smol-symphony 0.2.0 → 0.3.0

package/dist/src/shell/main-scaffold.js

@@ -0,0 +1,116 @@
+// FCIS rewrite — first-run scaffold writer (kind: shell helper).
+//
+// Sliced out of the composition root so the root stays under the max-lines
+// budget and closes the scaffold seam. The CLI prompts the operator before
+// calling in; this is a thin file writer (REF src/scaffold.ts, read-only). A
+// workflow is now pure YAML config plus per-state prompt files, so the scaffold
+// is multi-file: resolve the bundled WORKFLOW.minimal.yaml + its prompts/Todo.md,
+// refuse to overwrite, write both (the YAML at `workflowPath`, the prompt under
+// `<dir>/prompts/Todo.md` so its `prompt_file: prompts/Todo.md` resolves).
+//
+// Shell rule: imports from src/types/** ONLY (this writer needs none).
+import path from 'node:path';
+import process from 'node:process';
+import { existsSync } from 'node:fs';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { fileURLToPath } from 'node:url';
+/** Package root (one dir up from src/shell), matching the src/ (tsx) and dist/ layouts. */
+const PACKAGE_ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
+/**
+ * Absolute path to the bundled issue-filing skill asset. Resolved two dirs up
+ * from the module like MINIMAL_WORKFLOW_ASSET_PATH, so it works for both the
+ * src/ (tsx) and dist/ (published) layouts. Shipped via package.json `files`
+ * as `assets/`.
+ */
+const SYMPHONY_ISSUES_SKILL_ASSET_PATH = path.join(path.dirname(fileURLToPath(import.meta.url)), '..', '..', 'assets', 'skills', 'symphony-issues', 'SKILL.md');
+/**
+ * Absolute path to the bundled minimal-workflow asset (pure YAML) and its single
+ * starter prompt. Both ship at the package root alongside WORKFLOW.template.yaml.
+ * The YAML's `prompt_file: prompts/Todo.md` resolves relative to where the YAML
+ * lands, so the prompt is written into a sibling `prompts/` dir.
+ */
+const MINIMAL_WORKFLOW_ASSET_PATH = path.join(PACKAGE_ROOT, 'WORKFLOW.minimal.yaml');
+const MINIMAL_PROMPT_ASSET_PATH = path.join(PACKAGE_ROOT, 'prompts-minimal', 'Todo.md');
+/** Read a bundled scaffold asset, reporting a clear error on failure. */
+async function readAsset(assetPath) {
+    try {
+        return await readFile(assetPath, 'utf8');
+    }
+    catch (err) {
+        process.stderr.write(`error: scaffold failed: cannot read bundled asset at ${assetPath}: ${err.message}\n`);
+        return null;
+    }
+}
+/**
+ * Write a starter WORKFLOW.yaml at `workflowPath` (must be absolute) plus its
+ * `prompts/Todo.md`, then print the relaunch hint. Refuses to overwrite an
+ * existing workflow file; leaves an already-present prompts/Todo.md untouched. On
+ * the interactive serve path the caller has already confirmed the operator's yes
+ * (REF maybeScaffoldMissingWorkflow + scaffoldWorkflow). Returns true on success.
+ */
+export async function scaffoldWorkflow(workflowPath) {
+    if (existsSync(workflowPath)) {
+        process.stderr.write(`error: refusing to overwrite existing file: ${workflowPath}\n`);
+        return false;
+    }
+    const body = await readAsset(MINIMAL_WORKFLOW_ASSET_PATH);
+    const promptBody = await readAsset(MINIMAL_PROMPT_ASSET_PATH);
+    if (body === null || promptBody === null)
+        return false;
+    const dir = path.dirname(workflowPath);
+    const promptDir = path.join(dir, 'prompts');
+    const promptPath = path.join(promptDir, 'Todo.md');
+    await mkdir(dir, { recursive: true });
+    await writeFile(workflowPath, body, { flag: 'wx' });
+    process.stdout.write(`wrote ${workflowPath}\n`);
+    // Don't clobber a pre-existing prompts/Todo.md (the workflow guard above
+    // already established the workflow file itself was absent).
+    if (existsSync(promptPath)) {
+        process.stdout.write(`kept existing ${promptPath}\n`);
+    }
+    else {
+        await mkdir(promptDir, { recursive: true });
+        await writeFile(promptPath, promptBody, { flag: 'wx' });
+        process.stdout.write(`wrote ${promptPath}\n`);
+    }
+    process.stdout.write(`It defaults to gondolin.image: managed — the agent image is fetched from a published ` +
+        `release on first run (no docker / npm run build:image). To pin your own asset instead, ` +
+        `set gondolin.image to a build id / name:tag. Then run ` +
+        `\`symphony ${path.relative(process.cwd(), workflowPath) || workflowPath}\`.\n`);
+    return true;
+}
+/**
+ * Install the bundled issue-filing skill at
+ * `<projectDir>/.claude/skills/symphony-issues/SKILL.md`. Twins scaffoldWorkflow:
+ * a thin refuse-to-overwrite writer of a bundled asset. This is BEST-EFFORT
+ * onboarding sugar — it never throws and an already-present (or unwritable)
+ * skill returns false WITHOUT aborting the workflow scaffold (see the caller in
+ * main-preflight). Returns true only when it wrote the file fresh.
+ */
+export async function scaffoldSkill(projectDir) {
+    const skillPath = path.join(projectDir, '.claude', 'skills', 'symphony-issues', 'SKILL.md');
+    if (existsSync(skillPath)) {
+        process.stdout.write(`skill already present, leaving as-is: ${skillPath}\n`);
+        return false;
+    }
+    let body;
+    try {
+        body = await readFile(SYMPHONY_ISSUES_SKILL_ASSET_PATH, 'utf8');
+    }
+    catch (err) {
+        process.stderr.write(`warning: skipping skill install: cannot read bundled skill asset at ` +
+            `${SYMPHONY_ISSUES_SKILL_ASSET_PATH}: ${err.message}\n`);
+        return false;
+    }
+    try {
+        await mkdir(path.dirname(skillPath), { recursive: true });
+        await writeFile(skillPath, body, { flag: 'wx' });
+    }
+    catch (err) {
+        process.stderr.write(`warning: skipping skill install: ${err.message}\n`);
+        return false;
+    }
+    process.stdout.write(`wrote ${skillPath}\n`);
+    return true;
+}
+//# sourceMappingURL=main-scaffold.js.map

