@stigmer/cli 3.0.8

package/errors/handle.js

@@ -0,0 +1,46 @@
+// The single exit point for command-level errors: classify, print to stderr,
+// and exit with the mapped code. Mirrors the Go CLI's clierr.Handle.
+import { isDebug } from "../runtime.js";
+import { classify, codeName } from "./classify.js";
+import { ExitCode } from "./exit-codes.js";
+/**
+ * Render a CliError for stderr. In debug mode it appends the raw error chain
+ * and numeric gRPC code. Returns "" when there is nothing to print (a clean
+ * local cancellation), so the caller writes nothing.
+ */
+export function formatError(error, debugMode) {
+    const lines = [];
+    if (error.message !== "") {
+        lines.push(`Error: ${error.message}`);
+    }
+    if (error.hints !== undefined && error.hints.length > 0) {
+        lines.push("");
+        lines.push(...error.hints);
+    }
+    if (debugMode && error.cause !== undefined) {
+        lines.push("");
+        lines.push("--- debug ---");
+        if (error.code !== undefined) {
+            lines.push(`gRPC code: ${codeName(error.code)} (${error.code})`);
+        }
+        lines.push(`Raw error: ${error.cause.stack ?? error.cause.message}`);
+    }
+    return lines.length > 0 ? lines.join("\n") + "\n" : "";
+}
+/**
+ * Classify the error, print a user-facing message to stderr, and exit with the
+ * appropriate code. The debug flag is read from process-global runtime state
+ * (set from `--debug`), so callers never thread it through.
+ */
+export function handle(error) {
+    const classified = classify(error);
+    if (classified === null) {
+        process.exit(ExitCode.Success);
+    }
+    const rendered = formatError(classified, isDebug());
+    if (rendered !== "") {
+        process.stderr.write(rendered);
+    }
+    process.exit(classified.exitCode);
+}
+//# sourceMappingURL=handle.js.map

package/errors/handle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.js","sourceRoot":"","sources":["../../src/errors/handle.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,qEAAqE;AAErE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAiB,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAe,EAAE,SAAkB;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC"}

package/errors/index.d.ts

@@ -0,0 +1,6 @@
+export { ExitCode } from "./exit-codes.js";
+export { type CliError, classify, codeName } from "./classify.js";
+export { CliExitError } from "./cli-exit-error.js";
+export { formatError, handle } from "./handle.js";
+export { UsageError } from "./usage-error.js";
+//# sourceMappingURL=index.d.ts.map

package/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,KAAK,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/errors/index.js

@@ -0,0 +1,7 @@
+// Public surface of the CLI error-handling module.
+export { ExitCode } from "./exit-codes.js";
+export { classify, codeName } from "./classify.js";
+export { CliExitError } from "./cli-exit-error.js";
+export { formatError, handle } from "./handle.js";
+export { UsageError } from "./usage-error.js";
+//# sourceMappingURL=index.js.map

package/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,mDAAmD;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAiB,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/errors/usage-error.d.ts

@@ -0,0 +1,5 @@
+import { CliExitError } from "./cli-exit-error.js";
+export declare class UsageError extends CliExitError {
+    constructor(message: string);
+}
+//# sourceMappingURL=usage-error.d.ts.map

package/errors/usage-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-error.d.ts","sourceRoot":"","sources":["../../src/errors/usage-error.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGnD,qBAAa,UAAW,SAAQ,YAAY;gBAC9B,OAAO,EAAE,MAAM;CAI5B"}

package/errors/usage-error.js

@@ -0,0 +1,13 @@
+// A local (client-side) validation failure — bad flags, an unknown output
+// format, a malformed resource reference, etc. Maps to ExitCode.Usage (2), the
+// same code the server's InvalidArgument produces, so scripts see a consistent
+// "usage" exit regardless of where validation happened.
+import { CliExitError } from "./cli-exit-error.js";
+import { ExitCode } from "./exit-codes.js";
+export class UsageError extends CliExitError {
+    constructor(message) {
+        super(message, ExitCode.Usage);
+        this.name = "UsageError";
+    }
+}
+//# sourceMappingURL=usage-error.js.map

