@slopus/happy-agent-supervisor 0.0.5-linux-x64 → 0.0.5

package/dist/SupervisorPolicy.d.ts

@@ -0,0 +1,53 @@
+import { type Static } from "@sinclair/typebox";
+export declare const supervisorPermissionModeSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"read_only">, import("@sinclair/typebox").TLiteral<"workspace_write">, import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<"full_access">]>;
+export type SupervisorPermissionMode = Static<typeof supervisorPermissionModeSchema>;
+export declare const supervisorProxyFrontEndSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"http">, import("@sinclair/typebox").TLiteral<"socks5">]>;
+export type SupervisorProxyFrontEnd = Static<typeof supervisorProxyFrontEndSchema>;
+/**
+ * The front-ends to expose inside the sandbox.
+ *
+ * The supervisor provides the proxy itself. It forks an egress process before the sandbox exists
+ * and joins the two with a socketpair, so nothing inside the sandbox reaches the proxy — or
+ * anything else — by address, and the caller supplies neither a descriptor nor a token. Which hosts
+ * that egress process may reach comes from `network.allowedHosts`.
+ */
+export declare const supervisorOutgoingProxySchema: import("@sinclair/typebox").TObject<{
+    frontEnds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"http">, import("@sinclair/typebox").TLiteral<"socks5">]>>;
+}>;
+export type SupervisorOutgoingProxy = Static<typeof supervisorOutgoingProxySchema>;
+export declare const supervisorNetworkPolicySchema: import("@sinclair/typebox").TObject<{
+    egress: import("@sinclair/typebox").TBoolean;
+    allowedHosts: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    localBinding: import("@sinclair/typebox").TBoolean;
+    outgoingProxy: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        frontEnds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"http">, import("@sinclair/typebox").TLiteral<"socks5">]>>;
+    }>>;
+}>;
+export type SupervisorNetworkPolicy = Static<typeof supervisorNetworkPolicySchema>;
+/**
+ * The native supervisor's input. Its names intentionally match ComputePermissions one-for-one.
+ *
+ * The working directory is the workspace root for `workspace_write` and `auto`; keeping it out of
+ * the document prevents two sources of truth for the process cwd. A non-empty `allowedHosts`
+ * requires `network.outgoingProxy`, because the host list is enforced in the egress process the
+ * proxy creates, and without a proxy there would be nothing enforcing it. Each entry names one host
+ * or one `*.suffix`; a bare `*` is refused, and open egress is expressed by configuring no proxy.
+ */
+export declare const supervisorPolicySchema: import("@sinclair/typebox").TObject<{
+    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"read_only">, import("@sinclair/typebox").TLiteral<"workspace_write">, import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<"full_access">]>;
+    allowedReadPaths: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    deniedReadPaths: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    allowedWritePaths: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    deniedWritePaths: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    network: import("@sinclair/typebox").TObject<{
+        egress: import("@sinclair/typebox").TBoolean;
+        allowedHosts: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        localBinding: import("@sinclair/typebox").TBoolean;
+        outgoingProxy: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            frontEnds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"http">, import("@sinclair/typebox").TLiteral<"socks5">]>>;
+        }>>;
+    }>;
+}>;
+export type SupervisorPolicy = Static<typeof supervisorPolicySchema>;
+export declare function parseSupervisorPolicy(value: unknown): SupervisorPolicy;
+//# sourceMappingURL=SupervisorPolicy.d.ts.map

package/dist/SupervisorPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupervisorPolicy.d.ts","sourceRoot":"","sources":["../sources/SupervisorPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAGtD,eAAO,MAAM,8BAA8B,qPAKzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAErF,eAAO,MAAM,6BAA6B,oIAGxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;EAKzC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF,eAAO,MAAM,6BAA6B;;;;;;;EAQzC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;EAUlC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAQtE"}

