1

agents/rap-node-agent/internal/supervisor/supervisor.go

@@ -13,7 +13,15 @@ type Supervisor interface {
 }
 
 type StubSupervisor struct {
-	Version string
+	Version                    string
+	RemoteWorkspaceRealAdapter RemoteWorkspaceRealAdapterConfig
+}
+
+type RemoteWorkspaceRealAdapterConfig struct {
+	EnabledRequested bool
+	Command          string
+	ArgsJSON         string
+	WorkDir          string
 }
 
 func (s StubSupervisor) Apply(_ context.Context, desired []client.DesiredWorkload) ([]client.WorkloadStatusRequest, error) {
@@ -85,6 +93,7 @@ func (s StubSupervisor) applyOne(workload client.DesiredWorkload) client.Workloa
 		payload["backend_relay_steady_state"] = false
 		payload["channels"] = remoteWorkspaceAdapterChannels()
 		payload["frame_batch_contract"] = remoteWorkspaceFrameBatchContract()
+		payload["real_adapter_supervision"] = remoteWorkspaceRealAdapterSupervisionContract(s.RemoteWorkspaceRealAdapter)
 		payload["traffic"] = "none"
 		return client.WorkloadStatusRequest{
 			ReportedState: "running",
@@ -93,6 +102,20 @@ func (s StubSupervisor) applyOne(workload client.DesiredWorkload) client.Workloa
 			StatusPayload: payload,
 		}
 	}
+	if serviceType == "rdp-worker" && runtimeMode == "native" && boolConfig(workload.Config, "real_adapter_supervision") {
+		payload["reason"] = "remote_workspace_real_adapter_supervision_disabled"
+		payload["execution_mode"] = "real_adapter_supervision_disabled"
+		payload["service_class"] = "remote_workspace"
+		payload["traffic"] = "blocked"
+		payload["payload_traffic"] = "none"
+		payload["real_adapter_supervision"] = remoteWorkspaceRealAdapterSupervisionContract(s.RemoteWorkspaceRealAdapter)
+		return client.WorkloadStatusRequest{
+			ReportedState: "degraded",
+			RuntimeMode:   runtimeMode,
+			Version:       version,
+			StatusPayload: payload,
+		}
+	}
 	payload["reason"] = "service_runtime_not_implemented"
 	payload["traffic"] = "blocked"
 	return client.WorkloadStatusRequest{
@@ -152,6 +175,166 @@ func remoteWorkspaceFrameBatchContract() map[string]any {
 	}
 }
 
