@deeep-network/riptide 2.0.2 → 2.1.0

package/dist/cli.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-"use strict";var _=Object.create;var S=Object.defineProperty;var A=Object.getOwnPropertyDescriptor;var F=Object.getOwnPropertyNames;var U=Object.getPrototypeOf,L=Object.prototype.hasOwnProperty;var a=(o,e)=>S(o,"name",{value:e,configurable:!0});var J=(o,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of F(e))!L.call(o,i)&&i!==t&&S(o,i,{get:()=>e[i],enumerable:!(r=A(e,i))||r.enumerable});return o};var u=(o,e,t)=>(t=o!=null?_(U(o)):{},J(e||!o||!o.__esModule?S(t,"default",{value:o,enumerable:!0}):t,o));var N=u(require("pino"));var T=require("crypto");function y(o){return o instanceof Error&&"exitCode"in o&&typeof o.exitCode=="number"}a(y,"isRiptideError");var k=u(require("pino"));function P(o){let{level:e="info",format:t="pretty",serviceName:r}=o,i={level:e,timestamp:k.default.stdTimeFunctions.isoTime,formatters:{log:a(s=>({service:r,...s}),"log"),bindings:a(s=>{let{pid:n,hostname:p,...c}=s;return c},"bindings")}};return t==="pretty"&&!process.env.NODE_ENV?.includes("prod")?(0,k.default)({...i,transport:{target:"pino-pretty",options:{colorize:!0,translateTime:"SYS:standard",ignore:"pid,hostname"}}}):(0,k.default)(i)}a(P,"createLogger");var R=require("child_process"),f=require("fs"),W=u(require("http")),Y=u(require("https")),b=u(require("path")),O=require("util");var V=(0,O.promisify)(R.exec);function H(){return{sleep:a(o=>new Promise(e=>setTimeout(e,o)),"sleep"),retry:a(async(o,e={})=>{let{maxAttempts:t=3,delay:r=1e3,backoffMultiplier:i=2,maxDelay:s=3e4}=e,n,p=r;for(let c=1;c<=t;c++)try{return await o()}catch(l){if(n=l instanceof Error?l:new Error(String(l)),c===t)throw n;await new Promise(m=>setTimeout(m,Math.min(p,s))),p*=i}throw n},"retry"),execCommand:a(async(o,e={})=>{let{timeout:t=3e4,cwd:r=process.cwd(),env:i=process.env}=e;try{let{stdout:s,stderr:n}=await V(o,{timeout:t,cwd:r,env:{...process.env,...i}});return{stdout:s.trim(),stderr:n.trim(),exitCode:0}}catch(s){if(s.killed&&s.signal==="SIGTERM"){let p=`Command timed out after ${t/1e3}s. Consider increasing timeout if command needs more time to complete: utils.execCommand('${o}', { timeout: ${t*2} })`,c=s.stderr?.trim()||"",l=c?`${c}
+"use strict";var Y=Object.create;var E=Object.defineProperty;var K=Object.getOwnPropertyDescriptor;var G=Object.getOwnPropertyNames;var B=Object.getPrototypeOf,z=Object.prototype.hasOwnProperty;var p=(o,e)=>E(o,"name",{value:e,configurable:!0});var X=(o,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of G(e))!z.call(o,i)&&i!==t&&E(o,i,{get:()=>e[i],enumerable:!(r=K(e,i))||r.enumerable});return o};var g=(o,e,t)=>(t=o!=null?Y(B(o)):{},X(e||!o||!o.__esModule?E(t,"default",{value:o,enumerable:!0}):t,o));var W=g(require("pino"));var L=require("crypto");var C=class o extends Error{static{p(this,"RiptideError")}constructor(e){super(e),Object.setPrototypeOf(this,o.prototype)}};var y=class o extends C{static{p(this,"PortOpenError")}exitCode=8;constructor(e){super(e),this.name="PortOpenError",Object.setPrototypeOf(this,o.prototype)}};function w(o){return o instanceof Error&&"exitCode"in o&&typeof o.exitCode=="number"}p(w,"isRiptideError");var k=g(require("pino"));function H(o){let{level:e="info",format:t="pretty",serviceName:r}=o,i={level:e,timestamp:k.default.stdTimeFunctions.isoTime,formatters:{log:p(s=>({service:r,...s}),"log"),bindings:p(s=>{let{pid:c,hostname:a,...n}=s;return n},"bindings")}};return t==="pretty"&&!process.env.NODE_ENV?.includes("prod")?(0,k.default)({...i,transport:{target:"pino-pretty",options:{colorize:!0,translateTime:"SYS:standard",ignore:"pid,hostname"}}}):(0,k.default)(i)}p(H,"createLogger");var T=g(require("http")),M=g(require("fs"));function _(o){let e=[],t=/^NOMAD_PORT_(tcp|udp)_(\d+)$/i;for(let[r,i]of Object.entries(o)){let s=r.match(t);if(s&&i){let c=s[1].toLowerCase(),a=parseInt(s[2],10);a>=1&&a<=65535&&e.push({port:a,protocol:c})}}return e}p(_,"parseNomadPorts");function $(){return process.env.PORT_MANAGER_SOCKET_PATH||"/usr/local/port-manager/port-manager.sock"}p($,"getSocketPath");function N(o){try{return M.statSync(o).isSocket()}catch{return!1}}p(N,"isSocketAvailable");async function x(o,e,t,r){return new Promise((i,s)=>{let a=T.request({socketPath:o,path:t,method:e,headers:{"Content-Type":"application/json"}},n=>{let l="";n.on("data",f=>l+=f),n.on("end",()=>{if(n.statusCode&&n.statusCode>=200&&n.statusCode<300)try{i(l?JSON.parse(l):{})}catch{s(new Error(`Invalid JSON response: ${l}`))}else s(new Error(`HTTP ${n.statusCode}: ${l}`))})});a.on("error",n=>{s(new Error(`Socket request failed: ${n.message}`))}),a.setTimeout(3e4,()=>{a.destroy(),s(new Error("Request timeout (30s) - NAT operation took too long"))}),r&&a.write(JSON.stringify(r)),a.end()})}p(x,"unixSocketRequest");var S=class{static{p(this,"PortManager")}socketPath;mappings=[];logger;constructor(e,t){this.socketPath=e,this.logger=t}async openPorts(e,t,r){let i=[];for(let s of e){let c={port:s.port,protocol:s.protocol,client_id:t,alloc_id:r};this.logger.debug({port:s.port,protocol:s.protocol},"Opening port via port-manager");try{let a=await x(this.socketPath,"POST","/v1/ports",c),n={id:a.id,port:a.port,externalPort:a.external_port,externalIp:a.external_ip,protocol:a.protocol,natMethod:a.nat_method};i.push(n),this.mappings.push(n),this.logger.info({port:n.port,externalPort:n.externalPort,externalIp:n.externalIp,protocol:n.protocol,natMethod:n.natMethod},"Port opened successfully")}catch(a){let n=a instanceof Error?a.message:String(a);throw new Error(`Failed to open port ${s.protocol}:${s.port}: ${n}`)}}return i}async closePorts(){for(let e of this.mappings)try{this.logger.debug({id:e.id,port:e.port},"Closing port via port-manager"),await x(this.socketPath,"DELETE",`/v1/ports/${e.id}`),this.logger.info({port:e.port,protocol:e.protocol},"Port closed successfully")}catch(t){let r=t instanceof Error?t.message:String(t);this.logger.warn({id:e.id,port:e.port,error:r},"Failed to close port (continuing cleanup)")}this.mappings=[]}getMappings(){return[...this.mappings]}async renewPorts(){for(let e of this.mappings)try{await x(this.socketPath,"POST",`/v1/ports/${e.id}/renew`,{}),this.logger.debug({id:e.id,port:e.port},"Port renewed")}catch(t){this.logger.warn({id:e.id,port:e.port,error:t instanceof Error?t.message:String(t)},"Failed to renew port")}}async checkPortHealth(){this.logger.debug("Checking port health via port-manager");let e=await x(this.socketPath,"GET","/v1/health");return this.logger.debug({healthy:e.healthy,portCount:Object.keys(e.ports).length},"Port health check completed"),e}};var D=require("child_process"),m=require("fs"),Q=g(require("http")),Z=g(require("https")),R=g(require("path")),j=require("util");var ee=(0,j.promisify)(D.exec);function A(){return{sleep:p(o=>new Promise(e=>setTimeout(e,o)),"sleep"),retry:p(async(o,e={})=>{let{maxAttempts:t=3,delay:r=1e3,backoffMultiplier:i=2,maxDelay:s=3e4}=e,c,a=r;for(let n=1;n<=t;n++)try{return await o()}catch(l){if(c=l instanceof Error?l:new Error(String(l)),n===t)throw c;await new Promise(f=>setTimeout(f,Math.min(a,s))),a*=i}throw c},"retry"),execCommand:p(async(o,e={})=>{let{timeout:t=3e4,cwd:r=process.cwd(),env:i=process.env}=e;try{let{stdout:s,stderr:c}=await ee(o,{timeout:t,cwd:r,env:{...process.env,...i}});return{stdout:s.trim(),stderr:c.trim(),exitCode:0}}catch(s){if(s.killed&&s.signal==="SIGTERM"){let a=`Command timed out after ${t/1e3}s. Consider increasing timeout if command needs more time to complete: utils.execCommand('${o}', { timeout: ${t*2} })`,n=s.stderr?.trim()||"",l=n?`${n}
 
-${p}`:p,m=[];s.stdout?.trim()&&m.push(`STDOUT: ${s.stdout.trim()}`),l&&m.push(`STDERR: ${l}`);let M=[`Command execution timed out: ${o}`,...m].join(`
+${a}`:a,f=[];s.stdout?.trim()&&f.push(`STDOUT: ${s.stdout.trim()}`),l&&f.push(`STDERR: ${l}`);let V=[`Command execution timed out: ${o}`,...f].join(`
 
