@shravansunder/agent-vm 0.0.1

package/dist/gateway-api-client/gateway-websocket-client.d.ts

@@ -0,0 +1,45 @@
+interface WebSocketLike {
+    addEventListener(event: string, handler: (data: {
+        data: string;
+    }) => void): void;
+    close(): void;
+    send(data: string): void;
+}
+/** Options for the connect handshake sent to the gateway. */
+export interface GatewayConnectOptions {
+    readonly token: string;
+    readonly clientId?: string;
+    readonly clientVersion?: string;
+    readonly platform?: string;
+    readonly role?: 'operator' | 'node';
+    readonly scopes?: readonly string[];
+    readonly protocolVersion?: number;
+}
+/** Successful connect response payload from the gateway. */
+interface ConnectHelloOkPayload {
+    readonly type: 'hello-ok';
+    readonly protocol: number;
+    readonly policy?: {
+        readonly tickIntervalMs?: number;
+    };
+    readonly auth?: {
+        readonly deviceToken?: string;
+        readonly role?: string;
+        readonly scopes?: readonly string[];
+    };
+}
+export interface GatewayWebSocketClient {
+    /** Resolves when the connect handshake completes. Rejects if the gateway refuses. */
+    readonly connected: Promise<ConnectHelloOkPayload>;
+    chatSend(params: {
+        readonly session: string;
+        readonly text: string;
+    }): Promise<unknown>;
+    close(): void;
+}
+export declare function createGatewayWebSocketClient(options: {
+    readonly createSocket: () => WebSocketLike;
+    readonly connectOptions: GatewayConnectOptions;
+}): GatewayWebSocketClient;
+export {};
+//# sourceMappingURL=gateway-websocket-client.d.ts.map

package/dist/gateway-api-client/gateway-websocket-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-websocket-client.d.ts","sourceRoot":"","sources":["../../src/gateway-api-client/gateway-websocket-client.ts"],"names":[],"mappings":"AAKA,UAAU,aAAa;IACtB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACjF,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AA6DD,6DAA6D;AAC7D,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,4DAA4D;AAC5D,UAAU,qBAAqB;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,QAAQ,CAAC,IAAI,CAAC,EAAE;QACf,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACpC,CAAC;CACF;AAWD,MAAM,WAAW,sBAAsB;IACtC,qFAAqF;IACrF,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxF,KAAK,IAAI,IAAI,CAAC;CACd;AAID,wBAAgB,4BAA4B,CAAC,OAAO,EAAE;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,aAAa,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;CAC/C,GAAG,sBAAsB,CA+GzB"}

