feat: complete TASK-WP0-07 supervisor

apps/worker/src/supervisor-channel.ts

@@ -0,0 +1,46 @@
+import { createConnection } from "node:net";
+
+const WORKER_CREDENTIALS = ["Dada/P0A/worker/ai-gateway"] as const;
+
+export async function receiveWorkerCredentials(input: NodeJS.ReadableStream = process.stdin) {
+  const chunks: Buffer[] = [];
+  for await (const chunk of input) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+  const payload = Buffer.concat(chunks);
+  try {
+    const parsed = JSON.parse(payload.toString("utf8")) as Record<string, unknown>;
+    const names = Object.keys(parsed).sort();
+    const expected = [...WORKER_CREDENTIALS].sort();
+    if (names.length !== expected.length || names.some((name, index) => name !== expected[index])) {
+      throw new Error("Worker credential channel contains an unexpected credential scope.");
+    }
+    if (expected.some((name) => typeof parsed[name] !== "string" || parsed[name] === "")) {
+      throw new Error("Worker credential channel contains an invalid credential value.");
+    }
+    return parsed as Record<(typeof WORKER_CREDENTIALS)[number], string>;
+  } finally {
+    payload.fill(0);
+    for (const chunk of chunks) chunk.fill(0);
+    chunks.length = 0;
+  }
+}
+
+export function initializeWorkerCredentialClient(credentials: Record<(typeof WORKER_CREDENTIALS)[number], string>) {
+  const configured = WORKER_CREDENTIALS.every((name) => credentials[name].length > 0);
+  for (const name of WORKER_CREDENTIALS) credentials[name] = "";
+  if (!configured) throw new Error("Worker credential client initialization failed.");
+}
+
+export function attachWorkerSupervisorControl(pipeName: string, shutdown: () => Promise<void> | void) {
+  const socket = createConnection(`\\\\.\\pipe\\${pipeName}`);
+  let pending = "";
+  socket.setEncoding("utf8");
+  socket.on("connect", () => socket.write("ready\n"));
+  socket.on("data", (chunk) => {
+    pending += chunk;
+    if (!pending.includes("\n")) return;
+    const [command] = pending.split("\n", 1);
+    pending = "";
+    if (command === "shutdown") void Promise.resolve(shutdown()).finally(() => socket.end());
+  });
+  return socket;
+}

apps/worker/src/worker.ts

@@ -1,5 +1,7 @@
 import { parentPort } from "node:worker_threads";
 
+import { attachWorkerSupervisorControl, initializeWorkerCredentialClient, receiveWorkerCredentials } from "./supervisor-channel.js";
+
 export function handleWorkerProbe(message: unknown) {
   return message === "ping" ? "pong" : null;
 }
@@ -11,3 +13,12 @@ if (workerPort) {
     workerPort.postMessage(handleWorkerProbe(message));
   });
 }
+
+if (!workerPort && process.argv.includes("--dada-credential-stdin")) {
+  initializeWorkerCredentialClient(await receiveWorkerCredentials());
+  const controlPipeIndex = process.argv.indexOf("--dada-control-pipe");
+  const controlPipe = process.argv[controlPipeIndex + 1];
+  if (controlPipeIndex < 0 || !controlPipe) throw new Error("Supervisor control pipe name is required.");
+  const keepAlive = setInterval(() => undefined, 30_000);
+  attachWorkerSupervisorControl(controlPipe, () => clearInterval(keepAlive));
+}