@revisium/orchestrator 0.0.0 → 0.1.0-alpha.10

package/dist/cli/commands/process-tree.js

@@ -0,0 +1,87 @@
+/**
+ * Process-tree ancestry — used by `revo doctor` to decide whether a port's listener belongs to the
+ * tracked stack. A profile's standalone tier is NOT a single pid: the tracked launcher forks a worker
+ * that binds the HTTP port and spawns embedded Postgres, so the actual port owners are *descendants*
+ * of the tracked pid. Exact-pid equality therefore mis-flags the legitimate stack as a rogue daemon;
+ * ancestry-walking is the correct test.
+ */
+import { execFileSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+// Resolve ps to a FIXED absolute path — never via $PATH (S4036: a writable PATH entry could shadow
+// the binary). null if ps is unavailable, in which case ancestry checks degrade to "not within".
+const PS_PATH = ['/bin/ps', '/usr/bin/ps'].find((p) => existsSync(p)) ?? null;
+/** All processes as `{pid, command}` via `ps -ax` (full command line). Empty if ps is unavailable. */
+export function listProcesses() {
+    if (PS_PATH === null)
+        return [];
+    try {
+        const out = execFileSync(PS_PATH, ['-axww', '-o', 'pid=,command='], {
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+            maxBuffer: 8 * 1024 * 1024,
+        });
+        const procs = [];
+        for (const line of out.split('\n')) {
+            const m = line.match(/^\s*(\d+)\s+(.*)$/);
+            if (m)
+                procs.push({ pid: Number(m[1]), command: m[2] });
+        }
+        return procs;
+    }
+    catch {
+        return [];
+    }
+}
+/** Parent pid of `pid` via ps, or null (no such process / ps unavailable). Best-effort. */
+export function parentPid(pid) {
+    if (PS_PATH === null)
+        return null;
+    try {
+        const out = execFileSync(PS_PATH, ['-o', 'ppid=', '-p', String(pid)], {
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        const ppid = Number(out);
+        return Number.isInteger(ppid) && ppid > 0 ? ppid : null;
+    }
+    catch {
+        return null; // process gone / ps error
+    }
+}
+/**
+ * Process start time as an opaque stable string (`ps -o lstart=`, portable on macOS + Linux — avoids
+ * brittle `/proc/<pid>/stat` parsing). Returns null if the process is gone / ps unavailable. Paired
+ * with the pid it forms a reuse-proof identity: a recycled pid gets a different start time, so the
+ * rogue reaper re-checks it before SIGKILL and never kills an innocent process that inherited the pid.
+ */
+export function processStartTime(pid) {
+    if (PS_PATH === null)
+        return null;
+    try {
+        const out = execFileSync(PS_PATH, ['-o', 'lstart=', '-p', String(pid)], {
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        return out.length > 0 ? out : null;
+    }
+    catch {
+        return null; // process gone / ps error
+    }
+}
+/**
+ * True if `pid` is one of `ancestors`, or descends from one — walking the parent chain via `getParent`.
+ * `getParent` is injectable so the traversal is unit-testable without real processes; production passes
+ * `parentPid`. Bounded by `maxHops` (and stops at init, pid ≤ 1) so a missing/cyclic chain can't loop.
+ */
+export function isPidWithin(pid, ancestors, getParent = parentPid, maxHops = 32) {
+    let current = pid;
+    for (let hops = 0; current !== null && hops <= maxHops; hops += 1) {
+        if (ancestors.has(current))
+            return true;
+        if (current <= 1)
+            return false; // reached init (or invalid) — not within the tracked tree
+        current = getParent(current);
+    }
+    return false; // exhausted hops / chain broke before reaching an ancestor
+}
+//# sourceMappingURL=process-tree.js.map

package/dist/cli/commands/process-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-tree.js","sourceRoot":"","sources":["../../../src/cli/commands/process-tree.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,mGAAmG;AACnG,iGAAiG;AACjG,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAE9E,sGAAsG;AACtG,MAAM,UAAU,aAAa;IAC3B,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE;YAClE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;SAC3B,CAAC,CAAC;QACH,MAAM,KAAK,GAA4C,EAAE,CAAC;QAC1D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1C,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE;YACpE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,0BAA0B;IACzC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE;YACtE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,0BAA0B;IACzC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,GAAW,EACX,SAA8B,EAC9B,YAA0C,SAAS,EACnD,OAAO,GAAG,EAAE;IAEZ,IAAI,OAAO,GAAkB,GAAG,CAAC;IACjC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAClE,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,OAAO,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,0DAA0D;QAC1F,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,2DAA2D;AAC3E,CAAC"}

