@mesh-tech/mesh-cli 0.1.1 → 0.12.1

package/dist/src/utils/pid.js

@@ -0,0 +1,83 @@
+/**
+ * Guard for pids the CLI reads back rather than constructs.
+ *
+ * Every teardown path in the CLI signals a pid it recovered from somewhere:
+ * `tunnel-state.json`, `runner.json`, `daemon.json`, or a `ps` argv scan. None
+ * of those are trustworthy — a truncated write, a stale file from an older
+ * build, or a hand-edited state dir can put any integer there. POSIX `kill(2)`
+ * overloads the pid argument, so the wrong integer is not a no-op:
+ *
+ *  - `kill(0, sig)`  → every process in the CALLER'S OWN process group.
+ *  - `kill(-1, sig)` → every process the caller is permitted to signal.
+ *  - `kill(1, sig)`  → init. And teardown negates before signalling, so a `1`
+ *    on disk becomes `kill(-1)` — the broadcast.
+ *
+ * That is not hypothetical: a `pid: -1` written by a unit test SIGTERM'd the
+ * author's entire login session (tmux server, every pane, an in-flight
+ * `mesh login`) on 2026-08-01. Refuse the input instead of signalling it.
+ *
+ * The guard is intentionally strict about the LOW end (`pid >= 2`) so the
+ * NEGATED form used for process-group teardown is safe by construction: if
+ * `pid >= 2` then `-pid <= -2`, which is always a real process group and never
+ * `0` (own group) or `-1` (broadcast). Callers signalling `-pid` need no
+ * second check — see `killSupervisor`.
+ */
+import { MeshCliError } from "./errors.js";
+/**
+ * Lowest pid the CLI will ever signal. 0 and 1 are the two overloaded values;
+ * anything below 0 is already a process-group id, not a pid.
+ */
+const MIN_SIGNALABLE_PID = 2;
+/**
+ * Why `pid` must not be handed to `process.kill`, or null if it is signalable.
+ * Pure — every branch is unit-testable without spawning anything.
+ */
+function unsignalableReason(pid) {
+    if (typeof pid !== "number") {
+        return `expected an integer, got ${typeof pid} (${String(pid)})`;
+    }
+    if (!Number.isInteger(pid)) {
+        // NaN, ±Infinity, and fractions all land here. Number.isInteger is the one
+        // predicate that rejects every non-pid a JSON.parse can produce.
+        return `expected an integer, got ${String(pid)}`;
+    }
+    if (pid === 0) {
+        return "0 is not a pid — kill(0) signals every process in this shell's own process group";
+    }
+    if (pid === 1) {
+        return "1 is init — and teardown negates first, so kill(-1) would signal every process you can signal";
+    }
+    if (pid < MIN_SIGNALABLE_PID) {
+        return `${pid} is negative — that is already a process-group id, not a pid`;
+    }
+    if (pid === process.pid) {
+        return `${pid} is this CLI process itself — signalling it (or its group) would kill the command doing the teardown`;
+    }
+    if (pid === process.ppid) {
+        return `${pid} is this CLI's parent (your shell) — signalling its group would kill your terminal session`;
+    }
+    return null;
+}
+/**
+ * Throw unless `pid` is safe to pass to `process.kill` (directly or negated).
+ *
+ * Call this at the top of any function that signals a pid it did not construct
+ * itself. Existence checks (`process.kill(pid, 0)`) do not need it — signal 0
+ * delivers nothing — but they gain nothing from skipping it either.
+ *
+ * @throws {MeshCliError} with `rm <file>` remediation when `source.file` is set.
+ */
+export function assertSignalablePid(pid, source) {
+    const reason = unsignalableReason(pid);
+    if (reason === null)
+        return;
+    // "Corrupt or stale" is only true when the pid was read back from a state
+    // file. Call sites without one (e.g. reclaimPort's lsof-derived holder) get a
+    // pid that is CORRECT — that is exactly why it is refused — so the causal
+    // clause is gated on the same condition as the `rm` remediation.
+    throw new MeshCliError(`Refusing to signal ${source.what} — ${reason}. ` +
+        (source.file
+            ? `The recorded value is corrupt or stale; signalling it could terminate unrelated processes.`
+            : `Signalling it could terminate unrelated processes.`), source.file ? { remediation: { command: `rm ${source.file}` } } : {});
+}
+//# sourceMappingURL=pid.js.map

