dexbot 1.1.10

package/dist/modules/launcher/credential_daemon.js

@@ -0,0 +1,173 @@
+"use strict";
+const { path } = require('../path_api');
+const { getStorage } = require('../storage');
+const storage = getStorage();
+const { spawn } = require('child_process');
+const chainKeys = require('../chain_keys');
+const credentialPolicy = require('../credential_policy');
+const { assertPrivatePathSecurity, ensureCredentialRuntimeDirSync, getCredentialReadyFilePath, getCredentialSocketPath, } = require('../credential_runtime');
+const { createPasswordBootstrapServer } = require('./credential_bootstrap');
+const { buildScopedChildEnv } = require('./child_env');
+const { buildRuntimeScriptArgs, SCRIPTS_ROOT: DEFAULT_CODE_ROOT } = require('./runtime_entry');
+const { Config } = require('../config');
+const { PATHS } = require('../paths');
+const { safeUnlink } = require('../utils/fs_utils');
+const { readHeadlessPassword } = require('./headless_password');
+const { sleep } = require('../order/utils/system');
+const DEFAULT_POLL_INTERVAL_MS = 1000;
+function waitForExit(child) {
+    return new Promise((resolve, reject) => {
+        child.on('error', reject);
+        child.on('close', (code) => resolve(code));
+    });
+}
+function createCredentialDaemonController({ root = PATHS.PROJECT_ROOT, codeRoot = DEFAULT_CODE_ROOT, socketPath = getCredentialSocketPath({ root }), readyFilePath = getCredentialReadyFilePath({ root }), pollIntervalMs = DEFAULT_POLL_INTERVAL_MS, } = {}) {
+    let daemonProcess = null;
+    let daemonExitPromise = null;
+    async function isDaemonReady() {
+        return chainKeys.isDaemonResponsive({ socketPath, readyFilePath });
+    }
+    async function removeStaleDaemonFiles() {
+        if (await isDaemonReady())
+            return;
+        try {
+            if (storage.exists(socketPath)) {
+                assertPrivatePathSecurity(socketPath, { expectedType: 'socket', requiredMode: 0o600 });
+                storage.unlink(socketPath);
+            }
+        }
+        catch (err) {
+            throw new Error(`Insecure credential socket path: ${err.message}`);
+        }
+        try {
+            if (storage.exists(readyFilePath)) {
+                assertPrivatePathSecurity(readyFilePath, { expectedType: 'file', requiredMode: 0o600 });
+                storage.unlink(readyFilePath);
+            }
+        }
+        catch (err) {
+            throw new Error(`Insecure credential ready path: ${err.message}`);
+        }
+    }
+    function forwardSignal(signal) {
+        if (!daemonProcess || daemonProcess.killed)
+            return;
+        try {
+            daemonProcess.kill(signal);
+        }
+        catch (err) {
+            if (err.code === 'ESRCH')
+                return;
+            throw err;
+        }
+    }
+    async function ensureCredentialDaemon({ detached = false, stdio: stdioOption = undefined, headless = false, passwordFile = null } = {}) {
+        if (await isDaemonReady()) {
+            return false;
+        }
+        await removeStaleDaemonFiles();
+        ensureCredentialRuntimeDirSync({ socketPath, readyFilePath, root });
+        credentialPolicy.ensurePolicyConfig(path.join(root, 'profiles', 'daemon-policies.json'));
+        let vaultSecret;
+        if (headless) {
+            vaultSecret = chainKeys.unlockWithPassword(readHeadlessPassword({ passwordFile }));
+        }
+        else {
+            vaultSecret = await chainKeys.authenticate();
+        }
