@kindgi/cli 0.1.4-rc.5 → 0.1.5-rc.0

package/dist/dev/google-credentials.js

@@ -0,0 +1,157 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * The Google credentials `kindgi dev` gives the runtime, for Vertex AI
+ * (the `gemini` provider preset): only those `KINDGI_DEV_GOOGLE_CREDENTIALS`
+ * names, read like the other dev settings (the shell, then the pack's env
+ * files), and mounted read-only.
+ *
+ *   - `adc`: gcloud's application-default login
+ *     (`gcloud auth application-default login`);
+ *   - an absolute path: that credentials file (a service-account key, an
+ *     impersonated-credentials file);
+ *   - `off`, or unset: none. Nothing is mounted and nothing is set in the
+ *     runtime's environment.
+ *
+ * Neither this machine's application-default login nor a shell's
+ * `GOOGLE_APPLICATION_CREDENTIALS` reaches the runtime on its own: either
+ * may be an account set up for other work. When a Vertex provider has no
+ * credentials, `kindgi dev` and `kindgi doctor` say how to give it some.
+ *
+ * Who the credentials are is read from the file, offline; no token is read
+ * or printed.
+ */
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { isAbsolute, join } from 'node:path';
+export const DEV_GOOGLE_CREDENTIALS_VAR = 'KINDGI_DEV_GOOGLE_CREDENTIALS';
+/** The Vertex AI provider preset's id, and its adapter. */
+export const VERTEX_PROVIDER_ID = 'gemini';
+const GEMINI_ADAPTER_ID = '@kindgi/adapter-model-gemini';
+/**
+ * The credentials `value` (`KINDGI_DEV_GOOGLE_CREDENTIALS`) names, or none.
+ * An error says what to fix: a value that's none of the three forms, a
+ * login that isn't there, a file that isn't a Google credentials file.
+ */
+export function resolveDevGoogleCredentials(value, hostEnv) {
+    const raw = value?.trim() ?? '';
+    if (raw === '' || raw === 'off')
+        return { kind: 'ok', credentials: undefined };
+    let path;
+    if (raw === 'adc') {
+        const adc = gcloudApplicationDefaultPath(hostEnv);
+        if (adc === undefined || !existsSync(adc)) {
+            return {
+                kind: 'error',
+                message: `${DEV_GOOGLE_CREDENTIALS_VAR}=adc, but there's no gcloud application-default login${adc !== undefined ? ` at ${adc}` : ''}. Run \`gcloud auth application-default login\`, or set ${DEV_GOOGLE_CREDENTIALS_VAR} to a credentials file's absolute path.`,
+            };
+        }
+        path = adc;
+    }
+    else if (isAbsolute(raw)) {
+        if (!existsSync(raw) || !statSync(raw).isFile()) {
+            return {
+                kind: 'error',
+                message: `${DEV_GOOGLE_CREDENTIALS_VAR}="${raw}" isn't a file.`,
+            };
+        }
+        path = raw;
+    }
+    else {
+        return {
+            kind: 'error',
+            message: `${DEV_GOOGLE_CREDENTIALS_VAR} must be \`adc\` (your gcloud application-default login), the absolute path of a Google credentials file, or \`off\`. Got "${raw}".`,
+        };
+    }
+    const who = describeGoogleCredentials(path, hostEnv);
+    if (who === undefined) {
+        return {
+            kind: 'error',
+            message: `${DEV_GOOGLE_CREDENTIALS_VAR}: ${path} isn't a Google credentials file (JSON with a "type").`,
+        };
+    }
+    return { kind: 'ok', credentials: { path, who } };
+}
+/**
+ * Where `gcloud auth application-default login` writes: under
+ * `CLOUDSDK_CONFIG` when set, else `%APPDATA%\gcloud` on Windows, else
+ * `~/.config/gcloud`.
+ */
+export function gcloudApplicationDefaultPath(hostEnv) {
+    const file = 'application_default_credentials.json';
+    const config = hostEnv.CLOUDSDK_CONFIG;
+    if (config !== undefined && config !== '')
+        return join(config, file);
+    if (process.platform === 'win32') {
+        const appData = hostEnv.APPDATA;
+        return appData === undefined || appData === '' ? undefined : join(appData, 'gcloud', file);
+    }
+    const home = hostEnv.HOME;
+    return home === undefined || home === '' ? undefined : join(home, '.config', 'gcloud', file);
+}
+/**
+ * Whose credentials the file holds, from its non-secret fields only;
+ * `undefined` when it isn't a Google credentials file. A user login is
+ * "your gcloud application-default login" only when it's gcloud's own
+ * file (`gcloudApplicationDefaultPath`); any other is "a gcloud user login".
+ */
+export function describeGoogleCredentials(path, hostEnv = {}) {
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed !== 'object' || parsed === null)
+        return undefined;
+    const file = parsed;
+    const text = (key) => typeof file[key] === 'string' && file[key] !== '' ? file[key] : undefined;
+    const type = text('type');
+    if (type === undefined)
+        return undefined;
+    const quota = text('quota_project_id');
+    const withQuota = (who) => quota === undefined ? who : `${who}, quota project ${quota}`;
+    switch (type) {
+        case 'service_account':
+            return `service account ${text('client_email') ?? '(no client_email)'}`;
+        case 'authorized_user': {
+            const account = text('account');
+            // gcloud's own file says nothing about whose it is; any other user
+            // login is named as one, so a stray file can't pass as yours.
+            const named = path === gcloudApplicationDefaultPath(hostEnv)
+                ? `your gcloud application-default login, ${account ?? 'a user account'}`
+                : `a gcloud user login${account === undefined ? '' : `, ${account}`}`;
+            return withQuota(named);
+        }
+        case 'impersonated_service_account': {
+            const url = text('service_account_impersonation_url') ?? '';
+            const target = /\/serviceAccounts\/([^/:]+)/.exec(url)?.[1];
+            return withQuota(`impersonating ${target ?? 'a service account'}`);
+        }
+        case 'external_account':
+            return 'an external account (workload identity federation)';
+        default:
+            return `a "${type}" credentials file`;
+    }
+}
+/**
+ * Whether a registration is Vertex AI: the Gemini adapter, not on the
+ * Gemini Developer API (`api: developer`, the `gemini-api` preset).
+ */
+export function isVertexRegistration(input) {
+    return input.adapter_id === GEMINI_ADAPTER_ID && input.adapter_config?.api !== 'developer';
+}
+/**
+ * The line that says how to give Vertex providers credentials. `ids`
+ * names them; `GOOGLE_APPLICATION_CREDENTIALS` in the shell is offered
+ * when it names a file (not `/dev/null`, say, which only turns it off).
+ */
+export function vertexCredentialsHint(ids, hostEnv) {
+    const named = ids.length === 1 ? `Provider ${ids[0]}` : `Providers ${ids.join(', ')}`;
+    const shell = hostEnv.GOOGLE_APPLICATION_CREDENTIALS;
+    const fromShell = shell !== undefined && isAbsolute(shell) && existsSync(shell) && statSync(shell).isFile()
+        ? `, or ${DEV_GOOGLE_CREDENTIALS_VAR}=$GOOGLE_APPLICATION_CREDENTIALS`
+        : ' (or a credentials file)';
+    return `${named} (Vertex AI) ${ids.length === 1 ? 'has' : 'have'} no Google credentials: set ${DEV_GOOGLE_CREDENTIALS_VAR}=adc${fromShell}, in the pack's .env or the shell, and restart kindgi dev.`;
+}
+//# sourceMappingURL=google-credentials.js.map