package/errors/usage-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-error.js","sourceRoot":"","sources":["../../src/errors/usage-error.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,+EAA+E;AAC/E,+EAA+E;AAC/E,wDAAwD;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,MAAM,OAAO,UAAW,SAAQ,YAAY;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF"}

package/index.d.ts

@@ -0,0 +1,3 @@
+export { buildProgram } from "./program.js";
+export { VERSION } from "./version.js";
+//# sourceMappingURL=index.d.ts.map

package/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}

package/index.js

@@ -0,0 +1,8 @@
+// Public surface of @stigmer/cli.
+//
+// The CLI is primarily consumed as the `stigmer` bin, but exposing the program
+// builder lets tests drive the full command tree in-process and lets embedders
+// compose it.
+export { buildProgram } from "./program.js";
+export { VERSION } from "./version.js";
+//# sourceMappingURL=index.js.map

package/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,cAAc;AAEd,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}

package/local/artifact.d.ts

@@ -0,0 +1,38 @@
+/** Release OS token, matching the `<os>` segment of our release asset names. */
+export declare function mapReleaseOs(platform: NodeJS.Platform): string;
+/** Release arch token, matching the `<arch>` segment of our release asset names. */
+export declare function mapReleaseArch(arch: string): string;
+export interface TarballBinarySource {
+    /** URL of the `.tar.gz` archive. */
+    url: string;
+    /**
+     * URL of a `shasum -a 256`-format checksum file for {@link url}. When set, the
+     * downloaded archive's sha256 is verified against it before extraction and any
+     * mismatch aborts the install.
+     */
+    checksumUrl?: string;
+    /** Basename of the entry to extract from the archive. */
+    entryName: string;
+    /** Absolute path to write the extracted, executable binary to. */
+    binPath: string;
+    /** Human label used in error messages (e.g. "Temporal CLI", "stigmer-server"). */
+    label: string;
+    /** Override the fetch implementation (tests). */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Download a `.tar.gz`, optionally verify its sha256, extract the named entry,
+ * and write it to `binPath` with executable permissions. Throws a
+ * {@link CliExitError} with the URL on any network, checksum, or extraction
+ * failure.
+ */
+export declare function fetchTarballBinary(src: TarballBinarySource): Promise<void>;
+/** Lowercase hex sha256 of `bytes`. */
+export declare function sha256Hex(bytes: Uint8Array): string;
+/**
+ * Extract a single regular-file entry whose basename matches `name` from an
+ * (uncompressed) tar buffer. Minimal POSIX/ustar reader: 512-byte header blocks,
+ * octal size at offset 124, type flag at 156, data padded to 512 bytes.
+ */
+export declare function extractTarEntry(buf: Uint8Array, name: string): Uint8Array | null;
+//# sourceMappingURL=artifact.d.ts.map

package/local/artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../../src/local/artifact.ts"],"names":[],"mappings":"AAiBA,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAS9D;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASnD;AAED,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BhF;AAED,uCAAuC;AACvC,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEnD;AA8BD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAoBhF"}