+        const bootstrap = await createPasswordBootstrapServer({ secret: vaultSecret });
+        const daemonArgs = buildRuntimeScriptArgs({
+            codeRoot,
+            scriptSegments: ['credential-daemon'],
+        });
+        // Write the bootstrap socket path to a stable file in the runtime dir
+        // so the credential daemon can find it via DEXBOT_CRED_BOOTSTRAP_PATH_FILE
+        // instead of a PM2-persistable env var.
+        const bootstrapPathFile = path.join(path.dirname(socketPath), '.dexbot-cred-bootstrap-path');
+        try {
+            storage.writeFile(bootstrapPathFile, bootstrap.socketPath, { mode: 0o600 });
+        }
+        catch (err) {
+            bootstrap.close();
+            throw new Error(`Cannot write bootstrap path file at ${bootstrapPathFile}: ${err.message}`);
+        }
+        try {
+            const childStdio = stdioOption ?? (detached ? 'ignore' : 'inherit');
+            daemonProcess = spawn(Config.EXEC_PATH, daemonArgs, {
+                cwd: root,
+                env: buildScopedChildEnv({
+                    extra: {
+                        DEXBOT_CRED_DAEMON_SOCKET: socketPath,
+                        DEXBOT_CRED_DAEMON_READY_FILE: readyFilePath,
+                        DEXBOT_CRED_BOOTSTRAP_PATH_FILE: bootstrapPathFile,
+                    },
+                }),
+                stdio: childStdio,
+                detached,
+            });
+            daemonExitPromise = waitForExit(daemonProcess);
+            if (detached) {
+                daemonProcess.unref();
+            }
+            await Promise.all([
+                chainKeys.waitForDaemon(undefined, { socketPath, readyFilePath }),
+                bootstrap.waitForTransfer(),
+            ]);
+            return true;
+        }
+        catch (error) {
+            bootstrap.close();
+            throw error;
+        }
+    }
+    function getManagedDaemonPid() {
+        return daemonProcess && daemonProcess.pid ? daemonProcess.pid : null;
+    }
+    function releaseManagedDaemon() {
+        daemonProcess = null;
+        daemonExitPromise = null;
+    }
+    async function stopManagedDaemon() {
+        if (!daemonProcess || daemonProcess.killed)
+            return;
+        forwardSignal('SIGTERM');
+        await Promise.race([
+            daemonExitPromise || waitForExit(daemonProcess),
+            sleep(5000),
+        ]);
+        safeUnlink(socketPath);
+        safeUnlink(readyFilePath);
+        daemonProcess = null;
+        daemonExitPromise = null;
+    }
+    async function waitForManagedDaemon() {
+        if (daemonProcess) {
+            return daemonExitPromise || waitForExit(daemonProcess);
+        }
+        if (!(await isDaemonReady())) {
+            return 0;
+        }
+        while (await isDaemonReady()) {
+            await sleep(pollIntervalMs);
+        }
+        return 0;
+    }
+    return {
+        ensureCredentialDaemon,
+        forwardSignal,
+        getManagedDaemonPid,
+        isDaemonReady,
+        releaseManagedDaemon,
+        stopManagedDaemon,
+        waitForManagedDaemon,
+    };
+}
+module.exports = {
+    createCredentialDaemonController,
+    DEFAULT_ROOT: PATHS.PROJECT_ROOT,
+    DEFAULT_POLL_INTERVAL_MS,
+    DEFAULT_READY_FILE: getCredentialReadyFilePath({ root: PATHS.PROJECT_ROOT }),
+    DEFAULT_SOCKET_PATH: getCredentialSocketPath({ root: PATHS.PROJECT_ROOT }),
+    waitForExit,
+};
+//# sourceMappingURL=credential_daemon.js.map

