@knpkv/hub-app 0.3.0 → 0.4.0

package/README.md

@@ -6,9 +6,14 @@ An app is always its own process:
 
 - **standalone**: `my-app [serve] [--port <n>] [--no-open]` listens on loopback, prints a one-time sign-in link and
   serves a minimal shell at `/`.
-- **attached**: `my-app --socket <path>` listens on an owner-only unix socket. The hub authenticates each browser
-  request, proxies it there with the caller in `x-hub-caller` and a grant in `x-hub-grant`, and mounts the app's
-  client in its own shell. `HUB_URL` and `HUB_APP_TOKEN_FILE` point the app at the hub's services.
+- **attached**: the hub starts `my-app --attach` itself and writes one handshake line on its stdin: the endpoint to
+  listen on (a unix socket, or a named pipe on Windows), the hub's URL, a token and a secret, all fresh per start.
+  The app answers only requests that carry the secret. The hub authenticates each browser request, proxies it
+  there with the caller in `x-hub-caller` and a grant in `x-hub-grant`, and mounts the app's client in its own
+  shell. When the hub closes stdin, the app stops.
+
+An app's package.json names its script for the hub: `"hubApp": { "bin": "dist/bin.js", "contract": 1, "services":
+[...] }`.
 
 ## Write an app
 

package/dist/handshake.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The attached app's stdin: line 1 is the hub's {@link HubHandshake}; after it, stdin only signals stop.
+ *
+ * **Mental model**
+ *
+ * - The hub writes one JSON line at spawn and keeps the pipe open. The app waits at most 5 s for it and reads at
+ *   most 4 KiB, so a process started by hand with `--attach` and no hub exits with a message instead of hanging.
+ * - After line 1, further bytes are read and dropped. The end of stdin (the hub stopped it, or the hub died) is
+ *   the app's stop signal: `closed` completes and the runner shuts its listener down.
+ *
+ * @module
+ */
+import { Effect, type PlatformError, Stream } from "effect";
+import { AppStartError, HubHandshake } from "./manifest.js";
+/** How long the app waits for line 1, and its largest size. */
+export declare const handshakeLimits: {
+    millis: number;
+    bytes: number;
+};
+/**
+ * Start reading `stdin` in the caller's scope. `handshake` is line 1 (or `AppStartError{handshake}`); `closed`
+ * completes when stdin ends.
+ */
+export declare const readHandshake: (stdin: Stream.Stream<Uint8Array<ArrayBufferLike>, PlatformError.PlatformError, never>) => Effect.Effect<{
+    handshake: Effect.Effect<HubHandshake, AppStartError, never>;
+    closed: Effect.Effect<void, never, never>;
+}, never, import("effect/Scope").Scope>;
+//# sourceMappingURL=handshake.d.ts.map

package/dist/handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAY,MAAM,EAAS,KAAK,aAAa,EAAe,MAAM,EAAE,MAAM,QAAQ,CAAA;AACzF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE3D,+DAA+D;AAC/D,eAAO,MAAM,eAAe;IAAK,MAAM;IAAS,KAAK;CAAS,CAAA;AAY9D;;;GAGG;AACH,eAAO,MAAM,aAAa;;;uCAyCxB,CAAA"}

package/dist/handshake.js

@@ -0,0 +1,59 @@
+/**
+ * The attached app's stdin: line 1 is the hub's {@link HubHandshake}; after it, stdin only signals stop.
+ *
+ * **Mental model**
+ *
+ * - The hub writes one JSON line at spawn and keeps the pipe open. The app waits at most 5 s for it and reads at
+ *   most 4 KiB, so a process started by hand with `--attach` and no hub exits with a message instead of hanging.
+ * - After line 1, further bytes are read and dropped. The end of stdin (the hub stopped it, or the hub died) is
+ *   the app's stop signal: `closed` completes and the runner shuts its listener down.
+ *
+ * @module
+ */
+import { Deferred, Effect, Fiber, Ref, Schema, Stream } from "effect";
+import { AppStartError, HubHandshake } from "./manifest.js";
+/** How long the app waits for line 1, and its largest size. */
+export const handshakeLimits = { millis: 5_000, bytes: 4_096 };
+const decodeHandshake = Schema.decodeUnknownEffect(Schema.fromJsonString(HubHandshake));
+const handshakeError = (cause) => new AppStartError({ reason: "handshake", cause });
+const concat = (left, right) => {
+    const joined = new Uint8Array(left.length + right.length);
+    joined.set(left);
+    joined.set(right, left.length);
+    return joined;
+};
+/**
+ * Start reading `stdin` in the caller's scope. `handshake` is line 1 (or `AppStartError{handshake}`); `closed`
+ * completes when stdin ends.
+ */
+export const readHandshake = Effect.fn("HubApp.readHandshake")(function* (stdin) {
+    const first = yield* Deferred.make();
+    // The bytes of line 1 read so far, or null once line 1 is decided.
+    const pending = yield* Ref.make(new Uint8Array(0));
+    const take = (chunk) => Ref.modify(pending, (buffer) => {
+        if (buffer === null)
+            return [Effect.void, null];
+        const joined = concat(buffer, chunk);
+        const newline = joined.indexOf(10);
+        if (newline === -1 || newline > handshakeLimits.bytes) {
+            return joined.length > handshakeLimits.bytes
+                ? [Deferred.fail(first, handshakeError("the handshake line is over 4 KiB")), null]
+                : [Effect.void, joined];
+        }
+        const line = new TextDecoder().decode(joined.subarray(0, newline));
+        // A fixed cause: the decoder's message would quote the line, token and secret included, into the app's log.
+        return [
+            Deferred.complete(first, decodeHandshake(line).pipe(Effect.mapError(() => handshakeError("the handshake line does not decode")))),
+            null
+        ];
+    }).pipe(Effect.flatten);
+    const reader = yield* stdin.pipe(Stream.runForEach(take), Effect.exit, Effect.andThen(Deferred.fail(first, handshakeError("stdin closed before the handshake"))), Effect.forkScoped);
+    return {
+        handshake: Deferred.await(first).pipe(Effect.timeoutOrElse({
+            duration: handshakeLimits.millis,
+            orElse: () => Effect.fail(handshakeError("no handshake within 5 seconds: start this app from the hub"))
+        })),
+        closed: Fiber.await(reader).pipe(Effect.asVoid)
+    };
+});
+//# sourceMappingURL=handshake.js.map

