cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/cli/supervisor-control.js

@@ -0,0 +1,126 @@
+import { presentation } from '../shortcuts/presentation.js';
+import { chmod, rm } from 'node:fs/promises';
+import { connect, createServer } from 'node:net';
+const MAX_LINE = 8 * 1024;
+/** A mode-0600 Unix-domain control seat; every request carries the instance token. */
+export async function startSupervisorControlServer(input) {
+    await rm(input.socketPath, { force: true });
+    const server = createServer({ allowHalfOpen: true }, socket => {
+        let handled = false;
+        const timer = setTimeout(() => socket.destroy(), 5000);
+        socket.on('error', () => { });
+        socket.on('close', () => clearTimeout(timer));
+        let buffer = '';
+        socket.setEncoding('utf8');
+        socket.on('data', async (chunk) => {
+            if (handled)
+                return;
+            buffer += chunk;
+            if (buffer.length > MAX_LINE)
+                return socket.destroy();
+            const newline = buffer.indexOf('\n');
+            if (newline === -1)
+                return;
+            handled = true;
+            const line = buffer.slice(0, newline);
+            buffer = '';
+            try {
+                const request = JSON.parse(line);
+                const fields = request.command === 'refresh-dock' ? ['token', 'command', 'recordPath'] : ['token', 'command'];
+                if (request.token !== input.token || Object.keys(request).some(key => !fields.includes(key))) {
+                    throw new Error('unauthorized control request');
+                }
+                if (request.command === 'read-shortcut-presentation' && input.readPresentation) {
+                    socket.end(JSON.stringify(presentation(await input.readPresentation())) + '\n');
+                }
+                else if (request.command === 'refresh-dock' && input.refreshDock) {
+                    if (request.recordPath !== undefined && typeof request.recordPath !== 'string') {
+                        throw new Error('Invalid Dock record');
+                    }
+                    socket.end(JSON.stringify({ ok: await input.refreshDock(request.recordPath) }) + '\n');
+                }
+                else if (request.command === 'stop') {
+                    socket.end('{"ok":true}\n');
+                    input.stop();
+                }
+                else
+                    throw new Error('unknown control request');
+            }
+            catch {
+                socket.end('{"ok":false}\n');
+            }
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(input.socketPath, () => resolve());
+    });
+    await chmod(input.socketPath, 0o600);
+    return {
+        async close() {
+            await new Promise((resolve, reject) => server.close(error => error === undefined ? resolve() : reject(error)));
+            await rm(input.socketPath, { force: true });
+        },
+    };
+}
+export async function requestDockRefresh(socketPath, token, recordPath) {
+    return await new Promise(resolve => {
+        const socket = connect(socketPath);
+        let response = '';
+        const timer = setTimeout(() => socket.destroy(), 5_000);
+        socket.setEncoding('utf8');
+        socket.on('error', () => { });
+        socket.on('data', chunk => {
+            response += chunk;
+            if (response.length > 128)
+                socket.destroy();
+        });
+        socket.once('close', () => {
+            clearTimeout(timer);
+            resolve(response === '{"ok":true}\n');
+        });
+        socket.once('connect', () => socket.end(JSON.stringify({ token, command: 'refresh-dock', recordPath }) + '\n'));
+    });
+}
+export async function requestSupervisorStop(socketPath, token) {
+    return await new Promise(resolve => {
+        const socket = connect(socketPath);
+        let response = '';
+        socket.setEncoding('utf8');
+        socket.setTimeout(3_000, () => socket.destroy());
+        socket.once('error', () => resolve(false));
+        socket.on('data', chunk => {
+            response += chunk;
+        });
+        socket.once('close', () => resolve(response === '{"ok":true}\n'));
+        socket.once('connect', () => socket.end(`${JSON.stringify({ token, command: 'stop' })}\n`));
+    });
+}
+/** Bounded response separate from the 8 KiB request budget. No token or image logging. */
+export async function requestShortcutPresentation(socketPath, token) {
+    return await new Promise(resolve => {
+        const socket = connect(socketPath);
+        let response = '';
