@harrylabsj/kiwi 0.6.0

package/dist/supervisor/manifest.js

@@ -0,0 +1,209 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Process manifest and ownership verification (M4).
+ *
+ * Every managed process is started through the internal child-runner
+ * (supervisor/wrapper.ts) with a cryptographically random per-process nonce
+ * visible in the wrapper argv. The manifest (mode 0600, atomically renamed
+ * into the private run/ dir) binds: instance id, uid, nonce, exact role,
+ * wrapper pid, command fingerprint and start metadata.
+ *
+ * status/down NEVER use pgrep, fuzzy name matching, or kill-by-port. A
+ * process is only signaled after: instance id + uid match, the pid is
+ * alive, and the live process argv contains the exact nonce and wrapper
+ * path — which makes PID-reuse kills cryptographically improbable.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { execFileSync } from "node:child_process";
+import { closeSync, existsSync, fsyncSync, openSync, readFileSync, renameSync, writeSync, } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+export function newNonce() {
+    return randomBytes(16).toString("hex");
+}
+export function wrapperPath() {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    const sibling = path.join(here, "wrapper.js");
+    if (existsSync(sibling))
+        return sibling;
+    // Dev/test (running from src/): use the built wrapper from dist/.
+    return path.resolve(here, "..", "..", "dist", "supervisor", "wrapper.js");
+}
+/** Full wrapper argv: the nonce is always visible to ps for verification. */
+export function wrapperArgv(nonce, manifestPath, logPath, exitPath, command) {
+    return [
+        wrapperPath(),
+        "--kiwi-nonce",
+        nonce,
+        "--manifest",
+        manifestPath,
+        "--log",
+        logPath,
+        "--exit",
+        exitPath,
+        "--",
+        ...command,
+    ];
+}
+export function fingerprint(argv) {
+    return createHash("sha256").update(JSON.stringify(argv)).digest("hex");
+}
+export function manifestPathFor(runDir, role) {
+    return path.join(runDir, `${role}.json`);
+}
+export function exitPathFor(runDir, role) {
+    return path.join(runDir, `${role}.exit.json`);
+}
+export function logPathFor(logsDir, role) {
+    return path.join(logsDir, `${role}.log`);
+}
+/** Atomic mode-0600 write: temp file in the same dir, fsync, rename. */
+export function writeManifestAtomic(manifestPath, manifest) {
+    const tmp = `${manifestPath}.tmp-${process.pid}`;
+    const fd = openSync(tmp, "wx", 0o600);
+    try {
+        writeSync(fd, `${JSON.stringify(manifest, null, 2)}\n`);
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    renameSync(tmp, manifestPath);
+}
+function isNonEmptyStringArray(value) {
+    return (Array.isArray(value) &&
+        value.length > 0 &&
+        value.every((v) => typeof v === "string" && v.length > 0));
+}
+/**
+ * Parse a manifest file, fail closed: any malformed or tampered field makes
+ * the whole manifest unreadable, and an unreadable manifest is never
+ * signaled.
+ */
+export function readManifest(manifestPath) {
+    let raw;
+    try {
+        raw = readFileSync(manifestPath, "utf-8");
+    }
+    catch {
+        return undefined;
+    }
+    try {
+        const data = JSON.parse(raw);
+        if (data.manifest_version !== 1 ||
+            typeof data.instance_id !== "string" ||
+            !/^[0-9a-f]{32}$/.test(data.instance_id) ||
+            typeof data.uid !== "number" ||
+            !Number.isSafeInteger(data.uid) ||
+            data.uid < 0 ||
+            typeof data.nonce !== "string" ||
+            !/^[0-9a-f]{32}$/.test(data.nonce) ||
+            (data.role !== "gateway" && data.role !== "merchant" && data.role !== "buyer") ||
+            typeof data.pid !== "number" ||
+            !Number.isSafeInteger(data.pid) ||
+            data.pid <= 0 ||
+            !isNonEmptyStringArray(data.command) ||
+            !isNonEmptyStringArray(data.wrapper_argv) ||
+            typeof data.command_fingerprint !== "string" ||
+            data.command_fingerprint.length === 0 ||
+            typeof data.started_at !== "string" ||
+            typeof data.log_path !== "string" ||
+            typeof data.exit_path !== "string") {
+            return undefined;
+        }
+        return data;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        // EPERM means the process exists but is owned by someone else: alive,
+        // and the uid check in verifyProcess will refuse to touch it.