package/dist/cli/commands/revisium-helpers.js

@@ -1,6 +1,6 @@
 /**
- * Private helpers shared between `revisium.ts` (stop/logs) and `ensure-revisium.ts`.
- * Extracted to avoid duplication (F9).
+ * Process + log helpers shared by the lifecycle CLI (`lifecycle.ts`: stop/logs) and the daemon
+ * bring-up path (`ensure-revisium.ts`). Extracted to avoid duplication (F9).
  */
 import { existsSync, readFileSync } from 'node:fs';
 import { isAlive } from '../config.js';

package/dist/cli/commands/rogue-reaper.js

@@ -0,0 +1,63 @@
+/**
+ * Rogue-reaper (slice 140 Phase 2, pure core). `revo doctor --fix` / `revo stop --all` actively EVICT
+ * a legacy/duplicate daemon that polls the `dev-tasks` queue but the advisory lock can't coordinate and
+ * the port-based stop can't see (it's an outbound poller with no inbound listener). Two mechanisms:
+ *
+ *   1. Connection eviction — `pg_terminate_backend` the rogue's DBOS connection (the immediate stop),
+ *      looped to defeat the census→kill TOCTOU (a rogue can dequeue a fresh row in that window).
+ *   2. Process reap — SIGTERM→SIGKILL the rogue PROCESS (the durable stop; its pool would otherwise
+ *      reconnect). This is what the manual `pkill -f "revo mcp"` did, made safe + permanent.
+ *
+ * This module holds the PURE, unit-tested decisions; the pg/ps/kill IO lives in lifecycle.ts.
+ */
+import { isPidWithin } from './process-tree.js';
+/**
+ * Classify a process command line as a revo daemon / mcp-bridge, or null if unrelated.
+ *
+ * Keys on (revo entry token) + (subcommand token). The npm-GLOBAL install runs as
+ * `node …/bin/revo __daemon` — argv[1] is the bin SYMLINK (`bin/revo`, no `.js`); the package's own
+ * `bin/revo.js` does `import '../dist/cli/index.js'` (no re-exec); dev runs as
+ * `node --import tsx …/src/cli/index.ts __daemon`; a compiled run as `…/dist/cli/index.js`. Matching
+ * only `dist/cli/index.js` (or only `bin/revo.js`) MISSES the real installed daemon and the reap
+ * no-ops against the very process it must kill. The subcommand must be a whole word so an unrelated
+ * command merely containing "mcp" (e.g. `node /opt/mcp-server.js`) is not matched.
+ */
+export function classifyRevoProcess(command) {
+    const hasEntry = /\/bin\/revo(?:\.js)?(?:\s|$)/.test(command) || /\/cli\/index\.(?:ts|js)(?:\s|$)/.test(command);
+    if (!hasEntry)
+        return null;
+    if (/(?:^|\s)__daemon(?:\s|$)/.test(command))
+        return 'daemon';
+    if (/(?:^|\s)mcp(?:\s|$)/.test(command))
+        return 'mcp';
+    return null;
+}
+/**
+ * The reap targets: revo daemon/mcp processes NOT within any PROTECTED tree (every profile's tracked
+ * daemon pid-tree). A process inside a tracked tree is the live stack — never reaped. `getParent` is
+ * injected so the ancestry walk is unit-testable without real processes.
+ */
+export function selectReapTargets(procs, protectedPids, getParent) {
+    return procs.filter((proc) => !isPidWithin(proc.pid, protectedPids, getParent));
+}
+/**
+ * Connection-eviction TOCTOU loop. `census()` returns the current rogue backend pids (it THROWS if the
+ * roster can't be read — privilege/DB error — which must propagate as "not converged", never as empty);
+ * `terminate(pid)` kills one backend. Re-census after each round because a rogue can transition a fresh
+ * ENQUEUED row to its own PENDING between the census and the kill. Bounded by `maxRounds`.
+ */
+export async function evictByTermination(census, terminate, maxRounds = 5) {
+    let terminated = 0;
+    for (let round = 1; round <= maxRounds; round += 1) {
+        const rogues = await census();
+        if (rogues.length === 0)
+            return { converged: true, rounds: round, terminated };
+        for (const pid of rogues) {
+            await terminate(pid);
+            terminated += 1;
+        }
+    }
+    const remaining = await census();
+    return { converged: remaining.length === 0, rounds: maxRounds, terminated };
+}
+//# sourceMappingURL=rogue-reaper.js.map