package/dist/handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAsB,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACzF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE3D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AAE9D,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAA;AACvF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;AAE5F,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAE,KAAiB,EAAc,EAAE;IACjE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;IACzD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EACtE,KAA6D;IAE7D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAA+B,CAAA;IACjE,mEAAmE;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAoB,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IACrE,MAAM,IAAI,GAAG,CAAC,KAAiB,EAAE,EAAE,CACjC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,EAAwD,EAAE;QACnF,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAClC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC;YACtD,OAAO,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC,KAAK;gBAC1C,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,kCAAkC,CAAC,CAAC,EAAE,IAAI,CAAC;gBAClF,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3B,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAClE,4GAA4G;QAC5G,OAAO;YACL,QAAQ,CAAC,QAAQ,CACf,KAAK,EACL,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,oCAAoC,CAAC,CAAC,CAAC,CACxG;YACD,IAAI;SACL,CAAA;IACH,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAC9B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EACvB,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,mCAAmC,CAAC,CAAC,CAAC,EACzF,MAAM,CAAC,UAAU,CAClB,CAAA;IACD,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACnC,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ,EAAE,eAAe,CAAC,MAAM;YAChC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,4DAA4D,CAAC,CAAC;SACxG,CAAC,CACH;QACD,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;KAChD,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/hub-client.d.ts

@@ -12,7 +12,7 @@
  *
  * @module
  */
-import { Context, Effect, FileSystem, Layer, Schema } from "effect";
+import { Context, Effect, Layer, Redacted, Schema } from "effect";
 import { HttpClient } from "effect/http";
 import { type AppId, GrantInvalid, type ShellService, ShellServiceUnavailable } from "./manifest.js";
 import { type FleetReadKind, HostInfo, JobAccepted } from "./wire.js";
@@ -40,13 +40,13 @@ export declare const standaloneShellServices: (host: HostInfo) => ShellServiceCa
 export interface AttachedOptions {
     readonly app: AppId;
     readonly hubUrl: string;
-    /** Read on every call: the hub issues a fresh token each time it starts, and the app outlives that. */
-    readonly tokenFile: string;
+    /** This spawn's hub token, from the handshake. */
+    readonly token: Redacted.Redacted<string>;
     readonly declared: ReadonlyArray<ShellService>;
 }
 /** Attached: every call goes to the hub's loopback listener with this app's current token. */
-export declare const attachedShellServices: (options: AttachedOptions) => Effect.Effect<ShellServiceCalls, never, FileSystem.FileSystem | HttpClient.HttpClient>;
-export declare const attachedLayer: (options: AttachedOptions) => Layer.Layer<ShellServices, never, FileSystem.FileSystem | HttpClient.HttpClient>;
+export declare const attachedShellServices: (options: AttachedOptions) => Effect.Effect<ShellServiceCalls, never, HttpClient.HttpClient>;
+export declare const attachedLayer: (options: AttachedOptions) => Layer.Layer<ShellServices, never, HttpClient.HttpClient>;
 export declare const standaloneLayer: (host: HostInfo) => Layer.Layer<ShellServices, never, never>;
 export {};
 //# sourceMappingURL=hub-client.d.ts.map

package/dist/hub-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hub-client.d.ts","sourceRoot":"","sources":["../src/hub-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACnE,OAAO,EAAE,UAAU,EAA8C,MAAM,aAAa,CAAA;AACpF,OAAO,EAAE,KAAK,KAAK,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEpG,OAAO,EAAsC,KAAK,aAAa,EAAE,QAAQ,EAAc,WAAW,EAAE,MAAM,WAAW,CAAA;;;;;AAErH,sGAAsG;AACtG,qBAAa,mBAAoB,SAAQ,wBAGvC;CAAG;AAEL,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAA;IAC/D,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,CAClB,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,GAAG,mBAAmB,CAAC,CAAA;IAC9E,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,CAClB,OAAO,EAAE,MAAM,CAAC,IAAI,KACjB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,uBAAuB,GAAG,mBAAmB,GAAG,YAAY,CAAC,CAAA;IAC7F,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,CAClB,IAAI,EAAE,QAAQ,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM,KACT,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,GAAG,mBAAmB,GAAG,YAAY,CAAC,CAAA;CACvF;;AAED,qBAAa,aAAc,SAAQ,kBAElC;CAAG;AAEJ,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,SAAU,QAAQ,KAAG,iBAQxD,CAAA;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,uGAAuG;IACvG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC,CAAA;CAC/C;AAED,8FAA8F;AAC9F,eAAO,MAAM,qBAAqB,sHAgGhC,CAAA;AAEF,eAAO,MAAM,aAAa,YAAa,eAAe,qFAAgE,CAAA;AAEtH,eAAO,MAAM,eAAe,SAAU,QAAQ,6CAAgE,CAAA"}
+{"version":3,"file":"hub-client.d.ts","sourceRoot":"","sources":["../src/hub-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACjE,OAAO,EAAE,UAAU,EAA8C,MAAM,aAAa,CAAA;AACpF,OAAO,EAAE,KAAK,KAAK,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEpG,OAAO,EAAsC,KAAK,aAAa,EAAE,QAAQ,EAAc,WAAW,EAAE,MAAM,WAAW,CAAA;;;;;AAErH,sGAAsG;AACtG,qBAAa,mBAAoB,SAAQ,wBAGvC;CAAG;AAEL,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAA;IAC/D,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,CAClB,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,GAAG,mBAAmB,CAAC,CAAA;IAC9E,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,CAClB,OAAO,EAAE,MAAM,CAAC,IAAI,KACjB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,uBAAuB,GAAG,mBAAmB,GAAG,YAAY,CAAC,CAAA;IAC7F,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,CAClB,IAAI,EAAE,QAAQ,GAAG,SAAS,EAC1B,IAAI,EAAE,MAAM,KACT,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,GAAG,mBAAmB,GAAG,YAAY,CAAC,CAAA;CACvF;;AAED,qBAAa,aAAc,SAAQ,kBAElC;CAAG;AAEJ,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,SAAU,QAAQ,KAAG,iBAQxD,CAAA;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC,CAAA;CAC/C;AAED,8FAA8F;AAC9F,eAAO,MAAM,qBAAqB,8FA2FhC,CAAA;AAEF,eAAO,MAAM,aAAa,YAAa,eAAe,6DAAgE,CAAA;AAEtH,eAAO,MAAM,eAAe,SAAU,QAAQ,6CAAgE,CAAA"}

