@slopus/happy-agent-supervisor 0.0.12-win32-x64 → 0.0.12

package/dist/SupervisorPolicy.d.ts

@@ -0,0 +1,77 @@
+import { type Static } from "@sinclair/typebox";
+export declare const supervisorPermissionModeSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"read_only">, import("@sinclair/typebox").TLiteral<"workspace_write">, import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<"full_access">]>;
+export type SupervisorPermissionMode = Static<typeof supervisorPermissionModeSchema>;
+export declare const supervisorProxyFrontEndSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"http">, import("@sinclair/typebox").TLiteral<"socks5">]>;
+export type SupervisorProxyFrontEnd = Static<typeof supervisorProxyFrontEndSchema>;
+/**
+ * The front-ends to expose inside the sandbox.
+ *
+ * The supervisor provides the proxy itself. It forks an egress process before the sandbox exists
+ * and joins the two with a socketpair, so nothing inside the sandbox reaches the proxy — or
+ * anything else — by address, and the caller supplies neither a descriptor nor a token. Which hosts
+ * that egress process may reach comes from `network.allowedHosts`.
+ */
+export declare const supervisorOutgoingProxySchema: import("@sinclair/typebox").TObject<{
+    frontEnds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"http">, import("@sinclair/typebox").TLiteral<"socks5">]>>;
+}>;
+export type SupervisorOutgoingProxy = Static<typeof supervisorOutgoingProxySchema>;
+export declare const supervisorNetworkPolicySchema: import("@sinclair/typebox").TObject<{
+    egress: import("@sinclair/typebox").TBoolean;
+    allowedHosts: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    localBinding: import("@sinclair/typebox").TBoolean;
+    outgoingProxy: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        frontEnds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"http">, import("@sinclair/typebox").TLiteral<"socks5">]>>;
+    }>>;
+}>;
+export type SupervisorNetworkPolicy = Static<typeof supervisorNetworkPolicySchema>;
+/**
+ * The native supervisor's input. Its names intentionally match ComputePermissions one-for-one.
+ *
+ * The working directory is the workspace root for `workspace_write` and `auto`; keeping it out of
+ * the document prevents two sources of truth for the process cwd. A non-empty `allowedHosts`
+ * requires `network.outgoingProxy`, because the host list is enforced in the egress process the
+ * proxy creates, and without a proxy there would be nothing enforcing it. Each entry names one host
+ * or one `*.suffix`; a bare `*` is refused, and open egress is expressed by configuring no proxy.
+ */
+export declare const supervisorPolicySchema: import("@sinclair/typebox").TObject<{
+    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"read_only">, import("@sinclair/typebox").TLiteral<"workspace_write">, import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<"full_access">]>;
+    allowedReadPaths: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    deniedReadPaths: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    allowedWritePaths: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    deniedWritePaths: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    /** Windows placeholder type for protected project files that may be absent. */
+    deniedWriteFilePaths: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    network: import("@sinclair/typebox").TObject<{
+        egress: import("@sinclair/typebox").TBoolean;
+        allowedHosts: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        localBinding: import("@sinclair/typebox").TBoolean;
+        outgoingProxy: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            frontEnds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"http">, import("@sinclair/typebox").TLiteral<"socks5">]>>;
+        }>>;
+    }>;
+    /** Mandatory service isolation; never interpreted as ordinary shell permissions. */
+    service: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        root: import("@sinclair/typebox").TString;
+        cwd: import("@sinclair/typebox").TString;
+        inputs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            source: import("@sinclair/typebox").TString;
+            destination: import("@sinclair/typebox").TString;
+        }>>;
+        scratch: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        cgroupParent: import("@sinclair/typebox").TString;
+        executionId: import("@sinclair/typebox").TString;
+        controllerPid: import("@sinclair/typebox").TInteger;
+        bridgeSocket: import("@sinclair/typebox").TString;
+        bridgeToken: import("@sinclair/typebox").TString;
+        port: import("@sinclair/typebox").TInteger;
+        memoryMiB: import("@sinclair/typebox").TInteger;
+        processes: import("@sinclair/typebox").TInteger;
+        outbound: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            hostname: import("@sinclair/typebox").TString;
+            port: import("@sinclair/typebox").TInteger;
+        }>>;
+    }>>;
+}>;
+export type SupervisorPolicy = Static<typeof supervisorPolicySchema>;
+export declare function parseSupervisorPolicy(value: unknown): SupervisorPolicy;
+//# sourceMappingURL=SupervisorPolicy.d.ts.map

package/dist/SupervisorPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupervisorPolicy.d.ts","sourceRoot":"","sources":["../sources/SupervisorPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAItD,eAAO,MAAM,8BAA8B,qPAKzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAErF,eAAO,MAAM,6BAA6B,oIAGxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;EAKzC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF,eAAO,MAAM,6BAA6B;;;;;;;EAQzC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB;;;;;;IAO3B,+EAA+E;;;;;;;;;;IAG/E,oFAAoF;;;;;;;;;;;;;;;;;;;;;;EAI3F,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAQtE"}

