@schoolai/shipyard 3.7.0 → 3.8.0-rc.20260529.0

package/dist/skills-ZHEPSBHW.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import {
+  _resolveBucketForTesting,
+  detectSkills
+} from "./chunk-CMGJGK6R.js";
+import "./chunk-2H7UOFLK.js";
+export {
+  _resolveBucketForTesting,
+  detectSkills
+};
+//# sourceMappingURL=skills-ZHEPSBHW.js.map

package/dist/{start-IDFDHRD6.js → start-YGYYIK53.js}

@@ -3,27 +3,31 @@ import {
   createMetricsCollector,
   decideAction,
   makeInitialAttemptState
-} from "./chunk-3MNPDCO5.js";
-import {
-  assertNever
-} from "./chunk-SNYEQHUK.js";
+} from "./chunk-WBB4XHLH.js";
 import {
   ensureAuthenticated,
   getSignalingUrl
-} from "./chunk-LW2MS4T5.js";
-import "./chunk-7AHRFPAL.js";
-import "./chunk-EHQITHQX.js";
+} from "./chunk-LMJFHKRD.js";
 import {
   print
-} from "./chunk-IISLTKYY.js";
-import "./chunk-2UN5AR7V.js";
+} from "./chunk-TU63KZFW.js";
 import {
   loadAuthToken
-} from "./chunk-2J3WSIAF.js";
+} from "./chunk-EF2DAODF.js";
+import "./chunk-NACJENDW.js";
+import "./chunk-ZFKJAYAN.js";
+import "./chunk-7YOU7MBN.js";
+import "./chunk-EHQITHQX.js";
+import {
+  assertNever
+} from "./chunk-X3MULCV5.js";
+import {
+  logger
+} from "./chunk-ZAOPND5G.js";
 import {
   validateEnv
-} from "./chunk-PI77CUEP.js";
-import "./chunk-VPMN47TL.js";
+} from "./chunk-KITSAHTX.js";
+import "./chunk-CNR7O5YH.js";
 import "./chunk-2H7UOFLK.js";
 
 // src/shared/commands/start.ts
@@ -33,12 +37,25 @@ import { fork as childProcessFork } from "child_process";
 var ABNORMAL_SIGNALS = /* @__PURE__ */ new Set(["SIGABRT", "SIGSEGV", "SIGBUS", "SIGKILL"]);
 var SHUTDOWN_GRACEFUL_MS = 5e3;
 var SHUTDOWN_SIGTERM_MS = 2e3;
+var DEFAULT_WEDGE_TIMEOUT_MS = 3e4;
+var WEDGE_SIGUSR2_GRACE_MS = 2e3;
+var WEDGE_CHECK_INTERVAL_MS = 5e3;
+function isHeartbeatPayload(msg) {
+  if (msg === null || typeof msg !== "object") return false;
+  if (Reflect.get(msg, "type") !== "heartbeat") return false;
+  const tick = Reflect.get(msg, "tick");
+  const lag = Reflect.get(msg, "eventLoopLagMs");
+  return typeof tick === "number" && typeof lag === "number";
+}
 function runStartSupervisor(deps) {
   let child = null;
   let restartState = makeInitialAttemptState();
   let restartTimer = null;
   let circuitLogged = false;
   let shutdownInitiated = false;
+  let wedgeCheckTimer = null;
+  const wedgeTimeoutMs = deps.wedgeTimeoutMs ?? DEFAULT_WEDGE_TIMEOUT_MS;
+  const wedgeEnabled = wedgeTimeoutMs > 0;
   let resolveDone = () => {
   };
   const done = new Promise((resolve) => {
@@ -52,10 +69,22 @@ function runStartSupervisor(deps) {
       env: { ...process.env, SHIPYARD_DAEMON_CHILD: "1" },
       stdio: "inherit"
     });
+    const now = deps.now();
     const holder = {
       process: proc,
-      spawnedAt: deps.now(),
-      exited: false
+      spawnedAt: now,
+      exited: false,
+      /**
+       * Seed lastHeartbeatAt = spawnedAt so the wedge check has a sensible
+       * baseline. The first real heartbeat overwrites this; until then, the
+       * wedge timeout effectively gives the child wedgeTimeoutMs to come
+       * alive and emit its first heartbeat (plus eventual SDK / capability
+       * detect work). That's intentional — the alternative (subtract some
+       * "boot grace" constant) is more code for no extra signal.
+       */
+      lastHeartbeatAt: now,
+      lastHeartbeatLagMs: 0,
+      wedgeGraceStartedAt: null
     };
     child = holder;
     deps.log({
@@ -75,6 +104,13 @@ function runStartSupervisor(deps) {
         err: err instanceof Error ? err.message : String(err)
       });
     });
+    proc.on("message", (msg) => {
+      if (child !== holder) return;
+      if (!isHeartbeatPayload(msg)) return;
+      holder.lastHeartbeatAt = deps.now();
+      holder.lastHeartbeatLagMs = msg.eventLoopLagMs;
+      holder.wedgeGraceStartedAt = null;
+    });
   }
   function handleChildExit(holder, code, signal) {
     holder.exited = true;
@@ -169,6 +205,10 @@ function runStartSupervisor(deps) {
       deps.clearTimeout(restartTimer);
       restartTimer = null;
     }
+    if (wedgeCheckTimer !== null) {
+      deps.clearTimeout(wedgeCheckTimer);
+      wedgeCheckTimer = null;
+    }
     const holder = child;
     if (!holder) {
       deps.log({ event: "daemon_supervisor_shutdown_no_child" });
@@ -214,9 +254,76 @@ function runStartSupervisor(deps) {
       resolveDone({ exitCode: 1, reason: "graceful" });
     }
   }
+  function scheduleWedgeCheck() {
+    if (!wedgeEnabled) return;
+    if (shutdownInitiated) return;
+    wedgeCheckTimer = deps.setTimeout(() => {
+      wedgeCheckTimer = null;
+      runWedgeCheck();
+      scheduleWedgeCheck();
+    }, WEDGE_CHECK_INTERVAL_MS);
+  }
+  function runWedgeCheck() {
+    if (shutdownInitiated) return;
+    const holder = child;
+    if (!holder || holder.exited) return;
+    const now = deps.now();
+    if (holder.wedgeGraceStartedAt !== null) {
+      maybeFinishWedgeGrace(holder, now);
+      return;
+    }
+    const silentMs = now - holder.lastHeartbeatAt;
+    if (silentMs <= wedgeTimeoutMs) return;
+    declareWedge(holder, now, silentMs);
+  }
+  function maybeFinishWedgeGrace(holder, now) {
+    const graceStart = holder.wedgeGraceStartedAt;
+    if (graceStart === null) return;
+    const graceElapsed = now - graceStart;
+    if (graceElapsed < WEDGE_SIGUSR2_GRACE_MS) return;
+    deps.log({
+      event: "daemon_wedge_sigkill",
+      pid: holder.process.pid ?? null,
+      graceElapsedMs: graceElapsed
+    });
+    captureMetric("daemon_wedge_sigkill", {
+      pid: holder.process.pid ?? null,
+      graceElapsedMs: graceElapsed
+    });
+    safeKill(holder, "SIGKILL");
+  }
+  function declareWedge(holder, now, silentMs) {
+    deps.log({
+      event: "daemon_wedge_detected",
+      pid: holder.process.pid ?? null,
+      lastHeartbeatAt: holder.lastHeartbeatAt,
+      silentMs,
+      lastKnownLagMs: holder.lastHeartbeatLagMs,
+      wedgeTimeoutMs
+    });
+    captureMetric("daemon_wedge_detected", {
+      pid: holder.process.pid ?? null,
+      silentMs,
+      lastKnownLagMs: holder.lastHeartbeatLagMs
+    });
+    holder.wedgeGraceStartedAt = now;
+    safeKill(holder, "SIGUSR2");
+  }
+  function safeKill(holder, signal) {
+    try {
+      holder.process.kill(signal);
+    } catch (err) {
+      deps.log({
+        event: "daemon_supervisor_kill_failed",
+        signal,
+        err: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
   deps.onSignal("SIGTERM", forwardShutdown);
   deps.onSignal("SIGINT", forwardShutdown);
   spawnChild({ isRespawn: false });
+  scheduleWedgeCheck();
   return { done };
 }
 function isAbnormalExit(code, signal) {
@@ -225,9 +332,66 @@ function isAbnormalExit(code, signal) {
   return false;
 }
 
+// src/shared/commands/supervisor-process-guards.ts
+function installSupervisorProcessGuards(deps) {
+  deps.onUncaughtException((err, origin) => {
+    deps.log({
+      event: "supervisor_uncaught_exception",
+      err: serializeSupervisorProcessError(err),
+      origin
+    });
+  });
+  deps.onUnhandledRejection((reason) => {
+    deps.log({
+      event: "supervisor_unhandled_rejection",
+      reason: serializeSupervisorProcessError(reason)
+    });
+  });
+}
+function serializeSupervisorProcessError(value, depth = 0) {
+  if (depth >= 3) {
+    return {
+      kind: "non_error",
+      name: typeof value,
+      message: "[Max serialization depth reached]"
+    };
+  }
+  if (value instanceof Error) {
+    const serialized = {
+      kind: "error",
+      name: value.name || "Error",
+      message: value.message
+    };
+    if (value.stack) {
+      serialized.stack = value.stack;
+    }
+    const cause = value.cause;
+    if (cause !== void 0) {
+      serialized.cause = serializeSupervisorProcessError(cause, depth + 1);
+    }
+    return serialized;
+  }
+  return {
+    kind: "non_error",
+    name: typeof value,
+    message: stringifyUnknown(value)
+  };
+}
+function stringifyUnknown(value) {
+  if (typeof value === "string") return value;
+  try {
+    const json = JSON.stringify(value);
+    if (json !== void 0) return json;
+  } catch {
+    return String(value);
+  }
+  return String(value);
+}
+
 // src/shared/commands/start.ts
 async function startCommand() {
-  if (process.env.SHIPYARD_DAEMON_CHILD === "1") {
+  const env = validateEnv();
+  if (env.SHIPYARD_DAEMON_CHILD) {
     return runDaemonChild();
   }
   return runSupervisor();
@@ -243,27 +407,31 @@ async function runDaemonChild() {
   env.SHIPYARD_USER_ID = authResult.userId;
   env.SHIPYARD_USER_DISPLAY_NAME = authResult.displayName;
   env.SHIPYARD_SIGNALING_URL = authResult.signalingUrl;
-  const { serve } = await import("./serve-O53FNK64.js");
+  const { serve } = await import("./serve-6A7RJWEF.js");
   return serve({ isDev: env.SHIPYARD_DEV, autoOpenBrowser: !authResult.deviceFlowRan });
 }
 async function runSupervisor() {
+  installSupervisorGuardsOnce();
   const childModulePath = process.argv[1];
   if (!childModulePath) {
     throw new Error("shipyard start: cannot determine childModulePath from process.argv");
   }
-  const auth = await loadAuthToken();
-  const METRICS_WORKER_URL = process.env.SHIPYARD_METRICS_WORKER_URL || "https://shipyard-metrics.jacob-191.workers.dev";
-  const metrics = auth.status === "ok" ? createMetricsCollector(
-    METRICS_WORKER_URL,
-    auth.token,
-    process.env.SHIPYARD_TELEMETRY !== "0"
-  ) : void 0;
+  const env = validateEnv();
+  const metrics = await createSupervisorMetrics(env);
   const { done } = runStartSupervisor({
     fork: childProcessFork,
     childModulePath,
     childArgs: process.argv.slice(2),
-    log: (entry) => process.stderr.write(`${JSON.stringify(entry)}
-`),
+    /**
+     * Route supervisor events (daemon_wedge_detected, daemon_supervisor_*,
+     * etc.) through the same pino logger the daemon child uses so they land
+     * in `~/.shipyard/logs/daemon.log` instead of going to stderr-only.
+     * Stderr is preserved (pino's `pino/file destination:1` target writes to
+     * it in production) so terminal output is unchanged. Before this, the
+     * wedge / sigkill / respawn events were invisible in the log file —
+     * confirmed via grep showing 0 matches across all rotation files.
