@stigmer/cli 3.0.8

package/local/seedpack/content.js

@@ -0,0 +1,201 @@
+// Resolution and on-demand acquisition of the seedpack content.
+//
+// The seedpack (system agents, skills, MCP servers, workflows under the
+// "stigmer" org) is the TS equivalent of the Go CLI's `go:embed`-ed bundle.
+// A lean `npx @stigmer/cli` must not carry ~300 content files (DD-002), so the
+// content ships as `@stigmer/seedpack` and is acquired on demand — the same
+// pattern as `@stigmer/runner-slim` and the managed Temporal binary.
+//
+// Two sources, tried in order (mirrors runtime/runner.ts):
+//   1. A repo-tree checkout (dev): `<repo>/seedpack`.
+//   2. The published `@stigmer/seedpack@<cli-version>`, installed on demand into
+//      ~/.stigmer/runtimes/<version>/ and read from
+//      node_modules/@stigmer/seedpack.
+//
+// The content-hash and extract logic mirror `@stigmer/seedpack` exactly (which
+// in turn mirrors the Go `seedpack` package); the CLI reimplements them over a
+// resolved directory so it stays decoupled from the package in the lean install
+// (where the package is not a dependency, only an on-demand artifact).
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, posix, relative, sep } from "node:path";
+import { fileURLToPath } from "node:url";
+import { CliExitError } from "../../errors/cli-exit-error.js";
+import { ExitCode } from "../../errors/exit-codes.js";
+import { log } from "../../logger.js";
+import { VERSION } from "../../version.js";
+import { runtimesDir } from "../paths.js";
+const SEEDPACK_PACKAGE = "@stigmer/seedpack";
+/**
+ * The canonical seedpack entries, in apply-safe order. Kept in sync with
+ * `SEEDPACK_ENTRIES` in `@stigmer/seedpack` and the `//go:embed` set in
+ * `seedpack/embed.go` — `tools/`, `icons/`, and `canary/` (CI canary metadata,
+ * not a resource) are deliberately excluded so the content set (and thus the
+ * idempotency hash) is identical across delivery paths.
+ */
+export const SEEDPACK_ENTRIES = [
+    "stigmer.yaml",
+    "organizations",
+    "skills",
+    "agents",
+    "workflows",
+    "mcp-servers",
+];
+/** Marker file recording the last successfully-applied content hash. */
+export const MARKER_FILE = ".seedpack-bootstrapped";
+/**
+ * Resolve the seedpack content directory: a repo-tree checkout in dev, else the
+ * on-demand-acquired `@stigmer/seedpack` package. Throws actionable guidance when
+ * acquisition is not possible (non-release build, or a failed/incomplete install).
+ */
+export function resolveSeedpackContent(opts = {}) {
+    const repo = repoSeedpackDir();
+    if (repo !== null)
+        return { dir: repo, source: "repo" };
+    return { dir: acquireSeedpack(opts), source: "package" };
+}
+/**
+ * Acquire the published `@stigmer/seedpack@<version>` into
+ * ~/.stigmer/runtimes/<version>/ (idempotent) and return its package directory.
+ * The version is pinned to the CLI's own version so system content stays in
+ * lockstep with the control plane it bootstraps.
+ */
+export function acquireSeedpack(opts = {}) {
+    const home = opts.home ?? homedir();
+    const version = opts.version ?? VERSION;
+    if (!isAcquirableRelease(version)) {
+        throw new CliExitError(`cannot acquire ${SEEDPACK_PACKAGE} for a non-release build (${version})`, ExitCode.General, [
+            "Run from the repo (the seedpack/ tree is used directly in dev).",
+            "On-demand acquisition is only available for published releases.",
+        ]);
+    }
+    const installDir = join(runtimesDir(home), version);
+    const pkgDir = join(installDir, "node_modules", "@stigmer", "seedpack");
+    const marker = join(pkgDir, "stigmer.yaml");
+    if (!existsSync(marker)) {
+        log.info(`acquiring ${SEEDPACK_PACKAGE}`, { version, dir: installDir });
+        mkdirSync(installDir, { recursive: true });
+        // A stable package.json root keeps the install deterministic. npm install is
+        // additive and non-pruning, so this prefix is safely shared with the runner.
+        const rootPkg = join(installDir, "package.json");
+        if (!existsSync(rootPkg)) {
+            writeFileSync(rootPkg, `${JSON.stringify({ name: "stigmer-runtime", private: true, version: "0.0.0" }, null, 2)}\n`);
+        }
