@multiplayer-app/agent 0.1.20 → 0.1.22

package/dist/runtime/config.js

@@ -1,7 +1,14 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadConfigFromEnv = loadConfigFromEnv;
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
 const protocol_1 = require("../transport/protocol");
+/** Root's alone: the runtime's files, out of reach of everything it runs. */
+const DEFAULT_STATE_DIR = '/var/lib/agent';
 const DEFAULT_MODEL = 'anthropic/claude-sonnet-5.5';
 const DEFAULT_WORKSPACE_DIR = '/workspace';
 function decodeMcpConnections(raw) {
@@ -49,7 +56,7 @@ function filingRampFromEnv(env) {
         industryData: env[protocol_1.AGENT_ENV.FILINGRAMP_INDUSTRY_DATA] === 'true',
     };
 }
-function gitFromEnv(env, sessionId, workspaceDir) {
+function gitFromEnv(env, sessionId, workspaceDir, stateDir) {
     const serverUrl = env[protocol_1.AGENT_ENV.GIT_SERVER_URL];
     const repository = env[protocol_1.AGENT_ENV.GIT_REPOSITORY];
     const token = env[protocol_1.AGENT_ENV.ACCESS_TOKEN];
@@ -61,12 +68,14 @@ function gitFromEnv(env, sessionId, workspaceDir) {
         serverUrl: serverUrl.replace(/\/+$/, ''),
         repository,
         dir: env[protocol_1.AGENT_ENV.GIT_REPOSITORY_DIR] || workspaceDir,
+        gitDir: node_path_1.default.join(stateDir, 'git'),
         branch: env[protocol_1.AGENT_ENV.GIT_BRANCH] || `session/${sessionId}`,
         token,
     };
 }
 /** Reads the full run config from process.env — the guest's own contract, see AGENT_ENV in protocol.ts. */
 function loadConfigFromEnv(env = process.env) {
+    var _a;
     const sessionId = env[protocol_1.AGENT_ENV.SESSION_ID];
     if (!sessionId)
         throw new Error('SESSION_ID is required');
@@ -76,6 +85,7 @@ function loadConfigFromEnv(env = process.env) {
     if (mode === 'task' && !task)
         throw new Error('AGENT_TASK is required in task mode');
     const workspaceDir = env[protocol_1.AGENT_ENV.AGENT_WORKSPACE_DIR] || DEFAULT_WORKSPACE_DIR;
+    const stateDir = env[protocol_1.AGENT_ENV.AGENT_STATE_DIR] || (((_a = process.getuid) === null || _a === void 0 ? void 0 : _a.call(process)) === 0 ? DEFAULT_STATE_DIR : node_path_1.default.join(node_os_1.default.tmpdir(), `agent-state-${sessionId}`));
     const model = env[protocol_1.AGENT_ENV.AGENT_MODEL] || DEFAULT_MODEL;
     const storageUrl = env[protocol_1.AGENT_ENV.SESSION_STORAGE_URL];
     // The same ACCESS_TOKEN serves Git or storage, so only a storage URL without it is incomplete.
@@ -100,7 +110,8 @@ function loadConfigFromEnv(env = process.env) {
         },
         filingRamp: filingRampFromEnv(env),
         researchScope: parseScope(env[protocol_1.AGENT_ENV.FILINGRAMP_RESEARCH_SCOPE_JSON]),
-        git: gitFromEnv(env, sessionId, workspaceDir),
+        stateDir,
+        git: gitFromEnv(env, sessionId, workspaceDir, stateDir),
         sessionStorage: storageUrl && storageToken ? { url: storageUrl, token: storageToken, dir: workspaceDir } : undefined,
     };
 }