package/dist/gateway-api-client/gateway-websocket-client.js

@@ -0,0 +1,140 @@
+function parseGatewayFrame(rawFrame) {
+    const parsed = JSON.parse(rawFrame);
+    if (typeof parsed !== 'object' || parsed === null) {
+        return null;
+    }
+    const candidate = parsed;
+    if (candidate.type !== 'req' && candidate.type !== 'res' && candidate.type !== 'event') {
+        return null;
+    }
+    const errorMessage = typeof candidate.error === 'object' &&
+        candidate.error !== null &&
+        typeof candidate.error.message === 'string'
+        ? candidate.error.message
+        : null;
+    return {
+        type: candidate.type,
+        ...(typeof candidate.id === 'string' ? { id: candidate.id } : {}),
+        ...(typeof candidate.method === 'string' ? { method: candidate.method } : {}),
+        ...(typeof candidate.ok === 'boolean' ? { ok: candidate.ok } : {}),
+        ...('payload' in candidate ? { payload: candidate.payload } : {}),
+        ...(typeof candidate.event === 'string' ? { event: candidate.event } : {}),
+        ...(errorMessage !== null ? { error: { message: errorMessage } } : {}),
+    };
+}
+function isConnectChallengePayload(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        typeof value.nonce === 'string' &&
+        typeof value.ts === 'number');
+}
+function isConnectHelloOkPayload(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        value.type === 'hello-ok' &&
+        typeof value.protocol === 'number');
+}
+const DEFAULT_PROTOCOL_VERSION = 3;
+export function createGatewayWebSocketClient(options) {
+    const socket = options.createSocket();
+    const pending = new Map();
+    let nextId = 1;
+    /** Resolves when the connect handshake succeeds. */
+    let resolveConnected;
+    let rejectConnected;
+    const connected = new Promise((resolve, reject) => {
+        resolveConnected = resolve;
+        rejectConnected = reject;
+    });
+    /** Tracks whether the handshake has completed so we can gate outbound requests. */
+    let handshakeComplete = false;
+    socket.addEventListener('message', (event) => {
+        const message = parseGatewayFrame(event.data);
+        if (!message) {
+            return;
+        }
+        // --- Handle the connect.challenge event from the gateway ---
+        if (message.type === 'event' && message.event === 'connect.challenge') {
+            if (!isConnectChallengePayload(message.payload)) {
+                rejectConnected(new Error('Gateway sent invalid connect.challenge payload'));
+                return;
+            }
+            const challengePayload = message.payload;
+            const connectOpts = options.connectOptions;
+            const protocolVersion = connectOpts.protocolVersion ?? DEFAULT_PROTOCOL_VERSION;
+            const connectId = String(nextId);
+            nextId += 1;
+            pending.set(connectId, {
+                resolve: (payload) => {
+                    if (!isConnectHelloOkPayload(payload)) {
+                        rejectConnected(new Error('Gateway sent invalid hello-ok payload'));
+                        return;
+                    }
+                    handshakeComplete = true;
+                    resolveConnected(payload);
+                },
+                reject: (error) => {
+                    rejectConnected(error);
+                },
+            });
+            socket.send(JSON.stringify({
+                type: 'req',
+                id: connectId,
+                method: 'connect',
+                params: {
+                    minProtocol: protocolVersion,
+                    maxProtocol: protocolVersion,
+                    client: {
+                        id: connectOpts.clientId ?? 'agent-vm',
+                        version: connectOpts.clientVersion ?? '0.0.0',
+                        platform: connectOpts.platform ?? 'node',
+                        mode: connectOpts.role ?? 'operator',
+                    },
+                    role: connectOpts.role ?? 'operator',
+                    scopes: connectOpts.scopes ?? ['operator.read', 'operator.write'],
+                    caps: [],
+                    commands: [],
+                    permissions: {},
+                    auth: { token: connectOpts.token },
+                    device: {
+                        nonce: challengePayload.nonce,
+                    },
+                },
+            }));
+            return;
+        }
+        // --- Handle response frames ---
+        if (message.type === 'res' && message.id) {
+            const request = pending.get(message.id);
+            if (request) {
+                pending.delete(message.id);
+                if (message.ok) {
+                    request.resolve(message.payload);
+                }
+                else {
+                    request.reject(new Error(message.error?.message ?? 'Gateway WebSocket request failed'));
+                }
+            }
+        }
+    });
+    function sendRequest(method, params) {
+        const id = String(nextId);
+        nextId += 1;
+        return new Promise((resolve, reject) => {
+            pending.set(id, { resolve, reject });
+            socket.send(JSON.stringify({ type: 'req', id, method, params }));
+        });
+    }
+    return {
+        connected,
+        chatSend: async (params) => {
+            // Wait for the connect handshake to complete before sending requests.
+            if (!handshakeComplete) {
+                await connected;
+            }
+            return await sendRequest('chat.send', params);
+        },
+        close: () => socket.close(),
+    };
+}
+//# sourceMappingURL=gateway-websocket-client.js.map