package/dist/modules/launcher/credential_daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential_daemon.js","sourceRoot":"","sources":["../../../modules/launcher/credential_daemon.ts"],"names":[],"mappings":";AAAA,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AACxC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAC7C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;AAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAC3C,MAAM,gBAAgB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AACzD,MAAM,EACF,yBAAyB,EACzB,8BAA8B,EAC9B,0BAA0B,EAC1B,uBAAuB,GAC1B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AACrC,MAAM,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAC5E,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AACvD,MAAM,EAAE,sBAAsB,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAC/F,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AACxC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACpD,MAAM,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAChE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEnD,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAEtC,SAAS,WAAW,CAAC,KAAU;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gCAAgC,CAAC,EACtC,IAAI,GAAG,KAAK,CAAC,YAAY,EACzB,QAAQ,GAAG,iBAAiB,EAC5B,UAAU,GAAG,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,EAC9C,aAAa,GAAG,0BAA0B,CAAC,EAAE,IAAI,EAAE,CAAC,EACpD,cAAc,GAAG,wBAAwB,GAC5C,GAAG,EAAE;IACF,IAAI,aAAa,GAAQ,IAAI,CAAC;IAC9B,IAAI,iBAAiB,GAAQ,IAAI,CAAC;IAElC,KAAK,UAAU,aAAa;QACxB,OAAO,SAAS,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,UAAU,sBAAsB;QACjC,IAAI,MAAM,aAAa,EAAE;YAAE,OAAO;QAClC,IAAI,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7B,yBAAyB,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvF,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBAChC,yBAAyB,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxF,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAClC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;IAED,SAAS,aAAa,CAAC,MAAc;QACjC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM;YAAE,OAAO;QACnD,IAAI,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO;YACjC,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAED,KAAK,UAAU,sBAAsB,CAAC,EAAE,QAAQ,GAAG,KAAK,EAAE,KAAK,EAAE,WAAW,GAAG,SAAS,EAAE,QAAQ,GAAG,KAAK,EAAE,YAAY,GAAG,IAAI,KAK3H,EAAE;QACF,IAAI,MAAM,aAAa,EAAE,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,sBAAsB,EAAE,CAAC;QAC/B,8BAA8B,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,gBAAgB,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAEzF,IAAI,WAAW,CAAC;QAEhB,IAAI,QAAQ,EAAE,CAAC;YACX,WAAW,GAAG,SAAS,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;aAAM,CAAC;YACJ,WAAW,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/E,MAAM,UAAU,GAAG,sBAAsB,CAAC;YACtC,QAAQ;YACR,cAAc,EAAE,CAAC,mBAAmB,CAAC;SACxC,CAAC,CAAC;QAEH,sEAAsE;QACtE,2EAA2E;QAC3E,wCAAwC;QACxC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,6BAA6B,CAAC,CAAC;QAC7F,IAAI,CAAC;YACD,OAAO,CAAC,SAAS,CAAC,iBAAiB,EAAE,SAAS,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACX,uCAAuC,iBAAiB,KAAK,GAAG,CAAC,OAAO,EAAE,CAC7E,CAAC;QACN,CAAC;QAED,IAAI,CAAC;YACD,MAAM,UAAU,GAAiB,WAAW,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAClF,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE;gBAChD,GAAG,EAAE,IAAI;gBACT,GAAG,EAAE,mBAAmB,CAAC;oBACrB,KAAK,EAAE;wBACH,yBAAyB,EAAE,UAAU;wBACrC,6BAA6B,EAAE,aAAa;wBAC5C,+BAA+B,EAAE,iBAAiB;qBACrD;iBACJ,CAAC;gBACF,KAAK,EAAE,UAAU;gBACjB,QAAQ;aACX,CAAC,CAAC;YACH,iBAAiB,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;YAC/C,IAAI,QAAQ,EAAE,CAAC;gBACX,aAAa,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;YAED,MAAM,OAAO,CAAC,GAAG,CAAC;gBACd,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;gBACjE,SAAS,CAAC,eAAe,EAAE;aAC9B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED,SAAS,mBAAmB;QACxB,OAAO,aAAa,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,CAAC;IAED,SAAS,oBAAoB;QACzB,aAAa,GAAG,IAAI,CAAC;QACrB,iBAAiB,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,UAAU,iBAAiB;QAC5B,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM;YAAE,OAAO;QAEnD,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,OAAO,CAAC,IAAI,CAAC;YACf,iBAAiB,IAAI,WAAW,CAAC,aAAa,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC;SACd,CAAC,CAAC;QAEH,UAAU,CAAC,UAAU,CAAC,CAAA;QACtB,UAAU,CAAC,aAAa,CAAC,CAAA;QACzB,aAAa,GAAG,IAAI,CAAC;QACrB,iBAAiB,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,UAAU,oBAAoB;QAC/B,IAAI,aAAa,EAAE,CAAC;YAChB,OAAO,iBAAiB,IAAI,WAAW,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC;QACb,CAAC;QAED,OAAO,MAAM,aAAa,EAAE,EAAE,CAAC;YAC3B,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,CAAC,CAAC;IACb,CAAC;IAED,OAAO;QACH,sBAAsB;QACtB,aAAa;QACb,mBAAmB;QACnB,aAAa;QACb,oBAAoB;QACpB,iBAAiB;QACjB,oBAAoB;KACvB,CAAC;AACN,CAAC;AAED,iBAAS;IACL,gCAAgC;IAChC,YAAY,EAAE,KAAK,CAAC,YAAY;IAChC,wBAAwB;IACxB,kBAAkB,EAAE,0BAA0B,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;IAC5E,mBAAmB,EAAE,uBAAuB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;IAC1E,WAAW;CACd,CAAC"}