+     */
+    log: (entry) => logger.info({ component: "supervisor", ...entry }, `supervisor: ${entry.event}`),
     metrics,
     now: () => Date.now(),
     setTimeout: (fn, ms) => setTimeout(fn, ms),
@@ -273,13 +441,47 @@ async function runSupervisor() {
     },
     onSignal: (sig, handler) => {
       process.on(sig, handler);
-    }
+    },
+    wedgeTimeoutMs: env.SHIPYARD_WEDGE_TIMEOUT_MS
   });
   const result = await done;
   metrics?.dispose();
   process.exit(result.exitCode);
 }
+var supervisorGuardsInstalled = false;
+function installSupervisorGuardsOnce() {
+  if (supervisorGuardsInstalled) return;
+  supervisorGuardsInstalled = true;
+  installSupervisorProcessGuards({
+    log: logSupervisorProcessGuard,
+    onUncaughtException: (handler) => {
+      process.on("uncaughtException", handler);
+    },
+    onUnhandledRejection: (handler) => {
+      process.on("unhandledRejection", handler);
+    }
+  });
+}
+function logSupervisorProcessGuard(entry) {
+  logger.error({ component: "supervisor", ...entry }, `supervisor: ${entry.event}`);
+}
+async function createSupervisorMetrics(env) {
+  try {
+    const auth = await loadAuthToken();
+    return auth.status === "ok" ? createMetricsCollector(env.SHIPYARD_METRICS_WORKER_URL, auth.token, env.SHIPYARD_TELEMETRY) : void 0;
+  } catch (err) {
+    logger.error(
+      {
+        component: "supervisor",
+        event: "supervisor_metrics_setup_failed",
+        err: serializeSupervisorProcessError(err)
+      },
+      "supervisor: supervisor_metrics_setup_failed"
+    );
+    return void 0;
+  }
+}
 export {
   startCommand
 };
-//# sourceMappingURL=start-IDFDHRD6.js.map
+//# sourceMappingURL=start-YGYYIK53.js.map

package/dist/start-YGYYIK53.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/commands/start.ts","../src/shared/commands/start-supervisor.ts","../src/shared/commands/supervisor-process-guards.ts"],"sourcesContent":["import { fork as childProcessFork } from 'node:child_process';\nimport { loadAuthToken } from '../../services/bootstrap/auth.js';\nimport { createMetricsCollector } from '../../services/metrics/metrics-collector.js';\nimport { type Env, validateEnv } from '../env.js';\nimport { logger } from '../logger.js';\nimport { ensureAuthenticated, getSignalingUrl } from './login.js';\nimport { print } from './output.js';\nimport { runStartSupervisor } from './start-supervisor.js';\nimport {\n  installSupervisorProcessGuards,\n  type SupervisorProcessGuardEvent,\n  serializeSupervisorProcessError,\n} from './supervisor-process-guards.js';\n\n/**\n * `shipyard start` -- the primary entry point for running the daemon.\n *\n * Two-layer process model (Commit 3 of the watcher-worker subprocess\n * rollout): the parent CLI process forks itself and supervises a daemon\n * child. The branch is gated on `SHIPYARD_DAEMON_CHILD=1` in the env so the\n * forked child re-enters this same function and runs the existing\n * `serve()` path verbatim. The parent monitors the child's exit and\n * respawns on abnormal exits (SIGABRT/SIGSEGV/SIGBUS/SIGKILL or non-zero\n * exit code), backed by `decideAction`'s pure backoff/circuit core\n * (third use site after `file-watcher-guard.ts`'s per-path circuit and\n * the watcher-worker supervisor's restart circuit).\n */\nexport async function startCommand(): Promise<void> {\n  const env = validateEnv();\n  if (env.SHIPYARD_DAEMON_CHILD) {\n    return runDaemonChild();\n  }\n  return runSupervisor();\n}\n\nasync function runDaemonChild(): Promise<void> {\n  const env = validateEnv();\n  const signalingUrl = getSignalingUrl();\n\n  const codeIdx = process.argv.indexOf('--code');\n  const webCode = codeIdx !== -1 ? process.argv[codeIdx + 1] : undefined;\n\n  print('Starting Shipyard daemon...\\n');\n\n  const authResult = await ensureAuthenticated({ signalingUrl, webCode });\n\n  env.SHIPYARD_USER_TOKEN = authResult.token;\n  env.SHIPYARD_USER_ID = authResult.userId;\n  env.SHIPYARD_USER_DISPLAY_NAME = authResult.displayName;\n  env.SHIPYARD_SIGNALING_URL = authResult.signalingUrl;\n\n  const { serve } = await import('../../services/serve.js');\n  return serve({ isDev: env.SHIPYARD_DEV, autoOpenBrowser: !authResult.deviceFlowRan });\n}\n\nasync function runSupervisor(): Promise<void> {\n  installSupervisorGuardsOnce();\n\n  /**\n   * Re-fork the same entrypoint that started us. `process.argv[1]` is the\n   * Node script (or bundled binary) currently executing; the forked child\n   * picks up `SHIPYARD_DAEMON_CHILD=1` and takes the `runDaemonChild()`\n   * branch above.\n   */\n  const childModulePath = process.argv[1];\n  if (!childModulePath) {\n    throw new Error('shipyard start: cannot determine childModulePath from process.argv');\n  }\n\n  /**\n   * Build the supervisor's own metrics collector. The daemon child constructs\n   * a separate one in `serve.ts` once it's authenticated. We use the existing\n   * cached auth token here without running the device flow — if the user has\n   * never logged in, metrics is just `undefined` (the supervisor still runs).\n   * This keeps option (a) of Commit 4's spec: supervisor parent gets its own\n   * collector at startup, daemon child gets its own as today.\n   */\n  const env = validateEnv();\n  const metrics = await createSupervisorMetrics(env);\n\n  /**\n   * Read the wedge timeout from the validated env so the supervisor reuses\n   * the same Zod-typed default as the daemon child. The daemon child runs in\n   * a separate process and revalidates env itself; the only shared contract\n   * is the env var name.\n   */\n  const { done } = runStartSupervisor({\n    fork: childProcessFork,\n    childModulePath,\n    childArgs: process.argv.slice(2),\n    /**\n     * Route supervisor events (daemon_wedge_detected, daemon_supervisor_*,\n     * etc.) through the same pino logger the daemon child uses so they land\n     * in `~/.shipyard/logs/daemon.log` instead of going to stderr-only.\n     * Stderr is preserved (pino's `pino/file destination:1` target writes to\n     * it in production) so terminal output is unchanged. Before this, the\n     * wedge / sigkill / respawn events were invisible in the log file —\n     * confirmed via grep showing 0 matches across all rotation files.\n     */\n    log: (entry) =>\n      logger.info({ component: 'supervisor', ...entry }, `supervisor: ${entry.event}`),\n    metrics,\n    now: () => Date.now(),\n    setTimeout: (fn, ms) => setTimeout(fn, ms),\n    clearTimeout: (timer) => {\n      if (timer === null || timer === undefined) return;\n      clearTimeout(timer as never);\n    },\n    onSignal: (sig, handler) => {\n      process.on(sig, handler);\n    },\n    wedgeTimeoutMs: env.SHIPYARD_WEDGE_TIMEOUT_MS,\n  });\n\n  const result = await done;\n  /** Flush any pending metrics events before the supervisor exits. */\n  metrics?.dispose();\n  /**\n   * Propagate the daemon child's exit code (or `1` for circuit-open) to\n   * shell/CI. Exiting here also stops any non-trivial Node teardown that\n   * the supervisor's signal handlers might otherwise block.\n   */\n  process.exit(result.exitCode);\n}\n\nlet supervisorGuardsInstalled = false;\n\nfunction installSupervisorGuardsOnce(): void {\n  if (supervisorGuardsInstalled) return;\n  supervisorGuardsInstalled = true;\n\n  installSupervisorProcessGuards({\n    log: logSupervisorProcessGuard,\n    onUncaughtException: (handler) => {\n      process.on('uncaughtException', handler);\n    },\n    onUnhandledRejection: (handler) => {\n      process.on('unhandledRejection', handler);\n    },\n  });\n}\n\nfunction logSupervisorProcessGuard(entry: SupervisorProcessGuardEvent): void {\n  logger.error({ component: 'supervisor', ...entry }, `supervisor: ${entry.event}`);\n}\n\nasync function createSupervisorMetrics(env: Env) {\n  try {\n    const auth = await loadAuthToken();\n    return auth.status === 'ok'\n      ? createMetricsCollector(env.SHIPYARD_METRICS_WORKER_URL, auth.token, env.SHIPYARD_TELEMETRY)\n      : undefined;\n  } catch (err) {\n    logger.error(\n      {\n        component: 'supervisor',\n        event: 'supervisor_metrics_setup_failed',\n        err: serializeSupervisorProcessError(err),\n      },\n      'supervisor: supervisor_metrics_setup_failed'\n    );\n    return undefined;\n  }\n}\n","import type { ChildProcess } from 'node:child_process';\nimport { assertNever } from '../assert-never.js';\nimport { type AttemptState, decideAction, makeInitialAttemptState } from '../file-watcher-guard.js';\n\n/**\n * Mirrors the shape of `MetricsCapture` from\n * `apps/daemon/src/services/metrics/metrics-collector.ts`. Declared inline\n * (not imported) so the supervisor module stays in `apps/daemon/src/shared/`\n * with no upward dependency on `services/metrics/`. Production wiring in\n * `start.ts` constructs a `MetricsCollector` and passes it through.\n */\nexport interface StartSupervisorMetrics {\n  capture(eventType: string, properties: Record<string, unknown>): void;\n}\n\n/**\n * Outer CLI supervisor: the parent `shipyard start` process forks itself and\n * supervises the daemon child. On abnormal exit (SIGABRT/SIGSEGV/SIGBUS/SIGKILL\n * or non-zero exit code) it applies the same backoff + circuit semantics as\n * the watcher worker supervisor (third use of `decideAction`'s pure core) and\n * respawns. On graceful exit it propagates the exit code.\n *\n * On supervisor SIGTERM/SIGINT it forwards `{cmd:'shutdown'}` over the IPC\n * channel that `child_process.fork` sets up automatically, then escalates\n * SIGTERM -> SIGKILL on the same shape as the watcher-worker supervisor.