package/local/artifact.js

@@ -0,0 +1,133 @@
+// Shared primitives for acquiring a single executable from a GitHub-release
+// `.tar.gz`: release platform/arch mapping, a fetch + gunzip + minimal tar
+// reader, optional sha256 verification, and an executable write.
+//
+// Both on-demand downloaders — the Temporal CLI (`temporal/download.ts`) and the
+// `stigmer-server` control plane (`runtime/server.ts`) — build on this, so the
+// fetch/extract contract lives in exactly one place. The tar reader is a tiny
+// POSIX/ustar implementation: no native `tar` dependency, which keeps the base
+// install lean (DD-002).
+import { createHash } from "node:crypto";
+import { chmodSync, mkdirSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { gunzipSync } from "fflate";
+import { CliExitError } from "../errors/cli-exit-error.js";
+import { ExitCode } from "../errors/exit-codes.js";
+/** Release OS token, matching the `<os>` segment of our release asset names. */
+export function mapReleaseOs(platform) {
+    switch (platform) {
+        case "darwin":
+            return "darwin";
+        case "win32":
+            return "windows";
+        default:
+            return "linux";
+    }
+}
+/** Release arch token, matching the `<arch>` segment of our release asset names. */
+export function mapReleaseArch(arch) {
+    switch (arch) {
+        case "arm64":
+            return "arm64";
+        case "x64":
+            return "amd64";
+        default:
+            return arch;
+    }
+}
+/**
+ * Download a `.tar.gz`, optionally verify its sha256, extract the named entry,
+ * and write it to `binPath` with executable permissions. Throws a
+ * {@link CliExitError} with the URL on any network, checksum, or extraction
+ * failure.
+ */
+export async function fetchTarballBinary(src) {
+    const doFetch = src.fetchImpl ?? fetch;
+    const archive = await fetchBytes(doFetch, src.url, src.label);
+    if (src.checksumUrl !== undefined) {
+        const expected = parseShasum(await fetchText(doFetch, src.checksumUrl, `${src.label} checksum`));
+        const actual = sha256Hex(archive);
+        if (expected === "" || expected !== actual) {
+            throw new CliExitError(`${src.label} checksum mismatch — refusing to use the download`, ExitCode.General, [
+                `expected: ${expected || "(unparseable)"}`,
+                `actual:   ${actual}`,
+                `archive:  ${src.url}`,
+            ]);
+        }
+    }
+    const tarBytes = gunzipSync(archive);
+    const binary = extractTarEntry(tarBytes, src.entryName);
+    if (binary === null) {
+        throw new CliExitError(`${src.entryName} not found in the downloaded ${src.label} archive`, ExitCode.General, [
+            `archive: ${src.url}`,
+        ]);
+    }
+    mkdirSync(dirname(src.binPath), { recursive: true });
+    writeFileSync(src.binPath, binary, { mode: 0o755 });
+    chmodSync(src.binPath, 0o755);
+}
+/** Lowercase hex sha256 of `bytes`. */
+export function sha256Hex(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+async function fetchBytes(doFetch, url, label) {
+    const res = await doFetchOrThrow(doFetch, url, label);
+    return new Uint8Array(await res.arrayBuffer());
+}
+async function fetchText(doFetch, url, label) {
+    const res = await doFetchOrThrow(doFetch, url, label);
+    return res.text();
+}
+async function doFetchOrThrow(doFetch, url, label) {
+    let res;
+    try {
+        res = await doFetch(url);
+    }
+    catch (err) {
+        throw new CliExitError(`failed to download ${label} from ${url}`, ExitCode.General, [String(err)]);
+    }
+    if (!res.ok) {
+        throw new CliExitError(`failed to download ${label}: HTTP ${res.status} from ${url}`, ExitCode.General);
+    }
+    return res;
+}
+// `shasum`/`sha256sum` output is "<hex>  <filename>"; take the first token.
+function parseShasum(content) {
+    return (content.trim().split(/\s+/)[0] ?? "").toLowerCase();
+}
+/**
+ * Extract a single regular-file entry whose basename matches `name` from an
+ * (uncompressed) tar buffer. Minimal POSIX/ustar reader: 512-byte header blocks,
+ * octal size at offset 124, type flag at 156, data padded to 512 bytes.
+ */
+export function extractTarEntry(buf, name) {
+    let offset = 0;
+    while (offset + 512 <= buf.length) {
+        const header = buf.subarray(offset, offset + 512);
+        const entryName = readCString(header, 0, 100);
+        if (entryName === "")
+            break; // zero block marks end of archive
+        const size = Number.parseInt(readCString(header, 124, 12).trim() || "0", 8) || 0;
+        const typeFlag = String.fromCharCode(header[156] ?? 0);
+        const dataStart = offset + 512;
+        const isRegularFile = typeFlag === "0" || typeFlag === "\0";
+        if (isRegularFile && basename(entryName) === name) {
+            return buf.subarray(dataStart, dataStart + size);
+        }
+        // Advance past this entry's data, rounded up to the 512-byte block size.
+        offset = dataStart + Math.ceil(size / 512) * 512;
+    }
+    return null;
+}
+function readCString(block, start, length) {
+    let end = start;
+    const limit = start + length;
+    while (end < limit && block[end] !== 0)
+        end += 1;
+    return Buffer.from(block.subarray(start, end)).toString("utf8");
+}
+function basename(path) {
+    const parts = path.split("/");
+    return parts[parts.length - 1] ?? path;
+}
+//# sourceMappingURL=artifact.js.map

