@synth-deploy/server 0.1.0

package/dist/agent/envoy-registry.js

@@ -0,0 +1,319 @@
+import crypto from "node:crypto";
+import { EnvoyClient } from "./envoy-client.js";
+// ---------------------------------------------------------------------------
+// Helpers to convert between persisted and domain types
+// ---------------------------------------------------------------------------
+function fromPersisted(p) {
+    return {
+        id: p.id,
+        name: p.name,
+        url: p.url,
+        token: p.token,
+        assignedEnvironments: p.assignedEnvironments,
+        assignedPartitions: p.assignedPartitions,
+        registeredAt: p.registeredAt,
+        lastHealthCheck: p.lastHealthCheck,
+        lastHealthStatus: p.lastHealthStatus,
+        cachedHostname: p.cachedHostname,
+        cachedOs: p.cachedOs,
+        cachedSummary: p.cachedSummary,
+        cachedReadiness: p.cachedReadiness,
+    };
+}
+function toPersisted(r) {
+    return {
+        id: r.id,
+        name: r.name,
+        url: r.url,
+        token: r.token,
+        assignedEnvironments: r.assignedEnvironments,
+        assignedPartitions: r.assignedPartitions,
+        registeredAt: r.registeredAt,
+        lastHealthCheck: r.lastHealthCheck,
+        lastHealthStatus: r.lastHealthStatus,
+        cachedHostname: r.cachedHostname,
+        cachedOs: r.cachedOs,
+        cachedSummary: r.cachedSummary,
+        cachedReadiness: r.cachedReadiness,
+    };
+}
+// ---------------------------------------------------------------------------
+// EnvoyRegistry — SQLite-backed registry for multiple Envoy instances
+// ---------------------------------------------------------------------------
+export class EnvoyRegistry {
+    store;
+    constructor(store) {
+        this.store = store;
+    }
+    /**
+     * Register a new Envoy. Returns the registration with a generated token.
+     */
+    register(params) {
+        const id = crypto.randomUUID();
+        const token = crypto.randomBytes(32).toString("hex");
+        const registration = {
+            id,
+            name: params.name,
+            url: params.url,
+            token,
+            assignedEnvironments: params.assignedEnvironments ?? [],
+            assignedPartitions: params.assignedPartitions ?? [],
+            registeredAt: new Date().toISOString(),
+            lastHealthCheck: null,
+            lastHealthStatus: null,
+            cachedHostname: null,
+            cachedOs: null,
+            cachedSummary: null,
+            cachedReadiness: null,
+        };
+        this.store?.insert(toPersisted(registration));
+        return registration;
+    }
+    /**
+     * Deregister an Envoy by ID.
+     */
+    deregister(id) {
+        if (this.store) {
+            return this.store.delete(id);
+        }
+        return false;
+    }
+    /**
+     * List all registered Envoys.
+     */
+    list() {
+        if (this.store) {
+            return this.store.list().map(fromPersisted);
+        }
+        return [];
+    }
+    /**
+     * Update an Envoy's assignment or name.
+     */
+    update(id, updates) {
+        if (!this.store)
+            return undefined;
+        const existing = this.store.getById(id);
+        if (!existing)
+            return undefined;
+        this.store.update(id, {
+            name: updates.name,
+            url: updates.url,
+            assignedEnvironments: updates.assignedEnvironments,
+            assignedPartitions: updates.assignedPartitions,
+        });
+        return fromPersisted(this.store.getById(id));
+    }
+    /**
+     * Ensure an envoy at `url` is registered with a specific `token`.
+     * If already registered, updates its token. If not, creates a new entry.