\n */\n\nexport interface StartSupervisorDeps {\n  fork: typeof import('node:child_process').fork;\n  /** Path to the daemon binary entrypoint (typically `process.argv[1]`). */\n  childModulePath: string;\n  /** Forwarded to the child verbatim (typically `process.argv.slice(2)`). */\n  childArgs: string[];\n  log: (entry: { event: string; [key: string]: unknown }) => void;\n  /**\n   * Optional metrics capture. Production wiring constructs a\n   * `MetricsCollector` from `loadAuthToken()` config (the supervisor parent\n   * runs before the daemon child constructs its own collector). When the\n   * user has no saved auth token, the supervisor still runs — metrics is\n   * just `undefined` and supervision events still surface via `log`.\n   */\n  metrics?: StartSupervisorMetrics;\n  now: () => number;\n  setTimeout: (fn: () => void, ms: number) => unknown;\n  clearTimeout: (timer: unknown) => void;\n  /**\n   * Process signal subscription. Tests inject a stub so SIGTERM/SIGINT can be\n   * driven without touching the real `process` global.\n   */\n  onSignal: (signal: NodeJS.Signals, handler: () => void) => void;\n  /**\n   * Wedge detection: declare the child wedged if no IPC heartbeat arrives\n   * for this long. Default 30_000 (matches `SHIPYARD_WEDGE_TIMEOUT_MS`'s\n   * Zod default). Pass 0 to disable wedge detection entirely (useful for\n   * tests that don't exercise wedge semantics).\n   */\n  wedgeTimeoutMs?: number;\n}\n\nexport type StartSupervisorReason = 'graceful' | 'circuit_open';\n\nexport interface StartSupervisorResult {\n  /**\n   * Resolves when the child exits cleanly OR the circuit opens. Callers can\n   * await this from the entrypoint to keep the supervisor process alive\n   * until the supervised daemon settles.\n   */\n  done: Promise<{ exitCode: number; reason: StartSupervisorReason }>;\n}\n\n/** Empirically: SIGSEGV -> 139, SIGBUS -> 138, SIGABRT -> 134 on POSIX. */\nconst ABNORMAL_SIGNALS = new Set<NodeJS.Signals>(['SIGABRT', 'SIGSEGV', 'SIGBUS', 'SIGKILL']);\n\nconst SHUTDOWN_GRACEFUL_MS = 5_000;\nconst SHUTDOWN_SIGTERM_MS = 2_000;\nconst DEFAULT_WEDGE_TIMEOUT_MS = 30_000;\n/**\n * Grace window between SIGUSR2 (capture profile) and SIGKILL (force exit).\n * The child's SIGUSR2 handler does a best-effort 500ms CPU profile capture;\n * 2s leaves enough headroom for the inspector to dump-and-flush, while\n * keeping the wedged daemon from blocking the user any longer than needed.\n */\nconst WEDGE_SIGUSR2_GRACE_MS = 2_000;\n/**\n * How often the supervisor checks for wedge. Frequent enough to catch within\n * ~1 check interval after the timeout expires, infrequent enough that the\n * check itself isn't a measurable cost. The supervisor's loop has almost no\n * work to do — this is the only periodic timer in the parent process.\n */\nconst WEDGE_CHECK_INTERVAL_MS = 5_000;\n\ninterface HeartbeatPayload {\n  type: 'heartbeat';\n  tick: number;\n  eventLoopLagMs: number;\n}\n\nfunction isHeartbeatPayload(msg: unknown): msg is HeartbeatPayload {\n  if (msg === null || typeof msg !== 'object') return false;\n  if (Reflect.get(msg, 'type') !== 'heartbeat') return false;\n  const tick = Reflect.get(msg, 'tick');\n  const lag = Reflect.get(msg, 'eventLoopLagMs');\n  return typeof tick === 'number' && typeof lag === 'number';\n}\n\ninterface ChildHolder {\n  process: ChildProcess;\n  spawnedAt: number;\n  exited: boolean;\n  lastHeartbeatAt: number;\n  lastHeartbeatLagMs: number;\n  /** null = no wedge currently in flight. Set when SIGUSR2 was sent. */\n  wedgeGraceStartedAt: number | null;\n}\n\nexport function runStartSupervisor(deps: StartSupervisorDeps): StartSupervisorResult {\n  let child: ChildHolder | null = null;\n  let restartState: AttemptState = makeInitialAttemptState();\n  let restartTimer: unknown = null;\n  let circuitLogged = false;\n  let shutdownInitiated = false;\n  let wedgeCheckTimer: unknown = null;\n\n  const wedgeTimeoutMs = deps.wedgeTimeoutMs ?? DEFAULT_WEDGE_TIMEOUT_MS;\n  const wedgeEnabled = wedgeTimeoutMs > 0;\n\n  let resolveDone: (value: { exitCode: number; reason: StartSupervisorReason }) => void = () => {};\n  const done = new Promise<{ exitCode: number; reason: StartSupervisorReason }>((resolve) => {\n    resolveDone = resolve;\n  });\n\n  function captureMetric(eventType: string, properties: Record<string, unknown>): void {\n    deps.metrics?.capture(eventType, properties);\n  }\n\n  function spawnChild(opts: { isRespawn: boolean }): void {\n    const proc = deps.fork(deps.childModulePath, deps.childArgs, {\n      env: { ...process.env, SHIPYARD_DAEMON_CHILD: '1' },\n      stdio: 'inherit',\n    });\n    const now = deps.now();\n    const holder: ChildHolder = {\n      process: proc,\n      spawnedAt: now,\n      exited: false,\n      /**\n       * Seed lastHeartbeatAt = spawnedAt so the wedge check has a sensible\n       * baseline. The first real heartbeat overwrites this; until then, the\n       * wedge timeout effectively gives the child wedgeTimeoutMs to come\n       * alive and emit its first heartbeat (plus eventual SDK / capability\n       * detect work). That's intentional — the alternative (subtract some\n       * \"boot grace\" constant) is more code for no extra signal.\n       */\n      lastHeartbeatAt: now,\n      lastHeartbeatLagMs: 0,\n      wedgeGraceStartedAt: null,\n    };\n    child = holder;\n    deps.log({\n      event: 'daemon_supervisor_started',\n      pid: proc.pid ?? null,\n      deathCount: restartState.failureCount,\n    });\n\n    if (opts.isRespawn) {\n      emitRespawn(proc.pid ?? null);\n    }\n\n    proc.on('exit', (code, signal) => {\n      handleChildExit(holder, code, signal);\n    });\n    proc.on('error', (err) => {\n      deps.log({\n        event: 'daemon_supervisor_child_error',\n        err: err instanceof Error ? err.message : String(err),\n      });\n    });\n    proc.on('message', (msg) => {\n      /**\n       * Drop stale messages from previous children. `proc.on('message')` is\n       * attached to this `proc`, but the holder may have been retired (e.g.\n       * concurrent kill + respawn race) before the message lands; ignore\n       * anything that no longer belongs to the live `child`.\n       */\n      if (child !== holder) return;\n      if (!isHeartbeatPayload(msg)) return;\n      holder.lastHeartbeatAt = deps.now();\n      holder.lastHeartbeatLagMs = msg.eventLoopLagMs;\n      /**\n       * If a wedge was just declared but the child recovered before the\n       * SIGKILL window closed, clear the grace state so we don't kill a\n       * now-healthy child. The grace window is only 2s; in practice this is\n       * rare but cheap to be defensive about.\n       */\n      holder.wedgeGraceStartedAt = null;\n    });\n  }\n\n  function handleChildExit(\n    holder: ChildHolder,\n    code: number | null,\n    signal: NodeJS.Signals | null\n  ): void {\n    holder.exited = true;\n    /** Drop stale exits — only the live child drives state. */\n    if (child !== holder) return;\n    child = null;\n\n    const uptimeMs = deps.now() - holder.spawnedAt;\n\n    if (shutdownInitiated) {\n      deps.log({ event: 'daemon_supervisor_child_exited_during_shutdown', code, signal, uptimeMs });\n      resolveDone({ exitCode: code ?? 0, reason: 'graceful' });\n      return;\n    }\n\n    if (!isAbnormalExit(code, signal)) {\n      deps.log({ event: 'daemon_supervisor_child_exited_clean', code, signal, uptimeMs });\n      resolveDone({ exitCode: code ?? 0, reason: 'graceful' });\n      return;\n    }\n\n    handleAbnormalChildExit(holder, code, signal, uptimeMs);\n  }\n\n  function handleAbnormalChildExit(\n    holder: ChildHolder,\n    code: number | null,\n    signal: NodeJS.Signals | null,\n    uptimeMs: number\n  ): void {\n    deps.log({ event: 'daemon_supervisor_child_died', code, signal, uptimeMs });\n\n    /**\n     * Reuse the guard's pure restart core: 'subscribe_failure' drives the\n     * same backoff + circuit logic per-process. Different state instance,\n     * same primitive (third use site after guard's per-path circuit and the\n     * watcher-worker supervisor's restart circuit).\n     */\n    const failureDecision = decideAction(restartState, { kind: 'subscribe_failure' }, deps.now());\n    restartState = failureDecision.state;\n    emitFailureSignals(failureDecision.signals, holder);\n\n    if (restartState.circuitOpenedAt !== null) {\n      /**\n       * Per the spec for this layer: rather than half-open probe like the\n       * watcher worker (which lives inside the daemon), the CLI supervisor\n       * surfaces the failure to the user so they can investigate. The\n       * supervisor terminates rather than continuing to thrash.\n       */\n      resolveDone({ exitCode: 1, reason: 'circuit_open' });\n      return;\n    }\n\n    scheduleRespawn();\n  }\n\n  function emitFailureSignals(\n    signals: ReturnType<typeof decideAction>['signals'],\n    holder: ChildHolder\n  ): void {\n    for (const sig of signals) {\n      if (sig.kind === 'circuit_opened' && !circuitLogged) {\n        circuitLogged = true;\n        const windowMs = deps.now() - holder.spawnedAt;\n        deps.log({\n          event: 'daemon_supervisor_circuit_open',\n          deathCount: restartState.failureCount,\n          windowMs,\n        });\n        captureMetric('daemon_supervisor_circuit_open', {\n          deathCount: restartState.failureCount,\n          windowMs,\n        });\n      }\n    }\n  }\n\n  function scheduleRespawn(): void {\n    if (shutdownInitiated) return;\n    if (restartState.circuitOpenedAt !