package/dist/modules/launcher/credential_secret.d.ts

@@ -0,0 +1,6 @@
+declare function normalizeBootstrapCredential(credential: any): any;
+declare const _default: {
+    normalizeBootstrapCredential: typeof normalizeBootstrapCredential;
+};
+export = _default;
+//# sourceMappingURL=credential_secret.d.ts.map

package/dist/modules/launcher/credential_secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential_secret.d.ts","sourceRoot":"","sources":["../../../modules/launcher/credential_secret.ts"],"names":[],"mappings":"AAEA,iBAAS,4BAA4B,CAAC,UAAU,EAAE,GAAG,GAAG,GAAG,CAU1D;;;;AAED,kBAEE"}

package/dist/modules/launcher/credential_secret.js

@@ -0,0 +1,15 @@
+"use strict";
+const chainKeys = require('../chain_keys');
+function normalizeBootstrapCredential(credential) {
+    if (chainKeys.isVaultSecret(credential)) {
+        return credential;
+    }
+    if (credential && typeof credential === 'object' && typeof credential.vaultKeyHex === 'string') {
+        return credential;
+    }
+    throw new Error('Invalid bootstrap credential payload');
+}
+module.exports = {
+    normalizeBootstrapCredential,
+};
+//# sourceMappingURL=credential_secret.js.map

package/dist/modules/launcher/credential_secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential_secret.js","sourceRoot":"","sources":["../../../modules/launcher/credential_secret.ts"],"names":[],"mappings":";AAAA,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAE3C,SAAS,4BAA4B,CAAC,UAAe;IACjD,IAAI,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC7F,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC5D,CAAC;AAED,iBAAS;IACL,4BAA4B;CAC/B,CAAC"}

package/dist/modules/launcher/foreign_cred_daemon.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=foreign_cred_daemon.d.ts.map

package/dist/modules/launcher/foreign_cred_daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreign_cred_daemon.d.ts","sourceRoot":"","sources":["../../../modules/launcher/foreign_cred_daemon.ts"],"names":[],"mappings":""}

