agent-relay 3.2.22 → 4.0.1

package/dist/src/cli/commands/on/relayfile-binary.js

@@ -0,0 +1,208 @@
+import { execSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { accessSync, chmodSync, constants, createWriteStream, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from 'node:fs';
+import https from 'node:https';
+import os from 'node:os';
+import path from 'node:path';
+const RELAYFILE_VERSION = '0.1.6';
+const RELEASE_BASE_URL = 'https://github.com/AgentWorkforce/relayfile/releases/download';
+const CHECKSUMS_FILE = 'checksums.txt';
+const CACHE_DIR = path.join(os.homedir(), '.agent-relay', 'bin');
+const CACHE_PATH = path.join(CACHE_DIR, 'relayfile-mount');
+const VERSION_PATH = path.join(CACHE_DIR, 'relayfile-mount.version');
+const SUPPORTED_TARGETS = ['darwin-arm64', 'darwin-amd64', 'linux-arm64', 'linux-amd64'].join(', ');
+const PLATFORM_ARCH_MAP = {
+    'darwin:arm64': 'darwin-arm64',
+    'darwin:x64': 'darwin-amd64',
+    'linux:arm64': 'linux-arm64',
+    'linux:x64': 'linux-amd64',
+};
+function warn(message) {
+    console.warn(`[warn] ${message}`);
+}
+function ensureCacheDir() {
+    mkdirSync(CACHE_DIR, { recursive: true });
+}
+function getRelayfileTarget() {
+    const target = PLATFORM_ARCH_MAP[`${os.platform()}:${os.arch()}`];
+    if (!target) {
+        throw new Error(`Unsupported platform for relayfile-mount: ${os.platform()}-${os.arch()}. Supported targets: ${SUPPORTED_TARGETS}.`);
+    }
+    return target;
+}
+function getReleaseAssetUrl(assetName) {
+    return `${RELEASE_BASE_URL}/v${RELAYFILE_VERSION}/${assetName}`;
+}
+function readCachedVersion() {
+    try {
+        return readFileSync(VERSION_PATH, 'utf8').trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+function isExecutable(filePath) {
+    try {
+        accessSync(filePath, constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function downloadErrorMessage(url, status) {
+    return `Download failed with status ${status} for ${url}`;
+}
+function downloadBinary(url, destPath, maxRedirects = 5) {
+    ensureCacheDir();
+    const attemptDownload = (currentUrl, redirectsRemaining, resolve, reject) => {
+        const request = https.get(currentUrl, (res) => {
+            const status = res.statusCode ?? 0;
+            const location = res.headers.location;
+            const isRedirect = status >= 300 && status < 400 && location;
+            if (isRedirect) {
+                if (redirectsRemaining <= 0) {
+                    res.resume();
+                    reject(new Error('Too many redirects while downloading relayfile-mount'));
+                    return;
+                }
+                const nextUrl = new URL(location, currentUrl).toString();
+                res.resume();
+                attemptDownload(nextUrl, redirectsRemaining - 1, resolve, reject);
+                return;
+            }
+            if (status !== 200) {
+                res.resume();
+                reject(new Error(downloadErrorMessage(currentUrl, status)));
+                return;
+            }
+            const fileStream = createWriteStream(destPath, { mode: 0o755 });
+            res.pipe(fileStream);
+            fileStream.on('finish', () => {
+                fileStream.close(() => resolve());
+            });
+            fileStream.on('error', (error) => reject(error instanceof Error ? error : new Error(String(error))));
+            res.on('error', (error) => reject(error instanceof Error ? error : new Error(String(error))));
+        });
+        request.on('error', (error) => reject(error instanceof Error ? error : new Error(String(error))));
+    };
+    return new Promise((resolve, reject) => {
+        attemptDownload(url, maxRedirects, resolve, reject);
+    }).catch((error) => {
+        try {
+            rmSync(destPath, { force: true });
+        }
+        catch {
+            // Ignore cleanup failures.
+        }
+        throw error;
+    });
+}
+function downloadText(url, maxRedirects = 5) {
+    const fetchWithRedirects = (currentUrl, redirectsRemaining, resolve, reject) => {
+        const request = https.get(currentUrl, (res) => {
+            const status = res.statusCode ?? 0;
+            const location = res.headers.location;
+            const isRedirect = status >= 300 && status < 400 && location;
+            if (isRedirect) {
+                if (redirectsRemaining <= 0) {
+                    res.resume();
+                    reject(new Error('Too many redirects while downloading relayfile checksums'));
+                    return;
+                }
+                const nextUrl = new URL(location, currentUrl).toString();
+                res.resume();
+                fetchWithRedirects(nextUrl, redirectsRemaining - 1, resolve, reject);
+                return;
+            }
+            if (status !== 200) {
+                res.resume();
+                reject(new Error(downloadErrorMessage(currentUrl, status)));
+                return;
+            }
+            const chunks = [];
+            res.on('data', (chunk) => {
+                chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+            });
+            res.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+            res.on('error', (error) => reject(error instanceof Error ? error : new Error(String(error))));
+        });
+        request.on('error', (error) => reject(error instanceof Error ? error : new Error(String(error))));
+    };
+    return new Promise((resolve, reject) => {
+        fetchWithRedirects(url, maxRedirects, resolve, reject);
+    });
+}
+function getExpectedChecksum(checksumContent, binaryName) {
+    for (const line of checksumContent.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed) {
+            continue;
+        }
+        const match = trimmed.match(/^([a-fA-F0-9]{64})\s+\*?(.+)$/);
+        if (!match) {
+            continue;
+        }
+        const entryName = path.basename(match[2].trim());
+        if (entryName === binaryName) {
+            return match[1].toLowerCase();
+        }
+    }
+    throw new Error(`No checksum entry found for ${binaryName}`);
+}
+async function verifyChecksum(filePath, binaryName) {
+    const checksumUrl = getReleaseAssetUrl(CHECKSUMS_FILE);
+    const checksumContent = await downloadText(checksumUrl);
+    const expectedHash = getExpectedChecksum(checksumContent, binaryName);
+    const actualHash = createHash('sha256').update(readFileSync(filePath)).digest('hex');
+    if (actualHash !== expectedHash) {
+        throw new Error(`Checksum mismatch for ${binaryName}: expected ${expectedHash}, got ${actualHash}`);
+    }
+}
+function resignBinaryForMacOS(binaryPath) {
+    if (os.platform() !== 'darwin') {
+        return;
+    }
+    try {
+        execSync(`codesign --force --sign - "${binaryPath}"`, { stdio: 'pipe' });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        warn(`Failed to re-sign relayfile-mount binary: ${message}`);
+        warn(`The binary may fail to execute until codesigned manually: codesign --force --sign - ${binaryPath}`);
+    }
+}
+export async function ensureRelayfileMountBinary() {
+    const target = getRelayfileTarget();
+    const binaryName = `relayfile-mount-${target}`;
+    const downloadUrl = getReleaseAssetUrl(binaryName);
+    ensureCacheDir();
+    if (existsSync(CACHE_PATH) && readCachedVersion() === RELAYFILE_VERSION) {
+        if (!isExecutable(CACHE_PATH)) {
+            chmodSync(CACHE_PATH, 0o755);
+        }
+        return CACHE_PATH;
+    }
+    const tempPath = path.join(CACHE_DIR, `relayfile-mount.${process.pid}.${Date.now()}.download`);
+    try {
+        await downloadBinary(downloadUrl, tempPath);
+        await verifyChecksum(tempPath, binaryName);
+        chmodSync(tempPath, 0o755);
+        renameSync(tempPath, CACHE_PATH);
+        chmodSync(CACHE_PATH, 0o755);
+        resignBinaryForMacOS(CACHE_PATH);
+        writeFileSync(VERSION_PATH, `${RELAYFILE_VERSION}\n`, 'utf8');
+        return CACHE_PATH;
+    }
+    catch (error) {
+        try {
+            rmSync(tempPath, { force: true });
+        }
+        catch {
+            // Ignore cleanup failures.
+        }
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to install relayfile-mount from ${downloadUrl}: ${message}`);
+    }
+}
+//# sourceMappingURL=relayfile-binary.js.map

