@provian/mcp 0.0.0-stage → 1.2.1

package/dist/runtime-env.d.ts

@@ -0,0 +1,131 @@
+/**
+ * runtime-env — carry the box's egress environment (forward proxy, loopback
+ * bypass, extra CA) into EVERY Provian Node process,
+ * however that process was started (, requirement C).
+ *
+ * THE DEFECT THIS CLOSES (§3). On a cloud-VM agent box whose only egress
+ * is a forward proxy (a hosted agent's runtime cell; Grok Bot under Network
+ * Controls), Node's global `fetch` ignores `HTTPS_PROXY` and fails `EAI_AGAIN`,
+ * and Node never reads the system CA store, so a TLS-inspecting proxy's CA is
+ * untrusted. Node honours both only when told at PROCESS START:
+ * `NODE_USE_ENV_PROXY=1` (Node ≥ 22.21 / ≥ 24.5) routes `fetch` AND
+ * `http(s).request` through `HTTP(S)_PROXY` minus `NO_PROXY`, and
+ * `NODE_EXTRA_CA_CERTS` adds trust anchors. Neither can be switched on from
+ * inside a running process. And the variables the install shell had never
+ * reached a daemon started by systemd, launchd or cron.
+ *
+ * THE MECHANISM (one, uniform for every entry). The installer writes the box's
+ * egress variables to `~/.provian/runtime.env` (0600, allowlisted keys only).
+ * Every Node entry point — the bundle dispatcher (install, `observe`,
+ * `report-pe` from the git hook), the npm observer, the npm hook — calls
+ * `applyRuntimeEnvAtEntry()` FIRST. It merges the file under the live
+ * environment (the live environment always wins), guarantees loopback is in
+ * `NO_PROXY` whenever a proxy is in effect (the OTLP receiver
+ * and model shim are loopback and must never be proxied), and, when a
+ * start-time-only variable differs from what this process started with,
+ * re-executes itself once with the merged environment (`process.execve` when
+ * the runtime has it, else a supervised child). So a service unit, a cron line
+ * or a hook needs to carry nothing — the file is the one source.
+ *
+ * INVARIANTS.
+ * - Destination checks are unchanged: the SDK egress guard still judges the
+ * DESTINATION host, never the proxy; bundle hashes and signed-channel
+ * signatures are verified exactly as before (TLS to the relay still verifies,
+ * against the system anchors plus any extra CA).
+ * - Loopback is never proxied (`127.0.0.1`, `localhost`, ` :1` always in
+ * `NO_PROXY` when a proxy is set).
+ * - Only allowlisted keys are ever read from or written to the file, so it can
+ * never inject `NODE_OPTIONS`, a preload, or anything else executable.
+ * - One re-exec at most (guard variable), never a loop.
+ */
+import { spawnSync } from 'child_process';
+/** Where the installer records the box's egress environment. */
+export declare function runtimeEnvPath(home?: string): string;
+/** Proxy variables Node's env-proxy support reads (both cases, as curl does). */
+export declare const PROXY_KEYS: readonly ["HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy"];
+export declare const NO_PROXY_KEYS: readonly ["NO_PROXY", "no_proxy"];
+/**
+ * The ONLY keys runtime.env may carry. Anything else in the file is ignored on
+ * read and never written. (retired the local witness endpoint; its
+ * PROVIAN_WITNESS_* opt-ins are no longer carried — a line an earlier installer
+ * wrote is ignored, and an updated daemon prunes it.)
+ */
+export declare const RUNTIME_ENV_KEYS: readonly string[];
+/** Hosts that are always loopback and must never be sent to a proxy. */
+export declare const LOOPBACK_NO_PROXY: readonly ["127.0.0.1", "localhost", "::1"];
+/** Guard so a re-executed process never re-executes again. */
+export declare const RUNTIME_ENV_REEXEC_GUARD = "PROVIAN_RUNTIME_ENV_REEXEC";
+/**
+ * System CA bundles, most common first. Used only on Linux, where a
+ * TLS-inspecting proxy's CA is installed into the OS store (curl trusts it) but
+ * Node does not read that store.
+ */
+export declare const LINUX_SYSTEM_CA_BUNDLES: readonly ["/etc/ssl/certs/ca-certificates.crt", "/etc/pki/tls/certs/ca-bundle.crt", "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem", "/etc/ssl/ca-bundle.pem", "/etc/ssl/cert.pem"];
+/** Does this Node runtime honour `NODE_USE_ENV_PROXY` for fetch and http(s)? */
+export declare function nodeSupportsEnvProxy(nodeVersion?: string): boolean;
+export declare function hasProxy(env: NodeJS.ProcessEnv): boolean;
+/** Merge the loopback hosts into a NO_PROXY list, preserving the caller's entries and order. */
+export declare function withLoopbackNoProxy(value: string | undefined): string;
+export interface RuntimeEnvProbe {
+    platform?: NodeJS.Platform;
+    exists?: (p: string) => boolean;
+}
+/** The extra-CA file this box needs Node to trust, or null. */
+export declare function resolveExtraCaFile(env: NodeJS.ProcessEnv, probe?: RuntimeEnvProbe): string | null;
+/**
+ * The runtime environment the INSTALLER captures from its own shell. Pure over
+ * `env` + `probe`. Empty when the box has no proxy and no extra CA.