package/dist/cli/commands/rogue-reaper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rogue-reaper.js","sourceRoot":"","sources":["../../../src/cli/commands/rogue-reaper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,QAAQ,GACZ,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClG,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA8B,EAC9B,aAAkC,EAClC,SAAyC;IAEzC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAClF,CAAC;AAID;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA+B,EAC/B,SAAyC,EACzC,SAAS,GAAG,CAAC;IAEb,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC/E,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACrB,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,MAAM,EAAE,CAAC;IACjC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAC9E,CAAC"}

package/dist/cli/index.js

@@ -1,32 +1,8 @@
+// reflect-metadata is required by the daemon entrypoint (`revo __daemon` → NestFactory); load it once
+// here so it is present whichever command runs.
 import 'reflect-metadata';
-import { isMcpCommand, needsHost } from './needs-host.js';
 import { buildProgram } from './program.js';
-const argv = process.argv;
-if (needsHost(argv)) {
-    // Host path: dev:ping, dev:status (and future run/work when they move onto DBOS).
-    // Nest/DBOS/AppModule are imported lazily so the host-free path never loads them.
-    const mcpCommand = isMcpCommand(argv);
-    if (mcpCommand) {
-        process.env.REVO_MCP_STDIO = '1';
-    }
-    else {
-        delete process.env.REVO_MCP_STDIO;
-    }
-    const { NestFactory } = await import('@nestjs/core');
-    const { AppModule } = await import('../app.module.js');
-    const app = await NestFactory.createApplicationContext(AppModule, { logger: mcpCommand ? false : ['error', 'warn'] });
-    try {
-        await buildProgram(app).parseAsync(argv);
-    }
-    finally {
-        // onApplicationShutdown → DBOS.shutdown() only; daemon is NOT stopped (Round 3).
-        await app.close();
-    }
-}
-else {
-    // Host-free path: revisium start/stop/status/logs, bootstrap, run, work,
-    // --help, --version, empty/unknown commands.
-    // Nest/DBOS are NOT loaded here — fast and safe for daemon-management commands.
-    await buildProgram().parseAsync(argv);
-}
+// The CLI is a lightweight client/process-manager (ADR 0006): it NEVER builds AppModule or launches
+// DBOS. The only long-lived host is the daemon, spawned detached via the hidden `__daemon` command.
+await buildProgram().parseAsync(process.argv);
 //# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;AAE1B,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IACpB,kFAAkF;IAClF,kFAAkF;IAClF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACpC,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,wBAAwB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACtH,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,iFAAiF;QACjF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;KAAM,CAAC;IACN,yEAAyE;IACzE,6CAA6C;IAC7C,gFAAgF;IAChF,MAAM,YAAY,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,gDAAgD;AAChD,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,oGAAoG;AACpG,oGAAoG;AACpG,MAAM,YAAY,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/cli/program.js

@@ -1,37 +1,21 @@
 import { Command } from 'commander';
 import { readPackageVersion } from '../package-info.js';
-import { registerBootstrap } from './commands/bootstrap.js';
-import { registerDev } from './commands/dev.js';
-import { registerInbox } from './commands/inbox.js';
+import { registerLifecycle } from './commands/lifecycle.js';
 import { registerMcp } from './commands/mcp.js';
-import { registerPlaybook } from './commands/playbook.js';
-import { registerRevisium } from './commands/revisium.js';
-import { registerRun } from './commands/run.js';
-import { registerWork } from './commands/work.js';
 export { readPackageVersion };
 /**
- * Build the commander program.
- *
- * @param app - Optional Nest app context (host path only).
- *   - When `app` is provided, dev:ping/dev:status actions are wired to the DI context.
- *   - When `app` is absent (host-free path or tests), dev command DEFINITIONS are still
- *     registered so `dev:ping --help` works; actions guard on the absent `app`.
- *   - The no-arg overload is preserved for program.test.ts compatibility.
+ * Build the Revo CLI. The CLI is lifecycle-only (ADR 0006): `revo start/stop/status/...` manage the
+ * whole stack, and `revo mcp` is a thin stdio bridge to the daemon. Orchestration (runs, inbox,
+ * method, …) is reached through the daemon's MCP + GraphQL front doors, not the CLI.
  */
-export function buildProgram(app) {
+export function buildProgram() {
     const program = new Command();
     program
         .name('revo')
         .description('Agent orchestrator CLI')
         .version(readPackageVersion(), '-v, --version', 'Print the revo version');
-    registerRevisium(program);
-    registerBootstrap(program);
-    registerPlaybook(program);
-    registerRun(program, app);
-    registerWork(program);
-    registerInbox(program, app); // G6: forward app so gate resolve path can access DbosService
-    registerMcp(program, app);
-    registerDev(program, app);
+    registerLifecycle(program);
+    registerMcp(program);
     return program;
 }
 //# sourceMappingURL=program.js.map