+        const timer = setTimeout(() => socket.destroy(), 4000);
+        socket.setEncoding('utf8');
+        socket.on('error', () => { });
+        socket.on('data', chunk => {
+            response += chunk;
+            if (Buffer.byteLength(response) > 96 * 1024) {
+                response = '';
+                socket.destroy();
+            }
+        });
+        socket.once('close', () => {
+            clearTimeout(timer);
+            try {
+                resolve(presentation(JSON.parse(response)));
+            }
+            catch {
+                resolve({ status: 'unavailable' });
+            }
+        });
+        socket.once('connect', () => socket.end(JSON.stringify({ token, command: 'read-shortcut-presentation' }) + '\n'));
+    });
+}
+//# sourceMappingURL=supervisor-control.js.map

package/dist/src/cli/supervisor-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-control.js","sourceRoot":"","sources":["../../../src/cli/supervisor-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA6B,MAAM,8BAA8B,CAAA;AACtF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAA;AAE1E,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAA;AAMzB,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAMlD;IACC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,EAAE;QAC5D,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAA;QACtD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7C,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YAC9B,IAAI,OAAO;gBAAE,OAAM;YACnB,MAAM,IAAI,KAAK,CAAA;YACf,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ;gBAAE,OAAO,MAAM,CAAC,OAAO,EAAE,CAAA;YACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,OAAO,KAAK,CAAC,CAAC;gBAAE,OAAM;YAC1B,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YACrC,MAAM,GAAG,EAAE,CAAA;YACX,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAI9B,CAAA;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;gBAC7G,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC7F,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;gBACjD,CAAC;gBACD,IAAI,OAAO,CAAC,OAAO,KAAK,4BAA4B,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;oBAC/E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;gBACjF,CAAC;qBAAM,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;oBACnE,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;wBAC/E,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;oBACxC,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAA;gBACxF,CAAC;qBAAM,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;oBAC3B,KAAK,CAAC,IAAI,EAAE,CAAA;gBACd,CAAC;;oBAAM,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IACF,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IACpC,OAAO;QACL,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACvE,CAAA;YACD,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB,EAAE,KAAa,EAAE,UAAmB;IAC7F,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;QAClC,IAAI,QAAQ,GAAG,EAAE,CAAA;QACjB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAA;QACvD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;YACxB,QAAQ,IAAI,KAAK,CAAA;YACjB,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QAC7C,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IACjH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,KAAa;IAC3E,OAAO,MAAM,IAAI,OAAO,CAAU,OAAO,CAAC,EAAE;QAC1C,MAAM,MAAM,GAAW,OAAO,CAAC,UAAU,CAAC,CAAA;QAC1C,IAAI,QAAQ,GAAG,EAAE,CAAA;QACjB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;YACxB,QAAQ,IAAI,KAAK,CAAA;QACnB,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAA;QACjE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,UAAkB,EAAE,KAAa;IACjF,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;QAClC,IAAI,QAAQ,GAAG,EAAE,CAAA;QACjB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAA;QACtD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;YACxB,QAAQ,IAAI,KAAK,CAAA;YACjB,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBAC5C,QAAQ,GAAG,EAAE,CAAA;gBACb,MAAM,CAAC,OAAO,EAAE,CAAA;YAClB,CAAC;QACH,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,IAAI,CAAC;gBACH,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAA;YACpC,CAAC;QACH,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;IACnH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/cli/supervisor-runtime.d.ts

@@ -0,0 +1,12 @@
+/** The one-shot main inspector must be gone before a supervisor can publish ready. */
+export declare function publishReadyAfterInspectorClose(closeInspector: (() => Promise<void>) | undefined, publish: () => Promise<void>): Promise<void>;
+/** Binds a detached supervisor child to the normal foreground Host lifecycle. */
+export declare function createSupervisorRuntime(environment: NodeJS.ProcessEnv, options?: {