package/dist/modules/launcher/foreign_cred_daemon.js

@@ -0,0 +1,166 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const { path } = require('../path_api');
+const { getStorage } = require('../storage');
+const storage = getStorage();
+const { safeUnlink } = require('../utils/fs_utils');
+const { getProcessDiscovery } = require('../process_discovery');
+const { runtime } = require('../runtime');
+const { sleep } = require('../order/utils/system');
+/**
+ * Foreign credential daemon detection.
+ *
+ * The launcher can end up reusing a credential daemon that was NOT started
+ * by the current `node unlock` invocation. The readiness probe
+ * (`isDaemonReady` / `isDaemonResponsive`) only checks that the socket is
+ * answering, so a leftover daemon from a previous run, an old PM2 entry, or
+ * a manually-spawned daemon can silently satisfy that probe — and the
+ * launcher then skips the master password prompt.
+ *
+ * This module exposes the helper we use to detect and clean up that case.
+ * Ownership is tracked via a PID file written by the launcher; the live
+ * socket owner is discovered through ProcessDiscovery. If the two disagree
+ * the helper kills the foreign daemon, removes the orphan runtime files,
+ * and lets the caller fall through to the normal "prompt for master
+ * password" path.
+ */
+function isPidAlive(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        return runtime.kill(pid, 0);
+    }
+    catch (_) {
+        return false;
+    }
+}
+function readCredentialSocketInode(socketPath) {
+    return getProcessDiscovery().readSocketInode(socketPath);
+}
+function findCredentialSocketOwnerPid(socketPath, isLikelyProcess) {
+    return getProcessDiscovery().findSocketOwnerPid(socketPath, isLikelyProcess || undefined);
+}
+function readOwnedCredentialDaemonPid(pidFile, isLikelyProcess) {
+    if (!pidFile)
+        return 0;
+    let raw;
+    try {
+        raw = storage.readFile(pidFile);
+    }
+    catch (_) {
+        return 0;
+    }
+    const pid = Number(raw.trim());
+    if (!Number.isInteger(pid) || pid <= 0) {
+        safeUnlink(pidFile);
+        return 0;
+    }
+    if (!isPidAlive(pid)) {
+        safeUnlink(pidFile);
+        return 0;
+    }
+    if (typeof isLikelyProcess === 'function' && !isLikelyProcess(pid)) {
+        safeUnlink(pidFile);
+        return 0;
+    }
+    return pid;
+}
+async function stopPid(pid, timeoutMs = 5000) {
+    if (!isPidAlive(pid))
+        return true;
+    try {
+        runtime.kill(pid, 'SIGTERM');
+    }
+    catch (e) {
+        if (e.code !== 'ESRCH')
+            throw e;
+    }
+    const startedAt = Date.now();
+    while ((Date.now() - startedAt) < timeoutMs) {
+        if (!isPidAlive(pid))
+            return true;
+        await sleep(100);
+    }
+    try {
+        runtime.kill(pid, 'SIGKILL');
+    }
+    catch (e) {
+        if (e.code !== 'ESRCH')
+            throw e;
+    }
+    return !isPidAlive(pid);
+}
+/**
+ * Detect and clean up a credential daemon that is listening on our socket
+ * but was NOT started by the current unlock session.
+ *
+ * Parameters
+ * ----------
+ * @param {Object} options
+ * @param {string} options.socketPath - Path to the credential daemon's
+ *   Unix socket (e.g. `$XDG_RUNTIME_DIR/dexbot2/dexbot-cred-daemon.sock`).
+ * @param {string} options.readyFilePath - Path to the daemon's ready
+ *   marker file.
+ * @param {string} options.pidFile - Path to the ownership PID file the
+ *   launcher writes when it starts a daemon.
+ * @param {(pid: number) => boolean} options.isLikelyProcess - Returns true
+ *   when the PID is a credential-daemon process.
+ * @param {boolean} [options.verbose=true] - Log when a foreign daemon is
+ *   found.
+ *
+ * @returns {Promise<boolean>} true when a foreign daemon was removed.
+ */
+async function ensureNoForeignCredentialDaemon({ socketPath, readyFilePath, pidFile, isLikelyProcess, verbose = true, } = {}) {
+    if (!socketPath || !readyFilePath)
+        return false;
+    const socketExists = storage.exists(socketPath);
+    const readyExists = storage.exists(readyFilePath);
+    // Nothing on disk: nothing to clean, nothing to kill.
+    if (!socketExists && !readyExists)
+        return false;
+    // Orphan ready file with no socket behind it (e.g. a previous launch
+    // crashed after writing the ready marker but before binding the
+    // socket, or someone manually deleted the socket). Treat as stale.
+    if (!socketExists && readyExists) {
+        safeUnlink(readyFilePath);
+        return false;
+    }
+    // socketExists is true from here on. Probe the kernel and compare with
+    // our ownership record. We deliberately do NOT require the ready
+    // marker: a foreign daemon may be holding the socket after the ready
+    // file was removed (e.g. by a previous unlock that did not own the
+    // daemon). If we skip this case the controller will unlink the
+    // socket and start a new daemon, leaving the old one orphaned in
+    // memory with a live socket to nobody.
+    const ownedPid = readOwnedCredentialDaemonPid(pidFile, isLikelyProcess);
+    const liveOwnerPid = findCredentialSocketOwnerPid(socketPath, isLikelyProcess);
+    if (ownedPid > 0 && liveOwnerPid === ownedPid) {
+        return false;
+    }
+    if (liveOwnerPid > 0) {
+        if (verbose) {
+            // eslint-disable-next-line no-console
+            console.warn(`[unlock] Detected foreign credential daemon (PID ${liveOwnerPid}) on ${socketPath} ` +
+                `not started by this launcher — removing it to force a fresh master password prompt.`);
+        }
+        await stopPid(liveOwnerPid);
+        safeUnlink(socketPath);
+        safeUnlink(readyFilePath);
+        return true;
+    }
+    // No live owner but the socket file is still on disk (e.g. left over
+    // by a crashed daemon). Clean it up so the controller's own
+    // removeStaleDaemonFiles does not have to deal with the wreckage.
+    safeUnlink(socketPath);
+    if (readyExists)
+        safeUnlink(readyFilePath);
+    return false;
+}
+module.exports = {
+    ensureNoForeignCredentialDaemon,
+    findCredentialSocketOwnerPid,
+    readCredentialSocketInode,
+    readOwnedCredentialDaemonPid,
+    stopPid,
+};
+//# sourceMappingURL=foreign_cred_daemon.js.map