-`),C=new Error(M);throw C.name="CommandTimeoutError",C}return{stdout:s.stdout?.trim()||"",stderr:s.stderr?.trim()||s.message,exitCode:s.code||1}}},"execCommand"),writeFile:a(async(o,e,t={})=>{let{mode:r="0644",encoding:i="utf8"}=t;await f.promises.mkdir(b.dirname(o),{recursive:!0}),await f.promises.writeFile(o,e,{encoding:i}),await f.promises.chmod(o,r)},"writeFile"),readFile:a(async o=>await f.promises.readFile(o,"utf8"),"readFile"),fileExists:a(async o=>{try{return await f.promises.access(o),!0}catch{return!1}},"fileExists"),downloadFile:a(async function o(e,t){return new Promise((r,i)=>{let s=b.dirname(t);f.promises.mkdir(s,{recursive:!0}).then(()=>{let n=(0,f.createWriteStream)(t);(e.startsWith("https:")?Y:W).get(e,l=>{if(l.statusCode===200)l.pipe(n),n.on("finish",()=>{n.close(),r(t)});else if(l.statusCode===301||l.statusCode===302){let m=l.headers.location;m?r(o(m,t)):i(new Error(`Redirect without location header: ${l.statusCode}`))}else i(new Error(`Failed to download: ${l.statusCode} ${l.statusMessage}`))}).on("error",l=>{f.promises.unlink(t).catch(()=>{}),i(l)}),n.on("error",l=>{f.promises.unlink(t).catch(()=>{}),i(l)})}).catch(i)})},"downloadFile")}}a(H,"createUtilityContext");var I=require("http");var w=class{constructor(e,t,r,i,s){this.getStatus=r;this.executeHealthCheck=i;this.getMetrics=s;this.port=e,this.logger=t.child({component:"web-server"})}static{a(this,"WebServer")}server=null;port;logger;async start(){if(this.server){this.logger.warn("Web server already running");return}return this.server=(0,I.createServer)(async(e,t)=>{if(e.method!=="GET"){t.writeHead(405,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:"Method not allowed"}));return}if(e.url==="/health")try{let r=await this.executeHealthCheck(),i=this.getStatus(),s={healthy:r,status:i.status,uptime:i.uptime,message:i.message};r?t.writeHead(200,{"Content-Type":"application/json"}):t.writeHead(503,{"Content-Type":"application/json"}),t.end(JSON.stringify(s))}catch(r){this.logger.error({error:r},"Health check endpoint error"),t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({healthy:!1,error:r instanceof Error?r.message:"Internal server error"}))}else if(e.url==="/metrics")try{let r=await this.getMetrics();t.writeHead(200,{"Content-Type":"text/plain; version=0.0.4"}),t.end(r)}catch(r){this.logger.error({error:r},"Metrics endpoint error"),t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:r instanceof Error?r.message:"Internal server error"}))}else t.writeHead(404,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:"Not found"}))}),new Promise((e,t)=>{this.server.once("error",r=>{this.logger.error({error:r,port:this.port},"Failed to start web server"),t(r)}),this.server.listen(this.port,()=>{e()})})}async stop(){if(this.server)return new Promise(e=>{this.server.close(()=>{this.logger.info("Web server stopped"),this.server=null,e()})})}};var x=class{static{a(this,"RiptideEntrypoint")}logger;hooks;config;isShuttingDown=!1;status={status:"starting"};startTime;riptideStartTime;heartbeatInterval;updateInterval;echoInterval;lastEchoHash=null;isEchoExecuting=!1;webServer;constructor(e,t,r={}){this.hooks=e,this.config=t,this.startTime=Date.now(),this.riptideStartTime=Date.now(),this.logger=P({serviceName:t.service.name,level:process.env.RIPTIDE_LOG_LEVEL||r.logLevel||t.logging?.level||"info",format:process.env.NODE_ENV==="production"?"json":t.logging?.format||"pretty"}),this.setupGlobalErrorHandlers(),this.setupSignalHandlers()}async start(){try{let e=this.config.service.version||"unknown",t=process.env.NODE_ENV||"production";this.logger.info({version:e,environment:t},`Starting ${this.config.service.name}`),await this.processSecrets(),await this.executeHook("start"),await this.startWebServer(this.config.health?.port||3e3),this.startHeartbeat(),this.startEcho(),this.startUpdate(),this.status={status:"healthy",uptime:Date.now()-this.startTime,message:"Service started successfully"},this.logger.info({service:this.config.service.name},`${this.config.service.name} service is ready`),await this.waitForShutdown()}catch(e){this.logger.error({error:e instanceof Error?e.message:String(e),stack:e instanceof Error?e.stack:void 0},`Failed to start ${this.config.service.name} service`),this.status={status:"unhealthy",message:e instanceof Error?e.message:String(e)},y(e)?(this.logger.error(`Exiting with code ${e.exitCode} (${e.name})`),process.exit(e.exitCode)):process.exit(1)}}async processSecrets(){if(!this.hooks.installSecrets){this.logger.info("No installSecrets hook defined, continuing...");return}try{await this.executeHook("installSecrets")}catch(e){throw this.logger.error({error:e instanceof Error?e.message:String(e),stack:e instanceof Error?e.stack:void 0,hookName:"installSecrets"},"Failed to install secrets"),e}}async executeHook(e){let t=this.hooks[e];if(typeof t!="function")throw new Error(`Required hook '${e}' not found`);this.logger.debug(`Executing ${e} hook`);let r=this.createHookContext(),i=Date.now();try{let s=await t(r),n=Date.now()-i;return this.logger.debug(`${e} hook completed (${n}ms)`),s}catch(s){let n=Date.now()-i;throw this.logger.error({hookName:e,duration:n,error:s instanceof Error?s.message:String(s),stack:s instanceof Error?s.stack:void 0},`${e} hook threw an exception, will not continue`),s}}async executeHookSafely(e){if(typeof this.hooks[e]!="function")return this.logger.debug(`Optional hook '${e}' not found, skipping`),null;try{return await this.executeHook(e)}catch(r){y(r)&&(this.logger.error({hookName:e,error:r.message,exitCode:r.exitCode},`${e} hook threw ${r.name}, exiting with code ${r.exitCode}`),process.exit(r.exitCode)),this.logger.error({hookName:e,error:r instanceof Error?r.message:String(r),stack:r instanceof Error?r.stack:void 0},`${e} hook threw an unhandled exception, exiting with code 1`),process.exit(1)}}createHookContext(){return{config:this.config,logger:this.logger,env:process.env,utils:H()}}setupGlobalErrorHandlers(){process.on("uncaughtException",e=>{this.logger.error({error:e.message,stack:e.stack},"Uncaught exception"),y(e)?(this.logger.info(`Exiting with code ${e.exitCode} (${e.name}) from unhandled exception`),process.exit(e.exitCode)):(this.logger.error("Exiting with code 1 due to unhandled exception"),process.exit(1))}),process.on("unhandledRejection",(e,t)=>{this.logger.error({reason:e,promise:t},"Unhandled promise rejection"),y(e)?(this.logger.info(`Exiting with code ${e.exitCode} (${e.name}) from unhandled rejection`),process.exit(e.exitCode)):(this.logger.error("Exiting with code 1 due to unhandled promise rejection"),process.exit(1))})}setupSignalHandlers(){let e=a(async t=>{this.isShuttingDown&&(this.logger.warn("Force shutdown signal received"),process.exit(1)),this.isShuttingDown=!0,this.status={status:"stopping",message:`Received ${t} signal`},this.logger.info(`${t} signal received, starting graceful shutdown...`);try{this.heartbeatInterval&&clearInterval(this.heartbeatInterval),this.echoInterval&&clearInterval(this.echoInterval),this.updateInterval&&clearInterval(this.updateInterval),this.webServer&&await this.webServer.stop(),await this.executeHookSafely("stop"),this.status={status:"stopped",message:"Graceful shutdown completed"},this.logger.info("Graceful shutdown completed"),process.exit(0)}catch(r){this.logger.error({error:r instanceof Error?r.message:String(r)},"Error during graceful shutdown"),process.exit(1)}},"gracefulShutdown");process.on("SIGTERM",()=>e("SIGTERM")),process.on("SIGINT",()=>e("SIGINT"))}startHeartbeat(){if(!this.hooks.heartbeat){this.logger.info("No heartbeat hook defined, skipping heartbeat");return}if(!this.config.heartbeat?.enabled){this.logger.info("Heartbeat disabled in config, skipping...");return}let e=this.config.heartbeat?.interval||6e4;this.logger.info({interval:e},"Starting heartbeat");let t=!1;this.heartbeatInterval=setInterval(async()=>{if(t){this.logger.info("Heartbeat still executing, skipping this interval");return}t=!0;let r=await this.executeHookSafely("heartbeat");if(r===null){this.logger.info("Heartbeat hook returned null, skipping heartbeat"),t=!1;return}try{await this.pingSonar(r)}catch(i){this.logger.warn({error:i instanceof Error?i.message:String(i)},"Failed to send heartbeat to Sonar")}finally{t=!1}},e)}startUpdate(){if(!this.hooks.update){this.logger.info("No update hook defined, skipping update");return}if(!this.config.update?.enabled){this.logger.info("Update disabled in config, skipping...");return}let e=this.config.update?.interval||6e4;this.logger.info({interval:e},"Starting update");let t=!1;this.updateInterval=setInterval(async()=>{if(t){this.logger.info("Update still executing, skipping this interval");return}t=!0,await this.executeHookSafely("update"),this.logger.debug("Update hook completed successfully"),t=!1},e)}startEcho(){if(!this.hooks.echo){this.logger.info("No echo hook defined, skipping echo");return}if(this.config.echo?.enabled===!1){this.logger.info("Echo disabled in config, skipping...");return}let e=this.config.echo?.interval||3e3;this.logger.info({interval:e},"Starting echo"),this.echoInterval=setInterval(async()=>{if(this.isEchoExecuting){this.logger.debug("Echo still executing, skipping this interval");return}this.isEchoExecuting=!0;try{let t=await this.executeHookSafely("echo");if(!t)return;let r=JSON.stringify(t),i=(0,T.createHash)("sha256").update(r).digest("hex");i!==this.lastEchoHash&&(this.lastEchoHash=i,await this.sendEcho(t))}catch(t){this.logger.warn({error:t instanceof Error?t.message:String(t)},"Echo failed")}finally{this.isEchoExecuting=!1}},e)}async sendEcho(e){let t=process.env.SONAR_API_URL,r=process.env.SONAR_API_KEY,i=process.env.NOMAD_JOB_NAME;if(!t||!r||!i){this.logger.error({hasUrl:!!t,hasKey:!!r,hasJobId:!!i},"Sonar API configuration incomplete, skipping echo send");return}let s={...e,condition:e.condition??"normal"},n={entity_id:i,client_timestamp:Math.floor(Date.now()/1e3),data:s};try{this.logger.info({payload:n,sonarUrl:t},"Sending echo to Sonar API");let p=await fetch(`${t}/api/v1/echo`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`},body:JSON.stringify(n)});if(!p.ok){let c=await p.text();this.logger.warn({status:p.status,error:c,entity_id:i},"Sonar API echo failed")}}catch(p){this.logger.warn({error:p instanceof Error?p.message:String(p)},"Failed to send echo to Sonar API, dropping")}}async pingSonar(e){let t=process.env.SONAR_API_URL,r=process.env.SONAR_API_KEY,i=process.env.NOMAD_JOB_NAME;if(!t||!r||!i){this.logger.error({hasUrl:!!t,hasKey:!!r,hasJobId:!!i},"Sonar API configuration incomplete, skipping heartbeat send");return}let s=Math.floor((Date.now()-this.riptideStartTime)/1e3),n={...e},p={entity_id:i,client_timestamp:Math.floor(Date.now()/1e3),riptide_uptime:s,data:n};try{this.logger.info({payload:p,sonarUrl:t,nomadJobId:i},"Sending heartbeat to Sonar API");let c=await fetch(`${t}/api/v1/heartbeat`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`},body:JSON.stringify(p)});if(!c.ok){let l=await c.text();this.logger.warn({status:c.status,error:l,entity_id:i},"Sonar API heartbeat failed")}}catch(c){this.logger.error({error:c instanceof Error?c.message:String(c),errorType:c?.constructor?.name,errorCause:c instanceof Error&&"cause"in c?c.cause:void 0,stack:c instanceof Error?c.stack:void 0,url:`${t}/api/v1/heartbeat`,entity_id:i},"Failed to send heartbeat to Sonar API")}}async startWebServer(e){this.webServer=new w(e,this.logger,()=>({...this.status,uptime:Date.now()-this.startTime}),async()=>await this.executeHookSafely("health")===!0,async()=>await this.getMetrics());try{await this.webServer.start()}catch(t){this.logger.error({error:t,port:e},"Failed to start web server")}}async waitForShutdown(){return new Promise(e=>{let t=a(()=>{this.isShuttingDown?e():setTimeout(t,100)},"checkShutdown");t()})}async getMetrics(){if(!this.hooks.metrics)return{uptime:Date.now()-this.startTime,status:this.status.status};try{return await this.executeHookSafely("metrics")}catch{return{uptime:Date.now()-this.startTime,status:this.status.status}}}};var h=u(require("fs/promises")),d=u(require("path"));var E=class{constructor(e){this.logger=e}static{a(this,"ServiceScaffolder")}async scaffold(e){let{serviceName:t,targetPath:r=".",template:i="basic",description:s}=e,n=d.join(r,t);this.logger.info(`Creating new Coral Reef service: ${t}`),this.logger.info(`Template: ${i}`),this.logger.info(`Location: ${n}`),await this.createDirectoryStructure(n),await this.createPackageJson(n,t,s),await this.createRiptideConfig(n,t,s),await this.createTsConfig(n),await this.createTsupConfig(n),await this.createHooks(n,i),await this.createDockerfile(n,t),this.logger.info("\u2705 Service scaffolding complete!"),this.showNextSteps(t,n)}async createDirectoryStructure(e){await h.mkdir(d.join(e,"src"),{recursive:!0})}async createPackageJson(e,t,r){let i=await this.checkIfInWorkspace(e),s=i?"workspace:*":await this.getRiptideVersion(),n=i?`cd ../.. && docker build --platform \${DOCKER_PLATFORM:-linux/amd64} --progress=plain -t reef-${t} -f services/${t}/Dockerfile .`:`docker build --platform \${DOCKER_PLATFORM:-linux/amd64} --progress=plain -t reef-${t} .`,p={name:`reef-${t}`,version:"1.0.0",description:r||`${t} service for Coral Reef`,main:"dist/hooks.js",scripts:{build:"tsc --noEmit && tsup","build:docker":n,clean:"rm -rf dist",start:"npx @deeep-network/riptide start --hooks dist/hooks.js",validate:"pnpm run build && npx @deeep-network/riptide validate --hooks dist/hooks.js","type-check":"tsc --noEmit"},dependencies:{"@deeep-network/riptide":s},devDependencies:{typescript:"^5.8.3",tsup:"^8.5.0","@types/node":"^20.0.0"},engines:{node:">=22.0.0"}};await h.writeFile(d.join(e,"package.json"),JSON.stringify(p,null,2))}async createRiptideConfig(e,t,r){let i={service:{name:t,version:"1.0.0",description:r||`${t} service`},logging:{level:"info"}};await h.writeFile(d.join(e,"riptide.config.json"),JSON.stringify(i,null,2))}async createTsConfig(e){let r=await this.checkIfInWorkspace(e)?{extends:"../../tsconfig.json",compilerOptions:{outDir:"./dist",rootDir:"./src",declaration:!0,declarationMap:!0,sourceMap:!0},include:["src/**/*"],exclude:["dist","node_modules"]}:{compilerOptions:{target:"ES2022",module:"commonjs",lib:["ES2022"],outDir:"./dist",rootDir:"./src",strict:!0,esModuleInterop:!0,skipLibCheck:!0,forceConsistentCasingInFileNames:!0,declaration:!0,declarationMap:!0,sourceMap:!0,moduleResolution:"node"},include:["src/**/*"],exclude:["dist","node_modules"]};await h.writeFile(d.join(e,"tsconfig.json"),JSON.stringify(r,null,2))}async createTsupConfig(e){await h.writeFile(d.join(e,"tsup.config.ts"),`import { defineConfig } from 'tsup'
