@harrylabsj/kiwi 0.6.0

package/dist/supervisor/init.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export interface InitOptions {
+    dir: string;
+    shoppingCliSrc?: string;
+    /** Demo/test mode: deterministic fake models, no model API key needed. */
+    fake?: boolean;
+}
+export interface InitResult {
+    dir: string;
+    config_path: string;
+    instance_id: string;
+    base_url: string;
+    mode: "managed-local";
+    fake: boolean;
+    created: string[];
+}
+export declare function runInit(options: InitOptions): Promise<InitResult>;

package/dist/supervisor/init.js

@@ -0,0 +1,222 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `kiwi init` — create a self-contained managed-local instance.
+ *
+ * Creates exactly these known files/directories and nothing else:
+ *   kiwi.stack.json (0600)   stack config (no secrets)
+ *   profiles/merchant.yaml   merchant agent profile (env-var names only)
+ *   profiles/buyer.yaml      buyer agent profile (env-var names only)
+ *   data/                    gateway database location (created on demand)
+ *   logs/                    per-process logs
+ *   run/ (0700)              private manifest/exit-state dir
+ *
+ * Fail closed: an instance that already contains Kiwi state (config file or
+ * run dir) is rejected, and every file is created with O_EXCL so user files
+ * are never overwritten.
+ */
+import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { assertSafeInstanceDir, detectShoppingCliSrc, instancePaths, newInstanceId, pickFreePort, STACK_VERSION, StackConfigError, } from "./stack-config.js";
+import { packageRoot } from "../contracts/schemas.js";
+import { PROTOCOL_VERSION } from "../negotiation/types.js";
+/** Write a file only if it does not exist; never overwrite user files. */
+function writeExclusive(file, content, mode) {
+    try {
+        writeFileSync(file, content, { encoding: "utf-8", flag: "wx", mode });
+    }
+    catch (err) {
+        if (err.code === "EEXIST") {
+            throw new StackConfigError(`refusing to overwrite existing file: ${file}`);
+        }
+        throw err;
+    }
+}
+function merchantProfile(baseUrl, fake) {
+    const model = fake
+        ? "  provider: fake\n  model: fake-merchant-model\n"
+        : "  provider: openai\n  model: gpt-4o-mini\n  api_key_env: MODEL_API_KEY\n";
+    return `# Merchant agent profile — generated by kiwi init. Secrets stay in env vars.
+runtime_version: 0.5.0
+protocol_version: ${PROTOCOL_VERSION}
+agent_id: merchant-agent:merchant-001
+role: merchant
+owner_id: merchant-001
+commerce:
+  base_url: ${baseUrl}
+  token_env: SHOPPING_AGENT_TOKEN
+  backend: local_marketplace
+model:
+${model}runtime:
+  mode: foreground
+  poll_interval_seconds: 5
+  turn_timeout_seconds: 90
+  max_model_steps: 4
+  max_retries: 2
+merchant_policy:
+  min_unit_price_private: 80.00
+  max_auto_discount_percent: 10
+  inventory_source: marketplace
+  quote_ttl_seconds: 300
+  auto_negotiate: true
+  human_review_on:
+    - below_floor
+    - exceptional_warranty
+    - suspicious_content
+`;
+}
+function buyerProfile(baseUrl, fake) {
+    const model = fake
+        ? "  provider: fake\n  model: fake-buyer-model\n"
+        : "  provider: openai\n  model: gpt-4o-mini\n  api_key_env: MODEL_API_KEY\n";
+    return `# Buyer agent profile — generated by kiwi init. Secrets stay in env vars.
+runtime_version: 0.5.0
+protocol_version: ${PROTOCOL_VERSION}
+agent_id: buyer-agent:buyer-001
+role: buyer
+owner_id: buyer-001
+commerce:
+  base_url: ${baseUrl}
+  token_env: SHOPPING_BUYER_TOKEN
+  backend: local_marketplace
+model:
+${model}runtime:
+  mode: foreground
+  poll_interval_seconds: 5
+  turn_timeout_seconds: 90
+  max_model_steps: 4
+  max_retries: 2
+buyer_policy:
+  target_skus:
+    - sku-001
+  quantity: 2
+  max_total_price_private: 200.00
+  acceptable_eta_latest: "2099-12-31T23:59:59+08:00"
+  required_after_sales_terms:
+    - policy:return-7d
+  auto_negotiate: true
+  human_review_on:
+    - budget_exceeded
+    - ambiguous_after_sales
+`;
+}
+export async function runInit(options) {
+    const dir = assertSafeInstanceDir(options.dir);
+    const paths = instancePaths(dir);
+    // Fail closed: any existing Kiwi state means this is (or was) an instance.
+    if (existsSync(paths.config) || existsSync(paths.run)) {
+        throw new StackConfigError(`${dir} already contains Kiwi state (${path.basename(paths.config)} or run/); refusing to re-init`);
+    }
+    const fake = options.fake === true;
+    // Resolve the shopping-cli source for the managed gateway BEFORE creating
+    // anything.
+    const src = options.shoppingCliSrc !== undefined
+        ? path.resolve(options.shoppingCliSrc)
+        : detectShoppingCliSrc(packageRoot());
+    if (src === undefined || !existsSync(path.join(src, "shopping_cli"))) {
+        throw new StackConfigError("shopping-cli source not found: pass --shopping-cli-src <path> (expected a repo containing shopping_cli/)");
+    }
+    const venvPython = path.join(src, ".venv", "bin", "python");
+    const useVenv = existsSync(venvPython);
+    const port = await pickFreePort();
+    const baseUrl = `http://127.0.0.1:${port}`;
+    const instanceId = newInstanceId();
+    const createdAt = new Date().toISOString();
+    const dbPath = path.join(paths.data, "shopping.sqlite");
+    const config = {
+        stack_version: STACK_VERSION,
+        instance_id: instanceId,
+        mode: "managed-local",
+        created_at: createdAt,
+        gateway: {
+            base_url: baseUrl,
+            command: [
+                useVenv ? venvPython : "python3",
+                "-m",
+                "shopping_cli.api.server",
+                "--db",
+                dbPath,
+                "--host",
+                "127.0.0.1",
+                "--port",
+                String(port),
+            ],
+            env: useVenv ? {} : { PYTHONPATH: src },
+        },
+        agents: {
+            merchant: { enabled: true, profile: "profiles/merchant.yaml" },
+            buyer: { enabled: true, profile: "profiles/buyer.yaml" },
+        },
+    };
+    const files = [
+        [paths.config, `${JSON.stringify(config, null, 2)}\n`],
+        [path.join(paths.profiles, "merchant.yaml"), merchantProfile(baseUrl, fake)],
+        [path.join(paths.profiles, "buyer.yaml"), buyerProfile(baseUrl, fake)],
+    ];
+    const dirs = [paths.profiles, paths.data, paths.logs, paths.run];
+    // Preflight EVERY known target before creating anything: no partial Kiwi
+    // state may be left behind when a user file is in the way.
+    for (const [file] of files) {
+        if (existsSync(file)) {
+            throw new StackConfigError(`refusing to overwrite existing file: ${file}`);
+        }
+    }
+    // Transactional create: on any failure remove only what THIS invocation
+    // created (files it wrote; directories it made and only while empty).
+    const createdFiles = [];
+    const createdDirs = [];
+    try {
+        for (const d of dirs) {
+            if (!existsSync(d)) {
+                createdDirs.push(d);
+            }
+            // run/ holds manifests (pids, tokens-in-path); data/ holds the
+            // shopping SQLite database — both stay owner-only. profiles/ and
+            // logs/ carry 0600 files, so the dirs stay conventionally listable.
+            mkdirSync(d, { recursive: true, mode: d === paths.run || d === paths.data ? 0o700 : 0o755 });
+        }
+        for (const [file, content] of files) {
+            writeExclusive(file, content, 0o600);
+            createdFiles.push(file);
+        }
+    }
+    catch (err) {
+        for (const file of createdFiles.reverse()) {
+            rmSync(file, { force: true });
+        }
+        for (const d of createdDirs.reverse()) {
+            // rmdir (non-recursive) only succeeds on empty dirs we just made;
+            // anything containing user content is left untouched.
+            try {
+                rmSync(d, { recursive: false });
+            }
+            catch {
+                // not empty or already gone: leave it
+            }
+        }
+        throw err;
+    }
+    return {
+        dir,
+        config_path: paths.config,
+        instance_id: instanceId,
+        base_url: baseUrl,
+        mode: "managed-local",
+        fake,
+        created: createdFiles,
+    };
+}
+//# sourceMappingURL=init.js.map

