@meru454545/nexus-modscript-composer 2.0.12

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { generateFinalScript } from "./orchestrator.js";
+export type { GenerateOptions } from "./orchestrator.js";
+export type { OsFamily, ModScriptLifecycle, L0Category, L0Metadata, L0Script, ScriptRunRequest, DeploymentResult, ScriptRunResponse, } from "./types.js";
+export { parseL0Script, parseL0Metadata, stripL0Header } from "./l0-parser.js";
+export { composeL1, composeL2, parseInterval } from "./composer.js";
+export type { ComposeL1Params, ComposeL2Params } from "./composer.js";
+export { validateComposedScripts } from "./script-validator.js";
+export type { ValidationResult, ValidateComposedParams } from "./script-validator.js";
+export { normalizeWindowsLineEndings, validateHereStringTerminators } from "./composer.js";
+export { createLogger } from "./logger.js";
+export type { LogLevel } from "./logger.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,YAAY,EACV,QAAQ,EACR,kBAAkB,EAClB,UAAU,EACV,UAAU,EACV,QAAQ,EACR,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACpE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAGtF,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+// Primary API
+export { generateFinalScript } from "./orchestrator.js";
+// Lower-level APIs for advanced use
+export { parseL0Script, parseL0Metadata, stripL0Header } from "./l0-parser.js";
+export { composeL1, composeL2, parseInterval } from "./composer.js";
+export { validateComposedScripts } from "./script-validator.js";
+// Utilities
+export { normalizeWindowsLineEndings, validateHereStringTerminators } from "./composer.js";
+export { createLogger } from "./logger.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAexD,oCAAoC;AACpC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGhE,YAAY;AACZ,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/l0-parser.d.ts

@@ -0,0 +1,22 @@
+import type { L0Metadata, L0Script } from "./types.js";
+/**
+ * Parse the metadata header from an L0 script body.
+ * Throws if the header is missing or malformed.
+ */
+export declare function parseL0Metadata(scriptBody: string): L0Metadata;
+/**
+ * Strip the metadata header, shebang, and trailing standalone-execution guard
+ * from an L0 script, returning only the function definition body.
+ *
+ * L0 scripts end with a standalone guard like:
+ *   if [ "${BASH_SOURCE[0]}" = "${0}" ]; then ... fi        (Linux)
+ *   if ($MyInvocation.InvocationName -ne '.') { ... }       (Windows)
+ * This guard must NOT be included in the L1 composition — it would invoke
+ * the L0 collector at parse time rather than inside the orchestration loop.
+ */
+export declare function stripL0Header(scriptBody: string): string;
+/**
+ * Build a complete L0Script object from a NexusEPM script response.
+ */
+export declare function parseL0Script(scriptId: number, scriptBody: string): L0Script;
+//# sourceMappingURL=l0-parser.d.ts.map

package/dist/l0-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"l0-parser.d.ts","sourceRoot":"","sources":["../src/l0-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAwB,MAAM,YAAY,CAAC;AAQ7E;;;GAGG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAkH9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CA4ExD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,QAAQ,CA4C5E"}