+        return err.code === "EPERM";
+    }
+}
+/** argv of a live pid via ps for the exact PID (never pgrep/name matching). */
+function psArgs(pid) {
+    try {
+        return execFileSync("ps", ["-p", String(pid), "-o", "args="], {
+            encoding: "utf-8",
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+    }
+    catch {
+        return undefined;
+    }
+}
+export function readExitRecord(exitPath) {
+    try {
+        const data = JSON.parse(readFileSync(exitPath, "utf-8"));
+        if (typeof data.at !== "string")
+            return undefined;
+        return data;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Verify that the live process at manifest.pid is exactly the wrapper this
+ * instance started: same instance, same uid, alive, argv carries the exact
+ * nonce and wrapper path, and the stored fingerprint matches the recomputed
+ * wrapper argv.
+ */
+export function verifyProcess(manifest, expectedInstanceId) {
+    if (manifest.instance_id !== expectedInstanceId) {
+        return { verified: false, running: false, detail: "manifest belongs to a different instance" };
+    }
+    const uid = typeof process.getuid === "function" ? process.getuid() : -1;
+    if (uid >= 0 && manifest.uid !== uid) {
+        return {
+            verified: false,
+            running: false,
+            detail: `manifest uid ${manifest.uid} != current uid ${uid}`,
+        };
+    }
+    if (!pidAlive(manifest.pid)) {
+        return { verified: true, running: false, detail: `pid ${manifest.pid} is not running` };
+    }
+    const args = psArgs(manifest.pid);
+    if (args === undefined) {
+        return { verified: false, running: true, detail: `cannot read argv of pid ${manifest.pid}` };
+    }
+    // ps joins argv with single spaces; argv elements may themselves contain
+    // whitespace, so verify by anchored substrings, not token equality.
+    const head = `${wrapperPath()} --kiwi-nonce ${manifest.nonce} `;
+    if (!args.includes(head)) {
+        return {
+            verified: false,
+            running: true,
+            detail: `pid ${manifest.pid} lacks the expected nonce/wrapper signature`,
+        };
+    }
+    // Tamper check: the stored fingerprint must match the stored argv.
+    if (fingerprint(manifest.wrapper_argv) !== manifest.command_fingerprint) {
+        return { verified: false, running: true, detail: "command fingerprint mismatch" };
+    }
+    return { verified: true, running: true, detail: `pid ${manifest.pid} verified (nonce match)` };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/supervisor/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/supervisor/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AA4BzC,MAAM,UAAU,QAAQ;IACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,kEAAkE;IAClE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAC5E,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CACzB,KAAa,EACb,YAAoB,EACpB,OAAe,EACf,QAAgB,EAChB,OAAiB;IAEjB,OAAO;QACL,WAAW,EAAE;QACb,cAAc;QACd,KAAK;QACL,YAAY;QACZ,YAAY;QACZ,OAAO;QACP,OAAO;QACP,QAAQ;QACR,QAAQ;QACR,IAAI;QACJ,GAAG,OAAO;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAc;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,IAAiB;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,IAAiB;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,IAAiB;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,YAAoB,EAAE,QAAyB;IACjF,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAChD,IACE,IAAI,CAAC,gBAAgB,KAAK,CAAC;YAC3B,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YACpC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YACxC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAC5B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,IAAI,CAAC,GAAG,GAAG,CAAC;YACZ,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAC9B,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAClC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;YAC9E,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAC5B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,IAAI,CAAC,GAAG,IAAI,CAAC;YACb,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC;YACzC,OAAO,IAAI,CAAC,mBAAmB,KAAK,QAAQ;YAC5C,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;YACrC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACjC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAClC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,8DAA8D;QAC9D,OAAQ,GAAyB,CAAC,IAAI,KAAK,OAAO,CAAC;IACrD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;YAC5D,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAe,CAAC;QACvE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAyB,EAAE,kBAA0B;IACjF,IAAI,QAAQ,CAAC,WAAW,KAAK,kBAAkB,EAAE,CAAC;QAChD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,GAAG,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,gBAAgB,QAAQ,CAAC,GAAG,mBAAmB,GAAG,EAAE;SAC7D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,QAAQ,CAAC,GAAG,iBAAiB,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/F,CAAC;IACD,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,IAAI,GAAG,GAAG,WAAW,EAAE,iBAAiB,QAAQ,CAAC,KAAK,GAAG,CAAC;IAChE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO,QAAQ,CAAC,GAAG,6CAA6C;SACzE,CAAC;IACJ,CAAC;IACD,mEAAmE;IACnE,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QACxE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,QAAQ,CAAC,GAAG,yBAAyB,EAAE,CAAC;AACjG,CAAC"}

package/dist/supervisor/stack-config.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export declare const STACK_VERSION = 1;
+export declare const STACK_CONFIG_FILE = "kiwi.stack.json";
+export type StackMode = "managed-local" | "connected";
+export type ManagedRole = "gateway" | "merchant" | "buyer";
+export declare const MANAGED_ROLES: readonly ManagedRole[];
+export interface StackAgentConfig {
+    enabled: boolean;
+    /** Path to the agent profile, relative to the instance dir. */
+    profile: string;
+}
+export interface StackConfig {
+    stack_version: number;
+    /** Random per-instance id; binds manifests to this instance. */
+    instance_id: string;
+    mode: StackMode;
+    created_at: string;
+    gateway: {
+        base_url: string;
+        /** Exact argv for the shopping-cli API server (never a shell string). */
+        command: string[];
+        /** Extra environment for the gateway child (e.g. PYTHONPATH). */
+        env: Record<string, string>;
+    };
+    agents: {
+        merchant: StackAgentConfig;
+        buyer: StackAgentConfig;
+    };
+}
+export declare class StackConfigError extends Error {
+    constructor(message: string);
+}
+/** Instance layout: the only paths the supervisor ever creates or removes. */
+export declare function instancePaths(dir: string): {
+    root: string;
+    config: string;
+    data: string;
+    logs: string;
+    run: string;
+    profiles: string;
+};
+/** Resolve and validate an instance directory for init. */
+export declare function assertSafeInstanceDir(dir: string): string;
+/**
+ * Structurally validate gateway.base_url: no credentials, no fragment, no
+ * query. managed-local must be cleartext HTTP on a loopback host with an
+ * explicit valid port; connected may be HTTPS (any host) and keeps the same
+ * loopback-only rule for HTTP.
+ */
+export declare function validateGatewayBaseUrl(value: unknown, mode: StackMode, source: string): string;
+/**
+ * Resolve an agent profile path against the instance root and prove
+ * containment. Absolute paths and traversal escaping the root are rejected;
+ * harmless filenames containing two dots are fine.
+ */
+export declare function resolveProfilePath(instanceRoot: string, profile: string, source: string): string;
+/** Validate a parsed stack config object, fail closed. */
+export declare function validateStackConfig(data: unknown, source: string): StackConfig;
+/** Parse and validate a stack config from raw text. */
+export declare function parseStackConfig(raw: string, source: string): StackConfig;
+/** A free loopback port (best effort; the usual bind-after-close race applies). */
+export declare function pickFreePort(): Promise<number>;
+export declare function newInstanceId(): string;
+/** Detect the shopping-cli source checkout (sibling of the Kiwi package). */
+export declare function detectShoppingCliSrc(packageRoot: string): string | undefined;

package/dist/supervisor/stack-config.js

@@ -0,0 +1,262 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Stack config (`kiwi.stack.json`) — the self-contained instance definition
+ * written by `kiwi init` and consumed by up/status/logs/down.
+ *
+ * Parsing is fail-closed: unknown fields at every level are rejected, types
+ * are checked, and instance-directory safety rules refuse broad targets
+ * (filesystem root, the user's home, /tmp itself, …). Secrets never appear
+ * in this file: profiles and env mappings only NAME environment variables.
