crewx-bridge 0.1.0

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,UAAU,CAAC;AACtC,eAAO,MAAM,kCAAkC,KAAK,CAAC;AACrD,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAC9C,eAAO,MAAM,kBAAkB,QAAS,CAAC;AACzC,eAAO,MAAM,cAAc,EAAG,CAAU,CAAC;AACzC,eAAO,MAAM,QAAQ,0DAMX,CAAC"}

package/dist/constants.js

@@ -0,0 +1,13 @@
+export const BRIDGE_VERSION = "0.1.0";
+export const DEFAULT_HEARTBEAT_INTERVAL_SECONDS = 15;
+export const DEFAULT_POLL_INTERVAL_MS = 3_000;
+export const REQUEST_TIMEOUT_MS = 15_000;
+export const CONFIG_VERSION = 1;
+export const ADAPTERS = [
+    "codex",
+    "claude",
+    "pi",
+    "hermes",
+    "openclaw",
+];
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AACtC,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,CAAC;AACrD,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAU,CAAC;AACzC,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,OAAO;IACP,QAAQ;IACR,IAAI;IACJ,QAAQ;IACR,UAAU;CACF,CAAC"}

package/dist/daemon.d.ts

@@ -0,0 +1,36 @@
+import { type AgentAdapter, type BridgeCapabilities, type BridgeClaimedCommand, type BridgePolicySummary } from "crewx-agent-protocol";
+import { BridgeApi } from "./api.js";
+import { type BridgeConfig } from "./config.js";
+import { BridgeJournal } from "./journal.js";
+import { ProcessSupervisor } from "./supervisor.js";
+export type BridgeLog = (message: string) => void;
+export declare function probeCapabilities(): Promise<BridgeCapabilities>;
+export declare function policySummary(config: BridgeConfig): BridgePolicySummary;
+export declare class BridgeDaemon {
+    readonly config: BridgeConfig;
+    readonly api: BridgeApi;
+    readonly journal: BridgeJournal;
+    readonly supervisor: ProcessSupervisor;
+    readonly capabilities: BridgeCapabilities;
+    readonly log: BridgeLog;
+    private lastHeartbeat;
+    constructor(config: BridgeConfig, api: BridgeApi, journal: BridgeJournal, supervisor: ProcessSupervisor, capabilities: BridgeCapabilities, log?: BridgeLog);
+    initialize(): Promise<void>;
+    heartbeat(): Promise<void>;
+    tick(): Promise<number>;
+    execute(command: BridgeClaimedCommand): Promise<void>;
+    private start;
+    private stop;
+}
+export declare function runBridge(options: {
+    config: BridgeConfig;
+    once?: boolean;
+    signal?: AbortSignal;
+    api?: BridgeApi;
+    journal?: BridgeJournal;
+    supervisor?: ProcessSupervisor;
+    capabilities?: BridgeCapabilities;
+    log?: BridgeLog;
+}): Promise<void>;
+export declare function supportedAdapters(): readonly AgentAdapter[];
+//# sourceMappingURL=daemon.d.ts.map

package/dist/daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAGzB,KAAK,mBAAmB,EACzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAwBlD,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAYrE;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAOvE;AAYD,qBAAa,YAAY;IAIrB,QAAQ,CAAC,MAAM,EAAE,YAAY;IAC7B,QAAQ,CAAC,GAAG,EAAE,SAAS;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa;IAC/B,QAAQ,CAAC,UAAU,EAAE,iBAAiB;IACtC,QAAQ,CAAC,YAAY,EAAE,kBAAkB;IACzC,QAAQ,CAAC,GAAG,EAAE,SAAS;IARzB,OAAO,CAAC,aAAa,CAAK;gBAGf,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,iBAAiB,EAC7B,YAAY,EAAE,kBAAkB,EAChC,GAAG,GAAE,SAA2B;IAGrC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAuC1B,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAavB,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;YA+C7C,KAAK;YAyEL,IAAI;CA6CnB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDhB;AAED,wBAAgB,iBAAiB,IAAI,SAAS,YAAY,EAAE,CAE3D"}

