@1mcp/agent 0.38.1 → 0.39.0-beta.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/build/admin/assets/{admin-OAuthServicesWorkspace-C3DNmymC.js → admin-OAuthServicesWorkspace-Bmets2jv.js} +1 -1
- package/build/admin/assets/{admin-console-BmdH0cQS.js → admin-console-DyzxXXr5.js} +3 -3
- package/build/admin/index.html +1 -1
- package/build/commands/run/run.d.ts.map +1 -1
- package/build/commands/run/run.js +35 -14
- package/build/commands/run/run.js.map +1 -1
- package/build/commands/run/runUtils.d.ts +2 -3
- package/build/commands/run/runUtils.d.ts.map +1 -1
- package/build/commands/run/runUtils.js +12 -11
- package/build/commands/run/runUtils.js.map +1 -1
- package/build/commands/serve/cooperativeRuntime.d.ts +18 -0
- package/build/commands/serve/cooperativeRuntime.d.ts.map +1 -0
- package/build/commands/serve/cooperativeRuntime.js +588 -0
- package/build/commands/serve/cooperativeRuntime.js.map +1 -0
- package/build/commands/serve/index.d.ts +10 -0
- package/build/commands/serve/index.d.ts.map +1 -1
- package/build/commands/serve/index.js +10 -0
- package/build/commands/serve/index.js.map +1 -1
- package/build/commands/serve/legacyRuntimeStop.d.ts +16 -0
- package/build/commands/serve/legacyRuntimeStop.d.ts.map +1 -0
- package/build/commands/serve/legacyRuntimeStop.js +143 -0
- package/build/commands/serve/legacyRuntimeStop.js.map +1 -0
- package/build/commands/serve/serveStatus.d.ts +2 -0
- package/build/commands/serve/serveStatus.d.ts.map +1 -1
- package/build/commands/serve/serveStatus.js +37 -3
- package/build/commands/serve/serveStatus.js.map +1 -1
- package/build/commands/serve/serveStop.d.ts.map +1 -1
- package/build/commands/serve/serveStop.js +33 -4
- package/build/commands/serve/serveStop.js.map +1 -1
- package/build/commands/shared/apiClient.d.ts.map +1 -1
- package/build/commands/shared/apiClient.js +13 -9
- package/build/commands/shared/apiClient.js.map +1 -1
- package/build/commands/shared/clientSurfaceAttachment.d.ts.map +1 -1
- package/build/commands/shared/clientSurfaceAttachment.js +33 -7
- package/build/commands/shared/clientSurfaceAttachment.js.map +1 -1
- package/build/config/configLoader.d.ts.map +1 -1
- package/build/config/configLoader.js +9 -1
- package/build/config/configLoader.js.map +1 -1
- package/build/config/configManager.d.ts +4 -0
- package/build/config/configManager.d.ts.map +1 -1
- package/build/config/configManager.js +48 -1
- package/build/config/configManager.js.map +1 -1
- package/build/config/configWatcher.d.ts.map +1 -1
- package/build/config/configWatcher.js +3 -1
- package/build/config/configWatcher.js.map +1 -1
- package/build/config/envProcessor.d.ts.map +1 -1
- package/build/config/envProcessor.js +6 -5
- package/build/config/envProcessor.js.map +1 -1
- package/build/config/mcpConfigManager.d.ts +4 -0
- package/build/config/mcpConfigManager.d.ts.map +1 -1
- package/build/config/mcpConfigManager.js +48 -1
- package/build/config/mcpConfigManager.js.map +1 -1
- package/build/config/runtimeBootstrap.d.ts +15 -0
- package/build/config/runtimeBootstrap.d.ts.map +1 -0
- package/build/config/runtimeBootstrap.js +35 -0
- package/build/config/runtimeBootstrap.js.map +1 -0
- package/build/config/runtimeScopeEnv.d.ts.map +1 -1
- package/build/config/runtimeScopeEnv.js +4 -0
- package/build/config/runtimeScopeEnv.js.map +1 -1
- package/build/config/runtimeTargetFingerprint.d.ts.map +1 -1
- package/build/config/runtimeTargetFingerprint.js +5 -2
- package/build/config/runtimeTargetFingerprint.js.map +1 -1
- package/build/constants/mcp.d.ts +1 -1
- package/build/constants/mcp.d.ts.map +1 -1
- package/build/constants/mcp.js +1 -1
- package/build/constants/mcp.js.map +1 -1
- package/build/core/capabilities/asyncLoadingOrchestrator.d.ts +2 -1
- package/build/core/capabilities/asyncLoadingOrchestrator.d.ts.map +1 -1
- package/build/core/capabilities/asyncLoadingOrchestrator.js +2 -21
- package/build/core/capabilities/asyncLoadingOrchestrator.js.map +1 -1
- package/build/core/capabilities/capabilityAggregator.d.ts.map +1 -1
- package/build/core/capabilities/capabilityAggregator.js +12 -4
- package/build/core/capabilities/capabilityAggregator.js.map +1 -1
- package/build/core/capabilities/capabilityCatalog.d.ts +2 -1
- package/build/core/capabilities/capabilityCatalog.d.ts.map +1 -1
- package/build/core/capabilities/capabilityCatalog.js +94 -17
- package/build/core/capabilities/capabilityCatalog.js.map +1 -1
- package/build/core/capabilities/capabilityPagination.d.ts +11 -0
- package/build/core/capabilities/capabilityPagination.d.ts.map +1 -1
- package/build/core/capabilities/capabilityPagination.js +158 -40
- package/build/core/capabilities/capabilityPagination.js.map +1 -1
- package/build/core/capabilities/catalogGeneration.d.ts.map +1 -1
- package/build/core/capabilities/catalogGeneration.js +8 -2
- package/build/core/capabilities/catalogGeneration.js.map +1 -1
- package/build/core/capabilities/lazyLoadingOrchestrator.d.ts +1 -1
- package/build/core/capabilities/lazyLoadingOrchestrator.d.ts.map +1 -1
- package/build/core/capabilities/lazyLoadingOrchestrator.js +8 -8
- package/build/core/capabilities/lazyLoadingOrchestrator.js.map +1 -1
- package/build/core/capabilities/metaToolProvider.d.ts +2 -2
- package/build/core/capabilities/metaToolProvider.d.ts.map +1 -1
- package/build/core/capabilities/metaToolProvider.js +20 -30
- package/build/core/capabilities/metaToolProvider.js.map +1 -1
- package/build/core/capabilities/runtimeCapabilityCatalog.d.ts +8 -0
- package/build/core/capabilities/runtimeCapabilityCatalog.d.ts.map +1 -1
- package/build/core/capabilities/runtimeCapabilityCatalog.js +249 -64
- package/build/core/capabilities/runtimeCapabilityCatalog.js.map +1 -1
- package/build/core/capabilities/schemaCache.d.ts +6 -2
- package/build/core/capabilities/schemaCache.d.ts.map +1 -1
- package/build/core/capabilities/schemaCache.js +101 -19
- package/build/core/capabilities/schemaCache.js.map +1 -1
- package/build/core/client/legacyAdapterRequest.d.ts.map +1 -1
- package/build/core/client/legacyAdapterRequest.js +25 -21
- package/build/core/client/legacyAdapterRequest.js.map +1 -1
- package/build/core/client/postAuthOAuthRecovery.d.ts.map +1 -1
- package/build/core/client/postAuthOAuthRecovery.js +3 -1