package/dist/dev/google-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-credentials.js","sourceRoot":"","sources":["../../src/dev/google-credentials.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,+BAA+B,CAAC;AAE1E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAC3C,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAazD;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAyB,EACzB,OAAqD;IAErD,MAAM,GAAG,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IAC/E,IAAI,IAAY,CAAC;IACjB,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,GAAG,0BAA0B,wDAAwD,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,2DAA2D,0BAA0B,yCAAyC;aAClQ,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,GAAG,CAAC;IACb,CAAC;SAAM,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAChD,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,GAAG,0BAA0B,KAAK,GAAG,iBAAiB;aAChE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,GAAG,CAAC;IACb,CAAC;SAAM,CAAC;QACN,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,GAAG,0BAA0B,8HAA8H,GAAG,IAAI;SAC5K,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,GAAG,0BAA0B,KAAK,IAAI,wDAAwD;SACxG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAqD;IAErD,MAAM,IAAI,GAAG,sCAAsC,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAY,EACZ,UAAwD,EAAE;IAE1D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,IAAI,GAAG,MAA2C,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAsB,EAAE,CAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CACxC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,mBAAmB,KAAK,EAAE,CAAC;IAC/D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,mBAAmB,IAAI,CAAC,cAAc,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAC1E,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,mEAAmE;YACnE,8DAA8D;YAC9D,MAAM,KAAK,GACT,IAAI,KAAK,4BAA4B,CAAC,OAAO,CAAC;gBAC5C,CAAC,CAAC,0CAA0C,OAAO,IAAI,gBAAgB,EAAE;gBACzE,CAAC,CAAC,sBAAsB,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,EAAE,CAAC;YAC1E,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,8BAA8B,CAAC,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,mCAAmC,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO,SAAS,CAAC,iBAAiB,MAAM,IAAI,mBAAmB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,kBAAkB;YACrB,OAAO,oDAAoD,CAAC;QAC9D;YACE,OAAO,MAAM,IAAI,oBAAoB,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAGpC;IACC,OAAO,KAAK,CAAC,UAAU,KAAK,iBAAiB,IAAI,KAAK,CAAC,cAAc,EAAE,GAAG,KAAK,WAAW,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAsB,EACtB,OAAqD;IAErD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACtF,MAAM,KAAK,GAAG,OAAO,CAAC,8BAA8B,CAAC;IACrD,MAAM,SAAS,GACb,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE;QACvF,CAAC,CAAC,QAAQ,0BAA0B,kCAAkC;QACtE,CAAC,CAAC,0BAA0B,CAAC;IACjC,OAAO,GAAG,KAAK,gBAAgB,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,+BAA+B,0BAA0B,OAAO,SAAS,4DAA4D,CAAC;AACxM,CAAC"}