+     * Used to bootstrap the default envoy from environment variables (SYNTH_ENVOY_TOKEN).
+     */
+    ensureRegisteredWithToken(params, token) {
+        const existing = this.list().find((r) => r.url === params.url);
+        if (existing) {
+            this.store?.updateToken(existing.id, token);
+            return { ...existing, token };
+        }
+        const id = crypto.randomUUID();
+        const registration = {
+            id,
+            name: params.name,
+            url: params.url,
+            token,
+            assignedEnvironments: [],
+            assignedPartitions: [],
+            registeredAt: new Date().toISOString(),
+            lastHealthCheck: null,
+            lastHealthStatus: null,
+            cachedHostname: null,
+            cachedOs: null,
+            cachedSummary: null,
+            cachedReadiness: null,
+        };
+        this.store?.insert(toPersisted(registration));
+        return registration;
+    }
+    /**
+     * Rotate the token for an Envoy. Returns the new token.
+     */
+    rotateToken(id) {
+        if (!this.store)
+            return undefined;
+        const existing = this.store.getById(id);
+        if (!existing)
+            return undefined;
+        const newToken = crypto.randomBytes(32).toString("hex");
+        this.store.updateToken(id, newToken);
+        return newToken;
+    }
+    /**
+     * Validate a token against a registered Envoy.
+     */
+    validateToken(token) {
+        if (!this.store)
+            return undefined;
+        const persisted = this.store.getByToken(token);
+        return persisted ? fromPersisted(persisted) : undefined;
+    }
+    /**
+     * Update health status for an Envoy (called after probing).
+     */
+    updateHealth(id, status) {
+        this.store?.updateHealth(id, status, new Date().toISOString());
+    }
+    /**
+     * Find the best Envoy for a given environment.
+     * Priority: assigned + healthy > assigned + degraded > unassigned + healthy > fallback
+     */
+    findForEnvironment(environmentName) {
+        const all = this.list();
+        if (all.length === 0)
+            return undefined;
+        // Assigned and healthy
+        const assignedHealthy = all.find((e) => e.assignedEnvironments.includes(environmentName) &&
+            e.lastHealthStatus === "healthy");
+        if (assignedHealthy)
+            return assignedHealthy;
+        // Assigned (any status)
+        const assigned = all.find((e) => e.assignedEnvironments.includes(environmentName));
+        if (assigned)
+            return assigned;
+        // Unassigned and healthy (available for any environment)
+        const unassignedHealthy = all.find((e) => e.assignedEnvironments.length === 0 &&
+            e.lastHealthStatus === "healthy");
+        if (unassignedHealthy)
+            return unassignedHealthy;
+        // Unassigned (any status)
+        const unassigned = all.find((e) => e.assignedEnvironments.length === 0);
+        if (unassigned)
+            return unassigned;
+        // Fallback: any envoy
+        return all[0];
+    }
+    /**
+     * Return cached registry entry without probing (instant).
+     */
+    get(id) {
+        if (!this.store)
+            return undefined;
+        const persisted = this.store.getById(id);
+        if (!persisted)
+            return undefined;
+        const reg = fromPersisted(persisted);
+        const healthMap = {
+            healthy: "OK",
+            degraded: "Degraded",
+            unreachable: "Unreachable",
+        };
+        return {
+            ...reg,
+            health: healthMap[reg.lastHealthStatus ?? "unreachable"] ?? "Unreachable",
+            hostname: reg.cachedHostname,
+            os: reg.cachedOs,