package/dist/l0-parser.js

@@ -0,0 +1,209 @@
+import { createLogger } from "./logger.js";
+const log = createLogger("l0-parser");
+const METADATA_START = "# ==== NEXUS MODSCRIPT L0 ====";
+const METADATA_END = "# ==== END METADATA ====";
+/**
+ * Parse the metadata header from an L0 script body.
+ * Throws if the header is missing or malformed.
+ */
+export function parseL0Metadata(scriptBody) {
+    const startIdx = scriptBody.indexOf(METADATA_START);
+    const endIdx = scriptBody.indexOf(METADATA_END);
+    log.trace("Locating metadata markers", { startIdx, endIdx });
+    if (startIdx === -1 || endIdx === -1) {
+        log.error("Metadata markers not found in script body", {
+            hasStart: startIdx !== -1,
+            hasEnd: endIdx !== -1,
+            bodyLength: scriptBody.length,
+        });
+        throw new Error("L0 script missing metadata header (expected NEXUS MODSCRIPT L0 markers)");
+    }
+    const headerBlock = scriptBody.substring(startIdx + METADATA_START.length, endIdx);
+    log.trace("Extracted raw header block", {
+        headerLength: headerBlock.length,
+    });
+    const fields = {};
+    for (const line of headerBlock.split("\n")) {
+        const trimmed = line.replace(/^#\s*/, "").trim();
+        const colonIdx = trimmed.indexOf(":");
+        if (colonIdx === -1)
+            continue;
+        const key = trimmed.substring(0, colonIdx).trim();
+        const value = trimmed.substring(colonIdx + 1).trim();
+        if (key && value) {
+            fields[key] = value;
+        }
+    }
+    log.debug("Parsed metadata fields", {
+        fieldCount: Object.keys(fields).length,
+        fields: Object.keys(fields),
+    });
+    // Validate required fields
+    const required = [
+        "NAME",
+        "CATEGORY",
+        "VERSION",
+        "OS_FAMILY",
+        "DESCRIPTION",
+        "AUTHOR",
+        "DEPENDENCIES",
+        "OUTPUT_SCHEMA_VERSION",
+    ];
+    for (const field of required) {
+        if (!fields[field]) {
+            log.error("Missing required metadata field", {
+                field,
+                presentFields: Object.keys(fields),
+            });
+            throw new Error(`L0 metadata missing required field: ${field}`);
+        }
+    }
+    // Validate OS_FAMILY
+    const osFamily = fields["OS_FAMILY"];
+    if (osFamily !== "linux" && osFamily !== "windows" && osFamily !== "aix") {
+        log.error("Invalid OS_FAMILY value", { osFamily });
+        throw new Error(`Invalid OS_FAMILY: ${osFamily}. Must be "linux", "windows", or "aix".`);
+    }
+    // Validate CATEGORY fetch categories from api
+    const validCategories = [
+        "app_monitoring",
+        "system_health",
+        "security_audit",
+        "compliance",
+        "inventory",
+    ];
+    const category = fields["CATEGORY"];
+    if (!validCategories.includes(category)) {
+        log.error("Invalid CATEGORY value", { category, validCategories });
+        throw new Error(`Invalid CATEGORY: ${category}. Must be one of: ${validCategories.join(", ")}`);
+    }
+    const metadata = {
+        name: fields["NAME"],
+        category,
+        version: fields["VERSION"],
+        osFamily,
+        description: fields["DESCRIPTION"],
+        author: fields["AUTHOR"],
+        dependencies: fields["DEPENDENCIES"],
+        outputSchemaVersion: parseInt(fields["OUTPUT_SCHEMA_VERSION"], 10),
+    };
+    log.info("Metadata parsed successfully", {
+        name: metadata.name,
+        version: metadata.version,
+        osFamily: metadata.osFamily,
+        category: metadata.category,
+    });
+    return metadata;
+}
+/**
+ * Strip the metadata header, shebang, and trailing standalone-execution guard
+ * from an L0 script, returning only the function definition body.
+ *
+ * L0 scripts end with a standalone guard like:
+ *   if [ "${BASH_SOURCE[0]}" = "${0}" ]; then ... fi        (Linux)
+ *   if ($MyInvocation.InvocationName -ne '.') { ... }       (Windows)
+ * This guard must NOT be included in the L1 composition — it would invoke
+ * the L0 collector at parse time rather than inside the orchestration loop.
+ */
+export function stripL0Header(scriptBody) {
+    const endIdx = scriptBody.indexOf(METADATA_END);
+    if (endIdx === -1) {
+        log.debug("No metadata end marker found, returning full body");
+        return scriptBody;
+    }
+    const afterHeader = scriptBody.substring(endIdx + METADATA_END.length);
+    log.trace("Stripped metadata header", {
+        originalLength: scriptBody.length,
+        remainingLength: afterHeader.length,
+    });
+    // Strip leading blank lines and any comment block that follows metadata
+    const lines = afterHeader.split("\n");
+    let startLine = 0;
+    for (let i = 0; i < lines.length; i++) {
+        const trimmed = lines[i]?.trim();
+        if (trimmed && (trimmed === "" || trimmed.startsWith("#"))) {
+            startLine = i + 1;
+        }
+        else {
+            break;
+        }
+    }
+    let body = lines.slice(startLine).join("\n").trim();
+    // Strip trailing standalone-execution guard.
+    // Linux:   if [ "${BASH_SOURCE[0]}" = "${0}" ]; then ... fi
+    // Windows: if ($MyInvocation.InvocationName -ne '.') { ... }
+    // AIX/ksh: ksh88 has no ${BASH_SOURCE}; the convention is a basename check:
+    //          if [ "${0##*/}" = "<name>.ksh" ]; then ... fi
+    // These blocks appear after the function's closing brace and are only meant
+    // for running the L0 script directly — they must not be injected into L1.
+    const linuxGuardPattern = /\n# [^\n]*standalone[^\n]*\n\s*if\s+\[\s+"\$\{BASH_SOURCE\[0\]\}"\s*=\s*"\$\{?0\}?"\s*\];\s*then\b[\s\S]*?\bfi\s*$/i;
+    const linuxGuardSimple = /\nif\s+\[\s+"\$\{BASH_SOURCE\[0\]\}"\s*=\s*"\$\{?0\}?"\s*\];\s*then\b[\s\S]*?\bfi\s*$/i;
+    const windowsGuardPattern = /\nif\s+\(\s*\$MyInvocation[\s\S]*?\}\s*$/i;
+    const aixGuardPattern = /\n# [^\n]*standalone[^\n]*\n\s*if\s+\[\s+"\$\{0##\*\/\}"\s*=[\s\S]*?\bfi\s*$/i;
+    const aixGuardSimple = /\nif\s+\[\s+"\$\{0##\*\/\}"\s*=[\s\S]*?\bfi\s*$/i;
+    const beforeLen = body.length;
+    body = body.replace(linuxGuardPattern, "");
+    if (body.length === beforeLen) {
+        body = body.replace(linuxGuardSimple, "");
+    }
+    if (body.length === beforeLen) {
+        body = body.replace(windowsGuardPattern, "");
+    }
+    if (body.length === beforeLen) {
+        body = body.replace(aixGuardPattern, "");
+    }
+    if (body.length === beforeLen) {
+        body = body.replace(aixGuardSimple, "");
+    }
+    body = body.trim();
+    if (body.length < beforeLen) {
+        log.debug("Stripped trailing standalone-execution guard", {
+            bytesRemoved: beforeLen - body.length,
+        });
+    }
+    log.debug("Function body extracted", {
+        linesStripped: startLine,
+        bodyLength: body.length,
+    });
+    return body;
+}
+/**
+ * Build a complete L0Script object from a NexusEPM script response.
+ */
+export function parseL0Script(scriptId, scriptBody) {
+    log.info("Parsing L0 script", { scriptId, bodyLength: scriptBody.length });
+    const meta = parseL0Metadata(scriptBody);
+    let functionBody = stripL0Header(scriptBody);
+    // Strip \r from Linux/AIX scripts — carriage returns are invalid in bash/ksh
+    // and cause syntax errors when L0 bodies are embedded into the L1 composition.
+    // Windows (PowerShell) scripts keep \r\n as it's their native line ending.
+    if (meta.osFamily === "linux" || meta.osFamily === "aix") {
+        functionBody = functionBody.replace(/\r/g, "");
+    }
+    // Validate that the expected function exists in the body.
+    // AIX/ksh uses the same nexus_collect_<name> convention as Linux.
+    const expectedFn = meta.osFamily === "windows"
+        ? `Invoke-NexusCollect_`
+        : `nexus_collect_${meta.name}`;
+    if (!functionBody.includes(expectedFn)) {
+        log.error("Expected function not found in script body", {
+            scriptName: meta.name,
+            expectedFn,
+            bodyPreview: functionBody.substring(0, 200),
+        });
+        throw new Error(`L0 script "${meta.name}" does not contain expected function "${expectedFn}". ` +
+            `Check naming convention.`);
+    }
+    log.debug("L0 script parsed and validated", {
+        scriptId,
+        name: meta.name,
+        expectedFn,
+    });
+    return {
+        scriptId,
+        meta,
+        fullBody: scriptBody,
+        functionBody,
+    };
+}
+//# sourceMappingURL=l0-parser.js.map