package/dist/SupervisorPolicy.js

@@ -0,0 +1,56 @@
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+export const supervisorPermissionModeSchema = Type.Union([
+    Type.Literal("read_only"),
+    Type.Literal("workspace_write"),
+    Type.Literal("auto"),
+    Type.Literal("full_access"),
+]);
+export const supervisorProxyFrontEndSchema = Type.Union([
+    Type.Literal("http"),
+    Type.Literal("socks5"),
+]);
+/**
+ * The front-ends to expose inside the sandbox.
+ *
+ * The supervisor provides the proxy itself. It forks an egress process before the sandbox exists
+ * and joins the two with a socketpair, so nothing inside the sandbox reaches the proxy — or
+ * anything else — by address, and the caller supplies neither a descriptor nor a token. Which hosts
+ * that egress process may reach comes from `network.allowedHosts`.
+ */
+export const supervisorOutgoingProxySchema = Type.Object({
+    frontEnds: Type.Array(supervisorProxyFrontEndSchema, { minItems: 1 }),
+}, { additionalProperties: false });
+export const supervisorNetworkPolicySchema = Type.Object({
+    egress: Type.Boolean(),
+    allowedHosts: Type.Optional(Type.Array(Type.String())),
+    localBinding: Type.Boolean(),
+    outgoingProxy: Type.Optional(supervisorOutgoingProxySchema),
+}, { additionalProperties: false });
+/**
+ * The native supervisor's input. Its names intentionally match ComputePermissions one-for-one.
+ *
+ * The working directory is the workspace root for `workspace_write` and `auto`; keeping it out of
+ * the document prevents two sources of truth for the process cwd. A non-empty `allowedHosts`
+ * requires `network.outgoingProxy`, because the host list is enforced in the egress process the
+ * proxy creates, and without a proxy there would be nothing enforcing it. Each entry names one host
+ * or one `*.suffix`; a bare `*` is refused, and open egress is expressed by configuring no proxy.
+ */
+export const supervisorPolicySchema = Type.Object({
+    mode: supervisorPermissionModeSchema,
+    allowedReadPaths: Type.Optional(Type.Array(Type.String())),
+    deniedReadPaths: Type.Optional(Type.Array(Type.String())),
+    allowedWritePaths: Type.Optional(Type.Array(Type.String())),
+    deniedWritePaths: Type.Optional(Type.Array(Type.String())),
+    network: supervisorNetworkPolicySchema,
+}, { additionalProperties: false });
+export function parseSupervisorPolicy(value) {
+    if (!Value.Check(supervisorPolicySchema, value)) {
+        const details = [...Value.Errors(supervisorPolicySchema, value)]
+            .map((error) => `${error.path || "/"} ${error.message}`)
+            .join("; ");
+        throw new Error(`Invalid supervisor policy: ${details}`);
+    }
+    return Value.Parse(supervisorPolicySchema, value);
+}
+//# sourceMappingURL=SupervisorPolicy.js.map

package/dist/SupervisorPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupervisorPolicy.js","sourceRoot":"","sources":["../sources/SupervisorPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAEhD,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACpB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;CAC9B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACpB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;CACzB,CAAC,CAAC;AAIH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CACpD;IACI,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;CACxE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,CAAC;AAIF,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CACpD;IACI,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE;IACtB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE;IAC5B,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CAC9D,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,CAAC;AAIF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAC7C;IACI,IAAI,EAAE,8BAA8B;IACpC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,6BAA6B;CACzC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,CAAC;AAIF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;aAC3D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;aACvD,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC"}

package/dist/impl/resolveBinaryForTarget.d.ts

@@ -0,0 +1,3 @@
+import { type PlatformKey } from "../platform.js";
+export declare function resolveBinaryForTarget(key: PlatformKey, binaryPath?: string): string;
+//# sourceMappingURL=resolveBinaryForTarget.d.ts.map

package/dist/impl/resolveBinaryForTarget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveBinaryForTarget.d.ts","sourceRoot":"","sources":["../../sources/impl/resolveBinaryForTarget.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAKpE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAsCpF"}

