@legioncodeinc/hive 0.1.0

package/dist/daemon/dashboard/host.d.ts

@@ -0,0 +1,90 @@
+/**
+ * The viewable dashboard HOST — PRD-001b Wave 2.
+ *
+ * Adapted from honeycomb `src/daemon/runtime/dashboard/host.ts`. hive is a standalone Hono
+ * process that serves the migrated React SPA at the ROOT (`/`), not under `/dashboard`. It serves
+ * the INDEX SHELL of the real React app bundled production-clean by esbuild
+ * (`src/dashboard/web/main.tsx` → `dist/daemon/dashboard/app.js`). The shell is `<div id="root">`
+ * plus a `<link>` to the design-system CSS and a `<script>` to the bundled app; the app then
+ * hydrates ITSELF from the daemon endpoints its `wire` targets.
+ *
+ * NO `unpkg`/CDN React, NO in-browser `@babel/standalone`, NO `type="text/babel"`: the shell
+ * references ONLY same-origin loopback assets the host serves, and carries NO token/secret.
+ *
+ * ── The routes this host registers (hive serves at the root) ───────────────
+ *   GET /app.js                       → the esbuild bundle (React + ReactDOM + the app)
+ *   GET /styles.css                   → the concatenated design-system CSS
+ *   GET /honeycomb-memory-cluster.svg → the brand mark
+ *   GET /fonts/:name                  → an allow-listed brand font
+ *   GET *                             → the index shell ({@link renderShell}), a CATCH-ALL
+ *
+ * PRD-003a split this into two entry points, {@link mountDashboardAssets} and
+ * {@link mountDashboardShellFallback}, because the shell is now served for EVERY path-based SPA
+ * route (`/`, `/projects`, ..., `/buzzing`, `/login`, and any client-only deep link), not just `/`.
+ * The shell route must therefore be a catch-all (`*`) registered LAST in `server.ts` — AFTER the
+ * asset routes below, `/health`, `/api/fleet-status`, and the `/api/*` `/setup/*` BFF proxy — so
+ * those more specific routes win (Hono composes matching handlers in registration order; the first
+ * one that returns a response without calling `next()` wins). {@link mountDashboardHost} keeps
+ * calling both in the safe order for standalone callers (e.g. a bare test `Hono()` with nothing
+ * else registered) where that ordering concern does not arise.
+ */
+import type { Hono } from "hono";
+import { type WebAssets } from "./web-assets.js";
+/** The default landing path (the dashboard) — served by the catch-all, like every other route. */
+export declare const DASHBOARD_HOST_PATH: "/";
+/** The same-origin path the host serves the bundled app JS at. */
+export declare const DASHBOARD_APP_PATH: "/app.js";
+/** The same-origin path the host serves the concatenated design-system CSS at. */
+export declare const DASHBOARD_CSS_PATH: "/styles.css";
+/** The same-origin path the host serves the brand mark at. */
+export declare const DASHBOARD_LOGO_PATH: "/honeycomb-memory-cluster.svg";
+/**
+ * The same-origin path prefix the host serves the brand fonts under. The served DS CSS's
+ * `@font-face` URLs are rewritten to this prefix (see `web-assets.ts` `rewriteFontUrls`) so the
+ * browser fetches `/fonts/<file>` instead of the unserved on-disk `../logos/fonts/<file>`. The
+ * `:name` is matched against a FIXED allow-list in `web-assets.ts` `font()` — anything not in the
+ * six known filenames 404s (no attacker-controlled path component).
+ */
+export declare const DASHBOARD_FONT_PATH: "/fonts/:name";
+/** Options for {@link mountDashboardHost}. */
+export interface MountDashboardHostOptions {
+    /**
+     * The web-asset reader (the CSS/logo/bundle/fonts source). Defaults to {@link createWebAssets}
+     * (resolve the repo `assets/` + the bundle beside this module). A test injects a fixture reader
+     * so the host suite never depends on the real tree or a built bundle.
+     */
+    readonly assets?: WebAssets;
+}
+/**
+ * Build the index SHELL HTML. It is a COMPLETE page: doctype, head with the DS CSS `<link>` + the
+ * inline layout CSS, a `<div id="root">` (the app mounts here) carrying the asset base, and the
+ * bundled-app `<script type="module">`. NO inline data, NO token/secret, NO CDN/Babel reference —
+ * the bundle is same-origin loopback. The app self-hydrates.
+ */
+export declare function renderShell(): string;
+/**
+ * Attach the FOUR static-asset routes (app JS, CSS, logo, fonts) onto hive's Hono app. These
+ * are specific, fixed paths — register them BEFORE {@link mountDashboardShellFallback}'s catch-all
+ * so they win. The asset routes serve no secret/token (a not-yet-built bundle 404s rather than
+ * 500s), and — per PRD-003a — they are also EXEMPT from the portal landing gate (`gate.ts`): the
+ * bundle must load even when the shell just redirected the browser to `/buzzing` or `/login`,
+ * since those exempt screens are served by the same SPA bundle.