+            lastSeen: reg.lastHealthCheck,
+            summary: reg.cachedSummary,
+            readiness: reg.cachedReadiness,
+        };
+    }
+    /**
+     * Return all cached registry entries without probing (instant).
+     */
+    listEntries() {
+        return this.list().map((reg) => {
+            const healthMap = {
+                healthy: "OK",
+                degraded: "Degraded",
+                unreachable: "Unreachable",
+            };
+            return {
+                ...reg,
+                health: healthMap[reg.lastHealthStatus ?? "unreachable"] ?? "Unreachable",
+                hostname: reg.cachedHostname,
+                os: reg.cachedOs,
+                lastSeen: reg.lastHealthCheck,
+                summary: reg.cachedSummary,
+                readiness: reg.cachedReadiness,
+            };
+        });
+    }
+    /**
+     * Probe an Envoy's health and update its registry entry.
+     */
+    async probe(id) {
+        if (!this.store)
+            return undefined;
+        const persisted = this.store.getById(id);
+        if (!persisted)
+            return undefined;
+        const registration = fromPersisted(persisted);
+        const client = new EnvoyClient(registration.url, 5000);
+        try {
+            const health = await client.checkHealth();
+            const status = health.status === "healthy" ? "healthy" : "degraded";
+            const timestamp = new Date().toISOString();
+            this.store.updateCachedProbe(id, {
+                lastHealthCheck: timestamp,
+                lastHealthStatus: status,
+                cachedHostname: health.hostname,
+                cachedOs: health.os ?? null,
+                cachedSummary: health.summary,
+                cachedReadiness: health.readiness,
+            });
+            return {
+                ...registration,
+                lastHealthCheck: timestamp,
+                lastHealthStatus: status,
+                cachedHostname: health.hostname,
+                cachedOs: health.os ?? null,
+                cachedSummary: health.summary,
+                cachedReadiness: health.readiness,
+                health: status === "healthy" ? "OK" : "Degraded",
+                hostname: health.hostname,
+                os: health.os ?? null,
+                lastSeen: health.timestamp,
+                summary: health.summary,
+                readiness: health.readiness,
+            };
+        }
+        catch {
+            const timestamp = new Date().toISOString();
+            this.store.updateCachedProbe(id, {
+                lastHealthCheck: timestamp,
+                lastHealthStatus: "unreachable",
+                cachedHostname: null,
+                cachedOs: null,
+                cachedSummary: null,
+                cachedReadiness: null,
+            });
+            return {
+                ...registration,
+                lastHealthCheck: timestamp,
+                lastHealthStatus: "unreachable",
+                cachedHostname: null,
+                cachedOs: null,
+                cachedSummary: null,
+                cachedReadiness: null,
+                health: "Unreachable",
+                hostname: null,
+                os: null,
+                lastSeen: null,
+                summary: null,
+                readiness: null,
+            };
+        }
+    }
+    /**
+     * Probe all registered Envoys and return their status.
+     */
+    async probeAll() {
+        const entries = [];
+        for (const envoy of this.list()) {
+            const entry = await this.probe(envoy.id);
+            if (entry)
+                entries.push(entry);
+        }
+        return entries;
+    }
+}
+//# sourceMappingURL=envoy-registry.js.map