package/dist/hub-client.js

@@ -12,7 +12,7 @@
  *
  * @module
  */
-import { Context, Effect, FileSystem, Layer, Schema } from "effect";
+import { Context, Effect, Layer, Redacted, Schema } from "effect";
 import { HttpClient, HttpClientRequest } from "effect/http";
 import { GrantInvalid, ShellServiceUnavailable } from "./manifest.js";
 import { CurrentGrant } from "./route.js";
@@ -38,9 +38,8 @@ export const standaloneShellServices = (host) => {
 /** Attached: every call goes to the hub's loopback listener with this app's current token. */
 export const attachedShellServices = Effect.fn("HubApp.attachedShellServices")(function* (options) {
     const client = yield* HttpClient.HttpClient;
-    const fileSystem = yield* FileSystem.FileSystem;
     const url = (path) => new URL(path, options.hubUrl).href;
-    const authorized = (request) => fileSystem.readFileString(options.tokenFile).pipe(Effect.map((token) => request.pipe(HttpClientRequest.bearerToken(token.trim()), HttpClientRequest.setHeader(hubHeaders.app, options.app))));
+    const authorized = (request) => request.pipe(HttpClientRequest.bearerToken(Redacted.value(options.token)), HttpClientRequest.setHeader(hubHeaders.app, options.app));
     const declare = (service) => options.declared.includes(service)
         ? Effect.void
         : Effect.fail(new ShellServiceUnavailable({ service, reason: "undeclared" }));
@@ -48,7 +47,7 @@ export const attachedShellServices = Effect.fn("HubApp.attachedShellServices")(f
     /** One request; a refusal body maps to its typed failure, anything else non-2xx is the hub being down. */
     const send = (service, request, success) => Effect.gen(function* () {
         yield* declare(service);
-        const response = yield* request.pipe(Effect.flatMap(authorized), Effect.flatMap((built) => client.execute(built)), Effect.mapError(hubDown(service)));
+        const response = yield* request.pipe(Effect.map(authorized), Effect.flatMap((built) => client.execute(built)), Effect.mapError(hubDown(service)));
         const body = yield* response.json.pipe(Effect.mapError(hubDown(service)));
         if (response.status >= 200 && response.status < 300) {
             return yield* Schema.decodeUnknownEffect(success)(body).pipe(Effect.mapError(hubDown(service)));

package/dist/hub-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"hub-client.js","sourceRoot":"","sources":["../src/hub-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACnE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAA2B,MAAM,aAAa,CAAA;AACpF,OAAO,EAAc,YAAY,EAAqB,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAsB,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAErH,sGAAsG;AACtG,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,EAAuB,CAAC,qBAAqB,EAAE;IACxG,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;CACnD,CAAC;CAAG;AAoBL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAAoC,CACpF,8BAA8B,CAC/B;CAAG;AAEJ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAc,EAAqB,EAAE;IAC3E,MAAM,MAAM,GAAG,CAAC,OAAqB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IACrH,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAC1B,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;QACrC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;QACtC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;KACtC,CAAA;AACH,CAAC,CAAA;AAUD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EAAC,OAAwB;IAC/G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAA;IAChE,MAAM,UAAU,GAAG,CAAC,OAA4C,EAAE,EAAE,CAClE,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,OAAO,CAAC,IAAI,CACV,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAC3C,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CACzD,CACF,CACF,CAAA;IACH,MAAM,OAAO,GAAG,CAAC,OAAqB,EAAE,EAAE,CACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IACjF,MAAM,OAAO,GAAG,CAAC,OAAqB,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;IAE7G,0GAA0G;IAC1G,MAAM,IAAI,GAAG,CACX,OAAqB,EACrB,OAAoE,EACpE,OAAmD,EACnD,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACvB,MAAM,QAAQ,GAA0C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACzE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAC1B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAChD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAClC,CAAA;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACzE,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACjG,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAClH,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,eAAe;gBAClB,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YACvD,KAAK,eAAe;gBAClB,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YACvD,KAAK,YAAY;gBACf,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACpD,KAAK,oBAAoB;gBACvB,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA;YAC5D,KAAK,iBAAiB;gBACpB,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;YACzD,KAAK,YAAY;gBACf,OAAO,KAAK,CAAC,CAAC,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAA;YAC9E,KAAK,UAAU,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YACxE,KAAK,cAAc;gBACjB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAA;QACpC,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,wFAAwF;IACxF,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;QACjC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAChF,CAAC,CAAC,CAAA;IACF,OAAO,aAAa,CAAC,EAAE,CAAC;QACtB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CACjG,MAAM,CAAC,SAAS,CAAC;YACf,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;SACnD,CAAC,CACH;QACD,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzB,IAAI,CACF,YAAY,EACZ,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EACnG,MAAM,CAAC,IAAI,CACZ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CACrB,YAAY,CAAC,IAAI,CACf,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,IAAI,CACF,aAAa,EACb,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EACjG,WAAW,CACZ,CACF,CACF;QACH,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACxB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;YACjC,KAAK,CAAC,CAAC,IAAI,CACT,YAAY,EACZ,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EACrG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAClB,CAAA;QACH,CAAC,CAAC;KACL,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAwB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;AAEtH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAA"}
+{"version":3,"file":"hub-client.js","sourceRoot":"","sources":["../src/hub-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAA2B,MAAM,aAAa,CAAA;AACpF,OAAO,EAAc,YAAY,EAAqB,uBAAuB,EAAE,MAAM,eAAe,CAAA;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAsB,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAErH,sGAAsG;AACtG,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,EAAuB,CAAC,qBAAqB,EAAE;IACxG,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;CACnD,CAAC;CAAG;AAoBL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAAoC,CACpF,8BAA8B,CAC/B;CAAG;AAEJ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAc,EAAqB,EAAE;IAC3E,MAAM,MAAM,GAAG,CAAC,OAAqB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IACrH,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAC1B,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;QACrC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;QACtC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;KACtC,CAAA;AACH,CAAC,CAAA;AAUD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EAAC,OAAwB;IAC/G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC3C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAA;IAChE,MAAM,UAAU,GAAG,CAAC,OAA4C,EAAE,EAAE,CAClE,OAAO,CAAC,IAAI,CACV,iBAAiB,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAC5D,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CACzD,CAAA;IACH,MAAM,OAAO,GAAG,CAAC,OAAqB,EAAE,EAAE,CACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;IACjF,MAAM,OAAO,GAAG,CAAC,OAAqB,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;IAE7G,0GAA0G;IAC1G,MAAM,IAAI,GAAG,CACX,OAAqB,EACrB,OAAoE,EACpE,OAAmD,EACnD,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACvB,MAAM,QAAQ,GAA0C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACzE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EACtB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAChD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAClC,CAAA;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACzE,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACjG,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAClH,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,eAAe;gBAClB,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YACvD,KAAK,eAAe;gBAClB,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YACvD,KAAK,YAAY;gBACf,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACpD,KAAK,oBAAoB;gBACvB,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA;YAC5D,KAAK,iBAAiB;gBACpB,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;YACzD,KAAK,YAAY;gBACf,OAAO,KAAK,CAAC,CAAC,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAA;YAC9E,KAAK,UAAU,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YACxE,KAAK,cAAc;gBACjB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAA;QACpC,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,wFAAwF;IACxF,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;QACjC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAChF,CAAC,CAAC,CAAA;IACF,OAAO,aAAa,CAAC,EAAE,CAAC;QACtB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CACjG,MAAM,CAAC,SAAS,CAAC;YACf,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;SACnD,CAAC,CACH;QACD,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzB,IAAI,CACF,YAAY,EACZ,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EACnG,MAAM,CAAC,IAAI,CACZ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CACrB,YAAY,CAAC,IAAI,CACf,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,IAAI,CACF,aAAa,EACb,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EACjG,WAAW,CACZ,CACF,CACF;QACH,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACxB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;YACjC,KAAK,CAAC,CAAC,IAAI,CACT,YAAY,EACZ,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EACrG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAClB,CAAA;QACH,CAAC,CAAC;KACL,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAwB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;AAEtH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAA"}

