@kvell007/embed-labs-local-bridge 0.1.0-alpha.0

package/README.md

@@ -0,0 +1,130 @@
+# @embed-labs/local-bridge
+
+Local HTTP bridge service for Embed Labs Cloud hardware discovery, bounded local
+operations, and guarded flash planning.
+
+## Package Status
+
+This package is a publish candidate, but it is not ready for public npm publish
+yet. The workspace manifest intentionally remains marked `private: true` until
+package names, license, npm scope ownership, support URLs, and release approval
+are complete.
+
+## What It Provides
+
+- `embed-local-bridge` binary.
+- `startServer()` library entry point.
+- Local health endpoint.
+- Device discovery for serial ports, RP2350-compatible UF2 volumes, Rockchip
+  USB Loader/Maskrom style devices, and the current TaishanPi USB ECM probe.
+- Bounded TCP, serial path, serial capture, and SSH command probes.
+- Non-destructive debug tool availability scans for OpenOCD, probe-rs, pyOCD,
+  and SEGGER J-Link command-line tools.
+- Flash plan endpoints and local job tracking.
+- Shared response contracts from `@embed-labs/protocol`.
+
+## Install
+
+After the package is approved for public release:
+
+```bash
+npm install -g @embed-labs/local-bridge
+```
+
+Internal workspace usage:
+
+```bash
+npm run build
+node packages/local-bridge/dist/index.js
+```
+
+## Start the Bridge
+
+```bash
+embed-local-bridge
+```
+
+The bridge listens on `127.0.0.1:18083` by default.
+
+```bash
+EMBED_BRIDGE_HOST=127.0.0.1 EMBED_BRIDGE_PORT=18083 embed-local-bridge
+```
+
+Library usage:
+
+```ts
+import { startServer } from "@embed-labs/local-bridge";
+
+const server = startServer({ host: "127.0.0.1", port: 18083 });
+```
+
+## HTTP Surface
+
+- `GET /healthz`
+- `GET /v1/devices`
+- `GET /v1/debug/tools`
+- `POST /v1/devices/probe`
+- `GET /v1/serial/ports`
+- `POST /v1/serial/capture`
+- `POST /v1/ssh/run`
+- `POST /v1/flash/plan`
+- `POST /v1/flash/run`
+- `GET /v1/jobs`
+- `GET /v1/jobs/<local_job_id>`
+
+Examples:
+
+```bash
+curl -fsS http://127.0.0.1:18083/healthz
+curl -fsS http://127.0.0.1:18083/v1/devices
+curl -fsS http://127.0.0.1:18083/v1/debug/tools
+curl -fsS http://127.0.0.1:18083/v1/devices/probe \
+  -H 'content-type: application/json' \
+  -d '{"host":"198.19.77.2","ports":[22,15301],"timeout_ms":1000}'
+```
+
+## Hardware Support Boundary
+
+Current local behavior is intentionally narrow:
+
+- Device discovery can report serial ports, RP2350 UF2 boot volumes,
+  Rockchip-style USB Loader/Maskrom matches, and TaishanPi USB ECM reachability
+  at the current default probe address.
+- Debug tool scans only check PATH and bounded version/help command evidence;
+  they do not open probes, start GDB servers, or create debug sessions.
+- RP2350 UF2 flashing copies a `.uf2` artifact to a mounted UF2 volume only
+  after a ready flash plan and explicit approval.
+- TaishanPi image-set planning can check required image files and
+  `rkdeveloptool` availability, but real destructive TaishanPi flashing is
+  guarded and not enabled. The bridge returns a blocked job until the exact
+  hardware profile and Board Pack command templates are accepted.
+
+These behaviors are local evidence and planning tools, not broad board support
+claims.
+
+## Operational Boundaries
+
+- The default bind address is localhost. Do not expose the bridge on a shared
+  network without an approved authentication and network access design.
+- JSON request bodies are bounded.
+- Serial capture and SSH operations are time-bounded.
+- Windows serial capture is not implemented in the current no-native-helper
+  path.
+- Destructive operations must remain approval-gated.
+
+## Runtime Requirements
+
+- Node.js 20 or newer.
+- Optional platform tools depending on the requested action, such as OpenSSH
+  for `POST /v1/ssh/run`, `rkdeveloptool` for TaishanPi planning checks, and
+  debug tools such as `openocd`, `probe-rs`, `pyocd`, `JLinkExe`, and
+  `JLinkGDBServerCLExe` for `GET /v1/debug/tools` evidence.
+
+## Publish Readiness
+
+Before public publish, confirm the runbook checklist in
+`docs/runbooks/CLI_NPM_PACKAGING.md`, including approved SPDX license metadata,
+repository, issue tracker, homepage, support metadata, changelog or release
+notes, final npm scope ownership, executable verification for
+`embed-local-bridge`, and removal of `private: true` only in an approved
+metadata task.