package/dist/daemon.js

@@ -0,0 +1,313 @@
+import { execFile } from "node:child_process";
+import { hostname } from "node:os";
+import { promisify } from "node:util";
+import { BridgeCommandPayloadSchema, } from "crewx-agent-protocol";
+import { BridgeApi } from "./api.js";
+import { BRIDGE_VERSION, ADAPTERS, DEFAULT_POLL_INTERVAL_MS } from "./constants.js";
+import { BridgeError, errorMessage, redactSecrets } from "./errors.js";
+import { folderDescriptors, verifyLaunchFolder } from "./folders.js";
+import { BridgeJournal } from "./journal.js";
+import { validateStartPolicy } from "./policy.js";
+import { ProcessSupervisor } from "./supervisor.js";
+const execFileAsync = promisify(execFile);
+async function probeRuntime(adapter) {
+    try {
+        const result = await execFileAsync(adapter, ["--version"], {
+            encoding: "utf8",
+            timeout: 5_000,
+            maxBuffer: 64 * 1024,
+        });
+        const output = `${result.stdout}\n${result.stderr}`;
+        const version = output.match(/\b\d+(?:\.\d+){1,3}(?:[-+][0-9A-Za-z._-]+)?\b/)?.[0];
+        return { available: true, ...(version ? { version } : {}) };
+    }
+    catch {
+        return { available: false };
+    }
+}
+export async function probeCapabilities() {
+    const runtimes = await Promise.all(ADAPTERS.map(async (adapter) => {
+        const result = await probeRuntime(adapter);
+        return {
+            adapter,
+            available: result.available,
+            ...(result.version ? { version: result.version } : {}),
+        };
+    }));
+    return { runtimes };
+}
+export function policySummary(config) {
+    return {
+        allowed_adapters: config.policy.allowedAdapters,
+        allowed_permissions: config.policy.allowedPermissions,
+        allow_full_access: config.policy.allowFullAccess,
+        max_concurrent_runs: config.policy.maxConcurrentRuns,
+    };
+}
+function commandResult(runStatus, pid) {
+    return {
+        run_status: runStatus,
+        ...(pid !== undefined ? { pid } : {}),
+    };
+}
+export class BridgeDaemon {
+    config;
+    api;
+    journal;
+    supervisor;
+    capabilities;
+    log;
+    lastHeartbeat = 0;
+    constructor(config, api, journal, supervisor, capabilities, log = () => undefined) {
+        this.config = config;
+        this.api = api;
+        this.journal = journal;
+        this.supervisor = supervisor;
+        this.capabilities = capabilities;
+        this.log = log;
+    }
+    async initialize() {
+        await this.journal.load();
+        await this.api.syncFolders({ folders: folderDescriptors(this.config) });
+        await this.heartbeat();
+    }
+    async heartbeat() {
+        const runs = [];
+        for (const run of this.journal.activeRuns()) {
+            if (this.supervisor.isRunning(run.id, run.pid)) {
+                runs.push({
+                    id: run.id,
+                    status: run.status === "starting" ? "starting" : "running",
+                    ...(run.pid ? { pid: run.pid } : {}),
+                    ...(run.startedAt ? { started_at: run.startedAt } : {}),
+                });
+            }
+            else {
+                await this.journal.recordRun(run.id, {
+                    status: "lost",
+                    pid: run.pid,
+                    adapter: run.adapter,
+                    folderId: run.folderId,
+                    startedAt: run.startedAt,
+                });
+                runs.push({
+                    id: run.id,
+                    status: "lost",
+                    ...(run.pid ? { pid: run.pid } : {}),
+                    ...(run.startedAt ? { started_at: run.startedAt } : {}),
+                });
+            }
+        }
+        await this.api.heartbeat({
+            protocol_version: 1,
+            client_version: BRIDGE_VERSION,
+            hostname: hostname(),
+            platform: process.platform === "darwin" ? "darwin" : "linux",
+            arch: process.arch,
+            capabilities: this.capabilities,