package/dist/dev/java-builder.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The `PackBuilder` of a Java pack. Maven compiles the pack
+ * (`target/classes`) and, the first time and whenever `pom.xml` changes,
+ * resolves its classpath. The build writes the classpath as an `@argfile`
+ * (`java.args`), which the indexer and the pack service pass to `java`, so
+ * their commands stay the same while the classpath changes; and it
+ * extracts the launcher (`kindgi-pack-java`) from the pack's own
+ * kindgi-pack jar, so the launcher always matches the service it starts.
+ *
+ * javac's errors come back located `file:line:col`, as the bundler's do for
+ * a Node pack. A build with errors leaves the previous pack service and
+ * index in place.
+ *
+ * The watch covers the pack's sources and resources (`src/main/**`) and
+ * `pom.xml`, with a scan behind it (`scan-backstop.ts`): `fs.watch` can
+ * drop events.
+ */
+import { watch } from 'node:fs';
+import { type JavaPackCode } from './pack-code.js';
+import type { PackBuilder } from './runners.js';
+import { type WatchEvents } from './shared-watch.js';
+/**
+ * The dependency plugin, named in full: Maven then needs no plugin-prefix
+ * lookup (remote metadata), and every pack resolves its classpath with the
+ * same version.
+ */
+export declare const MAVEN_DEPENDENCY_PLUGIN = "org.apache.maven.plugins:maven-dependency-plugin:3.11.0";
+export interface JavaPackBuilderOptions {
+    readonly packDir: string;
+    readonly code: JavaPackCode;
+    /** The pack's environment (Maven and `java` run with it, plus `JAVA_HOME`). */
+    readonly env: () => Promise<Readonly<Record<string, string>>>;
+    readonly debounceMs?: number;
+    /** How often the sources are also scanned (`fs.watch` can miss events). */
+    readonly scanIntervalMs?: number;
+    /** Test seam: `node:fs.watch` (a watch of its own, when not `share`). */
+    readonly watchFs?: typeof watch;
+    /** Share the pack directory's watch with its other watchers (default: on macOS). */
+    readonly share?: boolean;
+    /** Test seam: `node:fs/promises`'s `watch`, which a shared watch uses. */
+    readonly watchEvents?: WatchEvents;
+    /** Test seam: what the sources are now (`javaSourcesSignature`). */
+    readonly scanSources?: () => Promise<string>;
+}
+/** Whether a change to `relPath` (relative to the pack root) is a change to the pack's code. */
+export declare function isJavaSourceChange(relPath: string): boolean;
+/** The sources a build reads, with their mtimes and sizes (`scan-backstop.ts`). */
+export declare function javaSourcesSignature(packDir: string): Promise<string>;
+/**
+ * javac's errors in Maven's output, `file:line:col: message` with the file
+ * relative to the pack root; the last lines of the output when Maven failed
+ * some other way.
+ */
+export declare function mavenErrors(output: string, packDirs: string | readonly string[], exitCode: number | null): string[];
+export declare function createJavaPackBuilder(options: JavaPackBuilderOptions): PackBuilder;
+//# sourceMappingURL=java-builder.d.ts.map

