crewx-bridge 0.1.0

package/dist/index.js

@@ -0,0 +1,322 @@
+#!/usr/bin/env node
+import { realpathSync } from "node:fs";
+import { hostname } from "node:os";
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { Command, InvalidArgumentError } from "commander";
+import { BridgeApi, enrollMachine } from "./api.js";
+import { BRIDGE_VERSION } from "./constants.js";
+import { bridgeConfigPath, normalizeServerUrl, readBridgeConfig, saveBridgeConfig, } from "./config.js";
+import { policySummary, probeCapabilities, runBridge, supportedAdapters, } from "./daemon.js";
+import { BridgeError, errorMessage, redactSecrets } from "./errors.js";
+import { folderDescriptors, registerFolder, removeFolder, } from "./folders.js";
+import { installService, serviceStatus, uninstallService, } from "./service.js";
+function positiveInteger(value) {
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed) || parsed <= 0) {
+        throw new InvalidArgumentError("must be a positive integer");
+    }
+    return parsed;
+}
+function commaSeparated(value) {
+    return [...new Set(value.split(",").map((item) => item.trim()).filter(Boolean))];
+}
+function printJson(value) {
+    process.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
+}
+async function syncFolders(config) {
+    await new BridgeApi(config).syncFolders({
+        folders: folderDescriptors(config),
+    });
+}
+export function createProgram() {
+    const program = new Command();
+    program
+        .name("crewx-bridge")
+        .description("Securely connect a macOS or Linux machine to a CrewX workspace.")
+        .version(BRIDGE_VERSION)
+        .showHelpAfterError()
+        .configureHelp({ sortOptions: true, sortSubcommands: true });
+    program
+        .command("enroll")
+        .description("Enroll this machine with a one-time workspace code")
+        .requiredOption("--url <url>", "CrewX server URL")
+        .requiredOption("--code <code>", "single-use Bridge enrollment code")
+        .option("--name <name>", "machine name shown in CrewX", hostname())
+        .action(async (options) => {
+        if (!["darwin", "linux"].includes(process.platform)) {
+            throw new BridgeError("unsupported_platform", "CrewX Bridge currently supports macOS and Linux.");
+        }
+        if (typeof process.getuid === "function" && process.getuid() === 0) {
+            throw new BridgeError("root_refused", "CrewX Bridge refuses to enroll as root.");
+        }
+        const capabilities = await probeCapabilities();
+        const response = await enrollMachine(options.url, {
+            protocol_version: 1,
+            code: options.code,
+            name: options.name,
+            hostname: hostname(),
+            platform: process.platform === "darwin" ? "darwin" : "linux",
+            arch: process.arch,
+            client_version: BRIDGE_VERSION,
+            capabilities,
+            policy: {
+                allowed_adapters: [...supportedAdapters()],
+                allowed_permissions: ["read_only", "standard"],
+                allow_full_access: false,
+                max_concurrent_runs: 2,
+            },
+        });
+        const config = {
+            version: 1,
+            url: normalizeServerUrl(options.url),
+            token: response.token,
+            machineId: response.machine_id,
+            machineName: options.name.trim(),
+            workspace: response.workspace,
+            heartbeatInterval: response.heartbeat_interval,
+            policy: {
+                allowedAdapters: [...supportedAdapters()],
+                allowedPermissions: ["read_only", "standard"],
+                allowFullAccess: false,
+                maxConcurrentRuns: 2,
+                shutdownGraceMs: 10_000,
+            },
+            folders: [],
+        };
+        const path = await saveBridgeConfig(config);
+        console.log("✓ CrewX Bridge enrolled");
+        console.log(`  Machine  ${config.machineName}`);
+        console.log(`  Workspace ${config.workspace.slug}`);
+        console.log(`  Config   ${path} (mode 0600)`);
+        console.log("\nAdd a project with `crewx-bridge folder add <path>`.");
+        console.log("Then run `crewx-bridge service install`.");
+    });
+    program
+        .command("status")
+        .description("Show local enrollment and user-service state")
+        .option("--json", "print machine-readable JSON")
+        .action(async (options) => {
+        const config = await readBridgeConfig();
+        const service = await serviceStatus();
+        const result = {
+            enrolled: true,
+            machine_id: config.machineId,
+            machine_name: config.machineName,
+            workspace: config.workspace,
+            url: config.url,
+            folders: folderDescriptors(config),
+            service,
+            config_path: bridgeConfigPath(),
+        };
+        if (options.json) {
+            printJson(result);
+            return;
+        }
+        console.log(`Machine   ${config.machineName}`);