+            policy: policySummary(this.config),
+            runs,
+        });
+        this.lastHeartbeat = Date.now();
+    }
+    async tick() {
+        if (Date.now() - this.lastHeartbeat >=
+            this.config.heartbeatInterval * 1_000) {
+            await this.heartbeat();
+        }
+        const response = await this.api.claim();
+        if (!response.command)
+            return response.retry_after_ms;
+        await this.execute(response.command);
+        return 250;
+    }
+    async execute(command) {
+        const existing = this.journal.getCommand(command.id);
+        if (existing?.state === "succeeded" && existing.result) {
+            await this.api.complete(command.id, {
+                lease_token: command.lease_token,
+                result: existing.result,
+            });
+            return;
+        }
+        if (existing?.state === "failed") {
+            await this.api.fail(command.id, {
+                lease_token: command.lease_token,
+                code: existing.errorCode ?? "local_execution_failed",
+                message: "This command previously failed locally.",
+            });
+            return;
+        }
+        try {
+            const payload = BridgeCommandPayloadSchema.parse(command.payload);
+            if (payload.type === "start_agent") {
+                await this.start(command, payload);
+            }
+            else {
+                await this.stop(command, payload.run_id);
+            }
+        }
+        catch (error) {
+            const code = error instanceof BridgeError ? error.code : "invalid_or_failed_command";
+            const message = redactSecrets(errorMessage(error), [
+                command.lease_token,
+                command.secret?.agent_token ?? "",
+            ]).slice(0, 1000);
+            await this.journal.recordCommand(command.id, {
+                state: "failed",
+                runId: command.payload.run_id,
+                type: command.payload.type,
+                errorCode: code,
+            });
+            await this.api.fail(command.id, {
+                lease_token: command.lease_token,
+                code,
+                message,
+            });
+            this.log(`Command ${command.id} failed: ${code}.`);
+        }
+    }
+    async start(command, rawPayload) {
+        const payload = validateStartPolicy(this.config, rawPayload, this.supervisor.activeCount());
+        if (!command.secret) {
+            throw new BridgeError("missing_command_secret", "The start command does not include a run credential.");
+        }
+        const existingRun = this.journal.getRun(payload.run_id);
+        const existingCommand = this.journal.getCommand(command.id);
+        if (existingCommand?.state === "accepted") {
+            if (existingRun?.pid &&
+                this.supervisor.isRunning(payload.run_id, existingRun.pid)) {
+                const result = commandResult("running", existingRun.pid);
+                await this.journal.recordCommand(command.id, {
+                    state: "succeeded",
+                    runId: payload.run_id,
+                    type: "start_agent",
+                    result,
+                });
+                await this.api.complete(command.id, {
+                    lease_token: command.lease_token,
+                    result,
+                });
+                return;
+            }
+            throw new BridgeError("ambiguous_previous_start", "A prior start was accepted but its process cannot be verified; refusing to spawn a duplicate.");
+        }
+        const folder = await verifyLaunchFolder(this.config, payload.folder_id);
+        await this.journal.recordCommand(command.id, {
+            state: "accepted",
+            runId: payload.run_id,
+            type: "start_agent",
+        });
+        await this.api.acknowledge(command.id, {
+            lease_token: command.lease_token,
+        });
+        const pid = this.supervisor.start(payload, command.secret, folder);
+        const startedAt = new Date().toISOString();