package/dist/SupervisorPolicy.js

@@ -0,0 +1,61 @@
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+import { supervisorServicePolicySchema } from "./SupervisorServicePolicy.js";
+export const supervisorPermissionModeSchema = Type.Union([
+    Type.Literal("read_only"),
+    Type.Literal("workspace_write"),
+    Type.Literal("auto"),
+    Type.Literal("full_access"),
+]);
+export const supervisorProxyFrontEndSchema = Type.Union([
+    Type.Literal("http"),
+    Type.Literal("socks5"),
+]);
+/**
+ * The front-ends to expose inside the sandbox.
+ *
+ * The supervisor provides the proxy itself. It forks an egress process before the sandbox exists
+ * and joins the two with a socketpair, so nothing inside the sandbox reaches the proxy — or
+ * anything else — by address, and the caller supplies neither a descriptor nor a token. Which hosts
+ * that egress process may reach comes from `network.allowedHosts`.
+ */
+export const supervisorOutgoingProxySchema = Type.Object({
+    frontEnds: Type.Array(supervisorProxyFrontEndSchema, { minItems: 1 }),
+}, { additionalProperties: false });
+export const supervisorNetworkPolicySchema = Type.Object({
+    egress: Type.Boolean(),
+    allowedHosts: Type.Optional(Type.Array(Type.String())),
+    localBinding: Type.Boolean(),
+    outgoingProxy: Type.Optional(supervisorOutgoingProxySchema),
+}, { additionalProperties: false });
+/**
+ * The native supervisor's input. Its names intentionally match ComputePermissions one-for-one.
+ *
+ * The working directory is the workspace root for `workspace_write` and `auto`; keeping it out of
+ * the document prevents two sources of truth for the process cwd. A non-empty `allowedHosts`
+ * requires `network.outgoingProxy`, because the host list is enforced in the egress process the
+ * proxy creates, and without a proxy there would be nothing enforcing it. Each entry names one host
+ * or one `*.suffix`; a bare `*` is refused, and open egress is expressed by configuring no proxy.
+ */
+export const supervisorPolicySchema = Type.Object({
+    mode: supervisorPermissionModeSchema,
+    allowedReadPaths: Type.Optional(Type.Array(Type.String())),
+    deniedReadPaths: Type.Optional(Type.Array(Type.String())),
+    allowedWritePaths: Type.Optional(Type.Array(Type.String())),
+    deniedWritePaths: Type.Optional(Type.Array(Type.String())),
+    /** Windows placeholder type for protected project files that may be absent. */
+    deniedWriteFilePaths: Type.Optional(Type.Array(Type.String())),
+    network: supervisorNetworkPolicySchema,
+    /** Mandatory service isolation; never interpreted as ordinary shell permissions. */
+    service: Type.Optional(supervisorServicePolicySchema),
+}, { additionalProperties: false });
+export function parseSupervisorPolicy(value) {
+    if (!Value.Check(supervisorPolicySchema, value)) {
+        const details = [...Value.Errors(supervisorPolicySchema, value)]
+            .map((error) => `${error.path || "/"} ${error.message}`)
+            .join("; ");
+        throw new Error(`Invalid supervisor policy: ${details}`);
+    }
+    return Value.Parse(supervisorPolicySchema, value);
+}
+//# sourceMappingURL=SupervisorPolicy.js.map

package/dist/SupervisorPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupervisorPolicy.js","sourceRoot":"","sources":["../sources/SupervisorPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACpB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;CAC9B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACpB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;CACzB,CAAC,CAAC;AAIH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CACpD;IACI,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;CACxE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,CAAC;AAIF,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CACpD;IACI,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE;IACtB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE;IAC5B,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CAC9D,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,CAAC;AAIF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAC7C;IACI,IAAI,EAAE,8BAA8B;IACpC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,+EAA+E;IAC/E,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO,EAAE,6BAA6B;IACtC,oFAAoF;IACpF,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CACxD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,CAAC;AAIF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;aAC3D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;aACvD,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC"}

package/dist/SupervisorServicePolicy.d.ts

@@ -0,0 +1,25 @@
+import { type Static } from "@sinclair/typebox";
+/** Trusted controller input, never a model-facing policy or service resource. */
+export declare const supervisorServicePolicySchema: import("@sinclair/typebox").TObject<{
+    root: import("@sinclair/typebox").TString;
+    cwd: import("@sinclair/typebox").TString;
+    inputs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        source: import("@sinclair/typebox").TString;
+        destination: import("@sinclair/typebox").TString;
+    }>>;
+    scratch: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    cgroupParent: import("@sinclair/typebox").TString;
+    executionId: import("@sinclair/typebox").TString;
+    controllerPid: import("@sinclair/typebox").TInteger;
+    bridgeSocket: import("@sinclair/typebox").TString;
+    bridgeToken: import("@sinclair/typebox").TString;
+    port: import("@sinclair/typebox").TInteger;
+    memoryMiB: import("@sinclair/typebox").TInteger;
+    processes: import("@sinclair/typebox").TInteger;
+    outbound: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        hostname: import("@sinclair/typebox").TString;
+        port: import("@sinclair/typebox").TInteger;
+    }>>;
+}>;
+export type SupervisorServicePolicy = Static<typeof supervisorServicePolicySchema>;
+//# sourceMappingURL=SupervisorServicePolicy.d.ts.map

package/dist/SupervisorServicePolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupervisorServicePolicy.d.ts","sourceRoot":"","sources":["../sources/SupervisorServicePolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEtD,iFAAiF;AACjF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;EAmCzC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/SupervisorServicePolicy.js