package/dist/l0-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"l0-parser.js","sourceRoot":"","sources":["../src/l0-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;AAEtC,MAAM,cAAc,GAAG,gCAAgC,CAAC;AACxD,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEhD,GAAG,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7D,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,2CAA2C,EAAE;YACrD,QAAQ,EAAE,QAAQ,KAAK,CAAC,CAAC;YACzB,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC;YACrB,UAAU,EAAE,UAAU,CAAC,MAAM;SAC9B,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CACtC,QAAQ,GAAG,cAAc,CAAC,MAAM,EAChC,MAAM,CACP,CAAC;IAEF,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE;QACtC,YAAY,EAAE,WAAW,CAAC,MAAM;KACjC,CAAC,CAAC;IAEH,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAE9B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE;QAClC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;QACtC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;KAC5B,CAAC,CAAC;IAEH,2BAA2B;IAC3B,MAAM,QAAQ,GAAG;QACf,MAAM;QACN,UAAU;QACV,SAAS;QACT,WAAW;QACX,aAAa;QACb,QAAQ;QACR,cAAc;QACd,uBAAuB;KACxB,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC3C,KAAK;gBACL,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aACnC,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAa,CAAC;IACjD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,sBAAsB,QAAQ,yCAAyC,CACxE,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,MAAM,eAAe,GAAiB;QACpC,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,YAAY;QACZ,WAAW;KACZ,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAe,CAAC;IAClD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,qBAAqB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAe;QAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAW;QAC9B,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,SAAS,CAAW;QACpC,QAAQ;QACR,WAAW,EAAE,MAAM,CAAC,aAAa,CAAW;QAC5C,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAW;QAClC,YAAY,EAAE,MAAM,CAAC,cAAc,CAAW;QAC9C,mBAAmB,EAAE,QAAQ,CAC3B,MAAM,CAAC,uBAAuB,CAAW,EACzC,EAAE,CACH;KACF,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE;QACvC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClB,GAAG,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC/D,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEvE,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE;QACpC,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,eAAe,EAAE,WAAW,CAAC,MAAM;KACpC,CAAC,CAAC;IAEH,wEAAwE;IACxE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACjC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3D,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAEpD,6CAA6C;IAC7C,4DAA4D;IAC5D,6DAA6D;IAC7D,4EAA4E;IAC5E,yDAAyD;IACzD,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,iBAAiB,GACrB,qHAAqH,CAAC;IACxH,MAAM,gBAAgB,GACpB,wFAAwF,CAAC;IAC3F,MAAM,mBAAmB,GACvB,2CAA2C,CAAC;IAC9C,MAAM,eAAe,GACnB,+EAA+E,CAAC;IAClF,MAAM,cAAc,GAClB,kDAAkD,CAAC;IAErD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAEnB,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,8CAA8C,EAAE;YACxD,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC,MAAM;SACtC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE;QACnC,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE,IAAI,CAAC,MAAM;KACxB,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,UAAkB;IAChE,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAE3E,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,YAAY,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAE7C,6EAA6E;IAC7E,+EAA+E;IAC/E,2EAA2E;IAC3E,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACzD,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,0DAA0D;IAC1D,kEAAkE;IAClE,MAAM,UAAU,GACd,IAAI,CAAC,QAAQ,KAAK,SAAS;QACzB,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,EAAE,CAAC;IAEnC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,4CAA4C,EAAE;YACtD,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,UAAU;YACV,WAAW,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,CAAC,IAAI,yCAAyC,UAAU,KAAK;YAC7E,0BAA0B,CAC7B,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE;QAC1C,QAAQ;QACR,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU;KACX,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ;QACR,IAAI;QACJ,QAAQ,EAAE,UAAU;QACpB,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,9 @@
+export type LogLevel = "trace" | "debug" | "info" | "error";
+export interface Logger {
+    trace(msg: string, data?: Record<string, unknown>): void;
+    debug(msg: string, data?: Record<string, unknown>): void;
+    info(msg: string, data?: Record<string, unknown>): void;
+    error(msg: string, data?: Record<string, unknown>): void;
+}
+export declare function createLogger(module: string): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AA6C5D,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1D;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAmBnD"}