package/dist/impl/resolveBinaryForTarget.js

@@ -0,0 +1,39 @@
+import { existsSync } from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { PLATFORM_TARGETS } from "../platform.js";
+const require = createRequire(import.meta.url);
+const executable = "happy-agent-supervisor";
+export function resolveBinaryForTarget(key, binaryPath) {
+    if (binaryPath !== undefined) {
+        const explicit = path.resolve(binaryPath);
+        if (!existsSync(explicit)) {
+            throw new Error(`Happy agent supervisor binary does not exist: ${explicit}`);
+        }
+        return explicit;
+    }
+    const platform = PLATFORM_TARGETS[key];
+    try {
+        const manifest = require.resolve(`${platform.alias}/package.json`);
+        const installed = path.join(path.dirname(manifest), "vendor", platform.target, "bin", executable);
+        if (existsSync(installed))
+            return installed;
+    }
+    catch {
+        // Fall through to repository-local native build locations.
+    }
+    const packageRoot = fileURLToPath(new URL("../../", import.meta.url));
+    const localCandidates = [
+        path.join(packageRoot, "native", "target", platform.target, "release", executable),
+        path.join(packageRoot, "native", "target", platform.target, "debug", executable),
+        path.join(packageRoot, "native", "target", "release", executable),
+        path.join(packageRoot, "native", "target", "debug", executable),
+    ];
+    const local = localCandidates.find((candidate) => existsSync(candidate));
+    if (local !== undefined)
+        return local;
+    throw new Error(`The optional binary package ${platform.alias} is missing. Reinstall ` +
+        "@slopus/happy-agent-supervisor or build the matching native target.");
+}
+//# sourceMappingURL=resolveBinaryForTarget.js.map

package/dist/impl/resolveBinaryForTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveBinaryForTarget.js","sourceRoot":"","sources":["../../sources/impl/resolveBinaryForTarget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAoB,MAAM,gBAAgB,CAAC;AAEpE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAE5C,MAAM,UAAU,sBAAsB,CAAC,GAAgB,EAAE,UAAmB;IACxE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,eAAe,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EACtB,QAAQ,EACR,QAAQ,CAAC,MAAM,EACf,KAAK,EACL,UAAU,CACb,CAAC;QACF,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACL,2DAA2D;IAC/D,CAAC;IAED,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,MAAM,eAAe,GAAG;QACpB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC;KAClE,CAAC;IACF,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACzE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,IAAI,KAAK,CACX,+BAA+B,QAAQ,CAAC,KAAK,yBAAyB;QAClE,qEAAqE,CAC5E,CAAC;AACN,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { parseSupervisorPolicy, supervisorNetworkPolicySchema, supervisorPermissionModeSchema, supervisorPolicySchema, type SupervisorNetworkPolicy, type SupervisorPermissionMode, type SupervisorPolicy, } from "./SupervisorPolicy.js";
+export { linuxSupervisorArchitectureSchema, type LinuxSupervisorArchitecture } from "./platform.js";
+export { resolveLinuxSupervisorBinary } from "./resolveLinuxSupervisorBinary.js";
+export { resolveSupervisorBinary } from "./resolveSupervisorBinary.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,EACrB,6BAA6B,EAC7B,8BAA8B,EAC9B,sBAAsB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iCAAiC,EAAE,KAAK,2BAA2B,EAAE,MAAM,eAAe,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { parseSupervisorPolicy, supervisorNetworkPolicySchema, supervisorPermissionModeSchema, supervisorPolicySchema, } from "./SupervisorPolicy.js";
+export { linuxSupervisorArchitectureSchema } from "./platform.js";
+export { resolveLinuxSupervisorBinary } from "./resolveLinuxSupervisorBinary.js";
+export { resolveSupervisorBinary } from "./resolveSupervisorBinary.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,EACrB,6BAA6B,EAC7B,8BAA8B,EAC9B,sBAAsB,GAIzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iCAAiC,EAAoC,MAAM,eAAe,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/platform.d.ts