== null) return;\n\n    const requestDecision = decideAction(\n      restartState,\n      { kind: 'request_subscribe', reason: 'rescan', activeCount: 0 },\n      deps.now()\n    );\n    restartState = requestDecision.state;\n    deps.log({\n      event: 'daemon_supervisor_respawn_scheduled',\n      deathCount: restartState.failureCount,\n    });\n\n    switch (requestDecision.action.kind) {\n      case 'wait': {\n        restartTimer = deps.setTimeout(() => {\n          restartTimer = null;\n          if (shutdownInitiated) return;\n          spawnChild({ isRespawn: true });\n        }, requestDecision.action.ms);\n        return;\n      }\n      case 'subscribe':\n      case 'evict_and_subscribe':\n        /**\n         * `evict_and_subscribe` only fires when activeCount >= MAX_ACTIVE_WATCHERS;\n         * we always pass activeCount: 0 so the pure core never returns it here.\n         * Treating both as \"respawn now\" keeps the switch exhaustive without\n         * coupling this layer to guard-internals.\n         */\n        spawnChild({ isRespawn: true });\n        return;\n      case 'reject_stub':\n        /** Circuit-open path is handled by the caller before scheduleRespawn. */\n        return;\n      case 'noop':\n        /** decideRequest never returns 'noop'. */\n        return;\n      default:\n        assertNever(requestDecision.action);\n    }\n  }\n\n  /**\n   * Emit the `daemon_supervisor_respawned` log + metric. The metric carries\n   * `newPid` (post-fork) plus `deathCount`. Called inline in `spawnChild` for\n   * respawns; the initial spawn does not emit this event.\n   */\n  function emitRespawn(newPid: number | null): void {\n    deps.log({ event: 'daemon_supervisor_respawned', deathCount: restartState.failureCount });\n    captureMetric('daemon_supervisor_respawned', {\n      newPid,\n      deathCount: restartState.failureCount,\n    });\n  }\n\n  function forwardShutdown(): void {\n    if (shutdownInitiated) return;\n    shutdownInitiated = true;\n\n    if (restartTimer !== null) {\n      deps.clearTimeout(restartTimer);\n      restartTimer = null;\n    }\n    if (wedgeCheckTimer !== null) {\n      deps.clearTimeout(wedgeCheckTimer);\n      wedgeCheckTimer = null;\n    }\n\n    const holder = child;\n    if (!holder) {\n      /**\n       * Either we never spawned, the previous child already exited, or the\n       * circuit opened. Resolve with code 0 so the supervisor process exits.\n       */\n      deps.log({ event: 'daemon_supervisor_shutdown_no_child' });\n      resolveDone({ exitCode: 0, reason: 'graceful' });\n      return;\n    }\n\n    deps.log({ event: 'daemon_supervisor_shutdown_requested' });\n\n    /**\n     * Cooperative shutdown via the IPC channel that `fork()` sets up. The\n     * child should listen for `process.on('message', ...)` and tear down\n     * gracefully on `{cmd:'shutdown'}`.\n     */\n    try {\n      holder.process.send?.({ cmd: 'shutdown' });\n    } catch (err) {\n      deps.log({\n        event: 'daemon_supervisor_shutdown_send_failed',\n        err: err instanceof Error ? err.message : String(err),\n      });\n    }\n\n    /** SIGTERM after grace, SIGKILL after that. */\n    deps.setTimeout(() => onSigtermDeadline(holder), SHUTDOWN_GRACEFUL_MS);\n  }\n\n  function onSigtermDeadline(holder: ChildHolder): void {\n    if (holder.exited) return;\n    deps.log({ event: 'daemon_supervisor_shutdown_sigterm' });\n    try {\n      holder.process.kill('SIGTERM');\n    } catch (err) {\n      deps.log({\n        event: 'daemon_supervisor_kill_failed',\n        signal: 'SIGTERM',\n        err: err instanceof Error ? err.message : String(err),\n      });\n    }\n    deps.setTimeout(() => onSigkillDeadline(holder), SHUTDOWN_SIGTERM_MS);\n  }\n\n  function onSigkillDeadline(holder: ChildHolder): void {\n    if (holder.exited) return;\n    deps.log({ event: 'daemon_supervisor_shutdown_sigkill' });\n    try {\n      holder.process.kill('SIGKILL');\n    } catch (err) {\n      deps.log({\n        event: 'daemon_supervisor_kill_failed',\n        signal: 'SIGKILL',\n        err: err instanceof Error ? err.message : String(err),\n      });\n      /**\n       * Safety net: SIGKILL throwing AND on-exit not firing is a paranoid\n       * combination (zombie process, EPERM on a child we own), but if it\n       * happens the `done` promise hangs forever and so does whoever\n       * awaits it. Resolve here so the supervisor parent can exit.\n       */\n      resolveDone({ exitCode: 1, reason: 'graceful' });\n    }\n  }\n\n  /**\n   * Wedge detection loop. Runs in the SUPERVISOR PROCESS, which has almost\n   * no work to do — it's a separate Node process from the daemon, so its\n   * event loop is not subject to whatever's blocking the daemon child's.\n   *\n   * The check is a recurring `setTimeout` (not `setInterval`) so we only\n   * need one timer-shape dep and so the test harness can drive it via\n   * `advanceBy`. The chain self-cancels when `shutdownInitiated` flips true\n   * or the function returns without rescheduling.\n   */\n  function scheduleWedgeCheck(): void {\n    if (!wedgeEnabled) return;\n    if (shutdownInitiated) return;\n    wedgeCheckTimer = deps.setTimeout(() => {\n      wedgeCheckTimer = null;\n      runWedgeCheck();\n      scheduleWedgeCheck();\n    }, WEDGE_CHECK_INTERVAL_MS);\n  }\n\n  function runWedgeCheck(): void {\n    if (shutdownInitiated) return;\n    const holder = child;\n    if (!holder || holder.exited) return;\n\n    const now = deps.now();\n    if (holder.wedgeGraceStartedAt !== null) {\n      maybeFinishWedgeGrace(holder, now);\n      return;\n    }\n    const silentMs = now - holder.lastHeartbeatAt;\n    if (silentMs <= wedgeTimeoutMs) return;\n    declareWedge(holder, now, silentMs);\n  }\n\n  /**\n   * SIGUSR2 already sent; if the grace window has elapsed without a fresh\n   * heartbeat clearing `wedgeGraceStartedAt`, escalate to SIGKILL. The OS\n   * kill triggers Node's `exit` event with `signal: 'SIGKILL'`, which goes\n   * through `handleChildExit` -> `handleAbnormalChildExit` -> the existing\n   * `decideAction` respawn flow. Nothing else to do here.\n   */\n  function maybeFinishWedgeGrace(holder: ChildHolder, now: number): void {\n    const graceStart = holder.wedgeGraceStartedAt;\n    if (graceStart === null) return;\n    const graceElapsed = now - graceStart;\n    if (graceElapsed < WEDGE_SIGUSR2_GRACE_MS) return;\n\n    deps.log({\n      event: 'daemon_wedge_sigkill',\n      pid: holder.process.pid ?? null,\n      graceElapsedMs: graceElapsed,\n    });\n    captureMetric('daemon_wedge_sigkill', {\n      pid: holder.process.pid ?? null,\n      graceElapsedMs: graceElapsed,\n    });\n    safeKill(holder, 'SIGKILL');\n  }\n\n  /**\n   * First wedge detection for this child. Log + send SIGUSR2 (to give the\n   * daemon a chance to dump a CPU profile via the off-thread inspector)\n   * and start the grace window.\n   */\n  function declareWedge(holder: ChildHolder, now: number, silentMs: number): void {\n    deps.log({\n      event: 'daemon_wedge_detected',\n      pid: holder.process.pid ?? null,\n      lastHeartbeatAt: holder.lastHeartbeatAt,\n      silentMs,\n      lastKnownLagMs: holder.lastHeartbeatLagMs,\n      wedgeTimeoutMs,\n    });\n    captureMetric('daemon_wedge_detected', {\n      pid: holder.process.pid ?? null,\n      silentMs,\n      lastKnownLagMs: holder.lastHeartbeatLagMs,\n    });\n\n    holder.wedgeGraceStartedAt = now;\n    safeKill(holder, 'SIGUSR2');\n  }\n\n  function safeKill(holder: ChildHolder, signal: NodeJS.Signals): void {\n    try {\n      holder.process.kill(signal);\n    } catch (err) {\n      deps.log({\n        event: 'daemon_supervisor_kill_failed',\n        signal,\n        err: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  /** Wire signal forwarding via injected hook so tests can drive deterministically. */\n  deps.onSignal('SIGTERM', forwardShutdown);\n  deps.onSignal('SIGINT', forwardShutdown);\n\n  /** Spawn the initial child immediately. */\n  spawnChild({ isRespawn: false });\n  scheduleWedgeCheck();\n\n  return { done };\n}\n\nfunction isAbnormalExit(code: number | null, signal: NodeJS.Signals | null): boolean {\n  if (signal !== null && ABNORMAL_SIGNALS.has(signal)) return true;\n  if (code !== null && code !== 0) return true;\n  return false;\n}\n","export type SupervisorProcessGuardEvent =\n  | {\n      event: 'supervisor_uncaught_exception';\n      err: SerializedSupervisorProcessError;\n      origin: string;\n    }\n  | {\n      event: 'supervisor_unhandled_rejection';\n      reason: SerializedSupervisorProcessError;\n    };\n\nexport interface SerializedSupervisorProcessError {\n  kind: 'error' | 'non_error';\n  name: string;\n  message: string;\n  stack?: string;\n  cause?: SerializedSupervisorProcessError;\n}\n\nexport interface SupervisorProcessGuardDeps {\n  log: (entry: SupervisorProcessGuardEvent) => void;\n  onUncaughtException: (\n    handler: (err: Error, origin: NodeJS.UncaughtExceptionOrigin) => void\n  ) => void;\n  onUnhandledRejection: (handler: (reason: unknown, promise: Promise<unknown>) => void) => void;\n}\n\nexport function installSupervisorProcessGuards(deps: SupervisorProcessGuardDeps): void {\n  deps.onUncaughtException((err, origin) => {\n    deps.log({\n      event: 'supervisor_uncaught_exception',\n      err: serializeSupervisorProcessError(err),\n      origin,\n    });\n  });\n\n  deps.onUnhandledRejection((reason) => {\n    deps.log({\n      event: 'supervisor_unhandled_rejection',\n      reason: serializeSupervisorProcessError(reason),\n    });\n  });\n}\n\nexport function serializeSupervisorProcessError(\n  value: unknown,\n  depth = 0\n): SerializedSupervisorProcessError {\n  if (depth >= 3) {\n    return {\n      kind: 'non_error',\n      name: typeof value,\n      message: '[Max serialization depth reached]',\n    };\n  }\n\n  if (value instanceof Error) {\n    const serialized: SerializedSupervisorProcessError = {\n      kind: 'error',\n      name: value.name || 'Error',\n      message: value.message,\n    };\n    if (value.stack) {\n      serialized.stack = value.stack;\n    }\n    const cause = value.cause;\n    if (cause !