package/dist/main.js

@@ -1,5 +1,5 @@
 /**
- * The process boundary of every app: `runApp(app, platform)` reads argv, environment and the terminal,
+ * The process boundary of every app: `runApp(app, platform)` reads argv, stdin and the terminal,
  * then serves until SIGINT or SIGTERM. `platform` supplies whatever the app's handlers need beyond
  * `ShellServices`. Call it from the app's `bin` entry.
  *
@@ -13,11 +13,11 @@ import process from "node:process";
 import { readRunMode, serveApp } from "./node.js";
 export const runApp = (app, platform) => {
     const program = Effect.gen(function* () {
-        const mode = readRunMode(app.manifest, process.argv.slice(2), process.env);
+        const mode = readRunMode(app.manifest, process.argv.slice(2));
         if (Result.isFailure(mode))
             return yield* mode.failure;
         const launch = browserLaunch({
-            noOpen: mode.success._tag === "Attached" || !mode.success.open,
+            noOpen: mode.success._tag !== "Standalone" || !mode.success.open,
             browser: process.env.BROWSER,
             ci: process.env.CI,
             interactive: process.stdout.isTTY === true

package/dist/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAkB,WAAW,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEjE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAO,GAAoB,EAAE,QAAwB,EAAQ,EAAE;IACnF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QAC1E,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;YAC9D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;YAC5B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;YAClB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;SAC3C,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IACF,WAAW,CAAC,OAAO,CACjB,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CACvE,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CACvC,CACF,CACF,CACF,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAkB,WAAW,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEjE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAO,GAAoB,EAAE,QAAwB,EAAQ,EAAE;IACnF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7D,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAA;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;YAChE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO;YAC5B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;YAClB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;SAC3C,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IACF,WAAW,CAAC,OAAO,CACjB,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CACvE,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CACvC,CACF,CACF,CACF,CAAA;AACH,CAAC,CAAA"}