+ */
+export declare function computeRuntimeEnv(env: NodeJS.ProcessEnv, probe?: RuntimeEnvProbe): Record<string, string>;
+/** Serialize (allowlisted keys only; values with a newline are dropped, never escaped). */
+export declare function serializeRuntimeEnv(values: Record<string, string>): string;
+/** Parse the file (allowlisted keys only; comments and unknown keys ignored). */
+export declare function parseRuntimeEnv(text: string): Record<string, string>;
+export declare function readRuntimeEnvFile(file?: string): Record<string, string>;
+/**
+ * Persist what the installer saw. Replaces the file (a re-install from a shell
+ * with a different proxy must not keep the stale one); removes it when there is
+ * nothing to carry. Returns the keys written.
+ */
+export declare function persistRuntimeEnv(env: NodeJS.ProcessEnv, opts?: {
+    file?: string;
+    probe?: RuntimeEnvProbe;
+}): string[];
+export interface RuntimeEnvDecision {
+    /** The environment this process should run with. */
+    env: NodeJS.ProcessEnv;
+    /** True when a start-time-only variable differs from what the process started with. */
+    reexec: boolean;
+    /** Plain notes for the log (never a secret value). */
+    notes: string[];
+}
+/**
+ * Decide the effective environment for THIS process. Pure: `current` is the
+ * environment the process started with, `fromFile` what the installer recorded.
+ */
+export declare function decideRuntimeEnv(current: NodeJS.ProcessEnv, fromFile: Record<string, string>, nodeVersion?: string): RuntimeEnvDecision;
+export interface ApplyRuntimeEnvDeps {
+    env?: NodeJS.ProcessEnv;
+    file?: string;
+    /**
+     * Merge these in place of the file. `onboard` passes what it read from its own shell, which is
+     * authoritative for an install, so it can reach the relay before it has written anything.
+     */
+    recorded?: Record<string, string>;
+    nodeVersion?: string;
+    execPath?: string;
+    execArgv?: string[];
+    argv?: string[];
+    log?: (line: string) => void;
+    /** `process.execve` (Node ≥ 22.15) — replaces the process image, same pid. */
+    execve?: ((file: string, args: string[], env: NodeJS.ProcessEnv) => never) | null;
+    spawnSync?: typeof spawnSync;
+    exit?: (code: number) => never;
+}
+/**
+ * Call FIRST in every Node entry point. Returns normally when this process
+ * already runs with the right environment (after updating `process.env` with the
+ * non-start-time values). Otherwise re-executes and never returns.
+ */
+export declare function applyRuntimeEnvAtEntry(deps?: ApplyRuntimeEnvDeps): void;
+//# sourceMappingURL=runtime-env.d.ts.map

package/dist/runtime-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../src/runtime-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAKH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,CAE/D;AAED,iFAAiF;AACjF,eAAO,MAAM,UAAU,qEAAsE,CAAC;AAC9F,eAAO,MAAM,aAAa,mCAAoC,CAAC;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAK7C,CAAC;AAOF,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,4CAA6C,CAAC;AAE5E,8DAA8D;AAC9D,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,yLAM1B,CAAC;AAEX,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,WAAW,GAAE,MAA8B,GAAG,OAAO,CAMzF;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAExD;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIrE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;CACjC;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,GAAE,eAAoB,GAAG,MAAM,GAAG,IAAI,CAiBrG;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,GAAE,eAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAe7G;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAQ1E;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYpE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,MAAyB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE1F;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,CAAA;CAAO,GACpD,MAAM,EAAE,CAaV;AAED,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,uFAAuF;IACvF,MAAM,EAAE,OAAO,CAAC;IAChB,sDAAsD;IACtD,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,CAAC,UAAU,EAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,WAAW,GAAE,MAA8B,GAC1C,kBAAkB,CAwBpB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,8EAA8E;IAC9E,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC;IAClF,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,GAAE,mBAAwB,GAAG,IAAI,CA+B3E"}

package/dist/runtime-env.js

@@ -0,0 +1,328 @@
+"use strict";
+/**
+ * runtime-env — carry the box's egress environment (forward proxy, loopback
+ * bypass, extra CA) into EVERY Provian Node process,
+ * however that process was started (, requirement C).
+ *
+ * THE DEFECT THIS CLOSES (§3). On a cloud-VM agent box whose only egress
+ * is a forward proxy (a hosted agent's runtime cell; Grok Bot under Network
+ * Controls), Node's global `fetch` ignores `HTTPS_PROXY` and fails `EAI_AGAIN`,
+ * and Node never reads the system CA store, so a TLS-inspecting proxy's CA is
+ * untrusted. Node honours both only when told at PROCESS START:
+ * `NODE_USE_ENV_PROXY=1` (Node ≥ 22.21 / ≥ 24.5) routes `fetch` AND
+ * `http(s).request` through `HTTP(S)_PROXY` minus `NO_PROXY`, and
+ * `NODE_EXTRA_CA_CERTS` adds trust anchors. Neither can be switched on from
+ * inside a running process. And the variables the install shell had never
+ * reached a daemon started by systemd, launchd or cron.