package/dist/cli/program.js.map

@@ -1 +1 @@
-{"version":3,"file":"program.js","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,GAA6B;IACxD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO;SACJ,IAAI,CAAC,MAAM,CAAC;SACZ,WAAW,CAAC,wBAAwB,CAAC;SACrC,OAAO,CAAC,kBAAkB,EAAE,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC;IAC5E,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1B,YAAY,CAAC,OAAO,CAAC,CAAC;IACtB,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,8DAA8D;IAC3F,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1B,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO;SACJ,IAAI,CAAC,MAAM,CAAC;SACZ,WAAW,CAAC,wBAAwB,CAAC;SACrC,OAAO,CAAC,kBAAkB,EAAE,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC;IAC5E,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,WAAW,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/config.js

@@ -3,6 +3,17 @@ import { existsSync, mkdirSync, readFileSync, rmSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import os from 'node:os';
+/**
+ * Runtime profiles let an installed package (`default`) and a source checkout (`dev`) run on one
+ * machine at once: a profile shifts the whole isolation band off the committed defaults, so the two
+ * never share a port, data dir, or `dbos` database. Custom layouts set the REVO_* knobs directly
+ * instead of adding a profile here. The single source of band constants (offset/suffix/db name).
+ */
+export const PROFILES = {
+    default: { suffix: '', portOffset: 0, dbosDb: 'dbos' },
+    dev: { suffix: '-dev', portOffset: 400, dbosDb: 'dbos_dev' },
+};
+export const GRAPHQL_PORT_OFFSET = 1;
 const sourceDir = dirname(fileURLToPath(import.meta.url));
 export const repoRoot = resolve(sourceDir, '..');
 function expandHome(path) {
@@ -17,16 +28,69 @@ function loadConfig() {
     return JSON.parse(readFileSync(configPath, 'utf8'));
 }
 let cachedConfig = null;
+/** Parse a positive-integer env var, or undefined if unset/invalid. */
+function numEnv(name, env = process.env) {
+    const raw = env[name];
+    if (raw === undefined)
+        return undefined;
+    const n = Number.parseInt(raw, 10);
+    return Number.isFinite(n) && n > 0 ? n : undefined;
+}
+/** Resolve the active profile from REVO_PROFILE (default `default`); unknown names fail loudly. */
+export function resolveProfileName(env = process.env) {
+    const raw = env['REVO_PROFILE'];
+    if (!raw)
+        return 'default';
+    if (Object.prototype.hasOwnProperty.call(PROFILES, raw))
+        return raw;
+    throw new Error(`Unknown REVO_PROFILE '${raw}'. Known profiles: ${Object.keys(PROFILES).join(', ')}. ` +
+        'Set REVO_DATA_DIR/REVO_PORT/REVO_PG_PORT/REVO_DBOS_DB explicitly for a custom layout.');
+}
+/**
+ * Band-default data dir for a SPECIFIC profile (config-file base + the profile's suffix). Deliberately
+ * ignores `REVO_DATA_DIR` — that env var overrides only the ACTIVE profile, so for enumerating SIBLING
+ * profiles' tracked daemons (the cross-profile-safe reap, slice 140 Phase 2) we must use band defaults.
+ * Returns the band-default dir for every profile; a custom REVO_DATA_DIR layout is not enumerable here.
+ */
+export function profileDataDir(profile) {
+    return expandHome(`${loadConfig().dataDir}${PROFILES[profile].suffix}`);
+}
+/**
+ * Layer profile + env into the data dir and ports: the profile sets the band, then an explicit
+ * REVO_* env var overrides that single knob. Pure (no fs) so the precedence is unit-testable.
+ */
+export function resolveProfileConfig(raw, env = process.env) {
+    const profile = resolveProfileName(env);
+    const band = PROFILES[profile];
+    return {
+        profile,
+        dataDir: env['REVO_DATA_DIR'] ?? `${raw.dataDir}${band.suffix}`,
+        preferredPort: numEnv('REVO_PORT', env) ?? raw.preferredPort + band.portOffset,
+        preferredPgPort: numEnv('REVO_PG_PORT', env) ?? raw.preferredPgPort + band.portOffset,
+    };
+}
+/**
+ * Test/CI isolation: env overrides keep a throwaway daemon (and its embedded Postgres + DBOS db)
+ * fully separate from the developer's dogfooding control-plane. `REVO_DATA_DIR` redirects the data
+ * directory (so runtime.json, the embedded PG, and the DBOS connection all key off it); `REVO_PORT`
+ * / `REVO_PG_PORT` give the test daemon distinct preferred ports so it never collides with a live
+ * dev daemon. Unset in normal use → the committed `revisium.config.json` values apply.
+ */
