@abelxiaoxing/cadence 1.8.4 → 2.0.1

package/src/windows-job-backend.ts

@@ -1,419 +0,0 @@
-import { spawn, spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import { lstatSync, readFileSync } from "node:fs";
-import path from "node:path";
-import {
-  BoundedLog,
-  ISOLATION_RUN_LIMITS,
-  type IsolationRunInput,
-  type IsolationRunResult,
-} from "./isolation-backend.ts";
-
-const SHUTDOWN_MS = 5000;
-const invalid = (): never => {
-  throw new Error("windows-job-request-invalid");
-};
-const text = (value: unknown): value is string =>
-  typeof value === "string" &&
-  value.length <= 16384 &&
-  !value.includes("\0") &&
-  !/[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/u.test(
-    value,
-  );
-const absolute = (value: unknown): value is string =>
-  text(value) && /^[A-Za-z]:\\/u.test(value) && path.win32.isAbsolute(value);
-export function encodeWindowsJobRequest(
-  input: IsolationRunInput,
-  timeoutMs: number,
-): Buffer {
-  if (
-    !absolute(input.root) ||
-    !absolute(input.executable) ||
-    !input.executable.toLowerCase().endsWith(".exe") ||
-    input.mounts?.length ||
-    !Number.isSafeInteger(timeoutMs) ||
-    timeoutMs < 1 ||
-    timeoutMs > 86_400_000
-  )
-    invalid();
-  const args = input.args ?? [];
-  if (args.length > 128 || !args.every(text)) invalid();
-  const seen = new Set<string>();
-  const env = Object.entries(input.environment ?? {});
-  for (const [name, value] of env) {
-    if (
-      !/^[A-Za-z_][A-Za-z0-9_]*$/u.test(name) ||
-      !text(value) ||
-      seen.has(name.toUpperCase())
-    )
-      invalid();
-    seen.add(name.toUpperCase());
-  }
-  const quote = (value: string) =>
-    `"${value.replace(/(\\*)"/gu, '$1$1\\"').replace(/(\\+)$/gu, "$1$1")}"`;
-  const command = [input.executable, ...args].map(quote).join(" ");
-  if (command.length >= 32767) invalid();
-  const environment = `${env
-    .sort(([a], [b]) => (a.toUpperCase() < b.toUpperCase() ? -1 : 1))
-    .map(([k, v]) => `${k}=${v}`)
-    .join("\0")}\0\0`;
-  const parts = [
-    `${input.executable}\0`,
-    `${command}\0`,
-    `${input.root}\0`,
-    environment,
-  ].map((s) => Buffer.from(s, "utf16le"));
-  const header = Buffer.alloc(36);
-  [2, timeoutMs, SHUTDOWN_MS, 0, ...parts.map((p) => p.length), 0].forEach(
-    (n, i) => {
-      header.writeUInt32LE(n, i * 4);
-    },
-  );
-  const wire = Buffer.concat([header, ...parts]);
-  if (wire.length > 65536 || parts.some((p) => p.length > 60000)) invalid();
-  return wire;
-}
-
-/** A manifest binds a explicitly built native helper to the shipped source. */
-export function verifyWindowsJobHelper(helper: string): boolean {
-  try {
-    if (!path.isAbsolute(helper)) return false;
-    const files = [helper, `${helper}.json`];
-    if (
-      files.some((file) => {
-        const s = lstatSync(file);
-        return !s.isFile() || s.isSymbolicLink() || s.size > 8 * 1024 * 1024;
-      })
-    )
-      return false;
-    const bytes = readFileSync(helper);
-    const pe = bytes.length >= 64 ? bytes.readUInt32LE(60) : -1;
-    if (
-      bytes.toString("ascii", 0, 2) !== "MZ" ||
-      pe < 64 ||
-      pe + 6 > bytes.length ||
-      bytes.readUInt32LE(pe) !== 0x4550 ||
-      bytes.readUInt16LE(pe + 4) !== 0x8664
-    )
-      return false;
-    const hash = (data: Uint8Array) =>
-      createHash("sha256").update(data).digest("hex");
-    const manifest = JSON.parse(readFileSync(`${helper}.json`, "utf8"));
-    return (
-      manifest.version === 2 &&
-      manifest.arch === "x64" &&
-      manifest.helperSha256 === hash(bytes) &&
-      manifest.sourceSha256 ===
-        hash(readFileSync(new URL("./windows-job.c", import.meta.url)))
-    );
-  } catch {
-    return false;
-  }
-}
-
-interface Observation {
-  version: 2;
-  outcome: "complete" | "failed" | "uncertain";
-  reason: string;
-  rootExited: boolean;
-  managedSettled: boolean;
-  exitCode: number | null;
-}
-function observation(value: unknown): Observation | undefined {
-  if (!value || typeof value !== "object") return;
-  const v = value as Observation;
-  if (
-    Object.keys(v).sort().join(",") !==