+        const install = opts.install ?? installSeedpack;
+        install(installDir, `${SEEDPACK_PACKAGE}@${version}`);
+    }
+    if (!existsSync(marker)) {
+        throw new CliExitError(`${SEEDPACK_PACKAGE} install did not produce ${marker}`, ExitCode.General, [
+            `Remove ${installDir} and retry.`,
+        ]);
+    }
+    return pkgDir;
+}
+// Install the seedpack package into an isolated prefix. Output is inherited so
+// the user sees the one-time download progress.
+function installSeedpack(installDir, spec) {
+    try {
+        execFileSync("npm", ["install", spec, "--prefix", installDir, "--omit=dev", "--no-audit", "--no-fund"], {
+            stdio: "inherit",
+        });
+    }
+    catch (err) {
+        throw new CliExitError(`failed to install ${spec}`, ExitCode.General, [
+            `Command: npm install ${spec} --prefix ${installDir}`,
+            "Ensure npm is on PATH and the network is reachable.",
+            String(err),
+        ]);
+    }
+}
+/**
+ * Deterministic SHA-256 over the canonical content, identical to
+ * `@stigmer/seedpack`'s `contentHash` (and the Go algorithm): files walked in
+ * lexical order, each contributing its forward-slash relative path, a NUL, and
+ * its bytes. Used as the idempotency marker.
+ */
+export function hashSeedpackContent(dir) {
+    const hash = createHash("sha256");
+    for (const rel of listContentFiles(dir)) {
+        hash.update(rel);
+        hash.update(NUL);
+        hash.update(readFileSync(join(dir, rel)));
+    }
+    return `sha256:${hash.digest("hex").slice(0, 16)}`;
+}
+/**
+ * Copy the canonical entries from `srcDir` into `destDir`, producing a clean
+ * Stigmer project the declarative-apply path can process directly (never
+ * carrying build tooling or assets that happen to sit beside the content).
+ */
+export function extractSeedpack(srcDir, destDir) {
+    mkdirSync(destDir, { recursive: true });
+    for (const entry of SEEDPACK_ENTRIES) {
+        const src = join(srcDir, entry);
+        if (!existsSync(src))
+            continue;
+        cpSync(src, join(destDir, entry), { recursive: true });
+    }
+}
+const NUL = Uint8Array.of(0);
+/** Lexically-sorted, forward-slash relative paths of every file under the canonical entries. */
+export function listContentFiles(root) {
+    const files = [];
+    const walk = (abs) => {
+        for (const dirent of readdirSync(abs, { withFileTypes: true })) {
+            const full = join(abs, dirent.name);
+            if (dirent.isDirectory())
+                walk(full);
+            else if (dirent.isFile())
+                files.push(toPosix(relative(root, full)));
+        }
+    };
+    for (const entry of SEEDPACK_ENTRIES) {
+        const abs = join(root, entry);
+        if (!existsSync(abs))
+            continue;
+        if (statSync(abs).isDirectory())
+            walk(abs);
+        else
+            files.push(entry);
+    }
+    return files.sort();
+}
+/** The stored marker hash for `markerDir`, or null when never applied. */
+export function readMarker(markerDir) {
+    try {
+        return readFileSync(join(markerDir, MARKER_FILE), "utf8").trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Persist the applied content hash so a future run can skip unchanged content. */
+export function writeMarker(markerDir, hash) {
+    mkdirSync(markerDir, { recursive: true });
+    writeFileSync(join(markerDir, MARKER_FILE), `${hash}\n`);
+}
+function toPosix(p) {
+    return sep === posix.sep ? p : p.split(sep).join(posix.sep);
+}
+// A source build reports "0.0.0-dev" and the dev channel stamps "<v>-dev.<stamp>";
+// neither publishes a matching @stigmer/seedpack, so they are not acquirable.
+function isAcquirableRelease(version) {
+    return !version.includes("-dev");
+}
+// Walk up from this module to a repo root containing seedpack/stigmer.yaml.
+function repoSeedpackDir() {
+    let dir = dirname(fileURLToPath(import.meta.url));
+    for (let i = 0; i < 10; i += 1) {
+        const candidate = join(dir, "seedpack");
+        if (existsSync(join(candidate, "stigmer.yaml")))
+            return candidate;
+        const parent = dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+//# sourceMappingURL=content.js.map