+ *
+ * THE MECHANISM (one, uniform for every entry). The installer writes the box's
+ * egress variables to `~/.provian/runtime.env` (0600, allowlisted keys only).
+ * Every Node entry point — the bundle dispatcher (install, `observe`,
+ * `report-pe` from the git hook), the npm observer, the npm hook — calls
+ * `applyRuntimeEnvAtEntry()` FIRST. It merges the file under the live
+ * environment (the live environment always wins), guarantees loopback is in
+ * `NO_PROXY` whenever a proxy is in effect (the OTLP receiver
+ * and model shim are loopback and must never be proxied), and, when a
+ * start-time-only variable differs from what this process started with,
+ * re-executes itself once with the merged environment (`process.execve` when
+ * the runtime has it, else a supervised child). So a service unit, a cron line
+ * or a hook needs to carry nothing — the file is the one source.
+ *
+ * INVARIANTS.
+ * - Destination checks are unchanged: the SDK egress guard still judges the
+ * DESTINATION host, never the proxy; bundle hashes and signed-channel
+ * signatures are verified exactly as before (TLS to the relay still verifies,
+ * against the system anchors plus any extra CA).
+ * - Loopback is never proxied (`127.0.0.1`, `localhost`, ` :1` always in
+ * `NO_PROXY` when a proxy is set).
+ * - Only allowlisted keys are ever read from or written to the file, so it can
+ * never inject `NODE_OPTIONS`, a preload, or anything else executable.
+ * - One re-exec at most (guard variable), never a loop.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LINUX_SYSTEM_CA_BUNDLES = exports.RUNTIME_ENV_REEXEC_GUARD = exports.LOOPBACK_NO_PROXY = exports.RUNTIME_ENV_KEYS = exports.NO_PROXY_KEYS = exports.PROXY_KEYS = void 0;
+exports.runtimeEnvPath = runtimeEnvPath;
+exports.nodeSupportsEnvProxy = nodeSupportsEnvProxy;
+exports.hasProxy = hasProxy;
+exports.withLoopbackNoProxy = withLoopbackNoProxy;
+exports.resolveExtraCaFile = resolveExtraCaFile;
+exports.computeRuntimeEnv = computeRuntimeEnv;
+exports.serializeRuntimeEnv = serializeRuntimeEnv;
+exports.parseRuntimeEnv = parseRuntimeEnv;
+exports.readRuntimeEnvFile = readRuntimeEnvFile;
+exports.persistRuntimeEnv = persistRuntimeEnv;
+exports.decideRuntimeEnv = decideRuntimeEnv;
+exports.applyRuntimeEnvAtEntry = applyRuntimeEnvAtEntry;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os_1 = require("os");
+const child_process_1 = require("child_process");
+/** Where the installer records the box's egress environment. */
+function runtimeEnvPath(home = (0, os_1.homedir)()) {
+    return path.join(home, '.provian', 'runtime.env');
+}
+/** Proxy variables Node's env-proxy support reads (both cases, as curl does). */
+exports.PROXY_KEYS = ['HTTPS_PROXY', 'https_proxy', 'HTTP_PROXY', 'http_proxy'];
+exports.NO_PROXY_KEYS = ['NO_PROXY', 'no_proxy'];
+/**
+ * The ONLY keys runtime.env may carry. Anything else in the file is ignored on
+ * read and never written. (retired the local witness endpoint; its
+ * PROVIAN_WITNESS_* opt-ins are no longer carried — a line an earlier installer
+ * wrote is ignored, and an updated daemon prunes it.)
+ */
+exports.RUNTIME_ENV_KEYS = [
+    ...exports.PROXY_KEYS,
+    ...exports.NO_PROXY_KEYS,
+    'NODE_USE_ENV_PROXY',
+    'NODE_EXTRA_CA_CERTS',
+];
+/** Variables Node reads once at process start — a change requires a re-exec. */
+const START_TIME_KEYS = [
+    'NODE_USE_ENV_PROXY', 'NODE_EXTRA_CA_CERTS', ...exports.PROXY_KEYS, ...exports.NO_PROXY_KEYS,
+];
+/** Hosts that are always loopback and must never be sent to a proxy. */
+exports.LOOPBACK_NO_PROXY = ['127.0.0.1', 'localhost', '::1'];
+/** Guard so a re-executed process never re-executes again. */
+exports.RUNTIME_ENV_REEXEC_GUARD = 'PROVIAN_RUNTIME_ENV_REEXEC';
+/**
+ * System CA bundles, most common first. Used only on Linux, where a
+ * TLS-inspecting proxy's CA is installed into the OS store (curl trusts it) but
+ * Node does not read that store.