@@ -0,0 +1,24 @@
+import { Type } from "@sinclair/typebox";
+/** Trusted controller input, never a model-facing policy or service resource. */
+export const supervisorServicePolicySchema = Type.Object({
+    root: Type.String({ minLength: 2 }),
+    cwd: Type.String({ minLength: 1 }),
+    inputs: Type.Array(Type.Object({
+        source: Type.String({ minLength: 2 }),
+        destination: Type.String({ minLength: 1 }),
+    }, { additionalProperties: false }), { minItems: 1, maxItems: 128 }),
+    scratch: Type.Array(Type.String({ minLength: 1 }), { maxItems: 32 }),
+    cgroupParent: Type.String({ minLength: 2 }),
+    executionId: Type.String({ pattern: "^[a-z0-9]{16,64}$" }),
+    controllerPid: Type.Integer({ minimum: 2, maximum: 2147483647 }),
+    bridgeSocket: Type.String({ minLength: 2, maxLength: 100 }),
+    bridgeToken: Type.String({ pattern: "^[a-f0-9]{64}$" }),
+    port: Type.Integer({ minimum: 1024, maximum: 65535 }),
+    memoryMiB: Type.Integer({ minimum: 128, maximum: 1024 }),
+    processes: Type.Integer({ minimum: 1, maximum: 64 }),
+    outbound: Type.Array(Type.Object({
+        hostname: Type.String({ minLength: 1, maxLength: 253 }),
+        port: Type.Integer({ minimum: 1, maximum: 65535 }),
+    }, { additionalProperties: false }), { maxItems: 32 }),
+}, { additionalProperties: false });
+//# sourceMappingURL=SupervisorServicePolicy.js.map

package/dist/SupervisorServicePolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupervisorServicePolicy.js","sourceRoot":"","sources":["../sources/SupervisorServicePolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AAEtD,iFAAiF;AACjF,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CACpD;IACI,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACnC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAClC,MAAM,EAAE,IAAI,CAAC,KAAK,CACd,IAAI,CAAC,MAAM,CACP;QACI,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACrC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;KAC7C,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,EACD,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CACjC;IACD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC3C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC1D,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAChE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC3D,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IACvD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACrD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpD,QAAQ,EAAE,IAAI,CAAC,KAAK,CAChB,IAAI,CAAC,MAAM,CACP;QACI,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACvD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;KACrD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,EACD,EAAE,QAAQ,EAAE,EAAE,EAAE,CACnB;CACJ,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,CAAC"}

package/dist/impl/resolveBinaryForTarget.d.ts

@@ -0,0 +1,3 @@
+import { type PlatformKey } from "../platform.js";
+export declare function resolveBinaryForTarget(key: PlatformKey, binaryPath?: string): string;
+//# sourceMappingURL=resolveBinaryForTarget.d.ts.map

package/dist/impl/resolveBinaryForTarget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveBinaryForTarget.d.ts","sourceRoot":"","sources":["../../sources/impl/resolveBinaryForTarget.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAIpE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAwCpF"}

package/dist/impl/resolveBinaryForTarget.js

@@ -0,0 +1,39 @@
+import { existsSync } from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { PLATFORM_TARGETS } from "../platform.js";
+const require = createRequire(import.meta.url);
+export function resolveBinaryForTarget(key, binaryPath) {
+    if (binaryPath !== undefined) {
+        const explicit = path.resolve(binaryPath);
+        if (!existsSync(explicit)) {
+            throw new Error(`Happy agent supervisor binary does not exist: ${explicit}`);
+        }
+        return explicit;
+    }
+    const platform = PLATFORM_TARGETS[key];
+    const executable = platform.os === "win32" ? "happy-agent-supervisor.exe" : "happy-agent-supervisor";
+    try {
+        const manifest = require.resolve(`${platform.alias}/package.json`);
+        const installed = path.join(path.dirname(manifest), "vendor", platform.target, "bin", executable);
+        if (existsSync(installed))
+            return installed;
+    }
+    catch {
+        // Fall through to repository-local native build locations.
+    }
+    const packageRoot = fileURLToPath(new URL("../../", import.meta.url));
+    const localCandidates = [
+        path.join(packageRoot, "native", "target", platform.target, "release", executable),
+        path.join(packageRoot, "native", "target", platform.target, "debug", executable),
+        path.join(packageRoot, "native", "target", "release", executable),
+        path.join(packageRoot, "native", "target", "debug", executable),
+    ];
+    const local = localCandidates.find((candidate) => existsSync(candidate));
+    if (local !== undefined)
+        return local;
+    throw new Error(`The optional binary package ${platform.alias} is missing. Reinstall ` +
+        "@slopus/happy-agent-supervisor or build the matching native target.");
+}
+//# sourceMappingURL=resolveBinaryForTarget.js.map