package/dist/runtime/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/runtime/config.ts"],"names":[],"mappings":";;AAqIA,8CAqCC;AAzKD,oDAAiD;AAsEjD,MAAM,aAAa,GAAG,6BAA6B,CAAA;AACnD,MAAM,qBAAqB,GAAG,YAAY,CAAA;AAE1C,SAAS,oBAAoB,CAAC,GAAuB;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAgC,CAAC,CAAC,CAAC,EAAE,CAAA;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sDAAuD,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IACnG,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAA;QAC/C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,qDAAsD,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAClG,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAS,CAAC,uBAAuB,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,GAAG,CAAC,oBAAS,CAAC,qBAAqB,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAS,CAAC,oBAAoB,CAAC,CAAA;IACpD,MAAM,YAAY,GAAG,GAAG,CAAC,oBAAS,CAAC,wBAAwB,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAA;IACnD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5D,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,SAAS;QACT,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC1C,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAClD,YAAY,EAAE,GAAG,CAAC,oBAAS,CAAC,wBAAwB,CAAC,KAAK,MAAM;KACjE,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAsB,EAAE,SAAiB,EAAE,YAAoB;IACjF,MAAM,SAAS,GAAG,GAAG,CAAC,oBAAS,CAAC,cAAc,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAS,CAAC,cAAc,CAAC,CAAA;IAChD,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAS,CAAC,YAAY,CAAC,CAAA;IACzC,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IACjC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IACxG,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,UAAU;QACV,GAAG,EAAE,GAAG,CAAC,oBAAS,CAAC,kBAAkB,CAAC,IAAI,YAAY;QACtD,MAAM,EAAE,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,IAAI,WAAW,SAAS,EAAE;QAC3D,KAAK;KACN,CAAA;AACH,CAAC;AAED,2GAA2G;AAC3G,SAAgB,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,SAAS,GAAG,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,CAAA;IAC3C,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAEzD,MAAM,IAAI,GAAc,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;IACpF,MAAM,OAAO,GAAiB,GAAG,CAAC,oBAAS,CAAC,aAAa,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAA;IACjG,MAAM,IAAI,GAAG,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,CAAA;IACtC,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAEpF,MAAM,YAAY,GAAG,GAAG,CAAC,oBAAS,CAAC,mBAAmB,CAAC,IAAI,qBAAqB,CAAA;IAChF,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAS,CAAC,WAAW,CAAC,IAAI,aAAa,CAAA;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAS,CAAC,mBAAmB,CAAC,CAAA;IACrD,+FAA+F;IAC/F,MAAM,YAAY,GAAG,GAAG,CAAC,oBAAS,CAAC,YAAY,CAAC,CAAA;IAChD,IAAI,UAAU,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAE1G,OAAO;QACL,SAAS;QACT,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,KAAK;QACL,eAAe,EAAE,GAAG,CAAC,oBAAS,CAAC,sBAAsB,CAAC,IAAI,KAAK;QAC/D,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,oBAAS,CAAC,kBAAkB,CAAC,CAAC;QAChE,YAAY;QACZ,cAAc,EAAE,oBAAoB,CAAC,GAAG,CAAC,oBAAS,CAAC,gBAAgB,CAAC,CAAC;QACrE,SAAS,EAAE,GAAG,CAAC,oBAAS,CAAC,gBAAgB,CAAC;QAC1C,WAAW,EAAE,GAAG,CAAC,oBAAS,CAAC,YAAY,CAAC;QACxC,QAAQ,EAAE;YACR,gBAAgB,EAAE,GAAG,CAAC,oBAAS,CAAC,kBAAkB,CAAC;YACnD,eAAe,EAAE,GAAG,CAAC,oBAAS,CAAC,iBAAiB,CAAC;SAClD;QACD,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAClC,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,oBAAS,CAAC,8BAA8B,CAAC,CAAC;QACxE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC;QAC7C,cAAc,EAAE,UAAU,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS;KACrH,CAAA;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/runtime/config.ts"],"names":[],"mappings":";;;;;AA+IA,8CAuCC;AAtLD,sDAAwB;AACxB,0DAA4B;AAE5B,oDAAiD;AAgDjD,6EAA6E;AAC7E,MAAM,iBAAiB,GAAG,gBAAgB,CAAA;AA4B1C,MAAM,aAAa,GAAG,6BAA6B,CAAA;AACnD,MAAM,qBAAqB,GAAG,YAAY,CAAA;AAE1C,SAAS,oBAAoB,CAAC,GAAuB;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAgC,CAAC,CAAC,CAAC,EAAE,CAAA;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sDAAuD,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IACnG,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAA;QAC/C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,qDAAsD,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;IAClG,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAS,CAAC,uBAAuB,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,GAAG,CAAC,oBAAS,CAAC,qBAAqB,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAS,CAAC,oBAAoB,CAAC,CAAA;IACpD,MAAM,YAAY,GAAG,GAAG,CAAC,oBAAS,CAAC,wBAAwB,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAA;IACnD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5D,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,SAAS;QACT,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC1C,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAClD,YAAY,EAAE,GAAG,CAAC,oBAAS,CAAC,wBAAwB,CAAC,KAAK,MAAM;KACjE,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAsB,EAAE,SAAiB,EAAE,YAAoB,EAAE,QAAgB;IACnG,MAAM,SAAS,GAAG,GAAG,CAAC,oBAAS,CAAC,cAAc,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAS,CAAC,cAAc,CAAC,CAAA;IAChD,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAS,CAAC,YAAY,CAAC,CAAA;IACzC,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IACjC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IACxG,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,UAAU;QACV,GAAG,EAAE,GAAG,CAAC,oBAAS,CAAC,kBAAkB,CAAC,IAAI,YAAY;QACtD,MAAM,EAAE,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,IAAI,WAAW,SAAS,EAAE;QAC3D,KAAK;KACN,CAAA;AACH,CAAC;AAED,2GAA2G;AAC3G,SAAgB,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;;IACpE,MAAM,SAAS,GAAG,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,CAAA;IAC3C,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAEzD,MAAM,IAAI,GAAc,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;IACpF,MAAM,OAAO,GAAiB,GAAG,CAAC,oBAAS,CAAC,aAAa,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAA;IACjG,MAAM,IAAI,GAAG,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,CAAA;IACtC,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAEpF,MAAM,YAAY,GAAG,GAAG,CAAC,oBAAS,CAAC,mBAAmB,CAAC,IAAI,qBAAqB,CAAA;IAChF,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA,MAAA,OAAO,CAAC,MAAM,uDAAI,MAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,eAAe,SAAS,EAAE,CAAC,CAAC,CAAA;IACtJ,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAS,CAAC,WAAW,CAAC,IAAI,aAAa,CAAA;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAS,CAAC,mBAAmB,CAAC,CAAA;IACrD,+FAA+F;IAC/F,MAAM,YAAY,GAAG,GAAG,CAAC,oBAAS,CAAC,YAAY,CAAC,CAAA;IAChD,IAAI,UAAU,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAE1G,OAAO;QACL,SAAS;QACT,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,KAAK;QACL,eAAe,EAAE,GAAG,CAAC,oBAAS,CAAC,sBAAsB,CAAC,IAAI,KAAK;QAC/D,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,oBAAS,CAAC,kBAAkB,CAAC,CAAC;QAChE,YAAY;QACZ,cAAc,EAAE,oBAAoB,CAAC,GAAG,CAAC,oBAAS,CAAC,gBAAgB,CAAC,CAAC;QACrE,SAAS,EAAE,GAAG,CAAC,oBAAS,CAAC,gBAAgB,CAAC;QAC1C,WAAW,EAAE,GAAG,CAAC,oBAAS,CAAC,YAAY,CAAC;QACxC,QAAQ,EAAE;YACR,gBAAgB,EAAE,GAAG,CAAC,oBAAS,CAAC,kBAAkB,CAAC;YACnD,eAAe,EAAE,GAAG,CAAC,oBAAS,CAAC,iBAAiB,CAAC;SAClD;QACD,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAClC,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,oBAAS,CAAC,8BAA8B,CAAC,CAAC;QACxE,QAAQ;QACR,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC;QACvD,cAAc,EAAE,UAAU,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS;KACrH,CAAA;AACH,CAAC"}

