@ezlkg/shn 1.0.0

package/dist/commands/logs.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `shannon logs` command — tail a workspace's workflow log.
+ */
+export declare function logs(workspaceId: string): void;
+//# sourceMappingURL=logs.d.ts.map

package/dist/commands/logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,wBAAgB,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAkD9C"}

package/dist/commands/logs.js

@@ -0,0 +1,53 @@
+/**
+ * `shannon logs` command — tail a workspace's workflow log.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+import { getWorkspacesDir } from '../home.js';
+export function logs(workspaceId) {
+    const workspacesDir = getWorkspacesDir();
+    let logFile = '';
+    // 1. Direct match
+    const directPath = path.join(workspacesDir, workspaceId, 'workflow.log');
+    if (fs.existsSync(directPath)) {
+        logFile = directPath;
+    }
+    // 2. Resume workflow ID (e.g. workspace_resume_123)
+    if (!logFile) {
+        const base = workspaceId.replace(/_resume_\d+$/, '');
+        if (base !== workspaceId) {
+            const resumePath = path.join(workspacesDir, base, 'workflow.log');
+            if (fs.existsSync(resumePath)) {
+                logFile = resumePath;
+            }
+        }
+    }
+    // 3. Named workspace ID (e.g. workspace_shannon-123)
+    if (!logFile) {
+        const base = workspaceId.replace(/_shannon-\d+$/, '');
+        if (base !== workspaceId) {
+            const namedPath = path.join(workspacesDir, base, 'workflow.log');
+            if (fs.existsSync(namedPath)) {
+                logFile = namedPath;
+            }
+        }
+    }
+    if (!logFile) {
+        console.error(`ERROR: Workflow log not found for: ${workspaceId}`);
+        console.error('');
+        console.error('Possible causes:');
+        console.error('  - Workflow hasn\'t started yet');
+        console.error('  - Workspace ID is incorrect');
+        console.error('');
+        console.error('Check the Temporal Web UI at http://localhost:8233 for workflow details');
+        process.exit(1);
+    }
+    console.log(`Tailing workflow log: ${logFile}`);
+    const tail = spawn('tail', ['-f', logFile], { stdio: 'inherit' });
+    process.on('SIGINT', () => {
+        tail.kill();
+        process.exit(0);
+    });
+}
+//# sourceMappingURL=logs.js.map

package/dist/commands/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,UAAU,IAAI,CAAC,WAAmB;IACtC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,kBAAkB;IAClB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACzE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,UAAU,CAAC;IACvB,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;YAClE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,GAAG,UAAU,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;YACjE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,WAAW,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClD,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAElE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/start.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `shannon start` command — launch a pentest scan.
+ */
+export interface StartArgs {
+    url: string;
+    repo: string;
+    config?: string;
+    workspace?: string;
+    pipelineTesting: boolean;
+    router: boolean;
+    version: string;
+}
+export declare function start(args: StartArgs): void;
+//# sourceMappingURL=start.d.ts.map

package/dist/commands/start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/commands/start.ts"],"names":[],"mappings":"AAAA;;GAEG;AAWH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAyH3C"}