package/dist/impl/resolveBinaryForTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveBinaryForTarget.js","sourceRoot":"","sources":["../../sources/impl/resolveBinaryForTarget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAoB,MAAM,gBAAgB,CAAC;AAEpE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,MAAM,UAAU,sBAAsB,CAAC,GAAgB,EAAE,UAAmB;IACxE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,UAAU,GACZ,QAAQ,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,wBAAwB,CAAC;IACtF,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,eAAe,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EACtB,QAAQ,EACR,QAAQ,CAAC,MAAM,EACf,KAAK,EACL,UAAU,CACb,CAAC;QACF,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACL,2DAA2D;IAC/D,CAAC;IAED,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,MAAM,eAAe,GAAG;QACpB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC;KAClE,CAAC;IACF,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACzE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,IAAI,KAAK,CACX,+BAA+B,QAAQ,CAAC,KAAK,yBAAyB;QAClE,qEAAqE,CAC5E,CAAC;AACN,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { parseSupervisorPolicy, supervisorNetworkPolicySchema, supervisorPermissionModeSchema, supervisorPolicySchema, type SupervisorNetworkPolicy, type SupervisorPermissionMode, type SupervisorPolicy, } from "./SupervisorPolicy.js";
+export { linuxSupervisorArchitectureSchema, type LinuxSupervisorArchitecture } from "./platform.js";
+export { resolveLinuxSupervisorBinary } from "./resolveLinuxSupervisorBinary.js";
+export { resolveSupervisorBinary } from "./resolveSupervisorBinary.js";
+export { supervisorServicePolicySchema, type SupervisorServicePolicy, } from "./SupervisorServicePolicy.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,EACrB,6BAA6B,EAC7B,8BAA8B,EAC9B,sBAAsB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iCAAiC,EAAE,KAAK,2BAA2B,EAAE,MAAM,eAAe,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACH,6BAA6B,EAC7B,KAAK,uBAAuB,GAC/B,MAAM,8BAA8B,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { parseSupervisorPolicy, supervisorNetworkPolicySchema, supervisorPermissionModeSchema, supervisorPolicySchema, } from "./SupervisorPolicy.js";
+export { linuxSupervisorArchitectureSchema } from "./platform.js";
+export { resolveLinuxSupervisorBinary } from "./resolveLinuxSupervisorBinary.js";
+export { resolveSupervisorBinary } from "./resolveSupervisorBinary.js";
+export { supervisorServicePolicySchema, } from "./SupervisorServicePolicy.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,EACrB,6BAA6B,EAC7B,8BAA8B,EAC9B,sBAAsB,GAIzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iCAAiC,EAAoC,MAAM,eAAe,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACH,6BAA6B,GAEhC,MAAM,8BAA8B,CAAC"}

package/dist/platform.d.ts

@@ -0,0 +1,43 @@
+import { type Static } from "@sinclair/typebox";
+export declare const PLATFORM_TARGETS: {
+    readonly "win32-x64": {
+        readonly alias: "@slopus/happy-agent-supervisor-win32-x64";
+        readonly arch: "x64";
+        readonly os: "win32";
+        readonly tag: "win32-x64";
+        readonly target: "x86_64-pc-windows-gnu";
+    };
+    readonly "darwin-arm64": {
+        readonly alias: "@slopus/happy-agent-supervisor-darwin-arm64";
+        readonly arch: "arm64";
+        readonly os: "darwin";
+        readonly tag: "darwin-arm64";
+        readonly target: "aarch64-apple-darwin";
+    };
+    readonly "darwin-x64": {
+        readonly alias: "@slopus/happy-agent-supervisor-darwin-x64";
+        readonly arch: "x64";
+        readonly os: "darwin";
+        readonly tag: "darwin-x64";
+        readonly target: "x86_64-apple-darwin";
+    };
+    readonly "linux-arm64": {
+        readonly alias: "@slopus/happy-agent-supervisor-linux-arm64";
+        readonly arch: "arm64";
+        readonly os: "linux";
+        readonly tag: "linux-arm64";
+        readonly target: "aarch64-unknown-linux-musl";
+    };
+    readonly "linux-x64": {
+        readonly alias: "@slopus/happy-agent-supervisor-linux-x64";
+        readonly arch: "x64";
+        readonly os: "linux";
+        readonly tag: "linux-x64";
+        readonly target: "x86_64-unknown-linux-musl";
+    };
+};
+export type PlatformKey = keyof typeof PLATFORM_TARGETS;
+export declare const linuxSupervisorArchitectureSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"amd64">, import("@sinclair/typebox").TLiteral<"x64">, import("@sinclair/typebox").TLiteral<"x86_64">, import("@sinclair/typebox").TLiteral<"arm64">, import("@sinclair/typebox").TLiteral<"aarch64">]>;
+/** Architecture spellings used by OCI, Node.js, and Rust target triples. */
+export type LinuxSupervisorArchitecture = Static<typeof linuxSupervisorArchitectureSchema>;
+//# sourceMappingURL=platform.d.ts.map