+    readonly publicationTimeoutMs?: number;
+}): Promise<{
+    readonly markReady: (debugPort: number) => Promise<void>;
+    readonly markHostLaunched: (pid: number, inspectorUrl?: Promise<string>) => Promise<void>;
+    readonly close: () => Promise<void>;
+    readonly dockInspector: boolean;
+}>;
+//# sourceMappingURL=supervisor-runtime.d.ts.map

package/dist/src/cli/supervisor-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-runtime.d.ts","sourceRoot":"","sources":["../../../src/cli/supervisor-runtime.ts"],"names":[],"mappings":"AA2BA,sFAAsF;AACtF,wBAAsB,+BAA+B,CACnD,cAAc,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,EACjD,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAC3B,OAAO,CAAC,IAAI,CAAC,CAGf;AAgDD,iFAAiF;AACjF,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,CAAC,UAAU,EAC9B,OAAO,GAAE;IAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAAO,GACvD,OAAO,CAAC;IACT,QAAQ,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACxD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAChC,CAAC,CAuLD"}

package/dist/src/cli/supervisor-runtime.js

@@ -0,0 +1,238 @@
+import { lstat, readFile, realpath, rm } from 'node:fs/promises';
+import path from 'node:path';
+import { readHostShortcutPresentation } from '../launcher/shortcut-presentation.js';
+import { dockScope, installDockAgent, prepareDockImage, prepareOptionalDockImage, refreshDockAgent, } from '../shortcuts/dock.js';
+import { shortcutKey } from '../shortcuts/model.js';
+import { startSupervisorControlServer } from './supervisor-control.js';
+import { acquireSupervisorStartLock, hasMatchingProcessIdentity, processStartIdentity, readSupervisorState, readSupervisorStateResult, SupervisorOperationBusyError, supervisorPaths, writeSupervisorState, } from './supervisor-state.js';
+const SUPERVISOR_PUBLICATION_TIMEOUT_MS = 5_000;
+const SUPERVISOR_PUBLICATION_RETRY_MS = 20;
+/** The one-shot main inspector must be gone before a supervisor can publish ready. */
+export async function publishReadyAfterInspectorClose(closeInspector, publish) {
+    await closeInspector?.();
+    await publish();
+}
+async function acquirePublishedSupervisor(input) {
+    const startedAt = await processStartIdentity(process.pid);
+    if (startedAt === undefined)
+        throw new Error('background supervisor identity is unavailable');
+    const paths = supervisorPaths(input.home, input.app, input.profile);
+    const deadline = Date.now() + (input.publicationTimeoutMs ?? SUPERVISOR_PUBLICATION_TIMEOUT_MS);
+    while (Date.now() < deadline) {
+        let release;
+        try {
+            release = await acquireSupervisorStartLock(paths);
+        }
+        catch (error) {
+            if (!(error instanceof SupervisorOperationBusyError))
+                throw error;
+            await new Promise(resolve => setTimeout(resolve, SUPERVISOR_PUBLICATION_RETRY_MS));
+            continue;
+        }
+        try {
+            const result = await readSupervisorStateResult(paths);
+            if (result.status === 'invalid')
+                throw new Error('background supervisor publication is invalid');
+            if (result.status === 'unreadable')
+                throw new Error('background supervisor publication is unreadable');
+            if (result.status === 'valid'
+                && !(result.state.pid !== process.pid
+                    || result.state.processStartedAt !== startedAt
+                    || result.state.appId !== input.app
+                    || result.state.profileId !== input.profile
+                    || result.state.effectiveConfig !== input.fingerprint
+                    || result.state.instanceToken !== input.token))
+                return { state: result.state, release };
+        }
+        catch (error) {
+            await release();
+            throw error;
+        }
+        await release();
+        await new Promise(resolve => setTimeout(resolve, SUPERVISOR_PUBLICATION_RETRY_MS));
+    }
+    throw new Error('timed out waiting for background supervisor publication');
+}
+/** Binds a detached supervisor child to the normal foreground Host lifecycle. */
+export async function createSupervisorRuntime(environment, options = {}) {
+    const home = environment.CORDISX_SUPERVISOR_HOME;
+    const app = environment.CORDISX_SUPERVISOR_APP;
+    const profile = environment.CORDISX_SUPERVISOR_PROFILE;
+    const dataMode = environment.CORDISX_SUPERVISOR_DATA_MODE;
+    if (dataMode !== undefined && dataMode !== 'shared' && dataMode !== 'host-isolated') {
+        throw new Error('Invalid owned Host data mode');
+    }