package/dist/commands/start.js

@@ -0,0 +1,146 @@
+/**
+ * `shannon start` command — launch a pentest scan.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { execSync } from 'node:child_process';
+import { initHome, getWorkspacesDir, getCredentialsPath } from '../home.js';
+import { loadEnv, buildEnvFlags, validateCredentials } from '../env.js';
+import { resolveRepo, resolveConfig, ensureDeliverables } from '../paths.js';
+import { ensureInfra, pullImage, spawnWorker, randomSuffix } from '../docker.js';
+import { displaySplash } from '../splash.js';
+export function start(args) {
+    // 1. Initialize ~/.shannon and load env
+    initHome();
+    loadEnv();
+    // 2. Validate credentials
+    const creds = validateCredentials(args.router);
+    if (!creds.valid) {
+        console.error(`ERROR: ${creds.error}`);
+        process.exit(1);
+    }
+    // 3. Resolve paths
+    const repo = resolveRepo(args.repo);
+    const config = args.config ? resolveConfig(args.config) : undefined;
+    ensureDeliverables(repo.hostPath);
+    // 4. Ensure workspaces dir is writable by container user (UID 1001)
+    const workspacesDir = getWorkspacesDir();
+    fs.mkdirSync(workspacesDir, { recursive: true });
+    fs.chmodSync(workspacesDir, 0o777);
+    // 5. Handle router env
+    if (args.router) {
+        process.env.ANTHROPIC_BASE_URL = 'http://shannon-router:3456';
+        process.env.ANTHROPIC_AUTH_TOKEN = 'shannon-router-key';
+    }
+    // 6. Pull image and start infra
+    pullImage();
+    ensureInfra(args.router);
+    // 7. Generate unique task queue and container name
+    const suffix = randomSuffix();
+    const taskQueue = `shannon-${suffix}`;
+    const containerName = `shannon-worker-${suffix}`;
+    // 8. Generate workspace name if not provided
+    let workspace = args.workspace;
+    if (!workspace) {
+        const hostname = new URL(args.url).hostname.replace(/[^a-zA-Z0-9-]/g, '-');
+        workspace = `${hostname}_shannon-${Date.now()}`;
+    }
+    // 9. Check for GCP credentials
+    const credentialsPath = getCredentialsPath();
+    const hasCredentials = fs.existsSync(credentialsPath);
+    // 10. Display splash screen
+    displaySplash(args.version);
+    // 11. Spawn worker container
+    const proc = spawnWorker({
+        url: args.url,
+        repo,
+        workspacesDir,
+        taskQueue,
+        containerName,
+        envFlags: buildEnvFlags(),
+        ...(config && { config }),
+        ...(hasCredentials && { credentials: credentialsPath }),
+        ...(workspace && { workspace }),
+        ...(args.pipelineTesting && { pipelineTesting: true }),
+    });
+    // 12. Wait for workflow.log to appear, then display info
+    const workflowLog = path.join(workspacesDir, workspace, 'workflow.log');
+    proc.on('error', (err) => {
+        console.error(`Failed to start worker: ${err.message}`);
+        process.exit(1);
+    });
+    // Poll for workflow.log header
+    process.stdout.write('Waiting for workflow to start...');
+    let workflowId = '';
+    let attempts = 0;
+    const pollInterval = setInterval(() => {
+        attempts++;
+        if (attempts > 60) {
+            clearInterval(pollInterval);
+            process.stdout.write('\n');
+            console.error('Timeout waiting for workflow to start');
+            process.exit(1);
+        }
+        try {
+            const content = fs.readFileSync(workflowLog, 'utf-8');
+            if (content.includes('====')) {
+                clearInterval(pollInterval);
+                // Extract workflow ID
+                const match = /^Workflow ID: (.+)$/m.exec(content);
+                if (match?.[1]) {
+                    workflowId = match[1];
+                }
+                // Clear waiting line and show info
+                process.stdout.write('\r\x1b[K');
+                printInfo(args, workspace, workflowId, repo.hostPath);
+                return;
+            }
+        }
+        catch {
+            // File doesn't exist yet
+        }
+        process.stdout.write('.');
+    }, 2000);
+    // Handle SIGINT — stop the worker container
+    const cleanup = () => {
+        clearInterval(pollInterval);
+        console.log(`\nStopping worker ${containerName}...`);
+        try {
+            execSync(`docker stop ${containerName}`, { stdio: 'pipe' });
+        }
+        catch {
+            // Container may have already exited
+        }
+        process.exit(0);
+    };
+    process.on('SIGINT', cleanup);
+    process.on('SIGTERM', cleanup);
+}
+function printInfo(args, workspace, workflowId, repoPath) {
+    console.log(`  Target:     ${args.url}`);
+    console.log(`  Repository: ${repoPath}`);
+    console.log(`  Workspace:  ${workspace}`);
+    if (args.config) {
+        console.log(`  Config:     ${path.resolve(args.config)}`);
+    }
+    if (args.pipelineTesting) {
+        console.log('  Mode:       Pipeline Testing');
+    }
+    if (args.router) {
+        console.log('  Router:     Enabled');
+    }
+    console.log('');
+    console.log('  Monitor:');
+    if (workflowId) {
+        console.log(`    Web UI:  http://localhost:8233/namespaces/default/workflows/${workflowId}`);
+    }
+    else {
+        console.log('    Web UI:  http://localhost:8233');
+    }
+    console.log(`    Logs:    npx @ezlkg/shn logs ${workspace}`);
+    console.log('');
+    console.log('  Output:');
+    console.log(`    Reports: ~/.shannon/workspaces/${workspace}/`);
+    console.log('');
+}
+//# sourceMappingURL=start.js.map