+`),I=new Error(V);throw I.name="CommandTimeoutError",I}return{stdout:s.stdout?.trim()||"",stderr:s.stderr?.trim()||s.message,exitCode:s.code||1}}},"execCommand"),writeFile:p(async(o,e,t={})=>{let{mode:r="0644",encoding:i="utf8"}=t;await m.promises.mkdir(R.dirname(o),{recursive:!0}),await m.promises.writeFile(o,e,{encoding:i}),await m.promises.chmod(o,r)},"writeFile"),readFile:p(async o=>await m.promises.readFile(o,"utf8"),"readFile"),fileExists:p(async o=>{try{return await m.promises.access(o),!0}catch{return!1}},"fileExists"),downloadFile:p(async function o(e,t){return new Promise((r,i)=>{let s=R.dirname(t);m.promises.mkdir(s,{recursive:!0}).then(()=>{let c=(0,m.createWriteStream)(t);(e.startsWith("https:")?Z:Q).get(e,l=>{if(l.statusCode===200)l.pipe(c),c.on("finish",()=>{c.close(),r(t)});else if(l.statusCode===301||l.statusCode===302){let f=l.headers.location;f?r(o(f,t)):i(new Error(`Redirect without location header: ${l.statusCode}`))}else i(new Error(`Failed to download: ${l.statusCode} ${l.statusMessage}`))}).on("error",l=>{m.promises.unlink(t).catch(()=>{}),i(l)}),c.on("error",l=>{m.promises.unlink(t).catch(()=>{}),i(l)})}).catch(i)})},"downloadFile")}}p(A,"createUtilityContext");var F=require("http");var P=class{constructor(e,t,r,i,s){this.getStatus=r;this.executeHealthCheck=i;this.getMetrics=s;this.port=e,this.logger=t.child({component:"web-server"})}static{p(this,"WebServer")}server=null;port;logger;async start(){if(this.server){this.logger.warn("Web server already running");return}return this.server=(0,F.createServer)(async(e,t)=>{if(e.method!=="GET"){t.writeHead(405,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:"Method not allowed"}));return}if(e.url==="/health")try{let r=await this.executeHealthCheck(),i=this.getStatus(),s={healthy:r,status:i.status,uptime:i.uptime,message:i.message};r?t.writeHead(200,{"Content-Type":"application/json"}):t.writeHead(503,{"Content-Type":"application/json"}),t.end(JSON.stringify(s))}catch(r){this.logger.error({error:r},"Health check endpoint error"),t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({healthy:!1,error:r instanceof Error?r.message:"Internal server error"}))}else if(e.url==="/metrics")try{let r=await this.getMetrics();t.writeHead(200,{"Content-Type":"text/plain; version=0.0.4"}),t.end(r)}catch(r){this.logger.error({error:r},"Metrics endpoint error"),t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:r instanceof Error?r.message:"Internal server error"}))}else t.writeHead(404,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:"Not found"}))}),new Promise((e,t)=>{this.server.once("error",r=>{this.logger.error({error:r,port:this.port},"Failed to start web server"),t(r)}),this.server.listen(this.port,()=>{e()})})}async stop(){if(this.server)return new Promise(e=>{this.server.close(()=>{this.logger.info("Web server stopped"),this.server=null,e()})})}};var b=class{static{p(this,"RiptideEntrypoint")}logger;hooks;config;isShuttingDown=!1;status={status:"starting"};startTime;riptideStartTime;heartbeatInterval;updateInterval;echoInterval;portRenewalInterval;lastEchoHash=null;isEchoExecuting=!1;webServer;portManager;constructor(e,t,r={}){this.hooks=e,this.config=t,this.startTime=Date.now(),this.riptideStartTime=Date.now(),this.logger=H({serviceName:t.service.name,level:process.env.RIPTIDE_LOG_LEVEL||r.logLevel||t.logging?.level||"info",format:process.env.NODE_ENV==="production"?"json":t.logging?.format||"pretty"}),this.setupGlobalErrorHandlers(),this.setupSignalHandlers()}async start(){try{let e=this.config.service.version||"unknown",t=process.env.NODE_ENV||"production";this.logger.info({version:e,environment:t},`Starting ${this.config.service.name}`),await this.processSecrets(),await this.openPorts(),this.startPortRenewal(),await this.executeHook("start"),await this.startWebServer(this.config.health?.port||3e3),this.startHeartbeat(),this.startEcho(),this.startUpdate(),this.status={status:"healthy",uptime:Date.now()-this.startTime,message:"Service started successfully"},this.logger.info({service:this.config.service.name},`${this.config.service.name} service is ready`),await this.waitForShutdown()}catch(e){this.logger.error({error:e instanceof Error?e.message:String(e),stack:e instanceof Error?e.stack:void 0},`Failed to start ${this.config.service.name} service`),this.status={status:"unhealthy",message:e instanceof Error?e.message:String(e)},w(e)?(this.logger.error(`Exiting with code ${e.exitCode} (${e.name})`),process.exit(e.exitCode)):process.exit(1)}}async processSecrets(){if(!this.hooks.installSecrets){this.logger.info("No installSecrets hook defined, continuing...");return}try{await this.executeHook("installSecrets")}catch(e){throw this.logger.error({error:e instanceof Error?e.message:String(e),stack:e instanceof Error?e.stack:void 0,hookName:"installSecrets"},"Failed to install secrets"),e}}async openPorts(){let e=_(process.env);if(e.length===0){this.logger.debug("No NOMAD_PORT_* variables found, skipping port manager");return}let t=$();if(this.logger.info({ports:e.map(s=>`${s.protocol}:${s.port}`),socketPath:t},"Found ports to open via port-manager"),!N(t))throw new y(`Port manager socket not found at ${t}. Ports ${e.map(s=>`${s.protocol}:${s.port}`).join(", ")} cannot be opened. Ensure port-manager daemon is running and socket is bind-mounted.`);this.portManager=new S(t,this.logger);let r=process.env.NOMAD_JOB_NAME,i=process.env.NOMAD_ALLOC_ID;try{let s=await this.portManager.openPorts(e,r,i);this.logger.info({count:s.length,mappings:s.map(c=>({port:c.port,externalPort:c.externalPort,externalIp:c.externalIp,protocol:c.protocol,natMethod:c.natMethod}))},"All ports opened successfully via port-manager")}catch(s){throw new y(`Failed to open ports: ${s instanceof Error?s.message:String(s)}`)}}async executeHook(e){let t=this.hooks[e];if(typeof t!="function")throw new Error(`Required hook '${e}' not found`);this.logger.debug(`Executing ${e} hook`);let r=this.createHookContext(),i=Date.now();try{let s=await t(r),c=Date.now()-i;return this.logger.debug(`${e} hook completed (${c}ms)`),s}catch(s){let c=Date.now()-i;throw this.logger.error({hookName:e,duration:c,error:s instanceof Error?s.message:String(s),stack:s instanceof Error?s.stack:void 0},`${e} hook threw an exception, will not continue`),s}}async executeHookSafely(e){if(typeof this.hooks[e]!="function")return this.logger.debug(`Optional hook '${e}' not found, skipping`),null;try{return await this.executeHook(e)}catch(r){w(r)&&(this.logger.error({hookName:e,error:r.message,exitCode:r.exitCode},`${e} hook threw ${r.name}, exiting with code ${r.exitCode}`),process.exit(r.exitCode)),this.logger.error({hookName:e,error:r instanceof Error?r.message:String(r),stack:r instanceof Error?r.stack:void 0},`${e} hook threw an unhandled exception, exiting with code 1`),process.exit(1)}}createHookContext(){return{config:this.config,logger:this.logger,env:process.env,utils:A()}}setupGlobalErrorHandlers(){process.on("uncaughtException",e=>{this.logger.error({error:e.message,stack:e.stack},"Uncaught exception"),w(e)?(this.logger.info(`Exiting with code ${e.exitCode} (${e.name}) from unhandled exception`),process.exit(e.exitCode)):(this.logger.error("Exiting with code 1 due to unhandled exception"),process.exit(1))}),process.on("unhandledRejection",(e,t)=>{this.logger.error({reason:e,promise:t},"Unhandled promise rejection"),w(e)?(this.logger.info(`Exiting with code ${e.exitCode} (${e.name}) from unhandled rejection`),process.exit(e.exitCode)):(this.logger.error("Exiting with code 1 due to unhandled promise rejection"),process.exit(1))})}setupSignalHandlers(){let e=p(async t=>{this.isShuttingDown&&(this.logger.warn("Force shutdown signal received"),process.exit(1)),this.isShuttingDown=!0,this.status={status:"stopping",message:`Received ${t} signal`},this.logger.info(`${t} signal received, starting graceful shutdown...`);try{if(this.heartbeatInterval&&clearInterval(this.heartbeatInterval),this.echoInterval&&clearInterval(this.echoInterval),this.updateInterval&&clearInterval(this.updateInterval),this.portRenewalInterval&&clearInterval(this.portRenewalInterval),this.webServer&&await this.webServer.stop(),this.portManager)try{await this.portManager.closePorts(),this.logger.info("Ports closed via port-manager")}catch(r){this.logger.warn({error:r instanceof Error?r.message:String(r)},"Failed to close ports (continuing shutdown)")}await this.executeHookSafely("stop"),this.status={status:"stopped",message:"Graceful shutdown completed"},this.logger.info("Graceful shutdown completed"),process.exit(0)}catch(r){this.logger.error({error:r instanceof Error?r.message:String(r)},"Error during graceful shutdown"),process.exit(1)}},"gracefulShutdown");process.on("SIGTERM",()=>e("SIGTERM")),process.on("SIGINT",()=>e("SIGINT"))}startHeartbeat(){if(!this.hooks.heartbeat){this.logger.info("No heartbeat hook defined, skipping heartbeat");return}if(!this.config.heartbeat?.enabled){this.logger.info("Heartbeat disabled in config, skipping...");return}let e=this.config.heartbeat?.interval||6e4;this.logger.info({interval:e},"Starting heartbeat");let t=!1;this.heartbeatInterval=setInterval(async()=>{if(t){this.logger.info("Heartbeat still executing, skipping this interval");return}t=!0;let r=await this.executeHookSafely("heartbeat");if(r===null){this.logger.info("Heartbeat hook returned null, skipping heartbeat"),t=!1;return}try{await this.pingSonar(r)}catch(i){this.logger.warn({error:i instanceof Error?i.message:String(i)},"Failed to send heartbeat to Sonar")}finally{t=!1}},e)}startUpdate(){if(!this.hooks.update){this.logger.info("No update hook defined, skipping update");return}if(!this.config.update?.enabled){this.logger.info("Update disabled in config, skipping...");return}let e=this.config.update?.interval||6e4;this.logger.info({interval:e},"Starting update");let t=!1;this.updateInterval=setInterval(async()=>{if(t){this.logger.info("Update still executing, skipping this interval");return}t=!0,await this.executeHookSafely("update"),this.logger.debug("Update hook completed successfully"),t=!1},e)}startPortRenewal(){if(!this.portManager)return;let e=25*60*1e3,t=parseInt(process.env.PORT_RENEWAL_INTERVAL_MS||"",10)||e;this.logger.info({interval:t},"Starting port renewal"),this.portRenewalInterval=setInterval(async()=>{if(this.portManager)try{await this.portManager.renewPorts()}catch(r){this.logger.warn({error:r instanceof Error?r.message:String(r)},"Port renewal cycle failed")}},t)}startEcho(){if(!this.hooks.echo){this.logger.info("No echo hook defined, skipping echo");return}if(this.config.echo?.enabled===!1){this.logger.info("Echo disabled in config, skipping...");return}let e=this.config.echo?.interval||3e3;this.logger.info({interval:e},"Starting echo"),this.echoInterval=setInterval(async()=>{if(this.isEchoExecuting){this.logger.debug("Echo still executing, skipping this interval");return}this.isEchoExecuting=!0;try{let t=await this.executeHookSafely("echo");if(!t)return;let r=JSON.stringify(t),i=(0,L.createHash)("sha256").update(r).digest("hex");i!==this.lastEchoHash&&(this.lastEchoHash=i,await this.sendEcho(t))}catch(t){this.logger.warn({error:t instanceof Error?t.message:String(t)},"Echo failed")}finally{this.isEchoExecuting=!1}},e)}async sendEcho(e){let t=process.env.SONAR_API_URL,r=process.env.SONAR_API_KEY,i=process.env.NOMAD_JOB_NAME;if(!t||!r||!i){this.logger.error({hasUrl:!!t,hasKey:!!r,hasJobId:!!i},"Sonar API configuration incomplete, skipping echo send");return}let s={...e,condition:e.condition??"normal"},c={entity_id:i,client_timestamp:Math.floor(Date.now()/1e3),data:s};try{this.logger.info({payload:c,sonarUrl:t},"Sending echo to Sonar API");let a=await fetch(`${t}/api/v1/echo`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`},body:JSON.stringify(c)});if(!a.ok){let n=await a.text();this.logger.warn({status:a.status,error:n,entity_id:i},"Sonar API echo failed")}}catch(a){this.logger.warn({error:a instanceof Error?a.message:String(a)},"Failed to send echo to Sonar API, dropping")}}async pingSonar(e){let t=process.env.SONAR_API_URL,r=process.env.SONAR_API_KEY,i=process.env.NOMAD_JOB_NAME;if(!t||!r||!i){this.logger.error({hasUrl:!!t,hasKey:!!r,hasJobId:!!i},"Sonar API configuration incomplete, skipping heartbeat send");return}let s=Math.floor((Date.now()-this.riptideStartTime)/1e3),c={...e},a={entity_id:i,client_timestamp:Math.floor(Date.now()/1e3),riptide_uptime:s,data:c};try{this.logger.info({payload:a,sonarUrl:t,nomadJobId:i},"Sending heartbeat to Sonar API");let n=await fetch(`${t}/api/v1/heartbeat`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`},body:JSON.stringify(a)});if(!n.ok){let l=await n.text();this.logger.warn({status:n.status,error:l,entity_id:i},"Sonar API heartbeat failed")}}catch(n){this.logger.error({error:n instanceof Error?n.message:String(n),errorType:n?.constructor?.name,errorCause:n instanceof Error&&"cause"in n?n.cause:void 0,stack:n instanceof Error?n.stack:void 0,url:`${t}/api/v1/heartbeat`,entity_id:i},"Failed to send heartbeat to Sonar API")}}async startWebServer(e){this.webServer=new P(e,this.logger,()=>({...this.status,uptime:Date.now()-this.startTime}),async()=>{if(this.portManager){try{let r=await this.portManager.checkPortHealth();if(!r.healthy)return this.logger.warn({ports:r.ports},"Port health check failed - ports unreachable"),!1}catch(r){return this.logger.error({error:r instanceof Error?r.message:String(r)},"Failed to check port health"),!1}this.portManager.renewPorts().catch(r=>{this.logger.warn({error:r instanceof Error?r.message:String(r)},"Port renewal during health check failed")})}return await this.executeHookSafely("health")===!0},async()=>await this.getMetrics());try{await this.webServer.start()}catch(t){this.logger.error({error:t,port:e},"Failed to start web server")}}async waitForShutdown(){return new Promise(e=>{let t=p(()=>{this.isShuttingDown?e():setTimeout(t,100)},"checkShutdown");t()})}async getMetrics(){if(!this.hooks.metrics)return{uptime:Date.now()-this.startTime,status:this.status.status};try{return await this.executeHookSafely("metrics")}catch{return{uptime:Date.now()-this.startTime,status:this.status.status}}}};var h=g(require("fs/promises")),d=g(require("path"));var O=class{constructor(e){this.logger=e}static{p(this,"ServiceScaffolder")}async scaffold(e){let{serviceName:t,targetPath:r=".",template:i="basic",description:s}=e,c=d.join(r,t);this.logger.info(`Creating new Coral Reef service: ${t}`),this.logger.info(`Template: ${i}`),this.logger.info(`Location: ${c}`),await this.createDirectoryStructure(c),await this.createPackageJson(c,t,s),await this.createRiptideConfig(c,t,s),await this.createTsConfig(c),await this.createTsupConfig(c),await this.createHooks(c,i),await this.createDockerfile(c,t),this.logger.info("\u2705 Service scaffolding complete!"),this.showNextSteps(t,c)}async createDirectoryStructure(e){await h.mkdir(d.join(e,"src"),{recursive:!0})}async createPackageJson(e,t,r){let i=await this.checkIfInWorkspace(e),s=i?"workspace:*":await this.getRiptideVersion(),c=i?`cd ../.. && docker build --platform \${DOCKER_PLATFORM:-linux/amd64} --progress=plain -t reef-${t} -f services/${t}/Dockerfile .`:`docker build --platform \${DOCKER_PLATFORM:-linux/amd64} --progress=plain -t reef-${t} .`,a={name:`reef-${t}`,version:"1.0.0",description:r||`${t} service for Coral Reef`,main:"dist/hooks.js",scripts:{build:"tsc --noEmit && tsup","build:docker":c,clean:"rm -rf dist",start:"npx @deeep-network/riptide start --hooks dist/hooks.js",validate:"pnpm run build && npx @deeep-network/riptide validate --hooks dist/hooks.js","type-check":"tsc --noEmit"},dependencies:{"@deeep-network/riptide":s},devDependencies:{typescript:"^5.8.3",tsup:"^8.5.0","@types/node":"^20.0.0"},engines:{node:">=22.0.0"}};await h.writeFile(d.join(e,"package.json"),JSON.stringify(a,null,2))}async createRiptideConfig(e,t,r){let i={service:{name:t,version:"1.0.0",description:r||`${t} service`},logging:{level:"info"}};await h.writeFile(d.join(e,"riptide.config.json"),JSON.stringify(i,null,2))}async createTsConfig(e){let r=await this.checkIfInWorkspace(e)?{extends:"../../tsconfig.json",compilerOptions:{outDir:"./dist",rootDir:"./src",declaration:!0,declarationMap:!0,sourceMap:!0},include:["src/**/*"],exclude:["dist","node_modules"]}:{compilerOptions:{target:"ES2022",module:"commonjs",lib:["ES2022"],outDir:"./dist",rootDir:"./src",strict:!0,esModuleInterop:!0,skipLibCheck:!0,forceConsistentCasingInFileNames:!0,declaration:!0,declarationMap:!0,sourceMap:!0,moduleResolution:"node"},include:["src/**/*"],exclude:["dist","node_modules"]};await h.writeFile(d.join(e,"tsconfig.json"),JSON.stringify(r,null,2))}async createTsupConfig(e){await h.writeFile(d.join(e,"tsup.config.ts"),`import { defineConfig } from 'tsup'
 
