@ashlr/hub 3.2.7 → 3.3.0

package/dist/core/daemon/runtime-activation-resident-start-runtime.js

@@ -0,0 +1,28 @@
+/**
+ * Frozen production adapter for M521.
+ *
+ * The privileged broker does not exist in this release. Runtime input cannot
+ * register roots, replace this adapter, or turn canonical acknowledgement
+ * evidence into start authority.
+ */
+import { RUNTIME_ACTIVATION_RESIDENT_START_AUTHORITY, } from './runtime-activation-resident-start-protocol.js';
+export const RUNTIME_ACTIVATION_RESIDENT_START_TRUST_ROOTS = Object.freeze([]);
+export const NATIVE_HOSTILE_PROCESS_CAS_UNAVAILABLE = 'native-hostile-process-cas-unavailable';
+function unavailable() {
+    return {
+        ok: false,
+        reason: NATIVE_HOSTILE_PROCESS_CAS_UNAVAILABLE,
+        authority: RUNTIME_ACTIVATION_RESIDENT_START_AUTHORITY,
+        trustRootCount: 0,
+        acknowledgementAccepted: false,
+        serviceStarted: false,
+        serviceEnabledChanged: false,
+        pointerChanged: false,
+        providerEffectsUnblocked: false,
+    };
+}
+export const runtimeActivationResidentStartRuntime = Object.freeze({
+    roots: RUNTIME_ACTIVATION_RESIDENT_START_TRUST_ROOTS,
+    requestNativeResidentStart: unavailable,
+});
+//# sourceMappingURL=runtime-activation-resident-start-runtime.js.map

package/dist/core/daemon/runtime-activation-resident-start-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-activation-resident-start-runtime.js","sourceRoot":"","sources":["../../../src/core/daemon/runtime-activation-resident-start-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,2CAA2C,GAE5C,MAAM,iDAAiD,CAAC;AAEzD,MAAM,CAAC,MAAM,6CAA6C,GACO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEnF,MAAM,CAAC,MAAM,sCAAsC,GACjD,wCAAiD,CAAC;AAcpD,SAAS,WAAW;IAClB,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,sCAAsC;QAC9C,SAAS,EAAE,2CAA2C;QACtD,cAAc,EAAE,CAAC;QACjB,uBAAuB,EAAE,KAAK;QAC9B,cAAc,EAAE,KAAK;QACrB,qBAAqB,EAAE,KAAK;QAC5B,cAAc,EAAE,KAAK;QACrB,wBAAwB,EAAE,KAAK;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qCAAqC,GAAG,MAAM,CAAC,MAAM,CAAC;IACjE,KAAK,EAAE,6CAA6C;IACpD,0BAA0B,EAAE,WAAW;CACxC,CAAC,CAAC"}