package/dist/dev/java-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"java-builder.d.ts","sourceRoot":"","sources":["../../src/dev/java-builder.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAkB,KAAK,EAAE,MAAM,SAAS,CAAC;AAMhD,OAAO,EAAE,KAAK,YAAY,EAAW,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAa,WAAW,EAAE,MAAM,cAAc,CAAC;AAO3D,OAAO,EAA0B,KAAK,WAAW,EAAoB,MAAM,mBAAmB,CAAC;AAI/F;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,4DAA4D,CAAC;AAGjG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC,oFAAoF;IACpF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC,oEAAoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9C;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAQ3D;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMrE;AAKD;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,EACpC,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,EAAE,CAwBV;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,WAAW,CA4GlF"}

package/dist/dev/java-builder.js

@@ -0,0 +1,204 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * The `PackBuilder` of a Java pack. Maven compiles the pack
+ * (`target/classes`) and, the first time and whenever `pom.xml` changes,
+ * resolves its classpath. The build writes the classpath as an `@argfile`
+ * (`java.args`), which the indexer and the pack service pass to `java`, so
+ * their commands stay the same while the classpath changes; and it
+ * extracts the launcher (`kindgi-pack-java`) from the pack's own
+ * kindgi-pack jar, so the launcher always matches the service it starts.
+ *
+ * javac's errors come back located `file:line:col`, as the bundler's do for
+ * a Node pack. A build with errors leaves the previous pack service and
+ * index in place.
+ *
+ * The watch covers the pack's sources and resources (`src/main/**`) and
+ * `pom.xml`, with a scan behind it (`scan-backstop.ts`): `fs.watch` can
+ * drop events.
+ */
+import { watch } from 'node:fs';
+import { mkdir, readFile, realpath, stat } from 'node:fs/promises';
+import { watch as watchEventsReal } from 'node:fs/promises';
+import { delimiter, isAbsolute, join, relative } from 'node:path';
+import { runProcess, writeJvmRunFiles } from './jvm-run-files.js';
+import { javaEnv } from './pack-code.js';
+import { DEFAULT_SCAN_INTERVAL_MS, scanSignature, startScanBackstop, } from './scan-backstop.js';
+import { SHARE_WATCH_BY_DEFAULT, directoryWatches } from './shared-watch.js';
+const SKIPPED_DIRS = ['target', 'node_modules', 'build', 'out'];
+/**
+ * The dependency plugin, named in full: Maven then needs no plugin-prefix
+ * lookup (remote metadata), and every pack resolves its classpath with the
+ * same version.
+ */
+export const MAVEN_DEPENDENCY_PLUGIN = 'org.apache.maven.plugins:maven-dependency-plugin:3.11.0';
+const DEFAULT_DEBOUNCE_MS = 150;
+/** Whether a change to `relPath` (relative to the pack root) is a change to the pack's code. */
+export function isJavaSourceChange(relPath) {
+    const segments = relPath.split(/[\\/]/);
+    if (segments.slice(0, -1).some((s) => s.startsWith('.') || SKIPPED_DIRS.includes(s))) {
+        return false;
+    }
+    const name = segments[segments.length - 1] ?? '';
+    if (name.startsWith('.'))
+        return false;
+    return relPath === 'pom.xml' || (segments[0] === 'src' && segments[1] === 'main');
+}
+/** The sources a build reads, with their mtimes and sizes (`scan-backstop.ts`). */
+export function javaSourcesSignature(packDir) {
+    return scanSignature({
+        folders: [{ abs: packDir, rel: '' }],
+        includes: isJavaSourceChange,
+        skipDir: (name) => name.startsWith('.') || SKIPPED_DIRS.includes(name),
+    });
+}
+/** One located compiler error, from Maven's `[ERROR] /abs/File.java:[line,col] message`. */
+const COMPILER_ERROR = /^\[ERROR\] (.+\.java):\[(\d+),(\d+)\] (.*)$/;
+/**
+ * javac's errors in Maven's output, `file:line:col: message` with the file
+ * relative to the pack root; the last lines of the output when Maven failed
+ * some other way.
+ */
+export function mavenErrors(output, packDirs, exitCode) {
+    // The pack root as given, and as Maven may report it (symlinks resolved: /var → /private/var).
+    const roots = typeof packDirs === 'string' ? [packDirs] : packDirs;
+    const located = [];
+    for (const line of output.split('\n')) {
+        const m = COMPILER_ERROR.exec(line.trimEnd());
+        if (m === null)
+            continue;
+        const [, file = '', row = '0', col = '0', message = ''] = m;
+        let rel = file;
+        if (isAbsolute(file)) {
+            const inside = roots
+                .map((root) => relative(root, file))
+                .find((r) => !r.startsWith('..') && !isAbsolute(r));
+            rel = (inside ?? file).split(/[\\/]/).join('/');
+        }
+        located.push(`${rel}:${row}:${col}: ${message}`);
+    }
+    if (located.length > 0)