+ */
+export declare function mountDashboardAssets(app: Hono, options?: MountDashboardHostOptions): void;
+/**
+ * Attach the SPA shell CATCH-ALL onto hive's Hono app (PRD-003a g-AC-1 / g-AC-2). Register this
+ * LAST — after the asset routes above, `/health`, `/api/fleet-status`, and the `/api/*` `/setup/*`
+ * BFF proxy — so those specific routes win; `*` then serves the identical shell for every gated
+ * page path the portal gate (`gate.ts`) let through, PLUS the two gate-exempt screens (`/buzzing`,
+ * `/login`) and any unknown/client-only deep link. The bundled app self-hydrates by reading
+ * `location.pathname`, so one shell byte-for-byte serves every screen (D-1: no server templating).
+ */
+export declare function mountDashboardShellFallback(app: Hono): void;
+/**
+ * Attach the viewable dashboard host onto hive's Hono app: the four static-asset routes plus
+ * the shell catch-all, in the safe order. Call this ONLY when nothing else needs to be registered
+ * in between (e.g. a standalone test `Hono()`); `server.ts` calls {@link mountDashboardAssets} and
+ * {@link mountDashboardShellFallback} separately so `/health`, `/api/fleet-status`, and the BFF
+ * proxy can be registered between them (see the module doc for why the ordering matters).
+ */
+export declare function mountDashboardHost(app: Hono, options?: MountDashboardHostOptions): void;

package/dist/daemon/dashboard/host.js

@@ -0,0 +1,172 @@
+/**
+ * The viewable dashboard HOST — PRD-001b Wave 2.
+ *
+ * Adapted from honeycomb `src/daemon/runtime/dashboard/host.ts`. hive is a standalone Hono
+ * process that serves the migrated React SPA at the ROOT (`/`), not under `/dashboard`. It serves
+ * the INDEX SHELL of the real React app bundled production-clean by esbuild
+ * (`src/dashboard/web/main.tsx` → `dist/daemon/dashboard/app.js`). The shell is `<div id="root">`
+ * plus a `<link>` to the design-system CSS and a `<script>` to the bundled app; the app then
+ * hydrates ITSELF from the daemon endpoints its `wire` targets.
+ *
+ * NO `unpkg`/CDN React, NO in-browser `@babel/standalone`, NO `type="text/babel"`: the shell
+ * references ONLY same-origin loopback assets the host serves, and carries NO token/secret.
+ *
+ * ── The routes this host registers (hive serves at the root) ───────────────
+ *   GET /app.js                       → the esbuild bundle (React + ReactDOM + the app)
+ *   GET /styles.css                   → the concatenated design-system CSS
+ *   GET /honeycomb-memory-cluster.svg → the brand mark
+ *   GET /fonts/:name                  → an allow-listed brand font
+ *   GET *                             → the index shell ({@link renderShell}), a CATCH-ALL
+ *
+ * PRD-003a split this into two entry points, {@link mountDashboardAssets} and
+ * {@link mountDashboardShellFallback}, because the shell is now served for EVERY path-based SPA
+ * route (`/`, `/projects`, ..., `/buzzing`, `/login`, and any client-only deep link), not just `/`.
+ * The shell route must therefore be a catch-all (`*`) registered LAST in `server.ts` — AFTER the
+ * asset routes below, `/health`, `/api/fleet-status`, and the `/api/*` `/setup/*` BFF proxy — so
+ * those more specific routes win (Hono composes matching handlers in registration order; the first
+ * one that returns a response without calling `next()` wins). {@link mountDashboardHost} keeps
+ * calling both in the safe order for standalone callers (e.g. a bare test `Hono()` with nothing
+ * else registered) where that ordering concern does not arise.
+ */
+import { createWebAssets } from "./web-assets.js";
+/** The default landing path (the dashboard) — served by the catch-all, like every other route. */
+export const DASHBOARD_HOST_PATH = "/";
+/** The same-origin path the host serves the bundled app JS at. */
+export const DASHBOARD_APP_PATH = "/app.js";
+/** The same-origin path the host serves the concatenated design-system CSS at. */
+export const DASHBOARD_CSS_PATH = "/styles.css";
+/** The same-origin path the host serves the brand mark at. */
+export const DASHBOARD_LOGO_PATH = "/honeycomb-memory-cluster.svg";
+/**
+ * The same-origin path prefix the host serves the brand fonts under. The served DS CSS's
+ * `@font-face` URLs are rewritten to this prefix (see `web-assets.ts` `rewriteFontUrls`) so the
+ * browser fetches `/fonts/<file>` instead of the unserved on-disk `../logos/fonts/<file>`. The
+ * `:name` is matched against a FIXED allow-list in `web-assets.ts` `font()` — anything not in the
+ * six known filenames 404s (no attacker-controlled path component).
+ */
+export const DASHBOARD_FONT_PATH = "/fonts/:name";
+/**
+ * The asset base the app resolves host-served assets under. hive serves the mark at the ROOT
+ * (`/honeycomb-memory-cluster.svg`), so the base is empty — the app's `${assetBase}/…svg`
+ * resolves to `/…svg`. main.tsx sanitizes this DOM-read value; an empty string is the safe default.