package/dist/core/daemon/runtime-activation-stopped-consumer.d.ts

@@ -0,0 +1,139 @@
+/**
+ * Dormant, permit-gated stopped-release activation transaction.
+ *
+ * This module never starts, bootstraps, kickstarts, enables, or acknowledges a
+ * resident service. It may only replace the stopped launchd plist and select an
+ * already-admitted immutable release while preserving loaded=false and the
+ * exact observed disabled bit. Production trust roots are intentionally empty.
+ *
+ * The pointer operation is a host-local cooperative CAS: under Ashlr's outward
+ * and service lifecycle fences it compares the exact old symlink inode and raw
+ * target immediately before an atomic rename, then verifies the new target.
+ * It is not a kernel compare-exchange and is not a boundary against a hostile
+ * process running under the same UID.
+ */
+import { type KeyObject } from 'node:crypto';
+import { activityAllowsStoppedRecovery, observeMaintenanceDefault, type RuntimeActivationStoppedConsumerTrustRoot } from './runtime-activation-stopped-runtime.js';
+import { type ImmutablePrivateRecordStoreConfig } from '../util/immutable-private-record-store.js';
+declare const PROTOCOL: "runtime-activation-stopped-consumer-v1";
+export { RUNTIME_ACTIVATION_STOPPED_CONSUMER_TRUST_ROOTS, type RuntimeActivationStoppedConsumerTrustRoot, } from './runtime-activation-stopped-runtime.js';
+export interface RuntimeActivationStoppedPermitPayloadV1 {
+    schemaVersion: 1;
+    protocol: typeof PROTOCOL;
+    permitId: string;
+    keyId: string;
+    issuedAt: string;
+    expiresAt: string;
+    scope: {
+        action: 'select-verified-3.2.7-stopped-release';
+        maintenance: true;
+        killSwitch: 'healthy-engaged';
+        providerEffectsBlocked: true;
+        serviceLoaded: false;
+        serviceStart: false;
+        serviceEnable: false;
+        residentAcknowledgement: false;
+    };
+    bindings: {
+        activationId: string;
+        admissionDigest: string;
+        planDigest: string;
+        canonicalRequestSha256: string;
+        trustRootCanonicalSha256: string;
+        candidateRevision: string;
+        candidateVersion: '3.2.7';
+        rollbackRevision: string;
+        priorCurrentTarget: string;
+        priorPlistSha256: string;
+        priorServiceDisabled: boolean;
+        priorServiceLoaded: false;
+    };
+}
+export interface RuntimeActivationStoppedPermitEnvelopeV1 {
+    payload: RuntimeActivationStoppedPermitPayloadV1;
+    signature: string;
+}
+export interface RuntimeActivationStoppedPlan {
+    request: {
+        signedManifest: {
+            payload: {
+                planId: string;
+                candidate: {
+                    expectedRevision: string;
+                    packageVersion: string;
+                    releaseTag: string;
+                };
+                rollback: {
+                    expectedRevision: string;
+                };
+                execution: {
+                    homePath: string;
+                    currentPointerPath: string;
+                    releasesRoot: string;
+                    prior: {
+                        currentRevision: string | null;
+                        plistSha256: string | null;
+                        serviceLoaded: false;
+                    };
+                };
+            };
+        };
+    };
+    preflight: {
+        plan: {
+            admissionDigest: string | null;
+            planDigest: string | null;
+        };
+    };
+    canonicalRequestSha256: string;
+    trustRootCanonicalSha256: string;
+    candidateServiceDescriptor: string;
+    rollbackServiceDescriptor: string;
+}
+export interface RuntimeActivationStoppedResult {
+    activationId: string | null;
+    candidateRevision: string | null;
+    admissionDigest: string | null;
+    planDigest: string | null;
+    activated: boolean;
+    serviceStarted: false;
+    serviceEnabledChanged: false;
+    phase: 'blocked' | 'activated-stopped';
+    reason: string;
+    rollbackRestored: boolean;
+    recoveryJournalRetained: boolean;
+    recoveryJournalObserved: boolean;
+    durableOutcome: 'none' | 'restored-prior' | 'settled-candidate';
+    permitId: string | null;
+    receiptPath: string | null;
+}
+interface ActivationRecordV1 {
+    schemaVersion: 1;
+    protocol: typeof PROTOCOL;
+    kind: 'claim' | 'receipt';
+    permitId: string;
+    activationId: string;
+    admissionDigest: string;
+    planDigest: string;
+    candidateRevision: string;
+    recordDigest: string;
+}
+export declare function runtimeActivationStoppedConsumerKeyId(publicKey: KeyObject): string;
+export declare function signRuntimeActivationStoppedPermit(payload: RuntimeActivationStoppedPermitPayloadV1, privateKey: KeyObject): RuntimeActivationStoppedPermitEnvelopeV1;
+declare function parsePermit(value: unknown): RuntimeActivationStoppedPermitEnvelopeV1 | null;
+declare function verifyPermit(envelope: RuntimeActivationStoppedPermitEnvelopeV1, roots: readonly RuntimeActivationStoppedConsumerTrustRoot[], nowMs: number): string | null;
+declare function permitPath(homePath: string, activationId: string): string;
+declare function recordStore(homePath: string): ImmutablePrivateRecordStoreConfig<ActivationRecordV1>;
+declare function journalPath(homePath: string): string;
+export declare function recoverStoppedRuntimeReleaseForTransaction(homePath: string): RuntimeActivationStoppedResult | null;
+export declare function consumeStoppedRuntimeReleaseForTransaction(plan: RuntimeActivationStoppedPlan, homePath: string, revalidateAdmission: () => boolean): RuntimeActivationStoppedResult;
+export declare const runtimeActivationStoppedConsumerInternals: {
+    PROTOCOL: "runtime-activation-stopped-consumer-v1";
+    permitPath: typeof permitPath;
+    journalPath: typeof journalPath;
+    parsePermit: typeof parsePermit;
+    verifyPermit: typeof verifyPermit;
+    activityAllowsStoppedRecovery: typeof activityAllowsStoppedRecovery;
+    observeMaintenanceDefault: typeof observeMaintenanceDefault;
+    recordStore: typeof recordStore;
+};