@evermore.work/server 2026.509.0-canary.0

package/dist/services/local-service-supervisor.js

@@ -0,0 +1,284 @@
+import { execFile } from "node:child_process";
+import { createHash } from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { setTimeout as delay } from "node:timers/promises";
+import { promisify } from "node:util";
+import { resolveEvermoreInstanceRoot } from "../home-paths.js";
+const execFileAsync = promisify(execFile);
+function stableStringify(value) {
+    if (Array.isArray(value)) {
+        return `[${value.map((entry) => stableStringify(entry)).join(",")}]`;
+    }
+    if (value && typeof value === "object") {
+        const rec = value;
+        return `{${Object.keys(rec).sort().map((key) => `${JSON.stringify(key)}:${stableStringify(rec[key])}`).join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+function sanitizeServiceKeySegment(value, fallback) {
+    const normalized = value
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9._-]+/g, "-")
+        .replace(/-+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    return normalized || fallback;
+}
+function getRuntimeServicesDir() {
+    return path.resolve(resolveEvermoreInstanceRoot(), "runtime-services");
+}
+function getRuntimeServiceRegistryPath(serviceKey) {
+    return path.resolve(getRuntimeServicesDir(), `${serviceKey}.json`);
+}
+function normalizeRegistryRecord(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const rec = raw;
+    if (rec.version !== 1 ||
+        typeof rec.serviceKey !== "string" ||
+        typeof rec.profileKind !== "string" ||
+        typeof rec.serviceName !== "string" ||
+        typeof rec.command !== "string" ||
+        typeof rec.cwd !== "string" ||
+        typeof rec.envFingerprint !== "string" ||
+        typeof rec.pid !== "number") {
+        return null;
+    }
+    return {
+        version: 1,
+        serviceKey: rec.serviceKey,
+        profileKind: rec.profileKind,
+        serviceName: rec.serviceName,
+        command: rec.command,
+        cwd: rec.cwd,
+        envFingerprint: rec.envFingerprint,
+        port: typeof rec.port === "number" ? rec.port : null,
+        url: typeof rec.url === "string" ? rec.url : null,
+        pid: rec.pid,
+        processGroupId: typeof rec.processGroupId === "number" ? rec.processGroupId : null,
+        provider: "local_process",
+        runtimeServiceId: typeof rec.runtimeServiceId === "string" ? rec.runtimeServiceId : null,
+        reuseKey: typeof rec.reuseKey === "string" ? rec.reuseKey : null,
+        startedAt: typeof rec.startedAt === "string" ? rec.startedAt : new Date().toISOString(),
+        lastSeenAt: typeof rec.lastSeenAt === "string" ? rec.lastSeenAt : new Date().toISOString(),
+        metadata: rec.metadata && typeof rec.metadata === "object" && !Array.isArray(rec.metadata)
+            ? rec.metadata
+            : null,
+    };
+}
+async function safeReadRegistryRecord(filePath) {
+    try {
+        const raw = JSON.parse(await fs.readFile(filePath, "utf8"));
+        return normalizeRegistryRecord(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export function createLocalServiceKey(input) {
+    const digest = createHash("sha256")
+        .update(stableStringify({
+        profileKind: input.profileKind,
+        serviceName: input.serviceName,
+        cwd: path.resolve(input.cwd),
+        command: input.command,
+        envFingerprint: input.envFingerprint,
+        port: input.port,
+        scope: input.scope ?? null,
+    }))
+        .digest("hex")
+        .slice(0, 24);
+    return `${sanitizeServiceKeySegment(input.profileKind, "service")}-${sanitizeServiceKeySegment(input.serviceName, "service")}-${digest}`;
+}
+export async function writeLocalServiceRegistryRecord(record) {
+    await fs.mkdir(getRuntimeServicesDir(), { recursive: true });
+    await fs.writeFile(getRuntimeServiceRegistryPath(record.serviceKey), `${JSON.stringify(record, null, 2)}\n`, "utf8");
+}
+export async function removeLocalServiceRegistryRecord(serviceKey) {
+    await fs.rm(getRuntimeServiceRegistryPath(serviceKey), { force: true });
+}
+export async function readLocalServiceRegistryRecord(serviceKey) {
+    return await safeReadRegistryRecord(getRuntimeServiceRegistryPath(serviceKey));
+}
+export async function listLocalServiceRegistryRecords(filter) {
+    try {
+        const entries = await fs.readdir(getRuntimeServicesDir(), { withFileTypes: true });
+        const records = await Promise.all(entries
+            .filter((entry) => entry.isFile() && entry.name.endsWith(".json"))
+            .map((entry) => safeReadRegistryRecord(path.resolve(getRuntimeServicesDir(), entry.name))));
+        return records
+            .filter((record) => record !== null)