package/dist/commands/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/commands/start.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAY7C,MAAM,UAAU,KAAK,CAAC,IAAe;IACnC,wCAAwC;IACxC,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IAEV,0BAA0B;IAC1B,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,mBAAmB;IACnB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAElC,oEAAoE;IACpE,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAEnC,uBAAuB;IACvB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,4BAA4B,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;IAC1D,CAAC;IAED,gCAAgC;IAChC,SAAS,EAAE,CAAC;IACZ,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEzB,mDAAmD;IACnD,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,WAAW,MAAM,EAAE,CAAC;IACtC,MAAM,aAAa,GAAG,kBAAkB,MAAM,EAAE,CAAC;IAEjD,6CAA6C;IAC7C,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAC/B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAC3E,SAAS,GAAG,GAAG,QAAQ,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAClD,CAAC;IAED,+BAA+B;IAC/B,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEtD,4BAA4B;IAC5B,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE5B,6BAA6B;IAC7B,MAAM,IAAI,GAAG,WAAW,CAAC;QACvB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI;QACJ,aAAa;QACb,SAAS;QACT,aAAa;QACb,QAAQ,EAAE,aAAa,EAAE;QACzB,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,cAAc,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;QACvD,GAAG,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;KACvD,CAAC,CAAC;IAEH,yDAAyD;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAExE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,+BAA+B;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACzD,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;QACpC,QAAQ,EAAE,CAAC;QACX,IAAI,QAAQ,GAAG,EAAE,EAAE,CAAC;YAClB,aAAa,CAAC,YAAY,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,aAAa,CAAC,YAAY,CAAC,CAAC;gBAE5B,sBAAsB;gBACtB,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACf,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACxB,CAAC;gBAED,mCAAmC;gBACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACjC,SAAS,CAAC,IAAI,EAAE,SAAU,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC,EAAE,IAAI,CAAC,CAAC;IAET,4CAA4C;IAC5C,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,aAAa,CAAC,YAAY,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,qBAAqB,aAAa,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,QAAQ,CAAC,eAAe,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAChB,IAAe,EACf,SAAiB,EACjB,UAAkB,EAClB,QAAgB;IAEhB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1B,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,mEAAmE,UAAU,EAAE,CAAC,CAAC;IAC/F,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,sCAAsC,SAAS,GAAG,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/status.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `shannon status` command — show running workers and Temporal health.
+ */
+export declare function status(): void;
+//# sourceMappingURL=status.d.ts.map

package/dist/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAgB,MAAM,IAAI,IAAI,CAiB7B"}

package/dist/commands/status.js

@@ -0,0 +1,23 @@
+/**
+ * `shannon status` command — show running workers and Temporal health.
+ */
+import { isTemporalReady, listRunningWorkers } from '../docker.js';
+export function status() {
+    // 1. Temporal health
+    const temporalUp = isTemporalReady();
+    console.log(`Temporal: ${temporalUp ? 'running' : 'not running'}`);
+    if (temporalUp) {
+        console.log('  Web UI: http://localhost:8233');
+    }
+    console.log('');
+    // 2. Running workers
+    const workers = listRunningWorkers();
+    if (workers) {
+        console.log('Workers:');
+        console.log(workers);
+    }
+    else {
+        console.log('Workers: none running');
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEnE,MAAM,UAAU,MAAM;IACpB,qBAAqB;IACrB,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IACnE,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,qBAAqB;IACrB,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/commands/stop.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `shannon stop` command — stop workers and infrastructure.
+ */
+export declare function stop(clean: boolean): void;
+//# sourceMappingURL=stop.d.ts.map

package/dist/commands/stop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop.d.ts","sourceRoot":"","sources":["../../src/commands/stop.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAGzC"}

package/dist/commands/stop.js

@@ -0,0 +1,9 @@
+/**
+ * `shannon stop` command — stop workers and infrastructure.
+ */
+import { stopWorkers, stopInfra } from '../docker.js';
+export function stop(clean) {
+    stopWorkers();
+    stopInfra(clean);
+}
+//# sourceMappingURL=stop.js.map