package/local/seedpack/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../../src/local/seedpack/content.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,+EAA+E;AAC/E,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,2DAA2D;AAC3D,sDAAsD;AACtD,iFAAiF;AACjF,oDAAoD;AACpD,uCAAuC;AACvC,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,uEAAuE;AAEvE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5G,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,cAAc;IACd,eAAe;IACf,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,aAAa;CACL,CAAC;AAEX,wEAAwE;AACxE,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAiBpD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA+B,EAAE;IACtE,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACxD,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAA+B,EAAE;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;IACxC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,YAAY,CAAC,kBAAkB,gBAAgB,6BAA6B,OAAO,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE;YAClH,iEAAiE;YACjE,iEAAiE;SAClE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAE5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,aAAa,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;QAChD,OAAO,CAAC,UAAU,EAAE,GAAG,gBAAgB,IAAI,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,YAAY,CAAC,GAAG,gBAAgB,4BAA4B,MAAM,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE;YAChG,UAAU,UAAU,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,gDAAgD;AAChD,SAAS,eAAe,CAAC,UAAkB,EAAE,IAAY;IACvD,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE;YACtG,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,qBAAqB,IAAI,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE;YACpE,wBAAwB,IAAI,aAAa,UAAU,EAAE;YACrD,qDAAqD;YACrD,MAAM,CAAC,GAAG,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,OAAe;IAC7D,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAE7B,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,MAAM,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;iBAChC,IAAI,MAAM,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC;;YACtC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,IAAY;IACzD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,mFAAmF;AACnF,8EAA8E;AAC9E,SAAS,mBAAmB,CAAC,OAAe;IAC1C,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,4EAA4E;AAC5E,SAAS,eAAe;IACtB,IAAI,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACxC,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAClE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/local/setup/prompt.d.ts

@@ -0,0 +1,8 @@
+/** Ask a yes/no question (default no). Returns true only for an explicit yes. */
+export declare function confirm(question: string): Promise<boolean>;
+/** Read a line from stdin, showing `question` on stderr. */
+export declare function promptLine(question: string): Promise<string>;
+/** Read a secret from stdin with echo suppressed (falls back to plain read on a
+ * non-TTY stdin, e.g. piped input). */
+export declare function promptSecret(question: string): Promise<string>;
+//# sourceMappingURL=prompt.d.ts.map

package/local/setup/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../../src/local/setup/prompt.ts"],"names":[],"mappings":"AAMA,iFAAiF;AACjF,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGhE;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ5D;AAED;uCACuC;AACvC,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4C9D"}

package/local/setup/prompt.js

@@ -0,0 +1,63 @@
+// Minimal terminal prompts for the setup wizard. Prompts and echoes are written
+// to stderr so stdout stays clean; secret entry switches the TTY to raw mode and
+// suppresses echo so API keys never appear on screen or in scrollback.
+import { createInterface } from "node:readline";
+/** Ask a yes/no question (default no). Returns true only for an explicit yes. */
+export async function confirm(question) {
+    const answer = (await promptLine(`${question} [y/N] `)).trim().toLowerCase();
+    return answer === "y" || answer === "yes";
+}
+/** Read a line from stdin, showing `question` on stderr. */
+export function promptLine(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stderr });
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => {
+            rl.close();
+            resolve(answer);
+        });
+    });
+}
+/** Read a secret from stdin with echo suppressed (falls back to plain read on a
+ * non-TTY stdin, e.g. piped input). */
+export function promptSecret(question) {
+    const stdin = process.stdin;
+    if (stdin.isTTY !== true || typeof stdin.setRawMode !== "function") {
+        return promptLine(`${question}: `);
+    }
+    process.stderr.write(`${question}: `);
+    return new Promise((resolve) => {
+        let value = "";
+        stdin.setRawMode(true);
+        stdin.resume();
+        const finish = () => {
+            stdin.setRawMode(false);
+            stdin.pause();
+            stdin.removeListener("data", onData);
+            process.stderr.write("\n");
+            resolve(value);
+        };
+        const onData = (chunk) => {
+            const char = chunk.toString("utf8");
+            switch (char) {
+                case "\n":
+                case "\r":
+                case "\u0004": // Ctrl-D
+                    finish();
+                    break;
+                case "\u0003": // Ctrl-C
+                    stdin.setRawMode(false);
+                    process.stderr.write("\n");
+                    process.exit(130);
+                    break;
+                case "\u007f": // Backspace
+                case "\b":
+                    value = value.slice(0, -1);
+                    break;
+                default:
+                    value += char;
+            }
+        };
+        stdin.on("data", onData);
+    });
+}
+//# sourceMappingURL=prompt.js.map