+ */
+exports.LINUX_SYSTEM_CA_BUNDLES = [
+    '/etc/ssl/certs/ca-certificates.crt', // Debian, Ubuntu, Alpine (ca-certificates)
+    '/etc/pki/tls/certs/ca-bundle.crt', // RHEL, Fedora, Amazon Linux
+    '/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem', // RHEL 7+ extracted
+    '/etc/ssl/ca-bundle.pem', // openSUSE
+    '/etc/ssl/cert.pem', // Alpine / generic OpenSSL
+];
+/** Does this Node runtime honour `NODE_USE_ENV_PROXY` for fetch and http(s)? */
+function nodeSupportsEnvProxy(nodeVersion = process.versions.node) {
+    const [major, minor] = nodeVersion.replace(/^v/, '').split('.').map((n) => Number.parseInt(n, 10));
+    if (!Number.isFinite(major) || !Number.isFinite(minor))
+        return false;
+    if (major === 22)
+        return minor >= 21;
+    if (major === 24)
+        return minor >= 5;
+    return major >= 25;
+}
+function hasProxy(env) {
+    return exports.PROXY_KEYS.some((k) => typeof env[k] === 'string' && env[k].trim().length > 0);
+}
+/** Merge the loopback hosts into a NO_PROXY list, preserving the caller's entries and order. */
+function withLoopbackNoProxy(value) {
+    const entries = (value ?? '').split(',').map((s) => s.trim()).filter((s) => s.length > 0);
+    const missing = exports.LOOPBACK_NO_PROXY.filter((h) => !entries.includes(h));
+    return [...missing, ...entries].join(',');
+}
+/** The extra-CA file this box needs Node to trust, or null. */
+function resolveExtraCaFile(env, probe = {}) {
+    const exists = probe.exists ?? ((p) => {
+        try {
+            return fs.statSync(p).isFile();
+        }
+        catch {
+            return false;
+        }
+    });
+    // An operator's explicit choice, in the order the common tools read them.
+    for (const key of ['NODE_EXTRA_CA_CERTS', 'SSL_CERT_FILE', 'CURL_CA_BUNDLE', 'REQUESTS_CA_BUNDLE']) {
+        const v = env[key];
+        if (typeof v === 'string' && v.length > 0 && exists(v))
+            return v;
+    }
+    // The OS store, on Linux only (macOS/Windows keep corporate anchors in a
+    // keychain/cert store, not a PEM file, so there is nothing to point at).
+    if ((probe.platform ?? process.platform) === 'linux') {
+        for (const candidate of exports.LINUX_SYSTEM_CA_BUNDLES) {
+            if (exists(candidate))
+                return candidate;
+        }
+    }
+    return null;
+}
+/**
+ * The runtime environment the INSTALLER captures from its own shell. Pure over
+ * `env` + `probe`. Empty when the box has no proxy and no extra CA.
+ */
+function computeRuntimeEnv(env, probe = {}) {
+    const out = {};
+    if (hasProxy(env)) {
+        for (const k of exports.PROXY_KEYS) {
+            const v = env[k];
+            if (typeof v === 'string' && v.trim().length > 0)
+                out[k] = v.trim();
+        }
+        const noProxy = withLoopbackNoProxy(env.NO_PROXY ?? env.no_proxy);
+        out.NO_PROXY = noProxy;
+        out.no_proxy = noProxy;
+        out.NODE_USE_ENV_PROXY = '1';
+    }
+    const ca = resolveExtraCaFile(env, probe);
+    if (ca)
+        out.NODE_EXTRA_CA_CERTS = ca;
+    return out;
+}
+/** Serialize (allowlisted keys only; values with a newline are dropped, never escaped). */
+function serializeRuntimeEnv(values) {
+    const lines = ['# Written by the Provian installer. Loaded by every Provian process on this machine.'];
+    for (const key of exports.RUNTIME_ENV_KEYS) {
+        const v = values[key];
+        if (typeof v !== 'string' || v.length === 0 || /[\r\n]/.test(v))
+            continue;
+        lines.push(`${key}=${v}`);
+    }
+    return `${lines.join('\n')}\n`;
+}
+/** Parse the file (allowlisted keys only; comments and unknown keys ignored). */
+function parseRuntimeEnv(text) {
+    const out = {};
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith('#'))
+            continue;
+        const eq = line.indexOf('=');
+        if (eq <= 0)
+            continue;
+        const key = line.slice(0, eq).trim();
+        if (!exports.RUNTIME_ENV_KEYS.includes(key))
+            continue;
+        out[key] = line.slice(eq + 1);
+    }
+    return out;
+}
+function readRuntimeEnvFile(file = runtimeEnvPath()) {
+    try {
+        return parseRuntimeEnv(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Persist what the installer saw. Replaces the file (a re-install from a shell
+ * with a different proxy must not keep the stale one); removes it when there is
+ * nothing to carry. Returns the keys written.
+ */
+function persistRuntimeEnv(env, opts = {}) {
+    const file = opts.file ?? runtimeEnvPath();
+    const values = computeRuntimeEnv(env, opts.probe);
+    const keys = Object.keys(values);
+    if (keys.length === 0) {
+        try {
+            fs.unlinkSync(file);
+        }
+        catch { /* absent is fine */ }
+        return [];
+    }
+    fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
+    const tmp = `${file}.${process.pid}.tmp`;
+    fs.writeFileSync(tmp, serializeRuntimeEnv(values), { mode: 0o600 });
+    fs.renameSync(tmp, file);
+    return keys;
+}
+/**
+ * Decide the effective environment for THIS process. Pure: `current` is the
+ * environment the process started with, `fromFile` what the installer recorded.
+ */
+function decideRuntimeEnv(current, fromFile, nodeVersion = process.versions.node) {
+    const env = { ...current };
+    const notes = [];
+    // The live environment wins; the file only fills what is missing.