package/dist/gateway-api-client/gateway-websocket-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-websocket-client.js","sourceRoot":"","sources":["../../src/gateway-api-client/gateway-websocket-client.ts"],"names":[],"mappings":"AA4BA,SAAS,iBAAiB,CAAC,QAAgB;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,SAAS,GAAG,MAAiC,CAAC;IACpD,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,YAAY,GACjB,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;QACnC,SAAS,CAAC,KAAK,KAAK,IAAI;QACxB,OAAQ,SAAS,CAAC,KAA+B,CAAC,OAAO,KAAK,QAAQ;QACrE,CAAC,CAAE,SAAS,CAAC,KAA6B,CAAC,OAAO;QAClD,CAAC,CAAC,IAAI,CAAC;IAET,OAAO;QACN,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,GAAG,CAAC,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,OAAO,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACH,CAAC;AAQD,SAAS,yBAAyB,CAAC,KAAc;IAChD,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAA6B,CAAC,KAAK,KAAK,QAAQ;QACxD,OAAQ,KAA0B,CAAC,EAAE,KAAK,QAAQ,CAClD,CAAC;AACH,CAAC;AAyBD,SAAS,uBAAuB,CAAC,KAAc;IAC9C,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAA4B,CAAC,IAAI,KAAK,UAAU;QACjD,OAAQ,KAAgC,CAAC,QAAQ,KAAK,QAAQ,CAC9D,CAAC;AACH,CAAC;AASD,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAEnC,MAAM,UAAU,4BAA4B,CAAC,OAG5C;IACA,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,oDAAoD;IACpD,IAAI,gBAA0D,CAAC;IAC/D,IAAI,eAAuC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxE,gBAAgB,GAAG,OAAO,CAAC;QAC3B,eAAe,GAAG,MAAM,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,mFAAmF;IACnF,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAuB,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;QACR,CAAC;QAED,8DAA8D;QAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;YACvE,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,eAAe,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;gBAC7E,OAAO;YACR,CAAC;YACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;YACzC,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;YAC3C,MAAM,eAAe,GAAG,WAAW,CAAC,eAAe,IAAI,wBAAwB,CAAC;YAChF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,IAAI,CAAC,CAAC;YAEZ,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE;gBACtB,OAAO,EAAE,CAAC,OAAgB,EAAE,EAAE;oBAC7B,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;wBACvC,eAAe,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;wBACpE,OAAO;oBACR,CAAC;oBACD,iBAAiB,GAAG,IAAI,CAAC;oBACzB,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAC3B,CAAC;gBACD,MAAM,EAAE,CAAC,KAAY,EAAE,EAAE;oBACxB,eAAe,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC;aACD,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACd,IAAI,EAAE,KAAK;gBACX,EAAE,EAAE,SAAS;gBACb,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE;oBACP,WAAW,EAAE,eAAe;oBAC5B,WAAW,EAAE,eAAe;oBAC5B,MAAM,EAAE;wBACP,EAAE,EAAE,WAAW,CAAC,QAAQ,IAAI,UAAU;wBACtC,OAAO,EAAE,WAAW,CAAC,aAAa,IAAI,OAAO;wBAC7C,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,MAAM;wBACxC,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,UAAU;qBACpC;oBACD,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,UAAU;oBACpC,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC;oBACjE,IAAI,EAAE,EAAE;oBACR,QAAQ,EAAE,EAAE;oBACZ,WAAW,EAAE,EAAE;oBACf,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE;oBAClC,MAAM,EAAE;wBACP,KAAK,EAAE,gBAAgB,CAAC,KAAK;qBAC7B;iBACD;aACD,CAAC,CACF,CAAC;YACF,OAAO;QACR,CAAC;QAED,iCAAiC;QACjC,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC3B,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,kCAAkC,CAAC,CAAC,CAAC;gBACzF,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,SAAS,WAAW,CAAC,MAAc,EAAE,MAA+B;QACnE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,CAAC,CAAC;QACZ,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACN,SAAS;QACT,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1B,sEAAsE;YACtE,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACxB,MAAM,SAAS,CAAC;YACjB,CAAC;YACD,OAAO,MAAM,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC3B,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+export * from './controller/http/controller-client.js';
+export * from './controller/http/controller-http-routes.js';
+export * from './operations/credentials-refresh.js';
+export * from './gateway/credential-manager.js';
+export * from './operations/destroy-zone.js';
+export * from './operations/doctor.js';
+export * from './gateway/gateway-zone-orchestrator.js';
+export * from './controller/leases/idle-reaper.js';
+export * from './controller/leases/lease-manager.js';
+export * from './operations/zone-logs.js';
+export * from './operations/controller-status.js';
+export * from './config/system-config.js';
+export * from './controller/leases/tcp-pool.js';
+export * from './operations/upgrade-zone.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC"}

package/dist/index.js

@@ -0,0 +1,15 @@
+export * from './controller/http/controller-client.js';
+export * from './controller/http/controller-http-routes.js';
+export * from './operations/credentials-refresh.js';
+export * from './gateway/credential-manager.js';
+export * from './operations/destroy-zone.js';
+export * from './operations/doctor.js';
+export * from './gateway/gateway-zone-orchestrator.js';
+export * from './controller/leases/idle-reaper.js';
+export * from './controller/leases/lease-manager.js';
+export * from './operations/zone-logs.js';
+export * from './operations/controller-status.js';
+export * from './config/system-config.js';
+export * from './controller/leases/tcp-pool.js';
+export * from './operations/upgrade-zone.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC"}