+    const fingerprint = environment.CORDISX_SUPERVISOR_FINGERPRINT;
+    const tokenFile = environment.CORDISX_SUPERVISOR_TOKEN_FILE;
+    const selectedHome = home && app === 'codex' && profile && process.platform === 'darwin'
+        ? await realpath(home)
+        : undefined;
+    const selectedEntry = selectedHome && profile && dataMode
+        ? shortcutKey(selectedHome, 'codex', profile, dataMode)
+        : undefined;
+    const dockEntry = environment.CORDISX_DOCK_ENTRY;
+    const dockRecord = environment.CORDISX_DOCK_RECORD;
+    if (Boolean(dockEntry) !== Boolean(dockRecord)
+        || (dockEntry && dockEntry !== selectedEntry) || (dockRecord && (!selectedEntry
+        || path.basename(dockRecord) !== `${selectedEntry}.json` || !path.isAbsolute(dockRecord))))
+        throw new Error('Dock entry identity does not match owned Host');
+    const dock = selectedHome && selectedEntry && home && profile && dockEntry === selectedEntry && dockRecord
+        ? dockScope(selectedEntry, dockRecord, supervisorPaths(home, 'codex', profile).directory)
+        : undefined;
+    let control;
+    let supervisorToken;
+    let releaseStartupOperation;
+    let inspectorUrl;
+    let closeMainInspector;
+    let dockAgentInstalled = false;
+    if (home !== undefined && app !== undefined && profile !== undefined && tokenFile !== undefined) {
+        if (fingerprint === undefined)
+            throw new Error('missing background supervisor fingerprint');
+        const token = (await readFile(tokenFile, 'utf8')).trim();
+        if (!/^[a-f0-9]{64}$/u.test(token))
+            throw new Error('invalid transient supervisor bootstrap token');
+        const published = await acquirePublishedSupervisor({
+            home,
+            app,
+            profile,
+            fingerprint,
+            token,
+            ...(options.publicationTimeoutMs === undefined ? {} : { publicationTimeoutMs: options.publicationTimeoutMs }),
+        });
+        releaseStartupOperation = published.release;
+        try {
+            await rm(tokenFile, { force: true });
+            supervisorToken = token;
+            control = await startSupervisorControlServer({
+                socketPath: supervisorPaths(home, app, profile).socket,
+                token,
+                stop: () => process.kill(process.pid, 'SIGTERM'),
+                readPresentation: async () => {
+                    const paths = supervisorPaths(home, app, profile);
+                    const before = await readSupervisorState(paths);
+                    if (before?.pid !== process.pid || before.instanceToken !== token || before.phase !== 'ready'
+                        || !before.cdpEndpoint || !before.hostPid || !before.hostProcessStartedAt
+                        || !await hasMatchingProcessIdentity(before.hostPid, before.hostProcessStartedAt))
+                        return { status: 'unavailable' };
+                    const result = await readHostShortcutPresentation(before.cdpEndpoint);
+                    const after = await readSupervisorState(paths);
+                    return after?.instanceToken === token && after.phase === 'ready' && after.hostPid === before.hostPid
+                        ? result
+                        : { status: 'unavailable' };
+                },
+                ...(dock
+                    ? {
+                        refreshDock: async (requestedRecord) => {
+                            try {
+                                const paths = supervisorPaths(home, app, profile);
+                                const state = await readSupervisorState(paths);
+                                if (state?.pid !== process.pid || state.instanceToken !== token || state.phase !== 'ready'
+                                    || !state.hostPid || !state.hostProcessStartedAt
+                                    || !await hasMatchingProcessIdentity(state.hostPid, state.hostProcessStartedAt))
+                                    return false;
+                                if (!dockAgentInstalled)
+                                    return false;
+                                const recordPath = requestedRecord ?? dock.recordPath;
+                                if (!path.isAbsolute(recordPath) || path.basename(recordPath) !== `${dock.entryId}.json`)
+                                    return false;
+                                const parent = await lstat(path.dirname(recordPath));
+                                if (!parent.isDirectory() || parent.isSymbolicLink() || parent.uid !== process.getuid?.()
+                                    || (parent.mode & 0o077) !== 0)