package/local/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/local/artifact.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,2EAA2E;AAC3E,iEAAiE;AACjE,EAAE;AACF,iFAAiF;AACjF,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,yBAAyB;AAEzB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,QAAyB;IACpD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,KAAK;YACR,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAqBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAwB;IAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAE9D,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,GAAG,GAAG,CAAC,KAAK,mDAAmD,EAAE,QAAQ,CAAC,OAAO,EAAE;gBACxG,aAAa,QAAQ,IAAI,eAAe,EAAE;gBAC1C,aAAa,MAAM,EAAE;gBACrB,aAAa,GAAG,CAAC,GAAG,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,YAAY,CAAC,GAAG,GAAG,CAAC,SAAS,gCAAgC,GAAG,CAAC,KAAK,UAAU,EAAE,QAAQ,CAAC,OAAO,EAAE;YAC5G,YAAY,GAAG,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAqB,EAAE,GAAW,EAAE,KAAa;IACzE,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,OAAO,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAqB,EAAE,GAAW,EAAE,KAAa;IACxE,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAqB,EAAE,GAAW,EAAE,KAAa;IAC7E,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,sBAAsB,KAAK,SAAS,GAAG,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,sBAAsB,KAAK,UAAU,GAAG,CAAC,MAAM,SAAS,GAAG,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAe,EAAE,IAAY;IAC3D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,SAAS,KAAK,EAAE;YAAE,MAAM,CAAC,kCAAkC;QAE/D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,GAAG,GAAG,CAAC;QAE/B,MAAM,aAAa,GAAG,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,CAAC;QAC5D,IAAI,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC,CAAC;QACnD,CAAC;QAED,yEAAyE;QACzE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,KAAa,EAAE,MAAc;IACnE,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC7B,OAAO,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,GAAG,IAAI,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC"}

package/local/constants.d.ts

@@ -0,0 +1,36 @@
+/** Port `stigmer-server` listens on (gRPC). Matches the Go CLI's `DaemonPort`. */
+export declare const SERVER_PORT = 7234;
+/** Port the embedded web console is served on (7xxx=API, 8xxx=UI convention). */
+export declare const WEB_CONSOLE_PORT = 8234;
+/** Temporal frontend gRPC port (dev server default). */
+export declare const TEMPORAL_PORT = 7233;
+/** Temporal Web UI port. */
+export declare const TEMPORAL_UI_PORT = 8233;
+/** Temporal namespace the local stack uses end-to-end. */
+export declare const TEMPORAL_NAMESPACE = "default";
+/**
+ * The Temporal task queue the unified runner polls and the server dispatches
+ * to. This is the single source of truth, pinned identically on both the
+ * launched server and the runner so they can never diverge.
+ *
+ * Note: the Go CLI daemon still sets the runner to the stale
+ * `agent_execution_runner` queue while the server dispatches to
+ * `stigmer_runner` (the unified TS runner queue) — a latent hang. The TS CLI
+ * uses the correct value; a Go follow-up tracks fixing the daemon env.
+ */
+export declare const RUNNER_TASK_QUEUE = "stigmer_runner";
+/**
+ * The marker the unified runner prints on stdout once its Temporal worker is
+ * actually polling. Two existing harnesses (`test/conformance`, `test/e2e`)
+ * already depend on it; the daemon uses it to report truthful runner readiness
+ * rather than mere process liveness.
+ */
+export declare const RUNNER_READY_MARKER = "Worker ready, polling for tasks";
+/** PID file names (live under the data dir; see `paths.ts`). */
+export declare const DAEMON_PID_FILE = "daemon.pid";
+export declare const SERVER_PID_FILE = "stigmer-server.pid";
+export declare const RUNNER_PID_FILE = "runner.pid";
+/** State file names (live under the data dir). */
+export declare const HEALTH_STATE_FILE = "health-state.json";
+export declare const STARTUP_CONFIG_FILE = "startup-config.json";
+//# sourceMappingURL=constants.d.ts.map