 export default defineConfig({
   entry: ['src/hooks.ts'],
@@ -396,7 +396,7 @@ Next steps:
 
 NOTE: Riptide is a node application. If your base image does
 not have node installed (v22+), install it in the Dockerfile.
-`)}async checkIfInWorkspace(e){let t=d.resolve(e),r=d.parse(t).root;for(;t!==r;){try{return await h.access(d.join(t,"pnpm-workspace.yaml")),!0}catch{}t=d.dirname(t)}return!1}async getRiptideVersion(){try{let e=[d.join(__dirname,"..","package.json"),d.join(__dirname,"..","..","package.json"),d.join(__dirname,"..","..","..","@deeep-network","riptide","package.json"),d.join(__dirname,"..","..","node_modules","@deeep-network","riptide","package.json")];for(let t of e)try{let r=await h.readFile(t,"utf-8"),i=JSON.parse(r);if(i.name==="@deeep-network/riptide")return`^${i.version}`}catch{continue}try{return`^${require("@deeep-network/riptide/package.json").version}`}catch{}return this.logger.warn("Could not read riptide package.json, falling back to default version"),"^0.1.3"}catch{return this.logger.warn("Could not read riptide package.json, falling back to default version"),"^0.1.3"}}};async function D(o,e,t={}){await new E(o).scaffold({serviceName:e,...t})}a(D,"initService");var g=(0,N.default)({level:process.env.LOG_LEVEL||"info",transport:{target:"pino-pretty"}});async function q(){try{let o=process.argv[2];if(o==="--help"||o==="-h"||o==="help"){$();return}if(o==="--version"||o==="-v"||o==="version"){await K();return}let e=v("--config")||v("-c")||"./riptide.config.json",t=v("--hooks")||v("-h")||"./hooks.js";switch(o){case"init":await X();break;case"start":await j(e,t);break;case"validate":await G(e,t);break;case"health":await B();break;case"status":await z();break;case"verify":break;default:o?(g.error(`Unknown command: ${o}`),$(),process.exit(1)):await j(e,t)}}catch(o){g.error({error:o},"CLI command failed"),process.exit(1)}}a(q,"main");function v(o){let e=process.argv.indexOf(o);if(e>=0&&e+1<process.argv.length)return process.argv[e+1]}a(v,"getArgValue");function $(){console.log(`
+`)}async checkIfInWorkspace(e){let t=d.resolve(e),r=d.parse(t).root;for(;t!==r;){try{return await h.access(d.join(t,"pnpm-workspace.yaml")),!0}catch{}t=d.dirname(t)}return!1}async getRiptideVersion(){try{let e=[d.join(__dirname,"..","package.json"),d.join(__dirname,"..","..","package.json"),d.join(__dirname,"..","..","..","@deeep-network","riptide","package.json"),d.join(__dirname,"..","..","node_modules","@deeep-network","riptide","package.json")];for(let t of e)try{let r=await h.readFile(t,"utf-8"),i=JSON.parse(r);if(i.name==="@deeep-network/riptide")return`^${i.version}`}catch{continue}try{return`^${require("@deeep-network/riptide/package.json").version}`}catch{}return this.logger.warn("Could not read riptide package.json, falling back to default version"),"^0.1.3"}catch{return this.logger.warn("Could not read riptide package.json, falling back to default version"),"^0.1.3"}}};async function U(o,e,t={}){await new O(o).scaffold({serviceName:e,...t})}p(U,"initService");var u=(0,W.default)({level:process.env.LOG_LEVEL||"info",transport:{target:"pino-pretty"}});async function te(){try{let o=process.argv[2];if(o==="--help"||o==="-h"||o==="help"){J();return}if(o==="--version"||o==="-v"||o==="version"){await re();return}let e=v("--config")||v("-c")||"./riptide.config.json",t=v("--hooks")||v("-h")||"./hooks.js";switch(o){case"init":await ne();break;case"start":await q(e,t);break;case"validate":await oe(e,t);break;case"health":await ie();break;case"status":await se();break;case"verify":break;default:o?(u.error(`Unknown command: ${o}`),J(),process.exit(1)):await q(e,t)}}catch(o){u.error({error:o},"CLI command failed"),process.exit(1)}}p(te,"main");function v(o){let e=process.argv.indexOf(o);if(e>=0&&e+1<process.argv.length)return process.argv[e+1]}p(v,"getArgValue");function J(){console.log(`
 Riptide - Self-contained service lifecycle management
 
 USAGE:
@@ -427,4 +427,4 @@ EXAMPLES:
   npx riptide start              # Start service
   npx riptide validate           # Validate config and hooks
   npx riptide health             # Check service health
-`)}a($,"showHelp");async function K(){try{let o=await import("fs/promises"),e=await import("path"),t=[e.resolve(__dirname,"../package.json"),e.resolve(__dirname,"./package.json"),"/riptide-runtime/package.json",e.resolve(process.cwd(),"package.json")];for(let r of t)try{let i=await o.readFile(r,"utf-8"),s=JSON.parse(i);if(s.name==="@deeep-network/riptide"){console.log(`@deeep-network/riptide v${s.version}`);return}}catch{continue}console.log("@deeep-network/riptide (version unknown)")}catch{console.log("@deeep-network/riptide (version unknown)")}}a(K,"showVersion");async function j(o,e){try{let t=await import("fs/promises"),r=await import("path"),i=await t.readFile(o,"utf-8"),s=JSON.parse(i),p=await import(r.resolve(process.cwd(),e)),c=p.default||p;await new x(c,s,{}).start()}catch(t){g.error({error:t},"Failed to start service"),process.exit(1)}}a(j,"startService");async function G(o,e){g.info("Validating riptide configuration and hooks...");try{let t=await import("fs/promises"),r=await import("path"),i=await t.readFile(o,"utf-8"),s=JSON.parse(i);g.info({config:s},"Configuration loaded successfully");let p=await import(r.resolve(process.cwd(),e)),c=p.default||p;g.info({availableHooks:Object.keys(c)},"Hooks loaded successfully"),g.info("\u2705 Validation completed successfully"),process.exit(0)}catch(t){g.error({error:t},"\u274C Validation failed"),process.exit(1)}}a(G,"validateService");async function B(){try{let e=await(await fetch("http://localhost:3000/health")).json();console.log("Health Status:",JSON.stringify(e,null,2)),e.status==="healthy"?process.exit(0):process.exit(1)}catch(o){g.error({error:o},"Failed to check health"),process.exit(1)}}a(B,"checkHealth");async function z(){try{let e=await(await fetch("http://localhost:3000/status")).json();console.log("Service Status:",JSON.stringify(e,null,2))}catch(o){g.error({error:o},"Failed to get status"),process.exit(1)}}a(z,"showStatus");async function X(){let o=process.argv[3];o||(g.error("Service name is required"),console.log("Usage: npx riptide init <service-name>"),process.exit(1)),/^[a-z0-9-]+$/.test(o)||(g.error("Service name must contain only lowercase letters, numbers, and hyphens"),process.exit(1));let e=v("--template")||"basic",t=v("--path")||".",r=v("--description"),i=["basic","with-secrets","with-process","with-metrics"];i.includes(e)||(g.error(`Invalid template: ${e}`),console.log(`Valid templates: ${i.join(", ")}`),process.exit(1));try{await D(g,o,{targetPath:t,template:e,description:r}),process.exit(0)}catch(s){g.error({error:s},"Failed to initialize service"),process.exit(1)}}a(X,"initServiceCommand");q();
+`)}p(J,"showHelp");async function re(){try{let o=await import("fs/promises"),e=await import("path"),t=[e.resolve(__dirname,"../package.json"),e.resolve(__dirname,"./package.json"),"/riptide-runtime/package.json",e.resolve(process.cwd(),"package.json")];for(let r of t)try{let i=await o.readFile(r,"utf-8"),s=JSON.parse(i);if(s.name==="@deeep-network/riptide"){console.log(`@deeep-network/riptide v${s.version}`);return}}catch{continue}console.log("@deeep-network/riptide (version unknown)")}catch{console.log("@deeep-network/riptide (version unknown)")}}p(re,"showVersion");async function q(o,e){try{let t=await import("fs/promises"),r=await import("path"),i=await t.readFile(o,"utf-8"),s=JSON.parse(i),a=await import(r.resolve(process.cwd(),e)),n=a.default||a;await new b(n,s,{}).start()}catch(t){u.error({error:t},"Failed to start service"),process.exit(1)}}p(q,"startService");async function oe(o,e){u.info("Validating riptide configuration and hooks...");try{let t=await import("fs/promises"),r=await import("path"),i=await t.readFile(o,"utf-8"),s=JSON.parse(i);u.info({config:s},"Configuration loaded successfully");let a=await import(r.resolve(process.cwd(),e)),n=a.default||a;u.info({availableHooks:Object.keys(n)},"Hooks loaded successfully"),u.info("\u2705 Validation completed successfully"),process.exit(0)}catch(t){u.error({error:t},"\u274C Validation failed"),process.exit(1)}}p(oe,"validateService");async function ie(){try{let e=await(await fetch("http://localhost:3000/health")).json();console.log("Health Status:",JSON.stringify(e,null,2)),e.status==="healthy"?process.exit(0):process.exit(1)}catch(o){u.error({error:o},"Failed to check health"),process.exit(1)}}p(ie,"checkHealth");async function se(){try{let e=await(await fetch("http://localhost:3000/status")).json();console.log("Service Status:",JSON.stringify(e,null,2))}catch(o){u.error({error:o},"Failed to get status"),process.exit(1)}}p(se,"showStatus");async function ne(){let o=process.argv[3];o||(u.error("Service name is required"),console.log("Usage: npx riptide init <service-name>"),process.exit(1)),/^[a-z0-9-]+$/.test(o)||(u.error("Service name must contain only lowercase letters, numbers, and hyphens"),process.exit(1));let e=v("--template")||"basic",t=v("--path")||".",r=v("--description"),i=["basic","with-secrets","with-process","with-metrics"];i.includes(e)||(u.error(`Invalid template: ${e}`),console.log(`Valid templates: ${i.join(", ")}`),process.exit(1));try{await U(u,o,{targetPath:t,template:e,description:r}),process.exit(0)}catch(s){u.error({error:s},"Failed to initialize service"),process.exit(1)}}p(ne,"initServiceCommand");te();

package/dist/index.d.ts

@@ -136,12 +136,15 @@ declare class RiptideEntrypoint {
     private heartbeatInterval?;
     private updateInterval?;
     private echoInterval?;
+    private portRenewalInterval?;
     private lastEchoHash;
     private isEchoExecuting;
     private webServer?;
+    private portManager?;
     constructor(hooks: HookModule, config: ServiceConfig, options?: RiptideEntrypointOptions);
     start(): Promise<void>;
     private processSecrets;
+    private openPorts;
     private executeHook;
     private executeHookSafely;
     private createHookContext;
@@ -149,6 +152,7 @@ declare class RiptideEntrypoint {
     private setupSignalHandlers;
     private startHeartbeat;
     private startUpdate;
+    private startPortRenewal;
     private startEcho;
     private sendEcho;
     private pingSonar;
@@ -176,6 +180,98 @@ declare function redactSecret(secret: string): string;
 declare function parseEnvironmentVariables(input: string): Record<string, string>;
 declare function expandEnvironmentVariables(input: string, env?: Record<string, string | undefined>): string;
 
+/**
+ * Port Manager Integration
+ *
+ * Handles communication with port-manager daemon via Unix socket
+ * to open/close NAT port mappings for Nomad workloads.
+ */
+
+interface NomadPort {
+    port: number;
+    protocol: 'tcp' | 'udp';
+}
+interface PortMapping {
+    id: string;
+    port: number;
+    externalPort: number;
+    externalIp: string | null;
+    protocol: 'tcp' | 'udp';
+    natMethod: string;
+}
+interface PortHealthResponse {
+    healthy: boolean;
+    external_ip: string | null;
+    checked_at: string;
+    ports: Record<string, {
+        reachable: boolean;
+        nat_method: string;
+        last_check: string;
+    }>;
+}
+/**
+ * Parse NOMAD_PORT_* environment variables to discover ports to open.
+ *
+ * Pattern: NOMAD_PORT_{protocol}_{port}
+ * Examples:
+ *   NOMAD_PORT_tcp_8001=8001 -> { port: 8001, protocol: 'tcp' }
+ *   NOMAD_PORT_udp_5000=5000 -> { port: 5000, protocol: 'udp' }
+ */
+declare function parseNomadPorts(env: NodeJS.ProcessEnv): NomadPort[];
+/**
+ * Get the port-manager socket path from environment or default.
+ */
+declare function getSocketPath(): string;
+/**
+ * Check if the port-manager socket exists.
+ */
+declare function isSocketAvailable(socketPath: string): boolean;
+/**
+ * Manages port mappings through the port-manager daemon.
+ */
+declare class PortManager {
+    private socketPath;
+    private mappings;
+    private logger;
+    constructor(socketPath: string, logger: Logger);
+    /**
+     * Open all specified ports via port-manager.
+     *
+     * @throws Error if any port fails to open
+     */
+    openPorts(ports: NomadPort[], clientId?: string, allocId?: string): Promise<PortMapping[]>;
+    /**
+     * Close all previously opened ports.
+     * Errors are logged but not thrown (best-effort cleanup).
+     */
+    closePorts(): Promise<void>;
+    /**
+     * Get the list of currently opened mappings.
+     */
+    getMappings(): PortMapping[];
+    /**
+     * Renew all open port mappings to prevent stale cleanup.
+     *
+     * Calls POST /v1/ports/{id}/renew for each mapping, which updates
+     * the last_activity timestamp in port-manager. Without periodic
+     * renewal, mappings are marked stale and removed after the
+     * SONAR_STALE_MAPPING_TIMEOUT_SECS window (default 60 minutes).
+     *
+     * Errors are logged but not thrown (best-effort renewal).
+     */
+    renewPorts(): Promise<void>;
+    /**
+     * Check the health of all port mappings via port-manager.
+     *
+     * This calls the port-manager's /v1/health endpoint which
+     * verifies all ports are reachable from the internet via Sonar API.
+     *
+     * @returns PortHealthResponse with overall health and per-port status
+     * @throws Error if port-manager is unavailable or health check fails
+     */
+    checkPortHealth(): Promise<PortHealthResponse>;
+}
+
 interface ScaffoldOptions {
     serviceName: string;
     targetPath?: string;
@@ -257,6 +353,15 @@ declare class UserConfigNeededError extends RiptideError {
     readonly exitCode = 7;
     constructor(message: string);
 }
+/**
+ * Error indicating that a required port could not be opened via port-manager
+ * This is a terminal state - the workload cannot function without its ports.
+ * Exit code: 8
+ */
+declare class PortOpenError extends RiptideError {
+    readonly exitCode = 8;
+    constructor(message: string);
+}
 /**
  * Type guards for Riptide errors that work across module boundaries
  */
@@ -266,5 +371,6 @@ declare function isMissingSecretError(error: unknown): error is MissingSecretErr
 declare function isInvalidSecretError(error: unknown): error is InvalidSecretError;
 declare function isAlreadyRunningError(error: unknown): error is AlreadyRunningError;
 declare function isUserConfigNeededError(error: unknown): error is UserConfigNeededError;
+declare function isPortOpenError(error: unknown): error is PortOpenError;
 