+        console.log(`Workspace ${config.workspace.slug}`);
+        console.log(`Server    ${config.url}`);
+        console.log(`Folders   ${config.folders.length}`);
+        console.log(`Service   ${service.running ? "running" : "not running"}`);
+    });
+    program
+        .command("doctor")
+        .description("Check protected state, agent runtimes, and CrewX connectivity")
+        .option("--json", "print machine-readable JSON")
+        .action(async (options) => {
+        const config = await readBridgeConfig();
+        const capabilities = await probeCapabilities();
+        let reachable = true;
+        let connectionError;
+        try {
+            await new BridgeApi(config).heartbeat({
+                protocol_version: 1,
+                client_version: BRIDGE_VERSION,
+                hostname: hostname(),
+                platform: process.platform === "darwin" ? "darwin" : "linux",
+                arch: process.arch,
+                capabilities,
+                policy: policySummary(config),
+                runs: [],
+            });
+        }
+        catch (error) {
+            reachable = false;
+            connectionError = redactSecrets(errorMessage(error), [config.token]);
+        }
+        const result = {
+            node: process.version,
+            platform: process.platform,
+            config: bridgeConfigPath(),
+            reachable,
+            ...(connectionError ? { connection_error: connectionError } : {}),
+            capabilities,
+            policy: policySummary(config),
+        };
+        if (options.json) {
+            printJson(result);
+            return;
+        }
+        console.log("CrewX Bridge doctor");
+        console.log(`  Config   ✓ ${bridgeConfigPath()}`);
+        console.log(`  API      ${reachable ? "✓ reachable" : `✗ ${connectionError}`}`);
+        for (const runtime of capabilities.runtimes) {
+            console.log(`  ${runtime.adapter.padEnd(9)} ${runtime.available ? "✓" : "–"} ${runtime.version ?? "not found"}`);
+        }
+    });
+    const folder = program
+        .command("folder")
+        .description("Manage folders explicitly allowed for Bridge launches");
+    folder
+        .command("add")
+        .argument("<path>", "existing project directory")
+        .option("--name <name>", "display name shown in CrewX")
+        .action(async (path, options) => {
+        const config = await readBridgeConfig();
+        const registered = await registerFolder(config, resolve(path), options.name);
+        await saveBridgeConfig(registered.config);
+        await syncFolders(registered.config);
+        console.log(`✓ Added ${registered.folder.name}`);
+        console.log(`  ID    ${registered.folder.id}`);
+        console.log(`  Path  ${registered.folder.path}`);
+    });
+    folder
+        .command("list")
+        .option("--json", "print machine-readable JSON")
+        .action(async (options) => {
+        const config = await readBridgeConfig();
+        if (options.json) {
+            printJson(config.folders);
+            return;
+        }
+        if (config.folders.length === 0) {
+            console.log("No folders are registered.");
+            return;
+        }
+        for (const entry of config.folders) {
+            console.log(`${entry.id}  ${entry.name}  ${entry.path}`);
+        }
+    });
+    folder
+        .command("remove")
+        .argument("<folder-id>", "opaque folder ID from `folder list`")
+        .action(async (folderId) => {
+        const config = removeFolder(await readBridgeConfig(), folderId);
+        await saveBridgeConfig(config);
+        await syncFolders(config);
+        console.log("✓ Folder removed.");
+    });
+    program
+        .command("policy")
+        .description("Set the machine-owner-enforced launch policy")
+        .option("--adapters <list>", "comma-separated allowed runtimes")
+        .option("--permissions <list>", "comma-separated permission presets")
+        .option("--max-runs <count>", "maximum concurrent agent processes", positiveInteger)
+        .option("--allow-full-access", "explicitly allow full_access launches", false)
+        .option("--deny-full-access", "disable full_access launches", false)
+        .action(async (options) => {
+        if (options.allowFullAccess && options.denyFullAccess) {
+            throw new BridgeError("invalid_policy", "Choose either --allow-full-access or --deny-full-access.");
+        }
+        const config = await readBridgeConfig();
+        const allowedAdapters = options.adapters
+            ? commaSeparated(options.adapters)
+            : config.policy.allowedAdapters;
+        const allowedPermissions = options.permissions
+            ? commaSeparated(options.permissions)
+            : config.policy.allowedPermissions;
+        const updated = {
+            ...config,
+            policy: {
+                ...config.policy,
+                allowedAdapters,
+                allowedPermissions,