+ */
+import { randomBytes } from "node:crypto";
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+export const STACK_VERSION = 1;
+export const STACK_CONFIG_FILE = "kiwi.stack.json";
+export const MANAGED_ROLES = ["gateway", "merchant", "buyer"];
+export class StackConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "StackConfigError";
+    }
+}
+function fail(message) {
+    throw new StackConfigError(message);
+}
+function isObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function rejectUnknown(obj, allowed, section) {
+    for (const key of Object.keys(obj)) {
+        if (!allowed.includes(key))
+            fail(`stack config: ${section} has unknown field "${key}"`);
+    }
+}
+/** Instance layout: the only paths the supervisor ever creates or removes. */
+export function instancePaths(dir) {
+    const root = path.resolve(dir);
+    return {
+        root,
+        config: path.join(root, STACK_CONFIG_FILE),
+        data: path.join(root, "data"),
+        logs: path.join(root, "logs"),
+        run: path.join(root, "run"),
+        profiles: path.join(root, "profiles"),
+    };
+}
+/**
+ * Directories that may never become an instance target: the supervisor
+ * creates/deletes state there, so broad roots are refused outright.
+ */
+function blockedInstanceDirs() {
+    const home = path.resolve(homedir());
+    return new Set([
+        path.parse(home).root, // filesystem root ("/")
+        home,
+        path.dirname(home), // "/Users" or "/home"
+        "/tmp",
+        "/var",
+        "/etc",
+        "/usr",
+        "/opt",
+    ]);
+}
+/** Resolve and validate an instance directory for init. */
+export function assertSafeInstanceDir(dir) {
+    const resolved = path.resolve(dir);
+    if (blockedInstanceDirs().has(resolved)) {
+        fail(`refusing unsafe instance directory: ${resolved}`);
+    }
+    const segments = resolved.split(path.sep).filter((s) => s.length > 0);
+    if (segments.length < 2) {
+        fail(`refusing too-broad instance directory: ${resolved}`);
+    }
+    return resolved;
+}
+/** Hosts allowed to use cleartext HTTP for a managed-local gateway. */
+const LOOPBACK_HOSTNAMES = new Set(["localhost", "127.0.0.1", "[::1]", "::1"]);
+/**
+ * Structurally validate gateway.base_url: no credentials, no fragment, no
+ * query. managed-local must be cleartext HTTP on a loopback host with an
+ * explicit valid port; connected may be HTTPS (any host) and keeps the same
+ * loopback-only rule for HTTP.
+ */
+export function validateGatewayBaseUrl(value, mode, source) {
+    if (typeof value !== "string" || value.length === 0) {
+        fail(`${source}: gateway.base_url is required`);
+    }
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        fail(`${source}: gateway.base_url must be a valid URL`);
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        fail(`${source}: gateway.base_url must use http or https (got ${url.protocol})`);
+    }
+    if (url.username !== "" || url.password !== "") {
+        fail(`${source}: gateway.base_url must not embed credentials`);
+    }
+    if (url.hash !== "" || url.search !== "") {
+        fail(`${source}: gateway.base_url must not contain a fragment or query`);
+    }
+    const loopback = LOOPBACK_HOSTNAMES.has(url.hostname.toLowerCase());
+    if (mode === "managed-local") {
+        if (url.protocol !== "http:" || !loopback) {
+            fail(`${source}: managed-local gateway.base_url must be HTTP on a loopback host`);
+        }
+        // Explicit valid port is required for the managed gateway.
+        if (!/^\d+$/.test(url.port)) {
+            fail(`${source}: managed-local gateway.base_url must carry an explicit port`);
+        }
+        const port = Number(url.port);
+        if (port < 1 || port > 65535) {
+            fail(`${source}: gateway.base_url port must be between 1 and 65535`);
+        }
+    }
+    else if (url.protocol === "http:" && !loopback) {
+        fail(`${source}: gateway.base_url uses cleartext HTTP; only loopback hosts may use HTTP`);
+    }
+    return value;
+}
+/**
+ * Resolve an agent profile path against the instance root and prove
+ * containment. Absolute paths and traversal escaping the root are rejected;
+ * harmless filenames containing two dots are fine.