package/dist/src/utils/pid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pid.js","sourceRoot":"","sources":["../../../src/utils/pid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAe3C;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,4BAA4B,OAAO,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,iEAAiE;QACjE,OAAO,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,OAAO,kFAAkF,CAAC;IAC5F,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,OAAO,+FAA+F,CAAC;IACzG,CAAC;IACD,IAAI,GAAG,GAAG,kBAAkB,EAAE,CAAC;QAC7B,OAAO,GAAG,GAAG,8DAA8D,CAAC;IAC9E,CAAC;IACD,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;QACxB,OAAO,GAAG,GAAG,sGAAsG,CAAC;IACtH,CAAC;IACD,IAAI,GAAG,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,4FAA4F,CAAC;IAC5G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,MAAiB;IACjE,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAC5B,0EAA0E;IAC1E,8EAA8E;IAC9E,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,IAAI,YAAY,CACpB,sBAAsB,MAAM,CAAC,IAAI,MAAM,MAAM,IAAI;QAC/C,CAAC,MAAM,CAAC,IAAI;YACV,CAAC,CAAC,4FAA4F;YAC9F,CAAC,CAAC,oDAAoD,CAAC,EAC3D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CACrE,CAAC;AACJ,CAAC"}

package/dist/src/utils/pulumi-run.d.ts

@@ -0,0 +1,23 @@
+import { type CredProbe } from "../commands/login.js";
+/**
+ * Map a credential probe to a preflight message. Pure — no I/O — so the
+ * remediation wording is unit-testable. `null` means "proceed" (`ok`, or a
+ * non-fatal warning already surfaced). `fatal` callers should stop before
+ * touching pulumi; non-fatal is a warning that lets the run continue.
+ */
+export declare function credProbeToPreflightError(probe: CredProbe, context: string): {
+    message: string;
+    fatal: boolean;
+} | null;
+/**
+ * Resolve deployer AWS credentials for a `pulumi` invocation against `stack`,
+ * with an up-front login preflight. Returns env vars to merge into the pulumi
+ * child (`AWS_ACCESS_KEY_ID`/`_SECRET_ACCESS_KEY`/`_SESSION_TOKEN`). Exits the
+ * process with a clear, actionable message on any hard failure — callers can
+ * treat a return as "creds are ready".
+ */
+export declare function resolvePulumiEnv(opts: {
+    appRoot: string;
+    stack: string;
+}): Promise<Record<string, string>>;
+//# sourceMappingURL=pulumi-run.d.ts.map

package/dist/src/utils/pulumi-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pulumi-run.d.ts","sourceRoot":"","sources":["../../../src/utils/pulumi-run.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAExE;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,GACd;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAkC5C;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiDlC"}