package/dist/operations/controller-status.d.ts

@@ -0,0 +1,13 @@
+import type { SystemConfig } from '../config/system-config.js';
+export interface ControllerStatusSummary {
+    readonly controllerPort: number;
+    readonly toolProfiles: string[];
+    readonly zones: {
+        readonly gatewayType: SystemConfig['zones'][number]['gateway']['type'];
+        readonly id: string;
+        readonly ingressPort: number;
+        readonly toolProfile: string;
+    }[];
+}
+export declare function buildControllerStatus(systemConfig: SystemConfig): ControllerStatusSummary;
+//# sourceMappingURL=controller-status.d.ts.map

package/dist/operations/controller-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-status.d.ts","sourceRoot":"","sources":["../../src/operations/controller-status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;QACvE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC7B,EAAE,CAAC;CACJ;AAED,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,YAAY,GAAG,uBAAuB,CAWzF"}

package/dist/operations/controller-status.js

@@ -0,0 +1,13 @@
+export function buildControllerStatus(systemConfig) {
+    return {
+        controllerPort: systemConfig.host.controllerPort,
+        toolProfiles: Object.keys(systemConfig.toolProfiles),
+        zones: systemConfig.zones.map((zone) => ({
+            gatewayType: zone.gateway.type,
+            id: zone.id,
+            ingressPort: zone.gateway.port,
+            toolProfile: zone.toolProfile,
+        })),
+    };
+}
+//# sourceMappingURL=controller-status.js.map

package/dist/operations/controller-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-status.js","sourceRoot":"","sources":["../../src/operations/controller-status.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,qBAAqB,CAAC,YAA0B;IAC/D,OAAO;QACN,cAAc,EAAE,YAAY,CAAC,IAAI,CAAC,cAAc;QAChD,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;QACpD,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YAC9B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YAC9B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAC;KACH,CAAC;AACH,CAAC"}

package/dist/operations/credentials-refresh.d.ts

@@ -0,0 +1,10 @@
+export declare function runControllerCredentialsRefresh(options: {
+    readonly zoneId: string;
+}, dependencies: {
+    readonly refreshZoneSecrets: (zoneId: string) => Promise<void>;
+    readonly restartGatewayZone: (zoneId: string) => Promise<void>;
+}): Promise<{
+    readonly ok: true;
+    readonly zoneId: string;
+}>;
+//# sourceMappingURL=credentials-refresh.d.ts.map

package/dist/operations/credentials-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-refresh.d.ts","sourceRoot":"","sources":["../../src/operations/credentials-refresh.ts"],"names":[],"mappings":"AAAA,wBAAsB,+BAA+B,CACpD,OAAO,EAAE;IACR,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,EACD,YAAY,EAAE;IACb,QAAQ,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D,GACC,OAAO,CAAC;IACV,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,CAAC,CAQD"}

package/dist/operations/credentials-refresh.js

@@ -0,0 +1,9 @@
+export async function runControllerCredentialsRefresh(options, dependencies) {
+    await dependencies.refreshZoneSecrets(options.zoneId);
+    await dependencies.restartGatewayZone(options.zoneId);
+    return {
+        ok: true,
+        zoneId: options.zoneId,
+    };
+}
+//# sourceMappingURL=credentials-refresh.js.map

package/dist/operations/credentials-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-refresh.js","sourceRoot":"","sources":["../../src/operations/credentials-refresh.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,OAEC,EACD,YAGC;IAKD,MAAM,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtD,OAAO;QACN,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACH,CAAC"}

package/dist/operations/destroy-zone.d.ts

@@ -0,0 +1,14 @@
+import type { SystemConfig } from '../config/system-config.js';
+export declare function runControllerDestroy(options: {
+    readonly purge: boolean;
+    readonly systemConfig: SystemConfig;
+    readonly zoneId: string;
+}, dependencies: {
+    readonly releaseZoneLeases: (zoneId: string) => Promise<void>;
+    readonly stopGatewayZone: (zoneId: string) => Promise<void>;
+}): Promise<{
+    readonly ok: true;
+    readonly purged: boolean;
+    readonly zoneId: string;
+}>;
+//# sourceMappingURL=destroy-zone.d.ts.map