package/dist/supervisor/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/supervisor/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,aAAa,EACb,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAmB3D,0EAA0E;AAC1E,SAAS,cAAc,CAAC,IAAY,EAAE,OAAe,EAAE,IAAY;IACjE,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,gBAAgB,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAa;IACrD,MAAM,KAAK,GAAG,IAAI;QAChB,CAAC,CAAC,kDAAkD;QACpD,CAAC,CAAC,0EAA0E,CAAC;IAC/E,OAAO;;oBAEW,gBAAgB;;;;;cAKtB,OAAO;;;;EAInB,KAAK;;;;;;;;;;;;;;;;CAgBN,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,IAAa;IAClD,MAAM,KAAK,GAAG,IAAI;QAChB,CAAC,CAAC,+CAA+C;QACjD,CAAC,CAAC,0EAA0E,CAAC;IAC/E,OAAO;;oBAEW,gBAAgB;;;;;cAKtB,OAAO;;;;EAInB,KAAK;;;;;;;;;;;;;;;;;;CAkBN,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB;IAChD,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEjC,2EAA2E;IAC3E,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,gBAAgB,CACxB,GAAG,GAAG,iCAAiC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,gCAAgC,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC;IAEnC,0EAA0E;IAC1E,YAAY;IACZ,MAAM,GAAG,GACP,OAAO,CAAC,cAAc,KAAK,SAAS;QAClC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QACtC,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,gBAAgB,CACxB,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,oBAAoB,IAAI,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAExD,MAAM,MAAM,GAAgB;QAC1B,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE;YACP,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE;gBACP,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAChC,IAAI;gBACJ,yBAAyB;gBACzB,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,QAAQ;gBACR,MAAM,CAAC,IAAI,CAAC;aACb;YACD,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE;SACxC;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,wBAAwB,EAAE;YAC9D,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE;SACzD;KACF,CAAC;IAEF,MAAM,KAAK,GAAuB;QAChC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;KACvE,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjE,yEAAyE;IACzE,2DAA2D;IAC3D,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,gBAAgB,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;YACD,+DAA+D;YAC/D,iEAAiE;YACjE,oEAAoE;YACpE,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;YACpC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACrC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,kEAAkE;YAClE,sDAAsD;YACtD,IAAI,CAAC;gBACH,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,OAAO;QACL,GAAG;QACH,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,eAAe;QACrB,IAAI;QACJ,OAAO,EAAE,YAAY;KACtB,CAAC;AACJ,CAAC"}