+ */
+const ASSET_BASE = "";
+/**
+ * The static layout CSS the UI kit declares inline (`.wrap`, `.grid2`, `.kpirow`, `.mem-enter`,
+ * `.col`). Ported verbatim so the served page lays out exactly like honeycomb's. The DS TOKENS +
+ * component styles come from the linked `/styles.css`; this is only the page's grid/animation rules.
+ */
+const LAYOUT_CSS = [
+    "body { margin: 0; background: var(--bg-canvas); min-height: 100vh; }",
+    ".wrap { max-width: 1180px; margin: 0 auto; padding: 28px 28px 48px; }",
+    ".grid2 { display: grid; grid-template-columns: 1.15fr 1fr; gap: 16px; }",
+    "@media (max-width: 900px) { .grid2 { grid-template-columns: 1fr; } }",
+    ".kpirow { display: grid; grid-template-columns: repeat(4, 1fr); gap: 12px; }",
+    "@media (max-width: 720px) { .kpirow { grid-template-columns: repeat(2, 1fr); } }",
+    ".mem-enter { opacity: 1; }",
+    "@media (prefers-reduced-motion: no-preference) {",
+    "  .mem-enter { animation: memIn var(--dur-base) var(--ease-out) both; }",
+    "  @keyframes memIn { from { transform: translateY(10px); } to { transform: none; } }",
+    "}",
+    ".col { display: flex; flex-direction: column; gap: 16px; }",
+].join("\n");
+/**
+ * Build the index SHELL HTML. It is a COMPLETE page: doctype, head with the DS CSS `<link>` + the
+ * inline layout CSS, a `<div id="root">` (the app mounts here) carrying the asset base, and the
+ * bundled-app `<script type="module">`. NO inline data, NO token/secret, NO CDN/Babel reference —
+ * the bundle is same-origin loopback. The app self-hydrates.
+ */
+export function renderShell() {
+    return [
+        "<!doctype html>",
+        '<html lang="en">',
+        "<head>",
+        '<meta charset="utf-8">',
+        '<meta name="viewport" content="width=device-width, initial-scale=1">',
+        "<title>Hive — Dashboard</title>",
+        `<link rel="stylesheet" href="${DASHBOARD_CSS_PATH}">`,
+        `<link rel="icon" href="${DASHBOARD_LOGO_PATH}">`,
+        `<style>${LAYOUT_CSS}</style>`,
+        "</head>",
+        "<body>",
+        `<div id="root" data-asset-base="${ASSET_BASE}"></div>`,
+        `<script type="module" src="${DASHBOARD_APP_PATH}"></script>`,
+        "</body>",
+        "</html>",
+    ].join("\n");
+}
+/**
+ * Attach the FOUR static-asset routes (app JS, CSS, logo, fonts) onto hive's Hono app. These
+ * are specific, fixed paths — register them BEFORE {@link mountDashboardShellFallback}'s catch-all
+ * so they win. The asset routes serve no secret/token (a not-yet-built bundle 404s rather than
+ * 500s), and — per PRD-003a — they are also EXEMPT from the portal landing gate (`gate.ts`): the
+ * bundle must load even when the shell just redirected the browser to `/buzzing` or `/login`,
+ * since those exempt screens are served by the same SPA bundle.
+ */
+export function mountDashboardAssets(app, options = {}) {
+    const assets = options.assets ?? createWebAssets();
+    // GET /app.js — the esbuild bundle (React + ReactDOM + the dashboard app).
+    app.get(DASHBOARD_APP_PATH, (c) => {
+        const asset = assets.appJs();
+        if (asset === null)
+            return c.text("dashboard bundle not built", 404);
+        return c.body(asset.body, 200, { "content-type": asset.contentType, "cache-control": "no-cache" });
+    });
+    // GET /styles.css — the concatenated design-system CSS.
+    app.get(DASHBOARD_CSS_PATH, (c) => {
+        const asset = assets.css();
+        if (asset === null)
+            return c.text("dashboard styles unavailable", 404);
+        return c.body(asset.body, 200, { "content-type": asset.contentType, "cache-control": "no-cache" });
+    });
+    // GET /honeycomb-memory-cluster.svg — the brand mark. Served `no-cache` too: it shares the
+    // un-hashed URL contract with the shell, and revalidating a ~1 KB SVG over loopback is free.
+    app.get(DASHBOARD_LOGO_PATH, (c) => {
+        const asset = assets.logo();
+        if (asset === null)
+            return c.text("dashboard logo unavailable", 404);
+        return c.body(asset.body, 200, { "content-type": asset.contentType, "cache-control": "no-cache" });
+    });
+    // GET /fonts/<file> — the brand fonts. The DS CSS's `@font-face` URLs are rewritten to this
+    // route. `:name` is allow-listed in `font()` (only the six known filenames resolve; anything
+    // else — incl. traversal — 404s). Fonts carry no secret; a long-lived immutable cache-control.