package/dist/logger.js

@@ -0,0 +1,54 @@
+const LEVEL_PRIORITY = {
+    trace: 0,
+    debug: 1,
+    info: 2,
+    error: 3,
+};
+const LEVEL_LABEL = {
+    trace: "TRC",
+    debug: "DBG",
+    info: "INF",
+    error: "ERR",
+};
+function currentLevel() {
+    const env = process.env["LOG_LEVEL"]?.toLowerCase();
+    if (env && env in LEVEL_PRIORITY)
+        return env;
+    return "info";
+}
+function shouldLog(level) {
+    return LEVEL_PRIORITY[level] >= LEVEL_PRIORITY[currentLevel()];
+}
+function formatTimestamp() {
+    return new Date().toISOString();
+}
+function formatMessage(level, module, msg, data) {
+    const ts = formatTimestamp();
+    const label = LEVEL_LABEL[level];
+    const base = `${ts} [${label}] [${module}] ${msg}`;
+    if (data && Object.keys(data).length > 0) {
+        return `${base} ${JSON.stringify(data)}`;
+    }
+    return base;
+}
+export function createLogger(module) {
+    return {
+        trace(msg, data) {
+            if (shouldLog("trace"))
+                process.stderr.write(formatMessage("trace", module, msg, data) + "\n");
+        },
+        debug(msg, data) {
+            if (shouldLog("debug"))
+                process.stderr.write(formatMessage("debug", module, msg, data) + "\n");
+        },
+        info(msg, data) {
+            if (shouldLog("info"))
+                process.stderr.write(formatMessage("info", module, msg, data) + "\n");
+        },
+        error(msg, data) {
+            if (shouldLog("error"))
+                process.stderr.write(formatMessage("error", module, msg, data) + "\n");
+        },
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAA6B;IAC/C,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,IAAI,EAAE,KAAK;IACX,KAAK,EAAE,KAAK;CACb,CAAC;AAEF,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;IACpD,IAAI,GAAG,IAAI,GAAG,IAAI,cAAc;QAAE,OAAO,GAAe,CAAC;IACzD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAe;IAChC,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CACpB,KAAe,EACf,MAAc,EACd,GAAW,EACX,IAA8B;IAE9B,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,GAAG,EAAE,KAAK,KAAK,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;IACnD,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AASD,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO;QACL,KAAK,CAAC,GAAG,EAAE,IAAI;YACb,IAAI,SAAS,CAAC,OAAO,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,IAAI;YACb,IAAI,SAAS,CAAC,OAAO,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,IAAI;YACZ,IAAI,SAAS,CAAC,MAAM,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,IAAI;YACb,IAAI,SAAS,CAAC,OAAO,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/orchestrator.d.ts

@@ -0,0 +1,41 @@
+import type { ModScriptLifecycle, OsFamily } from "./types.js";
+export interface GenerateOptions {
+    platform: OsFamily;
+    templateUrls: {
+        l1: string;
+        l2: string;
+    };
+    orgId: string;
+    bufferTime?: string;
+    timeout?: string;
+    icebergEndpoint?: string;
+    agentId?: string;
+    authToken?: string;
+    maxParallel?: number;
+    writeToDisk?: boolean;
+    outputDir?: string;
+    previousServiceId?: string;
+    /** Continuous collection by default; deletion verification is Windows-only. */
+    lifecycle?: ModScriptLifecycle;
+}
+/**
+ * Generate composed L1 + L2 scripts from L0 script bodies.
+ *
+ * Accepts L0 scripts as raw strings (e.g. from an API, database, or file read),
+ * fetches L1/L2 templates from the provided URLs, composes, validates,
+ * and returns both scripts as strings.
+ *
+ * @param l0ScriptBodies - raw L0 script contents (must include metadata headers)
+ * @param options        - platform, template URLs, and optional overrides
+ */
+export declare function generateFinalScript(l0ScriptBodies: string[], options: GenerateOptions): Promise<{
+    l1Script: string;
+    l2Script: string;
+    platform: OsFamily;
+    modules: string[];
+    serviceName: string;
+    requiredRuntimeArgs: string[];
+    l1Path?: string;
+    l2Path?: string;
+}>;
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAY,kBAAkB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAqBzE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;KACZ,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+EAA+E;IAC/E,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,cAAc,EAAE,MAAM,EAAE,EACxB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAuMD"}