package/dist/supervisor/logs.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type ManagedRole } from "./stack-config.js";
+export declare const DEFAULT_LOG_LINES = 100;
+export declare const MAX_LOG_LINES = 10000;
+/** Parse and bound the --lines option. Throws on anything invalid. */
+export declare function parseLogLines(value: string | undefined): number;
+/** Redact secret-looking tokens and private-policy numeric values in a line. */
+export declare function redactLine(line: string): string;
+export interface LogsResult {
+    instance_id: string;
+    lines: string[];
+    missing: ManagedRole[];
+}
+export declare function runLogs(dir: string, maxLines: number): LogsResult;

package/dist/supervisor/logs.js

@@ -0,0 +1,101 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `kiwi logs` — bounded, redacted tail of manifest-owned log files.
+ *
+ * Only log files referenced by this instance's manifests are read, and only
+ * after path containment is proven (they must live inside the instance
+ * logs/ dir). Every line is labeled with its process role. Redaction
+ * removes bearer/token/API-key-like secrets and private-policy numeric
+ * lines; env values and private thresholds are never printed.
+ */
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { manifestPathFor, readManifest } from "./manifest.js";
+import { loadInstance } from "./manage.js";
+import { ProfileError } from "../config/profile.js";
+import { MANAGED_ROLES } from "./stack-config.js";
+export const DEFAULT_LOG_LINES = 100;
+export const MAX_LOG_LINES = 10_000;
+/** Parse and bound the --lines option. Throws on anything invalid. */
+export function parseLogLines(value) {
+    if (value === undefined)
+        return DEFAULT_LOG_LINES;
+    if (!/^\d+$/.test(value)) {
+        throw new ProfileError(`--lines must be a positive integer (got "${value}")`);
+    }
+    const n = Number(value);
+    if (n < 1 || n > MAX_LOG_LINES) {
+        throw new ProfileError(`--lines must be between 1 and ${MAX_LOG_LINES} (got ${n})`);
+    }
+    return n;
+}
+const SECRET_PATTERNS = [
+    // key=value-shaped secrets first, case-insensitive and `]`-tolerant (for
+    // `env[VAR]=value` lines): this must run before the bare-token patterns so
+    // they cannot consume the variable name and leave the value exposed.
+    [/([A-Za-z0-9_[\].-]*(?:token|api[-_]?key|secret|password)[\]]?\s*[:=]\s*)\S+/gi, "$1[REDACTED]"],
+    [/Bearer\s+\S+/gi, "Bearer [REDACTED]"],
+    [/shopping_(merchant|buyer|agent|admin)_[A-Za-z0-9_-]+/gi, "shopping_$1_[REDACTED]"],
+    [/sk-[A-Za-z0-9_-]{6,}/g, "[REDACTED]"],
+];
+const PRIVATE_NUMERIC_LINE = /(min_unit_price_private|max_total_price_private|最低可成交价|底价|最高预算|内部预算)/;
+/** Redact secret-looking tokens and private-policy numeric values in a line. */
+export function redactLine(line) {
+    let out = line;
+    for (const [pattern, replacement] of SECRET_PATTERNS) {
+        out = out.replace(pattern, replacement);
+    }
+    if (PRIVATE_NUMERIC_LINE.test(out)) {
+        out = out.replace(/\d+(?:\.\d+)?/g, "[REDACTED]");
+    }
+    return out;
+}
+export function runLogs(dir, maxLines) {
+    const ctx = loadInstance(dir);
+    const logsRoot = path.resolve(ctx.paths.logs);
+    const collected = [];
+    const missing = [];
+    for (const role of MANAGED_ROLES) {
+        const manifest = readManifest(manifestPathFor(ctx.paths.run, role));
+        const logPath = manifest?.log_path ?? path.join(ctx.paths.logs, `${role}.log`);
+        // Path containment: only files inside this instance's logs/ dir.
+        const resolved = path.resolve(logPath);
+        if (resolved !== path.join(logsRoot, `${role}.log`)) {
+            missing.push(role);
+            continue;
+        }
+        let content;
+        try {
+            content = readFileSync(resolved, "utf-8");
+        }
+        catch {
+            missing.push(role);
+            continue;
+        }
+        for (const line of content.split("\n")) {
+            if (line.length > 0)
+                collected.push({ role, line });
+        }
+    }
+    const tail = collected.slice(-maxLines);
+    return {
+        instance_id: ctx.config.instance_id,
+        lines: tail.map(({ role, line }) => `[${role}] ${redactLine(line)}`),
+        missing,
+    };
+}
+//# sourceMappingURL=logs.js.map