package/dist/manifest.d.ts

@@ -3,8 +3,9 @@
  *
  * **Mental model**
  *
- * - `apps.json` (written by nix) holds only ids and sockets. Everything else comes from the app's own
- *   `GET /app/manifest`, so the file can't disagree with the code.
+ * - `apps.json` (written by the `herdr-hub apps` CLI or by nix) says which packages are installed, where, and how
+ *   the hub runs them. What an app *is* comes from its own `GET /app/manifest`, so the file can't disagree with
+ *   the code.
  * - `contract` is one integer for the whole shell ↔ app surface: manifest shape, wire paths, shell
  *   services and `ShellContext`. Additive changes keep it; the hub supports the current and previous one.
  * - Every per-app problem becomes an {@link AppState} `Unavailable`, never a hub failure.
@@ -61,17 +62,81 @@ export interface AppManifest extends Schema.Schema.Type<typeof AppManifest> {
 }
 /** What an app declares in code; the runner adds `client` from its build output. */
 export type AppManifestInput = Omit<AppManifest, "client">;
-/** `~/.config/herdr/apps.json`, written by nix. Unknown keys are refused. */
+/**
+ * One installed app in `apps.json` v2: the prefix holding its `node_modules`, the script the hub runs with its
+ * own node, and how it runs.
+ */
+export declare const InstalledApp: Schema.Struct<{
+    readonly id: Schema.brand<Schema.String, "AppId">;
+    readonly package: Schema.String;
+    /** Exact, resolved. */
+    readonly version: Schema.String;
+    /** The prefix holding `node_modules`. */
+    readonly dir: Schema.String;
+    /** The app's script relative to `dir`: `node_modules/<package>/<hubApp.bin>`. Run with the hub's own node. */
+    readonly bin: Schema.String;
+    readonly enabled: Schema.Boolean;
+    /** V8 heap cap (`--max-old-space-size`); native and RSS growth are not capped. */
+    readonly memoryMb: Schema.Int;
+    readonly allowScripts: Schema.Boolean;
+}>;
+export interface InstalledApp extends Schema.Schema.Type<typeof InstalledApp> {
+}
+/**
+ * `apps.json` (v2; there is no v1 reader): the hub starts and supervises each app itself. One writer, named in the file: the `herdr-hub
+ * apps` CLI (`cli`) or nix (`nix`, which the CLI then refuses to edit). `trust.scopes` holds npm scopes
+ * (`@knpkv`) or exact package names the CLI installs from without `apps trust add`.
+ */
 export declare const AppsConfig: Schema.Struct<{
-    readonly v: Schema.Literal<1>;
+    readonly v: Schema.Literal<2>;
+    readonly managedBy: Schema.Literals<readonly ["cli", "nix"]>;
+    readonly trust: Schema.Struct<{
+        readonly scopes: Schema.$Array<Schema.String>;
+    }>;
     readonly apps: Schema.$Array<Schema.Struct<{
         readonly id: Schema.brand<Schema.String, "AppId">;
-        readonly socket: Schema.String;
+        readonly package: Schema.String;
+        /** Exact, resolved. */
+        readonly version: Schema.String;
+        /** The prefix holding `node_modules`. */
+        readonly dir: Schema.String;
+        /** The app's script relative to `dir`: `node_modules/<package>/<hubApp.bin>`. Run with the hub's own node. */
+        readonly bin: Schema.String;
+        readonly enabled: Schema.Boolean;
+        /** V8 heap cap (`--max-old-space-size`); native and RSS growth are not capped. */
+        readonly memoryMb: Schema.Int;
+        readonly allowScripts: Schema.Boolean;
     }>>;
 }>;
 export interface AppsConfig extends Schema.Schema.Type<typeof AppsConfig> {
 }
-export declare const AppUnavailableReason: Schema.Literals<readonly ["not_running", "timeout", "invalid_manifest", "id_mismatch", "incompatible", "duplicate", "client_failed"]>;
+/**
+ * Line 1 of an attached app's stdin, written by the hub at spawn; the pipe then stays open until stop. The
+ * endpoint is a socket path or a `\\.\pipe\` name picked per spawn. The token and secret are fresh per spawn
+ * and never touch disk, env or argv.
+ */
+export declare const HubHandshake: Schema.Struct<{
+    readonly v: Schema.Literal<1>;
+    readonly endpoint: Schema.String;
+    readonly hubUrl: Schema.String;
+    readonly hubToken: Schema.RedactedFromValue<Schema.String>;
+    readonly appSecret: Schema.RedactedFromValue<Schema.String>;
+}>;
+export interface HubHandshake extends Schema.Schema.Type<typeof HubHandshake> {
+}
+/** The `hubApp` field of an app's package.json: what the installer checks before and after install. */
+export declare const HubAppPackageField: Schema.Struct<{
+    /**
+     * The script the hub runs, as a file path inside the package (`dist/bin.js`). Not a `bin` key: the hub runs it
+     * with its own node, so it never depends on npm's bin links or `.cmd` shims.
+     */
+    readonly bin: Schema.String;
+    readonly contract: Schema.Literals<readonly [1]>;
+    readonly services: Schema.$Array<Schema.Literals<readonly ["fleet.read", "host", "jobs.submit", "relay.post", "needs-you", "badge"]>>;
+}>;
+export interface HubAppPackageField extends Schema.Schema.Type<typeof HubAppPackageField> {
+}
+export declare const AppUnavailableReason: Schema.Literals<readonly ["starting", "not_running", "crashloop", "disabled", "install_missing", "health", "timeout", "invalid_manifest", "id_mismatch", "incompatible", "duplicate", "client_failed"]>;
 export type AppUnavailableReason = typeof AppUnavailableReason.Type;
 /**
  * The hub's view of one registered app, served by `GET /v1/apps`. `Unavailable` keeps the last good
@@ -140,7 +205,7 @@ export declare const AppState: Schema.Union<readonly [Schema.TaggedStruct<"Ready
             readonly defaultPort: Schema.Int;
         }>;
     }>>;
-    readonly reason: Schema.Literals<readonly ["not_running", "timeout", "invalid_manifest", "id_mismatch", "incompatible", "duplicate", "client_failed"]>;
+    readonly reason: Schema.Literals<readonly ["starting", "not_running", "crashloop", "disabled", "install_missing", "health", "timeout", "invalid_manifest", "id_mismatch", "incompatible", "duplicate", "client_failed"]>;
     readonly detail: Schema.String;
 }>]>;
 export type AppState = typeof AppState.Type;
@@ -209,7 +274,7 @@ export declare const AppStates: Schema.Struct<{
                 readonly defaultPort: Schema.Int;
             }>;
         }>>;
-        readonly reason: Schema.Literals<readonly ["not_running", "timeout", "invalid_manifest", "id_mismatch", "incompatible", "duplicate", "client_failed"]>;
+        readonly reason: Schema.Literals<readonly ["starting", "not_running", "crashloop", "disabled", "install_missing", "health", "timeout", "invalid_manifest", "id_mismatch", "incompatible", "duplicate", "client_failed"]>;
         readonly detail: Schema.String;
     }>]>>;
 }>;
@@ -223,7 +288,7 @@ export declare class AppsConfigInvalid extends AppsConfigInvalid_base {
 }
 declare const AppProbeFailed_base: Schema.Class<AppProbeFailed, Schema.TaggedStruct<"AppProbeFailed", {
     readonly id: Schema.brand<Schema.String, "AppId">;
-    readonly reason: Schema.Literals<readonly ["not_running", "timeout", "invalid_manifest", "id_mismatch", "incompatible", "duplicate", "client_failed"]>;
+    readonly reason: Schema.Literals<readonly ["starting", "not_running", "crashloop", "disabled", "install_missing", "health", "timeout", "invalid_manifest", "id_mismatch", "incompatible", "duplicate", "client_failed"]>;
     readonly detail: Schema.String;
 }>, import("effect/Cause").YieldableError>;
 /** One probe's outcome other than `Ready`. */
@@ -252,7 +317,7 @@ declare const ShellServiceUnavailable_base: Schema.Class<ShellServiceUnavailable
 export declare class ShellServiceUnavailable extends ShellServiceUnavailable_base {
 }
 declare const AppStartError_base: Schema.Class<AppStartError, Schema.TaggedStruct<"AppStartError", {
-    readonly reason: Schema.Literals<readonly ["invalid_manifest", "invalid_arguments", "listen", "layer"]>;
+    readonly reason: Schema.Literals<readonly ["invalid_manifest", "invalid_arguments", "listen", "layer", "handshake"]>;
     readonly cause: Schema.Defect;
 }>, import("effect/Cause").YieldableError>;
 /** The app couldn't start: its manifest, its listener, or its handler layer. */