package/dist/src/utils/pulumi-run.js

@@ -0,0 +1,112 @@
+/**
+ * The single credentialed-Pulumi chokepoint (MESH-2085).
+ *
+ * Every mesh command that shells `pulumi` against the S3 state backend needs
+ * AWS credentials from the stack's `mesh:deployerRole`. Historically each
+ * command re-implemented that glue and `mesh stack init` skipped it entirely
+ * (→ `NoCredentialProviders`). This module centralizes it:
+ *
+ *   1. read `mesh:deployerRole` from the stack config (clear error if absent),
+ *   2. run a LOGIN PREFLIGHT (`probeCredentials`) that names the real problem
+ *      ("run `mesh login --device`") BEFORE pulumi is invoked — and before
+ *      `resolveAwsCredentials`' interactive path can hang a browser login over
+ *      SSH,
+ *   3. resolve the deployer creds and return them as env vars to merge into the
+ *      `pulumi` child process.
+ *
+ * Callers thread the returned env into their existing `execFileSync("pulumi", …)`
+ * calls (deploy passes it once; stack init reuses it across init/select/config).
+ */
+import { logError, logWarn } from "./log.js";
+import { readStackConfig } from "./pulumi.js";
+import { derivePlatformContext, resolveAwsCredentials } from "./aws-auth.js";
+import { probeCredentials } from "../commands/login.js";
+/**
+ * Map a credential probe to a preflight message. Pure — no I/O — so the
+ * remediation wording is unit-testable. `null` means "proceed" (`ok`, or a
+ * non-fatal warning already surfaced). `fatal` callers should stop before
+ * touching pulumi; non-fatal is a warning that lets the run continue.
+ */
+export function credProbeToPreflightError(probe, context) {
+    switch (probe.state) {
+        case "ok":
+            return null;
+        case "no-session":
+            return {
+                fatal: true,
+                message: `Not logged in for ${context}. Run:\n` +
+                    `    mesh login ${context} --device`,
+            };
+        case "expired-session":
+            return {
+                fatal: true,
+                message: `Your mesh login session for ${context} expired. Run:\n` +
+                    `    mesh login ${context} --device`,
+            };
+        case "assume-denied":
+            return {
+                fatal: true,
+                message: `Logged in, but couldn't assume the deployer role — ${probe.detail}\n` +
+                    `  Check mesh:deployerRole in the stack config and your IAM access.`,
+            };
+        case "stale-env-override":
+            return {
+                fatal: false,
+                message: `Stale AWS_* env vars are set and will override your mesh login.\n` +
+                    `  If pulumi fails with an auth error, clear them first:\n` +
+                    `    unset AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN`,
+            };
+    }
+}
+/**
+ * Resolve deployer AWS credentials for a `pulumi` invocation against `stack`,
+ * with an up-front login preflight. Returns env vars to merge into the pulumi
+ * child (`AWS_ACCESS_KEY_ID`/`_SECRET_ACCESS_KEY`/`_SESSION_TOKEN`). Exits the
+ * process with a clear, actionable message on any hard failure — callers can
+ * treat a return as "creds are ready".
+ */
+export async function resolvePulumiEnv(opts) {
+    const { appRoot, stack } = opts;
+    const roleArn = readStackConfig(appRoot, stack, "mesh:deployerRole");
+    if (!roleArn) {
+        // Platform stacks are deployed by operators with ambient credentials
+        // (SSO/exported env) and typically carry no mesh:deployerRole — only app
+        // stacks do. With ambient creds present, run Pulumi against them directly.
+        if (process.env.AWS_ACCESS_KEY_ID) {
+            return {};
+        }
+        logError(`No mesh:deployerRole in Pulumi.${stack}.yaml — mesh needs it to assume a ` +
+            `role for the Pulumi backend.\n` +
+            `  Set it (copy the value from a base stack), e.g.:\n` +
+            `    mesh deploy config set mesh:deployerRole arn:aws:iam::<account>:role/<tenant>-<stage>-apps-deployer --stack ${stack}\n` +
+            `  (or provide operator AWS credentials in the environment for platform stacks).`);
+        process.exit(1);
+    }
+    // Skip the login preflight whenever explicit ambient AWS credentials are
+    // present — both the CI/OIDC case (key + session token) AND long-lived static
+    // keys (key, no session token). Requiring a session token here regressed
+    // static-key users: with no cached mesh session the probe returns `no-session`
+    // → fatal, even though `resolveAwsCredentials`' ambient-SDK AssumeRole path
+    // (which accepts a bare static key) would have worked. (MESH-2085 review.)
+    const hasAmbientCreds = !!process.env.AWS_ACCESS_KEY_ID;
+    const context = derivePlatformContext(appRoot, stack);
+    if (!hasAmbientCreds && context) {
+        const probe = await probeCredentials(context, roleArn);
+        const preflight = credProbeToPreflightError(probe, context);
+        if (preflight?.fatal) {
+            logError(preflight.message);
+            process.exit(1);
+        }
+        if (preflight)
+            logWarn(preflight.message);
+    }
+    const resolved = await resolveAwsCredentials(roleArn, appRoot, stack);
+    if (!resolved) {
+        logError(`Failed to obtain AWS credentials for ${roleArn}.\n` +
+            (context ? `  Try: mesh login ${context} --device\n` : "") +
+            `  (or provide AWS credentials in the environment).`);
+        process.exit(1);
+    }
+    return { ...resolved.env };
+}
+//# sourceMappingURL=pulumi-run.js.map