package/dist/runtime/guest-server.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=guest-server.d.ts.map

package/dist/runtime/guest-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-server.d.ts","sourceRoot":"","sources":["../../src/runtime/guest-server.ts"],"names":[],"mappings":""}

package/dist/runtime/{lambda-microvm.js → guest-server.js}

@@ -4,8 +4,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-// Lambda MicroVM-specific bootstrap. AWS's platform calls the lifecycle hooks
-// (/aws/lambda-microvms/runtime/v1/{run,resume,suspend,terminate}) on port 8080 and expects a
+// The guest's main process, on every engine: it holds port 8080 and starts the agent. On Lambda
+// MicroVM, AWS's platform calls the lifecycle hooks
+// (/aws/lambda-microvms/runtime/v1/{run,resume,suspend,terminate}) on that port and expects a
 // response before it considers the instance up (createMicrovmImages registers every image with
 // hooks: { run/resume/suspend/terminate: 'ENABLED' } — libs/sandbox/src/microvm-images.ts —
 // this isn't optional). Per-run config (env vars) arrives as the /run hook's runHookPayload,
@@ -13,20 +14,22 @@ Object.defineProperty(exports, "__esModule", { value: true });
 //
 // The hook server stays up for the whole life of the VM: `suspend` and `terminate` checkpoint
 // the session (conversation + workspace to the git server), `resume` re-announces the agent.
-// Research VMs never need port 8080 for an app, so nothing competes for it. Engines without a
-// hook caller (Docker, Fargate) set SESSION_ID in the real env at boot, which starts the agent
-// directly.
+// Apps never get port 8080: it also serves the live preview (preview-proxy.ts), which forwards to
+// the port an app actually listens on. Engines without a hook caller (Docker, Fargate) set
+// SESSION_ID in the real env at boot, which starts the agent directly.
 const child_process_1 = require("child_process");
 const fs_1 = __importDefault(require("fs"));
 const http_1 = __importDefault(require("http"));
+const image_hooks_1 = require("./image-hooks");
 const index_1 = require("./index");
 const microvm_bootstrap_1 = require("./microvm-bootstrap");
+const preview_proxy_1 = require("./preview-proxy");
 const HOOK_PREFIX = '/aws/lambda-microvms/runtime/v1/';
-const PORT = 8080;
 let running;
 let starting;
 const bootstrap = new microvm_bootstrap_1.MicrovmBootstrap();
 const DROPBEAR_HOST_KEY = '/etc/dropbear/dropbear_rsa_host_key';
+const imageHook = (0, image_hooks_1.imageHooks)();
 /**
  * entrypoint.sh starts dropbear only when the keys are in the boot env (Docker, Fargate). A
  * Lambda MicroVM boots while its image is built, before any session exists, so its keys arrive
@@ -50,7 +53,12 @@ function configured() {
     catch (error) {
         console.error('ssh setup failed:', error instanceof Error ? error.message : error);
     }
-    void start().catch(() => undefined);
+    if (hasSomethingToRun())
+        void start().catch(() => undefined);
+}
+/** A VM from an image with no run configuration, as AWS starts one to validate a new image: nothing to do. */
+function hasSomethingToRun() {
+    return Boolean(process.env.SESSION_ID || process.env.AGENT_MODE);
 }
 function start() {
     if (!starting) {
@@ -70,6 +78,10 @@ function start() {
 async function onHook(hook, body) {
     switch (hook) {
         case 'run': {
+            // Anything in the VM can reach this port. Once the agent is starting, the only caller left
+            // is a workload, and this configures the VM (its SSH keys among it).
+            if (starting)
+                return;
             let payload;
             try {
                 const parsed = JSON.parse(body);
@@ -85,7 +97,8 @@ async function onHook(hook, body) {
         }
         case 'suspend':
         case 'terminate':
-            await (0, index_1.checkpointBeforeFreeze)(starting, hook);
+            if (hasSomethingToRun())
+                await (0, index_1.checkpointBeforeFreeze)(starting, hook);
             return;
         case 'resume':
             // Memory and disk survived. The socket reconnects on its own, and the link re-announces
@@ -95,8 +108,11 @@ async function onHook(hook, body) {
             return;
     }
 }
-const server = http_1.default.createServer((req, res) => {
-    var _a, _b;
+const server = http_1.default.createServer((0, preview_proxy_1.guardRequests)((req, res) => {
+    var _a, _b, _c, _d;
+    // First: a preview request belongs to the app whatever its path, never to the hooks below.
+    if ((0, preview_proxy_1.proxyPreviewRequest)(req, res))
+        return;
     if (req.url === '/internal/bootstrap' && req.method === 'POST') {
         if (!bootstrap.authorized(req.headers.authorization)) {
             res.writeHead(401, { Connection: 'close' });
@@ -134,7 +150,13 @@ const server = http_1.default.createServer((req, res) => {
         });
         return;
     }
-    if (((_a = req.url) === null || _a === void 0 ? void 0 : _a.startsWith(HOOK_PREFIX)) && req.method === 'POST') {
+    const asked = ((_a = req.url) === null || _a === void 0 ? void 0 : _a.startsWith(HOOK_PREFIX)) ? imageHook[req.url.slice(HOOK_PREFIX.length)] : undefined;
+    if (asked) {
+        res.writeHead(asked(), { 'Content-Type': 'application/json' });
+        res.end('{}');
+        return;
+    }
+    if (((_b = req.url) === null || _b === void 0 ? void 0 : _b.startsWith(HOOK_PREFIX)) && req.method === 'POST') {
         const hook = req.url.slice(HOOK_PREFIX.length);
         const chunks = [];
         req.on('data', (chunk) => chunks.push(chunk));
@@ -157,13 +179,22 @@ const server = http_1.default.createServer((req, res) => {
         });
         return;
     }
+    // A deployment (AGENT_MODE=app): everything else is its app's.
+    if ((0, preview_proxy_1.proxyAppRequest)(req, res))
+        return;
     res.writeHead(200, { 'Content-Type': 'application/json' });
-    res.end(JSON.stringify({ status: 'ok', path: req.url, session: (_b = running === null || running === void 0 ? void 0 : running.config.sessionId) !== null && _b !== void 0 ? _b : null }));
-});
-server.listen(PORT, () => {
-    console.log(`agent lifecycle hook server listening on ${PORT}`);
-    // Docker / Fargate: no lifecycle hook caller, so a SESSION_ID already in the env drives startup.
-    if (process.env.SESSION_ID)
+    res.end(JSON.stringify({ status: 'ok', path: req.url, session: (_d = (_c = running === null || running === void 0 ? void 0 : running.config) === null || _c === void 0 ? void 0 : _c.sessionId) !== null && _d !== void 0 ? _d : null }));
+}));
+server.on('upgrade', (0, preview_proxy_1.guardUpgrades)((req, socket, head) => {
+    if (!(0, preview_proxy_1.proxyPreviewUpgrade)(req, socket, head))
+        socket.destroy();
+}));
+server.listen(preview_proxy_1.GUEST_HTTP_PORT, () => {
+    console.log(`agent lifecycle hook server listening on ${preview_proxy_1.GUEST_HTTP_PORT}`);
+    // Ahead of the build's first /ready, and of a VM's first request on the engines that have no hooks.
+    imageHook.ready();
+    // Docker / Fargate: no lifecycle hook caller, so what's already in the env drives startup.
+    if (hasSomethingToRun())
         setImmediate(() => void start().catch(() => undefined));
 });
 let shuttingDown = false;
@@ -183,4 +214,4 @@ for (const signal of ['SIGTERM', 'SIGINT']) {
         });
     });
 }
-//# sourceMappingURL=lambda-microvm.js.map
+//# sourceMappingURL=guest-server.js.map