+        return [...new Set(located)];
+    const tail = output
+        .split('\n')
+        .map((l) => l.trimEnd())
+        .filter((l) => l !== '' && !l.startsWith('[INFO]'))
+        .slice(-8);
+    return [`the pack's Maven build failed (exit ${exitCode}):`, ...tail.map((l) => `    ${l}`)];
+}
+export function createJavaPackBuilder(options) {
+    const { packDir, code } = options;
+    const watchFs = options.watchFs ?? watch;
+    const scan = options.scanSources ?? (() => javaSourcesSignature(packDir));
+    const classpathFile = join(code.workDir, 'classpath.txt');
+    let resolvedFor;
+    let watcher;
+    let unsubscribe;
+    let backstop;
+    let timer;
+    async function build() {
+        const env = javaEnv(code, await options.env());
+        await mkdir(code.workDir, { recursive: true });
+        // The classpath is resolved (online) the first time and when pom.xml
+        // changes; otherwise the compile runs offline, so a save never waits on
+        // the network.
+        const pom = await signatureOf(join(packDir, 'pom.xml'));
+        const resolve = resolvedFor === undefined || resolvedFor !== pom;
+        const [program, ...prefix] = code.maven;
+        const goals = resolve
+            ? [
+                'compile',
+                `${MAVEN_DEPENDENCY_PLUGIN}:build-classpath`,
+                `-Dmdep.outputFile=${classpathFile}`,
+            ]
+            : ['-o', 'compile'];
+        const maven = await runProcess(program, [...prefix, '-B', '-q', ...goals], { ...env, ...code.mavenEnv }, packDir);
+        if (maven.code !== 0) {
+            const roots = [packDir, await realpath(packDir).catch(() => packDir)];
+            return {
+                kind: 'err',
+                errors: mavenErrors(`${maven.stdout}\n${maven.stderr}`, roots, maven.code),
+            };
+        }
+        if (resolve)
+            resolvedFor = pom;
+        let dependencies;
+        try {
+            dependencies = (await readFile(classpathFile, 'utf8'))
+                .trim()
+                .split(delimiter)
+                .filter((p) => p !== '');
+        }
+        catch (cause) {
+            return {
+                kind: 'err',
+                errors: [`Maven wrote no classpath (${classpathFile}): ${cause.message}`],
+            };
+        }
+        const errors = await writeJvmRunFiles({
+            code,
+            packDir,
+            env,
+            classpath: [join(packDir, 'target', 'classes'), ...dependencies],
+            missingKindgiPack: "com.kindgi.pack isn't on the pack's classpath: add the com.kindgi:kindgi-pack dependency to pom.xml.",
+        });
+        if (errors.length > 0)
+            return { kind: 'err', errors };
+        return { kind: 'ok', bundleMap: {} };
+    }
+    return {
+        build,
+        async watch(onBuild) {
+            if (watcher !== undefined || unsubscribe !== undefined)
+                return;
+            const schedule = () => {
+                if (timer !== undefined)
+                    clearTimeout(timer);
+                timer = setTimeout(() => {
+                    timer = undefined;
+                    void (backstop?.mark() ?? Promise.resolve()).then(build).then(onBuild);
+                }, options.debounceMs ?? DEFAULT_DEBOUNCE_MS);
+            };
+            if (options.share ?? SHARE_WATCH_BY_DEFAULT) {
+                unsubscribe = directoryWatches(options.watchEvents ?? watchEventsReal).subscribe(packDir, (rel) => {
+                    if (rel !== undefined && isJavaSourceChange(rel))
+                        schedule();
+                }, schedule);
+            }
+            else {
+                watcher = watchFs(packDir, { recursive: true }, (_event, filename) => {
+                    if (filename === null || !isJavaSourceChange(filename.toString()))
+                        return;
+                    schedule();
+                });
+            }
+            backstop = await startScanBackstop({
+                scan,
+                intervalMs: options.scanIntervalMs ?? DEFAULT_SCAN_INTERVAL_MS,
+                onChange: schedule,
+            });
+        },
+        // New or removed files need no entry list: Maven compiles what is there.
+        syncEntries: () => Promise.resolve(false),
+        async dispose() {
+            if (timer !== undefined)
+                clearTimeout(timer);
+            backstop?.stop();
+            backstop = undefined;
+            unsubscribe?.();
+            unsubscribe = undefined;
+            watcher?.close();
+            watcher = undefined;
+        },
+    };
+}
+async function signatureOf(file) {
+    try {
+        const s = await stat(file);
+        return `${s.mtimeMs}:${s.size}`;
+    }
+    catch {
+        return 'missing';
+    }
+}
+//# sourceMappingURL=java-builder.js.map