@@ -0,0 +1,36 @@
+import { type Static } from "@sinclair/typebox";
+export declare const PLATFORM_TARGETS: {
+    readonly "darwin-arm64": {
+        readonly alias: "@slopus/happy-agent-supervisor-darwin-arm64";
+        readonly arch: "arm64";
+        readonly os: "darwin";
+        readonly tag: "darwin-arm64";
+        readonly target: "aarch64-apple-darwin";
+    };
+    readonly "darwin-x64": {
+        readonly alias: "@slopus/happy-agent-supervisor-darwin-x64";
+        readonly arch: "x64";
+        readonly os: "darwin";
+        readonly tag: "darwin-x64";
+        readonly target: "x86_64-apple-darwin";
+    };
+    readonly "linux-arm64": {
+        readonly alias: "@slopus/happy-agent-supervisor-linux-arm64";
+        readonly arch: "arm64";
+        readonly os: "linux";
+        readonly tag: "linux-arm64";
+        readonly target: "aarch64-unknown-linux-musl";
+    };
+    readonly "linux-x64": {
+        readonly alias: "@slopus/happy-agent-supervisor-linux-x64";
+        readonly arch: "x64";
+        readonly os: "linux";
+        readonly tag: "linux-x64";
+        readonly target: "x86_64-unknown-linux-musl";
+    };
+};
+export type PlatformKey = keyof typeof PLATFORM_TARGETS;
+export declare const linuxSupervisorArchitectureSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"amd64">, import("@sinclair/typebox").TLiteral<"x64">, import("@sinclair/typebox").TLiteral<"x86_64">, import("@sinclair/typebox").TLiteral<"arm64">, import("@sinclair/typebox").TLiteral<"aarch64">]>;
+/** Architecture spellings used by OCI, Node.js, and Rust target triples. */
+export type LinuxSupervisorArchitecture = Static<typeof linuxSupervisorArchitectureSchema>;
+//# sourceMappingURL=platform.d.ts.map

package/dist/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../sources/platform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAEtD,eAAO,MAAM,gBAAgB;aACzB,cAAc;iBACV,KAAK,EAAE,6CAA6C;iBACpD,IAAI,EAAE,OAAO;iBACb,EAAE,EAAE,QAAQ;iBACZ,GAAG,EAAE,cAAc;iBACnB,MAAM,EAAE,sBAAsB;;aAElC,YAAY;iBACR,KAAK,EAAE,2CAA2C;iBAClD,IAAI,EAAE,KAAK;iBACX,EAAE,EAAE,QAAQ;iBACZ,GAAG,EAAE,YAAY;iBACjB,MAAM,EAAE,qBAAqB;;aAEjC,aAAa;iBACT,KAAK,EAAE,4CAA4C;iBACnD,IAAI,EAAE,OAAO;iBACb,EAAE,EAAE,OAAO;iBACX,GAAG,EAAE,aAAa;iBAClB,MAAM,EAAE,4BAA4B;;aAExC,WAAW;iBACP,KAAK,EAAE,0CAA0C;iBACjD,IAAI,EAAE,KAAK;iBACX,EAAE,EAAE,OAAO;iBACX,GAAG,EAAE,WAAW;iBAChB,MAAM,EAAE,2BAA2B;;CAEjC,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAExD,eAAO,MAAM,iCAAiC,kRAM5C,CAAC;AAEH,4EAA4E;AAC5E,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC"}

package/dist/platform.js

@@ -0,0 +1,39 @@
+import { Type } from "@sinclair/typebox";
+export const PLATFORM_TARGETS = {
+    "darwin-arm64": {
+        alias: "@slopus/happy-agent-supervisor-darwin-arm64",
+        arch: "arm64",
+        os: "darwin",
+        tag: "darwin-arm64",
+        target: "aarch64-apple-darwin",
+    },
+    "darwin-x64": {
+        alias: "@slopus/happy-agent-supervisor-darwin-x64",
+        arch: "x64",
+        os: "darwin",
+        tag: "darwin-x64",
+        target: "x86_64-apple-darwin",
+    },
+    "linux-arm64": {
+        alias: "@slopus/happy-agent-supervisor-linux-arm64",
+        arch: "arm64",
+        os: "linux",
+        tag: "linux-arm64",
+        target: "aarch64-unknown-linux-musl",
+    },
+    "linux-x64": {
+        alias: "@slopus/happy-agent-supervisor-linux-x64",
+        arch: "x64",
+        os: "linux",
+        tag: "linux-x64",
+        target: "x86_64-unknown-linux-musl",
+    },
+};
+export const linuxSupervisorArchitectureSchema = Type.Union([
+    Type.Literal("amd64"),
+    Type.Literal("x64"),
+    Type.Literal("x86_64"),
+    Type.Literal("arm64"),
+    Type.Literal("aarch64"),
+]);
+//# sourceMappingURL=platform.js.map