package/local/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/local/constants.ts"],"names":[],"mappings":"AASA,kFAAkF;AAClF,eAAO,MAAM,WAAW,OAAO,CAAC;AAEhC,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,wDAAwD;AACxD,eAAO,MAAM,aAAa,OAAO,CAAC;AAElC,4BAA4B;AAC5B,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,YAAY,CAAC;AAE5C;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,oCAAoC,CAAC;AAErE,gEAAgE;AAChE,eAAO,MAAM,eAAe,eAAe,CAAC;AAC5C,eAAO,MAAM,eAAe,uBAAuB,CAAC;AACpD,eAAO,MAAM,eAAe,eAAe,CAAC;AAE5C,kDAAkD;AAClD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,mBAAmB,wBAAwB,CAAC"}

package/local/constants.js

@@ -0,0 +1,44 @@
+// Cross-cutting constants for the local-stack orchestration subsystem.
+//
+// These are the values that must stay identical across the foreground launcher,
+// the supervised daemon, the Temporal manager, and the status/logs commands.
+// Keeping them in one module is what lets a coding agent change a port or a
+// queue name in exactly one place and trust that server-dispatch and
+// runner-poll can never drift (see the T05 plan's "Critical correctness
+// finding").
+/** Port `stigmer-server` listens on (gRPC). Matches the Go CLI's `DaemonPort`. */
+export const SERVER_PORT = 7234;
+/** Port the embedded web console is served on (7xxx=API, 8xxx=UI convention). */
+export const WEB_CONSOLE_PORT = 8234;
+/** Temporal frontend gRPC port (dev server default). */
+export const TEMPORAL_PORT = 7233;
+/** Temporal Web UI port. */
+export const TEMPORAL_UI_PORT = 8233;
+/** Temporal namespace the local stack uses end-to-end. */
+export const TEMPORAL_NAMESPACE = "default";
+/**
+ * The Temporal task queue the unified runner polls and the server dispatches
+ * to. This is the single source of truth, pinned identically on both the
+ * launched server and the runner so they can never diverge.
+ *
+ * Note: the Go CLI daemon still sets the runner to the stale
+ * `agent_execution_runner` queue while the server dispatches to
+ * `stigmer_runner` (the unified TS runner queue) — a latent hang. The TS CLI
+ * uses the correct value; a Go follow-up tracks fixing the daemon env.
+ */
+export const RUNNER_TASK_QUEUE = "stigmer_runner";
+/**
+ * The marker the unified runner prints on stdout once its Temporal worker is
+ * actually polling. Two existing harnesses (`test/conformance`, `test/e2e`)
+ * already depend on it; the daemon uses it to report truthful runner readiness
+ * rather than mere process liveness.
+ */
+export const RUNNER_READY_MARKER = "Worker ready, polling for tasks";
+/** PID file names (live under the data dir; see `paths.ts`). */
+export const DAEMON_PID_FILE = "daemon.pid";
+export const SERVER_PID_FILE = "stigmer-server.pid";
+export const RUNNER_PID_FILE = "runner.pid";
+/** State file names (live under the data dir). */
+export const HEALTH_STATE_FILE = "health-state.json";
+export const STARTUP_CONFIG_FILE = "startup-config.json";
+//# sourceMappingURL=constants.js.map