package/dist/dev/java-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"java-builder.js","sourceRoot":"","sources":["../../src/dev/java-builder.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAkB,KAAK,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAElE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAqB,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EACL,wBAAwB,EAExB,aAAa,EACb,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAoB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE/F,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,yDAAyD,CAAC;AACjG,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAoBhC,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,OAAO,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;AACpF,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QACpC,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;KACvE,CAAC,CAAC;AACL,CAAC;AAED,4FAA4F;AAC5F,MAAM,cAAc,GAAG,6CAA6C,CAAC;AAErE;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,QAAoC,EACpC,QAAuB;IAEvB,+FAA+F;IAC/F,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK;iBACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;iBACnC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM;SAChB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;SAClD,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACb,OAAO,CAAC,uCAAuC,QAAQ,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC1D,IAAI,WAA+B,CAAC;IACpC,IAAI,OAA8B,CAAC;IACnC,IAAI,WAAqC,CAAC;IAC1C,IAAI,QAAkC,CAAC;IACvC,IAAI,KAAgD,CAAC;IAErD,KAAK,UAAU,KAAK;QAClB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,qEAAqE;QACrE,wEAAwE;QACxE,eAAe;QACf,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,GAAG,CAAC;QACjE,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO;YACnB,CAAC,CAAC;gBACE,SAAS;gBACT,GAAG,uBAAuB,kBAAkB;gBAC5C,qBAAqB,aAAa,EAAE;aACrC;YACH,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,UAAU,CAC5B,OAAO,EACP,CAAC,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EACjC,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAC5B,OAAO,CACR,CAAC;QACF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YACtE,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;aAC3E,CAAC;QACJ,CAAC;QACD,IAAI,OAAO;YAAE,WAAW,GAAG,GAAG,CAAC;QAC/B,IAAI,YAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,YAAY,GAAG,CAAC,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;iBACnD,IAAI,EAAE;iBACN,KAAK,CAAC,SAAS,CAAC;iBAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,CAAC,6BAA6B,aAAa,MAAO,KAAe,CAAC,OAAO,EAAE,CAAC;aACrF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,IAAI;YACJ,OAAO;YACP,GAAG;YACH,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,YAAY,CAAC;YAChE,iBAAiB,EACf,sGAAsG;SACzG,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK,CAAC,KAAK,CAAC,OAAO;YACjB,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAO;YAC/D,MAAM,QAAQ,GAAG,GAAS,EAAE;gBAC1B,IAAI,KAAK,KAAK,SAAS;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC7C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,KAAK,GAAG,SAAS,CAAC;oBAClB,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzE,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;YAChD,CAAC,CAAC;YACF,IAAI,OAAO,CAAC,KAAK,IAAI,sBAAsB,EAAE,CAAC;gBAC5C,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC,CAAC,SAAS,CAC9E,OAAO,EACP,CAAC,GAAG,EAAE,EAAE;oBACN,IAAI,GAAG,KAAK,SAAS,IAAI,kBAAkB,CAAC,GAAG,CAAC;wBAAE,QAAQ,EAAE,CAAC;gBAC/D,CAAC,EACD,QAAQ,CACT,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;oBACnE,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;wBAAE,OAAO;oBAC1E,QAAQ,EAAE,CAAC;gBACb,CAAC,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,GAAG,MAAM,iBAAiB,CAAC;gBACjC,IAAI;gBACJ,UAAU,EAAE,OAAO,CAAC,cAAc,IAAI,wBAAwB;gBAC9D,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;QACL,CAAC;QACD,yEAAyE;QACzE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QACzC,KAAK,CAAC,OAAO;YACX,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,QAAQ,EAAE,IAAI,EAAE,CAAC;YACjB,QAAQ,GAAG,SAAS,CAAC;YACrB,WAAW,EAAE,EAAE,CAAC;YAChB,WAAW,GAAG,SAAS,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,CAAC;YACjB,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/dev/jvm-run-files.d.ts