package/dist/runtime/guest-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-server.js","sourceRoot":"","sources":["../../src/runtime/guest-server.ts"],"names":[],"mappings":";;;;;;AACA,gGAAgG;AAChG,oDAAoD;AACpD,8FAA8F;AAC9F,+FAA+F;AAC/F,4FAA4F;AAC5F,6FAA6F;AAC7F,gCAAgC;AAChC,EAAE;AACF,8FAA8F;AAC9F,6FAA6F;AAC7F,kGAAkG;AAClG,2FAA2F;AAC3F,uEAAuE;AACvE,iDAAqC;AACrC,4CAAmB;AACnB,gDAAuB;AAEvB,+CAA0C;AAC1C,mCAA+E;AAC/E,2DAA2E;AAC3E,mDAA0I;AAE1I,MAAM,WAAW,GAAG,kCAAkC,CAAA;AAEtD,IAAI,OAAiC,CAAA;AACrC,IAAI,QAA2C,CAAA;AAC/C,MAAM,SAAS,GAAG,IAAI,oCAAgB,EAAE,CAAA;AACxC,MAAM,iBAAiB,GAAG,qCAAqC,CAAA;AAC/D,MAAM,SAAS,GAAG,IAAA,wBAAU,GAAE,CAAA;AAE9B;;;;GAIG;AACH,SAAS,QAAQ;IACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAA;IAClD,IAAI,CAAC,IAAI,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAM;IACtD,YAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5D,YAAE,CAAC,aAAa,CAAC,4BAA4B,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5F,MAAM,QAAQ,GAAG,IAAA,qBAAK,EAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IACvG,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IAC1F,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAA;AACpD,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,QAAQ,EAAE,CAAA;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,iBAAiB,EAAE;QAAE,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;AAC9D,CAAC;AAED,8GAA8G;AAC9G,SAAS,iBAAiB;IACxB,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;AAClE,CAAC;AAED,SAAS,KAAK;IACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAA,kBAAU,GAAE;aACpB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,OAAO,GAAG,KAAK,CAAA;YACf,OAAO,KAAK,CAAA;QACd,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,QAAQ,GAAG,SAAS,CAAA;YACpB,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YAClF,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;IACN,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,IAAY;IAC9C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,2FAA2F;YAC3F,qEAAqE;YACrE,IAAI,QAAQ;gBAAE,OAAM;YACpB,IAAI,OAA2B,CAAA;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgC,CAAA;gBAC9D,OAAO,GAAG,MAAM,CAAC,cAAc,CAAA;YACjC,CAAC;YAAC,WAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC7C,CAAC;YACD,4FAA4F;YAC5F,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,UAAU,EAAE,CAAA;YACpD,OAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC;QACf,KAAK,WAAW;YACd,IAAI,iBAAiB,EAAE;gBAAE,MAAM,IAAA,8BAAsB,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YACrE,OAAM;QACR,KAAK,QAAQ;YACX,wFAAwF;YACxF,qEAAqE;YACrE,OAAM;QACR;YACE,OAAM;IACV,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,IAAA,6BAAa,EAAC,CAAC,GAAyB,EAAE,GAAwB,EAAE,EAAE;;IACrG,2FAA2F;IAC3F,IAAI,IAAA,mCAAmB,EAAC,GAAG,EAAE,GAAG,CAAC;QAAE,OAAM;IACzC,IAAI,GAAG,CAAC,GAAG,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;YAC3C,GAAG,CAAC,GAAG,EAAE,CAAA;YACT,GAAG,CAAC,OAAO,EAAE,CAAA;YACb,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;YACrB,IAAI,KAAK,GAAG,uCAAmB,EAAE,CAAC;gBAChC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAClB,GAAG,CAAC,GAAG,EAAE,CAAA;gBACT,GAAG,CAAC,OAAO,EAAE,CAAA;gBACb,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,GAAG,CAAC,aAAa;gBAAE,OAAM;YAC7B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;gBAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;gBACpD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACtG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBACd,IAAI,WAAW;oBAAE,UAAU,EAAE,CAAA;YAC/B,CAAC;YAAC,WAAM,CAAC;gBACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAClB,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAA;YACtC,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAM;IACR,CAAC;IACD,MAAM,KAAK,GAAG,CAAA,MAAA,GAAG,CAAC,GAAG,0CAAE,UAAU,CAAC,WAAW,CAAC,EAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACzG,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACb,OAAM;IACR,CAAC;IACD,IAAI,CAAA,MAAA,GAAG,CAAC,GAAG,0CAAE,UAAU,CAAC,WAAW,CAAC,KAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;YAC7C,oFAAoF;YACpF,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAA;YACtC,sFAAsF;YACtF,8FAA8F;YAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAC/B,MAAM,KAAK,GAAG,GAAG,EAAE;gBACjB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACf,CAAC,CAAA;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAc,EAAE,EAAE;gBAClC,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBACjG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAA;YAC7D,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,OAAM;IACR,CAAC;IAED,+DAA+D;IAC/D,IAAI,IAAA,+BAAe,EAAC,GAAG,EAAE,GAAG,CAAC;QAAE,OAAM;IACrC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;IAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,0CAAE,SAAS,mCAAI,IAAI,EAAE,CAAC,CAAC,CAAA;AACvG,CAAC,CAAC,CAAC,CAAA;AAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,IAAA,6BAAa,EAAC,CAAC,GAAyB,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;IAC7F,IAAI,CAAC,IAAA,mCAAmB,EAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;QAAE,MAAM,CAAC,OAAO,EAAE,CAAA;AAC/D,CAAC,CAAC,CAAC,CAAA;AAEH,MAAM,CAAC,MAAM,CAAC,+BAAe,EAAE,GAAG,EAAE;IAClC,OAAO,CAAC,GAAG,CAAC,4CAA4C,+BAAe,EAAE,CAAC,CAAA;IAC1E,oGAAoG;IACpG,SAAS,CAAC,KAAK,EAAE,CAAA;IACjB,2FAA2F;IAC3F,IAAI,iBAAiB,EAAE;QAAE,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;AAClF,CAAC,CAAC,CAAA;AAEF,IAAI,YAAY,GAAG,KAAK,CAAA;AACxB,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,IAAI,YAAY;YAAE,OAAM;QACxB,YAAY,GAAG,IAAI,CAAA;QACnB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAA;YAC5B,MAAM,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,KAAK,EAAE,CAAA,CAAA;YACpB,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5B,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAA;YACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/runtime/image-hooks.d.ts