+    for (const [k, v] of Object.entries(fromFile)) {
+        if (env[k] === undefined || env[k] === '')
+            env[k] = v;
+    }
+    // A proxy in effect → loopback bypass + Node's env-proxy support, both cases of NO_PROXY.
+    if (hasProxy(env)) {
+        const merged = withLoopbackNoProxy(env.NO_PROXY ?? env.no_proxy);
+        env.NO_PROXY = merged;
+        env.no_proxy = merged;
+        if (nodeSupportsEnvProxy(nodeVersion)) {
+            if (!env.NODE_USE_ENV_PROXY)
+                env.NODE_USE_ENV_PROXY = '1';
+        }
+        else {
+            notes.push(`this Node (${nodeVersion}) cannot route through the configured proxy; `
+                + 'Node 22.21+ is needed (the hosted install line fetches one)');
+        }
+    }
+    const alreadyReexeced = current[exports.RUNTIME_ENV_REEXEC_GUARD] === '1';
+    const changed = START_TIME_KEYS.some((k) => (current[k] ?? '') !== (env[k] ?? ''));
+    return { env, reexec: changed && !alreadyReexeced, notes };
+}
+/**
+ * Call FIRST in every Node entry point. Returns normally when this process
+ * already runs with the right environment (after updating `process.env` with the
+ * non-start-time values). Otherwise re-executes and never returns.
+ */
+function applyRuntimeEnvAtEntry(deps = {}) {
+    const current = deps.env ?? process.env;
+    const decision = decideRuntimeEnv(current, deps.recorded ?? readRuntimeEnvFile(deps.file), deps.nodeVersion);
+    const log = deps.log ?? ((line) => process.stderr.write(`${line}\n`));
+    for (const note of decision.notes)
+        log(`[provian] ${note}`);
+    if (!decision.reexec) {
+        // Non-start-time values are read later from process.env; apply them in place.
+        for (const [k, v] of Object.entries(decision.env)) {
+            if (v !== undefined && current[k] !== v)
+                current[k] = v;
+        }
+        return;
+    }
+    const childEnv = { ...decision.env, [exports.RUNTIME_ENV_REEXEC_GUARD]: '1' };
+    const execPath = deps.execPath ?? process.execPath;
+    const args = [...(deps.execArgv ?? process.execArgv), ...(deps.argv ?? process.argv).slice(1)];
+    const execve = deps.execve !== undefined
+        ? deps.execve
+        : (typeof process.execve === 'function'
+            ? (process.execve.bind(process))
+            : null);
+    if (execve) {
+        try {
+            execve(execPath, [execPath, ...args], childEnv);
+        }
+        catch {
+            // Fall through to the supervised child below.
+        }
+    }
+    const run = deps.spawnSync ?? child_process_1.spawnSync;
+    const res = run(execPath, args, { stdio: 'inherit', env: childEnv });
+    const exit = deps.exit ?? ((code) => process.exit(code));
+    exit(typeof res.status === 'number' ? res.status : 1);
+}
+//# sourceMappingURL=runtime-env.js.map

package/dist/runtime-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../src/runtime-env.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQH,wCAEC;AA4CD,oDAMC;AAED,4BAEC;AAGD,kDAIC;AAQD,gDAiBC;AAMD,8CAeC;AAGD,kDAQC;AAGD,0CAYC;AAED,gDAEC;AAOD,8CAgBC;AAeD,4CA4BC;AA0BD,wDA+BC;AA5QD,uCAAyB;AACzB,2CAA6B;AAC7B,2BAA6B;AAC7B,iDAA0C;AAE1C,gEAAgE;AAChE,SAAgB,cAAc,CAAC,OAAe,IAAA,YAAO,GAAE;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACpD,CAAC;AAED,iFAAiF;AACpE,QAAA,UAAU,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AACjF,QAAA,aAAa,GAAG,CAAC,UAAU,EAAE,UAAU,CAAU,CAAC;AAE/D;;;;;GAKG;AACU,QAAA,gBAAgB,GAAsB;IACjD,GAAG,kBAAU;IACb,GAAG,qBAAa;IAChB,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AAEF,gFAAgF;AAChF,MAAM,eAAe,GAAsB;IACzC,oBAAoB,EAAE,qBAAqB,EAAE,GAAG,kBAAU,EAAE,GAAG,qBAAa;CAC7E,CAAC;AAEF,wEAAwE;AAC3D,QAAA,iBAAiB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAU,CAAC;AAE5E,8DAA8D;AACjD,QAAA,wBAAwB,GAAG,4BAA4B,CAAC;AAErE;;;;GAIG;AACU,QAAA,uBAAuB,GAAG;IACrC,oCAAoC,EAAE,2CAA2C;IACjF,kCAAkC,EAAE,6BAA6B;IACjE,mDAAmD,EAAE,oBAAoB;IACzE,wBAAwB,EAAE,WAAW;IACrC,mBAAmB,EAAE,2BAA2B;CACxC,CAAC;AAEX,gFAAgF;AAChF,SAAgB,oBAAoB,CAAC,cAAsB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAC9E,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,IAAI,CAAC,CAAC;IACpC,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,SAAgB,QAAQ,CAAC,GAAsB;IAC7C,OAAO,kBAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAK,GAAG,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,gGAAgG;AAChG,SAAgB,mBAAmB,CAAC,KAAyB;IAC3D,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,yBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAOD,+DAA+D;AAC/D,SAAgB,kBAAkB,CAAC,GAAsB,EAAE,QAAyB,EAAE;IACpF