package/dist/src/utils/pulumi-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pulumi-run.js","sourceRoot":"","sources":["../../../src/utils/pulumi-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAkB,MAAM,sBAAsB,CAAC;AAExE;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAgB,EAChB,OAAe;IAEf,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,IAAI;YACP,OAAO,IAAI,CAAC;QACd,KAAK,YAAY;YACf,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,OAAO,EACL,qBAAqB,OAAO,UAAU;oBACtC,kBAAkB,OAAO,WAAW;aACvC,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,OAAO,EACL,+BAA+B,OAAO,kBAAkB;oBACxD,kBAAkB,OAAO,WAAW;aACvC,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,OAAO,EACL,sDAAsD,KAAK,CAAC,MAAM,IAAI;oBACtE,oEAAoE;aACvE,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO,EACL,mEAAmE;oBACnE,2DAA2D;oBAC3D,qEAAqE;aACxE,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAGtC;IACC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAEhC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,QAAQ,CACN,kCAAkC,KAAK,oCAAoC;YACzE,gCAAgC;YAChC,sDAAsD;YACtD,mHAAmH,KAAK,IAAI;YAC5H,iFAAiF,CACpF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yEAAyE;IACzE,8EAA8E;IAC9E,yEAAyE;IACzE,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,eAAe,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACxD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,eAAe,IAAI,OAAO,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC;YACrB,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,SAAS;YAAE,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,CACN,wCAAwC,OAAO,KAAK;YAClD,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,OAAO,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,oDAAoD,CACvD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;AAC7B,CAAC"}

package/dist/src/utils/pulumi.d.ts

@@ -21,4 +21,19 @@ export declare function getCurrentStack(appRoot: string): string | null;
  * For complex values, use `pulumi config` CLI instead.
  */
 export declare function readStackConfig(appRoot: string, stack: string, key: string): string | null;
+/**
+ * Run `pulumi stack output <key> --json` with the given extra args.
+ *
+ * Pulumi redacts secret-tainted outputs as the literal string `"[secret]"`.
+ * Outputs like `env.register()`'s `dev` blob are tainted because they transitively
+ * include secret values (e.g. `TEMPORAL_ENCODING_KEY`, DB passwords), even though
+ * much of the blob (tunnels, namespace, service scaffolding) is non-secret.
+ *
+ * This helper tries without `--show-secrets` first — which avoids requiring
+ * the local machine to have the stack's secrets provider configured (KMS access
+ * etc.) — and retries with `--show-secrets` only if the first call returns a
+ * `"[secret]"` placeholder. KMS/secrets-provider errors are not retried because
+ * they will fail the same way with the flag set.
+ */
+export declare function pulumiStackOutput(appRoot: string, key: string, extraArgs: string[], env?: Record<string, string>): string;
 //# sourceMappingURL=pulumi.d.ts.map

package/dist/src/utils/pulumi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pulumi.d.ts","sourceRoot":"","sources":["../../../src/utils/pulumi.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ3D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAI1D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW9D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU1F"}
+{"version":3,"file":"pulumi.d.ts","sourceRoot":"","sources":["../../../src/utils/pulumi.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ3D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAI1D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW9D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU1F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EAAE,EACnB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,MAAM,CA+BR"}

package/dist/src/utils/pulumi.js

@@ -60,4 +60,39 @@ export function readStackConfig(appRoot, stack, key) {
         return null;
     return match[1].trim().replace(/^["']|["']$/g, "");
 }
+/**
+ * Run `pulumi stack output <key> --json` with the given extra args.
+ *
+ * Pulumi redacts secret-tainted outputs as the literal string `"[secret]"`.
+ * Outputs like `env.register()`'s `dev` blob are tainted because they transitively
+ * include secret values (e.g. `TEMPORAL_ENCODING_KEY`, DB passwords), even though
+ * much of the blob (tunnels, namespace, service scaffolding) is non-secret.
+ *
+ * This helper tries without `--show-secrets` first — which avoids requiring
+ * the local machine to have the stack's secrets provider configured (KMS access
+ * etc.) — and retries with `--show-secrets` only if the first call returns a
+ * `"[secret]"` placeholder. KMS/secrets-provider errors are not retried because
+ * they will fail the same way with the flag set.
+ */
+export function pulumiStackOutput(appRoot, key, extraArgs, env) {
+    const execEnv = env ? { ...process.env, ...env } : undefined;
+    // First attempt: no --show-secrets (works without PULUMI_CONFIG_PASSPHRASE / KMS)
+    try {
+        const result = execFileSync("pulumi", ["stack", "output", key, "--json", ...extraArgs], { cwd: appRoot, encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], env: execEnv });
+        // If the output contains "[secret]" placeholders, retry with --show-secrets
+        if (result.includes('"[secret]"')) {
+            return execFileSync("pulumi", ["stack", "output", key, "--json", "--show-secrets", ...extraArgs], { cwd: appRoot, encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], env: execEnv });
+        }
+        return result;
+    }
+    catch (err) {
+        // If the error is a secrets/KMS issue, don't retry with --show-secrets
+        // (it will fail the same way). Only retry for other Pulumi errors.
+        const errMsg = err?.stderr ?? "";
+        if (errMsg.includes("kms:") || errMsg.includes("KMS") || errMsg.includes("secrets manager")) {
+            throw err;
+        }
+        return execFileSync("pulumi", ["stack", "output", key, "--json", "--show-secrets", ...extraArgs], { cwd: appRoot, encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], env: execEnv });
+    }
+}
 //# sourceMappingURL=pulumi.js.map

