@platless/axom-cli 0.6.36 → 0.6.52

package/dist/workstation/update/watchdogProcess.js

@@ -0,0 +1,72 @@
+import { createHash } from 'node:crypto';
+import { spawn as nodeSpawn, execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+const execute = promisify(execFile);
+export function watchdogUnitName(input) {
+    const digest = createHash('sha256').update(path.resolve(input.program)).update('\0').update(path.resolve(input.plan)).digest('hex').slice(0, 32);
+    return `axom-update-watchdog-${digest}`;
+}
+/** detached:true changes the Unix session, but cannot escape systemd's service cgroup. Managed
+ * Linux watchdogs must belong to a separate user unit before their predecessor can be stopped. */
+export async function launchWatchdogProcess(input, deps = {}) {
+    for (const value of [input.nodePath, input.program, input.plan, ...(input.logPath ? [input.logPath] : [])]) {
+        if (!path.isAbsolute(value) || /[\u0000-\u001f\u007f]/.test(value))
+            throw Error('Watchdog process paths must be absolute without control characters');
+    }
+    if ((deps.platform ?? process.platform) === 'linux' && input.lifecycle === 'managed') {
+        const unit = watchdogUnitName(input);
+        const environment = deps.env ?? process.env;
+        const run = async (executable, argv) => {
+            const result = await (deps.runSystemd ?? (async (exe, args) => execute(exe, args, { env: environment, timeout: 15_000, maxBuffer: 65_536 })))(executable, argv);
+            if (result.code !== undefined && result.code !== 0)
+                throw Error(`${executable} exited ${result.code}: ${result.stderr ?? ''}`);
+            return result;
+        };
+        const args = ['--user', '--quiet', '--collect', '--unit', unit, '--property=Type=exec', '--property=Restart=no'];
+        for (const name of ['PATH', 'NODE_EXTRA_CA_CERTS', 'NODE_OPTIONS', 'HTTP_PROXY', 'HTTPS_PROXY', 'ALL_PROXY', 'NO_PROXY',
+            'http_proxy', 'https_proxy', 'all_proxy', 'no_proxy', 'NPM_CONFIG_USERCONFIG', 'NPM_CONFIG_CACHE', 'npm_config_userconfig', 'npm_config_cache']) {
+            if (environment[name] !== undefined)
+                args.push(`--setenv=${name}`);
+        }
+        if (input.logPath)
+            args.push(`--property=StandardOutput=append:${input.logPath}`, `--property=StandardError=append:${input.logPath}`);
+        args.push('--', input.nodePath, input.program, input.plan);
+        let launchError;
+        try {
+            await run('/usr/bin/systemd-run', args);
+        }
+        catch (error) {
+            launchError = error;
+        }
+        // Verify newly launched and existing units identically before authorizing a handoff.
+        // busctl's typed JSON preserves argument boundaries, including spaces and quotes.
+        try {
+            const properties = await run('/usr/bin/systemctl', ['--user', 'show', '--property=ActiveState', '--property=Transient', '--property=MainPID', `${unit}.service`]);
+            const values = Object.fromEntries(properties.stdout.trim().split('\n').map(line => line.split('=')));
+            if (values.ActiveState !== 'active' || values.Transient !== 'yes')
+                throw Error('Watchdog unit is not an active transient service');
+            const pid = Number(values.MainPID);
+            if (!Number.isSafeInteger(pid) || pid <= 0)
+                throw Error('Watchdog unit has no live main process');
+            const objectPath = `/org/freedesktop/systemd1/unit/${unit.replace(/-/g, '_2d')}_2eservice`;
+            const execution = await run('/usr/bin/busctl', ['--user', '--json=short', 'get-property', 'org.freedesktop.systemd1', objectPath,
+                'org.freedesktop.systemd1.Service', 'ExecStart']);
+            const value = JSON.parse(execution.stdout);
+            const starts = value.data;
+            if (value.type !== 'a(sasbttttuii)' || !Array.isArray(starts) || starts.length !== 1 || !Array.isArray(starts[0]) ||
+                starts[0][0] !== input.nodePath || JSON.stringify(starts[0][1]) !== JSON.stringify([input.nodePath, input.program, input.plan])) {
+                throw Error('Existing watchdog unit has different executable arguments');
+            }
+            return { kind: 'systemd', unit, pid };
+        }
+        catch (verificationError) {
+            const error = launchError ?? verificationError;
+            throw new Error(`Unable to arm independent systemd watchdog ${unit}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+        }
+    }
+    const child = (deps.spawn ?? nodeSpawn)(input.nodePath, [input.program, input.plan], { detached: true, shell: false, stdio: 'ignore' });
+    await new Promise((resolve, reject) => { child.once('spawn', resolve); child.once('error', reject); });
+    child.unref();
+    return { kind: 'detached', pid: child.pid };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@platless/axom-cli",
-  "version": "0.6.36",
+  "version": "0.6.52",
   "description": "Axomwork CLI - manage Axomwork structures, records and executions over MCP",
   "type": "module",
   "bin": {
@@ -25,7 +25,6 @@
     "@agentclientprotocol/sdk": "1.4.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@napi-rs/keyring": "^1.1.3",
-    "@xterm/addon-serialize": "^0.14.0",
     "@xterm/headless": "^6.0.0",
     "commander": "^15.0.0",
     "js-yaml": "^4.1.0",
@@ -48,5 +47,10 @@
     "node-pty": "1.2.0-beta.15",
     "playwright-core": "1.63.0"
   },
-  "axomPatchBundle": true
+  "axomPatchBundle": true,
+  "axomWorkstationRootReader": {
+    "schemaVersion": 1,
+    "rootFormat": 2,
+    "legacySourceMapping": true
+  }
 }