+    app.get(DASHBOARD_FONT_PATH, (c) => {
+        const asset = assets.font(c.req.param("name"));
+        if (asset === null)
+            return c.text("dashboard font not found", 404);
+        return c.body(asset.body, 200, {
+            "content-type": asset.contentType,
+            "cache-control": "public, max-age=31536000, immutable",
+        });
+    });
+}
+/**
+ * Attach the SPA shell CATCH-ALL onto hive's Hono app (PRD-003a g-AC-1 / g-AC-2). Register this
+ * LAST — after the asset routes above, `/health`, `/api/fleet-status`, and the `/api/*` `/setup/*`
+ * BFF proxy — so those specific routes win; `*` then serves the identical shell for every gated
+ * page path the portal gate (`gate.ts`) let through, PLUS the two gate-exempt screens (`/buzzing`,
+ * `/login`) and any unknown/client-only deep link. The bundled app self-hydrates by reading
+ * `location.pathname`, so one shell byte-for-byte serves every screen (D-1: no server templating).
+ */
+export function mountDashboardShellFallback(app) {
+    // `no-cache` (revalidate every load): the shell + app.js + css filenames are NOT content-hashed,
+    // so an upgrade rebuilds them in place at the SAME URL. Without a revalidation directive the
+    // browser heuristically caches the bundle and keeps running a STALE app.js across a restart.
+    // `no-cache` forces a re-pull on each load (cheap over loopback), so a rebuilt dashboard runs.
+    app.get("*", (c) => {
+        c.header("cache-control", "no-cache");
+        return c.html(renderShell());
+    });
+}
+/**
+ * Attach the viewable dashboard host onto hive's Hono app: the four static-asset routes plus
+ * the shell catch-all, in the safe order. Call this ONLY when nothing else needs to be registered
+ * in between (e.g. a standalone test `Hono()`); `server.ts` calls {@link mountDashboardAssets} and
+ * {@link mountDashboardShellFallback} separately so `/health`, `/api/fleet-status`, and the BFF
+ * proxy can be registered between them (see the module doc for why the ordering matters).
+ */
+export function mountDashboardHost(app, options = {}) {
+    mountDashboardAssets(app, options);
+    mountDashboardShellFallback(app);
+}
+//# sourceMappingURL=host.js.map

package/dist/daemon/dashboard/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../src/daemon/dashboard/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,EAAE,eAAe,EAAkB,MAAM,iBAAiB,CAAC;AAElE,kGAAkG;AAClG,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAY,CAAC;AAEhD,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAkB,CAAC;AAErD,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAsB,CAAC;AAEzD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAAwC,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAuB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,UAAU,GAAG,EAAW,CAAC;AAY/B;;;;GAIG;AACH,MAAM,UAAU,GAAG;IAClB,sEAAsE;IACtE,uEAAuE;IACvE,yEAAyE;IACzE,sEAAsE;IACtE,8EAA8E;IAC9E,kFAAkF;IAClF,4BAA4B;IAC5B,kDAAkD;IAClD,yEAAyE;IACzE,sFAAsF;IACtF,GAAG;IACH,4DAA4D;CAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;GAKG;AACH,MAAM,UAAU,WAAW;IAC1B,OAAO;QACN,iBAAiB;QACjB,kBAAkB;QAClB,QAAQ;QACR,wBAAwB;QACxB,sEAAsE;QACtE,iCAAiC;QACjC,gCAAgC,kBAAkB,IAAI;QACtD,0BAA0B,mBAAmB,IAAI;QACjD,UAAU,UAAU,UAAU;QAC9B,SAAS;QACT,QAAQ;QACR,mCAAmC,UAAU,UAAU;QACvD,8BAA8B,kBAAkB,aAAa;QAC7D,SAAS;QACT,SAAS;KACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAS,EAAE,UAAqC,EAAE;IACtF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;IAEnD,2EAA2E;IAC3E,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,wDAAwD;IACxD,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,2FAA2F;IAC3F,6FAA6F;IAC7F,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,4FAA4F;IAC5F,6FAA6F;IAC7F,+FAA+F;IAC/F,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE;YAC9B,cAAc,EAAE,KAAK,CAAC,WAAW;YACjC,eAAe,EAAE,qCAAqC;SACtD,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAS;IACpD,iGAAiG;IACjG,6FAA6F;IAC7F,6FAA6F;IAC7F,+FAA+F;IAC/F,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QAClB,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,UAAqC,EAAE;IACpF,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnC,2BAA2B,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC"}

package/dist/daemon/dashboard/web-assets.d.ts

@@ -0,0 +1,88 @@
+/**
+ * The daemon-side ASSET RESOLVER for the bundled dashboard web app — PRD-001b Wave 2.
+ *
+ * Adapted from honeycomb `src/daemon/runtime/dashboard/web-assets.ts`. hive serves the
+ * dashboard at the ROOT (`/`), not under `/dashboard`, so the served asset routes and the
+ * `@font-face` URL prefix are rooted at `/` instead of `/dashboard`. The bundle esbuild emits
+ * is `app.js` beside this module (`dist/daemon/dashboard/app.js`), not honeycomb's
+ * `dashboard-app.js`.