package/dist/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../sources/platform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAEtD,eAAO,MAAM,gBAAgB;aACzB,WAAW;iBACP,KAAK,EAAE,0CAA0C;iBACjD,IAAI,EAAE,KAAK;iBACX,EAAE,EAAE,OAAO;iBACX,GAAG,EAAE,WAAW;iBAChB,MAAM,EAAE,uBAAuB;;aAEnC,cAAc;iBACV,KAAK,EAAE,6CAA6C;iBACpD,IAAI,EAAE,OAAO;iBACb,EAAE,EAAE,QAAQ;iBACZ,GAAG,EAAE,cAAc;iBACnB,MAAM,EAAE,sBAAsB;;aAElC,YAAY;iBACR,KAAK,EAAE,2CAA2C;iBAClD,IAAI,EAAE,KAAK;iBACX,EAAE,EAAE,QAAQ;iBACZ,GAAG,EAAE,YAAY;iBACjB,MAAM,EAAE,qBAAqB;;aAEjC,aAAa;iBACT,KAAK,EAAE,4CAA4C;iBACnD,IAAI,EAAE,OAAO;iBACb,EAAE,EAAE,OAAO;iBACX,GAAG,EAAE,aAAa;iBAClB,MAAM,EAAE,4BAA4B;;aAExC,WAAW;iBACP,KAAK,EAAE,0CAA0C;iBACjD,IAAI,EAAE,KAAK;iBACX,EAAE,EAAE,OAAO;iBACX,GAAG,EAAE,WAAW;iBAChB,MAAM,EAAE,2BAA2B;;CAEjC,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAExD,eAAO,MAAM,iCAAiC,kRAM5C,CAAC;AAEH,4EAA4E;AAC5E,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC"}

package/dist/platform.js

@@ -0,0 +1,46 @@
+import { Type } from "@sinclair/typebox";
+export const PLATFORM_TARGETS = {
+    "win32-x64": {
+        alias: "@slopus/happy-agent-supervisor-win32-x64",
+        arch: "x64",
+        os: "win32",
+        tag: "win32-x64",
+        target: "x86_64-pc-windows-gnu",
+    },
+    "darwin-arm64": {
+        alias: "@slopus/happy-agent-supervisor-darwin-arm64",
+        arch: "arm64",
+        os: "darwin",
+        tag: "darwin-arm64",
+        target: "aarch64-apple-darwin",
+    },
+    "darwin-x64": {
+        alias: "@slopus/happy-agent-supervisor-darwin-x64",
+        arch: "x64",
+        os: "darwin",
+        tag: "darwin-x64",
+        target: "x86_64-apple-darwin",
+    },
+    "linux-arm64": {
+        alias: "@slopus/happy-agent-supervisor-linux-arm64",
+        arch: "arm64",
+        os: "linux",
+        tag: "linux-arm64",
+        target: "aarch64-unknown-linux-musl",
+    },
+    "linux-x64": {
+        alias: "@slopus/happy-agent-supervisor-linux-x64",
+        arch: "x64",
+        os: "linux",
+        tag: "linux-x64",
+        target: "x86_64-unknown-linux-musl",
+    },
+};
+export const linuxSupervisorArchitectureSchema = Type.Union([
+    Type.Literal("amd64"),
+    Type.Literal("x64"),
+    Type.Literal("x86_64"),
+    Type.Literal("arm64"),
+    Type.Literal("aarch64"),
+]);
+//# sourceMappingURL=platform.js.map

package/dist/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../sources/platform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC5B,WAAW,EAAE;QACT,KAAK,EAAE,0CAA0C;QACjD,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,OAAO;QACX,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,uBAAuB;KAClC;IACD,cAAc,EAAE;QACZ,KAAK,EAAE,6CAA6C;QACpD,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,QAAQ;QACZ,GAAG,EAAE,cAAc;QACnB,MAAM,EAAE,sBAAsB;KACjC;IACD,YAAY,EAAE;QACV,KAAK,EAAE,2CAA2C;QAClD,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,QAAQ;QACZ,GAAG,EAAE,YAAY;QACjB,MAAM,EAAE,qBAAqB;KAChC;IACD,aAAa,EAAE;QACX,KAAK,EAAE,4CAA4C;QACnD,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,4BAA4B;KACvC;IACD,WAAW,EAAE;QACT,KAAK,EAAE,0CAA0C;QACjD,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,OAAO;QACX,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,2BAA2B;KACtC;CACK,CAAC;AAIX,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC,KAAK,CAAC;IACxD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IACnB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IACtB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;CAC1B,CAAC,CAAC"}

package/dist/resolveLinuxSupervisorBinary.d.ts

@@ -0,0 +1,3 @@
+import { type LinuxSupervisorArchitecture } from "./platform.js";
+export declare function resolveLinuxSupervisorBinary(architecture: LinuxSupervisorArchitecture, binaryPath?: string): string;
+//# sourceMappingURL=resolveLinuxSupervisorBinary.d.ts.map