package/dist/src/cli/commands/on/relayfile-binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relayfile-binary.js","sourceRoot":"","sources":["../../../../../src/cli/commands/on/relayfile-binary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,gBAAgB,GAAG,+DAA+D,CAAC;AACzF,MAAM,cAAc,GAAG,eAAe,CAAC;AACvC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;AACrE,MAAM,iBAAiB,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEpG,MAAM,iBAAiB,GAA2B;IAChD,cAAc,EAAE,cAAc;IAC9B,YAAY,EAAE,cAAc;IAC5B,aAAa,EAAE,aAAa;IAC5B,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,IAAI,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,cAAc;IACrB,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,6CAA6C,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,wBAAwB,iBAAiB,GAAG,CACpH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,GAAG,gBAAgB,KAAK,iBAAiB,IAAI,SAAS,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW,EAAE,MAAc;IACvD,OAAO,+BAA+B,MAAM,QAAQ,GAAG,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,QAAgB,EAAE,YAAY,GAAG,CAAC;IACrE,cAAc,EAAE,CAAC;IAEjB,MAAM,eAAe,GAAG,CACtB,UAAkB,EAClB,kBAA0B,EAC1B,OAAmB,EACnB,MAA8B,EAC9B,EAAE;QACF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;YACtC,MAAM,UAAU,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC;YAE7D,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,kBAAkB,IAAI,CAAC,EAAE,CAAC;oBAC5B,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC;oBAC1E,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACzD,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,eAAe,CAAC,OAAO,EAAE,kBAAkB,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACrB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC3B,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACrG,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,YAAY,GAAG,CAAC;IACjD,MAAM,kBAAkB,GAAG,CACzB,UAAkB,EAClB,kBAA0B,EAC1B,OAA+B,EAC/B,MAA8B,EAC9B,EAAE;QACF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;YACtC,MAAM,UAAU,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC;YAE7D,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,kBAAkB,IAAI,CAAC,EAAE,CAAC;oBAC5B,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC,CAAC;oBAC9E,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACzD,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBACvB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,kBAAkB,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,eAAuB,EAAE,UAAkB;IACtE,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,UAAkB;IAChE,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,mBAAmB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErF,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,cAAc,YAAY,SAAS,UAAU,EAAE,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,CAAC,8BAA8B,UAAU,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,6CAA6C,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,uFAAuF,UAAU,EAAE,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,mBAAmB,MAAM,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEnD,cAAc,EAAE,CAAC;IAEjB,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,CAAC;QACxE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAE/F,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3C,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC7B,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACjC,aAAa,CAAC,YAAY,EAAE,GAAG,iBAAiB,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,0CAA0C,WAAW,KAAK,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/src/cli/commands/on/scan.d.ts