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE;QAC5C,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,0EAA0E;IAC1E,KAAK,MAAM,GAAG,IAAI,CAAC,qBAAqB,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACnG,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;QACrD,KAAK,MAAM,SAAS,IAAI,+BAAuB,EAAE,CAAC;YAChD,IAAI,MAAM,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,GAAsB,EAAE,QAAyB,EAAE;IACnF,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,kBAAU,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,CAAC;QACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClE,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;QACvB,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;QACvB,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC;IAC/B,CAAC;IACD,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,EAAE;QAAE,GAAG,CAAC,mBAAmB,GAAG,EAAE,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2FAA2F;AAC3F,SAAgB,mBAAmB,CAAC,MAA8B;IAChE,MAAM,KAAK,GAAG,CAAC,sFAAsF,CAAC,CAAC;IACvG,KAAK,MAAM,GAAG,IAAI,wBAAgB,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1E,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,iFAAiF;AACjF,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,wBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9C,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAe,cAAc,EAAE;IAChE,IAAI,CAAC;QAAC,OAAO,eAAe,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAC/B,GAAsB,EACtB,OAAmD,EAAE;IAErD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC3D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;GAGG;AACH,SAAgB,gBAAgB,CAC9B,OAA0B,EAC1B,QAAgC,EAChC,cAAsB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAE3C,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,kEAAkE;IAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,0FAA0F;IAC1F,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjE,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC;QACtB,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC;QACtB,IAAI,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,kBAAkB;gBAAE,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,cAAc,WAAW,+CAA+C;kBACtE,6DAA6D,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,OAAO,CAAC,gCAAwB,CAAC,KAAK,GAAG,CAAC;IAClE,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC;AAC7D,CAAC;AAqBD;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,OAA4B,EAAE;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACxC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK;QAAE,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,8EAA8E;QAC9E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAsB,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,gCAAwB,CAAC,EAAE,GAAG,EAAE,CAAC;IACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS;QACtC,CAAC,CAAC,IAAI,CAAC,MAAM;QACb,CAAC,CAAC,CAAC,OAAQ,OAA2C,CAAC,MAAM,KAAK,UAAU;YAC1E,CAAC,CAAC,CAAE,OAA0F,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpH,CAAC,CAAC,IAAI,CAAC,CAAC;IACZ,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,yBAAS,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAU,CAAC,CAAC;IAC1E,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/stdio.d.ts

@@ -0,0 +1,6 @@
+import type { ToolContext } from './core/types';
+/** Build the local ToolContext. Re-resolved per tool call so a create_wallet
+ *  in this session makes later authenticated calls work immediately. */
+export declare function buildLocalContext(env?: NodeJS.ProcessEnv): ToolContext;
+export declare function startStdioServer(): Promise<void>;
+//# sourceMappingURL=stdio.d.ts.map

package/dist/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA4BhD;wEACwE;AACxE,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,WAAW,CAqFnF;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAoBtD"}

package/dist/stdio.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildLocalContext = buildLocalContext;
+exports.startStdioServer = startStdioServer;
+const thread_reader_1 = require("./core/thread-reader");
+/**
+ * Local stdio MCP server entrypoint (`npx @provian/mcp`).
+ *
+ * Wires the shared tool core to a StdioServerTransport with local credential
+ * resolution:
+ *   - agent API creds: PROVIAN_API_KEY/PROVIAN_API_SECRET env, else
+ *     ~/.provian/agent-credentials.json (0600)
+ *   - device creds:    PROVIAN_DEVICE_KEY/PROVIAN_DEVICE_SECRET env, else an
+ *     agent-owned ~/.provian/credentials
+ *   - relay URL:       PROVIAN_RELAY_URL env (default https://api.provian.ai)
+ *
+ * NEVER write to stdout here — it is the MCP protocol channel. Diagnostics go
+ * to stderr.
