@jini-ai/platform 0.1.1 → 0.3.0

package/README.md

@@ -0,0 +1,88 @@
+# `@jini-ai/platform`
+
+Generic OS/platform primitives: process exec and lifecycle, filesystem containment, HTTP
+readiness polling, toolchain discovery, blob storage, AWS signing, and an SSRF-safe asset cache.
+This is the Node-only substrate a daemon host needs to spawn and supervise child processes, wait
+for a port to come up, resolve a user's installed toolchains, manage terminal (PTY) sessions, and
+store blobs — all without depending on `@jini-ai/daemon` or any product code. Ported mostly
+verbatim from Open Design's own `packages/platform` plus several generic daemon-support files
+that were split out of OD's monolithic daemon (see `source-map.md` for the full per-file trail).
+
+## Install
+
+```sh
+npm install @jini-ai/platform
+```
+
+No peer dependencies. `undici` is a regular dependency (used by the SSRF-safe asset cache's
+connection-time DNS-rebinding guard). Interactive terminal sessions (`createTerminalService`)
+need a `PtySpawn` implementation supplied by the caller — this package defines the `PtyProcess`/
+`PtySpawn` port only, it does not depend on `node-pty` itself, so bring your own adapter (or use
+`@jini-ai/daemon`'s, which wires a real `node-pty` behind the same port).
+
+## What you get
+
+- **Process lifecycle** — `spawnBackgroundProcess`, `spawnLoggedProcess`, `stopProcesses`,
+  `waitForProcessExit`, `isProcessAlive`, `listProcessSnapshots`, process-stamp encode/match
+  helpers (`createProcessStampArgs`, `readProcessStamp`, `matchesProcessStamp`).
+- **Command construction** — `createCommandInvocation`, `createPackageManagerInvocation`
+  (cross-platform `.bat`/`.cmd` shim quoting).
+- **Shell execution** — `execFileBuffered`, `execCommandViaLoginShell` (re-enters the login shell
+  so profile-only `PATH` entries are visible).
+- **Filesystem** — `pathContains`, `atomicCopyFile`, `removePathBestEffort`, `readLogTail`.
+- **HTTP readiness** — `waitForHttpOk`.
+- **Toolchain discovery** — `wellKnownUserToolchainBins` (npm/pnpm/bun/cargo/deno/go/pyenv,
+  asdf/volta/mise/nvm/fnm shims).
+- **Proxy-aware env** — `resolveSystemProxyEnv`, `mergeProxyAwareEnv` (macOS `scutil` / Windows
+  registry discovery).
+- **Sandboxed execution env** — `resolveSandboxRuntimeConfig(FromEnv)`, `ensureSandboxRuntimeDirs`,
+  `applySandboxRuntimeEnv`, `isSandboxModeEnabled`.
+- **Resource paths** — `resolveDaemonCliPath`, `resolveDaemonResourceRoot`, `resolveDataDir`,
+  `resolveProcessResourcesPath` — daemon CLI/resource-root/data-dir resolution for a packaged app.
+- **Terminal sessions** — `createTerminalService` (in-memory PTY session manager: spawn, write,
+  resize, kill, `attach`/`detach` transport-neutral streaming via `TerminalSseSink`).
+- **Managed downloads** — `managedDownload`, `inspectManagedDownload`, `pruneManagedDownloads`,
+  `downloadCopyAndClear` (atomic, resumable, checksum-verified, with cross-process locking and
+  retention pruning).
+- **AWS SigV4 signing** — `signSigV4`, `encodeS3PathSegment` (no `@aws-sdk/*` dependency).
+- **Blob storage** — `LocalBlobStorage` and `S3BlobStorage`, both implementing the `BlobStorage`
+  port, plus `StorageError`.
+- **SSRF-safe asset cache** — `createAssetCache`, `isCacheableExternalUrl`, `isPrivateAddress`,
+  `assertSafePublicUrl` — a same-origin disk cache/proxy for external media any sandboxed-content
+  renderer (an iframe preview, an embedded document) needs.
+
+## Usage
+
+```ts
+import { waitForHttpOk, pathContains, spawnBackgroundProcess, LocalBlobStorage } from '@jini-ai/platform';
+
+await waitForHttpOk('http://127.0.0.1:4317/api/daemon/status', { timeoutMs: 15000 });
+
+if (!pathContains('/workspace/project', requestedPath)) {
+  throw new Error('path escapes project root');
+}
+
+const proc = spawnBackgroundProcess({ command: 'node', args: ['server.js'] });
+
+const blobs = new LocalBlobStorage('/var/lib/app/blobs');
+await blobs.writeFile('tenant-42', 'avatar.png', Buffer.from([]));
+```
+
+## What's swappable
+
+`BlobStorage` is a port with two concrete implementations shipped (`LocalBlobStorage`,
+`S3BlobStorage`) — swap in your own by implementing the same interface. `PtySpawn`/`PtyProcess`
+are ports too: `createTerminalService` takes a `loadSpawnPty: () => Promise<PtySpawn>` factory
+rather than importing `node-pty` directly, so a caller supplies a real adapter or a fake for
+tests. `TerminalSseSink` (`{ send, end }`) decouples terminal streaming from any specific
+transport (Express, SSE, WebSocket) — everything else (process spawning, command construction,
+the asset cache's SSRF guard chain, download resume logic) is fixed, concrete implementation.
+
+## Runtime
+
+Node-only.
+ESM only — ships `"type": "module"` with no CommonJS `require` build.
+
+## Provenance
+
+See [source-map.md](./source-map.md) for per-file provenance and scope decisions. Apache-2.0.