package/dist/orchestrator.js

@@ -0,0 +1,198 @@
+import { existsSync, mkdirSync, writeFileSync, } from "node:fs";
+import { join, resolve } from "node:path";
+import { parseL0Script } from "./l0-parser.js";
+import { composeL1, composeL2, parseInterval } from "./composer.js";
+import { validateComposedScripts } from "./script-validator.js";
+import { createLogger } from "./logger.js";
+const log = createLogger("orchestrator");
+// ── Template fetching ───────────────────────────────────────────────────────
+async function fetchTemplate(url, label) {
+    log.debug("Fetching template", { label, url });
+    const response = await fetch(url);
+    if (!response.ok) {
+        log.error("Template fetch failed", { label, url, status: response.status });
+        throw new Error(`Failed to fetch ${label} template from ${url}: ${response.status} ${response.statusText}`);
+    }
+    const body = await response.text();
+    log.debug("Template fetched", { label, length: body.length });
+    return body;
+}
+/**
+ * Generate composed L1 + L2 scripts from L0 script bodies.
+ *
+ * Accepts L0 scripts as raw strings (e.g. from an API, database, or file read),
+ * fetches L1/L2 templates from the provided URLs, composes, validates,
+ * and returns both scripts as strings.
+ *
+ * @param l0ScriptBodies - raw L0 script contents (must include metadata headers)
+ * @param options        - platform, template URLs, and optional overrides
+ */
+export async function generateFinalScript(l0ScriptBodies, options) {
+    const platform = options.platform;
+    const lifecycle = options.lifecycle ?? { kind: "continuous" };
+    if (lifecycle.kind === "deletion-verifier") {
+        if (platform !== "windows") {
+            throw new Error("deletion-verifier lifecycle is currently supported on windows only");
+        }
+        if (!lifecycle.jobId || !/^[A-Za-z0-9._-]+$/.test(lifecycle.jobId)) {
+            throw new Error("deletion-verifier jobId must contain only letters, numbers, '.', '_' or '-'");
+        }
+        if (!lifecycle.callbackToken) {
+            throw new Error("deletion-verifier callbackToken is required");
+        }
+        if (lifecycle.expectedWindowsUpdateAuOptions !== null &&
+            (!Number.isInteger(lifecycle.expectedWindowsUpdateAuOptions) || lifecycle.expectedWindowsUpdateAuOptions < 0)) {
+            throw new Error("deletion-verifier expectedWindowsUpdateAuOptions must be a non-negative integer or null");
+        }
+    }
+    log.info("Starting script generation", {
+        scriptCount: l0ScriptBodies.length,
+        platform,
+        orgId: options.orgId,
+        bufferTime: options.bufferTime ?? "(not set)",
+        timeout: options.timeout ?? "(not set)",
+    });
+    // ── Fetch templates from URLs ──────────────────────────────────────────
+    log.info("Fetching templates", { l1Url: options.templateUrls.l1, l2Url: options.templateUrls.l2 });
+    const [l1Template, l2Template] = await Promise.all([
+        fetchTemplate(options.templateUrls.l1, "L1"),
+        fetchTemplate(options.templateUrls.l2, "L2"),
+    ]);
+    // ── Parse L0 scripts from provided bodies ──────────────────────────────
+    const l0Scripts = [];
+    for (let i = 0; i < l0ScriptBodies.length; i++) {
+        const scriptBody = l0ScriptBodies[i];
+        const l0 = parseL0Script(i, scriptBody);
+        l0Scripts.push(l0);
+        log.info("L0 script parsed", {
+            name: l0.meta.name,
+            version: l0.meta.version,
+            category: l0.meta.category,
+            osFamily: l0.meta.osFamily,
+        });
+    }
+    if (l0Scripts.length === 0 || !l0Scripts[0]) {
+        log.error("No L0 scripts provided");
+        throw new Error("No L0 script bodies provided");
+    }
+    if (lifecycle.kind === "deletion-verifier" && l0Scripts.length !== 1) {
+        throw new Error("deletion-verifier lifecycle requires exactly one L0 collector");
+    }
+    if (lifecycle.kind === "deletion-verifier" && l0Scripts[0]?.meta.name !== "nexus_endpoint_deletion") {
+        throw new Error("deletion-verifier lifecycle requires the nexus_endpoint_deletion collector");
+    }
+    // ── Validate L0 scripts match the target platform ─────────────────────
+    const mismatch = l0Scripts.find((l0) => l0.meta.osFamily !== platform);
+    if (mismatch) {
+        log.error("Platform mismatch in L0 script", {
+            targetPlatform: platform,
+            mismatchScript: mismatch.meta.name,
+            mismatchOs: mismatch.meta.osFamily,
+        });
+        throw new Error(`Platform mismatch: "${mismatch.meta.name}" is ${mismatch.meta.osFamily}, target platform is ${platform}`);