package/dist/supervisor/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/supervisor/logs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAoB,MAAM,mBAAmB,CAAC;AAEpE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAEpC,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC,4CAA4C,KAAK,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,IAAI,YAAY,CAAC,iCAAiC,aAAa,SAAS,CAAC,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,eAAe,GAAuB;IAC1C,yEAAyE;IACzE,2EAA2E;IAC3E,qEAAqE;IACrE,CAAC,+EAA+E,EAAE,cAAc,CAAC;IACjG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;IACvC,CAAC,wDAAwD,EAAE,wBAAwB,CAAC;IACpF,CAAC,uBAAuB,EAAE,YAAY,CAAC;CACxC,CAAC;AAEF,MAAM,oBAAoB,GACxB,sEAAsE,CAAC;AAEzE,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,eAAe,EAAE,CAAC;QACrD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,QAAgB;IACnD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAA0C,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,YAAY,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;QAC/E,iEAAiE;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW;QACnC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/supervisor/manage.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type ExitRecord, type ProcessManifest } from "./manifest.js";
+import { instancePaths, type ManagedRole, type StackConfig } from "./stack-config.js";
+export declare class SupervisorError extends Error {
+    constructor(message: string);
+}
+export interface InstanceContext {
+    paths: ReturnType<typeof instancePaths>;
+    config: StackConfig;
+}
+export declare function loadInstance(dir: string): InstanceContext;
+/** Spawn one managed process through the child-runner and write its manifest. */
+export declare function spawnManaged(ctx: InstanceContext, role: ManagedRole, command: string[], env: Record<string, string>): Promise<ProcessManifest>;
+export interface RoleState {
+    role: ManagedRole;
+    enabled: boolean;
+    verified: boolean;
+    running: boolean;
+    exited?: ExitRecord | undefined;
+    detail: string;
+}
+export interface UpResult {
+    instance_id: string;
+    started: ManagedRole[];
+    already_running: ManagedRole[];
+    disabled: ManagedRole[];
+    base_url: string;
+}
+export interface UpOptions {
+    /** Test hooks: shorten bounded waits. */
+    healthTimeoutMs?: number;
+    agentGraceMs?: number;
+}
+export declare function runUp(dir: string, options?: UpOptions): Promise<UpResult>;
+export type StopOutcome = "stopped" | "killed" | "not_running" | "unverified";
+/** Stop one manifest-owned process after verification. Never touches anything unverifiable. */
+export declare function stopVerified(ctx: InstanceContext, manifest: ProcessManifest): Promise<StopOutcome>;
+export interface DownResult {
+    instance_id: string;
+    results: {
+        role: ManagedRole;
+        outcome: StopOutcome | "not_started";
+        detail: string;
+    }[];
+}
+export declare function runDown(dir: string): Promise<DownResult>;
+export interface StatusResult {
+    ok: boolean;
+    instance_id: string;
+    mode: StackConfig["mode"];
+    base_url: string;
+    gateway_health: {
+        ok: boolean;
+        version?: string;
+    } | undefined;
+    processes: RoleState[];
+}
+export declare function runStatus(dir: string): Promise<StatusResult>;