package/local/setup/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../../src/local/setup/prompt.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,iFAAiF;AACjF,uEAAuE;AAEvE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAgB;IAC5C,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,GAAG,QAAQ,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7E,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,CAAC;AAC5C,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;uCACuC;AACvC,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,CAAC;QAEf,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,IAAI,CAAC;gBACV,KAAK,IAAI,CAAC;gBACV,KAAK,QAAQ,EAAE,SAAS;oBACtB,MAAM,EAAE,CAAC;oBACT,MAAM;gBACR,KAAK,QAAQ,EAAE,SAAS;oBACtB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;oBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAClB,MAAM;gBACR,KAAK,QAAQ,CAAC,CAAC,YAAY;gBAC3B,KAAK,IAAI;oBACP,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC3B,MAAM;gBACR;oBACE,KAAK,IAAI,IAAI,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/local/setup/wizard.d.ts

@@ -0,0 +1,22 @@
+import type { Config } from "../../config/config.js";
+import { type LlmSettings } from "../llm-config.js";
+export type ProviderChoice = "anthropic" | "openai" | "ollama" | "skip";
+export interface SelectionInputs {
+    apiKey?: string;
+    model?: string;
+    baseUrl?: string;
+}
+/**
+ * Resolve a provider choice (plus optional overrides) to the LLM settings to
+ * persist. "skip" yields `undefined`, which clears the section.
+ */
+export declare function buildLlmForChoice(choice: ProviderChoice, inputs?: SelectionInputs): LlmSettings | undefined;
+/** Apply a provider choice to a config, returning the updated copy. */
+export declare function applyChoice(config: Config, choice: ProviderChoice, inputs?: SelectionInputs): Config;
+/**
+ * Run the interactive provider menu against the current terminal. Returns the
+ * updated config, or `null` if the user aborts. For cloud providers, an API key
+ * already in the environment is used without prompting (matching the Go wizard).
+ */
+export declare function runInteractiveWizard(config: Config, env?: NodeJS.ProcessEnv): Promise<Config | null>;
+//# sourceMappingURL=wizard.d.ts.map

package/local/setup/wizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizard.d.ts","sourceRoot":"","sources":["../../../src/local/setup/wizard.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,KAAK,WAAW,EAAgC,MAAM,kBAAkB,CAAC;AAGlF,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAExE,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,GAAE,eAAoB,GAAG,WAAW,GAAG,SAAS,CAQ/G;AAED,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAE,eAAoB,GAAG,MAAM,CAExG;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAsBvH"}