package/dist/src/shell/main-scaffold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main-scaffold.js","sourceRoot":"","sources":["../../../src/shell/main-scaffold.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,gFAAgF;AAChF,kFAAkF;AAClF,gFAAgF;AAChF,2EAA2E;AAC3E,EAAE;AACF,uEAAuE;AAEvE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,2FAA2F;AAC3F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEzF;;;;;GAKG;AACH,MAAM,gCAAgC,GAAG,IAAI,CAAC,IAAI,CAChD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,UAAU,CACX,CAAC;AAEF;;;;;GAKG;AACH,MAAM,2BAA2B,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;AACrF,MAAM,yBAAyB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAExF,yEAAyE;AACzE,KAAK,UAAU,SAAS,CAAC,SAAiB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wDAAwD,SAAS,KAAM,GAAa,CAAC,OAAO,IAAI,CACjG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IACzD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,YAAY,IAAI,CAAC,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC9D,IAAI,IAAI,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEnD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC;IAEhD,yEAAyE;IACzE,4DAA4D;IAC5D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,UAAU,IAAI,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,UAAU,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uFAAuF;QACrF,yFAAyF;QACzF,wDAAwD;QACxD,cAAc,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,IAAI,YAAY,OAAO,CAClF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAC5F,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,SAAS,IAAI,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,gCAAgC,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sEAAsE;YACpE,GAAG,gCAAgC,KAAM,GAAa,CAAC,OAAO,IAAI,CACrE,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAqC,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,SAAS,IAAI,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/shell/main-shutdown.js