+        await this.journal.recordRun(payload.run_id, {
+            status: "running",
+            pid,
+            adapter: payload.adapter,
+            folderId: payload.folder_id,
+            startedAt,
+        });
+        const result = commandResult("running", pid);
+        await this.journal.recordCommand(command.id, {
+            state: "succeeded",
+            runId: payload.run_id,
+            type: "start_agent",
+            result,
+        });
+        await this.api.complete(command.id, {
+            lease_token: command.lease_token,
+            result,
+        });
+        this.log(`Started ${payload.adapter} run ${payload.run_id}.`);
+    }
+    async stop(command, runId) {
+        const existing = this.journal.getCommand(command.id);
+        const run = this.journal.getRun(runId);
+        if (existing?.state === "accepted" && !this.supervisor.isRunning(runId, run?.pid)) {
+            const result = commandResult("stopped", run?.pid);
+            await this.journal.recordCommand(command.id, {
+                state: "succeeded",
+                runId,
+                type: "stop_agent",
+                result,
+            });
+            await this.api.complete(command.id, {
+                lease_token: command.lease_token,
+                result,
+            });
+            return;
+        }
+        await this.journal.recordCommand(command.id, {
+            state: "accepted",
+            runId,
+            type: "stop_agent",
+        });
+        await this.api.acknowledge(command.id, {
+            lease_token: command.lease_token,
+        });
+        await this.supervisor.stop(runId, run?.pid);
+        if (run) {
+            await this.journal.recordRun(runId, { ...run, status: "stopped" });
+        }
+        const result = commandResult("stopped", run?.pid);
+        await this.journal.recordCommand(command.id, {
+            state: "succeeded",
+            runId,
+            type: "stop_agent",
+            result,
+        });
+        await this.api.complete(command.id, {
+            lease_token: command.lease_token,
+            result,
+        });
+        this.log(`Stopped run ${runId}.`);
+    }
+}
+export async function runBridge(options) {
+    if (!["darwin", "linux"].includes(process.platform)) {
+        throw new BridgeError("unsupported_platform", "CrewX Bridge currently supports macOS and Linux.");
+    }
+    if (typeof process.getuid === "function" && process.getuid() === 0) {
+        throw new BridgeError("root_refused", "CrewX Bridge refuses to run as root.");
+    }
+    const api = options.api ?? new BridgeApi(options.config);
+    const journal = options.journal ?? new BridgeJournal();
+    const supervisor = options.supervisor ?? new ProcessSupervisor(options.config);
+    const capabilities = options.capabilities ?? (await probeCapabilities());
+    const daemon = new BridgeDaemon(options.config, api, journal, supervisor, capabilities, options.log);
+    await daemon.initialize();
+    if (options.once) {
+        await daemon.tick();
+        return;
+    }
+    try {
+        while (!options.signal?.aborted) {
+            let delay = DEFAULT_POLL_INTERVAL_MS;
+            try {
+                delay = await daemon.tick();
+            }
+            catch (error) {
+                options.log?.(`Control loop error: ${redactSecrets(errorMessage(error))}`);
+                delay = Math.min(30_000, DEFAULT_POLL_INTERVAL_MS * 2);
+            }
+            const jitter = Math.floor(Math.random() * Math.min(500, delay / 4));
+            await new Promise((resolve) => {
+                const timer = setTimeout(resolve, delay + jitter);
+                options.signal?.addEventListener("abort", () => {
+                    clearTimeout(timer);
+                    resolve();
+                }, { once: true });
+            });
+        }
+    }
+    finally {
+        await supervisor.stopAll();
+    }
+}
+export function supportedAdapters() {
+    return ADAPTERS;
+}
+//# sourceMappingURL=daemon.js.map