@@ -0,0 +1,5 @@
+export type ImageHookStatus = 200 | 500 | 503;
+/** Asking starts `work`, once. Then it's 503 until it's over, and how that went from there on. */
+export declare function polledHook(work: () => Promise<void>): () => ImageHookStatus;
+export declare function imageHooks(env?: NodeJS.ProcessEnv): Record<string, () => ImageHookStatus>;
+//# sourceMappingURL=image-hooks.d.ts.map

package/dist/runtime/image-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-hooks.d.ts","sourceRoot":"","sources":["../../src/runtime/image-hooks.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,eAAe,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;AAE7C,kGAAkG;AAClG,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,eAAe,CAiB3E;AAQD,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,eAAe,CAAC,CAEtG"}

package/dist/runtime/image-hooks.js

@@ -0,0 +1,68 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.polledHook = polledHook;
+exports.imageHooks = imageHooks;
+// What a Lambda MicroVM image's build asks the guest. /ready: can this be snapshotted yet? The code a
+// VM from this image runs loads first, so it's in the snapshot rather than read at every start.
+// /validate, on a VM started from the result: does it work? They answer 503 until they know, as AWS
+// asks, rather than hold the request open: past its timeout that ends the build.
+const index_1 = require("./index");
+/** Asking starts `work`, once. Then it's 503 until it's over, and how that went from there on. */
+function polledHook(work) {
+    let status;
+    return () => {
+        if (!status) {
+            status = 503;
+            work().then(() => {
+                status = 200;
+            }, (error) => {
+                status = 500;
+                console.error('image hook failed:', error instanceof Error ? error.message : error);
+            });
+        }
+        return status;
+    };
+}
+async function validateImage(env) {
+    if (env.GUEST_IMAGE !== 'app')
+        return;
+    const { rehearseColdStart } = await Promise.resolve().then(() => __importStar(require('./app-rehearsal')));
+    await rehearseColdStart();
+}
+function imageHooks(env = process.env) {
+    return { ready: polledHook(() => (0, index_1.loadImageCode)(env)), validate: polledHook(() => validateImage(env)) };
+}
+//# sourceMappingURL=image-hooks.js.map