package/dist/agent/envoy-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envoy-registry.js","sourceRoot":"","sources":["../../src/agent/envoy-registry.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAqChD,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,SAAS,aAAa,CAAC,CAA6B;IAClD,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;QAC5C,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,aAAa,EAAE,CAAC,CAAC,aAAsD;QACvE,eAAe,EAAE,CAAC,CAAC,eAA0D;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,CAAoB;IACvC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;QAC5C,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,eAAe,EAAE,CAAC,CAAC,eAAe;KACnC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAE9E,MAAM,OAAO,aAAa;IACJ;IAApB,YAAoB,KAAoC;QAApC,UAAK,GAAL,KAAK,CAA+B;IAAG,CAAC;IAE5D;;OAEG;IACH,QAAQ,CAAC,MAKR;QACC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErD,MAAM,YAAY,GAAsB;YACtC,EAAE;YACF,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,EAAE;YACvD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;YACnD,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,IAAI;SACtB,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9C,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,EAAU;QACnB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,EAAU,EAAE,OAKlB;QACC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAEhC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;SAC/C,CAAC,CAAC;QAEH,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAE,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,yBAAyB,CAAC,MAAqC,EAAE,KAAa;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAsB;YACtC,EAAE;YACF,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK;YACL,oBAAoB,EAAE,EAAE;YACxB,kBAAkB,EAAE,EAAE;YACtB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,IAAI;SACtB,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9C,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,EAAU;QACpB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAEhC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACrC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAa;QACzB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,EAAU,EAAE,MAA8C;QACrE,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,eAAuB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEvC,uBAAuB;QACvB,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,eAAe,CAAC;YAChD,CAAC,CAAC,gBAAgB,KAAK,SAAS,CACnC,CAAC;QACF,IAAI,eAAe;YAAE,OAAO,eAAe,CAAC;QAE5C,wBAAwB;QACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,eAAe,CAAC,CACjD,CAAC;QACF,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,yDAAyD;QACzD,MAAM,iBAAiB,GAAG,GAAG,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC;YACnC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CACnC,CAAC;QACF,IAAI,iBAAiB;YAAE,OAAO,iBAAiB,CAAC;QAEhD,0BAA0B;QAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAElC,sBAAsB;QACtB,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,EAAU;QACZ,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,SAAS,GAAsD;YACnE,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,aAAa;SAC3B,CAAC;QACF,OAAO;YACL,GAAG,GAAG;YACN,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,gBAAgB,IAAI,aAAa,CAAC,IAAI,aAAa;YACzE,QAAQ,EAAE,GAAG,CAAC,cAAc;YAC5B,EAAE,EAAE,GAAG,CAAC,QAAQ;YAChB,QAAQ,EAAE,GAAG,CAAC,eAAe;YAC7B,OAAO,EAAE,GAAG,CAAC,aAAa;YAC1B,SAAS,EAAE,GAAG,CAAC,eAAe;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAsD;gBACnE,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,aAAa;aAC3B,CAAC;YACF,OAAO;gBACL,GAAG,GAAG;gBACN,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,gBAAgB,IAAI,aAAa,CAAC,IAAI,aAAa;gBACzE,QAAQ,EAAE,GAAG,CAAC,cAAc;gBAC5B,EAAE,EAAE,GAAG,CAAC,QAAQ;gBAChB,QAAQ,EAAE,GAAG,CAAC,eAAe;gBAC7B,OAAO,EAAE,GAAG,CAAC,aAAa;gBAC1B,SAAS,EAAE,GAAG,CAAC,eAAe;aAC/B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,EAAU;QACpB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YACpE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE3C,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE;gBAC/B,eAAe,EAAE,SAAS;gBAC1B,gBAAgB,EAAE,MAAM;gBACxB,cAAc,EAAE,MAAM,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI;gBAC3B,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,eAAe,EAAE,MAAM,CAAC,SAAS;aAClC,CAAC,CAAC;YAEH,OAAO;gBACL,GAAG,YAAY;gBACf,eAAe,EAAE,SAAS;gBAC1B,gBAAgB,EAAE,MAAM;gBACxB,cAAc,EAAE,MAAM,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI;gBAC3B,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,eAAe,EAAE,MAAM,CAAC,SAAS;gBACjC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;gBAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI;gBACrB,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE;gBAC/B,eAAe,EAAE,SAAS;gBAC1B,gBAAgB,EAAE,aAAa;gBAC/B,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,IAAI;gBACnB,eAAe,EAAE,IAAI;aACtB,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,YAAY;gBACf,eAAe,EAAE,SAAS;gBAC1B,gBAAgB,EAAE,aAAa;gBAC/B,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,IAAI;gBACnB,eAAe,EAAE,IAAI;gBACrB,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,IAAI;gBACd,EAAE,EAAE,IAAI;gBACR,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/agent/health-checker.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Service health check abstraction.
+ *
+ * Injected into the Command Agent so tests can control health check outcomes
+ * without real network calls. In later phases, a real implementation will
+ * make HTTP calls to Envoy health endpoints.
+ */
+export interface HealthCheckResult {
+    reachable: boolean;
+    responseTimeMs: number | null;
+    error: string | null;
+}
+export interface ServiceHealthChecker {
+    /**
+     * Check if the target service/environment is healthy and reachable.
+     */
+    check(serviceId: string, context: {
+        partitionId: string;
+        environmentName: string;
+    }): Promise<HealthCheckResult>;
+}
+/**
+ * Default health checker — always reports healthy.
+ * Used in development and when no real infrastructure is connected.
+ */
+export declare class DefaultHealthChecker implements ServiceHealthChecker {
+    check(): Promise<HealthCheckResult>;
+}
+/**
+ * Real health checker that makes HTTP requests to an Envoy health endpoint.
+ * Used when an Envoy URL is configured.
+ */
+export declare class EnvoyHealthChecker implements ServiceHealthChecker {
+    private readonly envoyUrl;
+    private readonly timeoutMs;
+    constructor(envoyUrl: string, timeoutMs?: number);
+    check(): Promise<HealthCheckResult>;
+}
+//# sourceMappingURL=health-checker.d.ts.map