package/dist/fetch-with-timeout.d.ts

@@ -0,0 +1,105 @@
+/**
+ * @module fetch-with-timeout
+ *
+ * The shared timeout wrapper for every outbound `fetch()` call this monorepo makes to a remote
+ * service — see the 2026-08-16 Jini failure-mode audit, Finding 2: 101 raw `fetch()` call sites
+ * repo-wide (corrected from the audit's own initial "67" — re-count before trusting any figure in
+ * a handoff), across devops deploy providers, agent-runtime providers, media-provider dispatch,
+ * github-client, and llm-provider, most already protected in some ad hoc way. A remote that accepts
+ * the TCP connection but
+ * never responds — a stalled load balancer, a provider having a bad day, a firewall black-holing the
+ * request — leaves `await fetch(...)` unresolved forever; whatever awaits it hangs indefinitely, with
+ * nothing to alert on. A hang like that is worse than a crash: a crash is loud.
+ *
+ * Deliberately ONE helper, not 67 call sites each hand-rolling a slightly different
+ * `AbortController`/`setTimeout` idiom — a caller who already has their own `AbortSignal` (a
+ * user-initiated cancel, a parent request's own deadline) can still supply it via `init.signal`;
+ * `AbortSignal.any` composes it with the timeout so either one aborts the call, and the thrown
+ * `FetchTimeoutError` vs. the caller's own abort reason stay distinguishable (see `fetchWithTimeout`'s
+ * own doc).
+ *
+ * `FETCH_TIMEOUT_MS` gives call sites a small, documented, shared vocabulary instead of inventing a
+ * number each time — a deploy-provider API call, an image byte-fetch, and a large asset upload
+ * genuinely have different reasonable ceilings. `timeoutMs` is never hidden inside the helper as an
+ * undocumented default with no parameter, though: every call site names one explicitly (usually one
+ * of these constants), because a caller reading its own code should see the number, not have to go
+ * find it.
+ *
+ * Deliberately excludes anything meant to stay open for a long time independent of transfer size —
+ * Server-Sent Events, WebSockets, long-poll. None of the 67 flagged call sites are that shape (the
+ * audit traced this: the repo's real streaming transports are `EventSource` on the browser side and
+ * a hand-rolled SSE channel server-side, both entirely separate from `fetch()`), but a future caller
+ * reaching for this helper for one of those would be reaching for the wrong tool — `AbortSignal.timeout`
+ * bounds the WHOLE call, body included, so it would sever a deliberately long-lived stream partway
+ * through exactly like the bug this fixes, just self-inflicted instead of accidental.
+ *
+ * **Also exported as its own subpath, `@jini-ai/platform/fetch-with-timeout`, deliberately.** This
+ * module has zero imports of its own — no `node:*` builtin, no `undici` — unlike the package's root
+ * barrel (`index.ts`), which re-exports sibling modules (`process.ts`, `fs.ts`, `terminal.ts`,
+ * `asset-cache.ts`, …) that import `node:child_process`, `node:fs`, `undici`'s `Agent`, etc.
+ * Importing from the root barrel in browser-bundled code is silently fine in a *production* build
+ * through Vite/Rollup — tree-shaking (this package sets `sideEffects: false`) proves the Node-only
+ * re-exports are unused and drops them before the `node:*` imports are ever resolved — but it is
+ * NOT fine in `vite dev` or any other unbundled-native-ESM serving mode: there is no tree-shaking on
+ * that path, so the browser eagerly loads and evaluates every sibling the barrel re-exports, and
+ * `process.ts`'s very first statement destructures `execFile`/`spawn` off `node:child_process` —
+ * which Vite's dev server serves as a `Proxy` that throws on first property access. The whole module
+ * graph fails to evaluate the instant anything imports the barrel, regardless of which export is