@@ -0,0 +1,29 @@
+import { type JvmPackCode } from './pack-code.js';
+/** A classpath as a `java` `@argfile` line: quoted, with `\` and `"` escaped. */
+export declare function argsFileText(classpath: readonly string[]): string;
+/**
+ * Writes the `@argfile` for `classpath` and, when the classpath changed or
+ * the launcher is missing, extracts the launcher with it.
+ *
+ * @param missingKindgiPack what to say when kindgi-pack isn't on the
+ *     classpath (where the pack's build declares its dependency)
+ * @returns the build errors to show; empty when both are written
+ */
+export declare function writeJvmRunFiles(opts: {
+    readonly code: JvmPackCode;
+    readonly packDir: string;
+    readonly env: Readonly<Record<string, string>>;
+    readonly classpath: readonly string[];
+    readonly missingKindgiPack: string;
+}): Promise<string[]>;
+export declare function writeAtomically(file: string, text: string): Promise<void>;
+/**
+ * A child process, to its end: its exit code and output. With `timeoutMs`,
+ * a child still running then is killed (`SIGTERM`) and its code is null.
+ */
+export declare function runProcess(program: string, args: readonly string[], env: Readonly<Record<string, string>>, cwd: string, timeoutMs?: number): Promise<{
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}>;
+//# sourceMappingURL=jvm-run-files.d.ts.map

package/dist/dev/jvm-run-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jvm-run-files.d.ts","sourceRoot":"","sources":["../../src/dev/jvm-run-files.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,WAAW,EAA8B,MAAM,gBAAgB,CAAC;AAE9E,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAGjE;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAwBpB;AAWD,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI/E;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACrC,GAAG,EAAE,MAAM,EACX,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2BlE"}

package/dist/dev/jvm-run-files.js

@@ -0,0 +1,94 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+/**
+ * What a JVM pack's build leaves for the indexer and the pack service,
+ * whichever tool built it (Maven, sbt): the classpath as an `@argfile`
+ * (`java.args`), which they pass to `java`, so their commands stay the same
+ * while the classpath changes; and the launcher (`kindgi-pack-java`),
+ * extracted from the pack's own kindgi-pack jar, so it always matches the
+ * service it starts.
+ */
+import { spawn } from 'node:child_process';
+import { readFile, rename, stat, writeFile } from 'node:fs/promises';
+import { delimiter } from 'node:path';
+import { javaArgsFile, javaLauncher } from './pack-code.js';
+/** A classpath as a `java` `@argfile` line: quoted, with `\` and `"` escaped. */
+export function argsFileText(classpath) {
+    const quoted = classpath.join(delimiter).replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+    return `-cp "${quoted}"\n`;
+}
+/**
+ * Writes the `@argfile` for `classpath` and, when the classpath changed or
+ * the launcher is missing, extracts the launcher with it.
+ *
+ * @param missingKindgiPack what to say when kindgi-pack isn't on the
+ *     classpath (where the pack's build declares its dependency)
+ * @returns the build errors to show; empty when both are written
+ */
+export async function writeJvmRunFiles(opts) {
+    const argsText = argsFileText(opts.classpath);
+    const argsPath = javaArgsFile(opts.code);
+    const changed = (await readFile(argsPath, 'utf8').catch(() => '')) !== argsText;
+    if (changed)
+        await writeAtomically(argsPath, argsText);
+    const launcherPath = javaLauncher(opts.code);
+    if (changed || !(await exists(launcherPath))) {
+        const launcher = await runProcess(opts.code.java, [`@${argsPath}`, 'com.kindgi.pack.Main', 'launcher'], opts.env, opts.packDir);
+        if (launcher.code !== 0 || !launcher.stdout.startsWith('#!')) {
+            const missing = /ClassNotFoundException|Could not find or load main class/.test(launcher.stderr);
+            return missing
+                ? [opts.missingKindgiPack]
+                : [`kindgi-pack's launcher could not be written: ${launcher.stderr.trim()}`];
+        }
+        await writeAtomically(launcherPath, launcher.stdout);
+    }
+    return [];
+}
+async function exists(file) {
+    try {
+        await stat(file);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function writeAtomically(file, text) {
+    const tmp = `${file}.tmp-${process.pid}`;
+    await writeFile(tmp, text, 'utf8');
+    await rename(tmp, file);
+}
+/**
+ * A child process, to its end: its exit code and output. With `timeoutMs`,
+ * a child still running then is killed (`SIGTERM`) and its code is null.
+ */
+export function runProcess(program, args, env, cwd, timeoutMs) {
+    return new Promise((resolvePromise) => {
+        const child = spawn(program, [...args], { env, cwd, stdio: ['ignore', 'pipe', 'pipe'] });
+        const timer = timeoutMs === undefined
+            ? undefined
+            : setTimeout(() => {
+                stderr += `\n(stopped after ${timeoutMs} ms)`;
+                child.kill('SIGTERM');
+            }, timeoutMs);
+        let stdout = '';
+        let stderr = '';
+        child.stdout.on('data', (chunk) => {
+            stdout += chunk.toString('utf8');
+        });
+        child.stderr.on('data', (chunk) => {
+            stderr += chunk.toString('utf8');
+        });
+        child.once('error', (cause) => {
+            if (timer !== undefined)
+                clearTimeout(timer);
+            resolvePromise({ code: null, stdout, stderr: cause.message });
+        });
+        child.once('close', (code) => {
+            if (timer !== undefined)
+                clearTimeout(timer);
+            resolvePromise({ code, stdout, stderr });
+        });
+    });
+}
+//# sourceMappingURL=jvm-run-files.js.map