package/dist/adapters/debug.d.ts

@@ -0,0 +1,2 @@
+import type { DebugToolScanResult } from "@embed-labs/protocol";
+export declare function scanDebugTools(): Promise<DebugToolScanResult>;

package/dist/adapters/debug.js

@@ -0,0 +1,124 @@
+import { resolveCommand, runCommand, tailLines } from "../process.js";
+const VERSION_TIMEOUT_MS = 2500;
+const DEBUG_TOOLS = [
+    {
+        tool_id: "openocd",
+        display_name: "OpenOCD",
+        command: "openocd",
+        version_args: ["--version"]
+    },
+    {
+        tool_id: "probe-rs",
+        display_name: "probe-rs",
+        command: "probe-rs",
+        version_args: ["--version"]
+    },
+    {
+        tool_id: "pyocd",
+        display_name: "pyOCD",
+        command: "pyocd",
+        version_args: ["--version"]
+    },
+    {
+        tool_id: "jlink-commander",
+        display_name: "SEGGER J-Link Commander",
+        command: "JLinkExe",
+        version_args: ["-?"]
+    },
+    {
+        tool_id: "jlink-gdb-server",
+        display_name: "SEGGER J-Link GDB Server",
+        command: "JLinkGDBServerCLExe",
+        version_args: ["-?"]
+    }
+];
+export async function scanDebugTools() {
+    const observedAt = new Date().toISOString();
+    const tools = await Promise.all(DEBUG_TOOLS.map((tool) => scanDebugTool(tool, observedAt)));
+    const availableCount = tools.filter((tool) => tool.available).length;
+    return {
+        tools,
+        observed_at: observedAt,
+        summary_for_user: `Debug tool scan finished: ${availableCount}/${tools.length} tools available. No debug sessions or probe connections were opened.`
+    };
+}
+async function scanDebugTool(spec, observedAt) {
+    const evidence = [];
+    const resolvedPath = await resolveCommand(spec.command);
+    evidence.push({
+        evidence_id: evidenceId(spec.tool_id, "path", observedAt),
+        tool_id: spec.tool_id,
+        kind: "path_lookup",
+        command: spec.command,
+        observed_at: observedAt,
+        available: resolvedPath !== undefined,
+        resolved_path: resolvedPath,
+        summary: resolvedPath
+            ? `Found ${spec.command} on PATH.`
+            : `${spec.command} was not found on PATH.`
+    });
+    if (!resolvedPath) {
+        return {
+            tool_id: spec.tool_id,
+            display_name: spec.display_name,
+            command: spec.command,
+            available: false,
+            evidence,
+            summary_for_user: `${spec.display_name} is not available on PATH.`
+        };
+    }
+    const versionResult = await runCommand(resolvedPath, spec.version_args, VERSION_TIMEOUT_MS);
+    const stdoutTail = tailLines(versionResult.stdout, 8);
+    const stderrTail = tailLines(versionResult.stderr, 8);
+    const version = extractVersionLine(`${versionResult.stdout}\n${versionResult.stderr}`);
+    evidence.push({
+        evidence_id: evidenceId(spec.tool_id, "version", observedAt),
+        tool_id: spec.tool_id,
+        kind: "version_command",
+        command: spec.command,
+        args: spec.version_args,
+        observed_at: observedAt,
+        exit_code: versionResult.exit_code,
+        timed_out: versionResult.timed_out,
+        stdout_tail: stdoutTail.length > 0 ? stdoutTail : undefined,
+        stderr_tail: stderrTail.length > 0 ? stderrTail : undefined,
+        error_code: versionResult.timed_out
+            ? "version_command_timeout"
+            : versionResult.exit_code === 0
+                ? undefined
+                : "version_command_nonzero",
+        error_message: versionResult.timed_out
+            ? `Version/help command exceeded ${VERSION_TIMEOUT_MS}ms.`
+            : versionResult.exit_code === 0
+                ? undefined
+                : `Version/help command exited with code ${versionResult.exit_code ?? "unknown"}.`,
+        summary: versionResult.timed_out
+            ? `${spec.command} was found, but the bounded version/help command timed out.`
+            : versionResult.exit_code === 0
+                ? `${spec.command} version/help command completed.`
+                : `${spec.command} was found, but its version/help command exited non-zero.`
+    });
+    return {
+        tool_id: spec.tool_id,
+        display_name: spec.display_name,
+        command: spec.command,
+        available: true,
+        version,
+        evidence,
+        summary_for_user: version
+            ? `${spec.display_name} is available (${version}).`
+            : `${spec.display_name} is available; version output was not recognized.`
+    };
+}
+function extractVersionLine(output) {
+    return output
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .find((line) => line.length > 0)
+        ?.slice(0, 160);
+}
+function evidenceId(toolId, kind, observedAt) {
+    const stableTime = observedAt.replace(/[^0-9]/g, "");
+    return `debug_${toolId}_${kind}_${stableTime}`;
+}
+//# sourceMappingURL=debug.js.map