@@ -0,0 +1,8 @@
+interface ScanDependencies {
+    projectDir?: string;
+    workspace?: string;
+    log?: (...args: unknown[]) => void;
+}
+export declare function scanPermissions(deps?: ScanDependencies): Promise<void>;
+export {};
+//# sourceMappingURL=scan.d.ts.map

package/dist/src/cli/commands/on/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/on/scan.ts"],"names":[],"mappings":"AAGA,UAAU,gBAAgB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;CACpC;AAUD,wBAAsB,eAAe,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDhF"}

package/dist/src/cli/commands/on/scan.js

@@ -0,0 +1,59 @@
+import path from 'node:path';
+import { compileDotfiles, discoverAgents, hasDotfiles, parseDotfiles } from './dotfiles.js';
+function defaultLog(...args) {
+    console.log(...args);
+}
+function resolveWorkspaceName(projectDir, explicit) {
+    return explicit ?? path.basename(projectDir);
+}
+export async function scanPermissions(deps = {}) {
+    const projectDir = path.resolve(deps.projectDir ?? process.cwd());
+    const workspace = resolveWorkspaceName(projectDir, deps.workspace);
+    const log = deps.log ?? defaultLog;
+    const hasDotfileConfig = hasDotfiles(projectDir);
+    const discoveredAgents = discoverAgents(projectDir);
+    const agents = discoveredAgents.length > 0 ? discoveredAgents : ['default-agent'];
+    log(`Discovered agents: ${agents.join(', ')}`);
+    if (!hasDotfileConfig && agents.length === 1 && agents[0] === 'default-agent') {
+        log('No dotfile patterns found; defaulting to full readwrite workspace visibility.');
+    }
+    if (agents.length === 0) {
+        return;
+    }
+    for (const agentName of agents) {
+        const parsed = parseDotfiles(projectDir, agentName);
+        const compiled = compileDotfiles(projectDir, agentName, workspace);
+        const ignored = parsed.ignoredPatterns;
+        const readonly = parsed.readonlyPatterns;
+        const writable = compiled.readwritePaths;
+        log(`\n[${agentName}]`);
+        log(`Ignored patterns (${ignored.length}):`);
+        if (ignored.length > 0) {
+            for (const pattern of ignored) {
+                log(`  - ${pattern}`);
+            }
+        }
+        else {
+            log('  - (none)');
+        }
+        log(`Readonly patterns (${readonly.length}):`);
+        if (readonly.length > 0) {
+            for (const pattern of readonly) {
+                log(`  - ${pattern}`);
+            }
+        }
+        else {
+            log('  - (none)');
+        }
+        log(`Writable files (${writable.length}):`);
+        if (writable.length > 0) {
+            for (const file of writable) {
+                log(`  - ${file}`);
+            }
+        }
+        else {
+            log('  - (none)');
+        }
+    }
+}
+//# sourceMappingURL=scan.js.map