package/local/setup/wizard.js

@@ -0,0 +1,65 @@
+// LLM provider selection for `stigmer setup`.
+//
+// The decision logic is a pure function (`buildLlmForChoice`) shared by the
+// non-interactive flag path and the interactive menu, so both produce identical
+// config and the rules are unit-testable in isolation. The interactive menu
+// (`runInteractiveWizard`) is a thin shell around it, mirroring the Go wizard's
+// provider list and API-key handling (env var first, then a hidden prompt).
+import { setLlm, withProviderDefaults } from "../llm-config.js";
+import { promptLine, promptSecret } from "./prompt.js";
+/**
+ * Resolve a provider choice (plus optional overrides) to the LLM settings to
+ * persist. "skip" yields `undefined`, which clears the section.
+ */
+export function buildLlmForChoice(choice, inputs = {}) {
+    if (choice === "skip")
+        return undefined;
+    return withProviderDefaults({
+        provider: choice,
+        model: inputs.model,
+        api_key: inputs.apiKey,
+        base_url: inputs.baseUrl,
+    });
+}
+/** Apply a provider choice to a config, returning the updated copy. */
+export function applyChoice(config, choice, inputs = {}) {
+    return setLlm(config, buildLlmForChoice(choice, inputs));
+}
+/**
+ * Run the interactive provider menu against the current terminal. Returns the
+ * updated config, or `null` if the user aborts. For cloud providers, an API key
+ * already in the environment is used without prompting (matching the Go wizard).
+ */
+export async function runInteractiveWizard(config, env = process.env) {
+    process.stderr.write("\nChoose your LLM provider (required for agent execution):\n\n");
+    process.stderr.write("  [1] Anthropic  — Cloud API, best quality (requires API key)\n");
+    process.stderr.write("  [2] OpenAI     — Cloud API (requires API key)\n");
+    process.stderr.write("  [3] Ollama     — Free, local, offline (lower quality output)\n");
+    process.stderr.write("  [4] Skip       — Configure later (agents won't execute)\n\n");
+    for (;;) {
+        const choice = (await promptLine("Select [1-4]: ")).trim();
+        switch (choice) {
+            case "1":
+                return applyChoice(config, "anthropic", { apiKey: await resolveCloudKey("anthropic", env) });
+            case "2":
+                return applyChoice(config, "openai", { apiKey: await resolveCloudKey("openai", env) });
+            case "3":
+                return applyChoice(config, "ollama");
+            case "4":
+                return applyChoice(config, "skip");
+            default:
+                process.stderr.write("Invalid choice. Please enter 1, 2, 3, or 4.\n");
+        }
+    }
+}
+async function resolveCloudKey(provider, env) {
+    const envVar = provider === "anthropic" ? "ANTHROPIC_API_KEY" : "OPENAI_API_KEY";
+    const existing = env[envVar];
+    if (existing) {
+        process.stderr.write(`Using ${envVar} from environment\n`);
+        return undefined; // env var takes precedence; do not persist a copy
+    }
+    const key = (await promptSecret(`Enter your ${provider === "anthropic" ? "Anthropic" : "OpenAI"} API key`)).trim();
+    return key === "" ? undefined : key;
+}
+//# sourceMappingURL=wizard.js.map

package/local/setup/wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizard.js","sourceRoot":"","sources":["../../../src/local/setup/wizard.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,4EAA4E;AAG5E,OAAO,EAAoB,MAAM,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAUvD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB,EAAE,SAA0B,EAAE;IACpF,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,oBAAoB,CAAC;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,QAAQ,EAAE,MAAM,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,MAAsB,EAAE,SAA0B,EAAE;IAC9F,OAAO,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC7F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAEtF,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/F,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACzF,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvC,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrC;gBACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgC,EAAE,GAAsB;IACrF,MAAM,MAAM,GAAG,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACjF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,MAAM,qBAAqB,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC,CAAC,kDAAkD;IACtE,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,YAAY,CAAC,cAAc,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnH,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AACtC,CAAC"}

package/local/state/health-state.d.ts

@@ -0,0 +1,26 @@
+export type ComponentLifecycle = "running" | "stopped" | "failed" | "unhealthy";
+/** Runtime state of a single managed component. */
+export interface ComponentState {
+    pid: number;
+    state: ComponentLifecycle;
+    started_at: string;
+    restart_count: number;
+    last_error?: string;
+    /** For components that announce readiness (the runner's "polling" marker):
+     * true once observed. Absent for components without a readiness signal. */
+    ready?: boolean;
+}
+/** The full snapshot persisted to `health-state.json`. */
+export interface HealthState {
+    daemon_pid: number;
+    started_at: string;
+    components: Record<string, ComponentState>;
+}
+/**
+ * Write the health state atomically: serialize to a temp file then rename over
+ * the target, so a reader never observes a half-written snapshot.
+ */
+export declare function writeHealthState(path: string, state: HealthState): void;
+/** Load the health state, or null if it is missing or unparseable. */
+export declare function loadHealthState(path: string): HealthState | null;
+//# sourceMappingURL=health-state.d.ts.map