== undefined) {\n      serialized.cause = serializeSupervisorProcessError(cause, depth + 1);\n    }\n    return serialized;\n  }\n\n  return {\n    kind: 'non_error',\n    name: typeof value,\n    message: stringifyUnknown(value),\n  };\n}\n\nfunction stringifyUnknown(value: unknown): string {\n  if (typeof value === 'string') return value;\n\n  try {\n    const json = JSON.stringify(value);\n    if (json !== undefined) return json;\n  } catch {\n    return String(value);\n  }\n\n  return String(value);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,QAAQ,wBAAwB;;;ACuEzC,IAAM,mBAAmB,oBAAI,IAAoB,CAAC,WAAW,WAAW,UAAU,SAAS,CAAC;AAE5F,IAAM,uBAAuB;AAC7B,IAAM,sBAAsB;AAC5B,IAAM,2BAA2B;AAOjC,IAAM,yBAAyB;AAO/B,IAAM,0BAA0B;AAQhC,SAAS,mBAAmB,KAAuC;AACjE,MAAI,QAAQ,QAAQ,OAAO,QAAQ,SAAU,QAAO;AACpD,MAAI,QAAQ,IAAI,KAAK,MAAM,MAAM,YAAa,QAAO;AACrD,QAAM,OAAO,QAAQ,IAAI,KAAK,MAAM;AACpC,QAAM,MAAM,QAAQ,IAAI,KAAK,gBAAgB;AAC7C,SAAO,OAAO,SAAS,YAAY,OAAO,QAAQ;AACpD;AAYO,SAAS,mBAAmB,MAAkD;AACnF,MAAI,QAA4B;AAChC,MAAI,eAA6B,wBAAwB;AACzD,MAAI,eAAwB;AAC5B,MAAI,gBAAgB;AACpB,MAAI,oBAAoB;AACxB,MAAI,kBAA2B;AAE/B,QAAM,iBAAiB,KAAK,kBAAkB;AAC9C,QAAM,eAAe,iBAAiB;AAEtC,MAAI,cAAoF,MAAM;AAAA,EAAC;AAC/F,QAAM,OAAO,IAAI,QAA6D,CAAC,YAAY;AACzF,kBAAc;AAAA,EAChB,CAAC;AAED,WAAS,cAAc,WAAmB,YAA2C;AACnF,SAAK,SAAS,QAAQ,WAAW,UAAU;AAAA,EAC7C;AAEA,WAAS,WAAW,MAAoC;AACtD,UAAM,OAAO,KAAK,KAAK,KAAK,iBAAiB,KAAK,WAAW;AAAA,MAC3D,KAAK,EAAE,GAAG,QAAQ,KAAK,uBAAuB,IAAI;AAAA,MAClD,OAAO;AAAA,IACT,CAAC;AACD,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAsB;AAAA,MAC1B,SAAS;AAAA,MACT,WAAW;AAAA,MACX,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASR,iBAAiB;AAAA,MACjB,oBAAoB;AAAA,MACpB,qBAAqB;AAAA,IACvB;AACA,YAAQ;AACR,SAAK,IAAI;AAAA,MACP,OAAO;AAAA,MACP,KAAK,KAAK,OAAO;AAAA,MACjB,YAAY,aAAa;AAAA,IAC3B,CAAC;AAED,QAAI,KAAK,WAAW;AAClB,kBAAY,KAAK,OAAO,IAAI;AAAA,IAC9B;AAEA,SAAK,GAAG,QAAQ,CAAC,MAAM,WAAW;AAChC,sBAAgB,QAAQ,MAAM,MAAM;AAAA,IACtC,CAAC;AACD,SAAK,GAAG,SAAS,CAAC,QAAQ;AACxB,WAAK,IAAI;AAAA,QACP,OAAO;AAAA,QACP,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACtD,CAAC;AAAA,IACH,CAAC;AACD,SAAK,GAAG,WAAW,CAAC,QAAQ;AAO1B,UAAI,UAAU,OAAQ;AACtB,UAAI,CAAC,mBAAmB,GAAG,EAAG;AAC9B,aAAO,kBAAkB,KAAK,IAAI;AAClC,aAAO,qBAAqB,IAAI;AAOhC,aAAO,sBAAsB;AAAA,IAC/B,CAAC;AAAA,EACH;AAEA,WAAS,gBACP,QACA,MACA,QACM;AACN,WAAO,SAAS;AAEhB,QAAI,UAAU,OAAQ;AACtB,YAAQ;AAER,UAAM,WAAW,KAAK,IAAI,IAAI,OAAO;AAErC,QAAI,mBAAmB;AACrB,WAAK,IAAI,EAAE,OAAO,kDAAkD,MAAM,QAAQ,SAAS,CAAC;AAC5F,kBAAY,EAAE,UAAU,QAAQ,GAAG,QAAQ,WAAW,CAAC;AACvD;AAAA,IACF;AAEA,QAAI,CAAC,eAAe,MAAM,MAAM,GAAG;AACjC,WAAK,IAAI,EAAE,OAAO,wCAAwC,MAAM,QAAQ,SAAS,CAAC;AAClF,kBAAY,EAAE,UAAU,QAAQ,GAAG,QAAQ,WAAW,CAAC;AACvD;AAAA,IACF;AAEA,4BAAwB,QAAQ,MAAM,QAAQ,QAAQ;AAAA,EACxD;AAEA,WAAS,wBACP,QACA,MACA,QACA,UACM;AACN,SAAK,IAAI,EAAE,OAAO,gCAAgC,MAAM,QAAQ,SAAS,CAAC;AAQ1E,UAAM,kBAAkB,aAAa,cAAc,EAAE,MAAM,oBAAoB,GAAG,KAAK,IAAI,CAAC;AAC5F,mBAAe,gBAAgB;AAC/B,uBAAmB,gBAAgB,SAAS,MAAM;AAElD,QAAI,aAAa,oBAAoB,MAAM;AAOzC,kBAAY,EAAE,UAAU,GAAG,QAAQ,eAAe,CAAC;AACnD;AAAA,IACF;AAEA,oBAAgB;AAAA,EAClB;AAEA,WAAS,mBACP,SACA,QACM;AACN,eAAW,OAAO,SAAS;AACzB,UAAI,IAAI,SAAS,oBAAoB,CAAC,eAAe;AACnD,wBAAgB;AAChB,cAAM,WAAW,KAAK,IAAI,IAAI,OAAO;AACrC,aAAK,IAAI;AAAA,UACP,OAAO;AAAA,UACP,YAAY,aAAa;AAAA,UACzB;AAAA,QACF,CAAC;AACD,sBAAc,kCAAkC;AAAA,UAC9C,YAAY,aAAa;AAAA,UACzB;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,WAAS,kBAAwB;AAC/B,QAAI,kBAAmB;AACvB,QAAI,aAAa,oBAAoB,KAAM;AAE3C,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA,EAAE,MAAM,qBAAqB,QAAQ,UAAU,aAAa,EAAE;AAAA,MAC9D,KAAK,IAAI;AAAA,IACX;AACA,mBAAe,gBAAgB;AAC/B,SAAK,IAAI;AAAA,MACP,OAAO;AAAA,MACP,YAAY,aAAa;AAAA,IAC3B,CAAC;AAED,YAAQ,gBAAgB,OAAO,MAAM;AAAA,MACnC,KAAK,QAAQ;AACX,uBAAe,KAAK,WAAW,MAAM;AACnC,yBAAe;AACf,cAAI,kBAAmB;AACvB,qBAAW,EAAE,WAAW,KAAK,CAAC;AAAA,QAChC,GAAG,gBAAgB,OAAO,EAAE;AAC5B;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAOH,mBAAW,EAAE,WAAW,KAAK,CAAC;AAC9B;AAAA,MACF,KAAK;AAEH;AAAA,MACF,KAAK;AAEH;AAAA,MACF;AACE,oBAAY,gBAAgB,MAAM;AAAA,IACtC;AAAA,EACF;AAOA,WAAS,YAAY,QAA6B;AAChD,SAAK,IAAI,EAAE,OAAO,+BAA+B,YAAY,aAAa,aAAa,CAAC;AACxF,kBAAc,+BAA+B;AAAA,MAC3C;AAAA,MACA,YAAY,aAAa;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,WAAS,kBAAwB;AAC/B,QAAI,kBAAmB;AACvB,wBAAoB;AAEpB,QAAI,iBAAiB,MAAM;AACzB,WAAK,aAAa,YAAY;AAC9B,qBAAe;AAAA,IACjB;AACA,QAAI,oBAAoB,MAAM;AAC5B,WAAK,aAAa,eAAe;AACjC,wBAAkB;AAAA,IACpB;AAEA,UAAM,SAAS;AACf,QAAI,CAAC,QAAQ;AAKX,WAAK,IAAI,EAAE,OAAO,sCAAsC,CAAC;AACzD,kBAAY,EAAE,UAAU,GAAG,QAAQ,WAAW,CAAC;AAC/C;AAAA,IACF;AAEA,SAAK,IAAI,EAAE,OAAO,uCAAuC,CAAC;AAO1D,QAAI;AACF,aAAO,QAAQ,OAAO,EAAE,KAAK,WAAW,CAAC;AAAA,IAC3C,SAAS,KAAK;AACZ,WAAK,IAAI;AAAA,QACP,OAAO;AAAA,QACP,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACtD,CAAC;AAAA,IACH;AAGA,SAAK,WAAW,MAAM,kBAAkB,MAAM,GAAG,oBAAoB;AAAA,EACvE;AAEA,WAAS,kBAAkB,QAA2B;AACpD,QAAI,OAAO,OAAQ;AACnB,SAAK,IAAI,EAAE,OAAO,qCAAqC,CAAC;AACxD,QAAI;AACF,aAAO,QAAQ,KAAK,SAAS;AAAA,IAC/B,SAAS,KAAK;AACZ,WAAK,IAAI;AAAA,QACP,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACtD,CAAC;AAAA,IACH;AACA,SAAK,WAAW,MAAM,kBAAkB,MAAM,GAAG,mBAAmB;AAAA,EACtE;AAEA,WAAS,kBAAkB,QAA2B;AACpD,QAAI,OAAO,OAAQ;AACnB,SAAK,IAAI,EAAE,OAAO,qCAAqC,CAAC;AACxD,QAAI;AACF,aAAO,QAAQ,KAAK,SAAS;AAAA,IAC/B,SAAS,KAAK;AACZ,WAAK,IAAI;AAAA,QACP,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACtD,CAAC;AAOD,kBAAY,EAAE,UAAU,GAAG,QAAQ,WAAW,CAAC;AAAA,IACjD;AAAA,EACF;AAYA,WAAS,qBAA2B;AAClC,QAAI,CAAC,aAAc;AACnB,QAAI,kBAAmB;AACvB,sBAAkB,KAAK,WAAW,MAAM;AACtC,wBAAkB;AAClB,oBAAc;AACd,yBAAmB;AAAA,IACrB,GAAG,uBAAuB;AAAA,EAC5B;AAEA,WAAS,gBAAsB;AAC7B,QAAI,kBAAmB;AACvB,UAAM,SAAS;AACf,QAAI,CAAC,UAAU,OAAO,OAAQ;AAE9B,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,OAAO,wBAAwB,MAAM;AACvC,4BAAsB,QAAQ,GAAG;AACjC;AAAA,IACF;AACA,UAAM,WAAW,MAAM,OAAO;AAC9B,QAAI,YAAY,eAAgB;AAChC,iBAAa,QAAQ,KAAK,QAAQ;AAAA,EACpC;AASA,WAAS,sBAAsB,QAAqB,KAAmB;AACrE,UAAM,aAAa,OAAO;AAC1B,QAAI,eAAe,KAAM;AACzB,UAAM,eAAe,MAAM;AAC3B,QAAI,eAAe,uBAAwB;AAE3C,SAAK,IAAI;AAAA,MACP,OAAO;AAAA,MACP,KAAK,OAAO,QAAQ,OAAO;AAAA,MAC3B,gBAAgB;AAAA,IAClB,CAAC;AACD,kBAAc,wBAAwB;AAAA,MACpC,KAAK,OAAO,QAAQ,OAAO;AAAA,MAC3B,gBAAgB;AAAA,IAClB,CAAC;AACD,aAAS,QAAQ,SAAS;AAAA,EAC5B;AAOA,WAAS,aAAa,QAAqB,KAAa,UAAwB;AAC9E,SAAK,IAAI;AAAA,MACP,OAAO;AAAA,MACP,KAAK,OAAO,QAAQ,OAAO;AAAA,MAC3B,iBAAiB,OAAO;AAAA,MACxB;AAAA,MACA,gBAAgB,OAAO;AAAA,MACvB;AAAA,IACF,CAAC;AACD,kBAAc,yBAAyB;AAAA,MACrC,KAAK,OAAO,QAAQ,OAAO;AAAA,MAC3B;AAAA,MACA,gBAAgB,OAAO;AAAA,IACzB,CAAC;AAED,WAAO,sBAAsB;AAC7B,aAAS,QAAQ,SAAS;AAAA,EAC5B;AAEA,WAAS,SAAS,QAAqB,QAA8B;AACnE,QAAI;AACF,aAAO,QAAQ,KAAK,MAAM;AAAA,IAC5B,SAAS,KAAK;AACZ,WAAK,IAAI;AAAA,QACP,OAAO;AAAA,QACP;AAAA,QACA,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACtD,CAAC;AAAA,IACH;AAAA,EACF;AAGA,OAAK,SAAS,WAAW,eAAe;AACxC,OAAK,SAAS,UAAU,eAAe;AAGvC,aAAW,EAAE,WAAW,MAAM,CAAC;AAC/B,qBAAmB;AAEnB,SAAO,EAAE,KAAK;AAChB;AAEA,SAAS,eAAe,MAAqB,QAAwC;AACnF,MAAI,WAAW,QAAQ,iBAAiB,IAAI,MAAM,EAAG,QAAO;AAC5D,MAAI,SAAS,QAAQ,SAAS,EAAG,QAAO;AACxC,SAAO;AACT;;;ACpfO,SAAS,+BAA+B,MAAwC;AACrF,OAAK,oBAAoB,CAAC,KAAK,WAAW;AACxC,SAAK,IAAI;AAAA,MACP,OAAO;AAAA,MACP,KAAK,gCAAgC,GAAG;AAAA,MACxC;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,OAAK,qBAAqB,CAAC,WAAW;AACpC,SAAK,IAAI;AAAA,MACP,OAAO;AAAA,MACP,QAAQ,gCAAgC,MAAM;AAAA,IAChD,CAAC;AAAA,EACH,CAAC;AACH;AAEO,SAAS,gCACd,OACA,QAAQ,GAC0B;AAClC,MAAI,SAAS,GAAG;AACd,WAAO;AAAA,MACL,MAAM;AAAA,MACN,MAAM,OAAO;AAAA,MACb,SAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI,iBAAiB,OAAO;AAC1B,UAAM,aAA+C;AAAA,MACnD,MAAM;AAAA,MACN,MAAM,MAAM,QAAQ;AAAA,MACpB,SAAS,MAAM;AAAA,IACjB;AACA,QAAI,MAAM,OAAO;AACf,iBAAW,QAAQ,MAAM;AAAA,IAC3B;AACA,UAAM,QAAQ,MAAM;AACpB,QAAI,UAAU,QAAW;AACvB,iBAAW,QAAQ,gCAAgC,OAAO,QAAQ,CAAC;AAAA,IACrE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,OAAO;AAAA,IACb,SAAS,iBAAiB,KAAK;AAAA,EACjC;AACF;AAEA,SAAS,iBAAiB,OAAwB;AAChD,MAAI,OAAO,UAAU,SAAU,QAAO;AAEtC,MAAI;AACF,UAAM,OAAO,KAAK,UAAU,KAAK;AACjC,QAAI,SAAS,OAAW,QAAO;AAAA,EACjC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AAEA,SAAO,OAAO,KAAK;AACrB;;;AF/DA,eAAsB,eAA8B;AAClD,QAAM,MAAM,YAAY;AACxB,MAAI,IAAI,uBAAuB;AAC7B,WAAO,eAAe;AAAA,EACxB;AACA,SAAO,cAAc;AACvB;AAEA,eAAe,iBAAgC;AAC7C,QAAM,MAAM,YAAY;AACxB,QAAM,eAAe,gBAAgB;AAErC,QAAM,UAAU,QAAQ,KAAK,QAAQ,QAAQ;AAC7C,QAAM,UAAU,YAAY,KAAK,QAAQ,KAAK,UAAU,CAAC,IAAI;AAE7D,QAAM,+BAA+B;AAErC,QAAM,aAAa,MAAM,oBAAoB,EAAE,cAAc,QAAQ,CAAC;AAEtE,MAAI,sBAAsB,WAAW;AACrC,MAAI,mBAAmB,WAAW;AAClC,MAAI,6BAA6B,WAAW;AAC5C,MAAI,yBAAyB,WAAW;AAExC,QAAM,EAAE,MAAM,IAAI,MAAM,OAAO,qBAAyB;AACxD,SAAO,MAAM,EAAE,OAAO,IAAI,cAAc,iBAAiB,CAAC,WAAW,cAAc,CAAC;AACtF;AAEA,eAAe,gBAA+B;AAC5C,8BAA4B;AAQ5B,QAAM,kBAAkB,QAAQ,KAAK,CAAC;AACtC,MAAI,CAAC,iBAAiB;AACpB,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AAUA,QAAM,MAAM,YAAY;AACxB,QAAM,UAAU,MAAM,wBAAwB,GAAG;AAQjD,QAAM,EAAE,KAAK,IAAI,mBAAmB;AAAA,IAClC,MAAM;AAAA,IACN;AAAA,IACA,WAAW,QAAQ,KAAK,MAAM,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAU/B,KAAK,CAAC,UACJ,OAAO,KAAK,EAAE,WAAW,cAAc,GAAG,MAAM,GAAG,eAAe,MAAM,KAAK,EAAE;AAAA,IACjF;AAAA,IACA,KAAK,MAAM,KAAK,IAAI;AAAA,IACpB,YAAY,CAAC,IAAI,OAAO,WAAW,IAAI,EAAE;AAAA,IACzC,cAAc,CAAC,UAAU;AACvB,UAAI,UAAU,QAAQ,UAAU,OAAW;AAC3C,mBAAa,KAAc;AAAA,IAC7B;AAAA,IACA,UAAU,CAAC,KAAK,YAAY;AAC1B,cAAQ,GAAG,KAAK,OAAO;AAAA,IACzB;AAAA,IACA,gBAAgB,IAAI;AAAA,EACtB,CAAC;AAED,QAAM,SAAS,MAAM;AAErB,WAAS,QAAQ;AAMjB,UAAQ,KAAK,OAAO,QAAQ;AAC9B;AAEA,IAAI,4BAA4B;AAEhC,SAAS,8BAAoC;AAC3C,MAAI,0BAA2B;AAC/B,8BAA4B;AAE5B,iCAA+B;AAAA,IAC7B,KAAK;AAAA,IACL,qBAAqB,CAAC,YAAY;AAChC,cAAQ,GAAG,qBAAqB,OAAO;AAAA,IACzC;AAAA,IACA,sBAAsB,CAAC,YAAY;AACjC,cAAQ,GAAG,sBAAsB,OAAO;AAAA,IAC1C;AAAA,EACF,CAAC;AACH;AAEA,SAAS,0BAA0B,OAA0C;AAC3E,SAAO,MAAM,EAAE,WAAW,cAAc,GAAG,MAAM,GAAG,eAAe,MAAM,KAAK,EAAE;AAClF;AAEA,eAAe,wBAAwB,KAAU;AAC/C,MAAI;AACF,UAAM,OAAO,MAAM,cAAc;AACjC,WAAO,KAAK,WAAW,OACnB,uBAAuB,IAAI,6BAA6B,KAAK,OAAO,IAAI,kBAAkB,IAC1F;AAAA,EACN,SAAS,KAAK;AACZ,WAAO;AAAA,MACL;AAAA,QACE,WAAW;AAAA,QACX,OAAO;AAAA,QACP,KAAK,gCAAgC,GAAG;AAAA,MAC1C;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/vault-crypto-BKDOA65F.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import {