package/dist/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../sources/platform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC5B,cAAc,EAAE;QACZ,KAAK,EAAE,6CAA6C;QACpD,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,QAAQ;QACZ,GAAG,EAAE,cAAc;QACnB,MAAM,EAAE,sBAAsB;KACjC;IACD,YAAY,EAAE;QACV,KAAK,EAAE,2CAA2C;QAClD,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,QAAQ;QACZ,GAAG,EAAE,YAAY;QACjB,MAAM,EAAE,qBAAqB;KAChC;IACD,aAAa,EAAE;QACX,KAAK,EAAE,4CAA4C;QACnD,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,4BAA4B;KACvC;IACD,WAAW,EAAE;QACT,KAAK,EAAE,0CAA0C;QACjD,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,OAAO;QACX,GAAG,EAAE,WAAW;QAChB,MAAM,EAAE,2BAA2B;KACtC;CACK,CAAC;AAIX,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC,KAAK,CAAC;IACxD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IACnB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IACtB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;CAC1B,CAAC,CAAC"}

package/dist/resolveLinuxSupervisorBinary.d.ts

@@ -0,0 +1,3 @@
+import { type LinuxSupervisorArchitecture } from "./platform.js";
+export declare function resolveLinuxSupervisorBinary(architecture: LinuxSupervisorArchitecture, binaryPath?: string): string;
+//# sourceMappingURL=resolveLinuxSupervisorBinary.d.ts.map

package/dist/resolveLinuxSupervisorBinary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveLinuxSupervisorBinary.d.ts","sourceRoot":"","sources":["../sources/resolveLinuxSupervisorBinary.ts"],"names":[],"mappings":"AAEA,OAAO,EAEH,KAAK,2BAA2B,EAEnC,MAAM,eAAe,CAAC;AAGvB,wBAAgB,4BAA4B,CACxC,YAAY,EAAE,2BAA2B,EACzC,UAAU,CAAC,EAAE,MAAM,GACpB,MAAM,CAOR"}

package/dist/resolveLinuxSupervisorBinary.js

@@ -0,0 +1,11 @@
+import { Value } from "@sinclair/typebox/value";
+import { linuxSupervisorArchitectureSchema, } from "./platform.js";
+import { resolveBinaryForTarget } from "./impl/resolveBinaryForTarget.js";
+export function resolveLinuxSupervisorBinary(architecture, binaryPath) {
+    if (!Value.Check(linuxSupervisorArchitectureSchema, architecture)) {
+        throw new Error(`Unsupported Linux supervisor architecture: ${String(architecture)}.`);
+    }
+    const key = architecture === "arm64" || architecture === "aarch64" ? "linux-arm64" : "linux-x64";
+    return resolveBinaryForTarget(key, binaryPath);
+}
+//# sourceMappingURL=resolveLinuxSupervisorBinary.js.map

package/dist/resolveLinuxSupervisorBinary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveLinuxSupervisorBinary.js","sourceRoot":"","sources":["../sources/resolveLinuxSupervisorBinary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAEhD,OAAO,EACH,iCAAiC,GAGpC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,MAAM,UAAU,4BAA4B,CACxC,YAAyC,EACzC,UAAmB;IAEnB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iCAAiC,EAAE,YAAY,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,GAAG,GACL,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;IACzF,OAAO,sBAAsB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC"}