package/dist/src/utils/pulumi.js.map

@@ -1 +1 @@
-{"version":3,"file":"pulumi.js","sourceRoot":"","sources":["../../../src/utils/pulumi.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC;SAClE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE;YAC9D,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,KAAa,EAAE,GAAW;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"pulumi.js","sourceRoot":"","sources":["../../../src/utils/pulumi.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC;SAClE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE;YAC9D,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,KAAa,EAAE,GAAW;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,GAAW,EACX,SAAmB,EACnB,GAA4B;IAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,kFAAkF;IAClF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CACzB,QAAQ,EACR,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,EAChD,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CACrF,CAAC;QACF,4EAA4E;QAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,OAAO,YAAY,CACjB,QAAQ,EACR,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAC,EAClE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CACrF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,MAAM,GAAI,GAA2B,EAAE,MAAM,IAAI,EAAE,CAAC;QAC1D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC5F,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,YAAY,CACjB,QAAQ,EACR,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAC,EAClE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CACrF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/utils/reachability.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Resolve `true` if a TCP connection to `host:port` completes within
+ * `timeoutMs`, else `false`. Never rejects — any failure (timeout, refused, DNS)
+ * is a `false`, since for transport selection "can't reach it" is the only signal
+ * that matters. The socket is always destroyed.
+ */
+export declare function probeTcpReachable(host: string, port: number, timeoutMs?: number): Promise<boolean>;
+/**
+ * Resolve `true` if a connection to `host:port` completes AND survives a brief
+ * grace window (`holdMs`). Stronger than {@link probeTcpReachable} for probing a
+ * LOCAL FORWARDER port, where "the port accepts" is not proof the tunnel carries
+ * traffic: a forwarder (SSM port-forward, or the userspace-Tailscale SOCKS
+ * bridge) binds its local port even when its upstream leg is dead — so a plain
+ * connect succeeds while nothing flows. A dead-upstream forwarder accepts the
+ * TCP connection and then tears it down SYNCHRONOUSLY (e.g. the Tailscale bridge
+ * dials a SOCKS port the daemon isn't on and destroys the client — MESH-2169);
+ * measured, that teardown lands in ~1ms.
+ *
+ * The window is deliberately SMALL — just enough to clear that ~1ms fail-fast
+ * teardown. It is NOT a latency budget for the upstream: a real upstream need
+ * send no bytes and may itself idle-close a bare connection (Temporal's UI drops
+ * an idle HTTP connection at ~50ms; Temporal gRPC and Postgres hold indefinitely).
+ * So "closed within ~1ms of connecting" means the forwarder never reached a real
+ * upstream; surviving `holdMs` means it did. A larger window would mis-report a
+ * healthy-but-idle-closing service (like the Temporal UI) as DOWN. Never rejects;
+ * the socket is always destroyed.
+ */
+export declare function probeConnectionHolds(host: string, port: number, timeoutMs?: number, holdMs?: number): Promise<boolean>;
+//# sourceMappingURL=reachability.d.ts.map

package/dist/src/utils/reachability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reachability.d.ts","sourceRoot":"","sources":["../../../src/utils/reachability.ts"],"names":[],"mappings":"AAaA;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAehG;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,SAAS,SAAM,EACf,MAAM,SAAK,GACV,OAAO,CAAC,OAAO,CAAC,CAsBlB"}