package/local/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/local/constants.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,4EAA4E;AAC5E,qEAAqE;AACrE,wEAAwE;AACxE,aAAa;AAEb,kFAAkF;AAClF,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC;AAEhC,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,wDAAwD;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAElC,4BAA4B;AAC5B,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAE5C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAErE,gEAAgE;AAChE,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAC5C,MAAM,CAAC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AACpD,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAE5C,kDAAkD;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC"}

package/local/daemon/components.d.ts

@@ -0,0 +1,20 @@
+import type { DaemonConfig } from "./env.js";
+import type { ComponentSpec } from "./types.js";
+/**
+ * Environment for the `stigmer-server` child. Pins ports, Temporal coordinates,
+ * both runner task queues, and the db/storage paths to the ~/.stigmer layout.
+ */
+export declare function buildServerEnv(config: DaemonConfig, base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/**
+ * Environment for the unified runner child in static mode (STIGMER_RUNNER_MODE
+ * left unset). The runner polls RUNNER_TASK_QUEUE — the corrected queue that the
+ * server actually dispatches to.
+ */
+export declare function buildRunnerEnv(config: DaemonConfig, base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/**
+ * Build the ordered components: `stigmer-server` (critical, gated on its gRPC
+ * port) always first; the runner second unless server-only. Order matters — the
+ * runner talks to the server.
+ */
+export declare function buildComponents(config: DaemonConfig, base?: NodeJS.ProcessEnv): ComponentSpec[];
+//# sourceMappingURL=components.d.ts.map

package/local/daemon/components.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.d.ts","sourceRoot":"","sources":["../../../src/local/daemon/components.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,YAAY,CAAC;AAK/D;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAY7G;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAc7G;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,EAAE,CAmC5G"}