-export { AlreadyRunningError, DiagnoseRequiredError, type EchoResult, type ExecOptions, type ExecResult, type HeartbeatResult, type HookContext, type HookModule, InvalidSecretError, MissingSecretError, type RetryOptions, RiptideEntrypoint, type RiptideEntrypointOptions, RiptideError, type ScaffoldOptions, type ServiceConfig, type ServiceMetrics, ServiceScaffolder, type ServiceStatus, UserConfigNeededError, type UtilityContext, WorkloadCondition, type WriteFileOptions, createChildLogger, createLogger, createUtilityContext, expandEnvironmentVariables, getDefaultConfig, initService, isAlreadyRunningError, isDiagnoseRequiredError, isInvalidSecretError, isMissingSecretError, isRiptideError, isUserConfigNeededError, loadConfig, loadHooks, mergeConfigs, parseEnvironmentVariables, redactSecret, validateConfig };
+export { AlreadyRunningError, DiagnoseRequiredError, type EchoResult, type ExecOptions, type ExecResult, type HeartbeatResult, type HookContext, type HookModule, InvalidSecretError, MissingSecretError, type NomadPort, type PortHealthResponse, PortManager, type PortMapping, PortOpenError, type RetryOptions, RiptideEntrypoint, type RiptideEntrypointOptions, RiptideError, type ScaffoldOptions, type ServiceConfig, type ServiceMetrics, ServiceScaffolder, type ServiceStatus, UserConfigNeededError, type UtilityContext, WorkloadCondition, type WriteFileOptions, createChildLogger, createLogger, createUtilityContext, expandEnvironmentVariables, getDefaultConfig, getSocketPath, initService, isAlreadyRunningError, isDiagnoseRequiredError, isInvalidSecretError, isMissingSecretError, isPortOpenError, isRiptideError, isSocketAvailable, isUserConfigNeededError, loadConfig, loadHooks, mergeConfigs, parseEnvironmentVariables, parseNomadPorts, redactSecret, validateConfig };

package/dist/index.js

@@ -1,9 +1,9 @@
-"use strict";var re=Object.create;var v=Object.defineProperty;var oe=Object.getOwnPropertyDescriptor;var ie=Object.getOwnPropertyNames;var se=Object.getPrototypeOf,ne=Object.prototype.hasOwnProperty;var a=(r,e)=>v(r,"name",{value:e,configurable:!0});var ae=(r,e)=>{for(var t in e)v(r,t,{get:e[t],enumerable:!0})},N=(r,e,t,o)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of ie(e))!ne.call(r,i)&&i!==t&&v(r,i,{get:()=>e[i],enumerable:!(o=oe(e,i))||o.enumerable});return r};var m=(r,e,t)=>(t=r!=null?re(se(r)):{},N(e||!r||!r.__esModule?v(t,"default",{value:r,enumerable:!0}):t,r)),ce=r=>N(v({},"__esModule",{value:!0}),r);var ue={};ae(ue,{AlreadyRunningError:()=>E,DiagnoseRequiredError:()=>x,InvalidSecretError:()=>S,MissingSecretError:()=>w,RiptideEntrypoint:()=>$,RiptideError:()=>h,ServiceScaffolder:()=>k,UserConfigNeededError:()=>b,WorkloadCondition:()=>R,createChildLogger:()=>L,createLogger:()=>P,createUtilityContext:()=>O,expandEnvironmentVariables:()=>H,getDefaultConfig:()=>Q,initService:()=>ee,isAlreadyRunningError:()=>U,isDiagnoseRequiredError:()=>_,isInvalidSecretError:()=>A,isMissingSecretError:()=>j,isRiptideError:()=>y,isUserConfigNeededError:()=>F,loadConfig:()=>z,loadHooks:()=>X,mergeConfigs:()=>Z,parseEnvironmentVariables:()=>q,redactSecret:()=>Y,validateConfig:()=>D});module.exports=ce(ue);var K=require("crypto");var h=class r extends Error{static{a(this,"RiptideError")}constructor(e){super(e),Object.setPrototypeOf(this,r.prototype)}},x=class r extends h{static{a(this,"DiagnoseRequiredError")}exitCode=3;constructor(e){super(e),this.name="DiagnoseRequiredError",Object.setPrototypeOf(this,r.prototype)}},w=class r extends h{static{a(this,"MissingSecretError")}exitCode=4;constructor(e){super(e),this.name="MissingSecretError",Object.setPrototypeOf(this,r.prototype)}},S=class r extends h{static{a(this,"InvalidSecretError")}exitCode=5;constructor(e){super(e),this.name="InvalidSecretError",Object.setPrototypeOf(this,r.prototype)}},E=class r extends h{static{a(this,"AlreadyRunningError")}exitCode=6;constructor(e){super(e),this.name="AlreadyRunningError",Object.setPrototypeOf(this,r.prototype)}},b=class r extends h{static{a(this,"UserConfigNeededError")}exitCode=7;constructor(e){super(e),this.name="UserConfigNeededError",Object.setPrototypeOf(this,r.prototype)}};function y(r){return r instanceof Error&&"exitCode"in r&&typeof r.exitCode=="number"}a(y,"isRiptideError");function _(r){return r instanceof Error&&r.name==="DiagnoseRequiredError"&&r.exitCode===3}a(_,"isDiagnoseRequiredError");function j(r){return r instanceof Error&&r.name==="MissingSecretError"&&r.exitCode===4}a(j,"isMissingSecretError");function A(r){return r instanceof Error&&r.name==="InvalidSecretError"&&r.exitCode===5}a(A,"isInvalidSecretError");function U(r){return r instanceof Error&&r.name==="AlreadyRunningError"&&r.exitCode===6}a(U,"isAlreadyRunningError");function F(r){return r instanceof Error&&r.name==="UserConfigNeededError"&&r.exitCode===7}a(F,"isUserConfigNeededError");var C=m(require("pino"));function P(r){let{level:e="info",format:t="pretty",serviceName:o}=r,i={level:e,timestamp:C.default.stdTimeFunctions.isoTime,formatters:{log:a(s=>({service:o,...s}),"log"),bindings:a(s=>{let{pid:n,hostname:p,...c}=s;return c},"bindings")}};return t==="pretty"&&!process.env.NODE_ENV?.includes("prod")?(0,C.default)({...i,transport:{target:"pino-pretty",options:{colorize:!0,translateTime:"SYS:standard",ignore:"pid,hostname"}}}):(0,C.default)(i)}a(P,"createLogger");function L(r,e){return r.child(e)}a(L,"createChildLogger");var R=(o=>(o.Normal="normal",o.Degraded="degraded",o.Unknown="unknown",o))(R||{});var J=require("child_process"),u=require("fs"),pe=m(require("http")),le=m(require("https")),T=m(require("path")),W=require("util");var de=(0,W.promisify)(J.exec);function O(){return{sleep:a(r=>new Promise(e=>setTimeout(e,r)),"sleep"),retry:a(async(r,e={})=>{let{maxAttempts:t=3,delay:o=1e3,backoffMultiplier:i=2,maxDelay:s=3e4}=e,n,p=o;for(let c=1;c<=t;c++)try{return await r()}catch(l){if(n=l instanceof Error?l:new Error(String(l)),c===t)throw n;await new Promise(f=>setTimeout(f,Math.min(p,s))),p*=i}throw n},"retry"),execCommand:a(async(r,e={})=>{let{timeout:t=3e4,cwd:o=process.cwd(),env:i=process.env}=e;try{let{stdout:s,stderr:n}=await de(r,{timeout:t,cwd:o,env:{...process.env,...i}});return{stdout:s.trim(),stderr:n.trim(),exitCode:0}}catch(s){if(s.killed&&s.signal==="SIGTERM"){let p=`Command timed out after ${t/1e3}s. Consider increasing timeout if command needs more time to complete: utils.execCommand('${r}', { timeout: ${t*2} })`,c=s.stderr?.trim()||"",l=c?`${c}
+"use strict";var de=Object.create;var k=Object.defineProperty;var ge=Object.getOwnPropertyDescriptor;var ue=Object.getOwnPropertyNames;var he=Object.getPrototypeOf,fe=Object.prototype.hasOwnProperty;var a=(o,e)=>k(o,"name",{value:e,configurable:!0});var me=(o,e)=>{for(var t in e)k(o,t,{get:e[t],enumerable:!0})},L=(o,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of ue(e))!fe.call(o,i)&&i!==t&&k(o,i,{get:()=>e[i],enumerable:!(r=ge(e,i))||r.enumerable});return o};var m=(o,e,t)=>(t=o!=null?de(he(o)):{},L(e||!o||!o.__esModule?k(t,"default",{value:o,enumerable:!0}):t,o)),ve=o=>L(k({},"__esModule",{value:!0}),o);var Se={};me(Se,{AlreadyRunningError:()=>b,DiagnoseRequiredError:()=>S,InvalidSecretError:()=>P,MissingSecretError:()=>E,PortManager:()=>w,PortOpenError:()=>v,RiptideEntrypoint:()=>A,RiptideError:()=>f,ServiceScaffolder:()=>x,UserConfigNeededError:()=>C,WorkloadCondition:()=>_,createChildLogger:()=>G,createLogger:()=>O,createUtilityContext:()=>$,expandEnvironmentVariables:()=>N,getDefaultConfig:()=>ae,getSocketPath:()=>M,initService:()=>pe,isAlreadyRunningError:()=>Y,isDiagnoseRequiredError:()=>J,isInvalidSecretError:()=>W,isMissingSecretError:()=>q,isPortOpenError:()=>K,isRiptideError:()=>y,isSocketAvailable:()=>T,isUserConfigNeededError:()=>V,loadConfig:()=>se,loadHooks:()=>ne,mergeConfigs:()=>ce,parseEnvironmentVariables:()=>ee,parseNomadPorts:()=>H,redactSecret:()=>Z,validateConfig:()=>j});module.exports=ve(Se);var re=require("crypto");var f=class o extends Error{static{a(this,"RiptideError")}constructor(e){super(e),Object.setPrototypeOf(this,o.prototype)}},S=class o extends f{static{a(this,"DiagnoseRequiredError")}exitCode=3;constructor(e){super(e),this.name="DiagnoseRequiredError",Object.setPrototypeOf(this,o.prototype)}},E=class o extends f{static{a(this,"MissingSecretError")}exitCode=4;constructor(e){super(e),this.name="MissingSecretError",Object.setPrototypeOf(this,o.prototype)}},P=class o extends f{static{a(this,"InvalidSecretError")}exitCode=5;constructor(e){super(e),this.name="InvalidSecretError",Object.setPrototypeOf(this,o.prototype)}},b=class o extends f{static{a(this,"AlreadyRunningError")}exitCode=6;constructor(e){super(e),this.name="AlreadyRunningError",Object.setPrototypeOf(this,o.prototype)}},C=class o extends f{static{a(this,"UserConfigNeededError")}exitCode=7;constructor(e){super(e),this.name="UserConfigNeededError",Object.setPrototypeOf(this,o.prototype)}},v=class o extends f{static{a(this,"PortOpenError")}exitCode=8;constructor(e){super(e),this.name="PortOpenError",Object.setPrototypeOf(this,o.prototype)}};function y(o){return o instanceof Error&&"exitCode"in o&&typeof o.exitCode=="number"}a(y,"isRiptideError");function J(o){return o instanceof Error&&o.name==="DiagnoseRequiredError"&&o.exitCode===3}a(J,"isDiagnoseRequiredError");function q(o){return o instanceof Error&&o.name==="MissingSecretError"&&o.exitCode===4}a(q,"isMissingSecretError");function W(o){return o instanceof Error&&o.name==="InvalidSecretError"&&o.exitCode===5}a(W,"isInvalidSecretError");function Y(o){return o instanceof Error&&o.name==="AlreadyRunningError"&&o.exitCode===6}a(Y,"isAlreadyRunningError");function V(o){return o instanceof Error&&o.name==="UserConfigNeededError"&&o.exitCode===7}a(V,"isUserConfigNeededError");function K(o){return o instanceof Error&&o.name==="PortOpenError"&&o.exitCode===8}a(K,"isPortOpenError");var R=m(require("pino"));function O(o){let{level:e="info",format:t="pretty",serviceName:r}=o,i={level:e,timestamp:R.default.stdTimeFunctions.isoTime,formatters:{log:a(s=>({service:r,...s}),"log"),bindings:a(s=>{let{pid:n,hostname:p,...c}=s;return c},"bindings")}};return t==="pretty"&&!process.env.NODE_ENV?.includes("prod")?(0,R.default)({...i,transport:{target:"pino-pretty",options:{colorize:!0,translateTime:"SYS:standard",ignore:"pid,hostname"}}}):(0,R.default)(i)}a(O,"createLogger");function G(o,e){return o.child(e)}a(G,"createChildLogger");var B=m(require("http")),z=m(require("fs"));function H(o){let e=[],t=/^NOMAD_PORT_(tcp|udp)_(\d+)$/i;for(let[r,i]of Object.entries(o)){let s=r.match(t);if(s&&i){let n=s[1].toLowerCase(),p=parseInt(s[2],10);p>=1&&p<=65535&&e.push({port:p,protocol:n})}}return e}a(H,"parseNomadPorts");function M(){return process.env.PORT_MANAGER_SOCKET_PATH||"/usr/local/port-manager/port-manager.sock"}a(M,"getSocketPath");function T(o){try{return z.statSync(o).isSocket()}catch{return!1}}a(T,"isSocketAvailable");async function I(o,e,t,r){return new Promise((i,s)=>{let p=B.request({socketPath:o,path:t,method:e,headers:{"Content-Type":"application/json"}},c=>{let l="";c.on("data",u=>l+=u),c.on("end",()=>{if(c.statusCode&&c.statusCode>=200&&c.statusCode<300)try{i(l?JSON.parse(l):{})}catch{s(new Error(`Invalid JSON response: ${l}`))}else s(new Error(`HTTP ${c.statusCode}: ${l}`))})});p.on("error",c=>{s(new Error(`Socket request failed: ${c.message}`))}),p.setTimeout(3e4,()=>{p.destroy(),s(new Error("Request timeout (30s) - NAT operation took too long"))}),r&&p.write(JSON.stringify(r)),p.end()})}a(I,"unixSocketRequest");var w=class{static{a(this,"PortManager")}socketPath;mappings=[];logger;constructor(e,t){this.socketPath=e,this.logger=t}async openPorts(e,t,r){let i=[];for(let s of e){let n={port:s.port,protocol:s.protocol,client_id:t,alloc_id:r};this.logger.debug({port:s.port,protocol:s.protocol},"Opening port via port-manager");try{let p=await I(this.socketPath,"POST","/v1/ports",n),c={id:p.id,port:p.port,externalPort:p.external_port,externalIp:p.external_ip,protocol:p.protocol,natMethod:p.nat_method};i.push(c),this.mappings.push(c),this.logger.info({port:c.port,externalPort:c.externalPort,externalIp:c.externalIp,protocol:c.protocol,natMethod:c.natMethod},"Port opened successfully")}catch(p){let c=p instanceof Error?p.message:String(p);throw new Error(`Failed to open port ${s.protocol}:${s.port}: ${c}`)}}return i}async closePorts(){for(let e of this.mappings)try{this.logger.debug({id:e.id,port:e.port},"Closing port via port-manager"),await I(this.socketPath,"DELETE",`/v1/ports/${e.id}`),this.logger.info({port:e.port,protocol:e.protocol},"Port closed successfully")}catch(t){let r=t instanceof Error?t.message:String(t);this.logger.warn({id:e.id,port:e.port,error:r},"Failed to close port (continuing cleanup)")}this.mappings=[]}getMappings(){return[...this.mappings]}async renewPorts(){for(let e of this.mappings)try{await I(this.socketPath,"POST",`/v1/ports/${e.id}/renew`,{}),this.logger.debug({id:e.id,port:e.port},"Port renewed")}catch(t){this.logger.warn({id:e.id,port:e.port,error:t instanceof Error?t.message:String(t)},"Failed to renew port")}}async checkPortHealth(){this.logger.debug("Checking port health via port-manager");let e=await I(this.socketPath,"GET","/v1/health");return this.logger.debug({healthy:e.healthy,portCount:Object.keys(e.ports).length},"Port health check completed"),e}};var _=(r=>(r.Normal="normal",r.Degraded="degraded",r.Unknown="unknown",r))(_||{});var X=require("child_process"),h=require("fs"),ye=m(require("http")),we=m(require("https")),F=m(require("path")),Q=require("util");var ke=(0,Q.promisify)(X.exec);function $(){return{sleep:a(o=>new Promise(e=>setTimeout(e,o)),"sleep"),retry:a(async(o,e={})=>{let{maxAttempts:t=3,delay:r=1e3,backoffMultiplier:i=2,maxDelay:s=3e4}=e,n,p=r;for(let c=1;c<=t;c++)try{return await o()}catch(l){if(n=l instanceof Error?l:new Error(String(l)),c===t)throw n;await new Promise(u=>setTimeout(u,Math.min(p,s))),p*=i}throw n},"retry"),execCommand:a(async(o,e={})=>{let{timeout:t=3e4,cwd:r=process.cwd(),env:i=process.env}=e;try{let{stdout:s,stderr:n}=await ke(o,{timeout:t,cwd:r,env:{...process.env,...i}});return{stdout:s.trim(),stderr:n.trim(),exitCode:0}}catch(s){if(s.killed&&s.signal==="SIGTERM"){let p=`Command timed out after ${t/1e3}s. Consider increasing timeout if command needs more time to complete: utils.execCommand('${o}', { timeout: ${t*2} })`,c=s.stderr?.trim()||"",l=c?`${c}
 