-      "exitCode,managedSettled,outcome,reason,rootExited,version" ||
-    v.version !== 2 ||
-    !["complete", "failed", "uncertain"].includes(v.outcome) ||
-    ![
-      "exit",
-      "timeout",
-      "cancelled",
-      "launch-failed",
-      "termination-unconfirmed",
-    ].includes(v.reason) ||
-    typeof v.rootExited !== "boolean" ||
-    typeof v.managedSettled !== "boolean" ||
-    !(
-      v.exitCode === null ||
-      (Number.isInteger(v.exitCode) &&
-        v.exitCode >= 0 &&
-        v.exitCode <= 0xffffffff)
-    )
-  )
-    return;
-  if (
-    v.outcome === "complete" &&
-    (v.reason !== "exit" ||
-      !v.rootExited ||
-      !v.managedSettled ||
-      v.exitCode === null)
-  )
-    return;
-  if (
-    v.outcome === "failed" &&
-    (!v.managedSettled ||
-      !["timeout", "cancelled", "launch-failed"].includes(v.reason))
-  )
-    return;
-  return v;
-}
-const uncertain = (): IsolationRunResult => ({
-  ok: false,
-  state: "paused",
-  code: "isolation-termination-unconfirmed",
-});
-function classify(
-  v: Observation | undefined,
-  helperExit: number | null,
-  output: BoundedLog,
-  cancelled: boolean,
-): IsolationRunResult {
-  if (!v?.managedSettled || v.outcome === "uncertain" || helperExit !== 0)
-    return uncertain();
-  if (cancelled || v.reason === "cancelled")
-    return { ok: false, state: "cancelled", code: "cancelled" };
-  if (v.reason === "timeout")
-    return { ok: false, state: "paused", code: "isolation-execution-timeout" };
-  if (v.reason === "launch-failed")
-    return {
-      ok: false,
-      state: "paused",
-      code: "isolation-backend-launch-failed",
-    };
-  if (v.outcome !== "complete" || v.exitCode === null) return uncertain();
-  return {
-    ok: true,
-    state: "completed",
-    exitCode: v.exitCode,
-    stdout: output.text(),
-    stderr: "",
-    outputWitnessMatched: output.witnessMatched,
-    logs: { stdout: output.metadata(), stderr: { bytes: 0, truncated: false } },
-  };
-}
-
-/** Host files/network are trusted; the Job owns process lifetime, not a security sandbox. */
-interface WindowsJobOptions {
-  helperPath: string;
-  timeoutMs?: number;
-  platform?: NodeJS.Platform;
-  arch?: string;
-  probe?: (helper: string) => boolean;
-  spawnProcess?: typeof spawn;
-  maxOutputBytes?: number;
-}
-export class WindowsJobBackend {
-  readonly #options: WindowsJobOptions;
-  constructor(options: WindowsJobOptions) {
-    for (const [value, maximum] of [
-      [options.timeoutMs ?? ISOLATION_RUN_LIMITS.timeoutMs, 86_400_000],
-      [
-        options.maxOutputBytes ?? ISOLATION_RUN_LIMITS.maxOutputBytes,
-        1024 * 1024,
-      ],
-    ])
-      if (!Number.isSafeInteger(value) || value < 1 || value > maximum)
-        throw new Error("isolation-run-limits-invalid");
-    this.#options = options;
-  }
-  available(): boolean {
-    return (
-      (this.#options.platform ?? process.platform) === "win32" &&
-      (this.#options.arch ?? process.arch) === "x64" &&
-      (this.#options.probe ?? verifyWindowsJobHelper)(this.#options.helperPath)
-    );
-  }
-  async run(input: IsolationRunInput): Promise<IsolationRunResult> {
-    if (!this.available())
-      return {
-        ok: false,
-        state: "paused",
-        code: "isolation-backend-unavailable",
-      };
-    if (input.signal?.aborted)
-      return { ok: false, state: "cancelled", code: "cancelled" };
-    if (
-      input.outputWitness !== undefined &&
-      (!text(input.outputWitness) ||
-        input.outputWitness.length < 1 ||
-        input.outputWitness.length > 512)
-    )
-      return {
-        ok: false,
-        state: "paused",
-        code: "isolation-backend-launch-failed",
-      };
-    const timeoutMs = this.#options.timeoutMs ?? ISOLATION_RUN_LIMITS.timeoutMs;
-    let wire: Buffer;
-    try {
-      wire = encodeWindowsJobRequest(input, timeoutMs);
-    } catch {
-      return {
-        ok: false,
-        state: "paused",
-        code: "isolation-backend-launch-failed",
-      };
-    }
-    const output = new BoundedLog(
-      this.#options.maxOutputBytes ?? ISOLATION_RUN_LIMITS.maxOutputBytes,
-      input.outputWitness,
-    );