 export function getConfig() {
     if (cachedConfig)
         return cachedConfig;
     const rawConfig = loadConfig();
-    const dataDir = expandHome(rawConfig.dataDir);
+    const { profile, dataDir: profileDataDir, preferredPort, preferredPgPort } = resolveProfileConfig(rawConfig);
+    const dataDir = expandHome(profileDataDir);
     mkdirSync(dataDir, { recursive: true });
     cachedConfig = {
         ...rawConfig,
+        profile,
         dataDir,
+        preferredPort,
+        preferredPgPort,
         logFile: join(dataDir, 'standalone.log'),
+        hostLogFile: join(dataDir, 'host.log'),
         runtimeFile: join(dataDir, 'runtime.json'),
     };
     return cachedConfig;
@@ -75,6 +139,20 @@ export async function resolvePorts() {
     const { preferredPort, preferredPgPort } = getConfig();
     return { httpPort: preferredPort, pgPort: preferredPgPort };
 }
+export function resolveDefaultGraphqlPort() {
+    const runtime = readRuntime();
+    const basePort = runtime && isAlive(runtime.pid)
+        ? runtime.httpPort
+        : getConfig().preferredPort;
+    if (!Number.isInteger(basePort) || basePort <= 0 || basePort > 65_535) {
+        throw new Error(`Cannot derive GraphQL port from invalid HTTP port ${basePort}`);
+    }
+    const port = basePort + GRAPHQL_PORT_OFFSET;
+    if (port > 65_535) {
+        throw new Error(`Cannot derive GraphQL port from HTTP port ${basePort}`);
+    }
+    return port;
+}
 export async function isPortFree(port) {
     return new Promise((resolvePort) => {
         const srv = createServer();

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AA4BzB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAEjD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAe,CAAC;AACpE,CAAC;AAED,IAAI,YAAY,GAAsB,IAAI,CAAC;AAE3C,MAAM,UAAU,SAAS;IACvB,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,YAAY,GAAG;QACb,GAAG,SAAS;QACZ,OAAO;QACP,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC;QACxC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;KAC3C,CAAC;IAEF,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAiB,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC;IACpC,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,CAAC,WAAW,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;IAC7B,OAAO,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACnD,OAAO,cAAc,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,SAAS,EAAE,CAAC;IACvD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AAsBzB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;IACtD,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE;CACpD,CAAC;AAYX,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAEjD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAe,CAAC;AACpE,CAAC;AAED,IAAI,YAAY,GAAsB,IAAI,CAAC;AAE3C,uEAAuE;AACvE,SAAS,MAAM,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IAChE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;QAAE,OAAO,GAAkB,CAAC;IACnF,MAAM,IAAI,KAAK,CACb,yBAAyB,GAAG,sBAAsB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACpF,uFAAuF,CAC1F,CAAC;AACJ,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAoB;IACjD,OAAO,UAAU,CAAC,GAAG,UAAU,EAAE,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAsE,EACtE,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO;QACL,OAAO;QACP,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE;QAC/D,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU;QAC9E,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,UAAU;KACtF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS;IACvB,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,YAAY,GAAG;QACb,GAAG,SAAS;QACZ,OAAO;QACP,OAAO;QACP,aAAa;QACb,eAAe;QACf,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC;QACxC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;QACtC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;KAC3C,CAAC;IAEF,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAiB,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC;IACpC,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,CAAC,WAAW,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;IAC7B,OAAO,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACnD,OAAO,cAAc,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,SAAS,EAAE,CAAC;IACvD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,GAAG,mBAAmB,CAAC;IAC5C,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,MAAM,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/control-plane/bootstrap.js