- package/build/core/client/postAuthOAuthRecovery.js.map +1 -1
- package/build/core/configChangeHandler.d.ts.map +1 -1
- package/build/core/configChangeHandler.js +11 -2
- package/build/core/configChangeHandler.js.map +1 -1
- package/build/core/context/templateContextTrust.d.ts +3 -1
- package/build/core/context/templateContextTrust.d.ts.map +1 -1
- package/build/core/context/templateContextTrust.js +22 -6
- package/build/core/context/templateContextTrust.js.map +1 -1
- package/build/core/loading/mcpLoadingManager.d.ts +3 -0
- package/build/core/loading/mcpLoadingManager.d.ts.map +1 -1
- package/build/core/loading/mcpLoadingManager.js +11 -1
- package/build/core/loading/mcpLoadingManager.js.map +1 -1
- package/build/core/protocol/resourceTemplateRouting.d.ts +2 -0
- package/build/core/protocol/resourceTemplateRouting.d.ts.map +1 -0
- package/build/core/protocol/resourceTemplateRouting.js +2 -0
- package/build/core/protocol/resourceTemplateRouting.js.map +1 -0
- package/build/core/server/backgroundRuntimeSupervisor.d.ts +2 -0
- package/build/core/server/backgroundRuntimeSupervisor.d.ts.map +1 -1
- package/build/core/server/backgroundRuntimeSupervisor.js +11 -2
- package/build/core/server/backgroundRuntimeSupervisor.js.map +1 -1
- package/build/core/server/backgroundRuntimeSupervisorState.d.ts +2 -1
- package/build/core/server/backgroundRuntimeSupervisorState.d.ts.map +1 -1
- package/build/core/server/backgroundRuntimeSupervisorState.js +3 -2
- package/build/core/server/backgroundRuntimeSupervisorState.js.map +1 -1
- package/build/core/server/legacyRuntimeRecovery.d.ts +14 -0
- package/build/core/server/legacyRuntimeRecovery.d.ts.map +1 -0
- package/build/core/server/legacyRuntimeRecovery.js +209 -0
- package/build/core/server/legacyRuntimeRecovery.js.map +1 -0
- package/build/core/server/pidFileManager.d.ts +35 -0
- package/build/core/server/pidFileManager.d.ts.map +1 -1
- package/build/core/server/pidFileManager.js +16 -5
- package/build/core/server/pidFileManager.js.map +1 -1
- package/build/core/server/processEvidence.d.ts +23 -0
- package/build/core/server/processEvidence.d.ts.map +1 -0
- package/build/core/server/processEvidence.js +114 -0
- package/build/core/server/processEvidence.js.map +1 -0
- package/build/core/server/processIdentity.d.ts +3 -0
- package/build/core/server/processIdentity.d.ts.map +1 -1
- package/build/core/server/processIdentity.js +69 -17
- package/build/core/server/processIdentity.js.map +1 -1
- package/build/core/server/runtimeControl.d.ts +31 -0
- package/build/core/server/runtimeControl.d.ts.map +1 -0
- package/build/core/server/runtimeControl.js +288 -0
- package/build/core/server/runtimeControl.js.map +1 -0
- package/build/core/server/runtimeDrain.d.ts +68 -0
- package/build/core/server/runtimeDrain.d.ts.map +1 -0
- package/build/core/server/runtimeDrain.js +248 -0
- package/build/core/server/runtimeDrain.js.map +1 -0
- package/build/core/server/runtimeLaunchIpc.d.ts +285 -0
- package/build/core/server/runtimeLaunchIpc.d.ts.map +1 -0
- package/build/core/server/runtimeLaunchIpc.js +146 -0
- package/build/core/server/runtimeLaunchIpc.js.map +1 -0
- package/build/core/server/runtimeLifecycle.d.ts +3 -1
- package/build/core/server/runtimeLifecycle.d.ts.map +1 -1
- package/build/core/server/runtimeLifecycle.js +7 -5
- package/build/core/server/runtimeLifecycle.js.map +1 -1
- package/build/core/server/runtimeReplacementConfig.d.ts +295 -0
- package/build/core/server/runtimeReplacementConfig.d.ts.map +1 -0
- package/build/core/server/runtimeReplacementConfig.js +187 -0
- package/build/core/server/runtimeReplacementConfig.js.map +1 -0
- package/build/core/server/runtimeScopeOwnership.d.ts +3 -0
- package/build/core/server/runtimeScopeOwnership.d.ts.map +1 -1
- package/build/core/server/runtimeScopeOwnership.js +23 -4
- package/build/core/server/runtimeScopeOwnership.js.map +1 -1
- package/build/core/tools/internal/discoveryHandlers.d.ts.map +1 -1
- package/build/core/tools/internal/discoveryHandlers.js +8 -6
- package/build/core/tools/internal/discoveryHandlers.js.map +1 -1
- package/build/core/tools/internal/installationHandlers.d.ts.map +1 -1
- package/build/core/tools/internal/installationHandlers.js +46 -39
- package/build/core/tools/internal/installationHandlers.js.map +1 -1
- package/build/core/types/server.d.ts +2 -0
- package/build/core/types/server.d.ts.map +1 -1
- package/build/core/types/transport.d.ts +1 -1
- package/build/core/validation/schemaBoundary.d.ts +51 -0
- package/build/core/validation/schemaBoundary.d.ts.map +1 -0
- package/build/core/validation/schemaBoundary.js +237 -0
- package/build/core/validation/schemaBoundary.js.map +1 -0
- package/build/core/validation/schemaPolicy.d.ts +38 -0
- package/build/core/validation/schemaPolicy.d.ts.map +1 -0
- package/build/core/validation/schemaPolicy.js +127 -0
- package/build/core/validation/schemaPolicy.js.map +1 -0
- package/build/core/validation/schemaWorker.d.ts +2 -0
- package/build/core/validation/schemaWorker.d.ts.map +1 -0
- package/build/core/validation/schemaWorker.js +222 -0
- package/build/core/validation/schemaWorker.js.map +1 -0
- package/build/core/validation/toolSchemaBoundary.d.ts +19 -0
- package/build/core/validation/toolSchemaBoundary.d.ts.map +1 -0
- package/build/core/validation/toolSchemaBoundary.js +51 -0
- package/build/core/validation/toolSchemaBoundary.js.map +1 -0
- package/build/domains/admin/adminOperationService.d.ts +1 -0
- package/build/domains/admin/adminOperationService.d.ts.map +1 -1
- package/build/domains/admin/adminOperationService.js +4 -0
- package/build/domains/admin/adminOperationService.js.map +1 -1
- package/build/domains/config-change/configChange.d.ts.map +1 -1
- package/build/domains/config-change/configChange.js +36 -8
- package/build/domains/config-change/configChange.js.map +1 -1
- package/build/domains/installation/serverInstallationWorkflow.d.ts.map +1 -1
- package/build/domains/installation/serverInstallationWorkflow.js +21 -12
- package/build/domains/installation/serverInstallationWorkflow.js.map +1 -1
- package/build/domains/preset/manager/presetManager.d.ts.map +1 -1
- package/build/domains/preset/manager/presetManager.js +2 -1
- package/build/domains/preset/manager/presetManager.js.map +1 -1