+    }
+    // ── Compose L1 ─────────────────────────────────────────────────────────
+    log.info("Composing L1 combined collection script", { platform });
+    const l1Script = composeL1({
+        orgId: options.orgId,
+        l0Scripts,
+        osFamily: platform,
+        template: l1Template,
+    });
+    // ── Compose L2 ─────────────────────────────────────────────────────────
+    log.info("Composing L2 deployment wrapper", { platform });
+    // Parse intervals only if provided — otherwise they stay undefined (runtime-required)
+    const bufferTimeParsed = options.bufferTime ? parseInterval(options.bufferTime) : undefined;
+    const timeoutParsed = options.timeout ? parseInterval(options.timeout) : undefined;
+    const serviceName = lifecycle.kind === "deletion-verifier"
+        ? `nxd-${lifecycle.jobId}`
+        : `nxm-${options.orgId}-${Date.now()}`;
+    log.debug("L2 parameters resolved", {
+        serviceName,
+        bufferTime: bufferTimeParsed?.systemd ?? "(not set)",
+        timeout: timeoutParsed?.systemd ?? "(not set)",
+        maxParallel: options.maxParallel ?? 5,
+        previousServiceId: options.previousServiceId ?? "(none)",
+    });
+    const { script: l2Script, requiredRuntimeArgs } = composeL2({
+        l1Script,
+        serviceName,
+        bufferTime: bufferTimeParsed?.systemd,
+        bufferTimeSeconds: bufferTimeParsed?.seconds,
+        timeout: timeoutParsed?.systemd,
+        timeoutSeconds: timeoutParsed?.seconds,
+        icebergEndpoint: options.icebergEndpoint,
+        agentId: options.agentId,
+        authToken: options.authToken,
+        orgId: options.orgId,
+        maxParallel: options.maxParallel,
+        osFamily: platform,
+        template: l2Template,
+        previousServiceId: options.previousServiceId,
+        lifecycle,
+    });
+    // ── Validate composed scripts ───────────────────────────────────────
+    const moduleNames = l0Scripts.map((l0) => l0.meta.name);
+    log.info("Validating composed scripts");
+    const validation = await validateComposedScripts({
+        l1Script,
+        l2Script,
+        osFamily: platform,
+        moduleNames,
+        orgId: options.orgId,
+    });
+    for (const w of validation.warnings) {
+        log.info("Validation warning", { warning: w });
+    }
+    if (!validation.valid) {
+        log.error("Script validation failed", {
+            errors: validation.errors,
+            warnings: validation.warnings,
+        });
+        throw new Error(`Composed script validation failed with ${validation.errors.length} error(s):\n` +
+            validation.errors.map((e) => `  - ${e}`).join("\n"));
+    }
+    log.info("Validation passed", {
+        warnings: validation.warnings.length,
+    });
+    // ── Optionally write to final-scripts/ ──────────────────────────────
+    let l1Path;
+    let l2Path;
+    if (options.writeToDisk) {
+        const outDir = resolve(options.outputDir ?? "./final-scripts");
+        if (!existsSync(outDir)) {
+            mkdirSync(outDir, { recursive: true });
+        }
+        const ts = new Date().toISOString().replace(/[:.]/g, "-").substring(0, 19);
+        const ext = platform === "windows" ? "ps1" : platform === "aix" ? "ksh" : "sh";
+        const l1File = `l1-${moduleNames.join("-")}-${ts}.${ext}`;
+        const l2File = `l2-deploy-${moduleNames.join("-")}-${ts}.${ext}`;
+        l1Path = join(outDir, l1File);
+        l2Path = join(outDir, l2File);
+        // Windows PowerShell 5.1 reads files without a BOM using the system's
+        // ANSI code page (usually Windows-1252). Prepend UTF-8 BOM to .ps1 files
+        // so 5.1 correctly interprets them as UTF-8.
+        const UTF8_BOM = "\uFEFF";
+        if (platform === "windows") {
+            writeFileSync(l1Path, UTF8_BOM + l1Script, "utf-8");
+            writeFileSync(l2Path, UTF8_BOM + l2Script, "utf-8");
+        }
+        else {
+            writeFileSync(l1Path, l1Script, "utf-8");
+            writeFileSync(l2Path, l2Script, "utf-8");
+        }
+        log.info("Scripts written to disk", { l1Path, l2Path });
+    }
+    log.info("Script generation complete", {
+        l1Length: l1Script.length,
+        l2Length: l2Script.length,
+        serviceName,
+        modules: moduleNames,
+        bufferTime: options.bufferTime ?? "(not set)",
+        timeout: options.timeout ?? "(not set)",
+        platform,
+        requiredRuntimeArgs,
+    });
+    return { l1Script, l2Script, platform, modules: moduleNames, serviceName, requiredRuntimeArgs, l1Path, l2Path };
+}
+//# sourceMappingURL=orchestrator.js.map