+  decryptCredential,
+  encryptCredential,
+  generateVaultKey
+} from "./chunk-5ER6ZHA2.js";
+import "./chunk-2H7UOFLK.js";
+export {
+  decryptCredential,
+  encryptCredential,
+  generateVaultKey
+};
+//# sourceMappingURL=vault-crypto-BKDOA65F.js.map

package/dist/vault-crypto-BKDOA65F.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/worker.js

@@ -1,10 +1,13 @@
 #!/usr/bin/env node
 import {
-  assertNever,
   decodeLine,
   encodeLine
-} from "./chunk-SNYEQHUK.js";
-import "./chunk-VPMN47TL.js";
+} from "./chunk-NACJENDW.js";
+import "./chunk-ZFKJAYAN.js";
+import {
+  assertNever
+} from "./chunk-X3MULCV5.js";
+import "./chunk-CNR7O5YH.js";
 import "./chunk-2H7UOFLK.js";
 
 // src/services/watcher-worker/worker.ts

package/dist/worker.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/services/watcher-worker/worker.ts"],"sourcesContent":["import { assertNever } from '../../shared/assert-never.js';\nimport {\n  decodeLine,\n  encodeLine,\n  type WorkerCommand,\n  type WorkerParcelEvent,\n  type WorkerReply,\n  type WorkerSubscribeOptions,\n} from './worker-protocol.js';\n\n/**\n * Watcher worker entry point — the only place in the daemon that imports\n * `@parcel/watcher` (post-Commit-4). The worker is intentionally minimal:\n * subscribe/unsubscribe/shutdown over stdio, no business logic, no state\n * beyond a Map<id, AsyncSubscription>.\n *\n * Crashes are expected (parcel/watcher SIGABRTs on FSEvents NULL-deref); we\n * keep the blast surface as small as possible so the parent's supervisor\n * can replay the subscription map onto a fresh worker.\n */\n\ninterface ParcelEventLike {\n  type: 'create' | 'update' | 'delete';\n  path: string;\n}\n\ninterface ParcelAsyncSubscriptionLike {\n  unsubscribe(): Promise<void>;\n}\n\nexport type WorkerSubscribeFn = (\n  path: string,\n  fn: (err: Error | null, events: ParcelEventLike[]) => unknown,\n  opts?: WorkerSubscribeOptions\n) => Promise<ParcelAsyncSubscriptionLike>;\n\nexport interface RunWorkerDeps {\n  subscribe: WorkerSubscribeFn;\n  stdin: NodeJS.ReadableStream;\n  stdout: NodeJS.WritableStream;\n  stderr: NodeJS.WritableStream;\n}\n\ninterface ActiveSubscription {\n  handle: ParcelAsyncSubscriptionLike;\n}\n\nexport async function runWorker(deps: RunWorkerDeps): Promise<void> {\n  const subs = new Map<string, ActiveSubscription>();\n  let shuttingDown = false;\n  let resolveDone: () => void;\n  const done = new Promise<void>((resolve) => {\n    resolveDone = resolve;\n  });\n\n  function logStderr(\n    level: 'info' | 'warn' | 'error',\n    event: string,\n    extra?: Record<string, unknown>\n  ): void {\n    const payload = extra ? { level, event, ...extra } : { level, event };\n    deps.stderr.write(`${JSON.stringify(payload)}\\n`);\n  }\n\n  function writeReply(reply: WorkerReply): void {\n    deps.stdout.write(`${encodeLine(reply)}\\n`);\n  }\n\n  /** Coerce a parcel/watcher event into the protocol's strict shape. */\n  function toWireEvents(events: ParcelEventLike[]): WorkerParcelEvent[] {\n    return events.map((e) => ({ type: e.type, path: e.path }));\n  }\n\n  async function handleSubscribe(\n    id: string,\n    path: string,\n    opts: WorkerSubscribeOptions\n  ): Promise<void> {\n    const callback = (err: Error | null, events: ParcelEventLike[]) => {\n      if (err !== null) {\n        logStderr('warn', 'watcher_callback_error', {\n          id,\n          path,\n          err: err.message,\n        });\n        return;\n      }\n      /**\n       * Drop events for ids that have been unsubscribed but whose underlying\n       * watcher hasn't fully torn down yet.\n       */\n      if (!subs.has(id)) return;\n      writeReply({ type: 'events', id, events: toWireEvents(events) });\n    };\n\n    try {\n      const handle = await deps.subscribe(path, callback, opts);\n      /** If the worker began shutdown while subscribe was in flight, undo. */\n      if (shuttingDown) {\n        await handle.unsubscribe().catch(() => {});\n        return;\n      }\n      subs.set(id, { handle });\n      writeReply({ type: 'subscribed', id });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      writeReply({ type: 'subscribe_failed', id, error: message });\n    }\n  }\n\n  async function handleUnsubscribe(id: string): Promise<void> {\n    const entry = subs.get(id);\n    subs.delete(id);\n    if (entry) {\n      try {\n        await entry.handle.unsubscribe();\n      } catch (err) {\n        logStderr('warn', 'watcher_unsubscribe_failed', {\n          id,\n          err: err instanceof Error ? err.message : String(err),\n        });\n      }\n    }\n    writeReply({ type: 'unsubscribed', id });\n  }\n\n  async function handleShutdown(): Promise<void> {\n    if (shuttingDown) return;\n    shuttingDown = true;\n    const entries = Array.from(subs.values());\n    subs.clear();\n    await Promise.all(\n      entries.map(async (entry) => {\n        try {\n          await entry.handle.unsubscribe();\n        } catch (err) {\n          logStderr('warn', 'watcher_unsubscribe_failed_on_shutdown', {\n            err: err instanceof Error ? err.message : String(err),\n          });\n        }\n      })\n    );\n    resolveDone();\n  }\n\n  function dispatch(cmd: WorkerCommand): void {\n    switch (cmd.cmd) {\n      case 'subscribe':\n        void handleSubscribe(cmd.id, cmd.path, cmd.opts);\n        return;\n      case 'unsubscribe':\n        void handleUnsubscribe(cmd.id);\n        return;\n      case 'shutdown':\n        void handleShutdown();\n        return;\n      default:\n        assertNever(cmd);\n    }\n  }\n\n  let buffer = '';\n  deps.stdin.on('data', (chunk: Buffer | string) => {\n    buffer += typeof chunk === 'string' ? chunk : chunk.toString('utf8');\n    let nl = buffer.indexOf('\\n');\n    while (nl !== -1) {\n      const line = buffer.slice(0, nl);\n      buffer = buffer.slice(nl + 1);\n      nl = buffer.indexOf('\\n');\n      if (line.length === 0) continue;\n      const decoded = decodeLine(line);\n      if (decoded === null) {\n        logStderr('warn', 'worker_decode_failed', { line });\n        continue;\n      }\n      /** Workers should never see Reply messages; ignore-and-log if they do. */\n      if ('type' in decoded) {\n        logStderr('warn', 'worker_received_unexpected_reply', { type: decoded.type });\n        continue;\n      }\n      dispatch(decoded);\n    }\n  });\n\n  /** Parent died → unsubscribe everything and exit. */\n  deps.stdin.on('end', () => {\n    void handleShutdown();\n  });\n  deps.stdin.on('close', () => {\n    void handleShutdown();\n  });\n\n  return done;\n}\n\n/**\n * Default entry: when this file is run directly via `fork()` from the\n * supervisor, import `@parcel/watcher` and wire it up to runWorker. Tests\n * import `runWorker` directly and skip this branch entirely.\n */\nasync function main(): Promise<void> {\n  const parcelWatcher = await import('@parcel/watcher');\n  await runWorker({\n    subscribe: (path, fn, opts) => parcelWatcher.subscribe(path, fn, toParcelOptions(opts)),\n    stdin: process.stdin,\n    stdout: process.stdout,\n    stderr: process.stderr,\n  });\n}\n\n/**\n * Translate the protocol's options shape to `@parcel/watcher`'s. The protocol\n * accepts `backend: 'default'` to mean \"use the platform default\" — parcel's\n * `BackendType` does not include 'default' and instead expects the field to\n * be omitted entirely.\n */\nfunction toParcelOptions(\n  opts: WorkerSubscribeOptions | undefined\n): { ignore?: string[]; backend?: 'brute-force' | 'watchman' } | undefined {\n  if (!opts) return undefined;\n  const out: { ignore?: string[]; backend?: 'brute-force' | 'watchman' } = {};\n  if (opts.ignore) out.ignore = opts.ignore;\n  if (opts.backend && opts.backend !== 'default') out.backend = opts.backend;\n  return out;\n}\n\nconst entryUrl = process.argv[1] ? `file://${process.argv[1]}` : null;\nif (entryUrl !