- package/build/domains/registry/mcpRegistryClient.d.ts.map +1 -1
- package/build/domains/registry/mcpRegistryClient.js +10 -3
- package/build/domains/registry/mcpRegistryClient.js.map +1 -1
- package/build/gateway/adapters/modern/modernOutboundEraAdapter.d.ts +2 -1
- package/build/gateway/adapters/modern/modernOutboundEraAdapter.d.ts.map +1 -1
- package/build/gateway/adapters/modern/modernOutboundEraAdapter.js +77 -3
- package/build/gateway/adapters/modern/modernOutboundEraAdapter.js.map +1 -1
- package/build/gateway/contracts/gatewayFailure.d.ts +38 -0
- package/build/gateway/contracts/gatewayFailure.d.ts.map +1 -1
- package/build/gateway/contracts/gatewayFailure.js +137 -20
- package/build/gateway/contracts/gatewayFailure.js.map +1 -1
- package/build/gateway/core/gatewayDispatcher.d.ts +4 -0
- package/build/gateway/core/gatewayDispatcher.d.ts.map +1 -1
- package/build/gateway/core/gatewayDispatcher.js +35 -3
- package/build/gateway/core/gatewayDispatcher.js.map +1 -1
- package/build/gateway/interactions/interactionBroker.d.ts +29 -0
- package/build/gateway/interactions/interactionBroker.d.ts.map +1 -0
- package/build/gateway/interactions/interactionBroker.js +244 -0
- package/build/gateway/interactions/interactionBroker.js.map +1 -0
- package/build/gateway/interactions/interactionCapabilities.d.ts +4 -0
- package/build/gateway/interactions/interactionCapabilities.d.ts.map +1 -0
- package/build/gateway/interactions/interactionCapabilities.js +36 -0
- package/build/gateway/interactions/interactionCapabilities.js.map +1 -0
- package/build/gateway/interactions/interactionOwner.d.ts +45 -0
- package/build/gateway/interactions/interactionOwner.d.ts.map +1 -0
- package/build/gateway/interactions/interactionOwner.js +203 -0
- package/build/gateway/interactions/interactionOwner.js.map +1 -0
- package/build/gateway/interactions/interactionRoute.d.ts +16 -0
- package/build/gateway/interactions/interactionRoute.d.ts.map +1 -0
- package/build/gateway/interactions/interactionRoute.js +41 -0
- package/build/gateway/interactions/interactionRoute.js.map +1 -0
- package/build/gateway/interactions/validateInteractionResponse.d.ts +6 -0
- package/build/gateway/interactions/validateInteractionResponse.d.ts.map +1 -0
- package/build/gateway/interactions/validateInteractionResponse.js +175 -0
- package/build/gateway/interactions/validateInteractionResponse.js.map +1 -0
- package/build/gateway/ports/outboundEraAdapter.d.ts +10 -1
- package/build/gateway/ports/outboundEraAdapter.d.ts.map +1 -1
- package/build/sdk/contracts/legacySdkAdapter.d.ts +5 -0
- package/build/sdk/contracts/legacySdkAdapter.d.ts.map +1 -1
- package/build/sdk/contracts/protocol.d.ts +3 -3
- package/build/sdk/contracts/protocol.d.ts.map +1 -1
- package/build/sdk/contracts/protocol.js +3 -2
- package/build/sdk/contracts/protocol.js.map +1 -1
- package/build/sdk/legacy/client/runtime/backendDispatchLifetime.d.ts +8 -0
- package/build/sdk/legacy/client/runtime/backendDispatchLifetime.d.ts.map +1 -0
- package/build/sdk/legacy/client/runtime/backendDispatchLifetime.js +63 -0
- package/build/sdk/legacy/client/runtime/backendDispatchLifetime.js.map +1 -0
- package/build/sdk/legacy/client/runtime/clientFactory.d.ts +4 -1
- package/build/sdk/legacy/client/runtime/clientFactory.d.ts.map +1 -1
- package/build/sdk/legacy/client/runtime/clientFactory.js +41 -14
- package/build/sdk/legacy/client/runtime/clientFactory.js.map +1 -1
- package/build/sdk/legacy/client/runtime/clientManager.d.ts.map +1 -1
- package/build/sdk/legacy/client/runtime/clientManager.js +20 -7
- package/build/sdk/legacy/client/runtime/clientManager.js.map +1 -1
- package/build/sdk/legacy/client/runtime/legacyInteractionLease.d.ts +8 -0
- package/build/sdk/legacy/client/runtime/legacyInteractionLease.d.ts.map +1 -0
- package/build/sdk/legacy/client/runtime/legacyInteractionLease.js +44 -0
- package/build/sdk/legacy/client/runtime/legacyInteractionLease.js.map +1 -0
- package/build/sdk/legacy/client/runtime/legacySdkClientAdapter.d.ts +4 -0
- package/build/sdk/legacy/client/runtime/legacySdkClientAdapter.d.ts.map +1 -1
- package/build/sdk/legacy/client/runtime/legacySdkClientAdapter.js +20 -0
- package/build/sdk/legacy/client/runtime/legacySdkClientAdapter.js.map +1 -1
- package/build/sdk/legacy/client/runtime/legacyTransport.d.ts +2 -0
- package/build/sdk/legacy/client/runtime/legacyTransport.d.ts.map +1 -1
- package/build/sdk/legacy/client/runtime/modernSdkClientAdapter.d.ts +3 -0
- package/build/sdk/legacy/client/runtime/modernSdkClientAdapter.d.ts.map +1 -1
- package/build/sdk/legacy/client/runtime/modernSdkClientAdapter.js +98 -4
- package/build/sdk/legacy/client/runtime/modernSdkClientAdapter.js.map +1 -1
- package/build/sdk/legacy/commands/serve.d.ts +2 -0
- package/build/sdk/legacy/commands/serve.d.ts.map +1 -1
- package/build/sdk/legacy/commands/serve.js +40 -9
- package/build/sdk/legacy/commands/serve.js.map +1 -1
- package/build/sdk/legacy/server/protocol/notificationHandlers.d.ts.map +1 -1
- package/build/sdk/legacy/server/protocol/notificationHandlers.js +19 -47
- package/build/sdk/legacy/server/protocol/notificationHandlers.js.map +1 -1
- package/build/sdk/legacy/server/protocol/privateInteractionConnection.d.ts +7 -0
- package/build/sdk/legacy/server/protocol/privateInteractionConnection.d.ts.map +1 -0
- package/build/sdk/legacy/server/protocol/privateInteractionConnection.js +134 -0
- package/build/sdk/legacy/server/protocol/privateInteractionConnection.js.map +1 -0
- package/build/sdk/legacy/server/protocol/promptRequestHandlers.d.ts.map +1 -1
- package/build/sdk/legacy/server/protocol/promptRequestHandlers.js +4 -3
- package/build/sdk/legacy/server/protocol/promptRequestHandlers.js.map +1 -1
- package/build/sdk/legacy/server/protocol/requestHandlers.d.ts.map +1 -1
- package/build/sdk/legacy/server/protocol/requestHandlers.js +5 -47
- package/build/sdk/legacy/server/protocol/requestHandlers.js.map +1 -1
- package/build/sdk/legacy/server/protocol/requestInteractionScope.d.ts +17 -0
- package/build/sdk/legacy/server/protocol/requestInteractionScope.d.ts.map +1 -0
- package/build/sdk/legacy/server/protocol/requestInteractionScope.js +223 -0
- package/build/sdk/legacy/server/protocol/requestInteractionScope.js.map +1 -0