package/dist/agent/health-checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-checker.d.ts","sourceRoot":"","sources":["../../src/agent/health-checker.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,CACH,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,GACxD,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,qBAAa,oBAAqB,YAAW,oBAAoB;IACzD,KAAK,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAG1C;AAED;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,oBAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAU,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAA5C,QAAQ,EAAE,MAAM,EAAmB,SAAS,SAAO;IAE1E,KAAK,IAAI,OAAO,CAAC,iBAAiB,CAAC;CA0B1C"}

package/dist/agent/health-checker.js

@@ -0,0 +1,49 @@
+import { serverLog, serverWarn, serverError } from "../logger.js";
+/**
+ * Default health checker — always reports healthy.
+ * Used in development and when no real infrastructure is connected.
+ */
+export class DefaultHealthChecker {
+    async check() {
+        return { reachable: true, responseTimeMs: 1, error: null };
+    }
+}
+/**
+ * Real health checker that makes HTTP requests to an Envoy health endpoint.
+ * Used when an Envoy URL is configured.
+ */
+export class EnvoyHealthChecker {
+    envoyUrl;
+    timeoutMs;
+    constructor(envoyUrl, timeoutMs = 5000) {
+        this.envoyUrl = envoyUrl;
+        this.timeoutMs = timeoutMs;
+    }
+    async check() {
+        serverLog("HEALTH-CHECK", { url: this.envoyUrl });
+        const start = Date.now();
+        try {
+            const controller = new AbortController();
+            const timeout = setTimeout(() => controller.abort(), this.timeoutMs);
+            const res = await fetch(`${this.envoyUrl}/health`, { signal: controller.signal });
+            clearTimeout(timeout);
+            const responseTimeMs = Date.now() - start;
+            if (res.ok) {
+                serverLog("HEALTH-OK", { url: this.envoyUrl, responseTimeMs });
+                return { reachable: true, responseTimeMs, error: null };
+            }
+            serverWarn("HEALTH-FAILED", { url: this.envoyUrl, status: res.status, responseTimeMs });
+            return { reachable: false, responseTimeMs, error: `HTTP ${res.status}` };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            serverError("HEALTH-ERROR", { url: this.envoyUrl, error: message });
+            return {
+                reachable: false,
+                responseTimeMs: null,
+                error: message,
+            };
+        }
+    }
+}
+//# sourceMappingURL=health-checker.js.map

package/dist/agent/health-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-checker.js","sourceRoot":"","sources":["../../src/agent/health-checker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA0BlE;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IAC/B,KAAK,CAAC,KAAK;QACT,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACA;IAAmC;IAAhE,YAA6B,QAAgB,EAAmB,YAAY,IAAI;QAAnD,aAAQ,GAAR,QAAQ,CAAQ;QAAmB,cAAS,GAAT,SAAS,CAAO;IAAG,CAAC;IAEpF,KAAK,CAAC,KAAK;QACT,SAAS,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACrE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAClF,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAE1C,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,SAAS,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC/D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAC1D,CAAC;YACD,UAAU,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACxF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,WAAW,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACpE,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,cAAc,EAAE,IAAI;gBACpB,KAAK,EAAE,OAAO;aACf,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/agent/mcp-client-manager.d.ts