+            .filter((record) => {
+            if (filter?.profileKind && record.profileKind !== filter.profileKind)
+                return false;
+            if (!filter?.metadata)
+                return true;
+            return Object.entries(filter.metadata).every(([key, value]) => record.metadata?.[key] === value);
+        })
+            .sort((left, right) => left.serviceKey.localeCompare(right.serviceKey));
+    }
+    catch {
+        return [];
+    }
+}
+export async function findLocalServiceRegistryRecordByRuntimeServiceId(input) {
+    const records = await listLocalServiceRegistryRecords(input.profileKind ? { profileKind: input.profileKind } : undefined);
+    const record = records.find((entry) => entry.runtimeServiceId === input.runtimeServiceId) ?? null;
+    if (!record)
+        return null;
+    let candidate = record;
+    if (!isPidAlive(candidate.pid)) {
+        const ownerPid = candidate.port ? await readLocalServicePortOwner(candidate.port) : null;
+        if (!ownerPid) {
+            await removeLocalServiceRegistryRecord(candidate.serviceKey);
+            return null;
+        }
+        candidate = {
+            ...candidate,
+            pid: ownerPid,
+            processGroupId: candidate.processGroupId && isPidAlive(candidate.processGroupId) ? candidate.processGroupId : ownerPid,
+            lastSeenAt: new Date().toISOString(),
+        };
+        await writeLocalServiceRegistryRecord(candidate);
+    }
+    if (!(await isLikelyMatchingCommand(candidate))) {
+        await removeLocalServiceRegistryRecord(record.serviceKey);
+        return null;
+    }
+    return candidate;
+}
+export function isPidAlive(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function isProcessGroupAlive(processGroupId) {
+    if (process.platform === "win32")
+        return false;
+    if (typeof processGroupId !== "number" || !Number.isInteger(processGroupId) || processGroupId <= 0)
+        return false;
+    try {
+        process.kill(-processGroupId, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function isLikelyMatchingCommand(record) {
+    if (process.platform === "win32")
+        return true;
+    try {
+        const { stdout } = await execFileAsync("ps", ["-o", "command=", "-p", String(record.pid)]);
+        const commandLine = stdout.trim();
+        if (!commandLine)
+            return false;
+        const normalize = (value) => value.replace(/["']/g, "").replace(/\s+/g, " ").trim();
+        const normalizedCommandLine = normalize(commandLine);
+        const normalizedRecordedCommand = normalize(record.command);
+        return normalizedCommandLine.includes(normalizedRecordedCommand) || normalizedCommandLine.includes(record.serviceName);
+    }
+    catch {
+        return true;
+    }
+}
+export async function findAdoptableLocalService(input) {
+    const record = await readLocalServiceRegistryRecord(input.serviceKey);
+    if (!record)
+        return null;
+    if (!isPidAlive(record.pid)) {
+        await removeLocalServiceRegistryRecord(input.serviceKey);
+        return null;
+    }
+    if (!(await isLikelyMatchingCommand(record))) {
+        await removeLocalServiceRegistryRecord(input.serviceKey);
+        return null;
+    }
+    if (input.command && record.command !== input.command)
+        return null;
+    if (input.cwd && path.resolve(record.cwd) !== path.resolve(input.cwd))
+        return null;
+    if (input.envFingerprint && record.envFingerprint !== input.envFingerprint)
+        return null;
+    if (input.port !== undefined && input.port !== null && record.port !== input.port)
+        return null;
+    return record;
+}
+export async function touchLocalServiceRegistryRecord(serviceKey, patch) {
+    const existing = await readLocalServiceRegistryRecord(serviceKey);
+    if (!existing)
+        return null;
+    const next = {
+        ...existing,
+        ...patch,
+        version: 1,
+        serviceKey,
+        lastSeenAt: patch?.lastSeenAt ?? new Date().toISOString(),
+    };
+    await writeLocalServiceRegistryRecord(next);
+    return next;
+}
+export async function terminateLocalService(record, opts) {
+    const signal = opts?.signal ?? "SIGTERM";
+    const targetProcessGroup = process.platform !== "win32" && record.processGroupId && record.processGroupId > 0;
+    try {
+        if (targetProcessGroup) {
+            process.kill(-record.processGroupId, signal);
+        }
+        else {
+            process.kill(record.pid, signal);
+        }
+    }
+    catch {
+        return;
+    }
+    const deadline = Date.now() + (opts?.forceAfterMs ?? 2_000);
+    while (Date.now() < deadline) {
+        const targetAlive = targetProcessGroup