+func remoteWorkspaceRealAdapterSupervisionContract(configs ...RemoteWorkspaceRealAdapterConfig) map[string]any {
+	var config RemoteWorkspaceRealAdapterConfig
+	if len(configs) > 0 {
+		config = configs[0]
+	}
+	return map[string]any{
+		"schema_version":                   "rap.remote_workspace_real_adapter_supervision.v1",
+		"enabled":                          false,
+		"activation_state":                 "disabled_until_real_runtime_stage",
+		"execution_mode":                   "real_adapter_supervision_disabled",
+		"payload_traffic":                  "none",
+		"process_model":                    "external_rdp_worker_process",
+		"config_projection":                remoteWorkspaceRealAdapterConfigProjection(config),
+		"activation_decision":              remoteWorkspaceRealAdapterActivationDecision(config),
+		"process_supervisor_preconditions": remoteWorkspaceRealAdapterProcessSupervisorPreconditions(config),
+		"process_health_probe":             remoteWorkspaceRealAdapterProcessHealthProbe(),
+		"features": map[string]any{
+			"config_projection":                 true,
+			"activation_decision":               true,
+			"missing_gates":                     true,
+			"process_health_probe":              true,
+			"process_health_probe_disabled":     true,
+			"process_supervisor_preconditions":  true,
+			"process_supervisor_start_disabled": true,
+			"raw_values_redacted":               true,
+		},
+		"config_env": []string{
+			"RAP_REMOTE_WORKSPACE_REAL_ADAPTER_ENABLED",
+			"RAP_REMOTE_WORKSPACE_REAL_ADAPTER_COMMAND",
+			"RAP_REMOTE_WORKSPACE_REAL_ADAPTER_ARGS_JSON",
+			"RAP_REMOTE_WORKSPACE_REAL_ADAPTER_WORKDIR",
+		},
+		"status_contract": []string{
+			"schema_version",
+			"enabled",
+			"activation_state",
+			"execution_mode",
+			"payload_traffic",
+			"process_model",
+			"config_projection",
+			"activation_decision",
+			"process_supervisor_preconditions",
+			"process_health_probe",
+			"features",
+			"config_env",
+			"status_contract",
+		},
+		"guardrails": []string{
+			"contract_probe_remains_default",
+			"no_payload_forwarding_until_real_runtime_stage",
+			"backend_relay_not_steady_state",
+			"fabric_service_channel_required",
+		},
+	}
+}
+
+func remoteWorkspaceRealAdapterProcessHealthProbe() map[string]any {
+	return map[string]any{
+		"schema_version":       "rap.remote_workspace_real_adapter_process_health_probe.v1",
+		"health_probe_enabled": false,
+		"reason":               "disabled_until_real_runtime_stage",
+		"payload_traffic":      "none",
+		"probe_model":          "external_process_health",
+		"required_signals": []string{
+			"process_started",
+			"process_exit_status",
+			"adapter_control_channel_ready",
+			"fabric_service_channel_bound",
+			"payload_forwarding_contract_ready",
+		},
+		"missing_signals": []string{
+			"process_started",
+			"process_exit_status",
+			"adapter_control_channel_ready",
+			"fabric_service_channel_bound",
+			"payload_forwarding_contract_ready",
+		},
+	}
+}
+
+func remoteWorkspaceRealAdapterProcessSupervisorPreconditions(config RemoteWorkspaceRealAdapterConfig) map[string]any {
+	return map[string]any{
+		"schema_version":         "rap.remote_workspace_real_adapter_process_supervisor_preconditions.v1",
+		"process_start_allowed":  false,
+		"reason":                 "disabled_until_real_runtime_stage",
+		"command_config_present": strings.TrimSpace(config.Command) != "",
+		"workdir_config_present": strings.TrimSpace(config.WorkDir) != "",
+		"args_config_present":    strings.TrimSpace(config.ArgsJSON) != "",
+		"required_checks": []string{
+			"real_runtime_stage_enabled",
+			"command_config_validated",
+			"workdir_config_validated",
+			"process_identity_policy_bound",
+			"fabric_service_channel_runtime_ready",
+			"payload_forwarding_contract_enabled",
+			"health_probe_contract_enabled",
+		},
+		"missing_checks": []string{
+			"real_runtime_stage_enabled",
+			"command_config_validated",
+			"workdir_config_validated",
+			"process_identity_policy_bound",
+			"fabric_service_channel_runtime_ready",
+			"payload_forwarding_contract_enabled",
+			"health_probe_contract_enabled",
+		},
+	}
+}
+
+func remoteWorkspaceRealAdapterActivationDecision(config RemoteWorkspaceRealAdapterConfig) map[string]any {
+	return map[string]any{
+		"schema_version":     "rap.remote_workspace_real_adapter_activation_decision.v1",
+		"decision":           "blocked",
+		"reason":             "real_runtime_stage_not_enabled",
+		"enabled_requested":  config.EnabledRequested,
+		"activation_allowed": false,
+		"payload_traffic":    "none",
+		"required_gates": []string{
+			"real_runtime_stage_enabled",
+			"fabric_service_channel_runtime_ready",
+			"adapter_process_supervisor_enabled",
+			"payload_forwarding_contract_enabled",
+		},
+		"missing_gates": []string{
+			"real_runtime_stage_enabled",
+			"fabric_service_channel_runtime_ready",
+			"adapter_process_supervisor_enabled",
+			"payload_forwarding_contract_enabled",
+		},
+	}
+}
+
+func remoteWorkspaceRealAdapterConfigProjection(config RemoteWorkspaceRealAdapterConfig) map[string]any {
+	return map[string]any{
+		"schema_version":      "rap.remote_workspace_real_adapter_config_projection.v1",
+		"enabled_requested":   config.EnabledRequested,
+		"activation_allowed":  false,
+		"command_present":     strings.TrimSpace(config.Command) != "",
+		"args_json_present":   strings.TrimSpace(config.ArgsJSON) != "",
+		"args_json_shape":     remoteWorkspaceArgsJSONShape(config.ArgsJSON),
+		"workdir_present":     strings.TrimSpace(config.WorkDir) != "",
+		"raw_values_redacted": true,
+	}
+}
+
+func remoteWorkspaceArgsJSONShape(value string) string {
+	trimmed := strings.TrimSpace(value)
+	if trimmed == "" {
+		return "absent"
+	}
+	switch {
+	case strings.HasPrefix(trimmed, "["):
+		return "json_array"
+	case strings.HasPrefix(trimmed, "{"):
+		return "json_object"
+	default:
+		return "opaque"
+	}
+}
+
 func serviceTrafficMode(serviceType string) string {
 	switch serviceType {
 	case "core-mesh":