@@ -0,0 +1,36 @@
+import type { McpServerConfig } from "@synth-deploy/core";
+export interface McpToolResult {
+    serverName: string;
+    toolName: string;
+    result: unknown;
+    error?: string;
+}
+/**
+ * Manages connections to external MCP servers (monitoring, incident management,
+ * etc.) and exposes their tools/resources for pre-deployment checks and
+ * diagnostic investigations.
+ *
+ * Design principles:
+ * - Graceful degradation: unreachable servers are logged and skipped, never block deployments
+ * - All external data access must be recorded to the Debrief by the caller
+ * - Lightweight: if no servers are configured, the manager is a no-op
+ */
+export declare class McpClientManager {
+    private clients;
+    connect(config: McpServerConfig): Promise<void>;
+    connectAll(configs: McpServerConfig[]): Promise<void>;
+    listTools(): Promise<Array<{
+        server: string;
+        name: string;
+        description?: string;
+    }>>;
+    callTool(serverName: string, toolName: string, args: Record<string, unknown>): Promise<McpToolResult>;
+    listResources(serverName: string): Promise<Array<{
+        uri: string;
+        name?: string;
+    }>>;
+    getConnectedServers(): string[];
+    disconnect(serverName: string): Promise<void>;
+    disconnectAll(): Promise<void>;
+}
+//# sourceMappingURL=mcp-client-manager.d.ts.map

package/dist/agent/mcp-client-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client-manager.d.ts","sourceRoot":"","sources":["../../src/agent/mcp-client-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CACH;IAEN,OAAO,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB/C,UAAU,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,SAAS,IAAI,OAAO,CACxB,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAC9D;IAuBK,QAAQ,CACZ,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,aAAa,CAAC;IAqBnB,aAAa,CACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAWjD,mBAAmB,IAAI,MAAM,EAAE;IAIzB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY7C,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;CAKrC"}

package/dist/agent/mcp-client-manager.js

@@ -0,0 +1,106 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+/**
+ * Manages connections to external MCP servers (monitoring, incident management,
+ * etc.) and exposes their tools/resources for pre-deployment checks and
+ * diagnostic investigations.
+ *
+ * Design principles:
+ * - Graceful degradation: unreachable servers are logged and skipped, never block deployments
+ * - All external data access must be recorded to the Debrief by the caller
+ * - Lightweight: if no servers are configured, the manager is a no-op
+ */
+export class McpClientManager {
+    clients = new Map();
+    async connect(config) {
+        try {
+            const transport = new StreamableHTTPClientTransport(new URL(config.url));
+            const client = new Client({
+                name: "synth-server",
+                version: "0.1.0",
+            });
+            await client.connect(transport);
+            this.clients.set(config.name, { client, config });
+        }
+        catch (error) {
+            // Graceful degradation -- log but don't throw
+            console.warn(`[MCP] Failed to connect to ${config.name} at ${config.url}: ${error}`);
+        }
+    }
+    async connectAll(configs) {
+        await Promise.allSettled(configs.map((c) => this.connect(c)));
+    }
+    async listTools() {
+        const tools = [];
+        for (const [name, { client }] of this.clients) {
+            try {
+                const result = await client.listTools();
+                for (const tool of result.tools) {
+                    tools.push({
+                        server: name,
+                        name: tool.name,
+                        description: tool.description,
+                    });
+                }
+            }
+            catch {
+                // Server unreachable -- skip
+            }
+        }
+        return tools;
+    }
+    async callTool(serverName, toolName, args) {
+        const entry = this.clients.get(serverName);
+        if (!entry) {
+            return {
+                serverName,
+                toolName,
+                result: null,
+                error: `Server '${serverName}' not connected`,
+            };
+        }
+        try {
+            const result = await entry.client.callTool({
+                name: toolName,
+                arguments: args,
+            });
+            return { serverName, toolName, result: result.content };
+        }
+        catch (error) {
+            return { serverName, toolName, result: null, error: String(error) };
+        }
+    }
+    async listResources(serverName) {
+        const entry = this.clients.get(serverName);
+        if (!entry)
+            return [];
+        try {
+            const result = await entry.client.listResources();
+            return result.resources.map((r) => ({ uri: r.uri, name: r.name }));
+        }
+        catch {
+            return [];
+        }
+    }
+    getConnectedServers() {
+        return Array.from(this.clients.keys());
+    }
+    async disconnect(serverName) {
+        const entry = this.clients.get(serverName);
+        if (entry) {
+            try {
+                await entry.client.close();
+            }
+            catch {
+                /* ignore */
+            }
+            this.clients.delete(serverName);
+        }
+    }
+    async disconnectAll() {
+        for (const name of this.clients.keys()) {
+            await this.disconnect(name);
+        }
+    }
+}
+//# sourceMappingURL=mcp-client-manager.js.map