+            ? isProcessGroupAlive(record.processGroupId)
+            : isPidAlive(record.pid);
+        if (!targetAlive) {
+            return;
+        }
+        await delay(100);
+    }
+    const stillAlive = targetProcessGroup
+        ? isProcessGroupAlive(record.processGroupId)
+        : isPidAlive(record.pid);
+    if (!stillAlive)
+        return;
+    try {
+        if (targetProcessGroup) {
+            process.kill(-record.processGroupId, "SIGKILL");
+        }
+        else {
+            process.kill(record.pid, "SIGKILL");
+        }
+    }
+    catch {
+        // Ignore cleanup races.
+    }
+}
+export async function readLocalServicePortOwner(port) {
+    if (!Number.isInteger(port) || port <= 0 || process.platform === "win32")
+        return null;
+    try {
+        const { stdout } = await execFileAsync("lsof", ["-nPiTCP", `:${port}`, "-sTCP:LISTEN", "-t"]);
+        const firstPid = stdout
+            .split("\n")
+            .map((line) => Number.parseInt(line.trim(), 10))
+            .find((value) => Number.isInteger(value) && value > 0);
+        return firstPid ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=local-service-supervisor.js.map

package/dist/services/local-service-supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-service-supervisor.js","sourceRoot":"","sources":["../../src/services/local-service-supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAgC1C,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtH,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa,EAAE,QAAgB;IAChE,MAAM,UAAU,GAAG,KAAK;SACrB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,UAAU,IAAI,QAAQ,CAAC;AAChC,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAkB;IACvD,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAY;IAC3C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,IACE,GAAG,CAAC,OAAO,KAAK,CAAC;QACjB,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QACnC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QACnC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAC/B,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;QACtC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACpD,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACjD,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,cAAc,EAAE,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QAClF,QAAQ,EAAE,eAAe;QACzB,gBAAgB,EAAE,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI;QACxF,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QAChE,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACvF,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1F,QAAQ,EACN,GAAG,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9E,CAAC,CAAE,GAAG,CAAC,QAAoC;YAC3C,CAAC,CAAC,IAAI;KACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,QAAgB;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;QACvE,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAgC;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CACL,eAAe,CAAC;QACd,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;KAC3B,CAAC,CACH;SACA,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,yBAAyB,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,MAAM,EAAE,CAAC;AAC3I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,MAAkC;IACtF,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,CAAC,SAAS,CAChB,6BAA6B,CAAC,MAAM,CAAC,UAAU,CAAC,EAChD,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACtC,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,UAAkB;IACvE,MAAM,EAAE,CAAC,EAAE,CAAC,6BAA6B,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,UAAkB;IACrE,OAAO,MAAM,sBAAsB,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,MAGrD;IACC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,OAAO;aACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aACjE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAC7F,CAAC;QAEF,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,MAAM,EAAwC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC;aACzE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;YACjB,IAAI,MAAM,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAAE,OAAO,KAAK,CAAC;YACnF,IAAI,CAAC,MAAM,EAAE,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACnC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC;QACnG,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gDAAgD,CAAC,KAGtE;IACC,MAAM,OAAO,GAAG,MAAM,+BAA+B,CACnD,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CACnE,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;IAClG,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,SAAS,GAAG,MAAM,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACzF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,gCAAgC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,GAAG;YACV,GAAG,SAAS;YACZ,GAAG,EAAE,QAAQ;YACb,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ;YACtH,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,MAAM,+BAA+B,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,gCAAgC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,cAAyC;IAC3E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACjH,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,MAAkC;IACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5F,MAAM,qBAAqB,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,yBAAyB,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,qBAAqB,CAAC,QAAQ,CAAC,yBAAyB,CAAC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAM/C;IACC,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,gCAAgC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,gCAAgC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,IAAI,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACxF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,UAAkB,EAClB,KAA2E;IAE3E,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAA+B;QACvC,GAAG,QAAQ;QACX,GAAG,KAAK;QACR,OAAO,EAAE,CAAC;QACV,UAAU;QACV,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC1D,CAAC;IACF,MAAM,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAkE,EAClE,IAAyD;IAEzD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC;IACzC,MAAM,kBAAkB,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;IAC9G,IAAI,CAAC;QACH,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,cAAe,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,IAAI,KAAK,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,kBAAkB;YACpC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC;YAC5C,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,kBAAkB;QACnC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC;QAC5C,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,IAAI,CAAC;QACH,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,cAAe,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAY;IAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM;aACpB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;aAC/C,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,QAAQ,IAAI,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/services/plugin-capability-validator.d.ts

@@ -0,0 +1,108 @@
+/**
+ * PluginCapabilityValidator — enforces the capability model at both
+ * install-time and runtime.
+ *
+ * Every plugin declares the capabilities it requires in its manifest
+ * (`manifest.capabilities`). This service checks those declarations
+ * against a mapping of operations → required capabilities so that:
+ *
+ * 1. **Install-time validation** — `validateManifestCapabilities()`
+ *    ensures that declared features (tools, jobs, webhooks, UI slots)
+ *    have matching capability entries, giving operators clear feedback
+ *    before a plugin is activated.
+ *
+ * 2. **Runtime gating** — `checkOperation()` / `assertOperation()` are
+ *    called on every worker→host bridge call to enforce least-privilege
+ *    access. If a plugin attempts an operation it did not declare, the
+ *    call is rejected with a 403 error.
+ *
+ * @see PLUGIN_SPEC.md §15 — Capability Model
+ * @see host-client-factory.ts — SDK-side capability gating
+ */
+import type { PluginCapability, EvermorePluginManifestV1, PluginUiSlotType } from "@evermore.work/shared";
+/**
+ * Result of a capability check. When `allowed` is false, `missing` contains
+ * the capabilities that the plugin does not declare but the operation requires.
+ */
+export interface CapabilityCheckResult {
+    allowed: boolean;
+    missing: PluginCapability[];
+    operation?: string;
+    pluginId?: string;
+}
+export interface PluginCapabilityValidator {
+    /**
+     * Check whether a plugin has a specific capability.
+     */
+    hasCapability(manifest: EvermorePluginManifestV1, capability: PluginCapability): boolean;
+    /**
+     * Check whether a plugin has all of the specified capabilities.
+     */
+    hasAllCapabilities(manifest: EvermorePluginManifestV1, capabilities: PluginCapability[]): CapabilityCheckResult;
+    /**
+     * Check whether a plugin has at least one of the specified capabilities.
+     */
+    hasAnyCapability(manifest: EvermorePluginManifestV1, capabilities: PluginCapability[]): boolean;
+    /**
+     * Check whether a plugin is allowed to perform the named operation.
+     *
+     * Operations are mapped to required capabilities via OPERATION_CAPABILITIES.
+     * Unknown operations are rejected by default.
+     */
+    checkOperation(manifest: EvermorePluginManifestV1, operation: string): CapabilityCheckResult;
+    /**
+     * Assert that a plugin is allowed to perform an operation.
+     * Throws a 403 HttpError if the capability check fails.