+                allowFullAccess: options.allowFullAccess
+                    ? true
+                    : options.denyFullAccess
+                        ? false
+                        : config.policy.allowFullAccess,
+                maxConcurrentRuns: options.maxRuns ?? config.policy.maxConcurrentRuns,
+            },
+        };
+        const path = await saveBridgeConfig(updated);
+        console.log(`✓ Policy saved to ${path}.`);
+    });
+    program
+        .command("serve")
+        .description("Run the foreground Bridge control loop")
+        .option("--once", "perform one claim cycle and exit")
+        .action(async (options) => {
+        const controller = new AbortController();
+        const stop = () => controller.abort();
+        process.once("SIGINT", stop);
+        process.once("SIGTERM", stop);
+        try {
+            await runBridge({
+                config: await readBridgeConfig(),
+                once: options.once ?? false,
+                signal: controller.signal,
+                log: (message) => console.log(`[crewx-bridge] ${message}`),
+            });
+        }
+        finally {
+            process.removeListener("SIGINT", stop);
+            process.removeListener("SIGTERM", stop);
+        }
+    });
+    const service = program
+        .command("service")
+        .description("Manage the per-user launchd or systemd service");
+    service.command("install").action(async () => {
+        await readBridgeConfig();
+        const path = await installService();
+        console.log(`✓ CrewX Bridge service installed at ${path}.`);
+    });
+    service.command("uninstall").action(async () => {
+        const path = await uninstallService();
+        console.log(`✓ CrewX Bridge service removed from ${path}.`);
+    });
+    service.command("status").action(async () => {
+        const status = await serviceStatus();
+        console.log(status.running ? "● CrewX Bridge is running" : "○ CrewX Bridge is not running");
+        if (status.detail)
+            console.log(status.detail);
+        if (!status.running && process.platform === "linux") {
+            console.log("For unattended VPS use, ask an administrator to enable systemd user lingering.");
+        }
+    });
+    return program;
+}
+export async function main(argv = process.argv) {
+    try {
+        await createProgram().parseAsync(argv);
+    }
+    catch (error) {
+        console.error(`Error: ${redactSecrets(errorMessage(error))}`);
+        process.exitCode = error instanceof BridgeError ? error.exitCode : 1;
+    }
+}
+export function isMainModule(moduleUrl, invokedPath = process.argv[1]) {
+    if (!invokedPath)
+        return false;
+    try {
+        return (realpathSync.native(fileURLToPath(moduleUrl)) ===
+            realpathSync.native(resolve(invokedPath)));
+    }
+    catch {
+        return false;
+    }
+}
+if (isMainModule(import.meta.url)) {
+    await main();
+}
+export { BridgeApi, enrollMachine } from "./api.js";
+export { bridgeConfigPath, bridgeJournalPath, normalizeServerUrl, readBridgeConfig, saveBridgeConfig, } from "./config.js";
+export { BridgeDaemon, runBridge } from "./daemon.js";
+export { BridgeError, redactSecrets } from "./errors.js";
+export { registerFolder, removeFolder, verifyLaunchFolder } from "./folders.js";
+export { BridgeJournal } from "./journal.js";
+export { validateStartPolicy } from "./policy.js";
+export { installService, launchdDefinition, servicePath, serviceStatus, systemdDefinition, uninstallService, } from "./service.js";
+export { minimalChildEnvironment, ProcessSupervisor, resolveAgentCliEntrypoint, } from "./supervisor.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,gBAAgB,EAEhB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,SAAS,EACT,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,aAAa,EACb,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAEtB,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAoB;IAC7C,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC;QACtC,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO;SACJ,IAAI,CAAC,cAAc,CAAC;SACpB,WAAW,CACV,iEAAiE,CAClE;SACA,OAAO,CAAC,cAAc,CAAC;SACvB,kBAAkB,EAAE;SACpB,aAAa,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oDAAoD,CAAC;SACjE,cAAc,CAAC,aAAa,EAAE,kBAAkB,CAAC;SACjD,cAAc,CAAC,eAAe,EAAE,mCAAmC,CAAC;SACpE,MAAM,CAAC,eAAe,EAAE,6BAA6B,EAAE,QAAQ,EAAE,CAAC;SAClE,MAAM,CAAC,KAAK,EAAE,OAAoD,EAAE,EAAE;QACrE,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,WAAW,CACnB,sBAAsB,EACtB,kDAAkD,CACnD,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE;YAChD,gBAAgB,EAAE,CAAC;YACnB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,QAAQ,EAAE;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YAC5D,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,cAAc;YAC9B,YAAY;YACZ,MAAM,EAAE;gBACN,gBAAgB,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC;gBAC1C,mBAAmB,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;gBAC9C,iBAAiB,EAAE,KAAK;gBACxB,mBAAmB,EAAE,CAAC;aACvB;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAiB;YAC3B,OAAO,EAAE,CAAC;YACV,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC;YACpC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;YAChC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,iBAAiB,EAAE,QAAQ,CAAC,kBAAkB;YAC9C,MAAM,EAAE;gBACN,eAAe,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC;gBACzC,kBAAkB,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;gBAC7C,eAAe,EAAE,KAAK;gBACtB,iBAAiB,EAAE,CAAC;gBACpB,eAAe,EAAE,MAAM;aACxB;YACD,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,cAAc,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG;YACb,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC;YAClC,OAAO;YACP,WAAW,EAAE,gBAAgB,EAAE;SAChC,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,SAAS,CAAC,MAAM,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+DAA+D,CAAC;SAC5E,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC/C,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,eAAmC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC;gBACpC,gBAAgB,EAAE,CAAC;gBACnB,cAAc,EAAE,cAAc;gBAC9B,QAAQ,EAAE,QAAQ,EAAE;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;gBAC5D,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,YAAY;gBACZ,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;gBAC7B,IAAI,EAAE,EAAE;aACT,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;YAClB,eAAe,GAAG,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,gBAAgB,EAAE;YAC1B,SAAS;YACT,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,YAAY;YACZ,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;SAC9B,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,SAAS,CAAC,MAAM,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,gBAAgB,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,cAAc,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,eAAe,EAAE,EAAE,CAAC,CAAC;QAChF,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,CACpG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uDAAuD,CAAC,CAAC;IACxE,MAAM;SACH,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;SAChD,MAAM,CAAC,eAAe,EAAE,6BAA6B,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAA0B,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACL,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IACL,MAAM;SACH,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CAAC,aAAa,EAAE,qCAAqC,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,gBAAgB,EAAE,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;SAC/D,MAAM,CAAC,sBAAsB,EAAE,oCAAoC,CAAC;SACpE,MAAM,CAAC,oBAAoB,EAAE,oCAAoC,EAAE,eAAe,CAAC;SACnF,MAAM,CAAC,qBAAqB,EAAE,uCAAuC,EAAE,KAAK,CAAC;SAC7E,MAAM,CAAC,oBAAoB,EAAE,8BAA8B,EAAE,KAAK,CAAC;SACnE,MAAM,CACL,KAAK,EAAE,OAMN,EAAE,EAAE;QACH,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACtD,MAAM,IAAI,WAAW,CACnB,gBAAgB,EAChB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ;YACtC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;QAClC,MAAM,kBAAkB,GAAG,OAAO,CAAC,WAAW;YAC5C,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC;YACrC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACrC,MAAM,OAAO,GAAG;YACd,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,GAAG,MAAM,CAAC,MAAM;gBAChB,eAAe;gBACf,kBAAkB;gBAClB,eAAe,EAAE,OAAO,CAAC,eAAe;oBACtC,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,OAAO,CAAC,cAAc;wBACtB,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe;gBACnC,iBAAiB,EACf,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB;aACrD;SACF,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAuB,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,CAAC;IAC5C,CAAC,CACF,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,wCAAwC,CAAC;SACrD,MAAM,CAAC,QAAQ,EAAE,kCAAkC,CAAC;SACpD,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,SAAS,CAAC;gBACd,MAAM,EAAE,MAAM,gBAAgB,EAAE;gBAChC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK;gBAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,EAAE,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACvC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,gDAAgD,CAAC,CAAC;IACjE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QAC3C,MAAM,gBAAgB,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,uCAAuC,IAAI,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QAC7C,MAAM,IAAI,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,uCAAuC,IAAI,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;QAC5F,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CACT,gFAAgF,CACjF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;IAC5C,IAAI,CAAC;QACH,MAAM,aAAa,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,UAAU,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,QAAQ,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7B,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,CACL,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC7C,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAC1C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,MAAM,IAAI,EAAE,CAAC;AACf,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC"}