package/dist/src/utils/reachability.js

@@ -0,0 +1,81 @@
+/**
+ * TCP reachability probe for transport selection.
+ *
+ * `mesh dev`'s VPN detection is otherwise a *presence* check — it asks whether a
+ * Tailscale/VPN connection exists, not whether the mesh VPC actually routes. On a
+ * machine using Tailscale for SSH (but not the mesh Headscale VPN) that presence
+ * check returns true, `mesh dev` picks "VPN-direct", and the worker then dies with
+ * `DnsResolutionError` / `ECONNREFUSED` on the Temporal frontend. Dialing the
+ * endpoint before committing to VPN-direct turns that tribal-knowledge failure
+ * into an automatic SSM fallback (MESH-2016).
+ */
+import { createConnection } from "node:net";
+/**
+ * Resolve `true` if a TCP connection to `host:port` completes within
+ * `timeoutMs`, else `false`. Never rejects — any failure (timeout, refused, DNS)
+ * is a `false`, since for transport selection "can't reach it" is the only signal
+ * that matters. The socket is always destroyed.
+ */
+export function probeTcpReachable(host, port, timeoutMs = 1500) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const socket = createConnection({ host, port });
+        const finish = (ok) => {
+            if (settled)
+                return;
+            settled = true;
+            socket.destroy();
+            resolve(ok);
+        };
+        socket.setTimeout(timeoutMs);
+        socket.once("connect", () => finish(true));
+        socket.once("timeout", () => finish(false));
+        socket.once("error", () => finish(false));
+    });
+}
+/**
+ * Resolve `true` if a connection to `host:port` completes AND survives a brief
+ * grace window (`holdMs`). Stronger than {@link probeTcpReachable} for probing a
+ * LOCAL FORWARDER port, where "the port accepts" is not proof the tunnel carries
+ * traffic: a forwarder (SSM port-forward, or the userspace-Tailscale SOCKS
+ * bridge) binds its local port even when its upstream leg is dead — so a plain
+ * connect succeeds while nothing flows. A dead-upstream forwarder accepts the
+ * TCP connection and then tears it down SYNCHRONOUSLY (e.g. the Tailscale bridge
+ * dials a SOCKS port the daemon isn't on and destroys the client — MESH-2169);
+ * measured, that teardown lands in ~1ms.
+ *
+ * The window is deliberately SMALL — just enough to clear that ~1ms fail-fast
+ * teardown. It is NOT a latency budget for the upstream: a real upstream need
+ * send no bytes and may itself idle-close a bare connection (Temporal's UI drops
+ * an idle HTTP connection at ~50ms; Temporal gRPC and Postgres hold indefinitely).
+ * So "closed within ~1ms of connecting" means the forwarder never reached a real
+ * upstream; surviving `holdMs` means it did. A larger window would mis-report a
+ * healthy-but-idle-closing service (like the Temporal UI) as DOWN. Never rejects;
+ * the socket is always destroyed.
+ */
+export function probeConnectionHolds(host, port, timeoutMs = 800, holdMs = 25) {
+    return new Promise((resolve) => {
+        let settled = false;
+        let holdTimer;
+        const socket = createConnection({ host, port });
+        const finish = (ok) => {
+            if (settled)
+                return;
+            settled = true;
+            if (holdTimer)
+                clearTimeout(holdTimer);
+            socket.destroy();
+            resolve(ok);
+        };
+        socket.setTimeout(timeoutMs);
+        // Healthy iff the connection survives the grace window after connecting.
+        socket.once("connect", () => {
+            holdTimer = setTimeout(() => finish(true), holdMs);
+        });
+        // Closed before the grace window elapsed → the forwarder's upstream is dead.
+        socket.once("close", () => finish(false));
+        socket.once("timeout", () => finish(false));
+        socket.once("error", () => finish(false));
+    });
+}
+//# sourceMappingURL=reachability.js.map

package/dist/src/utils/reachability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reachability.js","sourceRoot":"","sources":["../../../src/utils/reachability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY,EAAE,SAAS,GAAG,IAAI;IAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,IAAY,EACZ,SAAS,GAAG,GAAG,EACf,MAAM,GAAG,EAAE;IAEX,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAoD,CAAC;QACzD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,yEAAyE;QACzE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,6EAA6E;QAC7E,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/utils/recover-conversation.d.ts