-    return new Promise((resolve) => {
-      let child: ReturnType<typeof spawn>;
-      let line = "",
-        final: Observation | undefined,
-        bad = false,
-        closed = false,
-        launchFailed = false;
-      let timer: ReturnType<typeof setTimeout>;
-      let stopping = false;
-      const armDeadline = (duration: number) => {
-        clearTimeout(timer);
-        timer = setTimeout(() => {
-          bad = true;
-          child.kill();
-          finish(uncertain());
-        }, duration);
-        timer.unref?.();
-      };
-      const cancel = () => {
-        if (stopping || closed) return;
-        stopping = true;
-        child.stdin?.end();
-        armDeadline(SHUTDOWN_MS + 5000);
-      };
-      const finish = (result: IsolationRunResult) => {
-        if (closed) return;
-        closed = true;
-        clearTimeout(timer);
-        input.signal?.removeEventListener("abort", cancel);
-        resolve(result);
-      };
-      try {
-        child = (this.#options.spawnProcess ?? spawn)(
-          this.#options.helperPath,
-          [],
-          {
-            cwd: input.root,
-            shell: false,
-            windowsHide: true,
-            stdio: ["pipe", "pipe", "pipe"],
-          },
-        );
-      } catch {
-        finish({
-          ok: false,
-          state: "paused",
-          code: "isolation-backend-launch-failed",
-        });
-        return;
-      }
-      const malformed = () => {
-        bad = true;
-        cancel();
-      };
-      child.stdout?.on("data", (chunk: Buffer) => {
-        if (closed || bad) return;
-        line += chunk.toString("utf8");
-        // Helper lines are ASCII and <= 2200 bytes. Drain incrementally.
-        while (line.includes("\n")) {
-          const end = line.indexOf("\n");
-          const row = line.slice(0, end);
-          line = line.slice(end + 1);
-          if (row.length > 4096 || final) {
-            malformed();
-            return;
-          }
-          try {
-            const value = JSON.parse(row);
-            if (
-              Object.keys(value).length === 1 &&
-              typeof value.outputHex === "string" &&
-              /^(?:[a-f0-9]{2}){1,1024}$/u.test(value.outputHex)
-            )
-              output.append(Buffer.from(value.outputHex, "hex"));
-            else {
-              final = observation(value);
-              if (!final) {
-                malformed();
-                return;
-              }
-            }
-          } catch {
-            malformed();
-            return;
-          }
-        }
-        if (line.length > 4096) malformed();
-      });
-      child.stderr?.on("data", () => {
-        /* helper diagnostics are never product output */
-      });
-      child.stdin?.on("error", () => {
-        bad = true;
-      });
-      child.once("error", () => {
-        bad = true;
-        launchFailed = child.pid === undefined;
-      });
-      child.once("close", (code) =>
-        finish(
-          launchFailed
-            ? {
-                ok: false,
-                state: "paused",
-                code: "isolation-backend-launch-failed",
-              }
-            : bad || line.length
-              ? uncertain()
-              : classify(final, code, output, input.signal?.aborted === true),
-        ),
-      );
-      // Kill-on-close is containment; only a receipt establishes settlement.
-      armDeadline(timeoutMs + SHUTDOWN_MS + 10_000);
-      input.signal?.addEventListener("abort", cancel, { once: true });
-      child.stdin?.write(wire);
-      if (input.signal?.aborted) cancel();
-    });
-  }
-}
-
-export function probeWindowsJob(helper: string): boolean {
-  if (
-    process.platform !== "win32" ||
-    process.arch !== "x64" ||
-    !verifyWindowsJobHelper(helper)
-  )
-    return false;
-  const wire = encodeWindowsJobRequest(
-    {
-      root: process.cwd(),
-      executable: process.execPath,
-      args: ["-e", "process.exit(0)"],
-      environment: { SystemRoot: process.env.SystemRoot ?? "C:\\Windows" },
-    },
-    5000,
-  );
-  // EOF means cancel, so doctor uses the helper's explicit probe path instead.