+                                    return false;
+                                const currentDock = { ...dock, recordPath };
+                                if (!await prepareDockImage(currentDock, { home: selectedHome, app, profile }))
+                                    return false;
+                                await refreshDockAgent(dock, token);
+                                return true;
+                            }
+                            catch {
+                                return false;
+                            }
+                        },
+                    }
+                    : {}),
+            });
+        }
+        catch (error) {
+            await releaseStartupOperation();
+            releaseStartupOperation = undefined;
+            throw error;
+        }
+    }
+    return {
+        dockInspector: dock !== undefined,
+        async markHostLaunched(pid, hostInspectorUrl) {
+            inspectorUrl = hostInspectorUrl;
+            if (home === undefined || app === undefined || profile === undefined || fingerprint === undefined)
+                return;
+            const current = await readSupervisorState(supervisorPaths(home, app, profile));
+            if (current === undefined
+                || current.pid !== process.pid
+                || current.effectiveConfig !== fingerprint
+                || current.instanceToken !== supervisorToken
+                || control === undefined)
+                throw new Error('background supervisor generation is no longer current');
+            const hostProcessStartedAt = await processStartIdentity(pid);
+            if (hostProcessStartedAt === undefined)
+                throw new Error('launched Host exited before identity capture');
+            await writeSupervisorState(supervisorPaths(home, app, profile), {
+                ...current,
+                hostPid: pid,
+                hostProcessStartedAt,
+            });
+            if (dock && inspectorUrl) {
+                if (!supervisorToken)
+                    throw new Error('Owned Host Dock bootstrap missing');
+                await prepareOptionalDockImage(dock, { home: selectedHome, app, profile });
+                closeMainInspector = await installDockAgent({
+                    scope: dock,
+                    token: supervisorToken,
+                    inspectorUrl: await inspectorUrl,
+                    hostPid: pid,
+                    hostStartedAt: hostProcessStartedAt,
+                });
+                dockAgentInstalled = true;
+            }
+        },
+        async markReady(debugPort) {
+            if (home === undefined || app === undefined || profile === undefined || fingerprint === undefined)
+                return;
+            const current = await readSupervisorState(supervisorPaths(home, app, profile));
+            if (current === undefined
+                || current.pid !== process.pid
+                || current.effectiveConfig !== fingerprint
+                || current.instanceToken !== supervisorToken
+                || control === undefined)
+                throw new Error('background supervisor generation is no longer current');
+            if (dock && inspectorUrl && !dockAgentInstalled) {
+                if (!current.hostPid || !current.hostProcessStartedAt || !supervisorToken) {
+                    throw new Error('Owned Host Dock bootstrap missing');
+                }
+                await prepareOptionalDockImage(dock, { home: selectedHome, app, profile });
+                closeMainInspector = await installDockAgent({
+                    scope: dock,
+                    token: supervisorToken,
+                    inspectorUrl: await inspectorUrl,
+                    hostPid: current.hostPid,
+                    hostStartedAt: current.hostProcessStartedAt,
+                });
+                dockAgentInstalled = true;
+            }
+            await publishReadyAfterInspectorClose(closeMainInspector, async () => await writeSupervisorState(supervisorPaths(home, app, profile), {
+                ...current,
+                phase: 'ready',
+                cdpEndpoint: `http://127.0.0.1:${debugPort}`,
+            }));
+            closeMainInspector = undefined;
+            await releaseStartupOperation?.();
+            releaseStartupOperation = undefined;
+        },
+        async close() {
+            await closeMainInspector?.().catch(() => undefined);
+            await control?.close().catch(() => undefined);
+            await releaseStartupOperation?.().catch(() => undefined);
+            releaseStartupOperation = undefined;
+        },