package/dist/agent/mcp-client-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client-manager.js","sourceRoot":"","sources":["../../src/agent/mcp-client-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAUnG;;;;;;;;;GASG;AACH,MAAM,OAAO,gBAAgB;IACnB,OAAO,GACb,IAAI,GAAG,EAAE,CAAC;IAEZ,KAAK,CAAC,OAAO,CAAC,MAAuB;QACnC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;gBACxB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8CAA8C;YAC9C,OAAO,CAAC,IAAI,CACV,8BAA8B,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,KAAK,EAAE,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B;QACzC,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,SAAS;QAGb,MAAM,KAAK,GAIN,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;gBACxC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,KAAK,CAAC,IAAI,CAAC;wBACT,MAAM,EAAE,IAAI;wBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,UAAkB,EAClB,QAAgB,EAChB,IAA6B;QAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,UAAU;gBACV,QAAQ;gBACR,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,WAAW,UAAU,iBAAiB;aAC9C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACzC,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,UAAkB;QAElB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAClD,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF"}

package/dist/agent/stale-deployment-detector.d.ts

@@ -0,0 +1,15 @@
+import type { DebriefWriter } from "@synth-deploy/core";
+import type { DeploymentStore } from "./synth-agent.js";
+/**
+ * Scans for deployments stuck in "running" status beyond the stale threshold
+ * and marks them as failed with a clear explanation.
+ *
+ * Returns the number of deployments marked as stale.
+ */
+export declare function markStaleDeployments(deployments: DeploymentStore, debrief: DebriefWriter, thresholdMs?: number): number;
+/**
+ * Starts a periodic scan for stale deployments.
+ * Returns a cleanup function to stop the interval.
+ */
+export declare function startStaleDeploymentScanner(deployments: DeploymentStore, debrief: DebriefWriter, intervalMs?: number, thresholdMs?: number): () => void;
+//# sourceMappingURL=stale-deployment-detector.d.ts.map

package/dist/agent/stale-deployment-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stale-deployment-detector.d.ts","sourceRoot":"","sources":["../../src/agent/stale-deployment-detector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAUxD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,eAAe,EAC5B,OAAO,EAAE,aAAa,EACtB,WAAW,GAAE,MAAmC,GAC/C,MAAM,CAqCR;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,eAAe,EAC5B,OAAO,EAAE,aAAa,EACtB,UAAU,GAAE,MAAiC,EAC7C,WAAW,GAAE,MAAmC,GAC/C,MAAM,IAAI,CASZ"}