package/dist/modules/launcher/foreign_cred_daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreign_cred_daemon.js","sourceRoot":"","sources":["../../../modules/launcher/foreign_cred_daemon.ts"],"names":[],"mappings":";;AAAA,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AACxC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAC7C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;AAC7B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACpD,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAChE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEnD;;;;;;;;;;;;;;;;GAgBG;AAEH,SAAS,UAAU,CAAC,GAAG;IACnB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAAC,UAAU;IACzC,OAAO,mBAAmB,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAU,EAAE,eAAe;IAC7D,OAAO,mBAAmB,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,eAAe,IAAI,SAAS,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAO,EAAE,eAAe;IAC1D,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IACvB,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QAAC,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACrC,UAAU,CAAC,OAAO,CAAC,CAAA;QACnB,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,UAAU,CAAC,OAAO,CAAC,CAAA;QACnB,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,OAAO,eAAe,KAAK,UAAU,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,UAAU,CAAC,OAAO,CAAC,CAAA;QACnB,OAAO,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI;IACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,+BAA+B,CAAC,EAC3C,UAAU,EACV,aAAa,EACb,OAAO,EACP,eAAe,EACf,OAAO,GAAG,IAAI,MAOd,EAAE;IACF,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAElD,sDAAsD;IACtD,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAEhD,qEAAqE;IACrE,gEAAgE;IAChE,mEAAmE;IACnE,IAAI,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC;QAC/B,UAAU,CAAC,aAAa,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,uEAAuE;IACvE,iEAAiE;IACjE,qEAAqE;IACrE,mEAAmE;IACnE,+DAA+D;IAC/D,iEAAiE;IACjE,uCAAuC;IACvC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,4BAA4B,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAE/E,IAAI,QAAQ,GAAG,CAAC,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACnB,IAAI,OAAO,EAAE,CAAC;YACV,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACR,oDAAoD,YAAY,QAAQ,UAAU,GAAG;gBACrF,qFAAqF,CACxF,CAAC;QACN,CAAC;QACD,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,CAAC;QACvB,UAAU,CAAC,aAAa,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,qEAAqE;IACrE,4DAA4D;IAC5D,kEAAkE;IAClE,UAAU,CAAC,UAAU,CAAC,CAAC;IACvB,IAAI,WAAW;QAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,OAAO,GAAG;IACb,+BAA+B;IAC/B,4BAA4B;IAC5B,yBAAyB;IACzB,4BAA4B;IAC5B,OAAO;CACV,CAAC"}

package/dist/modules/launcher/headless_password.d.ts

@@ -0,0 +1,8 @@
+declare function readHeadlessPassword({ passwordFile }?: {
+    passwordFile?: string | null;
+}): string;
+declare const _default: {
+    readHeadlessPassword: typeof readHeadlessPassword;
+};
+export = _default;
+//# sourceMappingURL=headless_password.d.ts.map

package/dist/modules/launcher/headless_password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headless_password.d.ts","sourceRoot":"","sources":["../../../modules/launcher/headless_password.ts"],"names":[],"mappings":"AAKA,iBAAS,oBAAoB,CAAC,EAAE,YAAY,EAAE,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAAG,MAAM,CA6B7F;;;;AAED,kBAEE"}

package/dist/modules/launcher/headless_password.js

@@ -0,0 +1,33 @@
+"use strict";
+const { getStorage } = require('../storage');
+const storage = getStorage();
+const { assertPrivatePathSecurity } = require('../credential_runtime');
+const { Config } = require('../config');
+function readHeadlessPassword({ passwordFile } = {}) {
+    let password = null;
+    if (passwordFile) {
+        try {
+            assertPrivatePathSecurity(passwordFile, { expectedType: 'file', requiredMode: 0o400 });
+            password = storage.readFile(passwordFile).trim().split('\n')[0];
+        }
+        catch (err) {
+            throw new Error(`Cannot read master password from '${passwordFile}': ${err.message}`);
+        }
+        if (!password) {
+            throw new Error(`Master password file '${passwordFile}' is empty`);
+        }
+    }
+    else if (Config.DEXBOT_MASTER_PASSWORD) {
+        password = Config.DEXBOT_MASTER_PASSWORD;
+    }
+    if (!password) {
+        throw new Error('Headless mode requires either --password-file <path> or DEXBOT_MASTER_PASSWORD env var');
+    }
+    console.warn('⚠️  WARNING: Running in headless mode. The master password is being read from a non-interactive source.\n' +
+        '   This is less secure than interactive entry. Use only in trusted environments.');
+    return password;
+}
+module.exports = {
+    readHeadlessPassword,
+};
+//# sourceMappingURL=headless_password.js.map