package/dist/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAG/B,gGAAgG;AAChG,eAAO,MAAM,WAAW,+BAAuB,CAAA;AAC/C,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAEjD,eAAO,MAAM,KAAK,sCAEjB,CAAA;AACD,MAAM,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,IAAI,CAAA;AAErC,0GAA0G;AAC1G,eAAO,MAAM,YAAY,qGAA6F,CAAA;AACtH,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAA;AAInD,kGAAkG;AAClG,eAAO,MAAM,eAAe;;;EAG1B,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,6FAA6F;AAC7F,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EActB,CAAA;AACF,MAAM,WAAW,WAAY,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,WAAW,CAAC;CAAG;AAE9E,oFAAoF;AACpF,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;AAI1D,6EAA6E;AAC7E,eAAO,MAAM,UAAU;;;;;;EAGrB,CAAA;AACF,MAAM,WAAW,UAAW,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC;CAAG;AAE5E,eAAO,MAAM,oBAAoB,uIAQ/B,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA;AAEnE;;;GAGG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQnB,CAAA;AACF,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAA;AAE3C,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAyE,CAAA;AAC/F,MAAM,WAAW,SAAU,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,SAAS,CAAC;CAAG;;;;AAE1E,kFAAkF;AAClF,qBAAa,iBAAkB,SAAQ,sBAErC;CAAG;;;;;;AAEL,8CAA8C;AAC9C,qBAAa,cAAe,SAAQ,mBAIlC;CAAG;;;;AAEL,sGAAsG;AACtG,qBAAa,cAAe,SAAQ,mBAAqE;CAAG;;;;AAE5G;;;GAGG;AACH,qBAAa,YAAa,SAAQ,iBAEhC;CAAG;;;;;AAEL,oGAAoG;AACpG,qBAAa,uBAAwB,SAAQ,4BAM5C;CAAG;;;;;AAEJ,gFAAgF;AAChF,qBAAa,aAAc,SAAQ,kBAGjC;CAAG"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAG/B,gGAAgG;AAChG,eAAO,MAAM,WAAW,+BAAuB,CAAA;AAC/C,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAEjD,eAAO,MAAM,KAAK,sCAEjB,CAAA;AACD,MAAM,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,IAAI,CAAA;AAErC,0GAA0G;AAC1G,eAAO,MAAM,YAAY,qGAA6F,CAAA;AACtH,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAA;AAInD,kGAAkG;AAClG,eAAO,MAAM,eAAe;;;EAG1B,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,6FAA6F;AAC7F,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EActB,CAAA;AACF,MAAM,WAAW,WAAY,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,WAAW,CAAC;CAAG;AAE9E,oFAAoF;AACpF,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;AAE1D;;;GAGG;AACH,eAAO,MAAM,YAAY;;;IAGvB,uBAAuB;;IAEvB,yCAAyC;;IAEzC,8GAA8G;;;IAG9G,kFAAkF;;;EAGlF,CAAA;AACF,MAAM,WAAW,YAAa,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,YAAY,CAAC;CAAG;AAEhF;;;;GAIG;AACH,eAAO,MAAM,UAAU;;;;;;;;;QAlBrB,uBAAuB;;QAEvB,yCAAyC;;QAEzC,8GAA8G;;;QAG9G,kFAAkF;;;;EAgBlF,CAAA;AACF,MAAM,WAAW,UAAW,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC;CAAG;AAE5E;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;;EAMvB,CAAA;AACF,MAAM,WAAW,YAAa,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,YAAY,CAAC;CAAG;AAEhF,uGAAuG;AACvG,eAAO,MAAM,kBAAkB;IAC7B;;;OAGG;;;;EAIH,CAAA;AACF,MAAM,WAAW,kBAAmB,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,kBAAkB,CAAC;CAAG;AAE5F,eAAO,MAAM,oBAAoB,yMAa/B,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA;AAEnE;;;GAGG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQnB,CAAA;AACF,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAA;AAE3C,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAyE,CAAA;AAC/F,MAAM,WAAW,SAAU,SAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,SAAS,CAAC;CAAG;;;;AAE1E,kFAAkF;AAClF,qBAAa,iBAAkB,SAAQ,sBAErC;CAAG;;;;;;AAEL,8CAA8C;AAC9C,qBAAa,cAAe,SAAQ,mBAIlC;CAAG;;;;AAEL,sGAAsG;AACtG,qBAAa,cAAe,SAAQ,mBAAqE;CAAG;;;;AAE5G;;;GAGG;AACH,qBAAa,YAAa,SAAQ,iBAEhC;CAAG;;;;;AAEL,oGAAoG;AACpG,qBAAa,uBAAwB,SAAQ,4BAM5C;CAAG;;;;;AAEJ,gFAAgF;AAChF,qBAAa,aAAc,SAAQ,kBAGjC;CAAG"}

package/dist/manifest.js

@@ -3,8 +3,9 @@
  *
  * **Mental model**
  *
- * - `apps.json` (written by nix) holds only ids and sockets. Everything else comes from the app's own
- *   `GET /app/manifest`, so the file can't disagree with the code.
+ * - `apps.json` (written by the `herdr-hub apps` CLI or by nix) says which packages are installed, where, and how
+ *   the hub runs them. What an app *is* comes from its own `GET /app/manifest`, so the file can't disagree with
+ *   the code.
  * - `contract` is one integer for the whole shell ↔ app surface: manifest shape, wire paths, shell
  *   services and `ShellContext`. Additive changes keep it; the hub supports the current and previous one.
  * - Every per-app problem becomes an {@link AppState} `Unavailable`, never a hub failure.
@@ -40,14 +41,64 @@ export const AppManifest = Schema.Struct({
     }),
     standalone: Schema.Struct({ defaultPort: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 65_535 })) })
 });
-const SocketPath = Schema.String.check(Schema.isPattern(/^\//), Schema.isMaxLength(107));
-/** `~/.config/herdr/apps.json`, written by nix. Unknown keys are refused. */
+/**
+ * One installed app in `apps.json` v2: the prefix holding its `node_modules`, the script the hub runs with its
+ * own node, and how it runs.
+ */
+export const InstalledApp = Schema.Struct({
+    id: AppId,
+    package: Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(214)),
+    /** Exact, resolved. */
+    version: Schema.String.check(Schema.isNonEmpty(), Schema.isMaxLength(64)),
+    /** The prefix holding `node_modules`. */
+    dir: Schema.String.check(Schema.isNonEmpty()),
+    /** The app's script relative to `dir`: `node_modules/<package>/<hubApp.bin>`. Run with the hub's own node. */
+    bin: Schema.String.check(Schema.isNonEmpty()),
+    enabled: Schema.Boolean,
+    /** V8 heap cap (`--max-old-space-size`); native and RSS growth are not capped. */
+    memoryMb: Schema.Int.check(Schema.isBetween({ minimum: 64, maximum: 16_384 })),
+    allowScripts: Schema.Boolean
+});
+/**
+ * `apps.json` (v2; there is no v1 reader): the hub starts and supervises each app itself. One writer, named in the file: the `herdr-hub
+ * apps` CLI (`cli`) or nix (`nix`, which the CLI then refuses to edit). `trust.scopes` holds npm scopes
+ * (`@knpkv`) or exact package names the CLI installs from without `apps trust add`.
+ */
 export const AppsConfig = Schema.Struct({
+    v: Schema.Literal(2),
+    managedBy: Schema.Literals(["cli", "nix"]),
+    trust: Schema.Struct({ scopes: Schema.Array(Schema.String) }),
+    apps: Schema.Array(InstalledApp)
+});
+/**
+ * Line 1 of an attached app's stdin, written by the hub at spawn; the pipe then stays open until stop. The
+ * endpoint is a socket path or a `\\.\pipe\` name picked per spawn. The token and secret are fresh per spawn
+ * and never touch disk, env or argv.
+ */
+export const HubHandshake = Schema.Struct({
     v: Schema.Literal(1),
-    apps: Schema.Array(Schema.Struct({ id: AppId, socket: SocketPath }))
+    endpoint: Schema.String.check(Schema.isNonEmpty()),
+    hubUrl: Schema.String.check(Schema.isNonEmpty()),
+    hubToken: Schema.RedactedFromValue(Schema.String),
+    appSecret: Schema.RedactedFromValue(Schema.String)
+});
+/** The `hubApp` field of an app's package.json: what the installer checks before and after install. */
+export const HubAppPackageField = Schema.Struct({
+    /**
+     * The script the hub runs, as a file path inside the package (`dist/bin.js`). Not a `bin` key: the hub runs it
+     * with its own node, so it never depends on npm's bin links or `.cmd` shims.
+     */
+    bin: Schema.String.check(Schema.isNonEmpty()),
+    contract: AppContract,
+    services: Schema.Array(ShellService)
 });
 export const AppUnavailableReason = Schema.Literals([
+    "starting",
     "not_running",
+    "crashloop",
+    "disabled",
+    "install_missing",
+    "health",
     "timeout",
     "invalid_manifest",
     "id_mismatch",
@@ -100,7 +151,7 @@ export class ShellServiceUnavailable extends Schema.TaggedError()("ShellServiceU
 }
 /** The app couldn't start: its manifest, its listener, or its handler layer. */
 export class AppStartError extends Schema.TaggedError()("AppStartError", {
-    reason: Schema.Literals(["invalid_manifest", "invalid_arguments", "listen", "layer"]),
+    reason: Schema.Literals(["invalid_manifest", "invalid_arguments", "listen", "layer", "handshake"]),
     cause: Schema.Defect()
 }) {
 }