package/dist/resolveLinuxSupervisorBinary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveLinuxSupervisorBinary.d.ts","sourceRoot":"","sources":["../sources/resolveLinuxSupervisorBinary.ts"],"names":[],"mappings":"AAEA,OAAO,EAEH,KAAK,2BAA2B,EAEnC,MAAM,eAAe,CAAC;AAGvB,wBAAgB,4BAA4B,CACxC,YAAY,EAAE,2BAA2B,EACzC,UAAU,CAAC,EAAE,MAAM,GACpB,MAAM,CAOR"}

package/dist/resolveLinuxSupervisorBinary.js

@@ -0,0 +1,11 @@
+import { Value } from "@sinclair/typebox/value";
+import { linuxSupervisorArchitectureSchema, } from "./platform.js";
+import { resolveBinaryForTarget } from "./impl/resolveBinaryForTarget.js";
+export function resolveLinuxSupervisorBinary(architecture, binaryPath) {
+    if (!Value.Check(linuxSupervisorArchitectureSchema, architecture)) {
+        throw new Error(`Unsupported Linux supervisor architecture: ${String(architecture)}.`);
+    }
+    const key = architecture === "arm64" || architecture === "aarch64" ? "linux-arm64" : "linux-x64";
+    return resolveBinaryForTarget(key, binaryPath);
+}
+//# sourceMappingURL=resolveLinuxSupervisorBinary.js.map

package/dist/resolveLinuxSupervisorBinary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveLinuxSupervisorBinary.js","sourceRoot":"","sources":["../sources/resolveLinuxSupervisorBinary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAEhD,OAAO,EACH,iCAAiC,GAGpC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,MAAM,UAAU,4BAA4B,CACxC,YAAyC,EACzC,UAAmB;IAEnB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iCAAiC,EAAE,YAAY,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,GAAG,GACL,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;IACzF,OAAO,sBAAsB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC"}

package/dist/resolveSupervisorBinary.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveSupervisorBinary(binaryPath?: string): string;
+//# sourceMappingURL=resolveSupervisorBinary.d.ts.map

package/dist/resolveSupervisorBinary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSupervisorBinary.d.ts","sourceRoot":"","sources":["../sources/resolveSupervisorBinary.ts"],"names":[],"mappings":"AAGA,wBAAgB,uBAAuB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAcnE"}

package/dist/resolveSupervisorBinary.js

@@ -0,0 +1,14 @@
+import {} from "./platform.js";
+import { resolveBinaryForTarget } from "./impl/resolveBinaryForTarget.js";
+export function resolveSupervisorBinary(binaryPath) {
+    const key = `${process.platform}-${process.arch}`;
+    if (key !== "darwin-arm64" &&
+        key !== "darwin-x64" &&
+        key !== "linux-arm64" &&
+        key !== "linux-x64" &&
+        key !== "win32-x64") {
+        throw new Error(`The Happy agent supervisor does not support ${process.platform} ${process.arch}.`);
+    }
+    return resolveBinaryForTarget(key, binaryPath);
+}
+//# sourceMappingURL=resolveSupervisorBinary.js.map

package/dist/resolveSupervisorBinary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSupervisorBinary.js","sourceRoot":"","sources":["../sources/resolveSupervisorBinary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,MAAM,UAAU,uBAAuB,CAAC,UAAmB;IACvD,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAiB,CAAC;IACjE,IACI,GAAG,KAAK,cAAc;QACtB,GAAG,KAAK,YAAY;QACpB,GAAG,KAAK,aAAa;QACrB,GAAG,KAAK,WAAW;QACnB,GAAG,KAAK,WAAW,EACrB,CAAC;QACC,MAAM,IAAI,KAAK,CACX,+CAA+C,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,GAAG,CACrF,CAAC;IACN,CAAC;IACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC"}

package/package.json

@@ -1,33 +1,46 @@
 {
   "name": "@slopus/happy-agent-supervisor",
-  "version": "0.0.12-win32-x64",
-  "description": "Trusted native sandbox boundary for Happy agent workloads. Native binary for win32-x64.",
+  "version": "0.0.12",
+  "description": "Trusted native sandbox boundary for Happy agent workloads.",
+  "keywords": [
+    "sandbox",
+    "seatbelt",
+    "seccomp",
+    "supervisor"
+  ],
   "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/slopus/happy-agent.git",
     "directory": "packages/happy-agent-supervisor"
   },
-  "engines": {
-    "node": ">=22.19.0"
-  },
-  "os": [
-    "win32"
-  ],
-  "cpu": [
-    "x64"
-  ],
-  "bin": {
-    "happy-agent-supervisor": "vendor/x86_64-pc-windows-gnu/bin/happy-agent-supervisor.exe"
-  },
   "files": [
-    "vendor",
-    "SHA256SUMS",
+    "dist",
     "LICENSE",
     "README.md"
   ],
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
   "publishConfig": {
-    "access": "public",
-    "tag": "platform"
+    "access": "public"
+  },
+  "dependencies": {
+    "@sinclair/typebox": "^0.34.49"
+  },
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "optionalDependencies": {
+    "@slopus/happy-agent-supervisor-win32-x64": "npm:@slopus/happy-agent-supervisor@0.0.12-win32-x64",
+    "@slopus/happy-agent-supervisor-darwin-arm64": "npm:@slopus/happy-agent-supervisor@0.0.12-darwin-arm64",
+    "@slopus/happy-agent-supervisor-darwin-x64": "npm:@slopus/happy-agent-supervisor@0.0.12-darwin-x64",
+    "@slopus/happy-agent-supervisor-linux-arm64": "npm:@slopus/happy-agent-supervisor@0.0.12-linux-arm64",
+    "@slopus/happy-agent-supervisor-linux-x64": "npm:@slopus/happy-agent-supervisor@0.0.12-linux-x64"
   }
 }