- package/build/sdk/legacy/server/protocol/resourceRequestHandlers.d.ts.map +1 -1
- package/build/sdk/legacy/server/protocol/resourceRequestHandlers.js +3 -2
- package/build/sdk/legacy/server/protocol/resourceRequestHandlers.js.map +1 -1
- package/build/sdk/legacy/server/protocol/toolRequestHandlers.d.ts.map +1 -1
- package/build/sdk/legacy/server/protocol/toolRequestHandlers.js +72 -17
- package/build/sdk/legacy/server/protocol/toolRequestHandlers.js.map +1 -1
- package/build/sdk/legacy/server/runtime/connectionManager.d.ts.map +1 -1
- package/build/sdk/legacy/server/runtime/connectionManager.js +3 -0
- package/build/sdk/legacy/server/runtime/connectionManager.js.map +1 -1
- package/build/sdk/legacy/server/runtime/serverManager.d.ts +2 -0
- package/build/sdk/legacy/server/runtime/serverManager.d.ts.map +1 -1
- package/build/sdk/legacy/server/runtime/serverManager.js +35 -8
- package/build/sdk/legacy/server/runtime/serverManager.js.map +1 -1
- package/build/sdk/legacy/shared/capabilityListCapture.d.ts.map +1 -1
- package/build/sdk/legacy/shared/capabilityListCapture.js +3 -0
- package/build/sdk/legacy/shared/capabilityListCapture.js.map +1 -1
- package/build/sdk/legacy/shared/schemaProjection.d.ts +11 -0
- package/build/sdk/legacy/shared/schemaProjection.d.ts.map +1 -0
- package/build/sdk/legacy/shared/schemaProjection.js +45 -0
- package/build/sdk/legacy/shared/schemaProjection.js.map +1 -0
- package/build/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.d.ts +2 -0
- package/build/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.d.ts.map +1 -1
- package/build/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.js +31 -0
- package/build/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.js.map +1 -1
- package/build/sdk/legacy/transport/http/modernInboundLegacyBridge.d.ts +7 -1
- package/build/sdk/legacy/transport/http/modernInboundLegacyBridge.d.ts.map +1 -1
- package/build/sdk/legacy/transport/http/modernInboundLegacyBridge.js +29 -4
- package/build/sdk/legacy/transport/http/modernInboundLegacyBridge.js.map +1 -1
- package/build/sdk/legacy/transport/http/server.d.ts +1 -1
- package/build/sdk/legacy/transport/http/server.d.ts.map +1 -1
- package/build/sdk/legacy/transport/http/server.js +2 -1
- package/build/sdk/legacy/transport/http/server.js.map +1 -1
- package/build/sdk/legacy/transport/transportFactory.d.ts.map +1 -1
- package/build/sdk/legacy/transport/transportFactory.js +4 -3
- package/build/sdk/legacy/transport/transportFactory.js.map +1 -1
- package/build/sdk/legacy/validation/CustomJsonSchemaValidator.d.ts +4 -52
- package/build/sdk/legacy/validation/CustomJsonSchemaValidator.d.ts.map +1 -1
- package/build/sdk/legacy/validation/CustomJsonSchemaValidator.js +5 -311
- package/build/sdk/legacy/validation/CustomJsonSchemaValidator.js.map +1 -1
- package/build/server.d.ts +2 -2
- package/build/server.d.ts.map +1 -1
- package/build/server.js +8 -6
- package/build/server.js.map +1 -1
- package/build/transport/http/routes/adminRoutes.d.ts.map +1 -1
- package/build/transport/http/routes/adminRoutes.js +37 -0
- package/build/transport/http/routes/adminRoutes.js.map +1 -1
- package/build/transport/http/routes/inspectRoutes.d.ts.map +1 -1
- package/build/transport/http/routes/inspectRoutes.js +77 -85
- package/build/transport/http/routes/inspectRoutes.js.map +1 -1
- package/build/transport/http/routes/modernHttpRoutes.d.ts +7 -1
- package/build/transport/http/routes/modernHttpRoutes.d.ts.map +1 -1
- package/build/transport/http/routes/modernHttpRoutes.js +121 -16
- package/build/transport/http/routes/modernHttpRoutes.js.map +1 -1
- package/build/transport/http/routes/modernInteractionBinding.d.ts +14 -0
- package/build/transport/http/routes/modernInteractionBinding.d.ts.map +1 -0
- package/build/transport/http/routes/modernInteractionBinding.js +142 -0
- package/build/transport/http/routes/modernInteractionBinding.js.map +1 -0
- package/build/transport/http/routes/toolRoutes.d.ts.map +1 -1
- package/build/transport/http/routes/toolRoutes.js +123 -27
- package/build/transport/http/routes/toolRoutes.js.map +1 -1
- package/build/transport/http/utils/contextExtractor.d.ts.map +1 -1
- package/build/transport/http/utils/contextExtractor.js +29 -0
- package/build/transport/http/utils/contextExtractor.js.map +1 -1
- package/build/utils/core/errorHandling.d.ts.map +1 -1
- package/build/utils/core/errorHandling.js +19 -4
- package/build/utils/core/errorHandling.js.map +1 -1
- package/build/utils/filePermissions.d.ts +3 -0
- package/build/utils/filePermissions.d.ts.map +1 -1
- package/build/utils/filePermissions.js +10 -0
- package/build/utils/filePermissions.js.map +1 -1
- package/build/utils/validation/urlDetection.d.ts.map +1 -1
- package/build/utils/validation/urlDetection.js +42 -2
- package/build/utils/validation/urlDetection.js.map +1 -1
- package/build/utils/watchPath.d.ts +3 -0
- package/build/utils/watchPath.d.ts.map +1 -0
- package/build/utils/watchPath.js +7 -0
- package/build/utils/watchPath.js.map +1 -0
- package/package.json +1 -1
|
@@ -10,7 +10,7 @@ import { processIdentitySchema, readProcessIdentity } from './processIdentity.js
|
|
|
10
10
|
* operator's own shell), so a corrupt/hand-edited file must never reach the
|
|
11
11
|
* signal paths in `serveStop`.
|
|
12
12
|
*/
|
|
13
|
-
const serverPidInfoSchema = z.object({
|
|
13
|
+
export const serverPidInfoSchema = z.object({
|
|
14
14
|
pid: z.number().int().positive(),
|
|
15
15
|
processIdentity: processIdentitySchema.optional(),
|
|
16
16
|
url: z.string().min(1),
|
|
@@ -20,6 +20,7 @@ const serverPidInfoSchema = z.object({
|
|
|
20
20
|
startedAt: z.string().min(1),
|
|
21
21
|
configDir: z.string().min(1),
|
|
22
22
|
logFile: z.string().min(1).optional(),
|
|
23
|
+
ownerClaimId: z.string().min(1).optional(),
|
|
23
24
|
});
|
|
24
25
|
const PID_FILE_NAME = 'server.pid';
|
|
25
26
|
export class PidFileReadError extends Error {
|
|
@@ -69,7 +70,12 @@ export function writePidFile(configDir, serverInfo) {
|
|
|
69
70
|
// Write PID file atomically: write to a sibling temp file then rename into
|
|
70
71
|
// place (rename is atomic on POSIX). Concurrent readers — racing `serve
|
|
71
72
|
// --status` / discovery — never observe a half-written, unparseable file.