+     */
+    assertOperation(manifest: EvermorePluginManifestV1, operation: string): void;
+    /**
+     * Assert that a plugin has a specific capability.
+     * Throws a 403 HttpError if the capability is missing.
+     */
+    assertCapability(manifest: EvermorePluginManifestV1, capability: PluginCapability): void;
+    /**
+     * Check whether a plugin can register the given UI slot type.
+     */
+    checkUiSlot(manifest: EvermorePluginManifestV1, slotType: PluginUiSlotType): CapabilityCheckResult;
+    /**
+     * Validate that a manifest's declared capabilities are consistent with its
+     * declared features (tools, jobs, webhooks, UI slots).
+     *
+     * Returns all missing capabilities rather than failing on the first one.
+     * This is useful for install-time validation to give comprehensive feedback.
+     */
+    validateManifestCapabilities(manifest: EvermorePluginManifestV1): CapabilityCheckResult;
+    /**
+     * Get the capabilities required for a named operation.
+     * Returns an empty array if the operation is unknown.
+     */
+    getRequiredCapabilities(operation: string): readonly PluginCapability[];
+    /**
+     * Get the capability required for a UI slot type.
+     */
+    getUiSlotCapability(slotType: PluginUiSlotType): PluginCapability;
+}
+/**
+ * Create a PluginCapabilityValidator.
+ *
+ * This service enforces capability gates for plugin operations.  The host
+ * uses it to verify that a plugin's declared capabilities permit the
+ * operation it is attempting, both at install time (manifest validation)
+ * and at runtime (bridge call gating).
+ *
+ * Usage:
+ * ```ts
+ * const validator = pluginCapabilityValidator();
+ *
+ * // Runtime: gate a bridge call
+ * validator.assertOperation(plugin.manifestJson, "issues.create");
+ *
+ * // Install time: validate manifest consistency
+ * const result = validator.validateManifestCapabilities(manifest);
+ * if (!result.allowed) {
+ *   throw badRequest("Missing capabilities", result.missing);
+ * }
+ * ```
+ */
+export declare function pluginCapabilityValidator(): PluginCapabilityValidator;
+//# sourceMappingURL=plugin-capability-validator.d.ts.map

package/dist/services/plugin-capability-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-capability-validator.d.ts","sourceRoot":"","sources":["../../src/services/plugin-capability-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAEjB,MAAM,uBAAuB,CAAC;AAwK/B;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,wBAAwB,EAClC,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAAC;IAEX;;OAEG;IACH,kBAAkB,CAChB,QAAQ,EAAE,wBAAwB,EAClC,YAAY,EAAE,gBAAgB,EAAE,GAC/B,qBAAqB,CAAC;IAEzB;;OAEG;IACH,gBAAgB,CACd,QAAQ,EAAE,wBAAwB,EAClC,YAAY,EAAE,gBAAgB,EAAE,GAC/B,OAAO,CAAC;IAEX;;;;;OAKG;IACH,cAAc,CACZ,QAAQ,EAAE,wBAAwB,EAClC,SAAS,EAAE,MAAM,GAChB,qBAAqB,CAAC;IAEzB;;;OAGG;IACH,eAAe,CACb,QAAQ,EAAE,wBAAwB,EAClC,SAAS,EAAE,MAAM,GAChB,IAAI,CAAC;IAER;;;OAGG;IACH,gBAAgB,CACd,QAAQ,EAAE,wBAAwB,EAClC,UAAU,EAAE,gBAAgB,GAC3B,IAAI,CAAC;IAER;;OAEG;IACH,WAAW,CACT,QAAQ,EAAE,wBAAwB,EAClC,QAAQ,EAAE,gBAAgB,GACzB,qBAAqB,CAAC;IAEzB;;;;;;OAMG;IACH,4BAA4B,CAC1B,QAAQ,EAAE,wBAAwB,GACjC,qBAAqB,CAAC;IAEzB;;;OAGG;IACH,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAAC;IAExE;;OAEG;IACH,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;CACnE;AAMD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,yBAAyB,IAAI,yBAAyB,CA8KrE"}