+ * actually used. Verified empirically (`esbuild --bundle --platform=browser` on the barrel: 154
+ * resolution errors; `vite build`: clean, 5.92kB, zero Node-only code in the output; `vite dev`
+ * serving `index.js`: throws at import time) — see the 2026-08-17 Jini hardening report. Browser
+ * call sites should import from this subpath, never the root barrel.
+ */
+/** Thrown in place of the platform's generic abort error specifically when the timeout — not a
+ * caller-supplied `init.signal` — is what ended the call, so a caller can tell "this took too long"
+ * apart from "I cancelled it myself" without string-matching an error message. */
+export declare class FetchTimeoutError extends Error {
+    readonly url: string;
+    readonly timeoutMs: number;
+    constructor(url: string, timeoutMs: number);
+}
+/**
+ * Shared, documented timeout classes for outbound `fetch()` calls. Every call site names one
+ * explicitly (or its own justified number) rather than relying on an unstated default.
+ */
+export declare const FETCH_TIMEOUT_MS: {
+    /** A single metadata/status/API-read call expected to return quickly: a model catalog listing, a
+     * connection test, a GitHub API read, an LLM provider's non-streaming completion call. */
+    readonly QUICK: 15000;
+    /** A deploy-provider API call that may involve real backend work on the provider's side — site
+     * creation, DNS record lookups, deployment status polling. */
+    readonly DEPLOY: 30000;
+    /** A large-payload transfer: an asset/blob upload, a generated-media byte fetch. */
+    readonly UPLOAD: 120000;
+    /** A media-generation API call whose response only arrives once the vendor has actually finished
+     * generating the image/video/audio server-side — routinely minutes, not seconds. Matches the
+     * value OpenAI's and OpenRouter's own image providers already hardcode locally
+     * (`OPENAI_IMAGE_*_TIMEOUT_MS`/`OPENROUTER_IMAGE_TIMEOUT_MS`); used as the shared dispatch-level
+     * backstop in `@jini-ai/integrations`' `dispatchVendorRequest` for every OTHER vendor that (as of
+     * 2026-08-16) sets no timeout of its own at all. Deliberately NOT the same as `UPLOAD`: a backstop
+     * shorter than a vendor's own already-correct 10-minute generation timeout would abort a
+     * legitimately still-generating request early. */
+    readonly GENERATE: number;
+};
+export interface FetchWithTimeoutOptions {
+    /** Milliseconds before the call is aborted. Pick one of {@link FETCH_TIMEOUT_MS}, or a specific
+     * justified number for a call site that doesn't fit those classes. */
+    timeoutMs: number;
+}
+/**
+ * `fetch`, but aborted after `options.timeoutMs` if it hasn't settled by then. If `init.signal` is
+ * already set, the call aborts on EITHER that signal or the timeout, via `AbortSignal.any` — a
+ * caller's own cancellation (e.g. a user-initiated cancel button) keeps working exactly as it did
+ * without this wrapper.
+ *
+ * @param url - Same as `fetch`'s first argument.
+ * @param init - Same as `fetch`'s second argument. `init.signal`, if present, is combined with the
+ * timeout rather than replaced.
+ * @param options - See {@link FetchWithTimeoutOptions}.
+ * @returns The same `Promise<Response>` `fetch` itself would return.
+ * @throws {@link FetchTimeoutError} if the timeout fires before the call settles and the caller's own
+ * `init.signal` (if any) did not itself already abort. Any other rejection (a caller's own abort, a
+ * genuine network error) propagates unchanged.
+ */
+export declare function fetchWithTimeout(url: string | URL, init: RequestInit | undefined, options: FetchWithTimeoutOptions): Promise<Response>;
+//# sourceMappingURL=fetch-with-timeout.d.ts.map