|
|
72
|
-
const content = JSON.stringify({
|
|
73
|
+
const content = JSON.stringify({
|
|
74
|
+
...serverInfo,
|
|
75
|
+
processIdentity: serverInfo.ownerClaimId
|
|
76
|
+
? undefined
|
|
77
|
+
: (serverInfo.processIdentity ?? readProcessIdentity(serverInfo.pid)),
|
|
78
|
+
}, null, 2);
|
|
73
79
|
const tempFilePath = `${pidFilePath}.${process.pid}.tmp`;
|
|
74
80
|
fs.writeFileSync(tempFilePath, content, { encoding: 'utf-8' });
|
|
75
81
|
fs.renameSync(tempFilePath, pidFilePath);
|
|
@@ -176,7 +182,8 @@ export function cleanupPidFileIfMatches(configDir, expected) {
|
|
|
176
182
|
if (!current ||
|
|
177
183
|
current.pid !== expectedPid ||
|
|
178
184
|
(typeof expected !== 'number' &&
|
|
179
|
-
(current.
|
|
185
|
+
(current.ownerClaimId !== expected.ownerClaimId ||
|
|
186
|
+
current.startedAt !== expected.startedAt ||
|
|
180
187
|
JSON.stringify(current.processIdentity) !== JSON.stringify(expected.processIdentity)))) {
|
|
181
188
|
// Already gone, or replaced by a newer runtime — leave it untouched.
|
|
182
189
|
return true;
|
|
@@ -188,7 +195,9 @@ export function cleanupPidFileIfMatches(configDir, expected) {
|
|
|
188
195
|
* @param configDir Configuration directory
|
|
189
196
|
*/
|
|
190
197
|
export function cleanupPidFileOnExit(configDir) {
|
|
191
|
-
|
|
198
|
+
const record = readPidFile(configDir);
|
|
199
|
+
if (record?.pid === process.pid)
|
|
200
|
+
cleanupPidFileIfMatches(configDir, record);
|
|
192
201
|
}
|
|
193
202
|
/**
|
|
194
203
|
* Register cleanup handler to remove PID file on process exit (only the 'exit' event)
|
|
@@ -197,8 +206,10 @@ export function cleanupPidFileOnExit(configDir) {
|
|
|
197
206
|
* @param configDir Configuration directory
|
|
198
207
|
*/
|
|
199
208
|
export function registerPidFileCleanup(configDir) {
|
|
209
|
+
const record = readPidFile(configDir);
|
|
200
210
|
const cleanup = () => {
|
|
201
|
-
|
|
211
|
+
if (record)
|
|
212
|
+
cleanupPidFileIfMatches(configDir, record);
|
|
202
213
|
};
|
|
203
214
|
// Only register for the 'exit' event
|
|
204
215
|
// Signal handlers (SIGINT, SIGTERM, SIGHUP) should be managed by the main application
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pidFileManager.js","sourceRoot":"","sources":["../../../src/core/server/pidFileManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAwB,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"pidFileManager.js","sourceRoot":"","sources":["../../../src/core/server/pidFileManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAwB,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAwBxG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,eAAe,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACjD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAoC,CAAC;AAEtC,MAAM,aAAa,GAAG,YAAY,CAAC;AAEnC,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IADlB,YACkB,WAAmB,EACnC,KAAc;QAEd,KAAK,CACH,oCAAoC,WAAW,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9G,CAAC;QALc,gBAAW,GAAX,WAAW,CAAQ;QAMnC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,mDAAmD;QACnD,+DAA+D;QAC/D,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,gCAAgC;QAChC,yDAAyD;QACzD,OAAO,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAK,GAAwB,CAAC,IAAI,KAAK,OAAO,CAAC;IAC7F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,UAAyB;IACvE,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,iCAAiC;QACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAC5B;YACE,GAAG,UAAU;YACb,eAAe,EAAE,UAAU,CAAC,YAAY;gBACtC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,IAAI,mBAAmB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACxE,EACD,IAAI,EACJ,CAAC,CACF,CAAC;QACF,MAAM,YAAY,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzD,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAEzC,MAAM,CAAC,IAAI,CAAC,qBAAqB,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAE9C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,4EAA4E;QAC5E,0EAA0E;QAC1E,yEAAyE;QACzE,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA0B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,oCAAoC,WAAW,MAAM,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,4BAA4B,WAAW,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA0B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,QAAgC;IACzF,MAAM,WAAW,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3E,IAAI,OAA6B,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IACE,CAAC,OAAO;QACR,OAAO,CAAC,GAAG,KAAK,WAAW;QAC3B,CAAC,OAAO,QAAQ,KAAK,QAAQ;YAC3B,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;gBAC7C,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;gBACxC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAC1F,CAAC;QACD,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG;QAAE,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,MAAM;YAAE,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC,CAAC;IAEF,qCAAqC;IACrC,sFAAsF;IACtF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAiB;IAC7D,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,uCAAuC;IACvC,8FAA8F;IAC9F,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,OAAO,EAAE,CAAC;QACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,OAAO,EAAE,CAAC;QACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,OAAO,EAAE,CAAC;QACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
declare const evidenceShape: z.ZodObject<{
|
|
3
|
+
pid: z.ZodNumber;
|
|
4
|
+
ppid: z.ZodNumber;
|
|
5
|
+
uid: z.ZodNumber;
|
|
6
|
+
realUid: z.ZodNumber;
|
|
7
|
+
executable: z.ZodString;
|
|
8
|
+
argv: z.ZodArray<z.ZodString>;
|
|
9
|
+
exited: z.ZodOptional<z.ZodLiteral<true>>;
|
|
10
|
+
birth: z.ZodString;
|
|
11
|
+
context: z.ZodObject<{
|
|
12
|
+
platform: z.ZodLiteral<"linux">;
|
|
13
|
+
bootId: z.ZodString;
|
|
14
|
+
pidNamespace: z.ZodString;
|
|
15
|
+
mountNamespace: z.ZodOptional<z.ZodString>;
|
|
16
|
+
userNamespace: z.ZodOptional<z.ZodString>;
|
|
17
|
+
}, z.core.$strip>;
|
|
18
|
+
}, z.core.$strip>;
|
|
19
|
+
export type ProcessEvidence = z.infer<typeof evidenceShape>;
|
|
20
|
+
/** Capture exact procfs evidence on Linux; other platforms use guided legacy recovery. */
|
|
21
|
+
export declare function readProcessEvidence(pid: number): ProcessEvidence | undefined;
|
|
22
|
+
export {};
|
|
23
|
+
//# sourceMappingURL=processEvidence.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"processEvidence.d.ts","sourceRoot":"","sources":["../../../src/core/server/processEvidence.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,QAAA,MAAM,aAAa;;;;;;;;;;;;;;;;iBAsBjB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAqE5D,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAU5E"}
|
|
@@ -0,0 +1,114 @@
|
|
|
1
|
+
import fs from 'node:fs';
|
|
2
|
+
import { z } from 'zod';
|
|
3
|
+
const integer = z.number().int().nonnegative().max(2147483647);