-${p}`:p,f=[];s.stdout?.trim()&&f.push(`STDOUT: ${s.stdout.trim()}`),l&&f.push(`STDERR: ${l}`);let te=[`Command execution timed out: ${r}`,...f].join(`
+${p}`:p,u=[];s.stdout?.trim()&&u.push(`STDOUT: ${s.stdout.trim()}`),l&&u.push(`STDERR: ${l}`);let le=[`Command execution timed out: ${o}`,...u].join(`
 
-`),M=new Error(te);throw M.name="CommandTimeoutError",M}return{stdout:s.stdout?.trim()||"",stderr:s.stderr?.trim()||s.message,exitCode:s.code||1}}},"execCommand"),writeFile:a(async(r,e,t={})=>{let{mode:o="0644",encoding:i="utf8"}=t;await u.promises.mkdir(T.dirname(r),{recursive:!0}),await u.promises.writeFile(r,e,{encoding:i}),await u.promises.chmod(r,o)},"writeFile"),readFile:a(async r=>await u.promises.readFile(r,"utf8"),"readFile"),fileExists:a(async r=>{try{return await u.promises.access(r),!0}catch{return!1}},"fileExists"),downloadFile:a(async function r(e,t){return new Promise((o,i)=>{let s=T.dirname(t);u.promises.mkdir(s,{recursive:!0}).then(()=>{let n=(0,u.createWriteStream)(t);(e.startsWith("https:")?le:pe).get(e,l=>{if(l.statusCode===200)l.pipe(n),n.on("finish",()=>{n.close(),o(t)});else if(l.statusCode===301||l.statusCode===302){let f=l.headers.location;f?o(r(f,t)):i(new Error(`Redirect without location header: ${l.statusCode}`))}else i(new Error(`Failed to download: ${l.statusCode} ${l.statusMessage}`))}).on("error",l=>{u.promises.unlink(t).catch(()=>{}),i(l)}),n.on("error",l=>{u.promises.unlink(t).catch(()=>{}),i(l)})}).catch(i)})},"downloadFile")}}a(O,"createUtilityContext");function Y(r){return!r||r.length<=10?"[REDACTED]":`${r.slice(0,4)}...${r.slice(-4)}`}a(Y,"redactSecret");function q(r){let e={},t=r.split(`
-`);for(let o of t){let i=o.trim();if(i&&!i.startsWith("#")){let[s,...n]=i.split("=");s&&n.length>0&&(e[s.trim()]=n.join("=").trim())}}return e}a(q,"parseEnvironmentVariables");function H(r,e=process.env){return r.replace(/\$\{([^}]+)\}/g,(t,o)=>e[o]||t)}a(H,"expandEnvironmentVariables");var V=require("http");var I=class{constructor(e,t,o,i,s){this.getStatus=o;this.executeHealthCheck=i;this.getMetrics=s;this.port=e,this.logger=t.child({component:"web-server"})}static{a(this,"WebServer")}server=null;port;logger;async start(){if(this.server){this.logger.warn("Web server already running");return}return this.server=(0,V.createServer)(async(e,t)=>{if(e.method!=="GET"){t.writeHead(405,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:"Method not allowed"}));return}if(e.url==="/health")try{let o=await this.executeHealthCheck(),i=this.getStatus(),s={healthy:o,status:i.status,uptime:i.uptime,message:i.message};o?t.writeHead(200,{"Content-Type":"application/json"}):t.writeHead(503,{"Content-Type":"application/json"}),t.end(JSON.stringify(s))}catch(o){this.logger.error({error:o},"Health check endpoint error"),t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({healthy:!1,error:o instanceof Error?o.message:"Internal server error"}))}else if(e.url==="/metrics")try{let o=await this.getMetrics();t.writeHead(200,{"Content-Type":"text/plain; version=0.0.4"}),t.end(o)}catch(o){this.logger.error({error:o},"Metrics endpoint error"),t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:o instanceof Error?o.message:"Internal server error"}))}else t.writeHead(404,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:"Not found"}))}),new Promise((e,t)=>{this.server.once("error",o=>{this.logger.error({error:o,port:this.port},"Failed to start web server"),t(o)}),this.server.listen(this.port,()=>{e()})})}async stop(){if(this.server)return new Promise(e=>{this.server.close(()=>{this.logger.info("Web server stopped"),this.server=null,e()})})}};var $=class{static{a(this,"RiptideEntrypoint")}logger;hooks;config;isShuttingDown=!1;status={status:"starting"};startTime;riptideStartTime;heartbeatInterval;updateInterval;echoInterval;lastEchoHash=null;isEchoExecuting=!1;webServer;constructor(e,t,o={}){this.hooks=e,this.config=t,this.startTime=Date.now(),this.riptideStartTime=Date.now(),this.logger=P({serviceName:t.service.name,level:process.env.RIPTIDE_LOG_LEVEL||o.logLevel||t.logging?.level||"info",format:process.env.NODE_ENV==="production"?"json":t.logging?.format||"pretty"}),this.setupGlobalErrorHandlers(),this.setupSignalHandlers()}async start(){try{let e=this.config.service.version||"unknown",t=process.env.NODE_ENV||"production";this.logger.info({version:e,environment:t},`Starting ${this.config.service.name}`),await this.processSecrets(),await this.executeHook("start"),await this.startWebServer(this.config.health?.port||3e3),this.startHeartbeat(),this.startEcho(),this.startUpdate(),this.status={status:"healthy",uptime:Date.now()-this.startTime,message:"Service started successfully"},this.logger.info({service:this.config.service.name},`${this.config.service.name} service is ready`),await this.waitForShutdown()}catch(e){this.logger.error({error:e instanceof Error?e.message:String(e),stack:e instanceof Error?e.stack:void 0},`Failed to start ${this.config.service.name} service`),this.status={status:"unhealthy",message:e instanceof Error?e.message:String(e)},y(e)?(this.logger.error(`Exiting with code ${e.exitCode} (${e.name})`),process.exit(e.exitCode)):process.exit(1)}}async processSecrets(){if(!this.hooks.installSecrets){this.logger.info("No installSecrets hook defined, continuing...");return}try{await this.executeHook("installSecrets")}catch(e){throw this.logger.error({error:e instanceof Error?e.message:String(e),stack:e instanceof Error?e.stack:void 0,hookName:"installSecrets"},"Failed to install secrets"),e}}async executeHook(e){let t=this.hooks[e];if(typeof t!="function")throw new Error(`Required hook '${e}' not found`);this.logger.debug(`Executing ${e} hook`);let o=this.createHookContext(),i=Date.now();try{let s=await t(o),n=Date.now()-i;return this.logger.debug(`${e} hook completed (${n}ms)`),s}catch(s){let n=Date.now()-i;throw this.logger.error({hookName:e,duration:n,error:s instanceof Error?s.message:String(s),stack:s instanceof Error?s.stack:void 0},`${e} hook threw an exception, will not continue`),s}}async executeHookSafely(e){if(typeof this.hooks[e]!="function")return this.logger.debug(`Optional hook '${e}' not found, skipping`),null;try{return await this.executeHook(e)}catch(o){y(o)&&(this.logger.error({hookName:e,error:o.message,exitCode:o.exitCode},`${e} hook threw ${o.name}, exiting with code ${o.exitCode}`),process.exit(o.exitCode)),this.logger.error({hookName:e,error:o instanceof Error?o.message:String(o),stack:o instanceof Error?o.stack:void 0},`${e} hook threw an unhandled exception, exiting with code 1`),process.exit(1)}}createHookContext(){return{config:this.config,logger:this.logger,env:process.env,utils:O()}}setupGlobalErrorHandlers(){process.on("uncaughtException",e=>{this.logger.error({error:e.message,stack:e.stack},"Uncaught exception"),y(e)?(this.logger.info(`Exiting with code ${e.exitCode} (${e.name}) from unhandled exception`),process.exit(e.exitCode)):(this.logger.error("Exiting with code 1 due to unhandled exception"),process.exit(1))}),process.on("unhandledRejection",(e,t)=>{this.logger.error({reason:e,promise:t},"Unhandled promise rejection"),y(e)?(this.logger.info(`Exiting with code ${e.exitCode} (${e.name}) from unhandled rejection`),process.exit(e.exitCode)):(this.logger.error("Exiting with code 1 due to unhandled promise rejection"),process.exit(1))})}setupSignalHandlers(){let e=a(async t=>{this.isShuttingDown&&(this.logger.warn("Force shutdown signal received"),process.exit(1)),this.isShuttingDown=!0,this.status={status:"stopping",message:`Received ${t} signal`},this.logger.info(`${t} signal received, starting graceful shutdown...`);try{this.heartbeatInterval&&clearInterval(this.heartbeatInterval),this.echoInterval&&clearInterval(this.echoInterval),this.updateInterval&&clearInterval(this.updateInterval),this.webServer&&await this.webServer.stop(),await this.executeHookSafely("stop"),this.status={status:"stopped",message:"Graceful shutdown completed"},this.logger.info("Graceful shutdown completed"),process.exit(0)}catch(o){this.logger.error({error:o instanceof Error?o.message:String(o)},"Error during graceful shutdown"),process.exit(1)}},"gracefulShutdown");process.on("SIGTERM",()=>e("SIGTERM")),process.on("SIGINT",()=>e("SIGINT"))}startHeartbeat(){if(!this.hooks.heartbeat){this.logger.info("No heartbeat hook defined, skipping heartbeat");return}if(!this.config.heartbeat?.enabled){this.logger.info("Heartbeat disabled in config, skipping...");return}let e=this.config.heartbeat?.interval||6e4;this.logger.info({interval:e},"Starting heartbeat");let t=!1;this.heartbeatInterval=setInterval(async()=>{if(t){this.logger.info("Heartbeat still executing, skipping this interval");return}t=!0;let o=await this.executeHookSafely("heartbeat");if(o===null){this.logger.info("Heartbeat hook returned null, skipping heartbeat"),t=!1;return}try{await this.pingSonar(o)}catch(i){this.logger.warn({error:i instanceof Error?i.message:String(i)},"Failed to send heartbeat to Sonar")}finally{t=!1}},e)}startUpdate(){if(!this.hooks.update){this.logger.info("No update hook defined, skipping update");return}if(!this.config.update?.enabled){this.logger.info("Update disabled in config, skipping...");return}let e=this.config.update?.interval||6e4;this.logger.info({interval:e},"Starting update");let t=!1;this.updateInterval=setInterval(async()=>{if(t){this.logger.info("Update still executing, skipping this interval");return}t=!0,await this.executeHookSafely("update"),this.logger.debug("Update hook completed successfully"),t=!1},e)}startEcho(){if(!this.hooks.echo){this.logger.info("No echo hook defined, skipping echo");return}if(this.config.echo?.enabled===!1){this.logger.info("Echo disabled in config, skipping...");return}let e=this.config.echo?.interval||3e3;this.logger.info({interval:e},"Starting echo"),this.echoInterval=setInterval(async()=>{if(this.isEchoExecuting){this.logger.debug("Echo still executing, skipping this interval");return}this.isEchoExecuting=!0;try{let t=await this.executeHookSafely("echo");if(!t)return;let o=JSON.stringify(t),i=(0,K.createHash)("sha256").update(o).digest("hex");i!==this.lastEchoHash&&(this.lastEchoHash=i,await this.sendEcho(t))}catch(t){this.logger.warn({error:t instanceof Error?t.message:String(t)},"Echo failed")}finally{this.isEchoExecuting=!1}},e)}async sendEcho(e){let t=process.env.SONAR_API_URL,o=process.env.SONAR_API_KEY,i=process.env.NOMAD_JOB_NAME;if(!t||!o||!i){this.logger.error({hasUrl:!!t,hasKey:!!o,hasJobId:!!i},"Sonar API configuration incomplete, skipping echo send");return}let s={...e,condition:e.condition??"normal"},n={entity_id:i,client_timestamp:Math.floor(Date.now()/1e3),data:s};try{this.logger.info({payload:n,sonarUrl:t},"Sending echo to Sonar API");let p=await fetch(`${t}/api/v1/echo`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o}`},body:JSON.stringify(n)});if(!p.ok){let c=await p.text();this.logger.warn({status:p.status,error:c,entity_id:i},"Sonar API echo failed")}}catch(p){this.logger.warn({error:p instanceof Error?p.message:String(p)},"Failed to send echo to Sonar API, dropping")}}async pingSonar(e){let t=process.env.SONAR_API_URL,o=process.env.SONAR_API_KEY,i=process.env.NOMAD_JOB_NAME;if(!t||!o||!i){this.logger.error({hasUrl:!!t,hasKey:!!o,hasJobId:!!i},"Sonar API configuration incomplete, skipping heartbeat send");return}let s=Math.floor((Date.now()-this.riptideStartTime)/1e3),n={...e},p={entity_id:i,client_timestamp:Math.floor(Date.now()/1e3),riptide_uptime:s,data:n};try{this.logger.info({payload:p,sonarUrl:t,nomadJobId:i},"Sending heartbeat to Sonar API");let c=await fetch(`${t}/api/v1/heartbeat`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${o}`},body:JSON.stringify(p)});if(!c.ok){let l=await c.text();this.logger.warn({status:c.status,error:l,entity_id:i},"Sonar API heartbeat failed")}}catch(c){this.logger.error({error:c instanceof Error?c.message:String(c),errorType:c?.constructor?.name,errorCause:c instanceof Error&&"cause"in c?c.cause:void 0,stack:c instanceof Error?c.stack:void 0,url:`${t}/api/v1/heartbeat`,entity_id:i},"Failed to send heartbeat to Sonar API")}}async startWebServer(e){this.webServer=new I(e,this.logger,()=>({...this.status,uptime:Date.now()-this.startTime}),async()=>await this.executeHookSafely("health")===!0,async()=>await this.getMetrics());try{await this.webServer.start()}catch(t){this.logger.error({error:t,port:e},"Failed to start web server")}}async waitForShutdown(){return new Promise(e=>{let t=a(()=>{this.isShuttingDown?e():setTimeout(t,100)},"checkShutdown");t()})}async getMetrics(){if(!this.hooks.metrics)return{uptime:Date.now()-this.startTime,status:this.status.status};try{return await this.executeHookSafely("metrics")}catch{return{uptime:Date.now()-this.startTime,status:this.status.status}}}};var G=require("fs"),B=m(require("path"));async function z(r){try{let e=await G.promises.readFile(r,"utf8"),t=JSON.parse(e),o=ge(t);return D(o),o}catch(e){throw new Error(`Failed to load config from ${r}: ${e instanceof Error?e.message:String(e)}`)}}a(z,"loadConfig");async function X(r){try{let e=B.resolve(r);delete require.cache[e];let t=require(e);if(typeof t.start!="function")throw new Error('Hooks module must export a "start" function');return t}catch(e){throw new Error(`Failed to load hooks from ${r}: ${e instanceof Error?e.message:String(e)}`)}}a(X,"loadHooks");function D(r){if(!r.service?.name)throw new Error("Config must have service.name");if(r.health,r.heartbeat&&r.heartbeat.interval&&r.heartbeat.interval<1e3)throw new Error("heartbeat.interval must be at least 1000ms");if(r.echo&&r.echo.interval&&r.echo.interval<1e3)throw new Error("echo.interval must be at least 1000ms")}a(D,"validateConfig");function ge(r,e=process.env){let t=JSON.parse(JSON.stringify(r));function o(i){if(typeof i=="string")return H(i,e);if(Array.isArray(i))return i.map(o);if(i&&typeof i=="object"){let s={};for(let[n,p]of Object.entries(i))s[n]=o(p);return s}return i}return a(o,"expandObject"),o(t)}a(ge,"expandConfigVariables");function Q(){return{health:{port:3e3},heartbeat:{interval:6e4,enabled:!1},echo:{interval:3e3,enabled:!0},logging:{level:"info",format:"pretty"}}}a(Q,"getDefaultConfig");function Z(r,e){function t(i,s){if(s&&typeof s=="object"&&!Array.isArray(s))for(let n in s)s.hasOwnProperty(n)&&(i[n]&&typeof i[n]=="object"&&!Array.isArray(i[n])?i[n]=t(i[n],s[n]):i[n]=s[n]);return i}a(t,"deepMerge");let o=t({...r},e);return D(o),o}a(Z,"mergeConfigs");var g=m(require("fs/promises")),d=m(require("path"));var k=class{constructor(e){this.logger=e}static{a(this,"ServiceScaffolder")}async scaffold(e){let{serviceName:t,targetPath:o=".",template:i="basic",description:s}=e,n=d.join(o,t);this.logger.info(`Creating new Coral Reef service: ${t}`),this.logger.info(`Template: ${i}`),this.logger.info(`Location: ${n}`),await this.createDirectoryStructure(n),await this.createPackageJson(n,t,s),await this.createRiptideConfig(n,t,s),await this.createTsConfig(n),await this.createTsupConfig(n),await this.createHooks(n,i),await this.createDockerfile(n,t),this.logger.info("\u2705 Service scaffolding complete!"),this.showNextSteps(t,n)}async createDirectoryStructure(e){await g.mkdir(d.join(e,"src"),{recursive:!0})}async createPackageJson(e,t,o){let i=await this.checkIfInWorkspace(e),s=i?"workspace:*":await this.getRiptideVersion(),n=i?`cd ../.. && docker build --platform \${DOCKER_PLATFORM:-linux/amd64} --progress=plain -t reef-${t} -f services/${t}/Dockerfile .`:`docker build --platform \${DOCKER_PLATFORM:-linux/amd64} --progress=plain -t reef-${t} .`,p={name:`reef-${t}`,version:"1.0.0",description:o||`${t} service for Coral Reef`,main:"dist/hooks.js",scripts:{build:"tsc --noEmit && tsup","build:docker":n,clean:"rm -rf dist",start:"npx @deeep-network/riptide start --hooks dist/hooks.js",validate:"pnpm run build && npx @deeep-network/riptide validate --hooks dist/hooks.js","type-check":"tsc --noEmit"},dependencies:{"@deeep-network/riptide":s},devDependencies:{typescript:"^5.8.3",tsup:"^8.5.0","@types/node":"^20.0.0"},engines:{node:">=22.0.0"}};await g.writeFile(d.join(e,"package.json"),JSON.stringify(p,null,2))}async createRiptideConfig(e,t,o){let i={service:{name:t,version:"1.0.0",description:o||`${t} service`},logging:{level:"info"}};await g.writeFile(d.join(e,"riptide.config.json"),JSON.stringify(i,null,2))}async createTsConfig(e){let o=await this.checkIfInWorkspace(e)?{extends:"../../tsconfig.json",compilerOptions:{outDir:"./dist",rootDir:"./src",declaration:!0,declarationMap:!0,sourceMap:!0},include:["src/**/*"],exclude:["dist","node_modules"]}:{compilerOptions:{target:"ES2022",module:"commonjs",lib:["ES2022"],outDir:"./dist",rootDir:"./src",strict:!0,esModuleInterop:!0,skipLibCheck:!0,forceConsistentCasingInFileNames:!0,declaration:!0,declarationMap:!0,sourceMap:!0,moduleResolution:"node"},include:["src/**/*"],exclude:["dist","node_modules"]};await g.writeFile(d.join(e,"tsconfig.json"),JSON.stringify(o,null,2))}async createTsupConfig(e){await g.writeFile(d.join(e,"tsup.config.ts"),`import { defineConfig } from 'tsup'
+`),U=new Error(le);throw U.name="CommandTimeoutError",U}return{stdout:s.stdout?.trim()||"",stderr:s.stderr?.trim()||s.message,exitCode:s.code||1}}},"execCommand"),writeFile:a(async(o,e,t={})=>{let{mode:r="0644",encoding:i="utf8"}=t;await h.promises.mkdir(F.dirname(o),{recursive:!0}),await h.promises.writeFile(o,e,{encoding:i}),await h.promises.chmod(o,r)},"writeFile"),readFile:a(async o=>await h.promises.readFile(o,"utf8"),"readFile"),fileExists:a(async o=>{try{return await h.promises.access(o),!0}catch{return!1}},"fileExists"),downloadFile:a(async function o(e,t){return new Promise((r,i)=>{let s=F.dirname(t);h.promises.mkdir(s,{recursive:!0}).then(()=>{let n=(0,h.createWriteStream)(t);(e.startsWith("https:")?we:ye).get(e,l=>{if(l.statusCode===200)l.pipe(n),n.on("finish",()=>{n.close(),r(t)});else if(l.statusCode===301||l.statusCode===302){let u=l.headers.location;u?r(o(u,t)):i(new Error(`Redirect without location header: ${l.statusCode}`))}else i(new Error(`Failed to download: ${l.statusCode} ${l.statusMessage}`))}).on("error",l=>{h.promises.unlink(t).catch(()=>{}),i(l)}),n.on("error",l=>{h.promises.unlink(t).catch(()=>{}),i(l)})}).catch(i)})},"downloadFile")}}a($,"createUtilityContext");function Z(o){return!o||o.length<=10?"[REDACTED]":`${o.slice(0,4)}...${o.slice(-4)}`}a(Z,"redactSecret");function ee(o){let e={},t=o.split(`