package/dist/fetch-with-timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-with-timeout.d.ts","sourceRoot":"","sources":["../src/fetch-with-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH;;kFAEkF;AAClF,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAM3C;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB;IAC3B;8FAC0F;;IAE1F;kEAC8D;;IAE9D,oFAAoF;;IAEpF;;;;;;;sDAOkD;;CAET,CAAC;AAE5C,MAAM,WAAW,uBAAuB;IACtC;0EACsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,IAAI,EAAE,WAAW,YAAK,EACtB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,QAAQ,CAAC,CAgBnB"}

package/dist/fetch-with-timeout.js

@@ -0,0 +1,121 @@
+/**
+ * @module fetch-with-timeout
+ *
+ * The shared timeout wrapper for every outbound `fetch()` call this monorepo makes to a remote
+ * service — see the 2026-08-16 Jini failure-mode audit, Finding 2: 101 raw `fetch()` call sites
+ * repo-wide (corrected from the audit's own initial "67" — re-count before trusting any figure in
+ * a handoff), across devops deploy providers, agent-runtime providers, media-provider dispatch,
+ * github-client, and llm-provider, most already protected in some ad hoc way. A remote that accepts
+ * the TCP connection but
+ * never responds — a stalled load balancer, a provider having a bad day, a firewall black-holing the
+ * request — leaves `await fetch(...)` unresolved forever; whatever awaits it hangs indefinitely, with
+ * nothing to alert on. A hang like that is worse than a crash: a crash is loud.
+ *
+ * Deliberately ONE helper, not 67 call sites each hand-rolling a slightly different
+ * `AbortController`/`setTimeout` idiom — a caller who already has their own `AbortSignal` (a
+ * user-initiated cancel, a parent request's own deadline) can still supply it via `init.signal`;
+ * `AbortSignal.any` composes it with the timeout so either one aborts the call, and the thrown
+ * `FetchTimeoutError` vs. the caller's own abort reason stay distinguishable (see `fetchWithTimeout`'s
+ * own doc).
+ *
+ * `FETCH_TIMEOUT_MS` gives call sites a small, documented, shared vocabulary instead of inventing a
+ * number each time — a deploy-provider API call, an image byte-fetch, and a large asset upload
+ * genuinely have different reasonable ceilings. `timeoutMs` is never hidden inside the helper as an
+ * undocumented default with no parameter, though: every call site names one explicitly (usually one
+ * of these constants), because a caller reading its own code should see the number, not have to go
+ * find it.
+ *
+ * Deliberately excludes anything meant to stay open for a long time independent of transfer size —
+ * Server-Sent Events, WebSockets, long-poll. None of the 67 flagged call sites are that shape (the
+ * audit traced this: the repo's real streaming transports are `EventSource` on the browser side and
+ * a hand-rolled SSE channel server-side, both entirely separate from `fetch()`), but a future caller
+ * reaching for this helper for one of those would be reaching for the wrong tool — `AbortSignal.timeout`
+ * bounds the WHOLE call, body included, so it would sever a deliberately long-lived stream partway
+ * through exactly like the bug this fixes, just self-inflicted instead of accidental.
+ *
+ * **Also exported as its own subpath, `@jini-ai/platform/fetch-with-timeout`, deliberately.** This
+ * module has zero imports of its own — no `node:*` builtin, no `undici` — unlike the package's root
+ * barrel (`index.ts`), which re-exports sibling modules (`process.ts`, `fs.ts`, `terminal.ts`,
+ * `asset-cache.ts`, …) that import `node:child_process`, `node:fs`, `undici`'s `Agent`, etc.
+ * Importing from the root barrel in browser-bundled code is silently fine in a *production* build
+ * through Vite/Rollup — tree-shaking (this package sets `sideEffects: false`) proves the Node-only
+ * re-exports are unused and drops them before the `node:*` imports are ever resolved — but it is
+ * NOT fine in `vite dev` or any other unbundled-native-ESM serving mode: there is no tree-shaking on
+ * that path, so the browser eagerly loads and evaluates every sibling the barrel re-exports, and
+ * `process.ts`'s very first statement destructures `execFile`/`spawn` off `node:child_process` —
+ * which Vite's dev server serves as a `Proxy` that throws on first property access. The whole module