package/dist/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EACL,0BAA0B,GAO3B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAEpF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAIpD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,KAAK,UAAU,YAAY,CAAC,OAAqB;IAI/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;YACzD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,EAAE,GAAG,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAC1B,+CAA+C,CAChD,EAAE,CAAC,CAAC,CAAC,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO;YACL,OAAO;YACP,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAoB;IAChD,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe;QAC/C,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB;QACrD,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe;QAChD,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,SAAoD,EACpD,GAAmB;IAEnB,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,YAAY;IAIZ;IACA;IACA;IACA;IACA;IACA;IARH,aAAa,GAAG,CAAC,CAAC;IAE1B,YACW,MAAoB,EACpB,GAAc,EACd,OAAsB,EACtB,UAA6B,EAC7B,YAAgC,EAChC,MAAiB,GAAG,EAAE,CAAC,SAAS;QALhC,WAAM,GAAN,MAAM,CAAc;QACpB,QAAG,GAAH,GAAG,CAAW;QACd,YAAO,GAAP,OAAO,CAAe;QACtB,eAAU,GAAV,UAAU,CAAmB;QAC7B,iBAAY,GAAZ,YAAY,CAAoB;QAChC,QAAG,GAAH,GAAG,CAA6B;IACxC,CAAC;IAEJ,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,GAAmC,EAAE,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,IAAI,CAAC;oBACR,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;oBAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE;oBACnC,MAAM,EAAE,MAAM;oBACd,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC;oBACR,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,MAAM,EAAE,MAAM;oBACd,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YACvB,gBAAgB,EAAE,CAAC;YACnB,cAAc,EAAE,cAAc;YAC9B,QAAQ,EAAE,QAAQ,EAAE;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YAC5D,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;YAClC,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IACE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa;YAC/B,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,KAAK,EACrC,CAAC;YACD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,cAAc,CAAC;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA6B;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,IAAI,QAAQ,EAAE,KAAK,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE;gBAClC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI,EAAE,QAAQ,CAAC,SAAS,IAAI,wBAAwB;gBACpD,OAAO,EAAE,yCAAyC;aACnD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GACR,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,CAAC;YAC1E,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE;gBACjD,OAAO,CAAC,WAAW;gBACnB,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE;aAClC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClB,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC3C,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;gBAC7B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;gBAC1B,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI;gBACJ,OAAO;aACR,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,EAAE,YAAY,IAAI,GAAG,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,OAA6B,EAC7B,UAAmB;QAEnB,MAAM,OAAO,GAAG,mBAAmB,CACjC,IAAI,CAAC,MAAM,EACX,UAAU,EACV,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAC9B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,WAAW,CACnB,wBAAwB,EACxB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,eAAe,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1C,IACE,WAAW,EAAE,GAAG;gBAChB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,EAC1D,CAAC;gBACD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;gBACzD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;oBAC3C,KAAK,EAAE,WAAW;oBAClB,KAAK,EAAE,OAAO,CAAC,MAAM;oBACrB,IAAI,EAAE,aAAa;oBACnB,MAAM;iBACP,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE;oBAClC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,MAAM;iBACP,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,IAAI,WAAW,CACnB,0BAA0B,EAC1B,+FAA+F,CAChG,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;YAC3C,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE;YACrC,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE;YAC3C,MAAM,EAAE,SAAS;YACjB,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,SAAS;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;YAC3C,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,IAAI,EAAE,aAAa;YACnB,MAAM;SACP,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,OAAO,QAAQ,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,OAA6B,EAC7B,KAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,KAAK,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAClF,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC3C,KAAK,EAAE,WAAW;gBAClB,KAAK;gBACL,IAAI,EAAE,YAAY;gBAClB,MAAM;aACP,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE;gBAClC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;YAC3C,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE;YACrC,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;YAC3C,KAAK,EAAE,WAAW;YAClB,KAAK;YACL,IAAI,EAAE,YAAY;YAClB,MAAM;SACP,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC,CAAC;IACpC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAS/B;IACC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,WAAW,CACnB,sBAAsB,EACtB,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,aAAa,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,YAAY,CAC7B,OAAO,CAAC,MAAM,EACd,GAAG,EACH,OAAO,EACP,UAAU,EACV,YAAY,EACZ,OAAO,CAAC,GAAG,CACZ,CAAC;IACF,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAChC,IAAI,KAAK,GAAG,wBAAwB,CAAC;YACrC,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,EAAE,CAAC,uBAAuB,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC3E,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,wBAAwB,GAAG,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACpE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;gBAClD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAC9B,OAAO,EACP,GAAG,EAAE;oBACH,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,EAAE,CAAC;gBACZ,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,8 @@
+export declare class BridgeError extends Error {
+    readonly code: string;
+    readonly exitCode: number;
+    constructor(code: string, message: string, exitCode?: number, options?: ErrorOptions);
+}
+export declare function errorMessage(error: unknown): string;
+export declare function redactSecrets(value: string, additional?: readonly string[]): string;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAOA,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAGxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,SAAI,EACZ,OAAO,CAAC,EAAE,YAAY;CAOzB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAavF"}