|
|
4
|
+
const evidenceShape = z.object({
|
|
5
|
+
pid: integer.positive(),
|
|
6
|
+
ppid: integer,
|
|
7
|
+
uid: z.number().int().nonnegative(),
|
|
8
|
+
realUid: z.number().int().nonnegative(),
|
|
9
|
+
executable: z.string(),
|
|
10
|
+
argv: z.array(z.string()).max(65536),
|
|
11
|
+
exited: z.literal(true).optional(),
|
|
12
|
+
birth: z.string().regex(/^\d+(?:\.\d+)?$/),
|
|
13
|
+
context: z.object({
|
|
14
|
+
platform: z.literal('linux'),
|
|
15
|
+
bootId: z.string().min(1),
|
|
16
|
+
pidNamespace: z.string().regex(/^pid:\[\d+\]$/),
|
|
17
|
+
mountNamespace: z
|
|
18
|
+
.string()
|
|
19
|
+
.regex(/^mnt:\[\d+\]$/)
|
|
20
|
+
.optional(),
|
|
21
|
+
userNamespace: z
|
|
22
|
+
.string()
|
|
23
|
+
.regex(/^user:\[\d+\]$/)
|
|
24
|
+
.optional(),
|
|
25
|
+
}),
|
|
26
|
+
});
|
|
27
|
+
const evidenceSchema = evidenceShape.refine(hasCompleteEvidence);
|
|
28
|
+
function hasCompleteEvidence(value) {
|
|
29
|
+
if (value.exited)
|
|
30
|
+
return value.executable === '' && value.argv.length === 0;
|
|
31
|
+
if (!value.executable.startsWith('/'))
|
|
32
|
+
return false;
|
|
33
|
+
if (value.argv.length === 0)
|
|
34
|
+
return false;
|
|
35
|
+
return !!(value.context.mountNamespace && value.context.userNamespace);
|
|
36
|
+
}
|
|
37
|
+
const MAX_BYTES = 4 * 1024 * 1024;
|
|
38
|
+
function readBounded(filename, limit) {
|
|
39
|
+
const fd = fs.openSync(filename, 'r');
|
|
40
|
+
try {
|
|
41
|
+
const buffer = Buffer.alloc(limit + 1);
|
|
42
|
+
let length = 0;
|
|
43
|
+
while (length <= limit) {
|
|
44
|
+
const count = fs.readSync(fd, buffer, length, buffer.length - length, null);
|
|
45
|
+
if (!count)
|
|
46
|
+
return new TextDecoder('utf-8', { fatal: true }).decode(buffer.subarray(0, length));
|
|
47
|
+
length += count;
|
|
48
|
+
}
|
|
49
|
+
throw new Error('Process evidence exceeds limit');
|
|
50
|
+
}
|
|
51
|
+
finally {
|
|
52
|
+
fs.closeSync(fd);
|
|
53
|
+
}
|
|
54
|
+
}
|
|
55
|
+
function readExitedNamespace(filename) {
|
|
56
|
+
try {
|
|
57
|
+
return fs.readlinkSync(filename);
|
|
58
|
+
}
|
|
59
|
+
catch {
|
|
60
|
+
return undefined;
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
function linuxSnapshot(pid) {
|
|
64
|
+
const base = `/proc/${pid}`;
|
|
65
|
+
const stat = readBounded(`${base}/stat`, 16384);
|
|
66
|
+
const end = stat.lastIndexOf(')');
|
|
67
|
+
if (!stat.startsWith(`${pid} (`) || end < 0)
|
|
68
|
+
throw new Error('Malformed process stat');
|
|
69
|
+
const fields = stat
|
|
70
|
+
.slice(end + 2)
|
|
71
|
+
.trim()
|
|
72
|
+
.split(/\s+/);
|
|
73
|
+
const exited = fields[0] === 'Z' || fields[0] === 'X';
|
|
74
|
+
const status = readBounded(`${base}/status`, 65536);
|
|
75
|
+
const uid = /^Uid:\s+(\d+)\s+(\d+)\s+\d+\s+\d+$/m.exec(status);
|
|
76
|
+
const cmdline = exited ? '' : readBounded(`${base}/cmdline`, MAX_BYTES);
|
|
77
|
+
if (!uid)
|
|
78
|
+
throw new Error('Missing process evidence');
|
|
79
|
+
if (!exited && !cmdline.endsWith('\0'))
|
|
80
|
+
throw new Error('Missing process evidence');
|
|
81
|
+
return evidenceSchema.parse({
|
|
82
|
+
pid,
|
|
83
|
+
ppid: Number(fields[1]),
|
|
84
|
+
uid: Number(uid[2]),
|
|
85
|
+
realUid: Number(uid[1]),
|
|
86
|
+
executable: exited ? '' : fs.readlinkSync(`${base}/exe`),
|
|
87
|
+
argv: exited ? [] : cmdline.slice(0, -1).split('\0'),
|
|
88
|
+
...(exited ? { exited: true } : {}),
|
|
89
|
+
birth: fields[19],
|
|
90
|
+
context: {
|
|
91
|
+
platform: 'linux',
|
|
92
|
+
bootId: readBounded('/proc/sys/kernel/random/boot_id', 128).trim(),
|
|
93
|
+
pidNamespace: fs.readlinkSync(`${base}/ns/pid`),
|
|
94
|
+
mountNamespace: exited ? readExitedNamespace(`${base}/ns/mnt`) : fs.readlinkSync(`${base}/ns/mnt`),
|
|
95
|
+
userNamespace: exited ? readExitedNamespace(`${base}/ns/user`) : fs.readlinkSync(`${base}/ns/user`),
|
|
96
|
+
},
|
|
97
|
+
});
|
|
98
|
+
}
|
|
99
|
+
/** Capture exact procfs evidence on Linux; other platforms use guided legacy recovery. */
|
|
100
|
+
export function readProcessEvidence(pid) {
|
|
101
|
+
if (process.platform !== 'linux')
|
|
102
|
+
return undefined;
|
|
103
|
+
if (!Number.isSafeInteger(pid) || pid <= 0 || pid > 2147483647)
|
|
104
|
+
return undefined;
|
|
105
|
+
try {
|
|
106
|
+
const before = linuxSnapshot(pid);
|
|
107
|
+
const after = linuxSnapshot(pid);
|
|
108
|
+
return JSON.stringify(before) === JSON.stringify(after) ? after : undefined;
|
|
109
|
+
}
|
|
110
|
+
catch {
|
|
111
|
+
return undefined;
|
|
112
|
+
}
|
|
113
|
+
}
|
|
114
|
+
//# sourceMappingURL=processEvidence.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"processEvidence.js","sourceRoot":"","sources":["../../../src/core/server/processEvidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE;IACvB,IAAI,EAAE,OAAO;IACb,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;QAC/C,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,KAAK,CAAC,eAAe,CAAC;aACtB,QAAQ,EAAE;QACb,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,KAAK,CAAC,gBAAgB,CAAC;aACvB,QAAQ,EAAE;KACd,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAEjE,SAAS,mBAAmB,CAAC,KAAsB;IACjD,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,UAAU,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AACzE,CAAC;AACD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAElC,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAa;IAClD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;YAC5E,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,SAAS,GAAG,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI;SAChB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;SACd,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IACtD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,UAAU,EAAE,SAAS,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpF,OAAO,cAAc,CAAC,KAAK,CAAC;QAC1B,GAAG;QACH,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,MAAM,CAAC;QACxD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE;YACP,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;YAClE,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,SAAS,CAAC;YAC/C,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,SAAS,CAAC;YAClG,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC;SACpG;KACF,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,UAAU;QAAE,OAAO,SAAS,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
|
|
@@ -7,6 +7,7 @@ export declare const processIdentitySchema: z.ZodDiscriminatedUnion<[z.ZodObject
|
|
|
7
7
|
}, z.core.$strip>, z.ZodObject<{
|
|
8
8
|
platform: z.ZodLiteral<"darwin">;
|
|
9
9
|
hostname: z.ZodString;
|
|
10
|
+
bootId: z.ZodOptional<z.ZodString>;
|
|
10
11
|
startTime: z.ZodString;
|
|
11
12
|
}, z.core.$strip>, z.ZodObject<{
|
|
12
13
|
platform: z.ZodLiteral<"win32">;
|
|
@@ -23,5 +24,7 @@ interface IdentityDependencies {