+ * graph fails to evaluate the instant anything imports the barrel, regardless of which export is
+ * actually used. Verified empirically (`esbuild --bundle --platform=browser` on the barrel: 154
+ * resolution errors; `vite build`: clean, 5.92kB, zero Node-only code in the output; `vite dev`
+ * serving `index.js`: throws at import time) — see the 2026-08-17 Jini hardening report. Browser
+ * call sites should import from this subpath, never the root barrel.
+ */
+/** Thrown in place of the platform's generic abort error specifically when the timeout — not a
+ * caller-supplied `init.signal` — is what ended the call, so a caller can tell "this took too long"
+ * apart from "I cancelled it myself" without string-matching an error message. */
+export class FetchTimeoutError extends Error {
+    url;
+    timeoutMs;
+    constructor(url, timeoutMs) {
+        super(`fetch timed out after ${timeoutMs}ms: ${url}`);
+        this.name = "FetchTimeoutError";
+        this.url = url;
+        this.timeoutMs = timeoutMs;
+    }
+}
+/**
+ * Shared, documented timeout classes for outbound `fetch()` calls. Every call site names one
+ * explicitly (or its own justified number) rather than relying on an unstated default.
+ */
+export const FETCH_TIMEOUT_MS = {
+    /** A single metadata/status/API-read call expected to return quickly: a model catalog listing, a
+     * connection test, a GitHub API read, an LLM provider's non-streaming completion call. */
+    QUICK: 15_000,
+    /** A deploy-provider API call that may involve real backend work on the provider's side — site
+     * creation, DNS record lookups, deployment status polling. */
+    DEPLOY: 30_000,
+    /** A large-payload transfer: an asset/blob upload, a generated-media byte fetch. */
+    UPLOAD: 120_000,
+    /** A media-generation API call whose response only arrives once the vendor has actually finished
+     * generating the image/video/audio server-side — routinely minutes, not seconds. Matches the
+     * value OpenAI's and OpenRouter's own image providers already hardcode locally
+     * (`OPENAI_IMAGE_*_TIMEOUT_MS`/`OPENROUTER_IMAGE_TIMEOUT_MS`); used as the shared dispatch-level
+     * backstop in `@jini-ai/integrations`' `dispatchVendorRequest` for every OTHER vendor that (as of
+     * 2026-08-16) sets no timeout of its own at all. Deliberately NOT the same as `UPLOAD`: a backstop
+     * shorter than a vendor's own already-correct 10-minute generation timeout would abort a
+     * legitimately still-generating request early. */
+    GENERATE: 10 * 60_000,
+};
+/**
+ * `fetch`, but aborted after `options.timeoutMs` if it hasn't settled by then. If `init.signal` is
+ * already set, the call aborts on EITHER that signal or the timeout, via `AbortSignal.any` — a
+ * caller's own cancellation (e.g. a user-initiated cancel button) keeps working exactly as it did
+ * without this wrapper.
+ *
+ * @param url - Same as `fetch`'s first argument.
+ * @param init - Same as `fetch`'s second argument. `init.signal`, if present, is combined with the
+ * timeout rather than replaced.
+ * @param options - See {@link FetchWithTimeoutOptions}.
+ * @returns The same `Promise<Response>` `fetch` itself would return.
+ * @throws {@link FetchTimeoutError} if the timeout fires before the call settles and the caller's own
+ * `init.signal` (if any) did not itself already abort. Any other rejection (a caller's own abort, a
+ * genuine network error) propagates unchanged.
+ */
+export async function fetchWithTimeout(url, init = {}, options) {
+    const { timeoutMs } = options;
+    const timeoutSignal = AbortSignal.timeout(timeoutMs);
+    const signal = init.signal ? AbortSignal.any([init.signal, timeoutSignal]) : timeoutSignal;
+    try {
+        return await fetch(url, { ...init, signal });
+    }
+    catch (error) {
+        // `timeoutSignal` is the original object this function created, not the (possibly composed)
+        // signal handed to `fetch` — checking its own `.aborted` tells us specifically whether OUR
+        // timeout fired, independent of whether a caller-supplied signal also exists or also aborted.
+        if (timeoutSignal.aborted && !init.signal?.aborted) {
+            throw new FetchTimeoutError(String(url), timeoutMs);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=fetch-with-timeout.js.map