+ *
+ * The host (`host.ts`) serves, on loopback:
+ *
+ *   GET /                              → the index SHELL (`<div id="root">` + <link> + <script>)
+ *   GET /app.js                       → the esbuild bundle (React + ReactDOM + the app)
+ *   GET /styles.css                   → the concatenated DS CSS (tokens + base, no @import chain)
+ *   GET /honeycomb-memory-cluster.svg → the brand mark
+ *   GET /fonts/:name                  → an allow-listed brand font
+ *
+ * This module owns LOCATING those source assets on disk and reading them. It lives under
+ * `src/daemon/` (it does Node `fs` IO) and is the ONLY place the host touches the filesystem.
+ *
+ * ── Why concatenate the CSS here (not ship the @import chain) ─────────────────
+ *   `assets/styles.css` is `@import url('tokens/…')` lines — those resolve RELATIVE to the
+ *   served URL. Rather than serve five files + rewrite the relative URLs, we read the token
+ *   files in declared order and concatenate them into ONE payload. One request, no relative
+ *   `@import` resolution, deterministic across install layouts.
+ *
+ * ── Resolution + injectability ───────────────────────────────────────────────
+ *   The assets dir defaults to {@link resolveAssetsDir} (walk up from this module to the repo
+ *   root that contains `assets/styles.css`). A test injects a fixture dir so it never depends
+ *   on the real tree. Reads fail SOFT (a missing asset yields an empty string / a 404 at the
+ *   route), never a throw that would 500 the page.
+ */
+/**
+ * The bundled web-app filename the build emits beside this module. esbuild
+ * (`esbuild.config.mjs`) bundles `src/dashboard/web/main.tsx` → `dist/daemon/dashboard/app.js`.
+ */
+export declare const DASHBOARD_APP_BUNDLE: "app.js";
+/**
+ * Resolve the repo `assets/` directory by walking up from this module until a dir with
+ * `assets/styles.css` is found. Works from `src/` (tsc/vitest run from source) and from the
+ * built `dist/daemon/dashboard/` layout. Returns `null` when no `assets/` is found (a stripped install).
+ */
+export declare function resolveAssetsDir(startUrl?: string): string | null;
+/**
+ * Resolve the directory the bundled `app.js` lives in. esbuild emits it beside this module's
+ * compiled output (`dist/daemon/dashboard/`), so the bundle sits next to it. From source
+ * (vitest) the bundle may not exist yet — the read fails soft. Returns `null` when the dir
+ * cannot be resolved.
+ */
+export declare function resolveBundleDir(startUrl?: string): string | null;
+/** Options for {@link createWebAssets}. */
+export interface WebAssetsOptions {
+    /** The `assets/` source dir. Defaults to {@link resolveAssetsDir}. A test injects a fixture. */
+    readonly assetsDir?: string | null;
+    /** The dir the bundled app JS lives in. Defaults to {@link resolveBundleDir}. */
+    readonly bundleDir?: string | null;
+    /** Override the bundled app JS content directly (a test serves a stub bundle). */
+    readonly appJs?: string;
+}
+/** A served text asset: its UTF-8 body + content type, or `null` when missing (→ 404). */
+export interface ServedAsset {
+    readonly body: string;
+    readonly contentType: string;
+}
+/** A served BINARY asset (the fonts): raw bytes + content type, or `null` when missing (→ 404). */
+export interface ServedBinaryAsset {
+    readonly body: ArrayBuffer;
+    readonly contentType: string;
+}
+/** The host-facing asset reader: the concatenated CSS, the logo, the app bundle, and the fonts. */
+export interface WebAssets {
+    /** The concatenated DS CSS (tokens + base), font URLs rewritten, or `null` when the assets dir is missing. */
+    css(): ServedAsset | null;
+    /** The brand logo SVG, or `null` when missing. */
+    logo(): ServedAsset | null;
+    /** The bundled web-app JS, or `null` when the bundle has not been built. */
+    appJs(): ServedAsset | null;
+    /** A brand font's bytes + content type for an allow-listed `name`, or `null` (→ 404) otherwise. */
+    font(name: string): ServedBinaryAsset | null;
+}
+/**
+ * Build the host-side asset reader. Resolves the assets + bundle dirs once and reads on
+ * demand. Every read fails soft (missing → `null` → the route 404s), so a stripped install or
+ * a not-yet-built bundle never 500s the page. The CSS is concatenated from the token files in
+ * declared order so the served page needs ONE stylesheet request and no relative `@import`
+ * resolution.
+ */
+export declare function createWebAssets(options?: WebAssetsOptions): WebAssets;

package/dist/daemon/dashboard/web-assets.js

@@ -0,0 +1,195 @@
+/**
+ * The daemon-side ASSET RESOLVER for the bundled dashboard web app — PRD-001b Wave 2.