package/dist/src/cli/commands/on/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../../../src/cli/commands/on/scan.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAQ5F,SAAS,UAAU,CAAC,GAAG,IAAe;IACpC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,QAAiB;IACjE,OAAO,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAyB,EAAE;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IAEnC,MAAM,gBAAgB,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,gBAAgB,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAElF,GAAG,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,eAAe,EAAE,CAAC;QAC9E,GAAG,CAAC,+EAA+E,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC;QAEzC,GAAG,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;QACxB,GAAG,CAAC,qBAAqB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;gBAC9B,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,YAAY,CAAC,CAAC;QACpB,CAAC;QAED,GAAG,CAAC,sBAAsB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,YAAY,CAAC,CAAC;QACpB,CAAC;QAED,GAAG,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,YAAY,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/cli/commands/on/services.d.ts

@@ -0,0 +1,17 @@
+export interface ServiceConfig {
+    relayauthRoot: string;
+    relayfileRoot: string;
+    secret: string;
+    portAuth: number;
+    portFile: number;
+    logDir: string;
+}
+export declare function pickFirstString(values: Array<string | undefined>): string;
+export declare function resolveServiceConfig(overrides?: Partial<ServiceConfig>): ServiceConfig;
+export declare function healthCheck(port: number, timeout: number): Promise<boolean>;
+export declare function startServices(config?: Partial<ServiceConfig>): Promise<{
+    authPid: number;
+    filePid: number;
+}>;
+export declare function stopServices(): Promise<void>;
+//# sourceMappingURL=services.d.ts.map

package/dist/src/cli/commands/on/services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/on/services.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAkFD,wBAAgB,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAOzE;AAOD,wBAAgB,oBAAoB,CAAC,SAAS,GAAE,OAAO,CAAC,aAAa,CAAM,GAAG,aAAa,CA6D1F;AAoKD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYjF;AAED,wBAAsB,aAAa,CAAC,MAAM,GAAE,OAAO,CAAC,aAAa,CAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAkDtH;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAelD"}