package/dist/operations/destroy-zone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy-zone.d.ts","sourceRoot":"","sources":["../../src/operations/destroy-zone.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,wBAAsB,oBAAoB,CACzC,OAAO,EAAE;IACR,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,EACD,YAAY,EAAE;IACb,QAAQ,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D,GACC,OAAO,CAAC;IACV,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,CAAC,CAqBD"}

package/dist/operations/destroy-zone.js

@@ -0,0 +1,19 @@
+import fs from 'node:fs/promises';
+export async function runControllerDestroy(options, dependencies) {
+    const zone = options.systemConfig.zones.find((candidateZone) => candidateZone.id === options.zoneId);
+    if (!zone) {
+        throw new Error(`Unknown zone '${options.zoneId}'.`);
+    }
+    await dependencies.stopGatewayZone(options.zoneId);
+    await dependencies.releaseZoneLeases(options.zoneId);
+    if (options.purge) {
+        await fs.rm(zone.gateway.stateDir, { force: true, recursive: true });
+        await fs.rm(zone.gateway.workspaceDir, { force: true, recursive: true });
+    }
+    return {
+        ok: true,
+        purged: options.purge,
+        zoneId: options.zoneId,
+    };
+}
+//# sourceMappingURL=destroy-zone.js.map

package/dist/operations/destroy-zone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy-zone.js","sourceRoot":"","sources":["../../src/operations/destroy-zone.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAIlC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,OAIC,EACD,YAGC;IAMD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAC3C,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,CACtD,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAErD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;QACN,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,OAAO,CAAC,KAAK;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACH,CAAC"}

package/dist/operations/doctor.d.ts

@@ -0,0 +1,22 @@
+import type { SystemConfig } from '../config/system-config.js';
+export interface DoctorCheck {
+    readonly name: string;
+    readonly ok: boolean;
+    readonly hint?: string;
+    readonly value?: number;
+}
+export interface RunControllerDoctorOptions {
+    readonly availableBinaries?: ReadonlySet<string>;
+    readonly diskFreeBytes?: number;
+    readonly env: NodeJS.ProcessEnv;
+    readonly occupiedPorts?: ReadonlySet<number>;
+    readonly nodeVersion: string;
+    readonly systemConfig: SystemConfig;
+    readonly totalMemoryBytes?: number;
+}
+export interface ControllerDoctorResult {
+    readonly ok: boolean;
+    readonly checks: DoctorCheck[];
+}
+export declare function runControllerDoctor(options: RunControllerDoctorOptions): ControllerDoctorResult;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/operations/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/operations/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;CAC/B;AAeD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,sBAAsB,CAoF/F"}