package/dist/modules/launcher/headless_password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headless_password.js","sourceRoot":"","sources":["../../../modules/launcher/headless_password.ts"],"names":[],"mappings":";AAAA,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAC7C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;AAC7B,MAAM,EAAE,yBAAyB,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AACvE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAExC,SAAS,oBAAoB,CAAC,EAAE,YAAY,KAAuC,EAAE;IACjF,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,IAAI,YAAY,EAAE,CAAC;QACf,IAAI,CAAC;YACD,yBAAyB,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YACvF,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,YAAY,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,YAAY,YAAY,CAAC,CAAC;QACvE,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACvC,QAAQ,GAAG,MAAM,CAAC,sBAAsB,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACX,wFAAwF,CAC3F,CAAC;IACN,CAAC;IAED,OAAO,CAAC,IAAI,CACR,2GAA2G;QAC3G,kFAAkF,CACrF,CAAC;IAEF,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,iBAAS;IACL,oBAAoB;CACvB,CAAC"}

package/dist/modules/launcher/launch_modes.d.ts

@@ -0,0 +1,36 @@
+declare function findFirstPositionalArg(args: string[]): string | null;
+declare function parseUnlockArgs(argv?: string[]): {
+    botName: any;
+    clawOnly: boolean;
+    isolated: boolean;
+    dryrun: boolean;
+    headless: boolean;
+    passwordFile: any;
+    control: {
+        cmd: string;
+        target: string;
+    };
+} | {
+    botName: any;
+    clawOnly: boolean;
+    isolated: boolean;
+    dryrun: boolean;
+    headless: boolean;
+    passwordFile: string;
+    control?: undefined;
+};
+declare function parsePm2Args(argv?: string[]): {
+    command: string;
+    target: string;
+    clawOnly: boolean;
+    headless: boolean;
+    passwordFile: string;
+};
+declare const _default: {
+    findFirstPositionalArg: typeof findFirstPositionalArg;
+    parsePm2Args: typeof parsePm2Args;
+    parseUnlockArgs: typeof parseUnlockArgs;
+    parseUnlockStartArgs: typeof parseUnlockArgs;
+};
+export = _default;
+//# sourceMappingURL=launch_modes.d.ts.map

package/dist/modules/launcher/launch_modes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch_modes.d.ts","sourceRoot":"","sources":["../../../modules/launcher/launch_modes.ts"],"names":[],"mappings":"AAGA,iBAAS,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAE7D;AAkCD,iBAAS,eAAe,CAAC,IAAI,WAAe;;;;;;;;;;;;;;;;;;;EAyC3C;AAID,iBAAS,YAAY,CAAC,IAAI,WAAe;;;;;;EA4CxC;;;;;;;AAED,kBAKE"}