package/dist/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;AAEzC,+EAA+E;AAE/E,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,KAAa;IACrD,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,KAAK,CACb,mBAAmB,KAAK,kBAAkB,GAAG,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAsBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,cAAwB,EACxB,OAAwB;IAWxB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,YAAqB,EAAE,CAAC;IAEvE,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,SAAS,CAAC,8BAA8B,KAAK,IAAI;YACjD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,8BAA8B,CAAC,IAAI,SAAS,CAAC,8BAA8B,GAAG,CAAC,CAAC,EAAE,CAAC;YAClH,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;QACrC,WAAW,EAAE,cAAc,CAAC,MAAM;QAClC,QAAQ;QACR,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,WAAW;QAC7C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW;KACxC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;IACnG,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC;QAC5C,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC;KAC7C,CAAC,CAAC;IAEH,0EAA0E;IAC1E,MAAM,SAAS,GAAe,EAAE,CAAC;IAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAE,CAAC;QACtC,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACxC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC3B,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;YAClB,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO;YACxB,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ;YAC1B,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IAED,yEAAyE;IACzE,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACvE,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAC1C,cAAc,EAAE,QAAQ;YACxB,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;YAClC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;SACnC,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,QAAQ,CAAC,IAAI,CAAC,QAAQ,wBAAwB,QAAQ,EAAE,CAC1G,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,SAAS,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS;QACT,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;KACrB,CAAC,CAAC;IAEH,0EAA0E;IAC1E,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE1D,sFAAsF;IACtF,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,KAAK,mBAAmB;QACxD,CAAC,CAAC,OAAO,SAAS,CAAC,KAAK,EAAE;QAC1B,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAEzC,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE;QAClC,WAAW;QACX,UAAU,EAAE,gBAAgB,EAAE,OAAO,IAAI,WAAW;QACpD,OAAO,EAAE,aAAa,EAAE,OAAO,IAAI,WAAW;QAC9C,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC;QACrC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,QAAQ;KACzD,CAAC,CAAC;IAEH,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,SAAS,CAAC;QAC1D,QAAQ;QACR,WAAW;QACX,UAAU,EAAE,gBAAgB,EAAE,OAAO;QACrC,iBAAiB,EAAE,gBAAgB,EAAE,OAAO;QAC5C,OAAO,EAAE,aAAa,EAAE,OAAO;QAC/B,cAAc,EAAE,aAAa,EAAE,OAAO;QACtC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,SAAS;KACV,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExD,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC;QAC/C,QAAQ;QACR,QAAQ;QACR,QAAQ,EAAE,QAAQ;QAClB,WAAW;QACX,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACpC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,0CAA0C,UAAU,CAAC,MAAM,CAAC,MAAM,cAAc;YAC9E,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE;QAC5B,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;KACrC,CAAC,CAAC;IAEH,uEAAuE;IACvE,IAAI,MAA0B,CAAC;IAC/B,IAAI,MAA0B,CAAC;IAE/B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GACP,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAErE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,aAAa,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;QAEjE,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE9B,sEAAsE;QACtE,yEAAyE;QACzE,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC;QAC1B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,aAAa,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,aAAa,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;QACrC,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,WAAW;QACX,OAAO,EAAE,WAAW;QACpB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,WAAW;QAC7C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW;QACvC,QAAQ;QACR,mBAAmB;KACpB,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAClH,CAAC"}