-  const result = spawnSync(helper, ["--probe"], {
-    input: wire,
-    shell: false,
-    encoding: "utf8",
-    timeout: 15000,
-    maxBuffer: 65536,
-  });
-  try {
-    const v = observation(JSON.parse(result.stdout.trim()));
-    return (
-      !result.error &&
-      result.status === 0 &&
-      v?.outcome === "complete" &&
-      v.exitCode === 0
-    );
-  } catch {
-    return false;
-  }
-}

package/src/windows-job.c

@@ -1,149 +0,0 @@
-/* Windows x64 host-trusted Job supervisor, protocol v2. Wire: nine LE uint32s,
- * then four sized UTF-16LE strings (exe, CRT command line, cwd, env block).
- * Remaining stdin is control: any byte or EOF cancels. No inherited Job handle.
- * Native qualification, not source assertions, establishes API behavior. */
-#define _WIN32_WINNT 0x0A00
-#include <windows.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <wchar.h>
-
-static HANDLE controlEvent;
-static volatile LONG watchdogMs = 5000;
-static DWORD WINAPI watchdogThread(LPVOID unused) {
-  ULONGLONG start = GetTickCount64();
-  (void)unused;
-  for (;;) {
-    if (GetTickCount64() - start > (DWORD)InterlockedCompareExchange(&watchdogMs, 0, 0)) ExitProcess(2);
-    Sleep(20);
-  }
-}
-static DWORD WINAPI controlThread(LPVOID unused) {
-  char byte; DWORD count;
-  (void)unused;
-  ReadFile(GetStdHandle(STD_INPUT_HANDLE), &byte, 1, &count, NULL);
-  SetEvent(controlEvent);
-  return 0;
-}
-static int exact(void *buffer, DWORD length) {
-  DWORD count, available; char *p = (char *)buffer;
-  ULONGLONG deadline = GetTickCount64() + 5000;
-  while (length) {
-    if (GetTickCount64() >= deadline || !PeekNamedPipe(GetStdHandle(STD_INPUT_HANDLE), NULL, 0, NULL, &available, NULL)) return 0;
-    if (!available) { Sleep(10); continue; }
-    if (!ReadFile(GetStdHandle(STD_INPUT_HANDLE), p, length < available ? length : available, &count, NULL) || !count) return 0;
-    p += count; length -= count;
-  }
-  return 1;
-}
-static void report(const char *outcome, const char *reason, int root, int settled, DWORD exitCode) {
-  printf("{\"version\":2,\"outcome\":\"%s\",\"reason\":\"%s\",\"rootExited\":%s,\"managedSettled\":%s,\"exitCode\":%lu}\n",
-    outcome, reason, root ? "true" : "false", settled ? "true" : "false", (unsigned long)exitCode);
-  fflush(stdout);
-}
-int wmain(int argc, wchar_t **argv) {
-  DWORD h[9], total = 0, i, active = 1, count, available, exitCode = 1;
-  wchar_t *parts[4] = {0};
-  HANDLE job = NULL, completion = NULL, outRead = NULL, outWrite = NULL, nullInput = INVALID_HANDLE_VALUE;
-  SECURITY_ATTRIBUTES sa = {sizeof(sa), NULL, TRUE};
-  JOBOBJECT_EXTENDED_LIMIT_INFORMATION limits = {0};
-  JOBOBJECT_ASSOCIATE_COMPLETION_PORT association = {0};
-  JOBOBJECT_BASIC_ACCOUNTING_INFORMATION accounting;
-  STARTUPINFOEXW si = {0}; PROCESS_INFORMATION pi = {0}; SIZE_T attributeBytes = 0;
-  HANDLE inherited[2]; ULONGLONG start, stopping = 0;
-  const char *reason = "exit"; int root = 0, settled = 0, result = 1;
-  BOOL inJob = FALSE;
-  int probe = argc == 2 && wcscmp(argv[1], L"--probe") == 0;
-  { HANDLE watchdog = CreateThread(NULL, 0, watchdogThread, NULL, 0, NULL);
-    if (!watchdog) return 2;
-    CloseHandle(watchdog);
-  }
-  if (argc > 1 && !probe) goto done;
-  if (!exact(h, sizeof(h)) || h[0] != 2 || h[8] != 0 || h[1] < 1 || h[1] > 86400000 || h[2] < 1 || h[2] > 10000 || h[3] != 0) goto done;
-  for (i = 0; i < 4; i++) {
-    if (h[4+i] < 2 || h[4+i] > 60000 || (h[4+i] & 1)) goto done;
-    total += h[4+i]; if (total > 65500) goto done;
-    parts[i] = (wchar_t *)calloc(1, h[4+i]);
-    if (!parts[i] || !exact(parts[i], h[4+i]) || parts[i][h[4+i]/2-1] != 0) goto done;
-    if (i < 3 && wcslen(parts[i]) != h[4+i]/2-1) goto done;
-  }