+ */
+const stdio_1 = require("@modelcontextprotocol/server/stdio");
+const server_1 = require("./core/server");
+const genesis_offer_1 = require("./core/genesis-offer");
+const credentials_1 = require("./credentials");
+const device_credentials_1 = require("./device-credentials");
+const eip191_1 = require("./eip191");
+const recovery_seal_1 = require("./core/recovery-seal");
+const crypto_1 = require("./core/crypto");
+const agent_wallet_registration_1 = require("./agent-wallet-registration");
+const DEFAULT_RELAY_URL = 'https://api.provian.ai';
+/** Held so the stdio transport (reading process stdin) is not garbage-collected
+ *  and the process stays alive for the connection's lifetime. */
+let activeStdioHandle = null;
+/** Build the local ToolContext. Re-resolved per tool call so a create_wallet
+ *  in this session makes later authenticated calls work immediately. */
+function buildLocalContext(env = process.env) {
+    (0, device_credentials_1.reconcileInstalledDeviceRegistration)();
+    return {
+        baseUrl: (env.PROVIAN_RELAY_URL || DEFAULT_RELAY_URL).replace(/\/$/, ''),
+        fetchImpl: fetch,
+        auth: (0, credentials_1.resolveLocalAuth)(env),
+        mode: 'local',
+        persistCredentials: (creds) => (0, credentials_1.persistAgentCredentials)(creds),
+        loadOrCreatePendingAgentWalletRegistration: (context) => {
+            const passphrase = env.PROVIAN_KEYSTORE_PASSPHRASE;
+            if (!passphrase) {
+                throw new Error('PROVIAN_KEYSTORE_PASSPHRASE is required for local create_wallet');
+            }
+            return (0, agent_wallet_registration_1.loadOrCreatePendingAgentWalletRegistration)(context, passphrase);
+        },
+        reloadPendingAgentWalletRegistration: (context, expected) => {
+            const passphrase = env.PROVIAN_KEYSTORE_PASSPHRASE;
+            if (!passphrase) {
+                throw new Error('PROVIAN_KEYSTORE_PASSPHRASE is required for local create_wallet');
+            }
+            return (0, agent_wallet_registration_1.reloadPendingAgentWalletRegistration)(context, passphrase, expected);
+        },
+        loadCompletedAgentWalletRegistration: (context) => {
+            const passphrase = env.PROVIAN_KEYSTORE_PASSPHRASE;
+            if (!passphrase) {
+                throw new Error('PROVIAN_KEYSTORE_PASSPHRASE is required for local create_wallet');
+            }
+            const completed = (0, agent_wallet_registration_1.loadCompletedAgentWalletIdentity)(passphrase, undefined, context);
+            if (!completed)
+                return null;
+            const credentials = (0, credentials_1.loadBoundAgentCredentialsFile)();
+            if (!credentials
+                || credentials.wallet_id !== completed.walletId
+                || credentials.address.toLowerCase() !== completed.address.toLowerCase()) {
+                throw new Error('Completed MCP wallet credentials do not match the final encrypted identity');
+            }
+            (0, agent_wallet_registration_1.clearCompletedAgentWalletPending)(passphrase, context);
+            return {
+                ...completed,
+                apiKey: credentials.api_key,
+                apiSecret: credentials.api_secret,
+                credentialsPersistedTo: credentials_1.AGENT_CREDS_PATH,
+            };
+        },
+        completePendingAgentWalletRegistration: (registrationId, wallet, context) => {
+            const passphrase = env.PROVIAN_KEYSTORE_PASSPHRASE;
+            if (!passphrase) {
+                throw new Error('PROVIAN_KEYSTORE_PASSPHRASE is required for local create_wallet');
+            }
+            return (0, agent_wallet_registration_1.completePendingAgentWalletRegistration)(registrationId, wallet, {
+                passphrase,
+                context,
+            });
+        },
+        signEip191: eip191_1.signEip191Message,
+        withLocalSovereignIdentity: (fn) => {
+            const passphrase = env.PROVIAN_KEYSTORE_PASSPHRASE;
+            if (!passphrase) {
+                throw new Error('PROVIAN_KEYSTORE_PASSPHRASE is required to sign with the local sovereign identity');
+            }
+            const completed = (0, agent_wallet_registration_1.loadCompletedAgentWalletIdentity)(passphrase);
+            if (!completed) {
+                throw new Error('No completed local agent wallet identity found — run create_wallet first (or sign locally and pass the pre-signed fields).');
+            }
+            // The decrypted private key is confined to this closure: the signing
+            // helpers close over it, but it is NEVER returned to the tool handler or
+            // placed in any tool argument/result (F32).
+            const privateKey = completed.privateKey;
+            const pubkey = (0, crypto_1.derivePublicKeyFromPrivateKey)(privateKey);
+            return fn({
+                address: completed.address,
+                walletId: completed.walletId,
+                pubkey,
+                signEip191: (message) => (0, eip191_1.signEip191Message)(privateKey, message),
+                signPop: (binding) => (0, crypto_1.signPoPChallenge)(privateKey, binding),
+                readThreadMessage: (ciphertext) => (0, thread_reader_1.decryptLocalThreadMessage)(privateKey, ciphertext),
+                sealRecoveryKey: (anchorPubkeyB64u) => (0, recovery_seal_1.sealToRecoveryAnchor)(anchorPubkeyB64u, privateKey),
+            });
+        },
+    };
+}
+async function startStdioServer() {
+    // serveStdio owns the era decision: the opening exchange selects the wire era
+    // and pins ONE instance from this factory for the connection's lifetime.
+    // legacy:'serve' (the default) keeps serving current-era clients that open
+    // with the 2025 `initialize` handshake, alongside modern 2026-07-28 clients.
+    // The handle is held so the transport (reading process stdin) keeps the
+    // process alive.
+    activeStdioHandle = (0, stdio_1.serveStdio)(() => (0, server_1.buildProvianMcpServer)(() => buildLocalContext()), {
+        legacy: 'serve',
+    });
+    const auth = (0, credentials_1.resolveLocalAuth)();
+    // The Genesis offer LEADS the startup output while the window is open (stderr only —
+    // stdout is the MCP channel). Nothing after the window closes.