package/dist/operations/doctor.js

@@ -0,0 +1,83 @@
+function checkBinary(name, binaryName, installHint, availableBinaries) {
+    return {
+        name,
+        ok: availableBinaries.has(binaryName),
+        ...(!availableBinaries.has(binaryName) ? { hint: installHint } : {}),
+    };
+}
+export function runControllerDoctor(options) {
+    const nodeMajorVersion = Number.parseInt(options.nodeVersion.replace(/^v/u, '').split('.')[0] ?? '0', 10);
+    const occupiedPorts = options.occupiedPorts ?? new Set();
+    const diskFreeBytes = options.diskFreeBytes ?? Number.POSITIVE_INFINITY;
+    const totalMemoryBytes = options.totalMemoryBytes ?? Number.POSITIVE_INFINITY;
+    const availableBinaries = options.availableBinaries ?? new Set();
+    const configuredGatewayBytes = options.systemConfig.zones.reduce((totalBytes, zone) => {
+        const memoryMatch = /^(\d+)([GgMm])$/u.exec(zone.gateway.memory);
+        if (!memoryMatch) {
+            return totalBytes;
+        }
+        const numericValue = Number.parseInt(memoryMatch[1] ?? '0', 10);
+        const multiplier = (memoryMatch[2] ?? '').toLowerCase() === 'g' ? 1024 * 1024 * 1024 : 1024 * 1024;
+        return totalBytes + numericValue * multiplier;
+    }, 0);
+    const tokenSource = options.systemConfig.host.secretsProvider.tokenSource;
+    const tokenSourceReady = (() => {
+        switch (tokenSource.type) {
+            case 'env': {
+                const envVar = tokenSource.envVar ?? 'OP_SERVICE_ACCOUNT_TOKEN';
+                return typeof options.env[envVar] === 'string' && options.env[envVar].length > 0;
+            }
+            case 'op-cli':
+                return availableBinaries.has('op');
+            case 'keychain':
+                return availableBinaries.has('security');
+        }
+    })();
+    const checks = [
+        {
+            name: 'node-version',
+            ok: nodeMajorVersion >= 24,
+            ...(nodeMajorVersion < 24 ? { hint: 'Requires Node.js >= 24. Install via nvm or fnm.' } : {}),
+        },
+        {
+            name: '1password-token-source',
+            ok: tokenSourceReady,
+            ...(!tokenSourceReady && tokenSource.type === 'env'
+                ? { hint: `Set ${tokenSource.envVar ?? 'OP_SERVICE_ACCOUNT_TOKEN'} environment variable` }
+                : {}),
+            ...(!tokenSourceReady && tokenSource.type === 'op-cli'
+                ? { hint: 'Install 1Password CLI: brew install 1password-cli' }
+                : {}),
+        },
+        checkBinary('qemu', 'qemu-system-aarch64', 'brew install qemu', availableBinaries),
+        checkBinary('age', 'age', 'brew install age', availableBinaries),
+        checkBinary('1password-cli', 'op', 'brew install 1password-cli', availableBinaries),
+        {
+            name: 'controller-port',
+            ok: options.systemConfig.host.controllerPort > 0 &&
+                !occupiedPorts.has(options.systemConfig.host.controllerPort),
+            value: options.systemConfig.host.controllerPort,
+        },
+        ...options.systemConfig.zones.map((zone) => ({
+            name: `gateway-port-${zone.id}`,
+            ok: zone.gateway.port > 0 && !occupiedPorts.has(zone.gateway.port),
+            value: zone.gateway.port,
+        })),
+        {
+            name: 'disk-space',
+            ok: diskFreeBytes >= 10 * 1024 * 1024 * 1024,
+            ...(diskFreeBytes < 10 * 1024 * 1024 * 1024
+                ? { hint: 'Need at least 10GB free disk space' }
+                : {}),
+        },
+        {
+            name: 'memory-budget',
+            ok: totalMemoryBytes >= configuredGatewayBytes,
+        },
+    ];
+    return {
+        ok: checks.every((check) => check.ok),
+        checks,
+    };
+}
+//# sourceMappingURL=doctor.js.map

package/dist/operations/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/operations/doctor.ts"],"names":[],"mappings":"AAwBA,SAAS,WAAW,CACnB,IAAY,EACZ,UAAkB,EAClB,WAAmB,EACnB,iBAAsC;IAEtC,OAAO;QACN,IAAI;QACJ,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;QACrC,GAAG,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACtE,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CACvC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAC3D,EAAE,CACF,CAAC;IACF,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,GAAG,EAAU,CAAC;IACjE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACxE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC,iBAAiB,CAAC;IAC9E,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,GAAG,EAAU,CAAC;IACzE,MAAM,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE;QACrF,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO,UAAU,CAAC;QACnB,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,UAAU,GACf,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;QACjF,OAAO,UAAU,GAAG,YAAY,GAAG,UAAU,CAAC;IAC/C,CAAC,EAAE,CAAC,CAAC,CAAC;IACN,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC;IAC1E,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE;QAC9B,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YAC1B,KAAK,KAAK,CAAC,CAAC,CAAC;gBACZ,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,0BAA0B,CAAC;gBAChE,OAAO,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAClF,CAAC;YACD,KAAK,QAAQ;gBACZ,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,KAAK,UAAU;gBACd,OAAO,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,MAAM,GAAkB;QAC7B;YACC,IAAI,EAAE,cAAc;YACpB,EAAE,EAAE,gBAAgB,IAAI,EAAE;YAC1B,GAAG,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iDAAiD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F;QACD;YACC,IAAI,EAAE,wBAAwB;YAC9B,EAAE,EAAE,gBAAgB;YACpB,GAAG,CAAC,CAAC,gBAAgB,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK;gBAClD,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,WAAW,CAAC,MAAM,IAAI,0BAA0B,uBAAuB,EAAE;gBAC1F,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,CAAC,gBAAgB,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ;gBACrD,CAAC,CAAC,EAAE,IAAI,EAAE,mDAAmD,EAAE;gBAC/D,CAAC,CAAC,EAAE,CAAC;SACN;QACD,WAAW,CAAC,MAAM,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,iBAAiB,CAAC;QAClF,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;QAChE,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,4BAA4B,EAAE,iBAAiB,CAAC;QACnF;YACC,IAAI,EAAE,iBAAiB;YACvB,EAAE,EACD,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC;gBAC5C,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC;YAC7D,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc;SAC/C;QACD,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAChC,CAAC,IAAI,EAAE,EAAE,CACR,CAAC;YACA,IAAI,EAAE,gBAAgB,IAAI,CAAC,EAAE,EAAE;YAC/B,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAClE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;SACxB,CAAuB,CACzB;QACD;YACC,IAAI,EAAE,YAAY;YAClB,EAAE,EAAE,aAAa,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;YAC5C,GAAG,CAAC,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;gBAC1C,CAAC,CAAC,EAAE,IAAI,EAAE,oCAAoC,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;SACN;QACD;YACC,IAAI,EAAE,eAAe;YACrB,EAAE,EAAE,gBAAgB,IAAI,sBAAsB;SAC9C;KACD,CAAC;IAEF,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM;KACN,CAAC;AACH,CAAC"}