package/dist/adapters/debug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/adapters/debug.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAStE,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,WAAW,GAAoB;IACnC;QACE,OAAO,EAAE,SAAS;QAClB,YAAY,EAAE,SAAS;QACvB,OAAO,EAAE,SAAS;QAClB,YAAY,EAAE,CAAC,WAAW,CAAC;KAC5B;IACD;QACE,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,UAAU;QACxB,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,CAAC,WAAW,CAAC;KAC5B;IACD;QACE,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,CAAC,WAAW,CAAC;KAC5B;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,YAAY,EAAE,yBAAyB;QACvC,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,CAAC,IAAI,CAAC;KACrB;IACD;QACE,OAAO,EAAE,kBAAkB;QAC3B,YAAY,EAAE,0BAA0B;QACxC,OAAO,EAAE,qBAAqB;QAC9B,YAAY,EAAE,CAAC,IAAI,CAAC;KACrB;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IACrE,OAAO;QACL,KAAK;QACL,WAAW,EAAE,UAAU;QACvB,gBAAgB,EAAE,6BAA6B,cAAc,IAAI,KAAK,CAAC,MAAM,uEAAuE;KACrJ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAmB,EAAE,UAAkB;IAClE,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAExD,QAAQ,CAAC,IAAI,CAAC;QACZ,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC;QACzD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,YAAY,KAAK,SAAS;QACrC,aAAa,EAAE,YAAY;QAC3B,OAAO,EAAE,YAAY;YACnB,CAAC,CAAC,SAAS,IAAI,CAAC,OAAO,WAAW;YAClC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,yBAAyB;KAC7C,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,KAAK;YAChB,QAAQ;YACR,gBAAgB,EAAE,GAAG,IAAI,CAAC,YAAY,4BAA4B;SACnE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,aAAa,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IACvF,QAAQ,CAAC,IAAI,CAAC;QACZ,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC;QAC5D,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,YAAY;QACvB,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,WAAW,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC3D,WAAW,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC3D,UAAU,EAAE,aAAa,CAAC,SAAS;YACjC,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,aAAa,CAAC,SAAS,KAAK,CAAC;gBAC7B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,yBAAyB;QAC/B,aAAa,EAAE,aAAa,CAAC,SAAS;YACpC,CAAC,CAAC,iCAAiC,kBAAkB,KAAK;YAC1D,CAAC,CAAC,aAAa,CAAC,SAAS,KAAK,CAAC;gBAC7B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,yCAAyC,aAAa,CAAC,SAAS,IAAI,SAAS,GAAG;QACtF,OAAO,EAAE,aAAa,CAAC,SAAS;YAC9B,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,6DAA6D;YAC9E,CAAC,CAAC,aAAa,CAAC,SAAS,KAAK,CAAC;gBAC7B,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,kCAAkC;gBACnD,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,2DAA2D;KACjF,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI;QACf,OAAO;QACP,QAAQ;QACR,gBAAgB,EAAE,OAAO;YACvB,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,kBAAkB,OAAO,IAAI;YACnD,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,mDAAmD;KAC5E,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACxC,OAAO,MAAM;SACV,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAChC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB,EAAE,IAAY,EAAE,UAAkB;IACvE,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,SAAS,MAAM,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;AACjD,CAAC"}