package/dist/commands/stop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop.js","sourceRoot":"","sources":["../../src/commands/stop.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,UAAU,IAAI,CAAC,KAAc;IACjC,WAAW,EAAE,CAAC;IACd,SAAS,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC"}

package/dist/commands/update.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `shannon update` command — pull the latest worker image.
+ */
+export declare function update(): void;
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAgB,MAAM,IAAI,IAAI,CAG7B"}

package/dist/commands/update.js

@@ -0,0 +1,9 @@
+/**
+ * `shannon update` command — pull the latest worker image.
+ */
+import { pullLatest } from '../docker.js';
+export function update() {
+    pullLatest();
+    console.log('Update complete.');
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,UAAU,MAAM;IACpB,UAAU,EAAE,CAAC;IACb,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAClC,CAAC"}

package/dist/commands/workspaces.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `shannon workspaces` command — list all workspaces.
+ */
+export declare function workspaces(): void;
+//# sourceMappingURL=workspaces.d.ts.map

package/dist/commands/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/commands/workspaces.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,wBAAgB,UAAU,IAAI,IAAI,CAcjC"}

package/dist/commands/workspaces.js

@@ -0,0 +1,19 @@
+/**
+ * `shannon workspaces` command — list all workspaces.
+ */
+import { execSync } from 'node:child_process';
+import { getWorkspacesDir } from '../home.js';
+import { getWorkerImage } from '../docker.js';
+export function workspaces() {
+    const workspacesDir = getWorkspacesDir();
+    const image = getWorkerImage();
+    try {
+        execSync(`docker run --rm -v "${workspacesDir}:/app/workspaces" -e "WORKSPACES_DIR=/app/workspaces" "${image}" node dist/temporal/workspaces.js`, { stdio: 'inherit' });
+    }
+    catch {
+        console.error('ERROR: Failed to list workspaces. Is the Docker image available?');
+        console.error(`  Run: docker pull ${image}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=workspaces.js.map

package/dist/commands/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../src/commands/workspaces.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,UAAU,UAAU;IACxB,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAE/B,IAAI,CAAC;QACH,QAAQ,CACN,uBAAuB,aAAa,0DAA0D,KAAK,oCAAoC,EACvI,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAClF,OAAO,CAAC,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/docker.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Docker orchestration — compose lifecycle, network, image pull, worker spawning.
+ */
+import { type ChildProcess } from 'node:child_process';
+export declare function getWorkerImage(): string;
+/** Generate an 8-char random hex suffix for container/queue names. */
+export declare function randomSuffix(): string;
+/**
+ * Check if Temporal is running and healthy.
+ */
+export declare function isTemporalReady(): boolean;
+/**
+ * Ensure Temporal (and optionally router) are running via compose.
+ */
+export declare function ensureInfra(useRouter: boolean): void;
+/**
+ * Pull the worker image if not already present.
+ */
+export declare function pullImage(): void;
+export interface WorkerOptions {
+    url: string;
+    repo: {
+        hostPath: string;
+        containerPath: string;
+    };
+    workspacesDir: string;
+    taskQueue: string;
+    containerName: string;
+    envFlags: string[];
+    config?: {
+        hostPath: string;
+        containerPath: string;
+    };
+    credentials?: string;
+    workspace?: string;
+    pipelineTesting?: boolean;
+}
+/**
+ * Spawn the worker container in detached mode and return the process.
+ */
+export declare function spawnWorker(opts: WorkerOptions): ChildProcess;
+/**
+ * Stop all running shannon-worker-* containers.
+ */
+export declare function stopWorkers(): void;
+/**
+ * Tear down the compose stack.
+ */
+export declare function stopInfra(clean: boolean): void;
+/**
+ * Pull the latest worker image (for `update` command).
+ */
+export declare function pullLatest(): void;
+/**
+ * List running worker containers.
+ */
+export declare function listRunningWorkers(): string;
+//# sourceMappingURL=docker.d.ts.map

package/dist/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAWxE,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,sEAAsE;AACtE,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAqBD;;GAEG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAIzC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAqBpD;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,IAAI,CAQhC;AAgBD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,aAAa,GAAG,YAAY,CAwC7D;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAMlC;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAK9C;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,IAAI,CAGjC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C"}