|
|
|
23
24
|
}
|
|
24
25
|
/** Numeric PIDs are meaningful only within the recorded execution context. */
|
|
25
26
|
export declare function inspectProcessIdentity(pid: number, identity?: ProcessIdentity, dependencies?: IdentityDependencies): ProcessIdentityStatus;
|
|
27
|
+
/** Diagnostic re-read only; this never authorizes signalling or metadata cleanup. */
|
|
28
|
+
export declare function processIdentityRecoveryMessage(pid: number, identity?: ProcessIdentity, dependencies?: IdentityDependencies): string;
|
|
26
29
|
export {};
|
|
27
30
|
//# sourceMappingURL=processIdentity.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"processIdentity.d.ts","sourceRoot":"","sources":["../../../src/core/server/processIdentity.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qBAAqB
|
|
1
|
+
{"version":3,"file":"processIdentity.d.ts","sourceRoot":"","sources":["../../../src/core/server/processIdentity.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;+BAchC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAEjE,6FAA6F;AAC7F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CA2D5E;AAED,UAAU,oBAAoB;IAC5B,YAAY,CAAC,EAAE,OAAO,mBAAmB,CAAC;IAC1C,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;CACzC;AA0DD,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,eAAe,EAC1B,YAAY,GAAE,oBAAyB,GACtC,qBAAqB,CAEvB;AAED,qFAAqF;AACrF,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,eAAe,EAC1B,YAAY,GAAE,oBAAyB,GACtC,MAAM,CAaR"}
|
|
@@ -9,7 +9,12 @@ export const processIdentitySchema = z.discriminatedUnion('platform', [
|
|
|
9
9
|
pidNamespace: z.string().min(1),
|
|
10
10
|
startTime: z.string().regex(/^\d+$/),
|
|
11
11
|
}),
|
|
12
|
-
z.object({
|
|
12
|
+
z.object({
|
|
13
|
+
platform: z.literal('darwin'),
|
|
14
|
+
hostname: z.string().min(1),
|
|
15
|
+
bootId: z.string().min(1).optional(),
|
|
16
|
+
startTime: z.string().min(1),
|
|
17
|
+
}),
|
|
13
18
|
z.object({ platform: z.literal('win32'), hostname: z.string().min(1), startTime: z.string().regex(/^\d+$/) }),
|
|
14
19
|
]);
|
|
15
20
|
/** Capture kernel process birth evidence; unavailable evidence is never a PID-only match. */
|
|
@@ -42,7 +47,14 @@ export function readProcessIdentity(pid) {
|
|
|
42
47
|
stdio: ['ignore', 'pipe', 'ignore'],
|
|
43
48
|
})
|
|
44
49
|
.trim();
|
|
45
|
-
|
|
50
|
+
const bootId = childProcess
|
|
51
|
+
.execFileSync('/usr/sbin/sysctl', ['-n', 'kern.bootsessionuuid'], {
|
|
52
|
+
encoding: 'utf8',
|
|
53
|
+
timeout: 3000,
|
|
54
|
+
stdio: ['ignore', 'pipe', 'ignore'],
|
|
55
|
+
})
|
|
56
|
+
.trim();
|
|
57
|
+
return processIdentitySchema.parse({ platform: 'darwin', hostname: os.hostname(), bootId, startTime });
|
|
46
58
|
}
|
|
47
59
|
if (process.platform === 'win32') {
|
|
48
60
|
const startTime = childProcess
|
|
@@ -74,28 +86,68 @@ function processExists(pid) {
|
|
|
74
86
|
return !(error instanceof Error && 'code' in error && error.code === 'ESRCH');
|
|
75
87
|
}
|
|
76
88
|
}
|
|
77
|
-
function
|
|
78
|
-
if (
|
|
79
|
-
return
|
|
80
|
-
if (
|
|
81
|
-
|
|
89
|
+
function contextMismatch(recorded, observed) {
|
|
90
|
+
if (recorded.platform !== observed.platform)
|
|
91
|
+
return 'the recorded process belongs to another operating system';
|
|
92
|
+
if (recorded.platform === 'linux' && observed.platform === 'linux') {
|
|
93
|
+
if (recorded.bootId !== observed.bootId)
|
|
94
|
+
return 'the recorded process belongs to another boot session';
|
|
95
|
+
if (recorded.pidNamespace !== observed.pidNamespace)
|
|
96
|
+
return 'the recorded process belongs to another PID namespace';
|
|
97
|
+
return undefined;
|
|
98
|
+
}
|
|
99
|
+
if (recorded.platform === 'darwin' && observed.platform === 'darwin' && recorded.bootId) {
|
|
100
|
+
if (!observed.bootId)
|
|
101
|
+
return 'the current macOS boot-session ID could not be read';
|
|
102
|
+
if (recorded.bootId !== observed.bootId)
|
|
103
|
+
return 'the recorded process belongs to another boot session';
|
|
104
|
+
return undefined;
|
|
105
|
+
}
|
|
106
|
+
// Compatibility only: retire hostname-based macOS records at the next major release.
|
|
107
|
+
if ('hostname' in recorded && 'hostname' in observed && recorded.hostname !== observed.hostname) {
|
|
108
|
+
return 'the hostname differs from the hostname-based process record';
|
|
82
109
|
}
|
|
83
|
-
return
|
|
110
|
+
return undefined;
|
|
84
111
|
}
|
|
85
|
-
/**
|
|
86
|
-
|
|
112
|
+
/** All lifecycle paths use the same evidence and fail-closed decisions. */
|
|
113
|
+
function inspectIdentity(pid, identity, dependencies) {
|
|
87
114
|
if (!identity)
|
|
88
|
-
return 'unknown';
|
|
115
|
+
return { status: 'unknown', reason: 'the record has no process birth evidence (legacy format)' };
|
|
89
116
|
const readIdentity = dependencies.readIdentity ?? readProcessIdentity;
|
|
90
117
|
const context = readIdentity(process.pid);
|
|
91
|
-
if (!context
|
|
92
|
-
return
|
|
118
|
+
if (!context)
|
|
119
|
+
return {
|
|
120
|
+
status: 'unknown',
|
|
121
|
+
reason: 'OS process evidence is unavailable to this CLI (permissions or platform tools)',
|
|
122
|
+
};
|
|
123
|
+
const mismatch = contextMismatch(identity, context);
|
|
124
|
+
if (mismatch)
|
|
125
|
+
return { status: 'unknown', reason: mismatch };
|
|
93
126
|
const observed = readIdentity(pid);
|
|
94
127
|
if (observed) {
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
128
|
+
const mismatch = contextMismatch(identity, observed);
|
|
129
|
+
if (mismatch)
|
|
130
|
+
return { status: 'unknown', reason: mismatch };
|
|
131
|
+
return { status: observed.startTime === identity.startTime ? 'alive' : 'dead' };
|
|
98
132
|
}
|
|
99
|
-
|
|
133
|
+
if (!(dependencies.processAlive ?? processExists)(pid))
|
|
134
|
+
return { status: 'dead' };
|
|
135
|
+
return { status: 'unknown', reason: 'the process may still exist, but its birth evidence could not be read' };
|
|
136
|
+
}
|
|
137
|
+
/** Numeric PIDs are meaningful only within the recorded execution context. */
|
|
138
|
+
export function inspectProcessIdentity(pid, identity, dependencies = {}) {
|
|
139
|
+
return inspectIdentity(pid, identity, dependencies).status;
|
|
140
|
+
}
|
|
141
|
+
/** Diagnostic re-read only; this never authorizes signalling or metadata cleanup. */
|
|
142
|
+
export function processIdentityRecoveryMessage(pid, identity, dependencies = {}) {
|
|
143
|
+
const inspection = inspectIdentity(pid, identity, dependencies);
|
|
144
|
+
const reason = inspection.status === 'unknown'
|
|
145
|
+
? inspection.reason
|
|
146
|
+
: 'process evidence changed during verification; retry the command';
|
|
147
|
+
return (`Cannot verify process identity for PID ${pid}: ${reason}. Lifecycle metadata was retained. ` +
|
|
148
|
+
'Run the command as the runtime user on the same host/container with OS process-inspection permissions. ' +