package/dist/journal.d.ts

@@ -0,0 +1,76 @@
+import { type BridgeRunStatus } from "crewx-agent-protocol";
+import { z } from "zod";
+import { type BridgePathEnvironment } from "./config.js";
+declare const JournalCommandSchema: z.ZodObject<{
+    state: z.ZodEnum<{
+        accepted: "accepted";
+        succeeded: "succeeded";
+        failed: "failed";
+    }>;
+    runId: z.ZodUUID;
+    type: z.ZodEnum<{
+        start_agent: "start_agent";
+        stop_agent: "stop_agent";
+    }>;
+    result: z.ZodOptional<z.ZodObject<{
+        run_status: z.ZodOptional<z.ZodEnum<{
+            running: "running";
+            failed: "failed";
+            stopping: "stopping";
+            stopped: "stopped";
+            starting: "starting";
+            lost: "lost";
+        }>>;
+        pid: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        exit_code: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        signal: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strict>>;
+    errorCode: z.ZodOptional<z.ZodString>;
+    updatedAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type JournalCommand = z.infer<typeof JournalCommandSchema>;
+declare const JournalRunSchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        running: "running";
+        failed: "failed";
+        stopping: "stopping";
+        stopped: "stopped";
+        starting: "starting";
+        lost: "lost";
+    }>;
+    pid: z.ZodNullable<z.ZodNumber>;
+    adapter: z.ZodEnum<{
+        codex: "codex";
+        claude: "claude";
+        pi: "pi";
+        hermes: "hermes";
+        openclaw: "openclaw";
+    }>;
+    folderId: z.ZodUUID;
+    startedAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strict>;
+export type JournalRun = z.infer<typeof JournalRunSchema>;
+export declare class BridgeJournal {
+    readonly path: string;
+    private state;
+    private writes;
+    constructor(environment?: BridgePathEnvironment, platform?: NodeJS.Platform);
+    load(): Promise<void>;
+    getCommand(commandId: string): JournalCommand | undefined;
+    getRun(runId: string): JournalRun | undefined;
+    activeRuns(): Array<{
+        id: string;
+    } & JournalRun>;
+    recordCommand(commandId: string, command: Omit<JournalCommand, "updatedAt">): Promise<void>;
+    recordRun(runId: string, run: {
+        status: BridgeRunStatus;
+        pid: number | null;
+        adapter: JournalRun["adapter"];
+        folderId: string;
+        startedAt: string | null;
+    }): Promise<void>;
+    private current;
+    private persist;
+}
+export {};
+//# sourceMappingURL=journal.d.ts.map

package/dist/journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../src/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,qBAAqB,EAG3B,MAAM,aAAa,CAAC;AAGrB,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiBf,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;kBAQX,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAiB1D,qBAAa,aAAa;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,KAAK,CAA2B;IACxC,OAAO,CAAC,MAAM,CAAoC;gBAGhD,WAAW,GAAE,qBAAmC,EAChD,QAAQ,kBAAmB;IAKvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB3B,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIzD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAI7C,UAAU,IAAI,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,UAAU,CAAC;IAQ1C,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,GACzC,OAAO,CAAC,IAAI,CAAC;IAQV,SAAS,CACb,KAAK,EAAE,MAAM,EACb,GAAG,EAAE;QACH,MAAM,EAAE,eAAe,CAAC;QACxB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GACA,OAAO,CAAC,IAAI,CAAC;IAKhB,OAAO,CAAC,OAAO;YAUD,OAAO;CAOtB"}