package/dist/dev/jvm-run-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jvm-run-files.js","sourceRoot":"","sources":["../../src/dev/jvm-run-files.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAoB,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9E,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,SAA4B;IACvD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrF,OAAO,QAAQ,MAAM,KAAK,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAMtC;IACC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC;IAChF,IAAI,OAAO;QAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,OAAO,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,EACd,CAAC,IAAI,QAAQ,EAAE,EAAE,sBAAsB,EAAE,UAAU,CAAC,EACpD,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,OAAO,CACb,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,0DAA0D,CAAC,IAAI,CAC7E,QAAQ,CAAC,MAAM,CAChB,CAAC;YACF,OAAO,OAAO;gBACZ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBAC1B,CAAC,CAAC,CAAC,gDAAgD,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,eAAe,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IAC9D,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,IAAuB,EACvB,GAAqC,EACrC,GAAW,EACX,SAAkB;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,KAAK,GACT,SAAS,KAAK,SAAS;YACrB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,MAAM,IAAI,oBAAoB,SAAS,MAAM,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,SAAS,CAAC,CAAC;QACpB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/dev/lines.d.ts

@@ -0,0 +1,13 @@
+/**
+ * A process's output as lines. A chunk can end mid-line (a long JSON
+ * record often does), so each line goes to `onLine` once it's complete;
+ * `end()` passes on what's left. Empty lines are skipped, and a `\r`
+ * before the line break is dropped. Give it text: a stream with
+ * `setEncoding('utf8')` never splits a character between chunks.
+ */
+export interface LineReader {
+    push(chunk: string): void;
+    end(): void;
+}
+export declare function lineReader(onLine: (line: string) => void): LineReader;
+//# sourceMappingURL=lines.d.ts.map

package/dist/dev/lines.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lines.d.ts","sourceRoot":"","sources":["../../src/dev/lines.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,IAAI,IAAI,CAAC;CACb;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,UAAU,CAkBrE"}

package/dist/dev/lines.js

@@ -0,0 +1,24 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+export function lineReader(onLine) {
+    let rest = '';
+    const emit = (line) => {
+        const text = line.endsWith('\r') ? line.slice(0, -1) : line;
+        if (text !== '')
+            onLine(text);
+    };
+    return {
+        push(chunk) {
+            const parts = (rest + chunk).split('\n');
+            rest = parts.pop() ?? '';
+            for (const part of parts)
+                emit(part);
+        },
+        end() {
+            const last = rest;
+            rest = '';
+            emit(last);
+        },
+    };
+}
+//# sourceMappingURL=lines.js.map

package/dist/dev/lines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lines.js","sourceRoot":"","sources":["../../src/dev/lines.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAcjC,MAAM,UAAU,UAAU,CAAC,MAA8B;IACvD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,IAAI,GAAG,CAAC,IAAY,EAAQ,EAAE;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,OAAO;QACL,IAAI,CAAC,KAAK;YACR,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,GAAG;YACD,MAAM,IAAI,GAAG,IAAI,CAAC;YAClB,IAAI,GAAG,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}