package/local/daemon/components.js

@@ -0,0 +1,105 @@
+// Builds the ordered list of managed components and their child environments.
+//
+// This module is where the queue pin lives end-to-end: the server is told to
+// dispatch to RUNNER_TASK_QUEUE and the runner is told to poll RUNNER_TASK_QUEUE,
+// both from the same constant, so the two can never drift. Setting the server's
+// load-bearing env explicitly (ports, queues, db/storage paths) rather than
+// relying on its compiled defaults makes the launch deterministic and the pin
+// enforceable — mirroring test/e2e/fixtures/server-manager.ts.
+import { dirname, join } from "node:path";
+import { RUNNER_TASK_QUEUE, RUNNER_READY_MARKER, SERVER_PID_FILE, RUNNER_PID_FILE, SERVER_PORT, TEMPORAL_NAMESPACE } from "../constants.js";
+import { waitForTcp } from "../net/tcp.js";
+/** How long the server has to open its gRPC port before startup aborts. */
+const SERVER_GATE_TIMEOUT_MS = 30_000;
+/**
+ * Environment for the `stigmer-server` child. Pins ports, Temporal coordinates,
+ * both runner task queues, and the db/storage paths to the ~/.stigmer layout.
+ */
+export function buildServerEnv(config, base = process.env) {
+    const configDir = dirname(config.dataDir); // ~/.stigmer
+    return {
+        ...base,
+        GRPC_PORT: String(SERVER_PORT),
+        TEMPORAL_HOST_PORT: config.temporalAddress,
+        TEMPORAL_NAMESPACE,
+        TEMPORAL_AGENT_EXECUTION_RUNNER_TASK_QUEUE: RUNNER_TASK_QUEUE,
+        TEMPORAL_WORKFLOW_EXECUTION_RUNNER_TASK_QUEUE: RUNNER_TASK_QUEUE,
+        DB_PATH: join(configDir, "stigmer.db"),
+        STORAGE_PATH: join(configDir, "storage"),
+    };
+}
+/**
+ * Environment for the unified runner child in static mode (STIGMER_RUNNER_MODE
+ * left unset). The runner polls RUNNER_TASK_QUEUE — the corrected queue that the
+ * server actually dispatches to.
+ */
+export function buildRunnerEnv(config, base = process.env) {
+    const env = {
+        ...base,
+        MODE: "local",
+        STIGMER_BACKEND_ENDPOINT: `http://localhost:${SERVER_PORT}`,
+        TEMPORAL_SERVICE_ADDRESS: config.temporalAddress,
+        TEMPORAL_NAMESPACE,
+        WORKSPACE_ROOT_DIR: join(config.dataDir, "workspace"),
+        STIGMER_TASK_QUEUE: RUNNER_TASK_QUEUE,
+        LOG_LEVEL: base.LOG_LEVEL ?? "info",
+    };
+    if (config.cursorApiKey !== undefined)
+        env.CURSOR_API_KEY = config.cursorApiKey;
+    if (config.activityRouting !== undefined)
+        env.STIGMER_ACTIVITY_ROUTING = config.activityRouting;
+    return env;
+}
+/**
+ * Build the ordered components: `stigmer-server` (critical, gated on its gRPC
+ * port) always first; the runner second unless server-only. Order matters — the
+ * runner talks to the server.
+ */
+export function buildComponents(config, base = process.env) {
+    const components = [
+        {
+            name: "stigmer-server",
+            pidFile: join(config.dataDir, SERVER_PID_FILE),
+            critical: true,
+            resolve: () => ({
+                command: config.serverBin,
+                args: [],
+                env: buildServerEnv(config, base),
+                logFile: join(config.logDir, "stigmer-server.log"),
+            }),
+            gate: serverGate(),
+        },
+    ];
+    if (config.serverOnly || config.runner === undefined) {
+        return components;
+    }
+    const runner = config.runner;
+    components.push({
+        name: "runner",
+        pidFile: join(config.dataDir, RUNNER_PID_FILE),
+        critical: false,
+        resolve: () => ({
+            command: runner.nodeBin,
+            args: [runner.entryPath],
+            cwd: join(config.dataDir, "workspace"),
+            env: buildRunnerEnv(config, base),
+            logFile: join(config.logDir, "runner.log"),
+            readinessMarker: RUNNER_READY_MARKER,
+        }),
+    });
+    return components;
+}
+// The server is ready once its gRPC port accepts a connection; fail fast if it
+// exits first.
+function serverGate() {
+    return {
+        description: `stigmer-server gRPC on port ${SERVER_PORT}`,
+        wait: (handle) => waitForTcp({
+            port: SERVER_PORT,
+            timeoutMs: SERVER_GATE_TIMEOUT_MS,
+            label: "stigmer-server gRPC",
+            getExit: () => (handle.hasExited() ? { code: null, signal: null } : null),
+        }),
+    };
+}
+//# sourceMappingURL=components.js.map

package/local/daemon/components.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.js","sourceRoot":"","sources":["../../../src/local/daemon/components.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,kFAAkF;AAClF,gFAAgF;AAChF,4EAA4E;AAC5E,8EAA8E;AAC9E,+DAA+D;AAE/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC5I,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAI3C,2EAA2E;AAC3E,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,OAA0B,OAAO,CAAC,GAAG;IACxF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;IACxD,OAAO;QACL,GAAG,IAAI;QACP,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC;QAC9B,kBAAkB,EAAE,MAAM,CAAC,eAAe;QAC1C,kBAAkB;QAClB,0CAA0C,EAAE,iBAAiB;QAC7D,6CAA6C,EAAE,iBAAiB;QAChE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACtC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,OAA0B,OAAO,CAAC,GAAG;IACxF,MAAM,GAAG,GAAsB;QAC7B,GAAG,IAAI;QACP,IAAI,EAAE,OAAO;QACb,wBAAwB,EAAE,oBAAoB,WAAW,EAAE;QAC3D,wBAAwB,EAAE,MAAM,CAAC,eAAe;QAChD,kBAAkB;QAClB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC;QACrD,kBAAkB,EAAE,iBAAiB;QACrC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM;KACpC,CAAC;IACF,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC;IAChF,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;QAAE,GAAG,CAAC,wBAAwB,GAAG,MAAM,CAAC,eAAe,CAAC;IAChG,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,OAA0B,OAAO,CAAC,GAAG;IACzF,MAAM,UAAU,GAAoB;QAClC;YACE,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC;YAC9C,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACd,OAAO,EAAE,MAAM,CAAC,SAAS;gBACzB,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC;gBACjC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC;aACnD,CAAC;YACF,IAAI,EAAE,UAAU,EAAE;SACnB;KACF,CAAC;IAEF,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,UAAU,CAAC,IAAI,CAAC;QACd,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC;QAC9C,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;YACxB,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC;YACtC,GAAG,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC;YACjC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC;YAC1C,eAAe,EAAE,mBAAmB;SACrC,CAAC;KACH,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,SAAS,UAAU;IACjB,OAAO;QACL,WAAW,EAAE,+BAA+B,WAAW,EAAE;QACzD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CACf,UAAU,CAAC;YACT,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,sBAAsB;YACjC,KAAK,EAAE,qBAAqB;YAC5B,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAC1E,CAAC;KACL,CAAC;AACJ,CAAC"}