package/dist/adapters/deploy.d.ts

@@ -0,0 +1,5 @@
+import type { BoardDeployRequest, BoardDeployResult, ErrorEnvelope } from "@embed-labs/protocol";
+export declare function deployTaishanPiArtifact(request: BoardDeployRequest): Promise<BoardDeployResult | {
+    ok: false;
+    error: ErrorEnvelope;
+}>;

package/dist/adapters/deploy.js

@@ -0,0 +1,132 @@
+import { readFile, stat } from "node:fs/promises";
+import { posix } from "node:path";
+import { commandExists, runCommand, tailLines } from "../process.js";
+const DEFAULT_REMOTE_PATH = "/userdata/embed-labs/apps/app";
+const REMOTE_ROOT = "/userdata/embed-labs/apps";
+const MAX_ARTIFACT_BYTES = 16 * 1024 * 1024;
+export async function deployTaishanPiArtifact(request) {
+    const observedAt = new Date().toISOString();
+    if (request.board_id !== "taishanpi") {
+        return failDeploy("unsupported_board", `board_id must be taishanpi, got ${request.board_id}.`);
+    }
+    const host = request.host.trim();
+    const user = request.user?.trim() || "root";
+    const remotePath = normalizeRemotePath(request.remote_path ?? DEFAULT_REMOTE_PATH);
+    const timeoutSeconds = clampTimeoutSeconds(request.timeout_seconds);
+    if (!remotePath) {
+        return failDeploy("invalid_remote_path", `remote_path must stay under ${REMOTE_ROOT} and contain only safe path characters.`);
+    }
+    if (!/^[A-Za-z0-9._-]{1,64}$/.test(user)) {
+        return failDeploy("invalid_user", "SSH user must contain only letters, numbers, dots, underscores, or hyphens.");
+    }
+    if (!await commandExists("ssh")) {
+        return failDeploy("ssh_not_found", "ssh binary was not found on PATH.", "Install OpenSSH client or add ssh to PATH.");
+    }
+    const artifactStat = await stat(request.artifact_path).catch(() => undefined);
+    if (!artifactStat?.isFile()) {
+        return failDeploy("artifact_file_not_found", `Local artifact file is not available: ${request.artifact_path}`);
+    }
+    if (artifactStat.size > MAX_ARTIFACT_BYTES) {
+        return failDeploy("artifact_file_too_large", `Local Bridge deploy currently accepts artifacts up to ${MAX_ARTIFACT_BYTES} bytes on the SSH/base64 MVP path.`);
+    }
+    const artifactBytes = await readFile(request.artifact_path);
+    const remoteDir = posix.dirname(remotePath);
+    const tmpPath = `${remotePath}.tmp.${Date.now()}`;
+    const logPath = `${remotePath}.log`;
+    const pidPath = `${remotePath}.pid`;
+    const upload = await ssh(host, user, [
+        `mkdir -p ${shellQuote(remoteDir)}`,
+        "umask 077",
+        `base64 -d > ${shellQuote(tmpPath)}`,
+        `chmod 0755 ${shellQuote(tmpPath)}`,
+        `mv -f ${shellQuote(tmpPath)} ${shellQuote(remotePath)}`
+    ].join(" && "), timeoutSeconds, artifactBytes.toString("base64"));
+    if (upload.exit_code !== 0) {
+        return commandFailure(upload.timed_out ? "artifact_upload_timeout" : "artifact_upload_failed", "Failed to upload the artifact to the board over SSH/base64.", upload);
+    }
+    let runResult;
+    if (request.run === true) {
+        runResult = await ssh(host, user, [