package/dist/journal.js

@@ -0,0 +1,106 @@
+import { AgentAdapterSchema, BridgeRunStatusSchema, } from "crewx-agent-protocol";
+import { z } from "zod";
+import { bridgeJournalPath, readSecureText, writeSecureText, } from "./config.js";
+import { BridgeError } from "./errors.js";
+const JournalCommandSchema = z
+    .object({
+    state: z.enum(["accepted", "succeeded", "failed"]),
+    runId: z.uuid(),
+    type: z.enum(["start_agent", "stop_agent"]),
+    result: z
+        .object({
+        run_status: BridgeRunStatusSchema.optional(),
+        pid: z.number().int().positive().nullable().optional(),
+        exit_code: z.number().int().nullable().optional(),
+        signal: z.string().max(32).nullable().optional(),
+    })
+        .strict()
+        .optional(),
+    errorCode: z.string().max(80).optional(),
+    updatedAt: z.iso.datetime({ offset: true }),
+})
+    .strict();
+const JournalRunSchema = z
+    .object({
+    status: BridgeRunStatusSchema,
+    pid: z.number().int().positive().nullable(),
+    adapter: AgentAdapterSchema,
+    folderId: z.uuid(),
+    startedAt: z.iso.datetime({ offset: true }).nullable(),
+})
+    .strict();
+const JournalSchema = z
+    .object({
+    version: z.literal(1),
+    commands: z.record(z.string(), JournalCommandSchema),
+    runs: z.record(z.string(), JournalRunSchema),
+})
+    .strict();
+const EMPTY_JOURNAL = {
+    version: 1,
+    commands: {},
+    runs: {},
+};
+export class BridgeJournal {
+    path;
+    state;
+    writes = Promise.resolve();
+    constructor(environment = process.env, platform = process.platform) {
+        this.path = bridgeJournalPath(environment, platform);
+    }
+    async load() {
+        const raw = await readSecureText(this.path);
+        if (!raw) {
+            this.state = structuredClone(EMPTY_JOURNAL);
+            return;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (error) {
+            throw new BridgeError("invalid_journal", "The local Bridge journal is invalid JSON.", 1, {
+                cause: error,
+            });
+        }
+        const result = JournalSchema.safeParse(parsed);
+        if (!result.success) {
+            throw new BridgeError("invalid_journal", "The local Bridge journal has an unsupported or unsafe shape.");
+        }
+        this.state = result.data;
+    }
+    getCommand(commandId) {
+        return this.current().commands[commandId];
+    }
+    getRun(runId) {
+        return this.current().runs[runId];
+    }
+    activeRuns() {
+        return Object.entries(this.current().runs)
+            .filter(([, run]) => ["starting", "running", "stopping"].includes(run.status))
+            .map(([id, run]) => ({ id, ...run }));
+    }
+    async recordCommand(commandId, command) {
+        this.current().commands[commandId] = {
+            ...command,
+            updatedAt: new Date().toISOString(),
+        };
+        await this.persist();
+    }
+    async recordRun(runId, run) {
+        this.current().runs[runId] = JournalRunSchema.parse(run);
+        await this.persist();
+    }
+    current() {
+        if (!this.state) {
+            throw new BridgeError("journal_not_loaded", "The Bridge journal must be loaded before use.");
+        }
+        return this.state;
+    }
+    async persist() {
+        const snapshot = JSON.stringify(JournalSchema.parse(this.current()), null, 2);
+        this.writes = this.writes.then(() => writeSecureText(this.path, `${snapshot}\n`));
+        await this.writes;
+    }
+}
+//# sourceMappingURL=journal.js.map

package/dist/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../src/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GAEtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,iBAAiB,EAEjB,cAAc,EACd,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,UAAU,EAAE,qBAAqB,CAAC,QAAQ,EAAE;QAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACjD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,MAAM,EAAE,qBAAqB;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,kBAAkB;IAC3B,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,aAAa,GAAiB;IAClC,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,MAAM,OAAO,aAAa;IACf,IAAI,CAAS;IACd,KAAK,CAA2B;IAChC,MAAM,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAElD,YACE,cAAqC,OAAO,CAAC,GAAG,EAChD,QAAQ,GAAG,OAAO,CAAC,QAAQ;QAE3B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,2CAA2C,EAAE,CAAC,EAAE;gBACvF,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,WAAW,CACnB,iBAAiB,EACjB,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,UAAU;QACR,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC;aACvC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAClB,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CACzD;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,OAA0C;QAE1C,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG;YACnC,GAAG,OAAO;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAAa,EACb,GAMC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,+CAA+C,CAChD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAClC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,IAAI,CAAC,CAC5C,CAAC;QACF,MAAM,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;CACF"}