package/dist/operations/upgrade-zone.d.ts

@@ -0,0 +1,13 @@
+import type { SystemConfig } from '../config/system-config.js';
+export declare function runControllerUpgrade(options: {
+    readonly systemConfig: SystemConfig;
+    readonly zoneId: string;
+}, dependencies: {
+    readonly rebuildGatewayImage: (zoneId: string) => Promise<void>;
+    readonly restartGatewayZone: (zoneId: string) => Promise<void>;
+    readonly stopGatewayZone: (zoneId: string) => Promise<void>;
+}): Promise<{
+    readonly ok: true;
+    readonly zoneId: string;
+}>;
+//# sourceMappingURL=upgrade-zone.d.ts.map

package/dist/operations/upgrade-zone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-zone.d.ts","sourceRoot":"","sources":["../../src/operations/upgrade-zone.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,wBAAsB,oBAAoB,CACzC,OAAO,EAAE;IACR,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,EACD,YAAY,EAAE;IACb,QAAQ,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D,GACC,OAAO,CAAC;IACV,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,CAAC,CAUD"}

package/dist/operations/upgrade-zone.js

@@ -0,0 +1,11 @@
+export async function runControllerUpgrade(options, dependencies) {
+    void options.systemConfig;
+    await dependencies.rebuildGatewayImage(options.zoneId);
+    await dependencies.stopGatewayZone(options.zoneId);
+    await dependencies.restartGatewayZone(options.zoneId);
+    return {
+        ok: true,
+        zoneId: options.zoneId,
+    };
+}
+//# sourceMappingURL=upgrade-zone.js.map

package/dist/operations/upgrade-zone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-zone.js","sourceRoot":"","sources":["../../src/operations/upgrade-zone.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,OAGC,EACD,YAIC;IAKD,KAAK,OAAO,CAAC,YAAY,CAAC;IAC1B,MAAM,YAAY,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtD,OAAO;QACN,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACH,CAAC"}

package/dist/operations/zone-logs.d.ts

@@ -0,0 +1,9 @@
+export declare function runControllerLogs(options: {
+    readonly zoneId: string;
+}, dependencies: {
+    readonly readGatewayLogs: (zoneId: string) => Promise<string>;
+}): Promise<{
+    readonly output: string;
+    readonly zoneId: string;
+}>;
+//# sourceMappingURL=zone-logs.d.ts.map

package/dist/operations/zone-logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-logs.d.ts","sourceRoot":"","sources":["../../src/operations/zone-logs.ts"],"names":[],"mappings":"AAAA,wBAAsB,iBAAiB,CACtC,OAAO,EAAE;IACR,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,EACD,YAAY,EAAE;IACb,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9D,GACC,OAAO,CAAC;IACV,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,CAAC,CAKD"}