package/local/daemon/env.d.ts

@@ -0,0 +1,55 @@
+/** Environment variable names that make up the launcher -> daemon contract. */
+export declare const DaemonEnvVar: {
+    readonly DataDir: "STIGMER_DATA_DIR";
+    readonly LogDir: "STIGMER_LOG_DIR";
+    readonly TemporalManaged: "STIGMER_TEMPORAL_MANAGED";
+    readonly TemporalAddress: "TEMPORAL_SERVICE_ADDRESS";
+    readonly ServerOnly: "STIGMER_SERVER_ONLY";
+    readonly NoWeb: "STIGMER_NO_WEB";
+    readonly ServerBin: "STIGMER_SERVER_BIN";
+    readonly RunnerNodeBin: "STIGMER_RUNNER_NODE_BIN";
+    readonly RunnerEntry: "STIGMER_RUNNER_ENTRY";
+    readonly RunnerAppDir: "STIGMER_RUNNER_APP_DIR";
+    readonly CursorApiKey: "CURSOR_API_KEY";
+    readonly ActivityRouting: "STIGMER_ACTIVITY_ROUTING";
+};
+/** Resolved runner launch coordinates. */
+export interface RunnerLaunch {
+    nodeBin: string;
+    entryPath: string;
+    appDir: string;
+}
+/** The daemon's resolved configuration, parsed from the environment. */
+export interface DaemonConfig {
+    dataDir: string;
+    logDir: string;
+    temporalManaged: boolean;
+    temporalAddress: string;
+    serverOnly: boolean;
+    noWeb: boolean;
+    serverBin: string;
+    runner?: RunnerLaunch;
+    cursorApiKey?: string;
+    activityRouting?: string;
+}
+/** Inputs the launcher already resolved, to encode into the daemon env. */
+export interface DaemonEnvInputs {
+    dataDir: string;
+    logDir: string;
+    temporalManaged: boolean;
+    temporalAddress: string;
+    serverOnly: boolean;
+    noWeb: boolean;
+    serverBin: string;
+    runner?: RunnerLaunch;
+}
+/**
+ * Build the environment for the internal-daemon child: the caller's environment
+ * plus the resolved contract values. Runner coordinates are omitted in
+ * server-only mode.
+ */
+export declare function buildDaemonEnv(inputs: DaemonEnvInputs, base?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** Parse the daemon configuration from an environment. Throws if a required
+ * value is missing. */
+export declare function readDaemonConfig(env?: NodeJS.ProcessEnv): DaemonConfig;
+//# sourceMappingURL=env.d.ts.map

package/local/daemon/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/local/daemon/env.ts"],"names":[],"mappings":"AAMA,+EAA+E;AAC/E,eAAO,MAAM,YAAY;;;;;;;;;;;;;CAaf,CAAC;AAEX,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAehH;AAED;uBACuB;AACvB,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,CAkBnF"}