package/dist/docker.js

@@ -0,0 +1,159 @@
+/**
+ * Docker orchestration — compose lifecycle, network, image pull, worker spawning.
+ */
+import { execSync, spawn } from 'node:child_process';
+import path from 'node:path';
+import os from 'node:os';
+import crypto from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const WORKER_IMAGE = 'ezlkgp/shn:latest';
+const COMPOSE_FILE = path.resolve(__dirname, '..', 'infra', 'compose.yml');
+export function getWorkerImage() {
+    return WORKER_IMAGE;
+}
+/** Generate an 8-char random hex suffix for container/queue names. */
+export function randomSuffix() {
+    return crypto.randomBytes(4).toString('hex');
+}
+/** Run a command silently, return true if it succeeds. */
+function execQuiet(cmd) {
+    try {
+        execSync(cmd, { stdio: 'pipe' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Run a command and return stdout, or empty string on failure. */
+function execOutput(cmd) {
+    try {
+        return execSync(cmd, { stdio: 'pipe', encoding: 'utf-8' }).trim();
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * Check if Temporal is running and healthy.
+ */
+export function isTemporalReady() {
+    return execQuiet('docker exec shannon-temporal temporal operator cluster health --address localhost:7233 2>/dev/null | grep -q SERVING');
+}
+/**
+ * Ensure Temporal (and optionally router) are running via compose.
+ */
+export function ensureInfra(useRouter) {
+    if (isTemporalReady()) {
+        return;
+    }
+    console.log('Starting Shannon infrastructure...');
+    const profiles = useRouter ? '--profile router' : '';
+    execSync(`docker compose -f "${COMPOSE_FILE}" ${profiles} up -d`, {
+        stdio: 'inherit',
+    });
+    console.log('Waiting for Temporal to be ready...');
+    for (let i = 0; i < 30; i++) {
+        if (isTemporalReady()) {
+            console.log('Temporal is ready!');
+            return;
+        }
+        execSync('sleep 2');
+    }
+    console.error('Timeout waiting for Temporal');
+    process.exit(1);
+}
+/**
+ * Pull the worker image if not already present.
+ */
+export function pullImage() {
+    const exists = execQuiet(`docker image inspect "${WORKER_IMAGE}" 2>/dev/null`);
+    if (exists) {
+        return;
+    }
+    console.log(`Pulling ${WORKER_IMAGE}...`);
+    execSync(`docker pull "${WORKER_IMAGE}"`, { stdio: 'inherit' });
+}
+/**
+ * Detect if --add-host is needed (Linux without Podman).
+ * macOS has host.docker.internal built in.
+ */
+function addHostFlag() {
+    if (os.platform() === 'linux') {
+        const hasPodman = execQuiet('command -v podman');
+        if (!hasPodman) {
+            return ['--add-host', 'host.docker.internal:host-gateway'];
+        }
+    }
+    return [];
+}
+/**
+ * Spawn the worker container in detached mode and return the process.
+ */
+export function spawnWorker(opts) {
+    const args = ['run', '-d', '--rm', '--name', opts.containerName, '--network', 'shannon-net'];
+    // Add host flag for Linux
+    args.push(...addHostFlag());
+    // Volume mounts
+    args.push('-v', `${opts.workspacesDir}:/app/workspaces`);
+    args.push('-v', `${opts.repo.hostPath}:${opts.repo.containerPath}`);
+    if (opts.config) {
+        args.push('-v', `${opts.config.hostPath}:${opts.config.containerPath}:ro`);
+    }
+    if (opts.credentials) {
+        args.push('-v', `${opts.credentials}:/app/credentials/google-sa-vertex-key.json:ro`);
+    }
+    // Environment
+    args.push(...opts.envFlags);
+    // Container settings
+    args.push('--shm-size', '2gb', '--ipc', 'host', '--security-opt', 'seccomp=unconfined');
+    // Image
+    args.push(WORKER_IMAGE);
+    // Worker command
+    args.push('node', 'dist/temporal/worker.js', opts.url, opts.repo.containerPath);
+    args.push('--task-queue', opts.taskQueue);
+    if (opts.config) {
+        args.push('--config', opts.config.containerPath);
+    }
+    if (opts.workspace) {
+        args.push('--workspace', opts.workspace);
+    }
+    if (opts.pipelineTesting) {
+        args.push('--pipeline-testing');
+    }
+    return spawn('docker', args, { stdio: 'pipe' });
+}
+/**
+ * Stop all running shannon-worker-* containers.
+ */
+export function stopWorkers() {
+    const workers = execOutput('docker ps -q --filter "name=shannon-worker-"');
+    if (workers) {
+        console.log('Stopping worker containers...');
+        execSync(`echo "${workers}" | xargs docker stop`, { stdio: 'inherit' });
+    }
+}
+/**
+ * Tear down the compose stack.
+ */
+export function stopInfra(clean) {
+    const cleanFlag = clean ? '-v' : '';
+    execSync(`docker compose -f "${COMPOSE_FILE}" --profile router down ${cleanFlag}`, {
+        stdio: 'inherit',
+    });
+}
+/**
+ * Pull the latest worker image (for `update` command).
+ */
+export function pullLatest() {
+    console.log(`Pulling ${WORKER_IMAGE}...`);
+    execSync(`docker pull "${WORKER_IMAGE}"`, { stdio: 'inherit' });
+}
+/**
+ * List running worker containers.
+ */
+export function listRunningWorkers() {
+    return execOutput('docker ps --filter "name=shannon-worker-" --format "table {{.Names}}\t{{.Status}}\t{{.RunningFor}}"');
+}
+//# sourceMappingURL=docker.js.map