+    };
+}
+//# sourceMappingURL=supervisor-runtime.js.map

package/dist/src/cli/supervisor-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-runtime.js","sourceRoot":"","sources":["../../../src/cli/supervisor-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAA;AACnF,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,4BAA4B,EAAgC,MAAM,yBAAyB,CAAA;AACpG,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,4BAA4B,EAC5B,eAAe,EAEf,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAE9B,MAAM,iCAAiC,GAAG,KAAK,CAAA;AAC/C,MAAM,+BAA+B,GAAG,EAAE,CAAA;AAE1C,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,cAAiD,EACjD,OAA4B;IAE5B,MAAM,cAAc,EAAE,EAAE,CAAA;IACxB,MAAM,OAAO,EAAE,CAAA;AACjB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAOzC;IACC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACzD,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAC7F,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,iCAAiC,CAAC,CAAA;IAC/F,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAA;QACX,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAA;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,4BAA4B,CAAC;gBAAE,MAAM,KAAK,CAAA;YACjE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC,CAAA;YAClF,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAA;YACrD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;YAChG,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;YACtG,IACE,MAAM,CAAC,MAAM,KAAK,OAAO;mBACtB,CAAC,CACF,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;uBAC7B,MAAM,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;uBAC3C,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,GAAG;uBAChC,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO;uBACxC,MAAM,CAAC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,WAAW;uBAClD,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,KAAK,CAC9C;gBACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAA;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,EAAE,CAAA;YACf,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,OAAO,EAAE,CAAA;QACf,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;AAC5E,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAA8B,EAC9B,UAAsD,EAAE;IAOxD,MAAM,IAAI,GAAG,WAAW,CAAC,uBAAuB,CAAA;IAChD,MAAM,GAAG,GAAG,WAAW,CAAC,sBAAsB,CAAA;IAC9C,MAAM,OAAO,GAAG,WAAW,CAAC,0BAA0B,CAAA;IACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,4BAA4B,CAAA;IACzD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,WAAW,GAAG,WAAW,CAAC,8BAA8B,CAAA;IAC9D,MAAM,SAAS,GAAG,WAAW,CAAC,6BAA6B,CAAA;IAC3D,MAAM,YAAY,GAAG,IAAI,IAAI,GAAG,KAAK,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACtF,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,aAAa,GAAG,YAAY,IAAI,OAAO,IAAI,QAAQ;QACvD,CAAC,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;QACvD,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,SAAS,GAAG,WAAW,CAAC,kBAAkB,CAAA;IAChD,MAAM,UAAU,GAAG,WAAW,CAAC,mBAAmB,CAAA;IAClD,IACE,OAAO,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC;WACvC,CAAC,SAAS,IAAI,SAAS,KAAK,aAAa,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,aAAa;WAC1E,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,aAAa,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,YAAY,IAAI,aAAa,IAAI,IAAI,IAAI,OAAO,IAAI,SAAS,KAAK,aAAa,IAAI,UAAU;QACxG,CAAC,CAAC,SAAS,CACT,aAAa,EACb,UAAU,EACV,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,CAClD;QACD,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,OAA4C,CAAA;IAChD,IAAI,eAAmC,CAAA;IACvC,IAAI,uBAA0D,CAAA;IAC9D,IAAI,YAAyC,CAAA;IAC7C,IAAI,kBAAqD,CAAA;IACzD,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAChG,IAAI,WAAW,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC3F,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACxD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACnG,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;YACjD,IAAI;YACJ,GAAG;YACH,OAAO;YACP,WAAW;YACX,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC9G,CAAC,CAAA;QACF,uBAAuB,GAAG,SAAS,CAAC,OAAO,CAAA;QAC3C,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACpC,eAAe,GAAG,KAAK,CAAA;YACvB,OAAO,GAAG,MAAM,4BAA4B,CAAC;gBAC3C,UAAU,EAAE,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,MAAM;gBACtD,KAAK;gBACL,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC;gBAChD,gBAAgB,EAAE,KAAK,IAAI,EAAE;oBAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;oBACjD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;oBAC/C,IACE,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO;2BACtF,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAoB;2BACtE,CAAC,MAAM,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,oBAAoB,CAAC;wBACjF,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