package/dist/runtime/image-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-hooks.js","sourceRoot":"","sources":["../../src/runtime/image-hooks.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,gCAiBC;AAQD,gCAEC;AApCD,sGAAsG;AACtG,gGAAgG;AAChG,oGAAoG;AACpG,iFAAiF;AACjF,mCAAuC;AAIvC,kGAAkG;AAClG,SAAgB,UAAU,CAAC,IAAyB;IAClD,IAAI,MAAmC,CAAA;IACvC,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,CAAA;YACZ,IAAI,EAAE,CAAC,IAAI,CACT,GAAG,EAAE;gBACH,MAAM,GAAG,GAAG,CAAA;YACd,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;gBACjB,MAAM,GAAG,GAAG,CAAA;gBACZ,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YACrF,CAAC,CACF,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAsB;IACjD,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK;QAAE,OAAM;IACrC,MAAM,EAAE,iBAAiB,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAA;IAC7D,MAAM,iBAAiB,EAAE,CAAA;AAC3B,CAAC;AAED,SAAgB,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;AACxG,CAAC"}

package/dist/runtime/image-hooks.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=image-hooks.test.d.ts.map

package/dist/runtime/image-hooks.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-hooks.test.d.ts","sourceRoot":"","sources":["../../src/runtime/image-hooks.test.ts"],"names":[],"mappings":""}

package/dist/runtime/image-hooks.test.js

@@ -0,0 +1,74 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_child_process_1 = require("node:child_process");
+const node_path_1 = __importDefault(require("node:path"));
+const node_test_1 = require("node:test");
+const image_hooks_1 = require("./image-hooks");
+const until = async (hook, status) => {
+    for (let tries = 0; tries < 2000 && hook() !== status; tries += 1)
+        await new Promise((resolve) => setTimeout(resolve, 10));
+    strict_1.default.equal(hook(), status);
+};
+(0, node_test_1.describe)('a hook the image build polls', () => {
+    (0, node_test_1.it)('answers 503 while it works, rather than hold the request open, and runs once', async () => {
+        let runs = 0;
+        let finish;
+        const hook = (0, image_hooks_1.polledHook)(() => {
+            runs += 1;
+            return new Promise((resolve) => {
+                finish = resolve;
+            });
+        });
+        strict_1.default.equal(hook(), 503);
+        strict_1.default.equal(hook(), 503);
+        finish();
+        await until(hook, 200);
+        strict_1.default.equal(runs, 1);
+    });
+    (0, node_test_1.it)('fails the build when the work fails', async () => {
+        const hook = (0, image_hooks_1.polledHook)(() => Promise.reject(new Error('no tar')));
+        hook();
+        await until(hook, 500);
+    });
+});
+(0, node_test_1.describe)('what an image loads ahead of its snapshot', () => {
+    const loaded = (script) => {
+        var _a;
+        return JSON.parse((0, node_child_process_1.execFileSync)(process.execPath, ['-e', `
+      const hooks = require(${JSON.stringify(node_path_1.default.join(__dirname, 'image-hooks.js'))}).imageHooks();
+      ${script}
+      const wait = setInterval(() => {
+        if (hooks.ready() === 503) return
+        clearInterval(wait)
+        console.log(JSON.stringify(Object.keys(require.cache)))
+      }, 5)
+    `], { encoding: 'utf8', env: { PATH: process.env.PATH, NODE_PATH: (_a = process.env.NODE_PATH) !== null && _a !== void 0 ? _a : '', GUEST_IMAGE: script.includes('app') ? 'app' : '' } }))
+            .map((file) => node_path_1.default.relative(node_path_1.default.resolve(__dirname, '..'), file));
+    };
+    (0, node_test_1.it)('is an app\'s code in the app image, with no session agent in its memory', () => {
+        const files = loaded('// app');
+        strict_1.default.ok(files.includes(node_path_1.default.join('runtime', 'app-mode.js')));
+        strict_1.default.ok(!files.some((file) => file.startsWith(`session${node_path_1.default.sep}`) || file.includes('session-mode')), 'session code loaded');
+        strict_1.default.ok(!files.some((file) => file.includes('socket.io')), 'its link loaded');
+    });
+    (0, node_test_1.it)('is the session agent in the agent image', () => {
+        strict_1.default.ok(loaded('').includes(node_path_1.default.join('runtime', 'session-mode.js')));
+    });
+});
+(0, node_test_1.describe)('validating a new image', () => {
+    (0, node_test_1.it)('rehearses a real cold start of an app: an archive unpacked, a server started and asked', async () => {
+        const hook = (0, image_hooks_1.imageHooks)({ GUEST_IMAGE: 'app' }).validate;
+        strict_1.default.equal(hook(), 503);
+        await until(hook, 200);
+    });
+    (0, node_test_1.it)('has nothing to rehearse in the agent image', async () => {
+        const hook = (0, image_hooks_1.imageHooks)({}).validate;
+        hook();
+        await until(hook, 200);
+    });
+});
+//# sourceMappingURL=image-hooks.test.js.map