@@ -0,0 +1,101 @@
+/**
+ * In-process control-plane bootstrap (ADR 0006) — replaces the external `npx revisium example
+ * bootstrap` with native `@revisium/client` calls so `revo start` brings up a READY stack with no
+ * external tool. Idempotent (check-then-create): an existing install is a cheap no-op (a few reads,
+ * no writes), a fresh one gets project + REST endpoint + tables + seed rows.
+ *
+ * The whole bootstrap runs on ONE `client.revision('draft')` scope (tables via applyAdditiveSchema-
+ * Migration, then seed rows) and commits once. Table schemas + rows come from bootstrap.config.json.
+ */
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { RevisiumClient } from '@revisium/client';
+import { baseUrl, getConfig, repoRoot } from '../config.js';
+import { applyAdditiveSchemaMigration } from './schema-migration.js';
+/**
+ * True ONLY for a Revisium "not found" (404) response. Existence probes use this so a 5xx/auth/network
+ * fault is NOT silently treated as "absent" (which would wrongly run a create path on a broken backend).
+ */
+function isNotFoundError(err) {
+    if (err && typeof err === 'object') {
+        const e = err;
+        if (e.status === 404 || e.statusCode === 404)
+            return true;
+    }
+    return /\b404\b|not found|NOT_FOUND/i.test(err instanceof Error ? err.message : String(err));
+}
+/** Absolute path to the committed control-plane bootstrap config (table schemas + seed rows). */
+export function bootstrapConfigPath() {
+    return join(repoRoot, 'control-plane', 'bootstrap.config.json');
+}
+/**
+ * Ensure the control-plane project/schema/seed exist. Safe to call on every daemon boot — when
+ * already bootstrapped it issues only existence checks and returns without writing.
+ */
+export async function bootstrapControlPlane(httpPort, client = new RevisiumClient({ baseUrl: baseUrl(httpPort) })) {
+    const { org, project, branch } = getConfig();
+    const configPath = bootstrapConfigPath();
+    const config = JSON.parse(readFileSync(configPath, 'utf8'));
+    const orgScope = client.org(org);
+    const projectScope = orgScope.project(project);
+    // 1. Project (+ its initial branch) — only when absent.
+    let projectExists = true;
+    try {
+        await projectScope.get();
+    }
+    catch (err) {
+        if (!isNotFoundError(err))
+            throw err;
+        projectExists = false;
+    }
+    if (!projectExists) {
+        await orgScope.createProject({ projectName: project, branchName: branch });
+    }
+    // 2. REST_API endpoint — the orchestrator talks to Revisium over REST.
+    const endpoints = await projectScope.getEndpoints();
+    if (!endpoints.some((endpoint) => endpoint.type === 'REST_API')) {
+        await projectScope.createEndpoint({ type: 'REST_API' });
+    }
+    // 3+4. ONE draft scope: tables (create-if-missing + additive drift) + seed rows, then ONE commit.
+    const draft = await client.revision({ org, project, branch, revision: 'draft' });
+    const migration = await applyAdditiveSchemaMigration(draft, configPath);
+    let createdRows = 0;
+    for (const row of config.rows ?? []) {
+        let rowExists = true;
+        try {
+            await draft.getRow(row.tableId, row.rowId);
+        }
+        catch (err) {
+            if (!isNotFoundError(err))
+                throw err;
+            rowExists = false;
+        }
+        if (!rowExists) {
+            await draft.createRow(row.tableId, row.rowId, row.data);
+            createdRows += 1;
+        }
+    }
+    if (migration.patches > 0 || createdRows > 0) {
+        await draft.commit(config.commitMessage ?? 'revo control-plane bootstrap');
+    }
+}
+/**
+ * Installed playbooks read from a FRESH client at HEAD — the presence signal for the default-playbook
+ * seed when it runs before the daemon's service layer exists. A fresh client resolves the current head
+ * each call, so it reflects bootstrap/earlier commits made in the same boot (unlike a cached scope).
+ */
+export async function listInstalledPlaybooks(httpPort, client = new RevisiumClient({ baseUrl: baseUrl(httpPort) })) {
+    const { org, project, branch } = getConfig();
+    const head = await client.revision({ org, project, branch, revision: 'head' });
+    const rows = await head.getRows('playbooks', { first: 1000 });
+    // Carry the row's recorded `version` (a data column, see import-mapper) so the version-aware seed
+    // (slice 144 B1) can compare it to the bundled version — WITHOUT it, every restart reads the installed
+    // version as undefined → "older" → re-seeds on every boot.
+    return (rows.edges ?? []).flatMap((edge) => {
+        if (!edge.node)
+            return [];
+        const version = edge.node.data?.version;
+        return [{ id: edge.node.id, version: typeof version === 'string' && version ? version : undefined }];
+    });
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/control-plane/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/control-plane/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAKrE;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAAiD,CAAC;QAC5D,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,UAAU,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IAC5D,CAAC;IACD,OAAO,8BAA8B,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,uBAAuB,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAgB,EAChB,SAAyB,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAE3E,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAoB,CAAC;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE/C,wDAAwD;IACxD,IAAI,aAAa,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;QACrC,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,uEAAuE;IACvE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,CAAC;IACpD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAChE,MAAM,YAAY,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,kGAAkG;IAClG,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACrC,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACxD,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,IAAI,8BAA8B,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,SAAyB,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAE3E,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,kGAAkG;IAClG,uGAAuG;IACvG,2DAA2D;IAC3D,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAI,IAAI,CAAC,IAAI,CAAC,IAA4C,EAAE,OAAO,CAAC;QACjF,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/control-plane/change-notifications.js