@@ -0,0 +1,154 @@
+/**
+ * Reconstruct an agent conversation's transcript from decoded Temporal history.
+ *
+ * An agent conversation is a Temporal `agentWorkflow`. Its durable history holds
+ * everything needed to replay the human/agent exchange even when the worker can
+ * no longer run the workflow (code drift):
+ *
+ *   - `WorkflowExecutionSignaled` with signal name `submit_user_message` →
+ *     one HUMAN turn. Its input payload is `SubmitUserMessageParams`
+ *     (agent-sdk `agent-core/workflows/signals.ts`): `{ model, messages,
+ *     streamId, ... }` where `messages` is a Vercel-AI `ModelMessage[]`; the
+ *     user text lives in the `user`-role message(s).
+ *   - `callLLM` `ActivityTaskCompleted` → one ASSISTANT turn. Its result is
+ *     `LLMResult` (agent-sdk `agent-core/types.ts`): `{ messages, usage?,
+ *     telemetry? }` where `messages` is the model's output `ModelMessage[]` —
+ *     `assistant`-role text parts plus any `tool-call` parts.
+ *
+ * This module is the PURE reconstruction core: it takes events whose payloads
+ * have ALREADY been decrypted into plain objects and returns ordered turns. The
+ * Temporal fetch + decrypt wiring lives in `commands/temporal.ts`.
+ *
+ * Everything here is best-effort and defensive: payload shapes vary across
+ * agent-sdk versions, so every field access is guarded and a turn that can't be
+ * parsed becomes a placeholder rather than throwing — the whole point is to
+ * recover *something* from an otherwise-unreplayable history.
+ */
+/** Classification of a single decoded history event. */
+export interface DecodedEvent {
+    /** Temporal event id (stringified). Used in placeholders. */
+    eventId: string;
+    /** Which kind of conversation event this is. */
+    kind: "userSignal" | "callLLMResult" | "other";
+    /**
+     * The decoded payload object for this event:
+     *   - `userSignal`     → the `submit_user_message` signal input (SubmitUserMessageParams)
+     *   - `callLLMResult`  → the `callLLM` activity result (LLMResult)
+     *   - `other`          → unused
+     */
+    payload?: unknown;
+}
+/**
+ * Minimal shape of a raw Temporal history event as consumed by
+ * `classifyHistoryEvents`. Only the attribute groups we classify are declared;
+ * everything else is ignored. Field access is defensive so partial/variant
+ * shapes (across Temporal SDK versions) don't throw.
+ */
+export interface RawHistoryEvent {
+    eventId?: unknown;
+    activityTaskScheduledEventAttributes?: {
+        activityType?: {
+            name?: string | null;
+        } | null;
+        /**
+         * The activity's INPUT payload group. For `callLLM` this is `callLLMArgs`
+         * (`{ model, messages }`) whose `messages` is the FULL accumulated
+         * conversation — the highest-fidelity snapshot source.
+         */
+        input?: {
+            payloads?: unknown[] | null;
+        } | null;
+    } | null;
+    workflowExecutionSignaledEventAttributes?: {
+        signalName?: string | null;
+        input?: {
+            payloads?: unknown[] | null;
+        } | null;
+    } | null;
+    activityTaskCompletedEventAttributes?: {
+        scheduledEventId?: unknown;
+        result?: {
+            payloads?: unknown[] | null;
+        } | null;
+    } | null;
+    [k: string]: unknown;
+}
+/**
+ * Decrypt+parse a payload group (the `payloads` array from a signal input or
+ * activity result) into a plain object. Returns `undefined` when nothing could
+ * be decoded, so the pure reconstructor emits a placeholder. Injected so the
+ * classification stays pure and unit-testable without a live Temporal codec.
+ */
+export type DecodePayload = (payloads: unknown[] | undefined | null) => Promise<unknown>;
+/**
+ * Classify a raw Temporal history into the ordered `DecodedEvent[]` that
+ * `reconstructTranscript` consumes.
+ *
+ * `ActivityTaskCompleted` events carry only a `scheduledEventId`, not the
+ * activity's type name — so to tell which completions came from `callLLM` we
+ * build a map of `ActivityTaskScheduled.eventId → activityType.name` as we walk
+ * the history in event order, then look each completion's `scheduledEventId` up
+ * in it. Only `callLLM` completions become `callLLMResult` (assistant) events;
+ * completions of other activities (e.g. `routeTools`) are dropped.
+ * `submit_user_message` signals become `userSignal` (human) events.