@@ -0,0 +1,115 @@
+// FCIS rewrite — graceful-shutdown choreography (kind: shell helper).
+//
+// Sliced out of the composition root (src/shell/main.ts) so the root stays under
+// the max-lines budget. This module owns NO decisions and imports NO core — it is
+// the two-signal SIGTERM/SIGINT teardown sequence the root installs (REF issue
+// 152): per-step withTimeout, a hard whole-path deadline, a force-quit escalation
+// on a second signal, and the synchronous vm.killAllVms backstop that guarantees
+// no orphaned qemu. The root passes a thin ShutdownTargets view; everything else
+// here is plain async/timer plumbing.
+//
+// Shell rule: imports from src/types/** ONLY (concrete adapters arrive injected).
+/** Per-step ceiling: one wedged teardown step can't starve the rest. */
+const SHUTDOWN_STEP_TIMEOUT_MS = 8_000;
+/** Hard ceiling on the whole graceful path before we force-quit. */
+const SHUTDOWN_DEADLINE_MS = 15_000;
+/** Short cap on the log-sink flush during a force-quit. */
+const FORCE_QUIT_FLUSH_TIMEOUT_MS = 2_000;
+/**
+ * Race `work` against a `label`ed deadline. Rejects on timeout; the underlying
+ * promise settles on its own (we only call this on the shutdown path). The timer
+ * is unref'd so it can't by itself hold the event loop open (REF withTimeout).
+ */
+function withTimeout(work, ms, label) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error(`${label} timed out after ${ms}ms`)), ms);
+        timer.unref();
+        work.then((v) => {
+            clearTimeout(timer);
+            resolve(v);
+        }, (e) => {
+            clearTimeout(timer);
+            reject(e);
+        });
+    });
+}
+/**
+ * Synchronously SIGKILL every live VM via the vm.killAllVms backstop (REF
+ * killChildVms / issue 152). The qemu processes are direct children; left alone,
+ * process.exit reparents them to init and they leak. Bounded + never throws.
+ */
+function killChildVms(t) {
+    try {
+        const killed = t.vm.killAllVms();
+        if (killed > 0)
+            t.log.emit('info', 'shutdown: SIGKILL child VMs', { count: killed });
+    }
+    catch (err) {
+        t.log.emit('warn', 'shutdown: killAllVms threw', { error: err.message });
+    }
+}
+/**
+ * The graceful teardown sequence. Each step gets its own per-step timeout + catch
+ * so one wedged teardown can't starve the steps below it. The trailing
+ * killChildVms is the backstop guaranteeing no orphaned qemu (REF gracefulStop).
+ */
+async function gracefulStop(t) {
+    t.orchestrator.stop();
+    t.stopCredentialTicker?.();
+    await withTimeout(t.reconciler.stop(), SHUTDOWN_STEP_TIMEOUT_MS, 'reconciler.stop').catch((err) => t.log.emit('warn', 'shutdown: reconciler.stop did not finish cleanly', { error: err.message }));
+    if (t.http) {
+        await withTimeout(t.http.stop(), SHUTDOWN_STEP_TIMEOUT_MS, 'http.stop').catch((err) => t.log.emit('warn', 'shutdown: http.stop did not finish cleanly', { error: err.message }));
+    }
+    t.src.stop();
+    killChildVms(t);
+    await t.closeLog().catch(() => undefined);
+}
+/**
+ * Force-quit path: SIGKILL live child VMs, flush the log sink under a short cap,
+ * exit non-zero. The kill is synchronous so a second Ctrl+C terminates
+ * immediately — the only awaited step is the bounded flush (REF forceQuit).
+ */
+async function forceQuit(message, t) {
+    process.stdout.write(`\n${message}\n`);
+    t.log.emit('warn', 'shutdown: force-quitting — SIGKILL child VMs then exit');
+    killChildVms(t);
+    await withTimeout(t.closeLog(), FORCE_QUIT_FLUSH_TIMEOUT_MS, 'closeLogFile').catch(() => undefined);
+    process.exit(1);
+}
+/**
+ * Run the graceful path under a hard deadline. Clean stop → exit 0; deadline
+ * elapsed (teardown wedged past even the per-step timeouts) → force-quit so the
+ * process never hangs on Ctrl+C (REF runGracefulShutdown).
+ */
+async function runGracefulShutdown(signal, t) {
+    process.stdout.write(`\nsymphony: ${signal} received — shutting down gracefully… (press Ctrl+C again to force-quit)\n`);
+    t.log.emit('info', 'shutdown requested', { signal });
+    try {
+        await withTimeout(gracefulStop(t), SHUTDOWN_DEADLINE_MS, 'graceful shutdown');
+    }
+    catch (err) {
+        t.log.emit('warn', 'graceful shutdown exceeded deadline; forcing', { error: err.message });
+        await forceQuit(`symphony: graceful shutdown exceeded ${SHUTDOWN_DEADLINE_MS}ms — force-quitting; killing child VMs.`, t);
+    }
+    process.stdout.write('symphony: shutdown complete.\n');
+    process.exit(0);
+}
+/**
+ * Wire SIGINT/SIGTERM. The first signal runs the deadline-bounded graceful path;
+ * a SECOND signal force-quits immediately (force-killing child VMs first) instead
+ * of re-entering the in-flight teardown (REF installShutdownHandlers, issue 152).
+ */
+export function installShutdownHandlers(t) {
+    let shuttingDown = false;
+    const onSignal = (signal) => {
+        if (shuttingDown) {
+            void forceQuit(`symphony: ${signal} again — graceful shutdown is taking too long, force-quitting; killing child VMs.`, t);
+            return;
+        }
+        shuttingDown = true;
+        void runGracefulShutdown(signal, t);
+    };
+    process.on('SIGINT', () => onSignal('SIGINT'));
+    process.on('SIGTERM', () => onSignal('SIGTERM'));
+}
+//# sourceMappingURL=main-shutdown.js.map

package/dist/src/shell/main-shutdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main-shutdown.js","sourceRoot":"","sources":["../../../src/shell/main-shutdown.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,+EAA+E;AAC/E,kFAAkF;AAClF,iFAAiF;AACjF,iFAAiF;AACjF,sCAAsC;AACtC,EAAE;AACF,kFAAkF;AAmBlF,wEAAwE;AACxE,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,oEAAoE;AACpE,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,2DAA2D;AAC3D,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAE1C;;;;GAIG;AACH,SAAS,WAAW,CAAI,IAAgB,EAAE,EAAU,EAAE,KAAa;IACjE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CACP,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,CAAU,CAAC,CAAC;QACrB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,CAAkB;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;QACjC,IAAI,MAAM,GAAG,CAAC;YAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,CAAkB;IAC5C,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,oBAAoB,EAAE,EAAE,CAAC;IAC3B,MAAM,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,wBAAwB,EAAE,iBAAiB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAChG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,kDAAkD,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAC1G,CAAC;IACF,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,wBAAwB,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACpF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,4CAA4C,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CACpG,CAAC;IACJ,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACb,YAAY,CAAC,CAAC,CAAC,CAAC;IAChB,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,CAAkB;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,wDAAwD,CAAC,CAAC;IAC7E,YAAY,CAAC,CAAC,CAAC,CAAC;IAChB,MAAM,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,2BAA2B,EAAE,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,CAAkB;IACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,MAAM,4EAA4E,CAClG,CAAC;IACF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,8CAA8C,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACtG,MAAM,SAAS,CACb,wCAAwC,oBAAoB,yCAAyC,EACrG,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,CAAkB;IACxD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAQ,EAAE;QACxC,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,SAAS,CACZ,aAAa,MAAM,mFAAmF,EACtG,CAAC,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/src/shell/main-startup.js

@@ -0,0 +1,48 @@
+// FCIS rewrite — the post-bind startup sequence (kind: shell helper). Sliced out of
+// src/shell/main.ts so the composition root stays under the max-lines budget. Runs
+// the startup-reap ordering (VM + workspace janitors BEFORE the first dispatch),
+// starts the reconciler + orchestrator + credential ticker, honours `reconcile
+// --force`, and prints the human-facing banner. The pure banner/port deciders +
+// the startup-bail closure arrive INJECTED from the root (this file may not import
+// core). Imports src/types + sibling shell ONLY.
+import process from 'node:process';
+/** Run the post-bind startup sequence (REF printStartupBanner ordering). */
+export async function startServices(graph, cli, workflowPath, core) {
+    // Startup-reap ordering (mustFix): the janitors run BEFORE the first dispatch.
+    await graph.reconciler.reapWorkspaces();
+    await graph.reconciler.reapVms();
+    graph.reconciler.start();
+    try {
+        graph.orchestrator.start();
+    }
+    catch (err) {
+        await core.bailStartup(`startup failed: ${err.message}\n`);
+    }
+    // Host-side credential refresh ticker (idle-window backstop; 0 interval disables).
+    graph.credential.ticker.start();
+    if (cli.reconcileForce) {
+        graph.log.emit('info', 'reconcile --force requested');
+        void graph.reconciler
+            .reconcile({ force: true })
+            .catch((err) => graph.log.emit('warn', 'reconcile --force failed', { error: err.message }));
+    }
+    const cfg = graph.getLiveCfg();
+    graph.log.emit('info', 'symphony started', {
+        workflow: workflowPath, workspace_root: cfg.workspace.root, tracker_root: cfg.tracker.root,
+        poll_interval_ms: cfg.polling.interval_ms, http_port: graph.boundPort,
+    });
+    // Clean human-facing summary on stdout. With a file sink the structured line above
+    // goes to the log file only.
+    process.stdout.write(core.formatStartupBanner({
+        version: core.version,
+        workflowPath,
+        boundPort: graph.boundPort ?? core.resolveHttpPort(cli.port, cfg.server.port),
+        host: cfg.server.host,
+        trackerRoot: cfg.tracker.root,
+        workspaceRoot: cfg.workspace.root,
+        logFile: core.logFile,
+        adapter: cfg.acp.adapter,
+        image: cfg.gondolin.image,
+    }));
+}
+//# sourceMappingURL=main-startup.js.map