package/dist/errors.js

@@ -0,0 +1,32 @@
+const SECRET_PATTERNS = [
+    /\bcrwb_enroll_[A-Za-z0-9_-]+\b/g,
+    /\bcrwb_[A-Za-z0-9_-]+\b/g,
+    /\bcrwl_[A-Za-z0-9_-]+\b/g,
+    /\bcrwx_[A-Za-z0-9_-]+\b/g,
+];
+export class BridgeError extends Error {
+    code;
+    exitCode;
+    constructor(code, message, exitCode = 1, options) {
+        super(message, options);
+        this.name = "BridgeError";
+        this.code = code;
+        this.exitCode = exitCode;
+    }
+}
+export function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export function redactSecrets(value, additional = []) {
+    let redacted = value;
+    for (const secret of additional) {
+        if (secret)
+            redacted = redacted.split(secret).join("[REDACTED]");
+    }
+    for (const pattern of SECRET_PATTERNS) {
+        redacted = redacted.replace(pattern, "[REDACTED]");
+    }
+    redacted = redacted.replace(/(authorization\s*[:=]\s*(?:bearer\s+)?)[^\s,;]+/gi, "$1[REDACTED]");
+    return redacted;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG;IACtB,iCAAiC;IACjC,0BAA0B;IAC1B,0BAA0B;IAC1B,0BAA0B;CAClB,CAAC;AAEX,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAS;IACb,QAAQ,CAAS;IAE1B,YACE,IAAY,EACZ,OAAe,EACf,QAAQ,GAAG,CAAC,EACZ,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,aAAgC,EAAE;IAC7E,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,MAAM;YAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,mDAAmD,EACnD,cAAc,CACf,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/folders.d.ts

@@ -0,0 +1,13 @@
+import { type BridgeConfig, type BridgeFolderConfig } from "./config.js";
+export declare function registerFolder(config: BridgeConfig, inputPath: string, requestedName?: string): Promise<{
+    config: BridgeConfig;
+    folder: BridgeFolderConfig;
+}>;
+export declare function removeFolder(config: BridgeConfig, folderId: string): BridgeConfig;
+export declare function verifyLaunchFolder(config: BridgeConfig, folderId: string): Promise<BridgeFolderConfig>;
+export declare function folderDescriptors(config: BridgeConfig): Array<{
+    id: string;
+    name: string;
+    fingerprint: string;
+}>;
+//# sourceMappingURL=folders.d.ts.map

package/dist/folders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"folders.d.ts","sourceRoot":"","sources":["../src/folders.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,kBAAkB,EAExB,MAAM,aAAa,CAAC;AAGrB,wBAAsB,cAAc,CAClC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAyB/D;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,MAAM,GACf,YAAY,CAMd;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAkC7B;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,KAAK,CAAC;IAC7D,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAMD"}