package/dist/fetch-with-timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-with-timeout.js","sourceRoot":"","sources":["../src/fetch-with-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH;;kFAEkF;AAClF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,GAAG,CAAS;IACZ,SAAS,CAAS;IAE3B,YAAY,GAAW,EAAE,SAAiB;QACxC,KAAK,CAAC,yBAAyB,SAAS,OAAO,GAAG,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B;8FAC0F;IAC1F,KAAK,EAAE,MAAM;IACb;kEAC8D;IAC9D,MAAM,EAAE,MAAM;IACd,oFAAoF;IACpF,MAAM,EAAE,OAAO;IACf;;;;;;;sDAOkD;IAClD,QAAQ,EAAE,EAAE,GAAG,MAAM;CACoB,CAAC;AAQ5C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAiB,EACjB,OAAoB,EAAE,EACtB,OAAgC;IAEhC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC9B,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAE3F,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4FAA4F;QAC5F,2FAA2F;QAC3F,8FAA8F;QAC9F,IAAI,aAAa,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACnD,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAOF;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,SAAiB,EAAE,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAc3G"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAOF;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,SAAiB,EAAE,GAAE,eAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB3G"}

package/dist/http.js

@@ -6,6 +6,7 @@
  * copy so it owns no cross-module runtime surface.
  */
 import { setTimeout as sleep } from "node:timers/promises";
+import { fetchWithTimeout } from "./fetch-with-timeout.js";
 /** @internal Extract a human-readable message from an unknown thrown value. */
 function errorMessage(error) {
     return error instanceof Error ? error.message : String(error);
@@ -24,7 +25,15 @@ export async function waitForHttpOk(url, { timeoutMs = 20000 } = {}) {
     let lastError = null;
     while (Date.now() - startedAt < timeoutMs) {
         try {
-            const response = await fetch(url, { cache: "no-store" });
+            // Each attempt gets its own bounded timeout — capped at what's left of the OVERALL
+            // `timeoutMs`, floored at 1ms so a caller who deliberately passes `timeoutMs: 0` still gets a
+            // schedulable (if immediately-expiring) signal rather than `AbortSignal.timeout(0)`'s
+            // undefined-ish edge behavior. Without this, a single stalled attempt could hang past the
+            // `timeoutMs` this function promises to the caller: the outer `while` can only re-check the
+            // clock once `await fetch(...)` itself returns, so an unbounded fetch call defeats the loop's
+            // own deadline exactly like Finding 2 of the 2026-08-16 audit describes.
+            const remaining = timeoutMs - (Date.now() - startedAt);
+            const response = await fetchWithTimeout(url, { cache: "no-store" }, { timeoutMs: Math.max(1, remaining) });
             if (response.ok)
                 return true;
             lastError = new Error(`HTTP ${response.status} from ${url}`);

package/dist/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAM3D,+EAA+E;AAC/E,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,EAAE,SAAS,GAAG,KAAK,KAAsB,EAAE;IAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,SAAS,GAAiB,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YACzD,IAAI,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC7B,SAAS,GAAG,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/F,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAM3D,+EAA+E;AAC/E,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,EAAE,SAAS,GAAG,KAAK,KAAsB,EAAE;IAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,SAAS,GAAiB,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,mFAAmF;YACnF,8FAA8F;YAC9F,sFAAsF;YACtF,0FAA0F;YAC1F,4FAA4F;YAC5F,8FAA8F;YAC9F,yEAAyE;YACzE,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3G,IAAI,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC7B,SAAS,GAAG,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/F,CAAC"}