package/dist/script-validator.d.ts

@@ -0,0 +1,22 @@
+import type { OsFamily } from "./types.js";
+export interface ValidationResult {
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+}
+export declare function validateL1(script: string, osFamily: OsFamily, moduleNames: string[]): ValidationResult;
+export declare function validateL2(script: string, osFamily: OsFamily): ValidationResult;
+export declare function validateParameterFlow(l1Script: string, l2Script: string, osFamily: OsFamily, orgId: string): ValidationResult;
+export declare function syntaxCheckBash(script: string, label: string): Promise<ValidationResult>;
+export declare function syntaxCheckKsh(script: string, label: string): Promise<ValidationResult>;
+export declare function syntaxCheckPowerShell(script: string, label: string): Promise<ValidationResult>;
+export declare function validateL2StructuralDryRun(l1Script: string, l2Script: string, osFamily: OsFamily, moduleNames: string[]): Promise<ValidationResult>;
+export interface ValidateComposedParams {
+    l1Script: string;
+    l2Script: string;
+    osFamily: OsFamily;
+    moduleNames: string[];
+    orgId: string;
+}
+export declare function validateComposedScripts(params: ValidateComposedParams): Promise<ValidationResult>;
+//# sourceMappingURL=script-validator.d.ts.map

package/dist/script-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-validator.d.ts","sourceRoot":"","sources":["../src/script-validator.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAM3C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAoWD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,EAAE,GACpB,gBAAgB,CA0BlB;AA2bD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,GACjB,gBAAgB,CA0BlB;AAID,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,MAAM,GACZ,gBAAgB,CAiIlB;AA4BD,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAE9F;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAM7F;AAiGD,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyCpG;AAwDD,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAgJ3B;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAkD3B"}