+    for (const line of (0, genesis_offer_1.genesisOfferLines)())
+        console.error(line);
+    console.error(`provian-mcp: stdio server ready (relay: ${process.env.PROVIAN_RELAY_URL || DEFAULT_RELAY_URL}; ` +
+        (auth
+            ? 'agent credentials resolved)'
+            : `no agent credentials yet — call create_wallet, or set PROVIAN_API_KEY/PROVIAN_API_SECRET or ${credentials_1.AGENT_CREDS_PATH})`));
+}
+//# sourceMappingURL=stdio.js.map

package/dist/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":";;AAgDA,8CAqFC;AAED,4CAoBC;AA3JD,wDAAiE;AACjE;;;;;;;;;;;;;GAaG;AAEH,8DAAgE;AAChE,0CAAsD;AAEtD,wDAAyD;AACzD,+CAKuB;AACvB,6DAE8B;AAC9B,qCAA6C;AAC7C,wDAA4D;AAC5D,0CAAgF;AAChF,2EAMqC;AAErC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD;iEACiE;AACjE,IAAI,iBAAiB,GAAyC,IAAI,CAAC;AAEnE;wEACwE;AACxE,SAAgB,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,IAAA,yDAAoC,GAAE,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACxE,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,IAAA,8BAAgB,EAAC,GAAG,CAAC;QAC3B,IAAI,EAAE,OAAO;QACb,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAuB,EAAC,KAAK,CAAC;QAC7D,0CAA0C,EAAE,CAAC,OAAO,EAAE,EAAE;YACtD,MAAM,UAAU,GAAG,GAAG,CAAC,2BAA2B,CAAC;YACnD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,IAAA,sEAA0C,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACzE,CAAC;QACD,oCAAoC,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC1D,MAAM,UAAU,GAAG,GAAG,CAAC,2BAA2B,CAAC;YACnD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,IAAA,gEAAoC,EAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC7E,CAAC;QACD,oCAAoC,EAAE,CAAC,OAAO,EAAE,EAAE;YAChD,MAAM,UAAU,GAAG,GAAG,CAAC,2BAA2B,CAAC;YACnD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,SAAS,GAAG,IAAA,4DAAgC,EAChD,UAAU,EACV,SAAS,EACT,OAAO,CACR,CAAC;YACF,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC5B,MAAM,WAAW,GAAG,IAAA,2CAA6B,GAAE,CAAC;YACpD,IAAI,CAAC,WAAW;mBACX,WAAW,CAAC,SAAS,KAAK,SAAS,CAAC,QAAQ;mBAC5C,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;YAChG,CAAC;YACD,IAAA,4DAAgC,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO;gBACL,GAAG,SAAS;gBACZ,MAAM,EAAE,WAAW,CAAC,OAAO;gBAC3B,SAAS,EAAE,WAAW,CAAC,UAAU;gBACjC,sBAAsB,EAAE,8BAAgB;aACzC,CAAC;QACJ,CAAC;QACD,sCAAsC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YAC1E,MAAM,UAAU,GAAG,GAAG,CAAC,2BAA2B,CAAC;YACnD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,IAAA,kEAAsC,EAAC,cAAc,EAAE,MAAM,EAAE;gBACpE,UAAU;gBACV,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QACD,UAAU,EAAE,0BAAiB;QAC7B,0BAA0B,EAAE,CAAC,EAAE,EAAE,EAAE;YACjC,MAAM,UAAU,GAAG,GAAG,CAAC,2BAA2B,CAAC;YACnD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;YACvG,CAAC;YACD,MAAM,SAAS,GAAG,IAAA,4DAAgC,EAAC,UAAU,CAAC,CAAC;YAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,4HAA4H,CAC7H,CAAC;YACJ,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,4CAA4C;YAC5C,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,sCAA6B,EAAC,UAAU,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC;gBACR,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,MAAM;gBACN,UAAU,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAA,0BAAiB,EAAC,UAAU,EAAE,OAAO,CAAC;gBACvE,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAA,yBAAgB,EAAC,UAAU,EAAE,OAAO,CAAC;gBACnE,iBAAiB,EAAE,CAAC,UAAkB,EAAE,EAAE,CAAC,IAAA,yCAAyB,EAAC,UAAU,EAAE,UAAU,CAAC;gBAC5F,eAAe,EAAE,CAAC,gBAAwB,EAAE,EAAE,CAAC,IAAA,oCAAoB,EAAC,gBAAgB,EAAE,UAAU,CAAC;aAClG,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,gBAAgB;IACpC,8EAA8E;IAC9E,yEAAyE;IACzE,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,iBAAiB;IACjB,iBAAiB,GAAG,IAAA,kBAAU,EAAC,GAAG,EAAE,CAAC,IAAA,8BAAqB,EAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,EAAE;QACrF,MAAM,EAAE,OAAO;KAChB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAA,8BAAgB,GAAE,CAAC;IAChC,qFAAqF;IACrF,+DAA+D;IAC/D,KAAK,MAAM,IAAI,IAAI,IAAA,iCAAiB,GAAE;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,KAAK,CACX,2CAA2C,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,iBAAiB,IAAI;QAC/F,CAAC,IAAI;YACH,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,+FAA+F,8BAAgB,GAAG,CAAC,CAC1H,CAAC;AACJ,CAAC"}