== null && import.meta.url === entryUrl) {\n  void main();\n}\n"],"mappings":";;;;;;;;;;AA+CA,eAAsB,UAAU,MAAoC;AAClE,QAAM,OAAO,oBAAI,IAAgC;AACjD,MAAI,eAAe;AACnB,MAAI;AACJ,QAAM,OAAO,IAAI,QAAc,CAAC,YAAY;AAC1C,kBAAc;AAAA,EAChB,CAAC;AAED,WAAS,UACP,OACA,OACA,OACM;AACN,UAAM,UAAU,QAAQ,EAAE,OAAO,OAAO,GAAG,MAAM,IAAI,EAAE,OAAO,MAAM;AACpE,SAAK,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,CAAI;AAAA,EAClD;AAEA,WAAS,WAAW,OAA0B;AAC5C,SAAK,OAAO,MAAM,GAAG,WAAW,KAAK,CAAC;AAAA,CAAI;AAAA,EAC5C;AAGA,WAAS,aAAa,QAAgD;AACpE,WAAO,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,EAAE,KAAK,EAAE;AAAA,EAC3D;AAEA,iBAAe,gBACb,IACA,MACA,MACe;AACf,UAAM,WAAW,CAAC,KAAmB,WAA8B;AACjE,UAAI,QAAQ,MAAM;AAChB,kBAAU,QAAQ,0BAA0B;AAAA,UAC1C;AAAA,UACA;AAAA,UACA,KAAK,IAAI;AAAA,QACX,CAAC;AACD;AAAA,MACF;AAKA,UAAI,CAAC,KAAK,IAAI,EAAE,EAAG;AACnB,iBAAW,EAAE,MAAM,UAAU,IAAI,QAAQ,aAAa,MAAM,EAAE,CAAC;AAAA,IACjE;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,UAAU,MAAM,UAAU,IAAI;AAExD,UAAI,cAAc;AAChB,cAAM,OAAO,YAAY,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AACzC;AAAA,MACF;AACA,WAAK,IAAI,IAAI,EAAE,OAAO,CAAC;AACvB,iBAAW,EAAE,MAAM,cAAc,GAAG,CAAC;AAAA,IACvC,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,iBAAW,EAAE,MAAM,oBAAoB,IAAI,OAAO,QAAQ,CAAC;AAAA,IAC7D;AAAA,EACF;AAEA,iBAAe,kBAAkB,IAA2B;AAC1D,UAAM,QAAQ,KAAK,IAAI,EAAE;AACzB,SAAK,OAAO,EAAE;AACd,QAAI,OAAO;AACT,UAAI;AACF,cAAM,MAAM,OAAO,YAAY;AAAA,MACjC,SAAS,KAAK;AACZ,kBAAU,QAAQ,8BAA8B;AAAA,UAC9C;AAAA,UACA,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACtD,CAAC;AAAA,MACH;AAAA,IACF;AACA,eAAW,EAAE,MAAM,gBAAgB,GAAG,CAAC;AAAA,EACzC;AAEA,iBAAe,iBAAgC;AAC7C,QAAI,aAAc;AAClB,mBAAe;AACf,UAAM,UAAU,MAAM,KAAK,KAAK,OAAO,CAAC;AACxC,SAAK,MAAM;AACX,UAAM,QAAQ;AAAA,MACZ,QAAQ,IAAI,OAAO,UAAU;AAC3B,YAAI;AACF,gBAAM,MAAM,OAAO,YAAY;AAAA,QACjC,SAAS,KAAK;AACZ,oBAAU,QAAQ,0CAA0C;AAAA,YAC1D,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,UACtD,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,IACH;AACA,gBAAY;AAAA,EACd;AAEA,WAAS,SAAS,KAA0B;AAC1C,YAAQ,IAAI,KAAK;AAAA,MACf,KAAK;AACH,aAAK,gBAAgB,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI;AAC/C;AAAA,MACF,KAAK;AACH,aAAK,kBAAkB,IAAI,EAAE;AAC7B;AAAA,MACF,KAAK;AACH,aAAK,eAAe;AACpB;AAAA,MACF;AACE,oBAAY,GAAG;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,SAAS;AACb,OAAK,MAAM,GAAG,QAAQ,CAAC,UAA2B;AAChD,cAAU,OAAO,UAAU,WAAW,QAAQ,MAAM,SAAS,MAAM;AACnE,QAAI,KAAK,OAAO,QAAQ,IAAI;AAC5B,WAAO,OAAO,IAAI;AAChB,YAAM,OAAO,OAAO,MAAM,GAAG,EAAE;AAC/B,eAAS,OAAO,MAAM,KAAK,CAAC;AAC5B,WAAK,OAAO,QAAQ,IAAI;AACxB,UAAI,KAAK,WAAW,EAAG;AACvB,YAAM,UAAU,WAAW,IAAI;AAC/B,UAAI,YAAY,MAAM;AACpB,kBAAU,QAAQ,wBAAwB,EAAE,KAAK,CAAC;AAClD;AAAA,MACF;AAEA,UAAI,UAAU,SAAS;AACrB,kBAAU,QAAQ,oCAAoC,EAAE,MAAM,QAAQ,KAAK,CAAC;AAC5E;AAAA,MACF;AACA,eAAS,OAAO;AAAA,IAClB;AAAA,EACF,CAAC;AAGD,OAAK,MAAM,GAAG,OAAO,MAAM;AACzB,SAAK,eAAe;AAAA,EACtB,CAAC;AACD,OAAK,MAAM,GAAG,SAAS,MAAM;AAC3B,SAAK,eAAe;AAAA,EACtB,CAAC;AAED,SAAO;AACT;AAOA,eAAe,OAAsB;AACnC,QAAM,gBAAgB,MAAM,OAAO,iBAAiB;AACpD,QAAM,UAAU;AAAA,IACd,WAAW,CAAC,MAAM,IAAI,SAAS,cAAc,UAAU,MAAM,IAAI,gBAAgB,IAAI,CAAC;AAAA,IACtF,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ;AAAA,IAChB,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACH;AAQA,SAAS,gBACP,MACyE;AACzE,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAmE,CAAC;AAC1E,MAAI,KAAK,OAAQ,KAAI,SAAS,KAAK;AACnC,MAAI,KAAK,WAAW,KAAK,YAAY,UAAW,KAAI,UAAU,KAAK;AACnE,SAAO;AACT;AAEA,IAAM,WAAW,QAAQ,KAAK,CAAC,IAAI,UAAU,QAAQ,KAAK,CAAC,CAAC,KAAK;AACjE,IAAI,aAAa,QAAQ,YAAY,QAAQ,UAAU;AACrD,OAAK,KAAK;AACZ;","names":[]}
+{"version":3,"sources":["../src/services/watcher-worker/worker.ts"],"sourcesContent":["import { assertNever } from '../../shared/assert-never.js';\nimport {\n  decodeLine,\n  encodeLine,\n  type WorkerCommand,\n  type WorkerParcelEvent,\n  type WorkerReply,\n  type WorkerSubscribeOptions,\n} from './worker-protocol.js';\n\n/**\n * Watcher worker entry point — the only place in the daemon that imports\n * `@parcel/watcher` (post-Commit-4). The worker is intentionally minimal:\n * subscribe/unsubscribe/shutdown over stdio, no business logic, no state\n * beyond a Map<id, AsyncSubscription>.\n *\n * Crashes are expected (parcel/watcher SIGABRTs on FSEvents NULL-deref); we\n * keep the blast surface as small as possible so the parent's supervisor\n * can replay the subscription map onto a fresh worker.\n */\n\ninterface ParcelEventLike {\n  type: 'create' | 'update' | 'delete';\n  path: string;\n}\n\ninterface ParcelAsyncSubscriptionLike {\n  unsubscribe(): Promise<void>;\n}\n\nexport type WorkerSubscribeFn = (\n  path: string,\n  fn: (err: Error | null, events: ParcelEventLike[]) => unknown,\n  opts?: WorkerSubscribeOptions\n) => Promise<ParcelAsyncSubscriptionLike>;\n\nexport interface RunWorkerDeps {\n  subscribe: WorkerSubscribeFn;\n  stdin: NodeJS.ReadableStream;\n  stdout: NodeJS.WritableStream;\n  stderr: NodeJS.WritableStream;\n}\n\ninterface ActiveSubscription {\n  handle: ParcelAsyncSubscriptionLike;\n}\n\nexport async function runWorker(deps: RunWorkerDeps): Promise<void> {\n  const subs = new Map<string, ActiveSubscription>();\n  let shuttingDown = false;\n  let resolveDone: () => void;\n  const done = new Promise<void>((resolve) => {\n    resolveDone = resolve;\n  });\n\n  function logStderr(\n    level: 'info' | 'warn' | 'error',\n    event: string,\n    extra?: Record<string, unknown>\n  ): void {\n    const payload = extra ? { level, event, ...extra } : { level, event };\n    deps.stderr.write(`${JSON.stringify(payload)}\\n`);\n  }\n\n  function writeReply(reply: WorkerReply): void {\n    deps.stdout.write(`${encodeLine(reply)}\\n`);\n  }\n\n  /** Coerce a parcel/watcher event into the protocol's strict shape. */\n  function toWireEvents(events: ParcelEventLike[]): WorkerParcelEvent[] {\n    return events.map((e) => ({ type: e.type, path: e.path }));\n  }\n\n  async function handleSubscribe(\n    id: string,\n    path: string,\n    opts: WorkerSubscribeOptions\n  ): Promise<void> {\n    const callback = (err: Error | null, events: ParcelEventLike[]) => {\n      if (err !== null) {\n        logStderr('warn', 'watcher_callback_error', {\n          id,\n          path,\n          err: err.message,\n        });\n        return;\n      }\n      /**\n       * Drop events for ids that have been unsubscribed but whose underlying\n       * watcher hasn't fully torn down yet.\n       */\n      if (!subs.has(id)) return;\n      writeReply({ type: 'events', id, events: toWireEvents(events) });\n    };\n\n    try {\n      const handle = await deps.subscribe(path, callback, opts);\n      /** If the worker began shutdown while subscribe was in flight, undo. */\n      if (shuttingDown) {\n        await handle.unsubscribe().catch(() => {});\n        return;\n      }\n      subs.set(id, { handle });\n      writeReply({ type: 'subscribed', id });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      writeReply({ type: 'subscribe_failed', id, error: message });\n    }\n  }\n\n  async function handleUnsubscribe(id: string): Promise<void> {\n    const entry = subs.get(id);\n    subs.delete(id);\n    if (entry) {\n      try {\n        await entry.handle.unsubscribe();\n      } catch (err) {\n        logStderr('warn', 'watcher_unsubscribe_failed', {\n          id,\n          err: err instanceof Error ? err.message : String(err),\n        });\n      }\n    }\n    writeReply({ type: 'unsubscribed', id });\n  }\n\n  async function handleShutdown(): Promise<void> {\n    if (shuttingDown) return;\n    shuttingDown = true;\n    const entries = Array.from(subs.values());\n    subs.clear();\n    await Promise.all(\n      entries.map(async (entry) => {\n        try {\n          await entry.handle.unsubscribe();\n        } catch (err) {\n          logStderr('warn', 'watcher_unsubscribe_failed_on_shutdown', {\n            err: err instanceof Error ? err.message : String(err),\n          });\n        }\n      })\n    );\n    resolveDone();\n  }\n\n  function dispatch(cmd: WorkerCommand): void {\n    switch (cmd.cmd) {\n      case 'subscribe':\n        void handleSubscribe(cmd.id, cmd.path, cmd.opts);\n        return;\n      case 'unsubscribe':\n        void handleUnsubscribe(cmd.id);\n        return;\n      case 'shutdown':\n        void handleShutdown();\n        return;\n      default:\n        assertNever(cmd);\n    }\n  }\n\n  let buffer = '';\n  deps.stdin.on('data', (chunk: Buffer | string) => {\n    buffer += typeof chunk === 'string' ? chunk : chunk.toString('utf8');\n    let nl = buffer.indexOf('\\n');\n    while (nl !== -1) {\n      const line = buffer.slice(0, nl);\n      buffer = buffer.slice(nl + 1);\n      nl = buffer.indexOf('\\n');\n      if (line.length === 0) continue;\n      const decoded = decodeLine(line);\n      if (decoded === null) {\n        logStderr('warn', 'worker_decode_failed', { line });\n        continue;\n      }\n      /** Workers should never see Reply messages; ignore-and-log if they do. */\n      if ('type' in decoded) {\n        logStderr('warn', 'worker_received_unexpected_reply', { type: decoded.type });\n        continue;\n      }\n      dispatch(decoded);\n    }\n  });\n\n  /** Parent died → unsubscribe everything and exit. */\n  deps.stdin.on('end', () => {\n    void handleShutdown();\n  });\n  deps.stdin.on('close', () => {\n    void handleShutdown();\n  });\n\n  return done;\n}\n\n/**\n * Default entry: when this file is run directly via `fork()` from the\n * supervisor, import `@parcel/watcher` and wire it up to runWorker. Tests\n * import `runWorker` directly and skip this branch entirely.\n */\nasync function main(): Promise<void> {\n  const parcelWatcher = await import('@parcel/watcher');\n  await runWorker({\n    subscribe: (path, fn, opts) => parcelWatcher.subscribe(path, fn, toParcelOptions(opts)),\n    stdin: process.stdin,\n    stdout: process.stdout,\n    stderr: process.stderr,\n  });\n}\n\n/**\n * Translate the protocol's options shape to `@parcel/watcher`'s. The protocol\n * accepts `backend: 'default'` to mean \"use the platform default\" — parcel's\n * `BackendType` does not include 'default' and instead expects the field to\n * be omitted entirely.\n */\nfunction toParcelOptions(\n  opts: WorkerSubscribeOptions | undefined\n): { ignore?: string[]; backend?: 'brute-force' | 'watchman' } | undefined {\n  if (!opts) return undefined;\n  const out: { ignore?: string[]; backend?: 'brute-force' | 'watchman' } = {};\n  if (opts.ignore) out.ignore = opts.ignore;\n  if (opts.backend && opts.backend !