package/dist/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACxE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAE3E,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,0DAA0D;AAC1D,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,SAAS,CACd,sHAAsH,CACvH,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,SAAkB;IAC5C,IAAI,eAAe,EAAE,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,QAAQ,CAAC,sBAAsB,YAAY,KAAK,QAAQ,QAAQ,EAAE;QAChE,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,eAAe,EAAE,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,MAAM,GAAG,SAAS,CAAC,yBAAyB,YAAY,eAAe,CAAC,CAAC;IAC/E,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,WAAW,YAAY,KAAK,CAAC,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,YAAY,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW;IAClB,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,YAAY,EAAE,mCAAmC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAeD;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAmB;IAC7C,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAE7F,0BAA0B;IAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,CAAC;IAE5B,gBAAgB;IAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,aAAa,kBAAkB,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAEpE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,gDAAgD,CAAC,CAAC;IACvF,CAAC;IAED,cAAc;IACd,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE5B,qBAAqB;IACrB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;IAExF,QAAQ;IACR,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAExB,iBAAiB;IACjB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,yBAAyB,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAAG,UAAU,CAAC,8CAA8C,CAAC,CAAC;IAC3E,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,QAAQ,CAAC,SAAS,OAAO,uBAAuB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,QAAQ,CAAC,sBAAsB,YAAY,2BAA2B,SAAS,EAAE,EAAE;QACjF,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,GAAG,CAAC,WAAW,YAAY,KAAK,CAAC,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,YAAY,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,UAAU,CAAC,qGAAqG,CAAC,CAAC;AAC3H,CAAC"}

package/dist/env.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Environment variable loading and credential validation.
+ *
+ * Loads ~/.shannon/.env and validates that at least one authentication
+ * method is configured (API key, OAuth, Bedrock, Vertex, or router).
+ */
+/**
+ * Load ~/.shannon/.env into process.env.
+ * Existing env vars take precedence (standard dotenv behavior).
+ */
+export declare function loadEnv(): void;
+/**
+ * Build `-e KEY=VALUE` flags for docker run, only for set variables.
+ */
+export declare function buildEnvFlags(): string[];
+interface CredentialValidation {
+    valid: boolean;
+    error?: string;
+    mode: 'api-key' | 'oauth' | 'bedrock' | 'vertex' | 'router';
+}
+/**
+ * Validate that at least one authentication method is configured.
+ */
+export declare function validateCredentials(useRouter: boolean): CredentialValidation;
+export {};
+//# sourceMappingURL=env.d.ts.map

package/dist/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAyBH;;;GAGG;AACH,wBAAgB,OAAO,IAAI,IAAI,CAE9B;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAWxC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;CAC7D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,OAAO,GAAG,oBAAoB,CA2D5E"}