+            `cd ${shellQuote(remoteDir)}`,
+            `(nohup ${shellQuote(remotePath)} > ${shellQuote(logPath)} 2>&1 < /dev/null & printf '%s' "$!" > ${shellQuote(pidPath)})`,
+            "sleep 1",
+            "printf 'pid='",
+            `cat ${shellQuote(pidPath)}`,
+            "printf '\\n'",
+            `tail -n 40 ${shellQuote(logPath)} 2>/dev/null || true`
+        ].join(" && "), timeoutSeconds);
+        if (runResult.exit_code !== 0) {
+            return commandFailure(runResult.timed_out ? "artifact_run_timeout" : "artifact_run_failed", "The artifact was deployed, but the start/log command failed.", runResult);
+        }
+    }
+    return {
+        board_id: "taishanpi",
+        host,
+        user,
+        artifact_path: request.artifact_path,
+        artifact_size_bytes: artifactStat.size,
+        remote_path: remotePath,
+        deployed: true,
+        ran: request.run === true && runResult?.exit_code === 0,
+        remote_pid: runResult ? extractPid(runResult.stdout) : undefined,
+        log_path: logPath,
+        exit_code: runResult?.exit_code,
+        stdout: runResult?.stdout,
+        stderr: runResult?.stderr,
+        output_tail: runResult ? tailLines(`${runResult.stdout}\n${runResult.stderr}`) : tailLines(`${upload.stdout}\n${upload.stderr}`),
+        observed_at: observedAt
+    };
+}
+async function ssh(host, user, command, timeoutSeconds, stdin) {
+    return runCommand("ssh", [
+        "-o", "BatchMode=yes",
+        "-o", "UserKnownHostsFile=/dev/null",
+        "-o", "StrictHostKeyChecking=no",
+        "-o", `ConnectTimeout=${Math.max(1, Math.min(timeoutSeconds, 30))}`,
+        `${user}@${host}`,
+        command
+    ], timeoutSeconds * 1000 + 1000, stdin);
+}
+function normalizeRemotePath(input) {
+    if (!input.startsWith("/") || /[\u0000-\u001f\u007f]/.test(input)) {
+        return undefined;
+    }
+    const normalized = posix.normalize(input);
+    if (normalized === REMOTE_ROOT || !normalized.startsWith(`${REMOTE_ROOT}/`)) {
+        return undefined;
+    }
+    if (!/^\/[A-Za-z0-9._/-]+$/.test(normalized) || normalized.endsWith("/")) {
+        return undefined;
+    }
+    return normalized;
+}
+function clampTimeoutSeconds(value) {
+    const timeout = Number.isFinite(value) ? Number(value) : 30;
+    return Math.max(5, Math.min(Math.trunc(timeout), 120));
+}
+function failDeploy(code, message, remediation) {
+    return { ok: false, error: { code, message, remediation } };
+}
+function commandFailure(code, message, result) {
+    return {
+        ok: false,
+        error: {
+            code,
+            message,
+            details: {
+                exit_code: result.exit_code,
+                stdout: result.stdout,
+                stderr: result.stderr,
+                timed_out: result.timed_out
+            }
+        }
+    };
+}
+function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+function extractPid(stdout) {
+    const match = stdout.match(/^pid=(\d+)/m);
+    return match?.[1];
+}
+//# sourceMappingURL=deploy.js.map