package/dist/src/cli/commands/on/services.js

@@ -0,0 +1,328 @@
+import { spawn, spawnSync } from 'node:child_process';
+import { accessSync, closeSync, constants, existsSync, mkdirSync, openSync, readFileSync, rmSync, writeFileSync, } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+const DEFAULT_PORT_AUTH = 8787;
+const DEFAULT_PORT_FILE = 8080;
+function getPidFilePath() {
+    return path.join(os.homedir(), '.relay', 'pids.json');
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function parsePositiveInt(value, fallback) {
+    const parsed = Number.parseInt(String(value ?? ''), 10);
+    if (!Number.isFinite(parsed) || parsed <= 0) {
+        return fallback;
+    }
+    return parsed;
+}
+function getCachedConfig() {
+    const configPath = path.resolve('.relay', 'config.json');
+    if (!existsSync(configPath)) {
+        return {};
+    }
+    try {
+        const raw = readFileSync(configPath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        const data = parsed && typeof parsed === 'object' && 'data' in parsed && typeof parsed.data === 'object'
+            ? parsed.data
+            : parsed;
+        const getStringValue = (...keys) => {
+            for (const key of keys) {
+                const value = data[key];
+                if (typeof value === 'string') {
+                    return value;
+                }
+            }
+            return undefined;
+        };
+        const getPortValue = (...keys) => {
+            for (const key of keys) {
+                const value = data[key];
+                if (typeof value === 'string' || typeof value === 'number') {
+                    return value;
+                }
+            }
+            return undefined;
+        };
+        return {
+            relayauthRoot: getStringValue('RELAYAUTH_ROOT', 'relayauthRoot'),
+            relayfileRoot: getStringValue('RELAYFILE_ROOT', 'relayfileRoot'),
+            logDir: getStringValue('RELAY_LOG_DIR', 'logDir'),
+            portAuth: getPortValue('RELAY_AUTH_PORT', 'portAuth'),
+            portFile: getPortValue('RELAY_FILE_PORT', 'portFile'),
+            secret: typeof data.signing_secret === 'string'
+                ? data.signing_secret
+                : typeof data.signingSecret === 'string'
+                    ? data.signingSecret
+                    : undefined,
+        };
+    }
+    catch {
+        return {};
+    }
+}
+function pickFirst(values) {
+    for (const value of values) {
+        if (value) {
+            return value;
+        }
+    }
+    return undefined;
+}
+export function pickFirstString(values) {
+    for (const value of values) {
+        if (value) {
+            return value;
+        }
+    }
+    return '';
+}
+function resolveExistingPath(candidates, fallback) {
+    const normalized = candidates.filter((candidate) => typeof candidate === 'string' && candidate.length > 0);
+    return path.resolve(normalized.find((candidate) => existsSync(candidate)) ?? normalized[0] ?? fallback);
+}
+export function resolveServiceConfig(overrides = {}) {
+    const cache = getCachedConfig();
+    const cwd = process.cwd();
+    const relayauthRoot = resolveExistingPath([
+        overrides.relayauthRoot,
+        process.env.RELAYAUTH_ROOT,
+        cache.relayauthRoot,
+        path.join(cwd, 'relayauth'),
+        path.join(cwd, '..', 'relayauth'),
+        path.join(cwd, '..', '..', 'relayauth'),
+    ], path.join(cwd, 'relayauth'));
+    const relayfileRoot = resolveExistingPath([
+        overrides.relayfileRoot,
+        process.env.RELAYFILE_ROOT,
+        cache.relayfileRoot,
+        path.join(path.dirname(relayauthRoot), 'relayfile'),
+    ], path.join(path.dirname(relayauthRoot), 'relayfile'));
+    const logDir = path.resolve(pickFirstString([
+        overrides.logDir,
+        process.env.RELAY_LOG_DIR,
+        cache.logDir,
+        path.join('.relay', 'logs'),
+    ]));
+    return {
+        relayauthRoot,
+        relayfileRoot,
+        secret: pickFirstString([
+            overrides.secret,
+            process.env.SIGNING_KEY,
+            cache.secret,
+        ]),
+        portAuth: parsePositiveInt(pickFirst([
+            process.env.RELAY_AUTH_PORT,
+            overrides.portAuth,
+            cache.portAuth,
+        ]), DEFAULT_PORT_AUTH),
+        portFile: parsePositiveInt(pickFirst([
+            process.env.RELAY_FILE_PORT,
+            overrides.portFile,
+            cache.portFile,
+        ]), DEFAULT_PORT_FILE),
+        logDir,
+    };
+}
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isExecutable(target) {
+    try {
+        accessSync(target, constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function readPids() {
+    if (!existsSync(getPidFilePath())) {
+        return null;
+    }
+    try {
+        const raw = readFileSync(getPidFilePath(), 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+function writePids(pids) {
+    mkdirSync(path.dirname(getPidFilePath()), { recursive: true });
+    writeFileSync(getPidFilePath(), `${JSON.stringify(pids)}\n`, 'utf-8');
+}
+function removePidsFile() {