package/dist/operations/zone-logs.js

@@ -0,0 +1,7 @@
+export async function runControllerLogs(options, dependencies) {
+    return {
+        output: await dependencies.readGatewayLogs(options.zoneId),
+        zoneId: options.zoneId,
+    };
+}
+//# sourceMappingURL=zone-logs.js.map

package/dist/operations/zone-logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-logs.js","sourceRoot":"","sources":["../../src/operations/zone-logs.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAEC,EACD,YAEC;IAKD,OAAO;QACN,MAAM,EAAE,MAAM,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;QAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC;AACH,CAAC"}

package/dist/shared/run-task.d.ts

@@ -0,0 +1,3 @@
+export type RunTaskFn = (title: string, fn: () => Promise<void>) => Promise<void>;
+export declare function runTaskWithResult<TResult>(runTaskStep: RunTaskFn, title: string, fn: () => Promise<TResult>): Promise<TResult>;
+//# sourceMappingURL=run-task.d.ts.map

package/dist/shared/run-task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-task.d.ts","sourceRoot":"","sources":["../../src/shared/run-task.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAElF,wBAAsB,iBAAiB,CAAC,OAAO,EAC9C,WAAW,EAAE,SAAS,EACtB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GACxB,OAAO,CAAC,OAAO,CAAC,CAUlB"}

package/dist/shared/run-task.js

@@ -0,0 +1,12 @@
+export async function runTaskWithResult(runTaskStep, title, fn) {
+    const noResult = Symbol(title);
+    let taskResult = noResult;
+    await runTaskStep(title, async () => {
+        taskResult = await fn();
+    });
+    if (taskResult === noResult) {
+        throw new Error(`Task '${title}' did not produce a result.`);
+    }
+    return taskResult;
+}
+//# sourceMappingURL=run-task.js.map

package/dist/shared/run-task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-task.js","sourceRoot":"","sources":["../../src/shared/run-task.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,WAAsB,EACtB,KAAa,EACb,EAA0B;IAE1B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,UAAU,GAA8B,QAAQ,CAAC;IACrD,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QACnC,UAAU,GAAG,MAAM,EAAE,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,6BAA6B,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC"}

package/dist/tool-vm/tool-vm-lifecycle.d.ts

@@ -0,0 +1,27 @@
+import { createManagedVm as createManagedVmFromCore, type ManagedVm } from '@shravansunder/agent-vm-gondolin-core';
+import { buildGondolinImage as buildGondolinImageDefault } from '../build/gondolin-image-builder.js';
+import type { SystemConfig } from '../config/system-config.js';
+import type { ToolProfile } from '../controller/leases/lease-manager.js';
+export interface ToolVmLifecycleDependencies {
+    readonly buildGondolinImage?: (options: {
+        readonly buildConfigPath: string;
+        readonly cacheDir: string;
+        readonly fullReset?: boolean;
+    }) => ReturnType<typeof buildGondolinImageDefault>;
+    readonly createManagedVm?: typeof createManagedVmFromCore;
+}
+export declare function resolveToolVmWorkspaceDirectory(options: {
+    readonly profile: ToolProfile;
+    readonly tcpSlot: number;
+    readonly zoneId: string;
+}): string;
+export declare function cleanToolVmWorkspace(workspaceDirectory: string): Promise<void>;
+export declare function createToolVm(options: {
+    readonly cacheDir: string;
+    readonly profile: ToolProfile;
+    readonly systemConfig: SystemConfig;
+    readonly tcpSlot: number;
+    readonly workspaceDir: string;
+    readonly zoneId: string;
+}, dependencies?: ToolVmLifecycleDependencies): Promise<ManagedVm>;
+//# sourceMappingURL=tool-vm-lifecycle.d.ts.map

package/dist/tool-vm/tool-vm-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-vm-lifecycle.d.ts","sourceRoot":"","sources":["../../src/tool-vm/tool-vm-lifecycle.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,eAAe,IAAI,uBAAuB,EAC1C,KAAK,SAAS,EACd,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,kBAAkB,IAAI,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AACrG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AAEzE,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;KAC7B,KAAK,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC;IACnD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,uBAAuB,CAAC;CAC1D;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACxD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAET;AAED,wBAAsB,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAepF;AAED,wBAAsB,YAAY,CACjC,OAAO,EAAE;IACR,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,EACD,YAAY,GAAE,2BAAgC,GAC5C,OAAO,CAAC,SAAS,CAAC,CAgCpB"}