package/dist/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAG/C,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1G,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CACtB,CAAA;AAGD,0GAA0G;AAC1G,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;AAGtH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC,CAAA;AAEhG,kGAAkG;AAClG,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;CAC7B,CAAC,CAAA;AAGF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC5D,EAAE,EAAE,KAAK;IACT,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1E,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC,GAAG;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,OAAO;KACvB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;CAChH,CAAC,CAAA;AAMF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;AAExF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;CACrE,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClD,aAAa;IACb,SAAS;IACT,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,WAAW;IACX,eAAe;CAChB,CAAC,CAAA;AAGF;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACvD,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE;QACjC,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACpC,MAAM,EAAE,oBAAoB;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;CACH,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AAG/F,kFAAkF;AAClF,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,WAAW,EAAqB,CAAC,mBAAmB,EAAE;IAClG,IAAI,EAAE,MAAM,CAAC,MAAM;CACpB,CAAC;CAAG;AAEL,8CAA8C;AAC9C,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,WAAW,EAAkB,CAAC,gBAAgB,EAAE;IACzF,EAAE,EAAE,KAAK;IACT,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;CACtB,CAAC;CAAG;AAEL,sGAAsG;AACtG,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,WAAW,EAAkB,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;CAAG;AAE5G;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,WAAW,EAAgB,CAAC,cAAc,EAAE;IACnF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;CACrF,CAAC;CAAG;AAEL,oGAAoG;AACpG,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB;IACE,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;CAClE,CACF;CAAG;AAEJ,gFAAgF;AAChF,MAAM,OAAO,aAAc,SAAQ,MAAM,CAAC,WAAW,EAAiB,CAAC,eAAe,EAAE;IACtF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CAAC;CAAG"}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAG/C,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1G,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CACtB,CAAA;AAGD,0GAA0G;AAC1G,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;AAGtH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC,CAAA;AAEhG,kGAAkG;AAClG,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;CAC7B,CAAC,CAAA;AAGF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC5D,EAAE,EAAE,KAAK;IACT,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1E,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACzE,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC,GAAG;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,OAAO;KACvB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;CAChH,CAAC,CAAA;AAMF;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,KAAK;IACT,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1E,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACzE,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7C,8GAA8G;IAC9G,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,YAAY,EAAE,MAAM,CAAC,OAAO;CAC7B,CAAC,CAAA;AAGF;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;CACjC,CAAC,CAAA;AAGF;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAClD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAChD,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC;CACnD,CAAC,CAAA;AAGF,uGAAuG;AACvG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7C,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;CACrC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClD,UAAU;IACV,aAAa;IACb,WAAW;IACX,UAAU;IACV,iBAAiB;IACjB,QAAQ;IACR,SAAS;IACT,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,WAAW;IACX,eAAe;CAChB,CAAC,CAAA;AAGF;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACvD,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE;QACjC,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACpC,MAAM,EAAE,oBAAoB;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;CACH,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AAG/F,kFAAkF;AAClF,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,WAAW,EAAqB,CAAC,mBAAmB,EAAE;IAClG,IAAI,EAAE,MAAM,CAAC,MAAM;CACpB,CAAC;CAAG;AAEL,8CAA8C;AAC9C,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,WAAW,EAAkB,CAAC,gBAAgB,EAAE;IACzF,EAAE,EAAE,KAAK;IACT,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;CACtB,CAAC;CAAG;AAEL,sGAAsG;AACtG,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,WAAW,EAAkB,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;CAAG;AAE5G;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,WAAW,EAAgB,CAAC,cAAc,EAAE;IACnF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;CACrF,CAAC;CAAG;AAEL,oGAAoG;AACpG,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CACxF,yBAAyB,EACzB;IACE,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;CAClE,CACF;CAAG;AAEJ,gFAAgF;AAChF,MAAM,OAAO,aAAc,SAAQ,MAAM,CAAC,WAAW,EAAiB,CAAC,eAAe,EAAE;IACtF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAClG,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CAAC;CAAG"}