-  if (h[7] < 4 || parts[3][h[7]/2-2] != 0 || wcslen(parts[0]) < 3 || parts[0][1] != L':' || parts[0][2] != L'\\' || wcslen(parts[2]) < 3 || parts[2][1] != L':' || parts[2][2] != L'\\') goto done;
-  InterlockedExchange(&watchdogMs, (LONG)(h[1] + h[2] + 6000));
-  job = CreateJobObjectW(NULL, NULL);
-  if (!job) goto done;
-  limits.BasicLimitInformation.LimitFlags = JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE;
-  if (!SetInformationJobObject(job, JobObjectExtendedLimitInformation, &limits, sizeof(limits))) goto done;
-  completion = CreateIoCompletionPort(INVALID_HANDLE_VALUE, NULL, 0, 1);
-  association.CompletionKey = job; association.CompletionPort = completion;
-  if (!completion || !SetInformationJobObject(job, JobObjectAssociateCompletionPortInformation, &association, sizeof(association))) goto done;
-  if (!CreatePipe(&outRead, &outWrite, &sa, 0) || !SetHandleInformation(outRead, HANDLE_FLAG_INHERIT, 0)) goto done;
-  nullInput = CreateFileW(L"NUL", GENERIC_READ, FILE_SHARE_READ | FILE_SHARE_WRITE, &sa, OPEN_EXISTING, 0, NULL);
-  if (nullInput == INVALID_HANDLE_VALUE) goto done;
-  InitializeProcThreadAttributeList(NULL, 2, 0, &attributeBytes);
-  si.lpAttributeList = (LPPROC_THREAD_ATTRIBUTE_LIST)malloc(attributeBytes);
-  if (!si.lpAttributeList) goto done;
-  if (!InitializeProcThreadAttributeList(si.lpAttributeList, 2, 0, &attributeBytes)) { free(si.lpAttributeList); si.lpAttributeList = NULL; goto done; }
-  inherited[0] = outWrite; inherited[1] = nullInput;
-  if (!UpdateProcThreadAttribute(si.lpAttributeList, 0, PROC_THREAD_ATTRIBUTE_HANDLE_LIST, inherited, sizeof(inherited), NULL, NULL)) goto done;
-  /* Atomic Job membership closes the helper-loss window between creation and
-   * AssignProcessToJobObject. The root cannot exist outside this Job, even
-   * while suspended; the Job handle is never inherited by target descendants. */
-  if (!UpdateProcThreadAttribute(si.lpAttributeList, 0, PROC_THREAD_ATTRIBUTE_JOB_LIST, &job, sizeof(job), NULL, NULL)) goto done;
-  si.StartupInfo.cb = sizeof(si); si.StartupInfo.dwFlags = STARTF_USESTDHANDLES;
-  si.StartupInfo.hStdInput = nullInput; si.StartupInfo.hStdOutput = outWrite; si.StartupInfo.hStdError = outWrite;
-  if (!CreateProcessW(parts[0], parts[1], NULL, NULL, TRUE, CREATE_SUSPENDED | CREATE_UNICODE_ENVIRONMENT | EXTENDED_STARTUPINFO_PRESENT, parts[3], parts[2], &si.StartupInfo, &pi)) goto done;
-  if (!IsProcessInJob(pi.hProcess, job, &inJob) || !inJob) goto done;
-  controlEvent = CreateEventW(NULL, TRUE, FALSE, NULL);
-  if (!controlEvent) goto done;
-  if (!probe) { HANDLE thread = CreateThread(NULL, 0, controlThread, NULL, 0, NULL);
-    if (!thread) goto done;
-    CloseHandle(thread);
-  }
-  if (ResumeThread(pi.hThread) == (DWORD)-1) goto done;
-  CloseHandle(outWrite); outWrite = NULL;
-  start = GetTickCount64();
-  for (;;) {
-    char buffer[1024]; DWORD message; ULONG_PTR key; LPOVERLAPPED overlap;
-    GetQueuedCompletionStatus(completion, &message, &key, &overlap, 10);
-    root = WaitForSingleObject(pi.hProcess, 0) == WAIT_OBJECT_0;
-    if (QueryInformationJobObject(job, JobObjectBasicAccountingInformation, &accounting, sizeof(accounting), NULL)) active = accounting.ActiveProcesses;
-    else { reason = "termination-unconfirmed"; break; }
-    available = 0;
-    if (PeekNamedPipe(outRead, NULL, 0, NULL, &available, NULL) && available) {
-      if (ReadFile(outRead, buffer, available > (DWORD)sizeof(buffer) ? (DWORD)sizeof(buffer) : available, &count, NULL)) {
-        printf("{\"outputHex\":\""); for (i = 0; i < count; i++) printf("%02x", (unsigned int)(unsigned char)buffer[i]); printf("\"}\n"); fflush(stdout);
-      }
-    }
-    /* Job accounting can reach zero before the root process handle signals.