@@ -0,0 +1,35 @@
+import pg from 'pg';
+import { isAlive, readRuntime } from '../config.js';
+export const CONTROL_PLANE_CHANGE_CHANNEL = 'revo_control_plane_changes';
+function notificationDatabaseUrl(pgPort) {
+    return `postgresql://revisium:password@localhost:${pgPort}/postgres`;
+}
+export function controlPlaneNotificationDatabaseUrl() {
+    const runtime = readRuntime();
+    if (!runtime || !isAlive(runtime.pid))
+        return null;
+    return notificationDatabaseUrl(runtime.pgPort);
+}
+let pool = null;
+let poolUrl = '';
+function getPool(url) {
+    if (!pool || poolUrl !== url) {
+        pool?.end().catch(() => undefined);
+        poolUrl = url;
+        pool = new pg.Pool({ connectionString: url, max: 1 });
+    }
+    return pool;
+}
+export async function notifyControlPlaneChange(change) {
+    const url = controlPlaneNotificationDatabaseUrl();
+    if (!url)
+        return;
+    const payload = JSON.stringify({ ...change, emittedAt: new Date().toISOString() });
+    try {
+        await getPool(url).query('SELECT pg_notify($1, $2)', [CONTROL_PLANE_CHANGE_CHANNEL, payload]);
+    }
+    catch {
+        // Subscriptions are an access-layer feed. A notification failure must not break the sealed write verb.
+    }
+}
+//# sourceMappingURL=change-notifications.js.map

package/dist/control-plane/change-notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-notifications.js","sourceRoot":"","sources":["../../src/control-plane/change-notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAIpD,MAAM,CAAC,MAAM,4BAA4B,GAAG,4BAA4B,CAAC;AAYzE,SAAS,uBAAuB,CAAC,MAAc;IAC7C,OAAO,4CAA4C,MAAM,WAAW,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mCAAmC;IACjD,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,IAAI,GAAmB,IAAI,CAAC;AAChC,IAAI,OAAO,GAAG,EAAE,CAAC;AAEjB,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC,IAAI,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QAC7B,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,GAAG,GAAG,CAAC;QACd,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAA6C;IAC1F,MAAM,GAAG,GAAG,mCAAmC,EAAE,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAA+B,CAAC,CAAC;IAChH,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,EAAE,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC,CAAC;IAChG,CAAC;IAAC,MAAM,CAAC;QACP,uGAAuG;IACzG,CAAC;AACH,CAAC"}