package/dist/adapters/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../src/adapters/deploy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAErE,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAC5D,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAChD,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAA2B;IACvE,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,OAAO,UAAU,CAAC,mBAAmB,EAAE,mCAAmC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IAC5C,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC;IACnF,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC,qBAAqB,EAAE,+BAA+B,WAAW,yCAAyC,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,UAAU,CAAC,cAAc,EAAE,6EAA6E,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC,eAAe,EAAE,mCAAmC,EAAE,4CAA4C,CAAC,CAAC;IACxH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9E,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,yBAAyB,EAAE,yCAAyC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QAC3C,OAAO,UAAU,CAAC,yBAAyB,EAAE,yDAAyD,kBAAkB,oCAAoC,CAAC,CAAC;IAChK,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAG,UAAU,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,GAAG,UAAU,MAAM,CAAC;IACpC,MAAM,OAAO,GAAG,GAAG,UAAU,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE;QACnC,YAAY,UAAU,CAAC,SAAS,CAAC,EAAE;QACnC,WAAW;QACX,eAAe,UAAU,CAAC,OAAO,CAAC,EAAE;QACpC,cAAc,UAAU,CAAC,OAAO,CAAC,EAAE;QACnC,SAAS,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE;KACzD,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,wBAAwB,EAAE,6DAA6D,EAAE,MAAM,CAAC,CAAC;IACxK,CAAC;IAED,IAAI,SAA6D,CAAC;IAClE,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACzB,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE;YAChC,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE;YAC7B,UAAU,UAAU,CAAC,UAAU,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,0CAA0C,UAAU,CAAC,OAAO,CAAC,GAAG;YACzH,SAAS;YACT,eAAe;YACf,OAAO,UAAU,CAAC,OAAO,CAAC,EAAE;YAC5B,cAAc;YACd,cAAc,UAAU,CAAC,OAAO,CAAC,sBAAsB;SACxD,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC;QAChC,IAAI,SAAS,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,EAAE,8DAA8D,EAAE,SAAS,CAAC,CAAC;QACzK,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,IAAI;QACJ,IAAI;QACJ,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,mBAAmB,EAAE,YAAY,CAAC,IAAI;QACtC,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,SAAS,EAAE,SAAS,KAAK,CAAC;QACvD,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAChE,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,SAAS,EAAE,SAAS;QAC/B,MAAM,EAAE,SAAS,EAAE,MAAM;QACzB,MAAM,EAAE,SAAS,EAAE,MAAM;QACzB,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAChI,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe,EAAE,cAAsB,EAAE,KAAuB;IAC7G,OAAO,UAAU,CAAC,KAAK,EAAE;QACvB,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,8BAA8B;QACpC,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,kBAAkB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE;QACnE,GAAG,IAAI,IAAI,IAAI,EAAE;QACjB,OAAO;KACR,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,WAAW,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,WAAoB;IACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAW,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,OAAe,EAAE,MAA8C;IACnG,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,IAAI;YACJ,OAAO;YACP,OAAO,EAAE;gBACP,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B;SACF;KACO,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/adapters/flash.d.ts

@@ -0,0 +1,3 @@
+import type { FlashPlan, FlashPlanRequest } from "@embed-labs/protocol";
+export declare function buildFlashPlan(request: FlashPlanRequest): Promise<FlashPlan>;
+export declare function executeRp2350Uf2Flash(plan: FlashPlan): Promise<Record<string, unknown>>;