package/SHA256SUMS

@@ -1,5 +0,0 @@
-337cbdbe1846b5775b967d727c040ea5038cb708db958dcb6013e735b24fa7f3  vendor/x86_64-pc-windows-gnu/bin/happy-agent-supervisor.exe
-95c8ea67df5db3e7ba3bed1144d279d2894d98c4d590d67993ebae758d4e67f3  vendor/x86_64-pc-windows-gnu/bin/happy-sandbox-runner.exe
-b90b68c953abfa56aae71fbbb0be208beef13ce101d479553e7c223e84d1ed88  vendor/x86_64-pc-windows-gnu/bin/happy-sandbox-setup.exe
-d17f227e4df5da1600391338865ce0f3055211760a36688f816941d58232d8dc  vendor/x86_64-pc-windows-gnu/bin/LICENSE.codex
-9d71575ecfd9a843fc1677b0efb08053c6ba9fd686a0de1a6f5382fd3c220915  vendor/x86_64-pc-windows-gnu/bin/NOTICE.codex

package/vendor/x86_64-pc-windows-gnu/bin/LICENSE.codex

@@ -1,201 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-1.  Definitions.
-
-    "License" shall mean the terms and conditions for use, reproduction,
-    and distribution as defined by Sections 1 through 9 of this document.
-
-    "Licensor" shall mean the copyright owner or entity authorized by
-    the copyright owner that is granting the License.
-
-    "Legal Entity" shall mean the union of the acting entity and all
-    other entities that control, are controlled by, or are under common
-    control with that entity. For the purposes of this definition,
-    "control" means (i) the power, direct or indirect, to cause the
-    direction or management of such entity, whether by contract or
-    otherwise, or (ii) ownership of fifty percent (50%) or more of the
-    outstanding shares, or (iii) beneficial ownership of such entity.
-
-    "You" (or "Your") shall mean an individual or Legal Entity
-    exercising permissions granted by this License.
-
-    "Source" form shall mean the preferred form for making modifications,
-    including but not limited to software source code, documentation
-    source, and configuration files.
-
-    "Object" form shall mean any form resulting from mechanical
-    transformation or translation of a Source form, including but
-    not limited to compiled object code, generated documentation,
-    and conversions to other media types.
-
-    "Work" shall mean the work of authorship, whether in Source or
-    Object form, made available under the License, as indicated by a
-    copyright notice that is included in or attached to the work
-    (an example is provided in the Appendix below).
-
-    "Derivative Works" shall mean any work, whether in Source or Object
-    form, that is based on (or derived from) the Work and for which the
-    editorial revisions, annotations, elaborations, or other modifications
-    represent, as a whole, an original work of authorship. For the purposes
-    of this License, Derivative Works shall not include works that remain
-    separable from, or merely link (or bind by name) to the interfaces of,
-    the Work and Derivative Works thereof.
-
-    "Contribution" shall mean any work of authorship, including
-    the original version of the Work and any modifications or additions
-    to that Work or Derivative Works thereof, that is intentionally
-    submitted to Licensor for inclusion in the Work by the copyright owner
-    or by an individual or Legal Entity authorized to submit on behalf of
-    the copyright owner. For the purposes of this definition, "submitted"
-    means any form of electronic, verbal, or written communication sent
-    to the Licensor or its representatives, including but not limited to
-    communication on electronic mailing lists, source code control systems,
-    and issue tracking systems that are managed by, or on behalf of, the
-    Licensor for the purpose of discussing and improving the Work, but
-    excluding communication that is conspicuously marked or otherwise
-    designated in writing by the copyright owner as "Not a Contribution."
-
-    "Contributor" shall mean Licensor and any individual or Legal Entity
-    on behalf of whom a Contribution has been received by Licensor and
-    subsequently incorporated within the Work.
-
-2.  Grant of Copyright License. Subject to the terms and conditions of
-    this License, each Contributor hereby grants to You a perpetual,
-    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-    copyright license to reproduce, prepare Derivative Works of,
-    publicly display, publicly perform, sublicense, and distribute the
-    Work and such Derivative Works in Source or Object form.
-
-3.  Grant of Patent License. Subject to the terms and conditions of
-    this License, each Contributor hereby grants to You a perpetual,
-    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-    (except as stated in this section) patent license to make, have made,
-    use, offer to sell, sell, import, and otherwise transfer the Work,
-    where such license applies only to those patent claims licensable
-    by such Contributor that are necessarily infringed by their
-    Contribution(s) alone or by combination of their Contribution(s)
-    with the Work to which such Contribution(s) was submitted. If You
-    institute patent litigation against any entity (including a
-    cross-claim or counterclaim in a lawsuit) alleging that the Work
-    or a Contribution incorporated within the Work constitutes direct
-    or contributory patent infringement, then any patent licenses
-    granted to You under this License for that Work shall terminate
-    as of the date such litigation is filed.
-
-4.  Redistribution. You may reproduce and distribute copies of the