package/dist/index.d.ts

@@ -9,6 +9,8 @@
  * - `proxy-env`  — system proxy discovery and proxy-aware env merging.
  * - `fs`         — filesystem containment, atomic copy, removal, log tails.
  * - `http`       — HTTP readiness polling.
+ * - `fetch-with-timeout` — the shared `AbortSignal`-timeout wrapper every outbound `fetch()` call
+ *   in this monorepo is meant to go through (2026-08-16 failure-mode audit, Finding 2).
  * - `toolchain`  — user-level toolchain bin discovery.
  * - `asset-cache` — SSRF-safe same-origin cache/proxy for sandboxed content's
  *   external media references.
@@ -37,6 +39,8 @@ export type { AtomicCopyFileOptions, AtomicCopyFileResult, RemovePathBestEffortO
 export { atomicCopyFile, pathContains, readLogTail, removePathBestEffort } from "./fs.js";
 export type { HttpWaitOptions } from "./http.js";
 export { waitForHttpOk } from "./http.js";
+export type { FetchWithTimeoutOptions } from "./fetch-with-timeout.js";
+export { FETCH_TIMEOUT_MS, FetchTimeoutError, fetchWithTimeout } from "./fetch-with-timeout.js";
 export type { WellKnownUserToolchainOptions } from "./toolchain.js";
 export { wellKnownUserToolchainBins } from "./toolchain.js";
 export type { BufferedCommandResult } from "./shell.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAEvF,YAAY,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,uCAAuC,EACvC,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAE1F,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,YAAY,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAExE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEnF,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpG,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,EACnC,oBAAoB,EACpB,2BAA2B,EAC3B,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,EACzB,2CAA2C,GAC5C,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,qCAAqC,EACrC,gCAAgC,EAChC,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,EACd,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,qBAAqB,EACrB,4BAA4B,EAC5B,UAAU,EACV,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE5H,YAAY,EACV,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,4BAA4B,EAC5B,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAEvF,YAAY,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,uCAAuC,EACvC,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAE1F,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhG,YAAY,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAExE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEnF,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACpG,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,EACnC,oBAAoB,EACpB,2BAA2B,EAC3B,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,EACzB,2CAA2C,GAC5C,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,qCAAqC,EACrC,gCAAgC,EAChC,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,EACd,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,qBAAqB,EACrB,4BAA4B,EAC5B,UAAU,EACV,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE5H,YAAY,EACV,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,4BAA4B,EAC5B,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -9,6 +9,8 @@
  * - `proxy-env`  — system proxy discovery and proxy-aware env merging.
  * - `fs`         — filesystem containment, atomic copy, removal, log tails.
  * - `http`       — HTTP readiness polling.
+ * - `fetch-with-timeout` — the shared `AbortSignal`-timeout wrapper every outbound `fetch()` call
+ *   in this monorepo is meant to go through (2026-08-16 failure-mode audit, Finding 2).
  * - `toolchain`  — user-level toolchain bin discovery.
  * - `asset-cache` — SSRF-safe same-origin cache/proxy for sandboxed content's
  *   external media references.
@@ -32,6 +34,7 @@ export { mergeProxyAwareEnv, parseMacosScutilProxyOutput, parseWindowsInternetSe
 export { collectProcessTreePids, createProcessStampArgs, isProcessAlive, listProcessSnapshots, matchesProcessStamp, matchesStampedProcess, readFlagValue, readProcessStamp, readProcessStampFromCommand, spawnBackgroundProcess, spawnLoggedProcess, stopProcesses, waitForProcessExit, } from "./process.js";
 export { atomicCopyFile, pathContains, readLogTail, removePathBestEffort } from "./fs.js";
 export { waitForHttpOk } from "./http.js";
+export { FETCH_TIMEOUT_MS, FetchTimeoutError, fetchWithTimeout } from "./fetch-with-timeout.js";
 export { wellKnownUserToolchainBins } from "./toolchain.js";
 export { execCommandViaLoginShell, execFileBuffered } from "./shell.js";
 export { AssetCacheError, assertSafePublicUrl, assetCacheKey, assetCacheRewriteUrl, createAssetCache, createValidatingLookup, isCacheableExternalUrl, isPrivateAddress, } from "./asset-cache.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAGvF,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,uCAAuC,EACvC,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAWxB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAQtB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAG1F,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGxE,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAGnF,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,EACnC,oBAAoB,EACpB,2BAA2B,EAC3B,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,EACzB,2CAA2C,GAC5C,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,EACd,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAc7B,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAiB5H,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAGvF,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,uCAAuC,EACvC,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAWxB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAQtB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAG1F,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhG,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGxE,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAGnF,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,mCAAmC,EACnC,oBAAoB,EACpB,2BAA2B,EAC3B,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,EACzB,2CAA2C,GAC5C,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,EACd,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAc7B,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAiB5H,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@jini-ai/platform",
-  "version": "0.1.1",
+  "version": "0.3.0",
+  "description": "Generic OS/platform primitives: process exec and lifecycle, filesystem containment, HTTP readiness polling, toolchain discovery, blob storage, AWS signing, and an SSRF-safe asset cache.",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -10,15 +11,22 @@
   "jini": {
     "domain": "platform",
     "kind": "abstraction",
-    "runtime": "node",
-    "admission": "locked"
+    "runtime": "node"
   },
   "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
+    },
+    "./fetch-with-timeout": {
+      "types": "./dist/fetch-with-timeout.d.ts",
+      "import": "./dist/fetch-with-timeout.js",
+      "default": "./dist/fetch-with-timeout.js"
     }
   },
   "files": [