package/dist/runtime/image-hooks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-hooks.test.js","sourceRoot":"","sources":["../../src/runtime/image-hooks.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAuC;AACvC,2DAAiD;AACjD,0DAA4B;AAC5B,yCAAwC;AACxC,+CAAsD;AAEtD,MAAM,KAAK,GAAG,KAAK,EAAE,IAAkB,EAAE,MAAc,EAAE,EAAE;IACzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAK,IAAI,IAAI,EAAE,KAAK,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;IAC3H,gBAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;AAC9B,CAAC,CAAA;AAED,IAAA,oBAAQ,EAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAA,cAAE,EAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,IAAI,MAAmB,CAAA;QACvB,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,GAAG,EAAE;YAC3B,IAAI,IAAI,CAAC,CAAA;YACT,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,MAAM,GAAG,OAAO,CAAA;YAClB,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,gBAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QACzB,gBAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QACzB,MAAM,EAAE,CAAA;QACR,MAAM,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACtB,gBAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QAClE,IAAI,EAAE,CAAA;QACN,MAAM,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,oBAAQ,EAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE;;QAChC,OAAC,IAAI,CAAC,KAAK,CAAC,IAAA,iCAAY,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;8BACxB,IAAI,CAAC,SAAS,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC5E,MAAM;;;;;;KAMT,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,MAAA,OAAO,CAAC,GAAG,CAAC,SAAS,mCAAI,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAc;aAC/J,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAI,CAAC,QAAQ,CAAC,mBAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;KAAA,CAAA;IAEtE,IAAA,cAAE,EAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC9B,gBAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;QAC9D,gBAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,mBAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAA;QAC/H,gBAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,gBAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,oBAAQ,EAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAA,cAAE,EAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAA;QACxD,gBAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QACzB,MAAM,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAA;QACpC,IAAI,EAAE,CAAA;QACN,MAAM,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/runtime/index.d.ts

@@ -1,12 +1,17 @@
-import { type AgentRuntimeConfig } from './config';
-import { type SessionAgent } from '../session';
+import type { SessionAgent } from '../session';
+import type { AgentRuntimeConfig } from './config';
 export interface RunningAgent {
-    config: AgentRuntimeConfig;
+    /** Absent in app mode, which runs no agent. */
+    config?: AgentRuntimeConfig;
     /** Present in session mode only. */
     session?: SessionAgent;
+    /** App mode: a deployment, which stays up serving its app. */
+    app?: boolean;
     close(): Promise<void>;
 }
 /** A lifecycle request can race startup; never acknowledge a freeze before restore finishes. */
 export declare function checkpointBeforeFreeze(starting: Promise<RunningAgent> | undefined, reason: string): Promise<void>;
 export declare function startAgent(env?: NodeJS.ProcessEnv): Promise<RunningAgent>;
+/** Loads what this image runs ahead of any VM (GUEST_IMAGE, set by its Dockerfile), so that's in its snapshot. */
+export declare function loadImageCode(env?: NodeJS.ProcessEnv): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAIrE,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAA;AAE/D,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,kBAAkB,CAAA;IAC1B,oCAAoC;IACpC,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,gGAAgG;AAChG,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIvH;AAED,wBAAsB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,CA6B5F"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAElD,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,kBAAkB,CAAA;IAC3B,oCAAoC;IACpC,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,gGAAgG;AAChG,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIvH;AAED,wBAAsB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,CAgB5F;AAED,kHAAkH;AAClH,wBAAsB,aAAa,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvF"}