-    Work or Derivative Works thereof in any medium, with or without
-    modifications, and in Source or Object form, provided that You
-    meet the following conditions:
-
-    (a) You must give any other recipients of the Work or
-    Derivative Works a copy of this License; and
-
-    (b) You must cause any modified files to carry prominent notices
-    stating that You changed the files; and
-
-    (c) You must retain, in the Source form of any Derivative Works
-    that You distribute, all copyright, patent, trademark, and
-    attribution notices from the Source form of the Work,
-    excluding those notices that do not pertain to any part of
-    the Derivative Works; and
-
-    (d) If the Work includes a "NOTICE" text file as part of its
-    distribution, then any Derivative Works that You distribute must
-    include a readable copy of the attribution notices contained
-    within such NOTICE file, excluding those notices that do not
-    pertain to any part of the Derivative Works, in at least one
-    of the following places: within a NOTICE text file distributed
-    as part of the Derivative Works; within the Source form or
-    documentation, if provided along with the Derivative Works; or,
-    within a display generated by the Derivative Works, if and
-    wherever such third-party notices normally appear. The contents
-    of the NOTICE file are for informational purposes only and
-    do not modify the License. You may add Your own attribution
-    notices within Derivative Works that You distribute, alongside
-    or as an addendum to the NOTICE text from the Work, provided
-    that such additional attribution notices cannot be construed
-    as modifying the License.
-
-    You may add Your own copyright statement to Your modifications and
-    may provide additional or different license terms and conditions
-    for use, reproduction, or distribution of Your modifications, or
-    for any such Derivative Works as a whole, provided Your use,
-    reproduction, and distribution of the Work otherwise complies with
-    the conditions stated in this License.
-
-5.  Submission of Contributions. Unless You explicitly state otherwise,
-    any Contribution intentionally submitted for inclusion in the Work
-    by You to the Licensor shall be under the terms and conditions of
-    this License, without any additional terms or conditions.
-    Notwithstanding the above, nothing herein shall supersede or modify
-    the terms of any separate license agreement you may have executed
-    with Licensor regarding such Contributions.
-
-6.  Trademarks. This License does not grant permission to use the trade
-    names, trademarks, service marks, or product names of the Licensor,
-    except as required for reasonable and customary use in describing the
-    origin of the Work and reproducing the content of the NOTICE file.
-
-7.  Disclaimer of Warranty. Unless required by applicable law or
-    agreed to in writing, Licensor provides the Work (and each
-    Contributor provides its Contributions) on an "AS IS" BASIS,
-    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-    implied, including, without limitation, any warranties or conditions
-    of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-    PARTICULAR PURPOSE. You are solely responsible for determining the
-    appropriateness of using or redistributing the Work and assume any
-    risks associated with Your exercise of permissions under this License.
-
-8.  Limitation of Liability. In no event and under no legal theory,
-    whether in tort (including negligence), contract, or otherwise,
-    unless required by applicable law (such as deliberate and grossly
-    negligent acts) or agreed to in writing, shall any Contributor be
-    liable to You for damages, including any direct, indirect, special,
-    incidental, or consequential damages of any character arising as a
-    result of this License or out of the use or inability to use the
-    Work (including but not limited to damages for loss of goodwill,
-    work stoppage, computer failure or malfunction, or any and all
-    other commercial damages or losses), even if such Contributor
-    has been advised of the possibility of such damages.
-
-9.  Accepting Warranty or Additional Liability. While redistributing
-    the Work or Derivative Works thereof, You may choose to offer,
-    and charge a fee for, acceptance of support, warranty, indemnity,
-    or other liability obligations and/or rights consistent with this
-    License. However, in accepting such obligations, You may act only
-    on Your own behalf and on Your sole responsibility, not on behalf
-    of any other Contributor, and only if You agree to indemnify,
-    defend, and hold each Contributor harmless for any liability
-    incurred by, or claims asserted against, such Contributor by reason
-    of your accepting any such warranty or additional liability.
-
-END OF TERMS AND CONDITIONS
-
-APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-Copyright 2025 OpenAI
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.

package/vendor/x86_64-pc-windows-gnu/bin/NOTICE.codex

@@ -1,6 +0,0 @@
-OpenAI Codex
-Copyright 2025 OpenAI
-
-This project includes code derived from [Ratatui](https://github.com/ratatui/ratatui), licensed under the MIT license.
-Copyright (c) 2016-2022 Florian Dehau
-Copyright (c) 2023-2025 The Ratatui Developers