;oBAClC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;oBACrE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;oBAC9C,OAAO,KAAK,EAAE,aAAa,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;wBAClG,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;gBAC/B,CAAC;gBACD,GAAG,CAAC,IAAI;oBACN,CAAC,CAAC;wBACA,WAAW,EAAE,KAAK,EAAE,eAAwB,EAAE,EAAE;4BAC9C,IAAI,CAAC;gCACH,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;gCACjD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAA;gCAC9C,IACE,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO;uCACnF,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB;uCAC7C,CAAC,MAAM,0BAA0B,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,oBAAoB,CAAC;oCAC/E,OAAO,KAAK,CAAA;gCACd,IAAI,CAAC,kBAAkB;oCAAE,OAAO,KAAK,CAAA;gCACrC,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,UAAU,CAAA;gCACrD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,OAAO;oCAAE,OAAO,KAAK,CAAA;gCACtG,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;gCACpD,IACE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE;uCAClF,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;oCAC9B,OAAO,KAAK,CAAA;gCACd,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,CAAA;gCAC3C,IAAI,CAAC,MAAM,gBAAgB,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,YAAa,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;oCAAE,OAAO,KAAK,CAAA;gCAC7F,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gCACnC,OAAO,IAAI,CAAA;4BACb,CAAC;4BAAC,MAAM,CAAC;gCACP,OAAO,KAAK,CAAA;4BACd,CAAC;wBACH,CAAC;qBACF;oBACD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,uBAAuB,EAAE,CAAA;YAC/B,uBAAuB,GAAG,SAAS,CAAA;YACnC,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO;QACL,aAAa,EAAE,IAAI,KAAK,SAAS;QACjC,KAAK,CAAC,gBAAgB,CAAC,GAAG,EAAE,gBAAgB;YAC1C,YAAY,GAAG,gBAAgB,CAAA;YAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAM;YACzG,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAA;YAC9E,IACE,OAAO,KAAK,SAAS;mBAClB,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;mBAC3B,OAAO,CAAC,eAAe,KAAK,WAAW;mBACvC,OAAO,CAAC,aAAa,KAAK,eAAe;mBACzC,OAAO,KAAK,SAAS;gBACxB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;YAC1E,MAAM,oBAAoB,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAA;YAC5D,IAAI,oBAAoB,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;YACvG,MAAM,oBAAoB,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;gBAC9D,GAAG,OAAO;gBACV,OAAO,EAAE,GAAG;gBACZ,oBAAoB;aACrB,CAAC,CAAA;YACF,IAAI,IAAI,IAAI,YAAY,EAAE,CAAC;gBACzB,IAAI,CAAC,eAAe;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;gBAC1E,MAAM,wBAAwB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,YAAa,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC3E,kBAAkB,GAAG,MAAM,gBAAgB,CAAC;oBAC1C,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,eAAe;oBACtB,YAAY,EAAE,MAAM,YAAY;oBAChC,OAAO,EAAE,GAAG;oBACZ,aAAa,EAAE,oBAAoB;iBACpC,CAAC,CAAA;gBACF,kBAAkB,GAAG,IAAI,CAAA;YAC3B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,SAAS;YACvB,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAM;YACzG,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAA;YAC9E,IACE,OAAO,KAAK,SAAS;mBAClB,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;mBAC3B,OAAO,CAAC,eAAe,KAAK,WAAW;mBACvC,OAAO,CAAC,aAAa,KAAK,eAAe;mBACzC,OAAO,KAAK,SAAS;gBACxB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;YAC1E,IAAI,IAAI,IAAI,YAAY,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAChD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;gBACtD,CAAC;gBACD,MAAM,wBAAwB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,YAAa,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC3E,kBAAkB,GAAG,MAAM,gBAAgB,CAAC;oBAC1C,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,eAAe;oBACtB,YAAY,EAAE,MAAM,YAAY;oBAChC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,aAAa,EAAE,OAAO,CAAC,oBAAoB;iBAC5C,CAAC,CAAA;gBACF,kBAAkB,GAAG,IAAI,CAAA;YAC3B,CAAC;YACD,MAAM,+BAA+B,CACnC,kBAAkB,EAClB,KAAK,IAAI,EAAE,CACT,MAAM,oBAAoB,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;gBAC9D,GAAG,OAAO;gBACV,KAAK,EAAE,OAAO;gBACd,WAAW,EAAE,oBAAoB,SAAS,EAAE;aAC7C,CAAC,CACL,CAAA;YACD,kBAAkB,GAAG,SAAS,CAAA;YAC9B,MAAM,uBAAuB,EAAE,EAAE,CAAA;YACjC,uBAAuB,GAAG,SAAS,CAAA;QACrC,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,kBAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACnD,MAAM,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC7C,MAAM,uBAAuB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACxD,uBAAuB,GAAG,SAAS,CAAA;QACrC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/cli/supervisor-state.d.ts

@@ -0,0 +1,71 @@
+export type SupervisorPhase = 'starting' | 'ready' | 'stopping' | 'failed';