package/dist/runtime/index.js

@@ -1,15 +1,42 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkpointBeforeFreeze = checkpointBeforeFreeze;
 exports.startAgent = startAgent;
-// Mode dispatch shared by both entrypoints (cli.ts for engines that materialize env before
-// start, lambda-microvm.ts for the /run hook): task mode runs once and resolves;
-// session mode stays up and resolves with the running agent so lifecycle hooks can reach it.
-const config_1 = require("./config");
-const link_1 = require("../transport/link");
-const loop_1 = require("../task/loop");
-const reporter_1 = require("../transport/reporter");
-const session_1 = require("../session");
+exports.loadImageCode = loadImageCode;
+const protocol_1 = require("../transport/protocol");
 /** A lifecycle request can race startup; never acknowledge a freeze before restore finishes. */
 async function checkpointBeforeFreeze(starting, reason) {
     var _a;
@@ -19,34 +46,25 @@ async function checkpointBeforeFreeze(starting, reason) {
     await ((_a = agent.session) === null || _a === void 0 ? void 0 : _a.checkpoint(reason));
 }
 async function startAgent(env = process.env) {
-    const config = (0, config_1.loadConfigFromEnv)(env);
-    if (config.mode === 'session') {
-        const link = (0, link_1.createSessionLink)(config.sessionId, config.socketUrl, config.socketToken);
-        const session = await (0, session_1.runSessionAgent)(config, link).catch(async (error) => {
-            link.send({ type: 'error', message: `Workspace restore failed: ${error instanceof Error ? error.message : String(error)}` });
-            await link.close();
-            throw error;
-        });
-        return {
-            config,
-            session,
-            async close() {
-                try {
-                    await session.stop();
-                }
-                finally {
-                    await link.close();
-                }
-            },
-        };
+    // A VM for a session's tools to write files and run commands in: nothing to start, only the guest
+    // to stay up.
+    if (env[protocol_1.AGENT_ENV.AGENT_MODE] === 'workspace')
+        return { app: true, close: async () => undefined };
+    if (env[protocol_1.AGENT_ENV.AGENT_MODE] === 'app') {
+        const { startDeployedApp } = await Promise.resolve().then(() => __importStar(require('./app-mode')));
+        const deployed = await startDeployedApp(env);
+        return { app: true, close: () => deployed.close() };
     }
-    const reporter = (0, reporter_1.createReporter)(config.socketUrl, config.socketToken, config.sessionId);
-    try {
-        await (0, loop_1.runAgentLoop)(config, reporter);
+    if (env[protocol_1.AGENT_ENV.AGENT_MODE] === 'build') {
+        const { startReleaseBuild } = await Promise.resolve().then(() => __importStar(require('./build-mode')));
+        const build = startReleaseBuild(env);
+        return { app: true, close: () => build.close() };
     }
-    finally {
-        await reporter.close();
-    }
-    return { config, async close() { } };
+    const { startSessionOrTask } = await Promise.resolve().then(() => __importStar(require('./session-mode')));
+    return startSessionOrTask(env);
+}
+/** Loads what this image runs ahead of any VM (GUEST_IMAGE, set by its Dockerfile), so that's in its snapshot. */
+async function loadImageCode(env = process.env) {
+    await (env.GUEST_IMAGE === 'app' ? Promise.resolve().then(() => __importStar(require('./app-mode'))) : Promise.resolve().then(() => __importStar(require('./session-mode'))));
 }
 //# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":";;AAiBA,wDAIC;AAED,gCA6BC;AApDD,2FAA2F;AAC3F,iFAAiF;AACjF,6FAA6F;AAC7F,qCAAqE;AACrE,4CAAqD;AACrD,uCAA2C;AAC3C,oDAAsD;AACtD,wCAA+D;AAS/D,gGAAgG;AACzF,KAAK,UAAU,sBAAsB,CAAC,QAA2C,EAAE,MAAc;;IACtG,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC1F,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAA;IAC5B,MAAM,CAAA,MAAA,KAAK,CAAC,OAAO,0CAAE,UAAU,CAAC,MAAM,CAAC,CAAA,CAAA;AACzC,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,MAAM,GAAG,IAAA,0BAAiB,EAAC,GAAG,CAAC,CAAA;IACrC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAA,wBAAiB,EAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;QACtF,MAAM,OAAO,GAAG,MAAM,IAAA,yBAAe,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACjF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;YAC5H,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;YAClB,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACF,OAAO;YACL,MAAM;YACN,OAAO;YACP,KAAK,CAAC,KAAK;gBACT,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;gBACtB,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;gBACpB,CAAC;YACH,CAAC;SACF,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;IACvF,IAAI,CAAC;QACH,MAAM,IAAA,mBAAY,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACtC,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,KAAI,CAAC,EAAE,CAAA;AACrC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,wDAIC;AAED,gCAgBC;AAGD,sCAEC;AAzCD,oDAAiD;AAajD,gGAAgG;AACzF,KAAK,UAAU,sBAAsB,CAAC,QAA2C,EAAE,MAAc;;IACtG,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC1F,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAA;IAC5B,MAAM,CAAA,MAAA,KAAK,CAAC,OAAO,0CAAE,UAAU,CAAC,MAAM,CAAC,CAAA,CAAA;AACzC,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,kGAAkG;IAClG,cAAc;IACd,IAAI,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,KAAK,WAAW;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAA;IACjG,IAAI,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,KAAK,KAAK,EAAE,CAAC;QACxC,MAAM,EAAE,gBAAgB,EAAE,GAAG,wDAAa,YAAY,GAAC,CAAA;QACvD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAC5C,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAA;IACrD,CAAC;IACD,IAAI,GAAG,CAAC,oBAAS,CAAC,UAAU,CAAC,KAAK,OAAO,EAAE,CAAC;QAC1C,MAAM,EAAE,iBAAiB,EAAE,GAAG,wDAAa,cAAc,GAAC,CAAA;QAC1D,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAA;QACpC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IAClD,CAAC;IACD,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAA;IAC7D,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAA;AAChC,CAAC;AAED,kHAAkH;AAC3G,KAAK,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,CAAC,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,mDAAQ,YAAY,IAAE,CAAC,mDAAQ,gBAAgB,GAAC,CAAC,CAAA;AACrF,CAAC"}

package/dist/runtime/listening-ports.d.ts

@@ -0,0 +1,13 @@
+/** Listening, loopback-reachable ports in one /proc/net/tcp{,6} table. */
+export declare function parseListeningPorts(table: string): number[];
+/** Every previewable port, ascending. Empty off Linux, where there is no /proc to read. */
+export declare function listListeningPorts(tables?: readonly string[]): Promise<number[]>;
+/**
+ * Calls `onChange` with the current ports once, then whenever they change. Returns the stop.
+ * Polled, not watched: /proc files emit no change events.
+ */
+export declare function watchListeningPorts(onChange: (ports: number[]) => void, options?: {
+    intervalMs?: number;
+    list?: () => Promise<number[]>;
+}): () => void;
+//# sourceMappingURL=listening-ports.d.ts.map

package/dist/runtime/listening-ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listening-ports.d.ts","sourceRoot":"","sources":["../../src/runtime/listening-ports.ts"],"names":[],"mappings":"AAoBA,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAW3D;AAED,2FAA2F;AAC3F,wBAAsB,kBAAkB,CAAC,MAAM,GAAE,SAAS,MAAM,EAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOrG;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,EACnC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CAAO,GACpE,MAAM,IAAI,CAmBZ"}