-     * Both observations are required; keep polling under the original deadline. */
-    if (!active && !available && root) { settled = 1; break; }
-    if (!stopping) {
-      if (WaitForSingleObject(controlEvent, 0) == WAIT_OBJECT_0) reason = "cancelled";
-      else if (GetTickCount64() - start >= h[1]) reason = "timeout";
-      if (strcmp(reason, "exit") != 0) { stopping = GetTickCount64(); TerminateJobObject(job, 1); }
-    }
-    if (stopping && GetTickCount64() - stopping >= h[2]) { reason = "termination-unconfirmed"; break; }
-  }
-  if (root && !GetExitCodeProcess(pi.hProcess, &exitCode)) { settled = 0; reason = "termination-unconfirmed"; }
-  report(settled ? (strcmp(reason, "exit") == 0 ? "complete" : "failed") : "uncertain", reason, root, settled, exitCode);
-  result = settled ? 0 : 2;
-  goto cleanup;
-done:
-  if (pi.hProcess) { TerminateProcess(pi.hProcess, 1); settled = WaitForSingleObject(pi.hProcess, 5000) == WAIT_OBJECT_0; }
-  else settled = 1;
-  report(settled ? "failed" : "uncertain", settled ? "launch-failed" : "termination-unconfirmed", pi.hProcess != NULL && settled, settled, 1);
-  result = settled ? 0 : 2;
-cleanup:
-  if (job) CloseHandle(job);
-  if (pi.hThread) CloseHandle(pi.hThread);
-  if (pi.hProcess) CloseHandle(pi.hProcess);
-  if (outRead) CloseHandle(outRead);
-  if (outWrite) CloseHandle(outWrite);
-  if (nullInput != INVALID_HANDLE_VALUE) CloseHandle(nullInput);
-  if (completion) CloseHandle(completion);
-  if (si.lpAttributeList) { DeleteProcThreadAttributeList(si.lpAttributeList); free(si.lpAttributeList); }
-  for (i = 0; i < 4; i++) free(parts[i]);
-  /* Process exit ends the blocked control reader; do not close its live event. */
-  return result;
-}

package/src/workflow-engine.ts

@@ -1,28 +0,0 @@
-// Stable package-private facade. Only WorkflowEngine owns state transitions.
-
-export {
-  type DurableChangeVerificationResult,
-  type DurablePhaseVerificationResult,
-  type DurableWorkflowEngineOptions,
-  openDurableWorkflowEngine,
-} from "./durable-workflow.ts";
-export type {
-  DurableCandidateProposal,
-  DurableVerificationScope,
-} from "./workflow-policy.ts";
-export {
-  APPROVAL_AUTHORITY_CATEGORIES,
-  type ApprovalAuthorityCategory,
-  type WorkflowApplication,
-  type WorkflowApplicationContext,
-  type WorkflowApprovalCode,
-  type WorkflowAttemptOutcome,
-  type WorkflowAvailableDelivery,
-  type WorkflowChangeVerifier,
-  type WorkflowDelivery,
-  type WorkflowDeliverySource,
-  type WorkflowEngineOptions,
-  type WorkflowRunLifecycle,
-  type WorkflowWorker,
-} from "./workflow-policy.ts";
-export { WorkflowEngine } from "./workflow-state-machine.ts";