+    if (existsSync(getPidFilePath())) {
+        rmSync(getPidFilePath());
+    }
+}
+async function stopPid(pid) {
+    if (!pid || !isProcessAlive(pid)) {
+        return;
+    }
+    try {
+        process.kill(pid, 'SIGTERM');
+    }
+    catch {
+        return;
+    }
+    for (let i = 0; i < 5; i += 1) {
+        if (!isProcessAlive(pid)) {
+            return;
+        }
+        await sleep(1000);
+    }
+    try {
+        process.kill(pid, 'SIGKILL');
+    }
+    catch {
+        return;
+    }
+}
+function readPortPids(port) {
+    const result = spawnSync('lsof', ['-ti', `:${port}`], {
+        encoding: 'utf8',
+        stdio: 'pipe',
+    });
+    if (result.status !== 0 || !result.stdout) {
+        return [];
+    }
+    return result.stdout
+        .trim()
+        .split('\n')
+        .map((entry) => Number.parseInt(entry.trim(), 10))
+        .filter((pid) => Number.isFinite(pid) && pid > 0);
+}
+async function stopPortProcess(port) {
+    const pids = Array.from(new Set(readPortPids(port)));
+    await Promise.all(pids.map((pid) => stopPid(pid)));
+}
+async function checkHealth(url) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 1500);
+    try {
+        const response = await fetch(url, {
+            method: 'GET',
+            signal: controller.signal,
+        });
+        return response.ok;
+    }
+    catch {
+        return false;
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+function spawnLogged(command, args, cwd, env, logPath) {
+    const logFile = openSync(logPath, 'a');
+    try {
+        const child = spawn(command, args, {
+            cwd,
+            env,
+            stdio: ['ignore', logFile, logFile],
+        });
+        // Close parent's copy of the fd — child process inherits its own copy
+        return child;
+    }
+    finally {
+        closeSync(logFile);
+    }
+}
+function spawnRelayauth(config, relayauthLogPath) {
+    return spawnLogged('npx', ['wrangler', 'dev', '--port', String(config.portAuth)], config.relayauthRoot, {
+        ...process.env,
+        SIGNING_KEY: config.secret,
+    }, relayauthLogPath);
+}
+function spawnRelayfile(config, relayfileLogPath) {
+    const binary = path.join(config.relayfileRoot, 'bin', 'relayfile');
+    if (existsSync(binary) && isExecutable(binary)) {
+        return spawnLogged(binary, [], config.relayfileRoot, {
+            ...process.env,
+            RELAYFILE_JWT_SECRET: config.secret,
+            RELAYFILE_BACKEND_PROFILE: 'durable-local',
+        }, relayfileLogPath);
+    }
+    return spawnLogged('go', ['run', './cmd/relayfile'], config.relayfileRoot, {
+        ...process.env,
+        RELAYFILE_JWT_SECRET: config.secret,
+        RELAYFILE_BACKEND_PROFILE: 'durable-local',
+    }, relayfileLogPath);
+}
+export async function healthCheck(port, timeout) {
+    const endAt = Date.now() + timeout * 1000;
+    const healthUrl = `http://127.0.0.1:${port}/health`;
+    while (Date.now() < endAt) {
+        if (await checkHealth(healthUrl)) {
+            return true;
+        }
+        await sleep(2000);
+    }
+    return false;
+}
+export async function startServices(config = {}) {
+    const resolved = resolveServiceConfig(config);
+    const existing = readPids();
+    if (existing?.relayauthPid && isProcessAlive(existing.relayauthPid)) {
+        throw new Error('relayauth already running');
+    }
+    if (existing?.relayfilePid && isProcessAlive(existing.relayfilePid)) {
+        throw new Error('relayfile already running');
+    }
+    if (existing) {
+        removePidsFile();
+    }
+    mkdirSync(resolved.logDir, { recursive: true });
+    const relayauthLog = path.join(resolved.logDir, 'relayauth.log');
+    const relayfileLog = path.join(resolved.logDir, 'relayfile.log');
+    const relayauthProcess = spawnRelayauth(resolved, relayauthLog);
+    const relayfileProcess = spawnRelayfile(resolved, relayfileLog);
+    if (!relayauthProcess.pid) {
+        throw new Error('failed to start relayauth');
+    }
+    if (!relayfileProcess.pid) {
+        await stopPid(relayauthProcess.pid);
+        throw new Error('failed to start relayfile');
+    }
+    writePids({
+        relayauthPid: relayauthProcess.pid,
+        relayfilePid: relayfileProcess.pid,
+    });
+    const [authHealthy, fileHealthy] = await Promise.all([
+        healthCheck(resolved.portAuth, 30),
+        healthCheck(resolved.portFile, 30),
+    ]);
+    if (!authHealthy || !fileHealthy) {
+        await stopServices();
+        throw new Error('services did not become healthy');
+    }
+    return {
+        authPid: relayauthProcess.pid,
+        filePid: relayfileProcess.pid,
+    };
+}
+export async function stopServices() {
+    const resolved = resolveServiceConfig();
+    const pids = readPids();
+    if (pids?.relayauthPid) {
+        await stopPid(pids.relayauthPid);
+    }
+    if (pids?.relayfilePid) {
+        await stopPid(pids.relayfilePid);
+    }
+    await stopPortProcess(resolved.portAuth);
+    await stopPortProcess(resolved.portFile);
+    removePidsFile();
+}
+//# sourceMappingURL=services.js.map