|
|
149
|
+
'On Linux, legacy supervised pairs can use explicit serve --stop or serve --restart with the same --config-dir. ' +
|
|
150
|
+
'For other legacy records, stop the old runtime through its original CLI or service manager, then start with this CLI. ' +
|
|
151
|
+
'Do not delete lifecycle metadata while any process may still use this scope.');
|
|
100
152
|
}
|
|
101
153
|
//# sourceMappingURL=processIdentity.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"processIdentity.js","sourceRoot":"","sources":["../../../src/core/server/processIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE;IACpE,CAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;KACrC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,
|
|
1
|
+
{"version":3,"file":"processIdentity.js","sourceRoot":"","sources":["../../../src/core/server/processIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE;IACpE,CAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;KACrC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC7B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9G,CAAC,CAAC;AAIH,6FAA6F;AAC7F,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1D,8EAA8E;YAC9E,MAAM,MAAM,GAAG,IAAI;iBAChB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;iBAChC,IAAI,EAAE;iBACN,KAAK,CAAC,KAAK,CAAC,CAAC;YAChB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC7D,OAAO,qBAAqB,CAAC,KAAK,CAAC;gBACjC,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;gBACzE,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,GAAG,SAAS,CAAC;gBACpD,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;aACtB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,wFAAwF;YACxF,MAAM,SAAS,GAAG,YAAY;iBAC3B,YAAY,CAAC,cAAc,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE;gBACnG,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CAAC;iBACD,IAAI,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,YAAY;iBACxB,YAAY,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE;gBAChE,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CAAC;iBACD,IAAI,EAAE,CAAC;YACV,OAAO,qBAAqB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,YAAY;iBAC3B,YAAY,CACX,gBAAgB,EAChB;gBACE,YAAY;gBACZ,iBAAiB;gBACjB,UAAU;gBACV,oBAAoB,GAAG,uDAAuD;aAC/E,EACD;gBACE,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CACF;iBACA,IAAI,EAAE,CAAC;YACV,OAAO,qBAAqB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yGAAyG;IAC3G,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB,EAAE,QAAyB;IAC3E,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAAE,OAAO,0DAA0D,CAAC;IAC/G,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,OAAO,sDAAsD,CAAC;QACvG,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;YAAE,OAAO,uDAAuD,CAAC;QACpH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxF,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,qDAAqD,CAAC;QACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,OAAO,sDAAsD,CAAC;QACvG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,qFAAqF;IACrF,IAAI,UAAU,IAAI,QAAQ,IAAI,UAAU,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAChG,OAAO,6DAA6D,CAAC;IACvE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAID,2EAA2E;AAC3E,SAAS,eAAe,CACtB,GAAW,EACX,QAAqC,EACrC,YAAkC;IAElC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,0DAA0D,EAAE,CAAC;IAChH,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,mBAAmB,CAAC;IACtE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QACV,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,gFAAgF;SACzF,CAAC;IACJ,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,CAAC,YAAY,IAAI,aAAa,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,uEAAuE,EAAE,CAAC;AAChH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CACpC,GAAW,EACX,QAA0B,EAC1B,eAAqC,EAAE;IAEvC,OAAO,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC;AAC7D,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,8BAA8B,CAC5C,GAAW,EACX,QAA0B,EAC1B,eAAqC,EAAE;IAEvC,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,MAAM,GACV,UAAU,CAAC,MAAM,KAAK,SAAS;QAC7B,CAAC,CAAC,UAAU,CAAC,MAAM;QACnB,CAAC,CAAC,iEAAiE,CAAC;IACxE,OAAO,CACL,0CAA0C,GAAG,KAAK,MAAM,qCAAqC;QAC7F,yGAAyG;QACzG,iHAAiH;QACjH,wHAAwH;QACxH,8EAA8E,CAC/E,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
import type { ServerPidInfo } from './pidFileManager.js';
|
|
3
|
+
declare const descriptorSchema: z.ZodObject<{
|
|
4
|
+
version: z.ZodLiteral<1>;
|
|
5
|
+
configDir: z.ZodString;
|
|
6
|
+
claimId: z.ZodString;
|
|
7
|
+
url: z.ZodString;
|
|
8
|
+
}, z.core.$strict>;
|
|
9
|
+
export type RuntimeControlDescriptor = z.infer<typeof descriptorSchema>;
|
|
10
|
+
export type RuntimeControlMethod = 'describe' | 'prepare-replacement' | 'commit-replacement' | 'operation-status' | 'stop';
|
|
11
|
+
export interface RuntimeControlDescription {
|
|
12
|
+
runtime: ServerPidInfo | null;
|
|
13
|
+
runtimeScopeId: string;
|
|
14
|
+
version: string;
|
|
15
|
+
explicitInputs: unknown;
|
|
16
|
+
digest: string;
|
|
17
|
+
supervisorPid: number;
|
|
18
|
+
state: string;
|
|
19
|
+
}
|
|
20
|
+
export type RuntimeControlHandler = (method: RuntimeControlMethod, payload: unknown, operationId: string) => Promise<unknown> | unknown;
|
|
21
|
+
export declare function runtimeControlExists(configDir: string): boolean;
|
|
22
|
+
export declare function startRuntimeControl(configDir: string, claimId: string, handler: RuntimeControlHandler): Promise<{
|
|
23
|
+
descriptor: RuntimeControlDescriptor;
|
|
24
|
+
close: () => Promise<void>;
|
|
25
|
+
}>;
|
|
26
|
+
export declare function connectRuntimeControl(configDir: string): Promise<{
|
|
27
|
+
descriptor: RuntimeControlDescriptor;
|
|
28
|
+
request: <T = unknown>(method: RuntimeControlMethod, payload?: unknown, operationId?: string) => Promise<T>;
|
|
29
|
+
} | null>;
|
|
30
|
+
export {};
|
|
31
|
+
//# sourceMappingURL=runtimeControl.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"runtimeControl.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeControl.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMzD,QAAA,MAAM,gBAAgB;;;;;kBAsBX,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACxE,MAAM,MAAM,oBAAoB,GAC9B,UAAU,GAAG,qBAAqB,GAAG,oBAAoB,GAAG,kBAAkB,GAAG,MAAM,CAAC;AAE1F,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAwBD,MAAM,MAAM,qBAAqB,GAAG,CAClC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,MAAM,KAChB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAmBhC,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAQ/D;AA2DD,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC;IACT,UAAU,EAAE,wBAAwB,CAAC;IACrC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAAC,CAoFD;AAED,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IACtE,UAAU,EAAE,wBAAwB,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CAC7G,GAAG,IAAI,CAAC,CAsDR"}
|