package/dist/adapters/flash.js

@@ -0,0 +1,169 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { copyFile, stat } from "node:fs/promises";
+import { basename, join } from "node:path";
+import { commandExists } from "../process.js";
+import { findUf2Volumes } from "./uf2.js";
+export async function buildFlashPlan(request) {
+    if (request.board_id === "rp2350") {
+        return buildRp2350FlashPlan(request);
+    }
+    if (request.board_id === "taishanpi") {
+        return buildTaishanPiFlashPlan(request);
+    }
+    return {
+        plan_id: `plan_${Date.now()}`,
+        board_id: request.board_id,
+        profile_id: request.profile_id ?? "unknown",
+        destructive: true,
+        approval_required: true,
+        ready: false,
+        summary: `No flash planner is available for board_id=${request.board_id}.`,
+        warnings: [{
+                code: "board_not_supported",
+                message: `No local bridge flash planner is available for ${request.board_id}.`
+            }]
+    };
+}
+export async function executeRp2350Uf2Flash(plan) {
+    if (!plan.artifact_path || !plan.target_volume_path) {
+        throw new Error("RP2350 UF2 flash requires artifact_path and target_volume_path.");
+    }
+    const target = join(plan.target_volume_path, basename(plan.artifact_path));
+    await copyFile(plan.artifact_path, target);
+    return {
+        copied_to: target,
+        summary_for_user: `Copied UF2 artifact to ${plan.target_volume_path}. The board should reboot automatically if the UF2 volume accepted the file.`
+    };
+}
+async function buildRp2350FlashPlan(request) {
+    const missingFiles = [];
+    const artifactPath = request.artifact_path;
+    if (!artifactPath) {
+        missingFiles.push("artifact_path");
+    }
+    else if (!artifactPath.endsWith(".uf2")) {
+        missingFiles.push(`${artifactPath} must be a .uf2 artifact`);
+    }
+    else {
+        try {
+            await stat(artifactPath);
+        }
+        catch {
+            missingFiles.push(artifactPath);
+        }
+    }
+    const volumes = request.target_volume_path ? [request.target_volume_path] : await findUf2Volumes();
+    const targetVolumePath = volumes[0];
+    if (!targetVolumePath) {
+        missingFiles.push("RP2350 UF2 boot volume");
+    }
+    return {
+        plan_id: `plan_${Date.now()}_rp2350`,
+        board_id: "rp2350",
+        variant_id: request.variant_id,
+        profile_id: request.profile_id ?? "uf2-flash-local",
+        destructive: true,
+        approval_required: true,
+        ready: missingFiles.length === 0,
+        summary: missingFiles.length === 0
+            ? `Ready to copy ${artifactPath} to RP2350 UF2 volume ${targetVolumePath}.`
+            : "RP2350 UF2 flash is not ready.",
+        artifact_path: artifactPath,
+        target_volume_path: targetVolumePath,
+        missing_files: missingFiles,
+        warnings: missingFiles.length > 0 ? [{
+                code: "flash_plan_not_ready",
+                message: "RP2350 UF2 flash requires a .uf2 artifact and a mounted BOOTSEL/UF2 volume."
+            }] : undefined
+    };
+}
+async function buildTaishanPiFlashPlan(request) {
+    const imageDir = request.image_dir;
+    const missingFiles = [];
+    const required = [
+        "MiniLoaderAll.bin",
+        "parameter.txt",
+        "uboot.img",
+        "boot.img",
+        "rootfs.img",
+        "userdata.img"
+    ];
+    const optional = ["misc.img", "recovery.img", "oem.img"];
+    const partitions = [];
+    if (!imageDir) {
+        missingFiles.push("image_dir");
+    }
+    else {
+        for (const name of required) {
+            const path = join(imageDir, name);
+            try {
+                const fileStat = await stat(path);
+                partitions.push({
+                    partition: partitionName(name),
+                    image_path: path,
+                    required: true,
+                    size_bytes: fileStat.size,
+                    sha256: await sha256(path)
+                });
+            }
+            catch {
+                missingFiles.push(path);
+            }
+        }
+        for (const name of optional) {
+            const path = join(imageDir, name);
+            try {
+                const fileStat = await stat(path);
+                partitions.push({
+                    partition: partitionName(name),
+                    image_path: path,
+                    required: false,
+                    size_bytes: fileStat.size,
+                    sha256: await sha256(path)
+                });
+            }
+            catch {
+                // Optional image.
+            }
+        }
+    }
+    const missingTools = [];
+    if (!await commandExists("rkdeveloptool")) {
+        missingTools.push("rkdeveloptool");
+    }
+    return {
+        plan_id: `plan_${Date.now()}_taishanpi`,
+        board_id: "taishanpi",
+        variant_id: request.variant_id,
+        hardware_profile_id: request.hardware_profile_id,
+        profile_id: request.profile_id ?? "rk356x-full-image-local",
+        destructive: true,
+        approval_required: true,
+        ready: missingFiles.length === 0 && missingTools.length === 0,
+        summary: missingFiles.length === 0 && missingTools.length === 0
+            ? `TaishanPi image set is complete. Destructive flash still requires explicit approval.`
+            : "TaishanPi flash plan is not ready; missing images or local tools.",
+        partitions,
+        required_tools: ["rkdeveloptool"],
+        missing_tools: missingTools,
+        missing_files: missingFiles,
+        warnings: [{
+                code: "taishanpi_flash_guardrail",
+                message: "TaishanPi real flashing is intentionally blocked until exact hardware_profile and Board Pack command templates are accepted.",
+                remediation: "Use this plan as validation evidence. Enable real TaishanPi flash only after EL-010 profile commands are reviewed."
+            }]
+    };
+}
+function partitionName(fileName) {
+    return fileName.replace(/\.img$|\.bin$|\.txt$/g, "").replace("MiniLoaderAll", "loader");
+}
+async function sha256(path) {
+    const hash = createHash("sha256");
+    const stream = createReadStream(path);
+    for await (const chunk of stream) {
+        hash.update(chunk);
+    }
+    return hash.digest("hex");
+}
+//# sourceMappingURL=flash.js.map