package/dist/node.d.ts

@@ -1,5 +1,5 @@
 import type { BrowserLaunch } from "@knpkv/browser-pairing/launch";
-import { Effect, FileSystem, Layer, Path, Result, Schema } from "effect";
+import { Effect, FileSystem, Layer, Path, Result, Schema, Stdio } from "effect";
 import type { ShellServices } from "./hub-client.js";
 import { type AppManifestInput, AppStartError } from "./manifest.js";
 import { ModuleHandlers } from "./route.js";
@@ -14,37 +14,28 @@ export interface AppServer<E, R> {
     /** The built client: a directory holding `client.js` and, optionally, `client.css`. */
     readonly clientDirectory: string;
 }
-export declare const RunMode: Schema.Union<readonly [Schema.TaggedStruct<"Attached", {
-    readonly socket: Schema.String;
-    readonly hubUrl: Schema.String;
-    readonly tokenFile: Schema.String;
-}>, Schema.TaggedStruct<"Standalone", {
+export declare const RunMode: Schema.Union<readonly [Schema.TaggedStruct<"Attached", {}>, Schema.TaggedStruct<"Standalone", {
     readonly port: Schema.Int;
     readonly open: Schema.Boolean;
 }>]>;
 export type RunMode = typeof RunMode.Type;
-/** Read the mode from argv and environment. `--socket` means attached; anything else is standalone. */
-export declare const readRunMode: (manifest: AppManifestInput, argv: ReadonlyArray<string>, env: Readonly<Record<string, string | undefined>>) => Result.Result<RunMode, AppStartError>;
-/** Attached mode alone: what the hub and its tests run. Needs no browser opener. */
-export declare const serveAttached: <E, R>(app: AppServer<E, R>, mode: {
-    readonly _tag: "Attached";
-    readonly socket: string;
-    readonly hubUrl: string;
-    readonly tokenFile: string;
-}) => Effect.Effect<never, AppStartError | import("effect/PlatformError").PlatformError | import("effect/http/HttpServerError").ServeError, FileSystem.FileSystem | import("effect/http/HttpClient").HttpClient | Path.Path | import("effect/Scope").Scope | Exclude<R, ShellServices>>;
+/** Read the mode from argv. `--attach` means attached; anything else is standalone. */
+export declare const readRunMode: (manifest: AppManifestInput, argv: ReadonlyArray<string>) => Result.Result<RunMode, AppStartError>;
+/**
+ * Attached mode: read the hub's handshake from stdin, listen on its endpoint, and stop when stdin ends. Needs no
+ * browser opener.
+ */
+export declare const serveAttached: <E, R>(app: AppServer<E, R>) => Effect.Effect<void, AppStartError | import("effect/PlatformError").PlatformError | import("effect/http/HttpServerError").ServeError, FileSystem.FileSystem | import("effect/http/HttpClient").HttpClient | Path.Path | import("effect/Scope").Scope | Stdio.Stdio | Exclude<R, ShellServices>>;
 /**
  * Serve the app in `mode` until interrupted. `launch` says whether standalone mode opens a browser for its
  * sign-in link; the executable decides it from its terminal and environment.
  */
 export declare const serveApp: <E, R>(app: AppServer<E, R>, mode: {
     readonly _tag: "Attached";
-    readonly socket: string;
-    readonly hubUrl: string;
-    readonly tokenFile: string;
 } | {
     readonly _tag: "Standalone";
     readonly port: number;
     readonly open: boolean;
-}, launch: BrowserLaunch) => Effect.Effect<void, AppStartError, import("@knpkv/browser-pairing/launch").BrowserOpener | import("effect/Crypto").Crypto | FileSystem.FileSystem | import("effect/http/HttpClient").HttpClient | Path.Path | import("effect/Scope").Scope | import("effect/Stdio").Stdio | Exclude<R, ShellServices>>;
+}, launch: BrowserLaunch) => Effect.Effect<void, AppStartError, import("@knpkv/browser-pairing/launch").BrowserOpener | import("effect/Crypto").Crypto | FileSystem.FileSystem | import("effect/http/HttpClient").HttpClient | Path.Path | import("effect/Scope").Scope | Stdio.Stdio | Exclude<R, ShellServices>>;
 export { runApp } from "./main.js";
 //# sourceMappingURL=node.d.ts.map

package/dist/node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAA4B,MAAM,+BAA+B,CAAA;AAG5F,OAAO,EAAqB,MAAM,EAAE,UAAU,EAAE,KAAK,EAAU,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAanG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAEpD,OAAO,EAAe,KAAK,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAEjF,OAAO,EAML,cAAc,EAGf,MAAM,YAAY,CAAA;AAInB,oGAAoG;AACpG,MAAM,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAA;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IAC9G,uFAAuF;IACvF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CACjC;AAED,eAAO,MAAM,OAAO;;;;;;;IAOlB,CAAA;AACF,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,IAAI,CAAA;AAEzC,uGAAuG;AACvG,eAAO,MAAM,WAAW,aACZ,gBAAgB,QACpB,aAAa,CAAC,MAAM,CAAC,OACtB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,KAChD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAiCtC,CAAA;AAsJD,oFAAoF;AACpF,eAAO,MAAM,aAAa,GAA+C,CAAC,EAAE,CAAC;;;;;uRAwC3E,CAAA;AAoIF;;;GAGG;AACH,eAAO,MAAM,QAAQ,GAA0C,CAAC,EAAE,CAAC;;;;;;;;;mUAMoD,CAAA;AAEvH,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA"}
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,aAAa,EAA4B,MAAM,+BAA+B,CAAA;AAG5F,OAAO,EAAqB,MAAM,EAAE,UAAU,EAAE,KAAK,EAAU,IAAI,EAAY,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAcpH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAEpD,OAAO,EAAe,KAAK,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAEjF,OAAO,EAML,cAAc,EAGf,MAAM,YAAY,CAAA;AAKnB,oGAAoG;AACpG,MAAM,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAA;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IAC9G,uFAAuF;IACvF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CACjC;AAED,eAAO,MAAM,OAAO;;;IAQlB,CAAA;AACF,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,IAAI,CAAA;AAEzC,uFAAuF;AACvF,eAAO,MAAM,WAAW,aACZ,gBAAgB,QACpB,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CA4BtC,CAAA;AAwJD;;;GAGG;AACH,eAAO,MAAM,aAAa,GAA+C,CAAC,EAAE,CAAC,yTAsC3E,CAAA;AA2IF;;;GAGG;AACH,eAAO,MAAM,QAAQ,GAA0C,CAAC,EAAE,CAAC;;;;;;kTAWoD,CAAA;AAEvH,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA"}