package/dist/src/shell/main-startup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main-startup.js","sourceRoot":"","sources":["../../../src/shell/main-startup.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mFAAmF;AACnF,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,mFAAmF;AACnF,iDAAiD;AAEjD,OAAO,OAAO,MAAM,cAAc,CAAC;AAInC,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAmB,EACnB,GAAQ,EACR,YAAoB,EACpB,IAAiB;IAEjB,+EAA+E;IAC/E,MAAM,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;IACxC,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IACjC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAEzB,IAAI,CAAC;QACH,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAoB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAEhC,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;QACtD,KAAK,KAAK,CAAC,UAAU;aAClB,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aAC1B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;IAC/B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE;QACzC,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;QAC1F,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;KACtE,CAAC,CAAC;IACH,mFAAmF;IACnF,6BAA6B;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,mBAAmB,CAAC;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7E,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;QACrB,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;QAC7B,aAAa,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO;QACxB,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK;KAC1B,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/src/shell/main-substrates.js

@@ -0,0 +1,43 @@
+// FCIS rewrite — transport-substrate construction for the composition root (kind:
+// shell helper). Sliced out of src/shell/main.ts so the root stays under the
+// max-lines budget. Composes the credential-egress substrate (main-credential) +
+// the ACP substrate (main-acp) from the already-injected pure core deciders and the
+// concrete adapters / live config closures the root passes in.
+//
+// Imports NO core (only the root may) — the pure credential / ACP deciders arrive
+// pre-bundled in `CredentialCoreDeps` / `AcpCoreDeps`; this module only wires.
+import { buildCredentialSubstrate } from './main-credential.js';
+import { buildAcpSubstrate } from './main-acp.js';
+/**
+ * Build the credential-egress + ACP substrates. Returns the resolved ports
+ * (wired into the EffectAdapters bundle by the root) plus the per-dispatch seams
+ * the runner slice consumes (the credential registry / hooks builder + the ACP
+ * dispatch-context registry).
+ *
+ * INVARIANTS (see main-credential): the guest is staged token-SHAPED PLACEHOLDERS
+ * only (host-only refresh); the per-VM hooks wire REQUEST-side hooks ONLY (no
+ * onResponse → no issue-135 streaming regression) and keep the PR#119 codex
+ * chatgpt-backend route swap.
+ */
+export function buildTransportSubstrates(deps) {
+    const credential = buildCredentialSubstrate({
+        core: deps.credentialCore,
+        random: deps.random,
+        tickerIntervalMs: () => deps.getCfg().credentials.ticker_interval_ms,
+        refreshMarginMs: () => deps.getCfg().credentials.refresh_margin_ms,
+        requiredAdapters: deps.requiredAdapters,
+        log: deps.log,
+    });
+    const acp = buildAcpSubstrate({
+        core: deps.acpCore,
+        registry: deps.acpWs,
+        runlog: deps.runlog,
+        clock: deps.clock,
+        log: deps.log,
+        readTimeoutMs: () => deps.getCfg().acp.read_timeout_ms,
+        promptTimeoutMs: () => deps.getCfg().acp.prompt_timeout_ms,
+        connectTimeoutMs: () => deps.getCfg().acp.connect_timeout_ms,
+    });
+    return { credential, acp };
+}
+//# sourceMappingURL=main-substrates.js.map

package/dist/src/shell/main-substrates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main-substrates.js","sourceRoot":"","sources":["../../../src/shell/main-substrates.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,6EAA6E;AAC7E,iFAAiF;AACjF,oFAAoF;AACpF,+DAA+D;AAC/D,EAAE;AACF,kFAAkF;AAClF,+EAA+E;AAK/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAmB;IAI1D,MAAM,UAAU,GAAG,wBAAwB,CAAC;QAC1C,IAAI,EAAE,IAAI,CAAC,cAAc;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,kBAAkB;QACpE,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,iBAAiB;QAClE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,iBAAiB,CAAC;QAC5B,IAAI,EAAE,IAAI,CAAC,OAAO;QAClB,QAAQ,EAAE,IAAI,CAAC,KAAK;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe;QACtD,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB;QAC1D,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,kBAAkB;KAC7D,CAAC,CAAC;IAEH,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC"}