package/dist/agent/stale-deployment-detector.js

@@ -0,0 +1,50 @@
+const DEFAULT_STALE_THRESHOLD_MS = Number(process.env.SYNTH_STALE_DEPLOYMENT_TIMEOUT_MS ?? 30 * 60 * 1000);
+const DEFAULT_SCAN_INTERVAL_MS = Number(process.env.SYNTH_STALE_SCAN_INTERVAL_MS ?? 60 * 1000);
+/**
+ * Scans for deployments stuck in "running" status beyond the stale threshold
+ * and marks them as failed with a clear explanation.
+ *
+ * Returns the number of deployments marked as stale.
+ */
+export function markStaleDeployments(deployments, debrief, thresholdMs = DEFAULT_STALE_THRESHOLD_MS) {
+    const now = Date.now();
+    const stale = deployments.list().filter((d) => d.status === "running" &&
+        now - new Date(d.createdAt).getTime() > thresholdMs);
+    for (const deployment of stale) {
+        deployment.status = "failed";
+        deployments.save(deployment);
+        const staleDurationMin = Math.round((now - new Date(deployment.createdAt).getTime()) / 60_000);
+        debrief.record({
+            partitionId: deployment.partitionId ?? null,
+            deploymentId: deployment.id,
+            agent: "server",
+            decisionType: "deployment-failure",
+            decision: `Marked deployment as failed: exceeded ${Math.round(thresholdMs / 60_000)} minute stale threshold`,
+            reasoning: `Deployment ${deployment.id.slice(0, 8)} has been in "running" status for ${staleDurationMin} minutes ` +
+                `without receiving a completion report. This typically indicates Command lost connection to the Envoy ` +
+                `or the Envoy process crashed during execution. The deployment has been marked as failed to prevent ` +
+                `indefinite "running" status.`,
+            context: {
+                deploymentId: deployment.id,
+                partitionId: deployment.partitionId ?? null,
+                staleDurationMinutes: staleDurationMin,
+                thresholdMinutes: Math.round(thresholdMs / 60_000),
+            },
+        });
+    }
+    return stale.length;
+}
+/**
+ * Starts a periodic scan for stale deployments.
+ * Returns a cleanup function to stop the interval.
+ */
+export function startStaleDeploymentScanner(deployments, debrief, intervalMs = DEFAULT_SCAN_INTERVAL_MS, thresholdMs = DEFAULT_STALE_THRESHOLD_MS) {
+    const timer = setInterval(() => {
+        const count = markStaleDeployments(deployments, debrief, thresholdMs);
+        if (count > 0) {
+            console.log(`[stale-detector] Marked ${count} stale deployment(s) as failed`);
+        }
+    }, intervalMs);
+    return () => clearInterval(timer);
+}
+//# sourceMappingURL=stale-deployment-detector.js.map

package/dist/agent/stale-deployment-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stale-deployment-detector.js","sourceRoot":"","sources":["../../src/agent/stale-deployment-detector.ts"],"names":[],"mappings":"AAGA,MAAM,0BAA0B,GAAG,MAAM,CACvC,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAChE,CAAC;AAEF,MAAM,wBAAwB,GAAG,MAAM,CACrC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,GAAG,IAAI,CACtD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAA4B,EAC5B,OAAsB,EACtB,cAAsB,0BAA0B;IAEhD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,SAAS;QACtB,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,CACtD,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,UAAU,CAAC,MAAM,GAAG,QAAQ,CAAC;QAC7B,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE7B,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CACjC,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,CAC1D,CAAC;QAEF,OAAO,CAAC,MAAM,CAAC;YACb,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;YAC3C,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE,oBAAoB;YAClC,QAAQ,EAAE,yCAAyC,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,yBAAyB;YAC5G,SAAS,EACP,cAAc,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,qCAAqC,gBAAgB,WAAW;gBACvG,uGAAuG;gBACvG,qGAAqG;gBACrG,8BAA8B;YAChC,OAAO,EAAE;gBACP,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;gBAC3C,oBAAoB,EAAE,gBAAgB;gBACtC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC;aACnD;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,WAA4B,EAC5B,OAAsB,EACtB,aAAqB,wBAAwB,EAC7C,cAAsB,0BAA0B;IAEhD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,MAAM,KAAK,GAAG,oBAAoB,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,gCAAgC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}