+/** Durable, deliberately non-secret projection of one transient Host owner. */
+export interface SupervisorState {
+    readonly schemaVersion: 1;
+    readonly appId: string;
+    readonly profileId: string;
+    readonly phase: SupervisorPhase;
+    readonly pid: number;
+    readonly processStartedAt: string;
+    readonly instanceToken: string;
+    readonly createdAt: string;
+    readonly version: string;
+    readonly effectiveConfig: string;
+    /** Separate detached group launched by the supervisor, when Host startup reached spawn. */
+    readonly hostPid?: number;
+    readonly hostProcessStartedAt?: string;
+    readonly cdpEndpoint?: string;
+    /** Sanitized launch diagnosis; detailed output remains in host.log. */
+    readonly failure?: string;
+    readonly failedAt?: string;
+}
+export interface SupervisorPaths {
+    readonly directory: string;
+    readonly state: string;
+    readonly lock: string;
+    readonly mutex: string;
+    readonly socket: string;
+    readonly log: string;
+    readonly bootstrapToken: string;
+}
+export declare function supervisorPaths(homeDir: string, appId: string, profileId: string): SupervisorPaths;
+export declare function effectiveConfigFingerprint(input: unknown): string;
+export declare function ensureSupervisorDirectory(paths: SupervisorPaths): Promise<void>;
+export declare function writeSupervisorState(paths: SupervisorPaths, state: SupervisorState): Promise<void>;
+export type SupervisorStateReadResult = {
+    readonly status: 'valid';
+    readonly state: SupervisorState;
+} | {
+    readonly status: 'missing';
+} | {
+    readonly status: 'invalid';
+} | {
+    readonly status: 'unreadable';
+    readonly error: unknown;
+};
+export declare function readSupervisorStateResult(paths: SupervisorPaths): Promise<SupervisorStateReadResult>;
+export declare function readSupervisorState(paths: SupervisorPaths): Promise<SupervisorState | undefined>;
+export declare function removeSupervisorState(paths: SupervisorPaths): Promise<void>;
+export type ProcessIdentityStatus = 'alive' | 'dead' | 'unknown';
+export declare class SupervisorOperationBusyError extends Error {
+    readonly code = "SUPERVISOR_OPERATION_BUSY";
+    constructor();
+}
+export declare class LegacySupervisorLockError extends Error {
+    readonly code = "LEGACY_SUPERVISOR_LOCK";
+    constructor();
+}
+export declare function acquireSupervisorStartLock(paths: SupervisorPaths, options?: {
+    readonly recoverLegacy?: boolean;
+}): Promise<() => Promise<void>>;
+/**
+ * PID reuse is rejected by pairing the PID with the operating-system start
+ * timestamp captured by the owning supervisor. Darwin/Linux expose this via
+ * `ps`; unsupported platforms intentionally report an unknown identity.
+ */
+export declare function processStartIdentity(pid: number): Promise<string | undefined>;
+export declare function hasMatchingProcess(state: SupervisorState): Promise<boolean>;
+export declare function hasMatchingProcessIdentity(pid: number, startedAt: string): Promise<boolean>;
+export declare function processIdentityStatus(pid: number, startedAt: string): Promise<ProcessIdentityStatus>;
+export declare function stateFileIsPrivate(paths: SupervisorPaths): Promise<boolean>;
+//# sourceMappingURL=supervisor-state.d.ts.map

package/dist/src/cli/supervisor-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-state.d.ts","sourceRoot":"","sources":["../../../src/cli/supervisor-state.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAA;AAE1E,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,CAWlG;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjE;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAGrF;AAQD,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxG;AAsBD,MAAM,MAAM,yBAAyB,GACjC;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAE9D,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAS1G;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAGtG;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAMjF;AAED,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;AAEhE,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,+BAA8B;;CAK5C;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,4BAA2B;;CAOzC;AAiCD,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE;IAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GACjD,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CA+B9B;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAcnF;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAEjF;AAED,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEjG;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAS1G;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAMjF"}