package/dist/modules/launcher/launch_modes.js

@@ -0,0 +1,129 @@
+"use strict";
+const { Config } = require('../config');
+const CONTROL_COMMANDS = new Set(['status', 'stat', 'stop', 'delete', 'restart', 'stop-all', 'restart-all', 'shutdown']);
+function findFirstPositionalArg(args) {
+    return args.find((arg) => !arg.startsWith('-') && arg !== 'claw-only' && !CONTROL_COMMANDS.has(arg)) || null;
+}
+function extractPasswordFileArg(args) {
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === '--password-file' && i + 1 < args.length) {
+            return args[i + 1];
+        }
+        const match = args[i].match(/^--password-file=(.+)$/);
+        if (match)
+            return match[1];
+    }
+    return null;
+}
+function stripUnlockFlags(args) {
+    const result = [];
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === '--headless' || a === '--isolated' || a === '--dryrun' || a === '--foreground' || a === 'claw-only' || a === '--claw-only') {
+            continue;
+        }
+        if (a === '--password-file') {
+            if (i < args.length - 1) {
+                i++; // skip the value
+            }
+            continue;
+        }
+        if (a.startsWith('--password-file=')) {
+            continue;
+        }
+        result.push(a);
+    }
+    return result;
+}
+function parseUnlockArgs(argv = process.argv) {
+    const args = argv.slice(2);
+    const clawOnly = args.includes('--claw-only') || args.includes('claw-only');
+    const isolated = args.includes('--isolated');
+    const dryrun = args.includes('--dryrun');
+    const headless = args.includes('--headless');
+    const passwordFile = extractPasswordFileArg(args);
+    const positionalArgs = stripUnlockFlags(args);
+    if (positionalArgs[0] && CONTROL_COMMANDS.has(positionalArgs[0])) {
+        let cmd = positionalArgs[0];
+        const target = positionalArgs[1] || null;
+        // Normalize whole-runtime controls:
+        //   restart, restart all -> restart-all
+        //   stop, stop all       -> stop-all
+        // Keep stop/restart <botName> for isolated per-bot control.
+        const consumedAll = (cmd === 'restart' || cmd === 'stop') && (!target || target === 'all');
+        if (consumedAll) {
+            cmd += '-all';
+        }
+        return {
+            botName: null,
+            clawOnly: false,
+            isolated: false,
+            dryrun: false,
+            headless: false,
+            passwordFile: null,
+            control: { cmd, target: consumedAll ? null : target },
+        };
+    }
+    return {
+        botName: clawOnly ? null : findFirstPositionalArg(positionalArgs) || Config.BOT_NAME || null,
+        clawOnly,
+        isolated,
+        dryrun,
+        headless,
+        passwordFile,
+    };
+}
+const parseUnlockStartArgs = parseUnlockArgs;
+function parsePm2Args(argv = process.argv) {
+    const args = argv.slice(2);
+    const headless = args.includes('--headless');
+    const passwordFile = extractPasswordFileArg(args);
+    // Strip known flags and their values before determining the command/target
+    const filteredArgs = [];
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === '--headless')
+            continue;
+        if (a === '--password-file') {
+            i++;
+            continue;
+        }
+        if (a.startsWith('--password-file='))
+            continue;
+        filteredArgs.push(a);
+    }
+    const command = filteredArgs[0] || null;
+    const knownCommands = new Set(['claw-only', '--claw-only', 'update', 'stop', 'delete', 'restart', 'help']);
+    if (command === 'claw-only' || command === '--claw-only') {
+        return {
+            command: 'claw-only',
+            target: null,
+            clawOnly: true,
+            headless,
+            passwordFile,
+        };
+    }
+    if (!command || !knownCommands.has(command)) {
+        return {
+            command: null,
+            target: command,
+            clawOnly: false,
+            headless,
+            passwordFile,
+        };
+    }
+    return {
+        command,
+        target: filteredArgs[1] || null,
+        clawOnly: false,
+        headless,
+        passwordFile,
+    };
+}
+module.exports = {
+    findFirstPositionalArg,
+    parsePm2Args,
+    parseUnlockArgs,
+    parseUnlockStartArgs,
+};
+//# sourceMappingURL=launch_modes.js.map

package/dist/modules/launcher/launch_modes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch_modes.js","sourceRoot":"","sources":["../../../modules/launcher/launch_modes.ts"],"names":[],"mappings":";AAAA,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AACxC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAEzH,SAAS,sBAAsB,CAAC,IAAc;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,WAAW,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;AACzH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAc;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,iBAAiB,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACtD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAc;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;YACnI,SAAS;QACb,CAAC;QACD,IAAI,CAAC,KAAK,iBAAiB,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,CAAC,EAAE,CAAC,CAAC,iBAAiB;YAC1B,CAAC;YACD,SAAS;QACb,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnC,SAAS;QACb,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAE9C,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAEzC,oCAAoC;QACpC,wCAAwC;QACxC,qCAAqC;QACrC,4DAA4D;QAC5D,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC;QAC3F,IAAI,WAAW,EAAE,CAAC;YACd,GAAG,IAAI,MAAM,CAAC;QAClB,CAAC;QAED,OAAO;YACH,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;SACxD,CAAC;IACN,CAAC;IAED,OAAO;QACH,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI;QAC5F,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,YAAY;KACf,CAAC;AACN,CAAC;AAED,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAE7C,SAAS,YAAY,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAElD,2EAA2E;IAC3E,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,YAAY;YAAE,SAAS;QACjC,IAAI,CAAC,KAAK,iBAAiB,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,SAAS;QAC/C,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACxC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3G,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QACvD,OAAO;YACH,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;YACd,QAAQ;YACR,YAAY;SACf,CAAC;IACN,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO;YACH,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,KAAK;YACf,QAAQ;YACR,YAAY;SACf,CAAC;IACN,CAAC;IAED,OAAO;QACH,OAAO;QACP,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI;QAC/B,QAAQ,EAAE,KAAK;QACf,QAAQ;QACR,YAAY;KACf,CAAC;AACN,CAAC;AAED,iBAAS;IACL,sBAAsB;IACtB,YAAY;IACZ,eAAe;IACf,oBAAoB;CACvB,CAAC"}