package/dist/policy.d.ts

@@ -0,0 +1,4 @@
+import { type BridgeStartAgentPayload } from "crewx-agent-protocol";
+import { type BridgeConfig } from "./config.js";
+export declare function validateStartPolicy(config: BridgeConfig, rawPayload: unknown, activeRunCount: number): BridgeStartAgentPayload;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,OAAO,EACnB,cAAc,EAAE,MAAM,GACrB,uBAAuB,CA2BzB"}

package/dist/policy.js

@@ -0,0 +1,19 @@
+import { BridgeStartAgentPayloadSchema, } from "crewx-agent-protocol";
+import { BridgeError } from "./errors.js";
+export function validateStartPolicy(config, rawPayload, activeRunCount) {
+    const payload = BridgeStartAgentPayloadSchema.parse(rawPayload);
+    if (!config.policy.allowedAdapters.includes(payload.adapter)) {
+        throw new BridgeError("policy_adapter_denied", `The local policy does not allow the ${payload.adapter} runtime.`);
+    }
+    if (!config.policy.allowedPermissions.includes(payload.permission)) {
+        throw new BridgeError("policy_permission_denied", `The local policy does not allow ${payload.permission}.`);
+    }
+    if (payload.permission === "full_access" && !config.policy.allowFullAccess) {
+        throw new BridgeError("policy_full_access_denied", "Full access is disabled by the machine owner.");
+    }
+    if (activeRunCount >= config.policy.maxConcurrentRuns) {
+        throw new BridgeError("policy_concurrency_exceeded", "The local concurrent-run limit has been reached.");
+    }
+    return payload;
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,GAE9B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,UAAU,mBAAmB,CACjC,MAAoB,EACpB,UAAmB,EACnB,cAAsB;IAEtB,MAAM,OAAO,GAAG,6BAA6B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,uCAAuC,OAAO,CAAC,OAAO,WAAW,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,WAAW,CACnB,0BAA0B,EAC1B,mCAAmC,OAAO,CAAC,UAAU,GAAG,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3E,MAAM,IAAI,WAAW,CACnB,2BAA2B,EAC3B,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACtD,MAAM,IAAI,WAAW,CACnB,6BAA6B,EAC7B,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/service.d.ts

@@ -0,0 +1,45 @@
+import { type BridgePathEnvironment } from "./config.js";
+export type ServiceExecutor = (file: string, args: readonly string[]) => Promise<{
+    stdout: string;
+    stderr: string;
+}>;
+export declare function bridgeServiceEntrypoint(): string;
+export declare function launchdDefinition(options: {
+    nodePath: string;
+    entrypoint: string;
+    stdoutPath: string;
+    stderrPath: string;
+    pathEnvironment?: string;
+}): string;
+export declare function systemdDefinition(options: {
+    nodePath: string;
+    entrypoint: string;
+    pathEnvironment?: string;
+}): string;
+export declare function servicePath(platform?: NodeJS.Platform, userHome?: string): string;
+export declare function installService(options?: {
+    platform?: NodeJS.Platform;
+    userHome?: string;
+    uid?: number;
+    effectiveUid?: number;
+    environment?: BridgePathEnvironment;
+    executor?: ServiceExecutor;
+    nodePath?: string;
+    entrypoint?: string;
+}): Promise<string>;
+export declare function uninstallService(options?: {
+    platform?: NodeJS.Platform;
+    userHome?: string;
+    uid?: number;
+    effectiveUid?: number;
+    executor?: ServiceExecutor;
+}): Promise<string>;
+export declare function serviceStatus(options?: {
+    platform?: NodeJS.Platform;
+    uid?: number;
+    executor?: ServiceExecutor;
+}): Promise<{
+    running: boolean;
+    detail: string;
+}>;
+//# sourceMappingURL=service.d.ts.map

package/dist/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAOA,OAAO,EAGL,KAAK,qBAAqB,EAE3B,MAAM,aAAa,CAAC;AAKrB,MAAM,MAAM,eAAe,GAAG,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,KACpB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AA+BjD,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,MAAM,CAmCT;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,MAAM,CAwBT;AAkBD,wBAAgB,WAAW,CACzB,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,QAAQ,SAAY,GACnB,MAAM,CAWR;AAcD,wBAAsB,cAAc,CAAC,OAAO,GAAE;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoDvB;AAED,wBAAsB,gBAAgB,CAAC,OAAO,GAAE;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,eAAe,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkCvB;AAED,wBAAsB,aAAa,CAAC,OAAO,GAAE;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,eAAe,CAAC;CACvB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAgCrD"}