+ *
+ * Adapted from honeycomb `src/daemon/runtime/dashboard/web-assets.ts`. hive serves the
+ * dashboard at the ROOT (`/`), not under `/dashboard`, so the served asset routes and the
+ * `@font-face` URL prefix are rooted at `/` instead of `/dashboard`. The bundle esbuild emits
+ * is `app.js` beside this module (`dist/daemon/dashboard/app.js`), not honeycomb's
+ * `dashboard-app.js`.
+ *
+ * The host (`host.ts`) serves, on loopback:
+ *
+ *   GET /                              → the index SHELL (`<div id="root">` + <link> + <script>)
+ *   GET /app.js                       → the esbuild bundle (React + ReactDOM + the app)
+ *   GET /styles.css                   → the concatenated DS CSS (tokens + base, no @import chain)
+ *   GET /honeycomb-memory-cluster.svg → the brand mark
+ *   GET /fonts/:name                  → an allow-listed brand font
+ *
+ * This module owns LOCATING those source assets on disk and reading them. It lives under
+ * `src/daemon/` (it does Node `fs` IO) and is the ONLY place the host touches the filesystem.
+ *
+ * ── Why concatenate the CSS here (not ship the @import chain) ─────────────────
+ *   `assets/styles.css` is `@import url('tokens/…')` lines — those resolve RELATIVE to the
+ *   served URL. Rather than serve five files + rewrite the relative URLs, we read the token
+ *   files in declared order and concatenate them into ONE payload. One request, no relative
+ *   `@import` resolution, deterministic across install layouts.
+ *
+ * ── Resolution + injectability ───────────────────────────────────────────────
+ *   The assets dir defaults to {@link resolveAssetsDir} (walk up from this module to the repo
+ *   root that contains `assets/styles.css`). A test injects a fixture dir so it never depends
+ *   on the real tree. Reads fail SOFT (a missing asset yields an empty string / a 404 at the
+ *   route), never a throw that would 500 the page.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+/** The token files, in the SAME order `assets/styles.css` @imports them (order matters). */
+const CSS_FILES = ["tokens/fonts.css", "tokens/colors.css", "tokens/typography.css", "tokens/spacing.css", "tokens/base.css"];
+/** The design-system logo the header renders. */
+const LOGO_FILE = "logos/honeycomb-memory-cluster.svg";
+/**
+ * The on-disk dir (under `assets/`) the brand fonts live in, and the FIXED allow-list of the
+ * six font filenames the host will serve. The host route serves ONLY a name in this set — there
+ * is NO attacker-controlled path component (mirrors {@link LOGO_FILE}'s hard-coded-filename
+ * safety). Anything not in this set yields `null` → a 404 at the route.
+ */
+const FONTS_DIR = "logos/fonts";
+const FONT_FILES = [
+    "Inter-VariableFont_opsz_wght.ttf",
+    "Inter-Italic-VariableFont_opsz_wght.ttf",
+    "JetBrainsMono-Regular.woff2",
+    "JetBrainsMono-Medium.woff2",
+    "JetBrainsMono-SemiBold.woff2",
+    "JetBrainsMono-Bold.woff2",
+];
+const FONT_ALLOW = new Set(FONT_FILES);
+/** The same-origin path hive serves the fonts under (origin-rooted; see {@link rewriteFontUrls}). */
+const FONT_ROUTE_PREFIX = "/fonts/";
+/** Map a font filename to its `content-type` by extension (`.woff2` → `font/woff2`, `.ttf` → `font/ttf`). */
+function fontContentType(name) {
+    return name.endsWith(".woff2") ? "font/woff2" : "font/ttf";
+}
+/**
+ * Rewrite the DS `@font-face` `url(...)` prefix in the SERVED CSS so the fonts resolve to the
+ * host's `/fonts/<file>` route instead of the on-disk `../logos/fonts/<file>` (which the host
+ * does not serve at that path → 404). The replacement is ORIGIN-ROOTED (leading `/`) so it
+ * resolves regardless of the stylesheet's own URL. ONLY the `logos/fonts/` prefix is touched — the
+ * `../` is consumed with it, and no other `url(...)` (the mark SVG etc.) is mangled. Byte-identical
+ * otherwise.
+ */
+function rewriteFontUrls(css) {
+    return css.replaceAll("../logos/fonts/", FONT_ROUTE_PREFIX).replaceAll("logos/fonts/", FONT_ROUTE_PREFIX);
+}
+/**
+ * The bundled web-app filename the build emits beside this module. esbuild
+ * (`esbuild.config.mjs`) bundles `src/dashboard/web/main.tsx` → `dist/daemon/dashboard/app.js`.
+ */
+export const DASHBOARD_APP_BUNDLE = "app.js";
+/**
+ * Resolve the repo `assets/` directory by walking up from this module until a dir with
+ * `assets/styles.css` is found. Works from `src/` (tsc/vitest run from source) and from the
+ * built `dist/daemon/dashboard/` layout. Returns `null` when no `assets/` is found (a stripped install).