== 'default') out.backend = opts.backend;\n  return out;\n}\n\nconst entryUrl = process.argv[1] ? `file://${process.argv[1]}` : null;\nif (entryUrl !== null && import.meta.url === entryUrl) {\n  void main();\n}\n"],"mappings":";;;;;;;;;;;;;AA+CA,eAAsB,UAAU,MAAoC;AAClE,QAAM,OAAO,oBAAI,IAAgC;AACjD,MAAI,eAAe;AACnB,MAAI;AACJ,QAAM,OAAO,IAAI,QAAc,CAAC,YAAY;AAC1C,kBAAc;AAAA,EAChB,CAAC;AAED,WAAS,UACP,OACA,OACA,OACM;AACN,UAAM,UAAU,QAAQ,EAAE,OAAO,OAAO,GAAG,MAAM,IAAI,EAAE,OAAO,MAAM;AACpE,SAAK,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,CAAI;AAAA,EAClD;AAEA,WAAS,WAAW,OAA0B;AAC5C,SAAK,OAAO,MAAM,GAAG,WAAW,KAAK,CAAC;AAAA,CAAI;AAAA,EAC5C;AAGA,WAAS,aAAa,QAAgD;AACpE,WAAO,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,EAAE,KAAK,EAAE;AAAA,EAC3D;AAEA,iBAAe,gBACb,IACA,MACA,MACe;AACf,UAAM,WAAW,CAAC,KAAmB,WAA8B;AACjE,UAAI,QAAQ,MAAM;AAChB,kBAAU,QAAQ,0BAA0B;AAAA,UAC1C;AAAA,UACA;AAAA,UACA,KAAK,IAAI;AAAA,QACX,CAAC;AACD;AAAA,MACF;AAKA,UAAI,CAAC,KAAK,IAAI,EAAE,EAAG;AACnB,iBAAW,EAAE,MAAM,UAAU,IAAI,QAAQ,aAAa,MAAM,EAAE,CAAC;AAAA,IACjE;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,UAAU,MAAM,UAAU,IAAI;AAExD,UAAI,cAAc;AAChB,cAAM,OAAO,YAAY,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AACzC;AAAA,MACF;AACA,WAAK,IAAI,IAAI,EAAE,OAAO,CAAC;AACvB,iBAAW,EAAE,MAAM,cAAc,GAAG,CAAC;AAAA,IACvC,SAAS,KAAK;AACZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,iBAAW,EAAE,MAAM,oBAAoB,IAAI,OAAO,QAAQ,CAAC;AAAA,IAC7D;AAAA,EACF;AAEA,iBAAe,kBAAkB,IAA2B;AAC1D,UAAM,QAAQ,KAAK,IAAI,EAAE;AACzB,SAAK,OAAO,EAAE;AACd,QAAI,OAAO;AACT,UAAI;AACF,cAAM,MAAM,OAAO,YAAY;AAAA,MACjC,SAAS,KAAK;AACZ,kBAAU,QAAQ,8BAA8B;AAAA,UAC9C;AAAA,UACA,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACtD,CAAC;AAAA,MACH;AAAA,IACF;AACA,eAAW,EAAE,MAAM,gBAAgB,GAAG,CAAC;AAAA,EACzC;AAEA,iBAAe,iBAAgC;AAC7C,QAAI,aAAc;AAClB,mBAAe;AACf,UAAM,UAAU,MAAM,KAAK,KAAK,OAAO,CAAC;AACxC,SAAK,MAAM;AACX,UAAM,QAAQ;AAAA,MACZ,QAAQ,IAAI,OAAO,UAAU;AAC3B,YAAI;AACF,gBAAM,MAAM,OAAO,YAAY;AAAA,QACjC,SAAS,KAAK;AACZ,oBAAU,QAAQ,0CAA0C;AAAA,YAC1D,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,UACtD,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,IACH;AACA,gBAAY;AAAA,EACd;AAEA,WAAS,SAAS,KAA0B;AAC1C,YAAQ,IAAI,KAAK;AAAA,MACf,KAAK;AACH,aAAK,gBAAgB,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI;AAC/C;AAAA,MACF,KAAK;AACH,aAAK,kBAAkB,IAAI,EAAE;AAC7B;AAAA,MACF,KAAK;AACH,aAAK,eAAe;AACpB;AAAA,MACF;AACE,oBAAY,GAAG;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,SAAS;AACb,OAAK,MAAM,GAAG,QAAQ,CAAC,UAA2B;AAChD,cAAU,OAAO,UAAU,WAAW,QAAQ,MAAM,SAAS,MAAM;AACnE,QAAI,KAAK,OAAO,QAAQ,IAAI;AAC5B,WAAO,OAAO,IAAI;AAChB,YAAM,OAAO,OAAO,MAAM,GAAG,EAAE;AAC/B,eAAS,OAAO,MAAM,KAAK,CAAC;AAC5B,WAAK,OAAO,QAAQ,IAAI;AACxB,UAAI,KAAK,WAAW,EAAG;AACvB,YAAM,UAAU,WAAW,IAAI;AAC/B,UAAI,YAAY,MAAM;AACpB,kBAAU,QAAQ,wBAAwB,EAAE,KAAK,CAAC;AAClD;AAAA,MACF;AAEA,UAAI,UAAU,SAAS;AACrB,kBAAU,QAAQ,oCAAoC,EAAE,MAAM,QAAQ,KAAK,CAAC;AAC5E;AAAA,MACF;AACA,eAAS,OAAO;AAAA,IAClB;AAAA,EACF,CAAC;AAGD,OAAK,MAAM,GAAG,OAAO,MAAM;AACzB,SAAK,eAAe;AAAA,EACtB,CAAC;AACD,OAAK,MAAM,GAAG,SAAS,MAAM;AAC3B,SAAK,eAAe;AAAA,EACtB,CAAC;AAED,SAAO;AACT;AAOA,eAAe,OAAsB;AACnC,QAAM,gBAAgB,MAAM,OAAO,iBAAiB;AACpD,QAAM,UAAU;AAAA,IACd,WAAW,CAAC,MAAM,IAAI,SAAS,cAAc,UAAU,MAAM,IAAI,gBAAgB,IAAI,CAAC;AAAA,IACtF,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ;AAAA,IAChB,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACH;AAQA,SAAS,gBACP,MACyE;AACzE,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAAmE,CAAC;AAC1E,MAAI,KAAK,OAAQ,KAAI,SAAS,KAAK;AACnC,MAAI,KAAK,WAAW,KAAK,YAAY,UAAW,KAAI,UAAU,KAAK;AACnE,SAAO;AACT;AAEA,IAAM,WAAW,QAAQ,KAAK,CAAC,IAAI,UAAU,QAAQ,KAAK,CAAC,CAAC,KAAK;AACjE,IAAI,aAAa,QAAQ,YAAY,QAAQ,UAAU;AACrD,OAAK,KAAK;AACZ;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@schoolai/shipyard",
-  "version": "3.7.0",
+  "version": "3.8.0-rc.20260529.0",
   "description": "Shipyard daemon - Claude Agent SDK + Loro CRDT sync",
   "type": "module",
   "main": "./dist/index.js",
@@ -19,25 +19,32 @@
     "postinstall": "node -e \"const fs=require('fs'),path=require('path');const d=path.join(__dirname,'node_modules','node-pty','prebuilds');if(fs.existsSync(d))for(const a of fs.readdirSync(d)){const h=path.join(d,a,'spawn-helper');try{fs.chmodSync(h,0o755)}catch{}}\""
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.2.120",
+    "@anthropic-ai/claude-agent-sdk": "0.3.153",
+    "@cursor/sdk": "1.0.13",
     "@linear/sdk": "82.1.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
+    "@openai/codex": "0.133.0",
+    "@parcel/watcher": "^2.5.6",
+    "happy-dom": "^20.5.0",
     "loro-crdt": "1.12.1",
+    "mermaid": "^11.12.3",
+    "modern-screenshot": "^4.6.8",
     "node-datachannel": "^0.32.1",
     "node-pty": "^1.0.0",
-    "@parcel/watcher": "^2.5.6",
+    "open": "^11.0.0",
     "pino": "^9.6.0",
-    "mermaid": "^11.12.3",
-    "jsdom": "^26.1.0",
     "pino-roll": "^2.1.0",
-    "modern-screenshot": "^4.6.8",
-    "typescript": "^5.9.3",
+    "toml": "^4.1.1",
+    "typescript": "^6.0.3",
     "typescript-language-server": "^5.1.3",
-    "ws": "^8.18.0",
-    "open": "^11.0.0"
+    "ws": "^8.18.0"
   },
   "optionalDependencies": {
-    "node-llama-cpp": "^3.16.2",
+    "@cursor/sdk-darwin-arm64": "1.0.13",
+    "@cursor/sdk-darwin-x64": "1.0.13",
+    "@cursor/sdk-linux-arm64": "1.0.13",
+    "@cursor/sdk-linux-x64": "1.0.13",
+    "@cursor/sdk-win32-x64": "1.0.13",
     "pino-pretty": "^13.0.0"
   },
   "bundledDependencies": [

package/dist/chunk-2J3WSIAF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/services/bootstrap/auth.ts"],"sourcesContent":["import { mkdir, readFile, unlink, writeFile } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\nimport { z } from 'zod';\nimport { getShipyardHome } from '../../shared/env.js';\n\nconst ShipyardConfigSchema = z.object({\n  auth: z.object({\n    token: z.string(),\n    userId: z.string(),\n    displayName: z.string(),\n    providers: z.array(z.string()),\n    expiresAt: z.number(),\n    signalingUrl: z.string(),\n  }),\n});\n\nexport type ShipyardConfig = z.infer<typeof ShipyardConfigSchema>;\n\nexport function getConfigPath(): string {\n  return join(getShipyardHome(), 'config.json');\n}\n\nexport async function readConfig(): Promise<ShipyardConfig | null> {\n  try {\n    const raw = await readFile(getConfigPath(), 'utf-8');\n    return ShipyardConfigSchema.parse(JSON.parse(raw));\n  } catch {\n    return null;\n  }\n}\n\nexport async function writeConfig(config: ShipyardConfig): Promise<void> {\n  await mkdir(dirname(getConfigPath()), { recursive: true, mode: 0o700 });\n  await writeFile(getConfigPath(), `${JSON.stringify(config, null, 2)}\\n`, { mode: 0o600 });\n}\n\nexport async function deleteConfig(): Promise<boolean> {\n  try {\n    await unlink(getConfigPath());\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport type AuthResult =\n  | { status: 'ok'; token: string; userId: string; displayName: string; signalingUrl?: string }\n  | { status: 'expired' }\n  | { status: 'missing' };\n\nexport interface AuthEnvOverrides {\n  SHIPYARD_USER_TOKEN?: string;\n  SHIPYARD_USER_ID?: string;\n  SHIPYARD_USER_DISPLAY_NAME?: string;\n  SHIPYARD_SIGNALING_URL?: string;\n}\n\n/**\n * Load auth token from validated env (CI override) or config file.\n */\nexport async function loadAuthToken(envOverrides?: AuthEnvOverrides): Promise<AuthResult> {\n  const envToken = envOverrides?.SHIPYARD_USER_TOKEN;\n  if (envToken) {\n    return {\n      status: 'ok',\n      token: envToken,\n      userId: envOverrides?.SHIPYARD_USER_ID ?? '',\n      displayName: envOverrides?.SHIPYARD_USER_DISPLAY_NAME ?? '',\n      signalingUrl: envOverrides?.SHIPYARD_SIGNALING_URL,\n    };\n  }\n\n  const config = await readConfig();\n  if (!config?.auth?.token) return { status: 'missing' };\n\n  if (config.auth.expiresAt < Date.now()) {\n    return { status: 'expired' };\n  }\n\n  return {\n    status: 'ok',\n    token: config.auth.token,\n    userId: config.auth.userId,\n    displayName: config.auth.displayName,\n    signalingUrl: config.auth.signalingUrl,\n  };\n}\n"],"mappings":";;;;;;;;;AAAA,SAAS,OAAO,UAAU,QAAQ,iBAAiB;AACnD,SAAS,SAAS,YAAY;AAI9B,IAAM,uBAAuB,iBAAE,OAAO;AAAA,EACpC,MAAM,iBAAE,OAAO;AAAA,IACb,OAAO,iBAAE,OAAO;AAAA,IAChB,QAAQ,iBAAE,OAAO;AAAA,IACjB,aAAa,iBAAE,OAAO;AAAA,IACtB,WAAW,iBAAE,MAAM,iBAAE,OAAO,CAAC;AAAA,IAC7B,WAAW,iBAAE,OAAO;AAAA,IACpB,cAAc,iBAAE,OAAO;AAAA,EACzB,CAAC;AACH,CAAC;AAIM,SAAS,gBAAwB;AACtC,SAAO,KAAK,gBAAgB,GAAG,aAAa;AAC9C;AAEA,eAAsB,aAA6C;AACjE,MAAI;AACF,UAAM,MAAM,MAAM,SAAS,cAAc,GAAG,OAAO;AACnD,WAAO,qBAAqB,MAAM,KAAK,MAAM,GAAG,CAAC;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,YAAY,QAAuC;AACvE,QAAM,MAAM,QAAQ,cAAc,CAAC,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACtE,QAAM,UAAU,cAAc,GAAG,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAC1F;AAEA,eAAsB,eAAiC;AACrD,MAAI;AACF,UAAM,OAAO,cAAc,CAAC;AAC5B,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAiBA,eAAsB,cAAc,cAAsD;AACxF,QAAM,WAAW,cAAc;AAC/B,MAAI,UAAU;AACZ,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,QAAQ,cAAc,oBAAoB;AAAA,MAC1C,aAAa,cAAc,8BAA8B;AAAA,MACzD,cAAc,cAAc;AAAA,IAC9B;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,WAAW;AAChC,MAAI,CAAC,QAAQ,MAAM,MAAO,QAAO,EAAE,QAAQ,UAAU;AAErD,MAAI,OAAO,KAAK,YAAY,KAAK,IAAI,GAAG;AACtC,WAAO,EAAE,QAAQ,UAAU;AAAA,EAC7B;AAEA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,OAAO,OAAO,KAAK;AAAA,IACnB,QAAQ,OAAO,KAAK;AAAA,IACpB,aAAa,OAAO,KAAK;AAAA,IACzB,cAAc,OAAO,KAAK;AAAA,EAC5B;AACF;","names":[]}