+`);for(let r of t){let i=r.trim();if(i&&!i.startsWith("#")){let[s,...n]=i.split("=");s&&n.length>0&&(e[s.trim()]=n.join("=").trim())}}return e}a(ee,"parseEnvironmentVariables");function N(o,e=process.env){return o.replace(/\$\{([^}]+)\}/g,(t,r)=>e[r]||t)}a(N,"expandEnvironmentVariables");var te=require("http");var D=class{constructor(e,t,r,i,s){this.getStatus=r;this.executeHealthCheck=i;this.getMetrics=s;this.port=e,this.logger=t.child({component:"web-server"})}static{a(this,"WebServer")}server=null;port;logger;async start(){if(this.server){this.logger.warn("Web server already running");return}return this.server=(0,te.createServer)(async(e,t)=>{if(e.method!=="GET"){t.writeHead(405,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:"Method not allowed"}));return}if(e.url==="/health")try{let r=await this.executeHealthCheck(),i=this.getStatus(),s={healthy:r,status:i.status,uptime:i.uptime,message:i.message};r?t.writeHead(200,{"Content-Type":"application/json"}):t.writeHead(503,{"Content-Type":"application/json"}),t.end(JSON.stringify(s))}catch(r){this.logger.error({error:r},"Health check endpoint error"),t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({healthy:!1,error:r instanceof Error?r.message:"Internal server error"}))}else if(e.url==="/metrics")try{let r=await this.getMetrics();t.writeHead(200,{"Content-Type":"text/plain; version=0.0.4"}),t.end(r)}catch(r){this.logger.error({error:r},"Metrics endpoint error"),t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:r instanceof Error?r.message:"Internal server error"}))}else t.writeHead(404,{"Content-Type":"application/json"}),t.end(JSON.stringify({error:"Not found"}))}),new Promise((e,t)=>{this.server.once("error",r=>{this.logger.error({error:r,port:this.port},"Failed to start web server"),t(r)}),this.server.listen(this.port,()=>{e()})})}async stop(){if(this.server)return new Promise(e=>{this.server.close(()=>{this.logger.info("Web server stopped"),this.server=null,e()})})}};var A=class{static{a(this,"RiptideEntrypoint")}logger;hooks;config;isShuttingDown=!1;status={status:"starting"};startTime;riptideStartTime;heartbeatInterval;updateInterval;echoInterval;portRenewalInterval;lastEchoHash=null;isEchoExecuting=!1;webServer;portManager;constructor(e,t,r={}){this.hooks=e,this.config=t,this.startTime=Date.now(),this.riptideStartTime=Date.now(),this.logger=O({serviceName:t.service.name,level:process.env.RIPTIDE_LOG_LEVEL||r.logLevel||t.logging?.level||"info",format:process.env.NODE_ENV==="production"?"json":t.logging?.format||"pretty"}),this.setupGlobalErrorHandlers(),this.setupSignalHandlers()}async start(){try{let e=this.config.service.version||"unknown",t=process.env.NODE_ENV||"production";this.logger.info({version:e,environment:t},`Starting ${this.config.service.name}`),await this.processSecrets(),await this.openPorts(),this.startPortRenewal(),await this.executeHook("start"),await this.startWebServer(this.config.health?.port||3e3),this.startHeartbeat(),this.startEcho(),this.startUpdate(),this.status={status:"healthy",uptime:Date.now()-this.startTime,message:"Service started successfully"},this.logger.info({service:this.config.service.name},`${this.config.service.name} service is ready`),await this.waitForShutdown()}catch(e){this.logger.error({error:e instanceof Error?e.message:String(e),stack:e instanceof Error?e.stack:void 0},`Failed to start ${this.config.service.name} service`),this.status={status:"unhealthy",message:e instanceof Error?e.message:String(e)},y(e)?(this.logger.error(`Exiting with code ${e.exitCode} (${e.name})`),process.exit(e.exitCode)):process.exit(1)}}async processSecrets(){if(!this.hooks.installSecrets){this.logger.info("No installSecrets hook defined, continuing...");return}try{await this.executeHook("installSecrets")}catch(e){throw this.logger.error({error:e instanceof Error?e.message:String(e),stack:e instanceof Error?e.stack:void 0,hookName:"installSecrets"},"Failed to install secrets"),e}}async openPorts(){let e=H(process.env);if(e.length===0){this.logger.debug("No NOMAD_PORT_* variables found, skipping port manager");return}let t=M();if(this.logger.info({ports:e.map(s=>`${s.protocol}:${s.port}`),socketPath:t},"Found ports to open via port-manager"),!T(t))throw new v(`Port manager socket not found at ${t}. Ports ${e.map(s=>`${s.protocol}:${s.port}`).join(", ")} cannot be opened. Ensure port-manager daemon is running and socket is bind-mounted.`);this.portManager=new w(t,this.logger);let r=process.env.NOMAD_JOB_NAME,i=process.env.NOMAD_ALLOC_ID;try{let s=await this.portManager.openPorts(e,r,i);this.logger.info({count:s.length,mappings:s.map(n=>({port:n.port,externalPort:n.externalPort,externalIp:n.externalIp,protocol:n.protocol,natMethod:n.natMethod}))},"All ports opened successfully via port-manager")}catch(s){throw new v(`Failed to open ports: ${s instanceof Error?s.message:String(s)}`)}}async executeHook(e){let t=this.hooks[e];if(typeof t!="function")throw new Error(`Required hook '${e}' not found`);this.logger.debug(`Executing ${e} hook`);let r=this.createHookContext(),i=Date.now();try{let s=await t(r),n=Date.now()-i;return this.logger.debug(`${e} hook completed (${n}ms)`),s}catch(s){let n=Date.now()-i;throw this.logger.error({hookName:e,duration:n,error:s instanceof Error?s.message:String(s),stack:s instanceof Error?s.stack:void 0},`${e} hook threw an exception, will not continue`),s}}async executeHookSafely(e){if(typeof this.hooks[e]!="function")return this.logger.debug(`Optional hook '${e}' not found, skipping`),null;try{return await this.executeHook(e)}catch(r){y(r)&&(this.logger.error({hookName:e,error:r.message,exitCode:r.exitCode},`${e} hook threw ${r.name}, exiting with code ${r.exitCode}`),process.exit(r.exitCode)),this.logger.error({hookName:e,error:r instanceof Error?r.message:String(r),stack:r instanceof Error?r.stack:void 0},`${e} hook threw an unhandled exception, exiting with code 1`),process.exit(1)}}createHookContext(){return{config:this.config,logger:this.logger,env:process.env,utils:$()}}setupGlobalErrorHandlers(){process.on("uncaughtException",e=>{this.logger.error({error:e.message,stack:e.stack},"Uncaught exception"),y(e)?(this.logger.info(`Exiting with code ${e.exitCode} (${e.name}) from unhandled exception`),process.exit(e.exitCode)):(this.logger.error("Exiting with code 1 due to unhandled exception"),process.exit(1))}),process.on("unhandledRejection",(e,t)=>{this.logger.error({reason:e,promise:t},"Unhandled promise rejection"),y(e)?(this.logger.info(`Exiting with code ${e.exitCode} (${e.name}) from unhandled rejection`),process.exit(e.exitCode)):(this.logger.error("Exiting with code 1 due to unhandled promise rejection"),process.exit(1))})}setupSignalHandlers(){let e=a(async t=>{this.isShuttingDown&&(this.logger.warn("Force shutdown signal received"),process.exit(1)),this.isShuttingDown=!0,this.status={status:"stopping",message:`Received ${t} signal`},this.logger.info(`${t} signal received, starting graceful shutdown...`);try{if(this.heartbeatInterval&&clearInterval(this.heartbeatInterval),this.echoInterval&&clearInterval(this.echoInterval),this.updateInterval&&clearInterval(this.updateInterval),this.portRenewalInterval&&clearInterval(this.portRenewalInterval),this.webServer&&await this.webServer.stop(),this.portManager)try{await this.portManager.closePorts(),this.logger.info("Ports closed via port-manager")}catch(r){this.logger.warn({error:r instanceof Error?r.message:String(r)},"Failed to close ports (continuing shutdown)")}await this.executeHookSafely("stop"),this.status={status:"stopped",message:"Graceful shutdown completed"},this.logger.info("Graceful shutdown completed"),process.exit(0)}catch(r){this.logger.error({error:r instanceof Error?r.message:String(r)},"Error during graceful shutdown"),process.exit(1)}},"gracefulShutdown");process.on("SIGTERM",()=>e("SIGTERM")),process.on("SIGINT",()=>e("SIGINT"))}startHeartbeat(){if(!this.hooks.heartbeat){this.logger.info("No heartbeat hook defined, skipping heartbeat");return}if(!this.config.heartbeat?.enabled){this.logger.info("Heartbeat disabled in config, skipping...");return}let e=this.config.heartbeat?.interval||6e4;this.logger.info({interval:e},"Starting heartbeat");let t=!1;this.heartbeatInterval=setInterval(async()=>{if(t){this.logger.info("Heartbeat still executing, skipping this interval");return}t=!0;let r=await this.executeHookSafely("heartbeat");if(r===null){this.logger.info("Heartbeat hook returned null, skipping heartbeat"),t=!1;return}try{await this.pingSonar(r)}catch(i){this.logger.warn({error:i instanceof Error?i.message:String(i)},"Failed to send heartbeat to Sonar")}finally{t=!1}},e)}startUpdate(){if(!this.hooks.update){this.logger.info("No update hook defined, skipping update");return}if(!this.config.update?.enabled){this.logger.info("Update disabled in config, skipping...");return}let e=this.config.update?.interval||6e4;this.logger.info({interval:e},"Starting update");let t=!1;this.updateInterval=setInterval(async()=>{if(t){this.logger.info("Update still executing, skipping this interval");return}t=!0,await this.executeHookSafely("update"),this.logger.debug("Update hook completed successfully"),t=!1},e)}startPortRenewal(){if(!this.portManager)return;let e=25*60*1e3,t=parseInt(process.env.PORT_RENEWAL_INTERVAL_MS||"",10)||e;this.logger.info({interval:t},"Starting port renewal"),this.portRenewalInterval=setInterval(async()=>{if(this.portManager)try{await this.portManager.renewPorts()}catch(r){this.logger.warn({error:r instanceof Error?r.message:String(r)},"Port renewal cycle failed")}},t)}startEcho(){if(!this.hooks.echo){this.logger.info("No echo hook defined, skipping echo");return}if(this.config.echo?.enabled===!1){this.logger.info("Echo disabled in config, skipping...");return}let e=this.config.echo?.interval||3e3;this.logger.info({interval:e},"Starting echo"),this.echoInterval=setInterval(async()=>{if(this.isEchoExecuting){this.logger.debug("Echo still executing, skipping this interval");return}this.isEchoExecuting=!0;try{let t=await this.executeHookSafely("echo");if(!t)return;let r=JSON.stringify(t),i=(0,re.createHash)("sha256").update(r).digest("hex");i!==this.lastEchoHash&&(this.lastEchoHash=i,await this.sendEcho(t))}catch(t){this.logger.warn({error:t instanceof Error?t.message:String(t)},"Echo failed")}finally{this.isEchoExecuting=!1}},e)}async sendEcho(e){let t=process.env.SONAR_API_URL,r=process.env.SONAR_API_KEY,i=process.env.NOMAD_JOB_NAME;if(!t||!r||!i){this.logger.error({hasUrl:!!t,hasKey:!!r,hasJobId:!!i},"Sonar API configuration incomplete, skipping echo send");return}let s={...e,condition:e.condition??"normal"},n={entity_id:i,client_timestamp:Math.floor(Date.now()/1e3),data:s};try{this.logger.info({payload:n,sonarUrl:t},"Sending echo to Sonar API");let p=await fetch(`${t}/api/v1/echo`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`},body:JSON.stringify(n)});if(!p.ok){let c=await p.text();this.logger.warn({status:p.status,error:c,entity_id:i},"Sonar API echo failed")}}catch(p){this.logger.warn({error:p instanceof Error?p.message:String(p)},"Failed to send echo to Sonar API, dropping")}}async pingSonar(e){let t=process.env.SONAR_API_URL,r=process.env.SONAR_API_KEY,i=process.env.NOMAD_JOB_NAME;if(!t||!r||!i){this.logger.error({hasUrl:!!t,hasKey:!!r,hasJobId:!!i},"Sonar API configuration incomplete, skipping heartbeat send");return}let s=Math.floor((Date.now()-this.riptideStartTime)/1e3),n={...e},p={entity_id:i,client_timestamp:Math.floor(Date.now()/1e3),riptide_uptime:s,data:n};try{this.logger.info({payload:p,sonarUrl:t,nomadJobId:i},"Sending heartbeat to Sonar API");let c=await fetch(`${t}/api/v1/heartbeat`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${r}`},body:JSON.stringify(p)});if(!c.ok){let l=await c.text();this.logger.warn({status:c.status,error:l,entity_id:i},"Sonar API heartbeat failed")}}catch(c){this.logger.error({error:c instanceof Error?c.message:String(c),errorType:c?.constructor?.name,errorCause:c instanceof Error&&"cause"in c?c.cause:void 0,stack:c instanceof Error?c.stack:void 0,url:`${t}/api/v1/heartbeat`,entity_id:i},"Failed to send heartbeat to Sonar API")}}async startWebServer(e){this.webServer=new D(e,this.logger,()=>({...this.status,uptime:Date.now()-this.startTime}),async()=>{if(this.portManager){try{let r=await this.portManager.checkPortHealth();if(!r.healthy)return this.logger.warn({ports:r.ports},"Port health check failed - ports unreachable"),!1}catch(r){return this.logger.error({error:r instanceof Error?r.message:String(r)},"Failed to check port health"),!1}this.portManager.renewPorts().catch(r=>{this.logger.warn({error:r instanceof Error?r.message:String(r)},"Port renewal during health check failed")})}return await this.executeHookSafely("health")===!0},async()=>await this.getMetrics());try{await this.webServer.start()}catch(t){this.logger.error({error:t,port:e},"Failed to start web server")}}async waitForShutdown(){return new Promise(e=>{let t=a(()=>{this.isShuttingDown?e():setTimeout(t,100)},"checkShutdown");t()})}async getMetrics(){if(!this.hooks.metrics)return{uptime:Date.now()-this.startTime,status:this.status.status};try{return await this.executeHookSafely("metrics")}catch{return{uptime:Date.now()-this.startTime,status:this.status.status}}}};var oe=require("fs"),ie=m(require("path"));async function se(o){try{let e=await oe.promises.readFile(o,"utf8"),t=JSON.parse(e),r=xe(t);return j(r),r}catch(e){throw new Error(`Failed to load config from ${o}: ${e instanceof Error?e.message:String(e)}`)}}a(se,"loadConfig");async function ne(o){try{let e=ie.resolve(o);delete require.cache[e];let t=require(e);if(typeof t.start!="function")throw new Error('Hooks module must export a "start" function');return t}catch(e){throw new Error(`Failed to load hooks from ${o}: ${e instanceof Error?e.message:String(e)}`)}}a(ne,"loadHooks");function j(o){if(!o.service?.name)throw new Error("Config must have service.name");if(o.health,o.heartbeat&&o.heartbeat.interval&&o.heartbeat.interval<1e3)throw new Error("heartbeat.interval must be at least 1000ms");if(o.echo&&o.echo.interval&&o.echo.interval<1e3)throw new Error("echo.interval must be at least 1000ms")}a(j,"validateConfig");function xe(o,e=process.env){let t=JSON.parse(JSON.stringify(o));function r(i){if(typeof i=="string")return N(i,e);if(Array.isArray(i))return i.map(r);if(i&&typeof i=="object"){let s={};for(let[n,p]of Object.entries(i))s[n]=r(p);return s}return i}return a(r,"expandObject"),r(t)}a(xe,"expandConfigVariables");function ae(){return{health:{port:3e3},heartbeat:{interval:6e4,enabled:!1},echo:{interval:3e3,enabled:!0},logging:{level:"info",format:"pretty"}}}a(ae,"getDefaultConfig");function ce(o,e){function t(i,s){if(s&&typeof s=="object"&&!Array.isArray(s))for(let n in s)s.hasOwnProperty(n)&&(i[n]&&typeof i[n]=="object"&&!Array.isArray(i[n])?i[n]=t(i[n],s[n]):i[n]=s[n]);return i}a(t,"deepMerge");let r=t({...o},e);return j(r),r}a(ce,"mergeConfigs");var g=m(require("fs/promises")),d=m(require("path"));var x=class{constructor(e){this.logger=e}static{a(this,"ServiceScaffolder")}async scaffold(e){let{serviceName:t,targetPath:r=".",template:i="basic",description:s}=e,n=d.join(r,t);this.logger.info(`Creating new Coral Reef service: ${t}`),this.logger.info(`Template: ${i}`),this.logger.info(`Location: ${n}`),await this.createDirectoryStructure(n),await this.createPackageJson(n,t,s),await this.createRiptideConfig(n,t,s),await this.createTsConfig(n),await this.createTsupConfig(n),await this.createHooks(n,i),await this.createDockerfile(n,t),this.logger.info("\u2705 Service scaffolding complete!"),this.showNextSteps(t,n)}async createDirectoryStructure(e){await g.mkdir(d.join(e,"src"),{recursive:!0})}async createPackageJson(e,t,r){let i=await this.checkIfInWorkspace(e),s=i?"workspace:*":await this.getRiptideVersion(),n=i?`cd ../.. && docker build --platform \${DOCKER_PLATFORM:-linux/amd64} --progress=plain -t reef-${t} -f services/${t}/Dockerfile .`:`docker build --platform \${DOCKER_PLATFORM:-linux/amd64} --progress=plain -t reef-${t} .`,p={name:`reef-${t}`,version:"1.0.0",description:r||`${t} service for Coral Reef`,main:"dist/hooks.js",scripts:{build:"tsc --noEmit && tsup","build:docker":n,clean:"rm -rf dist",start:"npx @deeep-network/riptide start --hooks dist/hooks.js",validate:"pnpm run build && npx @deeep-network/riptide validate --hooks dist/hooks.js","type-check":"tsc --noEmit"},dependencies:{"@deeep-network/riptide":s},devDependencies:{typescript:"^5.8.3",tsup:"^8.5.0","@types/node":"^20.0.0"},engines:{node:">=22.0.0"}};await g.writeFile(d.join(e,"package.json"),JSON.stringify(p,null,2))}async createRiptideConfig(e,t,r){let i={service:{name:t,version:"1.0.0",description:r||`${t} service`},logging:{level:"info"}};await g.writeFile(d.join(e,"riptide.config.json"),JSON.stringify(i,null,2))}async createTsConfig(e){let r=await this.checkIfInWorkspace(e)?{extends:"../../tsconfig.json",compilerOptions:{outDir:"./dist",rootDir:"./src",declaration:!0,declarationMap:!0,sourceMap:!0},include:["src/**/*"],exclude:["dist","node_modules"]}:{compilerOptions:{target:"ES2022",module:"commonjs",lib:["ES2022"],outDir:"./dist",rootDir:"./src",strict:!0,esModuleInterop:!0,skipLibCheck:!0,forceConsistentCasingInFileNames:!0,declaration:!0,declarationMap:!0,sourceMap:!0,moduleResolution:"node"},include:["src/**/*"],exclude:["dist","node_modules"]};await g.writeFile(d.join(e,"tsconfig.json"),JSON.stringify(r,null,2))}async createTsupConfig(e){await g.writeFile(d.join(e,"tsup.config.ts"),`import { defineConfig } from 'tsup'
 
 export default defineConfig({
   entry: ['src/hooks.ts'],
@@ -14,7 +14,7 @@ export default defineConfig({
   minify: false,
   sourcemap: true
 })
-`)}async createHooks(e,t){let o="";switch(t){case"with-secrets":o=this.getHooksWithSecrets();break;case"with-process":o=this.getHooksWithProcess();break;case"with-metrics":o=this.getHooksWithMetrics();break;default:o=this.getBasicHooks()}await g.writeFile(d.join(e,"src","hooks.ts"),o)}getBasicHooks(){return`import type { HookContext } from '@deeep-network/riptide'
+`)}async createHooks(e,t){let r="";switch(t){case"with-secrets":r=this.getHooksWithSecrets();break;case"with-process":r=this.getHooksWithProcess();break;case"with-metrics":r=this.getHooksWithMetrics();break;default:r=this.getBasicHooks()}await g.writeFile(d.join(e,"src","hooks.ts"),r)}getBasicHooks(){return`import type { HookContext } from '@deeep-network/riptide'
 
 module.exports = {
   installSecrets: async ({ logger }: HookContext) => {
@@ -396,4 +396,4 @@ Next steps:
 
 NOTE: Riptide is a node application. If your base image does
 not have node installed (v22+), install it in the Dockerfile.
-`)}async checkIfInWorkspace(e){let t=d.resolve(e),o=d.parse(t).root;for(;t!==o;){try{return await g.access(d.join(t,"pnpm-workspace.yaml")),!0}catch{}t=d.dirname(t)}return!1}async getRiptideVersion(){try{let e=[d.join(__dirname,"..","package.json"),d.join(__dirname,"..","..","package.json"),d.join(__dirname,"..","..","..","@deeep-network","riptide","package.json"),d.join(__dirname,"..","..","node_modules","@deeep-network","riptide","package.json")];for(let t of e)try{let o=await g.readFile(t,"utf-8"),i=JSON.parse(o);if(i.name==="@deeep-network/riptide")return`^${i.version}`}catch{continue}try{return`^${require("@deeep-network/riptide/package.json").version}`}catch{}return this.logger.warn("Could not read riptide package.json, falling back to default version"),"^0.1.3"}catch{return this.logger.warn("Could not read riptide package.json, falling back to default version"),"^0.1.3"}}};async function ee(r,e,t={}){await new k(r).scaffold({serviceName:e,...t})}a(ee,"initService");0&&(module.exports={AlreadyRunningError,DiagnoseRequiredError,InvalidSecretError,MissingSecretError,RiptideEntrypoint,RiptideError,ServiceScaffolder,UserConfigNeededError,WorkloadCondition,createChildLogger,createLogger,createUtilityContext,expandEnvironmentVariables,getDefaultConfig,initService,isAlreadyRunningError,isDiagnoseRequiredError,isInvalidSecretError,isMissingSecretError,isRiptideError,isUserConfigNeededError,loadConfig,loadHooks,mergeConfigs,parseEnvironmentVariables,redactSecret,validateConfig});
+`)}async checkIfInWorkspace(e){let t=d.resolve(e),r=d.parse(t).root;for(;t!==r;){try{return await g.access(d.join(t,"pnpm-workspace.yaml")),!0}catch{}t=d.dirname(t)}return!1}async getRiptideVersion(){try{let e=[d.join(__dirname,"..","package.json"),d.join(__dirname,"..","..","package.json"),d.join(__dirname,"..","..","..","@deeep-network","riptide","package.json"),d.join(__dirname,"..","..","node_modules","@deeep-network","riptide","package.json")];for(let t of e)try{let r=await g.readFile(t,"utf-8"),i=JSON.parse(r);if(i.name==="@deeep-network/riptide")return`^${i.version}`}catch{continue}try{return`^${require("@deeep-network/riptide/package.json").version}`}catch{}return this.logger.warn("Could not read riptide package.json, falling back to default version"),"^0.1.3"}catch{return this.logger.warn("Could not read riptide package.json, falling back to default version"),"^0.1.3"}}};async function pe(o,e,t={}){await new x(o).scaffold({serviceName:e,...t})}a(pe,"initService");0&&(module.exports={AlreadyRunningError,DiagnoseRequiredError,InvalidSecretError,MissingSecretError,PortManager,PortOpenError,RiptideEntrypoint,RiptideError,ServiceScaffolder,UserConfigNeededError,WorkloadCondition,createChildLogger,createLogger,createUtilityContext,expandEnvironmentVariables,getDefaultConfig,getSocketPath,initService,isAlreadyRunningError,isDiagnoseRequiredError,isInvalidSecretError,isMissingSecretError,isPortOpenError,isRiptideError,isSocketAvailable,isUserConfigNeededError,loadConfig,loadHooks,mergeConfigs,parseEnvironmentVariables,parseNomadPorts,redactSecret,validateConfig});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deeep-network/riptide",
-  "version": "2.0.2",
+  "version": "2.1.0",
   "description": "Universal Riptide Runtime for the DeEEP Network",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",