+ */
+export function resolveAssetsDir(startUrl = import.meta.url) {
+    let dir;
+    try {
+        dir = dirname(fileURLToPath(startUrl));
+    }
+    catch {
+        return null;
+    }
+    // Walk up to the filesystem root looking for `<dir>/assets/styles.css`.
+    for (let i = 0; i < 12; i++) {
+        const candidate = join(dir, "assets");
+        if (existsSync(join(candidate, "styles.css")))
+            return candidate;
+        const parent = dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+/**
+ * Resolve the directory the bundled `app.js` lives in. esbuild emits it beside this module's
+ * compiled output (`dist/daemon/dashboard/`), so the bundle sits next to it. From source
+ * (vitest) the bundle may not exist yet — the read fails soft. Returns `null` when the dir
+ * cannot be resolved.
+ */
+export function resolveBundleDir(startUrl = import.meta.url) {
+    try {
+        return dirname(fileURLToPath(startUrl));
+    }
+    catch {
+        return null;
+    }
+}
+/** Read a UTF-8 file, returning `null` (never throwing) on any IO error. */
+function readSoft(path) {
+    try {
+        return existsSync(path) ? readFileSync(path, "utf-8") : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Read a file as a raw `ArrayBuffer` (fonts are binary; a UTF-8 round-trip would corrupt them).
+ * Returns an exact-length `ArrayBuffer` slice so the served body is a non-shared buffer Hono
+ * accepts as a binary `Data`.
+ */
+function readBinarySoft(path) {
+    try {
+        if (!existsSync(path))
+            return null;
+        const buf = readFileSync(path);
+        return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Build the host-side asset reader. Resolves the assets + bundle dirs once and reads on
+ * demand. Every read fails soft (missing → `null` → the route 404s), so a stripped install or
+ * a not-yet-built bundle never 500s the page. The CSS is concatenated from the token files in
+ * declared order so the served page needs ONE stylesheet request and no relative `@import`
+ * resolution.
+ */
+export function createWebAssets(options = {}) {
+    const assetsDir = options.assetsDir === undefined ? resolveAssetsDir() : options.assetsDir;
+    const bundleDir = options.bundleDir === undefined ? resolveBundleDir() : options.bundleDir;
+    const appJsOverride = options.appJs;
+    return {
+        css() {
+            if (assetsDir === null)
+                return null;
+            const parts = [];
+            for (const rel of CSS_FILES) {
+                const text = readSoft(join(assetsDir, rel));
+                if (text !== null)
+                    parts.push(`/* ${rel} */\n${text}`);
+            }
+            if (parts.length === 0)
+                return null;
+            // Rewrite the `@font-face` URL prefix so the fonts resolve to the served `/fonts/` route
+            // (the host does not serve the on-disk `../logos/fonts/` path → 404). See rewriteFontUrls.
+            return { body: rewriteFontUrls(parts.join("\n\n")), contentType: "text/css; charset=utf-8" };
+        },
+        logo() {
+            if (assetsDir === null)
+                return null;
+            const svg = readSoft(join(assetsDir, LOGO_FILE));
+            return svg === null ? null : { body: svg, contentType: "image/svg+xml" };
+        },
+        font(name) {
+            if (assetsDir === null)
+                return null;
+            // Allow-list ONLY: a name not in the fixed six is rejected (→ 404). No attacker-controlled
+            // path component — `name` is never joined unless it is a known leaf filename.
+            if (!FONT_ALLOW.has(name))
+                return null;
+            const bytes = readBinarySoft(join(assetsDir, FONTS_DIR, name));
+            return bytes === null ? null : { body: bytes, contentType: fontContentType(name) };
+        },
+        appJs() {
+            if (appJsOverride !== undefined)
+                return { body: appJsOverride, contentType: "text/javascript; charset=utf-8" };
+            if (bundleDir === null)
+                return null;
+            const js = readSoft(join(bundleDir, DASHBOARD_APP_BUNDLE));
+            return js === null ? null : { body: js, contentType: "text/javascript; charset=utf-8" };
+        },
+    };
+}
+//# sourceMappingURL=web-assets.js.map

package/dist/daemon/dashboard/web-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-assets.js","sourceRoot":"","sources":["../../../src/daemon/dashboard/web-assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,4FAA4F;AAC5F,MAAM,SAAS,GAAG,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,iBAAiB,CAAU,CAAC;AAEvI,iDAAiD;AACjD,MAAM,SAAS,GAAG,oCAAoC,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,UAAU,GAAG;IAClB,kCAAkC;IAClC,yCAAyC;IACzC,6BAA6B;IAC7B,4BAA4B;IAC5B,8BAA8B;IAC9B,0BAA0B;CACjB,CAAC;AACX,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,UAAU,CAAC,CAAC;AAE/C,qGAAqG;AACrG,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAEpC,6GAA6G;AAC7G,SAAS,eAAe,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;AAC3G,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAiB,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB,MAAM,CAAC,IAAI,CAAC,GAAG;IAClE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,wEAAwE;IACxE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB,MAAM,CAAC,IAAI,CAAC,GAAG;IAClE,IAAI,CAAC;QACJ,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAwBD,4EAA4E;AAC5E,SAAS,QAAQ,CAAC,IAAY;IAC7B,IAAI,CAAC;QACJ,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAY;IACnC,IAAI,CAAC;QACJ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,UAA4B,EAAE;IAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3F,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC;IAEpC,OAAO;QACN,GAAG;YACF,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC5C,IAAI,IAAI,KAAK,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,yFAAyF;YACzF,2FAA2F;YAC3F,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;QAC9F,CAAC;QACD,IAAI;YACH,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACjD,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,IAAY;YAChB,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACpC,2FAA2F;YAC3F,8EAA8E;YAC9E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/D,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,CAAC;QACD,KAAK;YACJ,IAAI,aAAa,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;YAC/G,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAC3D,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;QACzF,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/daemon/fleet-status.d.ts

@@ -0,0 +1,15 @@
+import { isFleetReady, V1_REQUIRED_PEERS, type FleetDaemonStatus, type FleetHealth, type FleetStatusResponse } from "../shared/fleet-readiness.js";
+export type { FleetDaemonStatus, FleetHealth, FleetStatusResponse };
+export { isFleetReady, V1_REQUIRED_PEERS };
+/**
+ * Minimal init surface for the status fetch. `redirect` is pinned (fs-AC-9 defense in depth on top
+ * of the loopback URL pin): native fetch defaults to `redirect: "follow"`, so a rogue or compromised
+ * loopback service answering on :3852 could 3xx-redirect hive's fetch to a non-loopback origin,
+ * silently defeating `isLoopbackBaseUrl()` (which only validates the initial URL). Pinning
+ * `redirect: "error"` makes fetch reject on any redirect, so the off-loopback request never fires.
+ */
+export type FleetFetchInit = {
+    readonly redirect?: "error" | "follow" | "manual";
+};
+export type FetchImpl = (input: string, init?: FleetFetchInit) => Promise<Response>;
+export declare function fetchFleetStatus(fetchImpl?: FetchImpl, url?: string): Promise<FleetStatusResponse>;

package/dist/daemon/fleet-status.js

@@ -0,0 +1,56 @@
+import { z } from "zod";
+import { DOCTOR_STATUS_URL } from "../shared/constants.js";
+import { isLoopbackBaseUrl } from "../shared/daemon-routing.js";
+import { isFleetReady, V1_REQUIRED_PEERS } from "../shared/fleet-readiness.js";
+export { isFleetReady, V1_REQUIRED_PEERS };
+const UNREACHABLE_RESPONSE = {
+    supervisor: "unreachable",
+    daemons: []
+};
+const FleetHealthSchema = z.enum(["ok", "degraded", "unreachable", "unknown"]);
+const FleetDaemonSchema = z.object({
+    name: z.string().min(1),
+    health: FleetHealthSchema,
+    escalation: z.unknown().nullable().optional()
+});
+const DoctorStatusSchema = z.object({
+    health: FleetHealthSchema,
+    daemons: z.array(FleetDaemonSchema).optional().default([]),
+    asOf: z.string().min(1)
+});
+export async function fetchFleetStatus(fetchImpl = fetch, url = DOCTOR_STATUS_URL) {
+    if (!isLoopbackBaseUrl(url)) {
+        return UNREACHABLE_RESPONSE;
+    }
+    try {
+        const response = await fetchImpl(url, { redirect: "error" });
+        if (!response.ok) {
+            return UNREACHABLE_RESPONSE;
+        }
+        let parsedJson;
+        try {
+            parsedJson = await response.json();
+        }
+        catch {
+            return UNREACHABLE_RESPONSE;
+        }
+        const parsed = DoctorStatusSchema.safeParse(parsedJson);
+        if (!parsed.success) {
+            return UNREACHABLE_RESPONSE;
+        }
+        return {
+            supervisor: "reachable",
+            health: parsed.data.health,
+            daemons: parsed.data.daemons.map((daemon) => ({
+                name: daemon.name,
+                health: daemon.health,
+                escalation: daemon.escalation ?? null
+            })),
+            asOf: parsed.data.asOf
+        };
+    }
+    catch {
+        return UNREACHABLE_RESPONSE;
+    }
+}
+//# sourceMappingURL=fleet-status.js.map

package/dist/daemon/fleet-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-status.js","sourceRoot":"","sources":["../../src/daemon/fleet-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,YAAY,EACZ,iBAAiB,EAIlB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAE3C,MAAM,oBAAoB,GAAG;IAC3B,UAAU,EAAE,aAAa;IACzB,OAAO,EAAE,EAAE;CAC2B,CAAC;AAEzC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,iBAAiB;IACzB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,MAAM,EAAE,iBAAiB;IACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAYH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,YAAuB,KAAK,EAC5B,MAAc,iBAAiB;IAE/B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QAED,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QAED,OAAO;YACL,UAAU,EAAE,WAAW;YACvB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC1B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;aACtC,CAAC,CAAC;YACH,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;SACvB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,oBAAoB,CAAC;IAC9B,CAAC;AACH,CAAC"}