package/local/state/health-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-state.d.ts","sourceRoot":"","sources":["../../../src/local/state/health-state.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEhF,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,kBAAkB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;+EAC2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC5C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAIvE;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAYhE"}

package/local/state/health-state.js

@@ -0,0 +1,34 @@
+// The daemon's health snapshot, written atomically by the supervisor and read
+// by `stigmer status`.
+//
+// It is the single consistent view of every managed component. The supervisor
+// is the only writer; status (and any other reader) only reads. JSON keys are
+// snake_case to match the file the Go daemon writes, so the format is stable
+// across the migration.
+import { readFileSync, renameSync, writeFileSync } from "node:fs";
+/**
+ * Write the health state atomically: serialize to a temp file then rename over
+ * the target, so a reader never observes a half-written snapshot.
+ */
+export function writeHealthState(path, state) {
+    const tmp = `${path}.tmp`;
+    writeFileSync(tmp, `${JSON.stringify(state, null, 2)}\n`, "utf8");
+    renameSync(tmp, path);
+}
+/** Load the health state, or null if it is missing or unparseable. */
+export function loadHealthState(path) {
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch {
+        return null;
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=health-state.js.map

package/local/state/health-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-state.js","sourceRoot":"","sources":["../../../src/local/state/health-state.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,uBAAuB;AACvB,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,wBAAwB;AAExB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAuBlE;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAkB;IAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/local/state/index.d.ts

@@ -0,0 +1,7 @@
+export { type ComponentLifecycle, type ComponentState, type HealthState, loadHealthState, writeHealthState } from "./health-state.js";
+export { type FileLock, acquireLock } from "./lock.js";
+export { DEFAULT_LOG_RETENTION_DAYS, cleanupOldLogs, rotateLogs } from "./log-rotation.js";
+export { readPidFile, removePidFile, writePidFile } from "./pidfile.js";
+export { findProcessByPort, isProcessAlive, killProcess, killProcessGroup } from "./proc.js";
+export { type StartupConfig, loadStartupConfig, removeStartupConfig, saveStartupConfig } from "./startup-config.js";
+//# sourceMappingURL=index.d.ts.map

package/local/state/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/local/state/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACtI,OAAO,EAAE,KAAK,QAAQ,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7F,OAAO,EAAE,KAAK,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC"}

package/local/state/index.js

@@ -0,0 +1,8 @@
+// Public surface of the local-stack state primitives.
+export { loadHealthState, writeHealthState } from "./health-state.js";
+export { acquireLock } from "./lock.js";
+export { DEFAULT_LOG_RETENTION_DAYS, cleanupOldLogs, rotateLogs } from "./log-rotation.js";
+export { readPidFile, removePidFile, writePidFile } from "./pidfile.js";
+export { findProcessByPort, isProcessAlive, killProcess, killProcessGroup } from "./proc.js";
+export { loadStartupConfig, removeStartupConfig, saveStartupConfig } from "./startup-config.js";
+//# sourceMappingURL=index.js.map

package/local/state/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/local/state/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AAEtD,OAAO,EAAkE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACtI,OAAO,EAAiB,WAAW,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7F,OAAO,EAAsB,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC"}

package/local/state/lock.d.ts

@@ -0,0 +1,12 @@
+/** A held lock. Call release() exactly once when done. */
+export interface FileLock {
+    readonly path: string;
+    release(): void;
+}
+/**
+ * Try to acquire the lock at `path`. Returns a FileLock on success, or null if
+ * the lock is held by a live process. A lock left behind by a dead process is
+ * reclaimed automatically.
+ */
+export declare function acquireLock(path: string): FileLock | null;
+//# sourceMappingURL=lock.d.ts.map

package/local/state/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../../src/local/state/lock.ts"],"names":[],"mappings":"AAcA,0DAA0D;AAC1D,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAezD"}