+ */
+export function resolveProfilePath(instanceRoot, profile, source) {
+    if (path.isAbsolute(profile)) {
+        fail(`${source}: agent profile must be a relative path inside the instance`);
+    }
+    const root = path.resolve(instanceRoot);
+    const resolved = path.resolve(root, profile);
+    if (resolved !== root && !resolved.startsWith(root + path.sep)) {
+        fail(`${source}: agent profile escapes the instance directory: ${profile}`);
+    }
+    return resolved;
+}
+/** Validate a parsed stack config object, fail closed. */
+export function validateStackConfig(data, source) {
+    if (!isObject(data))
+        fail(`${source}: stack config must be a JSON object`);
+    rejectUnknown(data, ["stack_version", "instance_id", "mode", "created_at", "gateway", "agents"], "root");
+    if (data.stack_version !== STACK_VERSION) {
+        fail(`${source}: stack_version must be ${STACK_VERSION}`);
+    }
+    if (typeof data.instance_id !== "string" || !/^[0-9a-f]{32}$/.test(data.instance_id)) {
+        fail(`${source}: instance_id must be a 32-char hex string`);
+    }
+    if (data.mode !== "managed-local" && data.mode !== "connected") {
+        fail(`${source}: mode must be managed-local or connected`);
+    }
+    if (typeof data.created_at !== "string" || Number.isNaN(Date.parse(data.created_at))) {
+        fail(`${source}: created_at must be an ISO timestamp`);
+    }
+    if (!isObject(data.gateway))
+        fail(`${source}: gateway section is required`);
+    const gw = data.gateway;
+    rejectUnknown(gw, ["base_url", "command", "env"], "gateway");
+    const baseUrl = validateGatewayBaseUrl(gw.base_url, data.mode, source);
+    if (!Array.isArray(gw.command) ||
+        gw.command.length === 0 ||
+        !gw.command.every((c) => typeof c === "string" && c.length > 0)) {
+        fail(`${source}: gateway.command must be a non-empty string array (argv, never a shell string)`);
+    }
+    if (!isObject(gw.env) || !Object.values(gw.env).every((v) => typeof v === "string")) {
+        fail(`${source}: gateway.env must be a string map`);
+    }
+    if (!isObject(data.agents))
+        fail(`${source}: agents section is required`);
+    rejectUnknown(data.agents, ["merchant", "buyer"], "agents");
+    const parseAgent = (value, name) => {
+        if (!isObject(value))
+            fail(`${source}: agents.${name} must be an object`);
+        rejectUnknown(value, ["enabled", "profile"], `agents.${name}`);
+        if (typeof value.enabled !== "boolean")
+            fail(`${source}: agents.${name}.enabled must be a boolean`);
+        if (typeof value.profile !== "string" || value.profile.length === 0) {
+            fail(`${source}: agents.${name}.profile must be a non-empty string`);
+        }
+        if (path.isAbsolute(value.profile)) {
+            fail(`${source}: agents.${name}.profile must be a relative path inside the instance`);
+        }
+        // Normalized traversal out of the configured location is rejected here;
+        // full containment inside the instance root is proven at load/use time
+        // via resolveProfilePath. Filenames containing ".." harmlessly (e.g.
+        // "merchant.v1..yaml") are allowed.