package/dist/folders.js

@@ -0,0 +1,63 @@
+import { randomUUID } from "node:crypto";
+import { realpath, stat } from "node:fs/promises";
+import { canonicalFolder, } from "./config.js";
+import { BridgeError } from "./errors.js";
+export async function registerFolder(config, inputPath, requestedName) {
+    const canonical = await canonicalFolder(inputPath);
+    const existing = config.folders.find((folder) => folder.path === canonical.path || folder.fingerprint === canonical.fingerprint);
+    if (existing)
+        return { config, folder: existing };
+    const name = requestedName?.trim() ||
+        canonical.path.split("/").filter(Boolean).at(-1) ||
+        "Project";
+    if (name.length > 100) {
+        throw new BridgeError("folder_name_too_long", "Folder name must be at most 100 characters.");
+    }
+    const folder = {
+        id: randomUUID(),
+        name,
+        path: canonical.path,
+        fingerprint: canonical.fingerprint,
+    };
+    return {
+        config: { ...config, folders: [...config.folders, folder] },
+        folder,
+    };
+}
+export function removeFolder(config, folderId) {
+    const folders = config.folders.filter((folder) => folder.id !== folderId);
+    if (folders.length === config.folders.length) {
+        throw new BridgeError("folder_not_found", "No registered folder has that ID.");
+    }
+    return { ...config, folders };
+}
+export async function verifyLaunchFolder(config, folderId) {
+    const folder = config.folders.find((candidate) => candidate.id === folderId);
+    if (!folder) {
+        throw new BridgeError("folder_not_allowed", "The command references a folder that is not locally registered.");
+    }
+    let canonicalPath;
+    try {
+        canonicalPath = await realpath(folder.path);
+    }
+    catch (error) {
+        throw new BridgeError("folder_unavailable", "The registered folder is no longer available.", 1, { cause: error });
+    }
+    if (canonicalPath !== folder.path) {
+        throw new BridgeError("folder_symlink_changed", "The registered folder now resolves to a different location.");
+    }
+    const info = await stat(canonicalPath);
+    const fingerprint = `dev:${info.dev.toString(16)}:inode:${info.ino.toString(16)}`;
+    if (!info.isDirectory() || fingerprint !== folder.fingerprint) {
+        throw new BridgeError("folder_identity_changed", "The registered folder identity changed; remove and add it again.");
+    }
+    return folder;
+}
+export function folderDescriptors(config) {
+    return config.folders.map(({ id, name, fingerprint }) => ({
+        id,
+        name,
+        fingerprint,
+    }));
+}
+//# sourceMappingURL=folders.js.map

package/dist/folders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folders.js","sourceRoot":"","sources":["../src/folders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAGL,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAoB,EACpB,SAAiB,EACjB,aAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAClC,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,CACjF,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAElD,MAAM,IAAI,GACR,aAAa,EAAE,IAAI,EAAE;QACrB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,SAAS,CAAC;IACZ,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,6CAA6C,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,MAAM,GAAuB;QACjC,EAAE,EAAE,UAAU,EAAE;QAChB,IAAI;QACJ,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,WAAW,EAAE,SAAS,CAAC,WAAW;KACnC,CAAC;IACF,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;QAC3D,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,MAAoB,EACpB,QAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,mCAAmC,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,+CAA+C,EAC/C,CAAC,EACD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,WAAW,CACnB,wBAAwB,EACxB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAClF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9D,MAAM,IAAI,WAAW,CACnB,yBAAyB,EACzB,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IAKpD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACxD,EAAE;QACF,IAAI;QACJ,WAAW;KACZ,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+export declare function createProgram(): Command;
+export declare function main(argv?: string[]): Promise<void>;
+export declare function isMainModule(moduleUrl: string, invokedPath?: string | undefined): boolean;
+export { BridgeApi, enrollMachine } from "./api.js";
+export { bridgeConfigPath, bridgeJournalPath, normalizeServerUrl, readBridgeConfig, saveBridgeConfig, } from "./config.js";
+export { BridgeDaemon, runBridge } from "./daemon.js";
+export { BridgeError, redactSecrets } from "./errors.js";
+export { registerFolder, removeFolder, verifyLaunchFolder } from "./folders.js";
+export { BridgeJournal } from "./journal.js";
+export { validateStartPolicy } from "./policy.js";
+export { installService, launchdDefinition, servicePath, serviceStatus, systemdDefinition, uninstallService, } from "./service.js";
+export { minimalChildEnvironment, ProcessSupervisor, resolveAgentCliEntrypoint, } from "./supervisor.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAMA,OAAO,EAAE,OAAO,EAAwB,MAAM,WAAW,CAAC;AAmD1D,wBAAgB,aAAa,IAAI,OAAO,CA2RvC;AAED,wBAAsB,IAAI,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAO7D;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,WAAW,qBAAkB,GAC5B,OAAO,CAUT;AAMD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC"}