package/local/state/lock.js

@@ -0,0 +1,70 @@
+// A single-instance file lock built on atomic O_EXCL file creation.
+//
+// Node has no portable `flock`, so the lock is a file whose existence is the
+// lock and whose contents are the owning PID. Creation uses the "wx" flag
+// (O_CREAT | O_EXCL), which is atomic on POSIX and Windows, so two racing
+// acquirers cannot both win. If the file already exists we read the owner PID:
+// a dead owner means a stale lock we may reclaim; a live owner means the lock
+// is genuinely held. This guards the Temporal dev server against double-start
+// the way the Go CLI's flock does, without a native dependency.
+import { closeSync, mkdirSync, openSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { isProcessAlive } from "./proc.js";
+/**
+ * Try to acquire the lock at `path`. Returns a FileLock on success, or null if
+ * the lock is held by a live process. A lock left behind by a dead process is
+ * reclaimed automatically.
+ */
+export function acquireLock(path) {
+    mkdirSync(dirname(path), { recursive: true });
+    if (tryCreate(path))
+        return makeLock(path);
+    // The lock file exists. Reclaim it only if its owner is gone.
+    const owner = readOwner(path);
+    if (owner !== null && isProcessAlive(owner)) {
+        return null; // genuinely held by a live process
+    }
+    // Stale (or unreadable) lock: remove and retry exactly once. A failure on the
+    // retry means another process raced us to it — treat the lock as held.
+    rmSync(path, { force: true });
+    return tryCreate(path) ? makeLock(path) : null;
+}
+function tryCreate(path) {
+    try {
+        const fd = openSync(path, "wx");
+        writeFileSync(fd, `${process.pid}\n`, "utf8");
+        closeSync(fd);
+        return true;
+    }
+    catch (err) {
+        if (err.code === "EEXIST")
+            return false;
+        throw err;
+    }
+}
+function readOwner(path) {
+    try {
+        const firstLine = readFileSync(path, "utf8").split("\n", 1)[0]?.trim() ?? "";
+        const pid = Number.parseInt(firstLine, 10);
+        return Number.isInteger(pid) && pid > 0 ? pid : null;
+    }
+    catch {
+        return null;
+    }
+}
+function makeLock(path) {
+    let released = false;
+    return {
+        path,
+        release() {
+            if (released)
+                return;
+            released = true;
+            // Only remove the file if we still own it, so we never delete a lock a
+            // different process acquired after ours was (somehow) gone.
+            if (readOwner(path) === process.pid)
+                rmSync(path, { force: true });
+        },
+    };
+}
+//# sourceMappingURL=lock.js.map

package/local/state/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../../src/local/state/lock.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,0EAA0E;AAC1E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,gEAAgE;AAEhE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAQ3C;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,IAAI,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE3C,8DAA8D;IAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,CAAC,mCAAmC;IAClD,CAAC;IAED,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,aAAa,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,IAAI;QACJ,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,uEAAuE;YACvE,4DAA4D;YAC5D,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,GAAG;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/local/state/log-rotation.d.ts

@@ -0,0 +1,17 @@
+/** Default retention for archived logs, in days. */
+export declare const DEFAULT_LOG_RETENTION_DAYS = 7;
+/**
+ * Rotate non-empty component logs in `logDir`, returning the number rotated.
+ * Creates the directory if needed and prunes archives past the retention
+ * window. A clock can be injected for deterministic tests.
+ */
+export declare function rotateLogs(logDir: string, options?: {
+    now?: Date;
+    retentionDays?: number;
+}): number;
+/**
+ * Delete archived logs (`*.log.*` / `*.err.*`) older than `keepDays`, returning
+ * the count removed.
+ */
+export declare function cleanupOldLogs(logDir: string, keepDays?: number, now?: Date): number;
+//# sourceMappingURL=log-rotation.d.ts.map

package/local/state/log-rotation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-rotation.d.ts","sourceRoot":"","sources":["../../../src/local/state/log-rotation.ts"],"names":[],"mappings":"AAqBA,oDAAoD;AACpD,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,MAAM,CA0BR;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,QAAQ,GAAE,MAAmC,EAC7C,GAAG,GAAE,IAAiB,GACrB,MAAM,CA4BR"}