package/dist/adapters/flash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flash.js","sourceRoot":"","sources":["../../src/adapters/flash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAM3C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAyB;IAC5D,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO;QACL,OAAO,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;QAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,SAAS;QAC3C,WAAW,EAAE,IAAI;QACjB,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,8CAA8C,OAAO,CAAC,QAAQ,GAAG;QAC1E,QAAQ,EAAE,CAAC;gBACT,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,kDAAkD,OAAO,CAAC,QAAQ,GAAG;aAC/E,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAe;IACzD,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO;QACL,SAAS,EAAE,MAAM;QACjB,gBAAgB,EAAE,0BAA0B,IAAI,CAAC,kBAAkB,8EAA8E;KAClJ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAAyB;IAC3D,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,YAAY,CAAC,IAAI,CAAC,GAAG,YAAY,0BAA0B,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAM,cAAc,EAAE,CAAC;IACnG,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,YAAY,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,SAAS;QACpC,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,iBAAiB;QACnD,WAAW,EAAE,IAAI;QACjB,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC;QAChC,OAAO,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC;YAChC,CAAC,CAAC,iBAAiB,YAAY,yBAAyB,gBAAgB,GAAG;YAC3E,CAAC,CAAC,gCAAgC;QACpC,aAAa,EAAE,YAAY;QAC3B,kBAAkB,EAAE,gBAAgB;QACpC,aAAa,EAAE,YAAY;QAC3B,QAAQ,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnC,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,6EAA6E;aACvF,CAAC,CAAC,CAAC,CAAC,SAAS;KACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,OAAyB;IAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;IACnC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG;QACf,mBAAmB;QACnB,eAAe;QACf,WAAW;QACX,UAAU;QACV,YAAY;QACZ,cAAc;KACf,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAEzD,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC;oBACd,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC;oBAC9B,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,QAAQ,CAAC,IAAI;oBACzB,MAAM,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC;oBACd,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC;oBAC9B,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,QAAQ,CAAC,IAAI;oBACzB,MAAM,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1C,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,YAAY;QACvC,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,yBAAyB;QAC3D,WAAW,EAAE,IAAI;QACjB,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAC7D,OAAO,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAC7D,CAAC,CAAC,sFAAsF;YACxF,CAAC,CAAC,mEAAmE;QACvE,UAAU;QACV,cAAc,EAAE,CAAC,eAAe,CAAC;QACjC,aAAa,EAAE,YAAY;QAC3B,aAAa,EAAE,YAAY;QAC3B,QAAQ,EAAE,CAAC;gBACT,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,8HAA8H;gBACvI,WAAW,EAAE,oHAAoH;aAClI,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/adapters/network.d.ts

@@ -0,0 +1,22 @@
+import type { TcpProbeEvidence } from "@embed-labs/protocol";
+export declare function probeTcp(host: string, port: number, timeoutMs: number): Promise<boolean>;
+export declare function probeTcpWithEvidence(host: string, port: number, timeoutMs: number, observedAt: string): Promise<TcpProbeEvidence>;
+export declare function runBoundedSsh(host: string, user: string, command: string, timeoutSeconds?: number): Promise<{
+    readonly ok: false;
+    readonly error: {
+        readonly code: "ssh_not_found";
+        readonly message: "ssh binary was not found on PATH.";
+        readonly remediation: "Install OpenSSH client or add ssh to PATH.";
+    };
+    exit_code?: undefined;
+    stdout?: undefined;
+    stderr?: undefined;
+    output_tail?: undefined;
+} | {
+    ok: boolean;
+    exit_code: number | null;
+    stdout: string;
+    stderr: string;
+    output_tail: string[];
+    readonly error?: undefined;
+}>;