+        const normalized = path.posix.normalize(value.profile.split(path.sep).join("/"));
+        if (normalized === ".." || normalized.startsWith("../")) {
+            fail(`${source}: agents.${name}.profile must not traverse outside its directory`);
+        }
+        return { enabled: value.enabled, profile: value.profile };
+    };
+    return {
+        stack_version: STACK_VERSION,
+        instance_id: data.instance_id,
+        mode: data.mode,
+        created_at: data.created_at,
+        gateway: {
+            base_url: baseUrl,
+            command: gw.command,
+            env: { ...gw.env },
+        },
+        agents: {
+            merchant: parseAgent(data.agents.merchant, "merchant"),
+            buyer: parseAgent(data.agents.buyer, "buyer"),
+        },
+    };
+}
+/** Parse and validate a stack config from raw text. */
+export function parseStackConfig(raw, source) {
+    let data;
+    try {
+        data = JSON.parse(raw);
+    }
+    catch (err) {
+        fail(`${source}: invalid JSON: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    return validateStackConfig(data, source);
+}
+/** A free loopback port (best effort; the usual bind-after-close race applies). */
+export async function pickFreePort() {
+    const { createServer } = await import("node:net");
+    return new Promise((resolve, reject) => {
+        const server = createServer();
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => {
+            const address = server.address();
+            if (address === null || (typeof address === "object") !== true) {
+                server.close();
+                reject(new StackConfigError("could not allocate a free loopback port"));
+                return;
+            }
+            const port = address.port;
+            server.close(() => resolve(port));
+        });
+    });
+}
+export function newInstanceId() {
+    return randomBytes(16).toString("hex");
+}
+/** Detect the shopping-cli source checkout (sibling of the Kiwi package). */
+export function detectShoppingCliSrc(packageRoot) {
+    const candidate = path.resolve(packageRoot, "..", "shopping-cli");
+    return existsSync(path.join(candidate, "shopping_cli")) ? candidate : undefined;
+}
+//# sourceMappingURL=stack-config.js.map

package/dist/supervisor/stack-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-config.js","sourceRoot":"","sources":["../../src/supervisor/stack-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAInD,MAAM,CAAC,MAAM,aAAa,GAA2B,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AA2BtF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CACpB,GAA4B,EAC5B,OAA0B,EAC1B,OAAe;IAEf,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,iBAAiB,OAAO,uBAAuB,GAAG,GAAG,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,GAAW;IAQvC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAC1C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QAC7B,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QAC3B,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;KACtC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACrC,OAAO,IAAI,GAAG,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,wBAAwB;QAC/C,IAAI;QACJ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,sBAAsB;QAC1C,MAAM;QACN,MAAM;QACN,MAAM;QACN,MAAM;QACN,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,mBAAmB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,0CAA0C,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uEAAuE;AACvE,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpG;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,IAAe,EAAE,MAAc;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,GAAG,MAAM,gCAAgC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,GAAG,MAAM,wCAAwC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,IAAI,CAAC,GAAG,MAAM,kDAAkD,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,GAAG,MAAM,+CAA+C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG,MAAM,yDAAyD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,MAAM,kEAAkE,CAAC,CAAC;QACpF,CAAC;QACD,2DAA2D;QAC3D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,MAAM,8DAA8D,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,MAAM,qDAAqD,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,MAAM,0EAA0E,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,OAAe,EAAE,MAAc;IACtF,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,MAAM,6DAA6D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,GAAG,MAAM,mDAAmD,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,mBAAmB,CAAC,IAAa,EAAE,MAAc;IAC/D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,MAAM,sCAAsC,CAAC,CAAC;IAC3E,aAAa,CACX,IAAI,EACJ,CAAC,eAAe,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC3E,MAAM,CACP,CAAC;IACF,IAAI,IAAI,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG,MAAM,2BAA2B,aAAa,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC,GAAG,MAAM,4CAA4C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/D,IAAI,CAAC,GAAG,MAAM,2CAA2C,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC,GAAG,MAAM,uCAAuC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,GAAG,MAAM,+BAA+B,CAAC,CAAC;IAC5E,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC;QAC1B,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAC/D,CAAC;QACD,IAAI,CACF,GAAG,MAAM,iFAAiF,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACpF,IAAI,CAAC,GAAG,MAAM,oCAAoC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,GAAG,MAAM,8BAA8B,CAAC,CAAC;IAC1E,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,IAAY,EAAoB,EAAE;QACpE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,GAAG,MAAM,YAAY,IAAI,oBAAoB,CAAC,CAAC;QAC1E,aAAa,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;YACpC,IAAI,CAAC,GAAG,MAAM,YAAY,IAAI,4BAA4B,CAAC,CAAC;QAC9D,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,GAAG,MAAM,YAAY,IAAI,qCAAqC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,MAAM,YAAY,IAAI,sDAAsD,CAAC,CAAC;QACxF,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,oCAAoC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,GAAG,MAAM,YAAY,IAAI,kDAAkD,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE;YACP,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,EAAE,CAAC,OAAmB;YAC/B,GAAG,EAAE,EAAE,GAAI,EAAE,CAAC,GAA8B,EAAE;SAC/C;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;YACtD,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;SAC9C;KACF,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAc;IAC1D,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,MAAM,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC/D,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,gBAAgB,CAAC,yCAAyC,CAAC,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAClE,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAClF,CAAC"}

package/dist/supervisor/wrapper.d.ts

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export {};