { ok: false, reason: `path is not normalized (resolves to ${normalized})` };
+    }
+    return { ok: true, path: normalized };
+}
+// ============================================================================
+// Loader
+// ============================================================================
+/**
+ * Load every allowlisted extension.
+ *
+ * Never throws. A broken extension is reported in `rejected` and the runtime
+ * boots without it — one bad private module must not take down core. Callers
+ * that care (the daemon's startup log, /health) surface the rejections.
+ *
+ * @param reservedNames Facade names already registered. An extension may not
+ *   shadow one; that would let a private module silently replace `sentinel`.
+ */
+export async function loadExtensions(reservedNames = new Set()) {
+    const entries = readAllowlist();
+    if (entries.length === 0)
+        return EMPTY_RESULT;
+    const extensions = [];
+    const facades = [];
+    const tools = [];
+    const rejected = [];
+    const claimed = new Set(reservedNames);
+    for (const entry of entries) {
+        const pathCheck = checkAllowlistEntry(entry);
+        if (!pathCheck.ok) {
+            rejected.push({ entry, reason: pathCheck.reason });
+            continue;
+        }
+        if (!existsSync(pathCheck.path)) {
+            rejected.push({ entry, reason: 'file does not exist' });
+            continue;
+        }
+        let mod;
+        try {
+            mod = (await import(pathToFileURL(pathCheck.path).href));
+        }
+        catch (error) {
+            rejected.push({ entry, reason: `import failed — ${error instanceof Error ? error.message : String(error)}` });
+            continue;
+        }
+        const shape = validateShape(mod.extension);
+        if (!shape.ok) {
+            rejected.push({ entry, reason: shape.reason });
+            continue;
+        }
+        const extension = shape.extension;
+        const collision = extension.facades.find(f => claimed.has(f.name));
+        if (collision) {
+            rejected.push({ entry, reason: `facade "${collision.name}" is already registered — an extension may not shadow it` });
+            continue;
+        }
+        for (const facade of extension.facades)
+            claimed.add(facade.name);
+        extensions.push(extension);
+        facades.push(...extension.facades);
+        tools.push(...extension.tools);
+    }
+    for (const r of rejected) {
+        log(`Extensions: rejected ${r.entry} — ${r.reason}`);
+    }
+    if (extensions.length > 0) {
+        const names = extensions.map(e => `${e.manifest.name}@${e.manifest.version}`).join(', ');
+        log(`Extensions: loaded ${extensions.length} (${names}) — ${facades.length} facades, ${tools.length} tools`);
+    }
+    return { extensions, facades, tools, rejected };
+}
+//# sourceMappingURL=extensions.js.map

package/dist/runtime/extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../../src/runtime/extensions.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,8DAA8D;AAC9D,EAAE;AACF,uDAAuD;AACvD,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,EAAE;AACF,6EAA6E;AAC7E,uEAAuE;AACvE,2EAA2E;AAC3E,iBAAiB;AACjB,qEAAqE;AACrE,qEAAqE;AACrE,+EAA+E;AAE/E,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAoC/E,MAAM,YAAY,GAAwB;IACxC,UAAU,EAAE,EAAE;IACd,OAAO,EAAE,EAAE;IACX,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,uFAAuF;AACvF,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAEzC,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,YAAY,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,uEAAuE,EAAE,CAAC;IAC5K,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC5E,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,8DAA8D;IAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,wBAAwB,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IACvE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,IAAI,EAAE,CAAC,CAAC,IAAI;SACb;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAE7C,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,cAAc,CAAC,EAAE;QAAE,OAAO,cAAc,CAAC;IAE9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC5E,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;IAEzC,yEAAyE;IACzE,+EAA+E;IAC/E,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAuB,EAAE,CAAC;QACjD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yEAAyE,EAAE,CAAC;QAC1G,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,WAAW,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,IAAI,gCAAgC,QAAQ,CAAC,IAAI,GAAG;aAC9G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAkC,EAAE,CAAC;AACrE,CAAC;AAED,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,sHAAsH;SAC/H,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,iCAAiC;IACjC,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,UAAU,GAAG,EAAE,CAAC;IACrF,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,gBAAqC,IAAI,GAAG,EAAE;IACjF,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAE9C,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QAED,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAA4B,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9G,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,SAAS,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,SAAS,CAAC,IAAI,0DAA0D,EAAE,CAAC,CAAC;YACtH,SAAS;QACX,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzF,GAAG,CAAC,sBAAsB,UAAU,CAAC,MAAM,KAAK,KAAK,OAAO,OAAO,CAAC,MAAM,aAAa,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC/G,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC"}

package/dist/runtime/localHttp.d.ts

@@ -0,0 +1,24 @@
+export interface LocalResponse {
+    status: number;
+    ok: boolean;
+    text: string;
+}
+export interface LocalRequestOptions {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+    timeoutMs: number;
+}
+/**
+ * Perform one loopback HTTP request. Rejects on transport failure (nothing
+ * listening, socket closed, timeout); resolves with the status for any
+ * response the server actually sent, including 4xx and 5xx.
+ */
+export declare function localRequest(url: string, opts: LocalRequestOptions): Promise<LocalResponse>;
+/** localRequest + JSON.parse, with the status preserved for the caller. */
+export declare function localJson<T = unknown>(url: string, opts: LocalRequestOptions): Promise<{
+    status: number;
+    ok: boolean;
+    body: T;
+}>;
+//# sourceMappingURL=localHttp.d.ts.map

package/dist/runtime/localHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localHttp.d.ts","sourceRoot":"","sources":["../../src/runtime/localHttp.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAoD3F;AAED,2EAA2E;AAC3E,wBAAsB,SAAS,CAAC,CAAC,GAAG,OAAO,EACzC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,CAWnD"}