package/dist/resolveSupervisorBinary.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveSupervisorBinary(binaryPath?: string): string;
+//# sourceMappingURL=resolveSupervisorBinary.d.ts.map

package/dist/resolveSupervisorBinary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSupervisorBinary.d.ts","sourceRoot":"","sources":["../sources/resolveSupervisorBinary.ts"],"names":[],"mappings":"AAGA,wBAAgB,uBAAuB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAanE"}

package/dist/resolveSupervisorBinary.js

@@ -0,0 +1,13 @@
+import {} from "./platform.js";
+import { resolveBinaryForTarget } from "./impl/resolveBinaryForTarget.js";
+export function resolveSupervisorBinary(binaryPath) {
+    const key = `${process.platform}-${process.arch}`;
+    if (key !== "darwin-arm64" &&
+        key !== "darwin-x64" &&
+        key !== "linux-arm64" &&
+        key !== "linux-x64") {
+        throw new Error(`The Happy agent supervisor does not support ${process.platform} ${process.arch}.`);
+    }
+    return resolveBinaryForTarget(key, binaryPath);
+}
+//# sourceMappingURL=resolveSupervisorBinary.js.map

package/dist/resolveSupervisorBinary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSupervisorBinary.js","sourceRoot":"","sources":["../sources/resolveSupervisorBinary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,MAAM,UAAU,uBAAuB,CAAC,UAAmB;IACvD,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAiB,CAAC;IACjE,IACI,GAAG,KAAK,cAAc;QACtB,GAAG,KAAK,YAAY;QACpB,GAAG,KAAK,aAAa;QACrB,GAAG,KAAK,WAAW,EACrB,CAAC;QACC,MAAM,IAAI,KAAK,CACX,+CAA+C,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,GAAG,CACrF,CAAC;IACN,CAAC;IACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC"}

package/package.json

@@ -1,33 +1,45 @@
 {
   "name": "@slopus/happy-agent-supervisor",
-  "version": "0.0.5-linux-x64",
-  "description": "Trusted native sandbox boundary for Happy agent workloads. Native binary for linux-x64.",
+  "version": "0.0.5",
+  "description": "Trusted native sandbox boundary for Happy agent workloads.",
+  "keywords": [
+    "sandbox",
+    "seatbelt",
+    "seccomp",
+    "supervisor"
+  ],
   "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/slopus/happy-agent.git",
     "directory": "packages/happy-agent-supervisor"
   },
-  "engines": {
-    "node": ">=22.19.0"
-  },
-  "os": [
-    "linux"
-  ],
-  "cpu": [
-    "x64"
-  ],
-  "bin": {
-    "happy-agent-supervisor": "vendor/x86_64-unknown-linux-musl/bin/happy-agent-supervisor"
-  },
   "files": [
-    "vendor",
-    "SHA256SUMS",
+    "dist",
     "LICENSE",
     "README.md"
   ],
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
   "publishConfig": {
-    "access": "public",
-    "tag": "platform"
+    "access": "public"
+  },
+  "dependencies": {
+    "@sinclair/typebox": "^0.34.49"
+  },
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "optionalDependencies": {
+    "@slopus/happy-agent-supervisor-darwin-arm64": "npm:@slopus/happy-agent-supervisor@0.0.5-darwin-arm64",
+    "@slopus/happy-agent-supervisor-darwin-x64": "npm:@slopus/happy-agent-supervisor@0.0.5-darwin-x64",
+    "@slopus/happy-agent-supervisor-linux-arm64": "npm:@slopus/happy-agent-supervisor@0.0.5-linux-arm64",
+    "@slopus/happy-agent-supervisor-linux-x64": "npm:@slopus/happy-agent-supervisor@0.0.5-linux-x64"
   }
 }

package/SHA256SUMS

@@ -1 +0,0 @@
-8d1ca27568b2f006413093402ebf43a8fa9177803927b5107f11d8cec0801889  vendor/x86_64-unknown-linux-musl/bin/happy-agent-supervisor