+ *
+ * Pure aside from the injected `decodePayload` (which performs the decrypt):
+ * never throws, and preserves history order.
+ */
+export declare function classifyHistoryEvents(rawEvents: Iterable<RawHistoryEvent>, decodePayload: DecodePayload): Promise<DecodedEvent[]>;
+/**
+ * A Vercel-AI `ModelMessage` as it appears in decoded history — kept structural
+ * (not flattened to text) so tool-call / tool-result content parts survive into
+ * the snapshot. Typed loosely on purpose: shapes vary across agent-sdk versions
+ * and the snapshot is a best-effort passthrough of whatever was persisted.
+ */
+export type ModelMessage = {
+    role?: string;
+    content?: unknown;
+} & Record<string, unknown>;
+/**
+ * Extract the highest-fidelity STRUCTURED transcript for a store-ready snapshot
+ * backfill — the complete `ModelMessage[]` with tool-call/tool-result parts
+ * intact (as opposed to `reconstructTranscript`'s flattened text turns).
+ *
+ * The source is the `callLLM` activity's SCHEDULED input, `callLLMArgs`
+ * (`{ model, messages }`), whose `messages` is the FULL accumulated conversation
+ * (user + assistant-with-tool-calls + tool-result messages) up to — but not
+ * including — that turn's assistant output. We take the LAST `callLLM`
+ * scheduled input (the most-accumulated one) and append the LAST `callLLM`
+ * completion's output messages (`LLMResult.messages`, the final assistant turn):
+ *
+ *     [...lastScheduledInput.messages, ...lastCompletion.messages]
+ *
+ * Completions are matched to `callLLM` via `scheduledEventId` (same mapping as
+ * `classifyHistoryEvents`).
+ *
+ * Best-effort and never throws:
+ *   - no `callLLM` scheduled input (0 assistant turns) → `[]`;
+ *   - a scheduled input but no completion (last turn interrupted) → just the
+ *     input messages.
+ *
+ * Pure aside from the injected `decodePayload` (which performs the decrypt).
+ */
+export declare function extractSnapshotMessages(rawEvents: Iterable<RawHistoryEvent>, decodePayload: DecodePayload): Promise<ModelMessage[]>;
+/** One reconstructed conversation turn. */
+export interface Turn {
+    role: "user" | "assistant";
+    /** Human-readable text. Empty string is valid (e.g. a tool-only assistant turn). */
+    text: string;
+    /** Formatted tool-call summaries (`name(compactArgs)`), assistant turns only. */
+    toolCalls?: string[];
+    /** Originating Temporal event id. */
+    eventId: string;
+}
+/**
+ * Reconstruct ordered conversation turns from decoded history events.
+ *
+ * Pure: no I/O, never throws. `other` events are skipped; unparseable
+ * user/assistant events become placeholder turns so the recovery is complete
+ * end-to-end even when individual payloads are corrupt.
+ */
+export declare function reconstructTranscript(events: DecodedEvent[]): Turn[];
+/** Render turns as a readable markdown transcript. */
+export declare function renderTranscriptMarkdown(turns: Turn[]): string;
+//# sourceMappingURL=recover-conversation.d.ts.map

package/dist/src/utils/recover-conversation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recover-conversation.d.ts","sourceRoot":"","sources":["../../../src/utils/recover-conversation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,IAAI,EAAE,YAAY,GAAG,eAAe,GAAG,OAAO,CAAC;IAC/C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oCAAoC,CAAC,EAAE;QACrC,YAAY,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;QAC/C;;;;WAIG;QACH,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;KAChD,GAAG,IAAI,CAAC;IACT,wCAAwC,CAAC,EAAE;QACzC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;KAChD,GAAG,IAAI,CAAC;IACT,oCAAoC,CAAC,EAAE;QACrC,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;KACjD,GAAG,IAAI,CAAC;IAET,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,GAAG,IAAI,KACnC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,QAAQ,CAAC,eAAe,CAAC,EACpC,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,YAAY,EAAE,CAAC,CAwCzB;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CACtE,MAAM,EACN,OAAO,CACR,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,QAAQ,CAAC,eAAe,CAAC,EACpC,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,YAAY,EAAE,CAAC,CAmDzB;AAUD,2CAA2C;AAC3C,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB;AA2GD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,CA8BpE;AAQD,sDAAsD;AACtD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAa9D"}