@descryy/runtime-controller 0.3.6 → 0.3.8

package/dist/orchestration.d.ts

@@ -1,55 +0,0 @@
-/**
- * Turns a declarative `services` map (§6, RT-028) into a concrete spawn order for
- * `ExecutionController.run()` (RT-032). Pure and side-effect-free -- validated and
- * ordered before anything is spawned, so a bad reference is refused atomically
- * rather than discovered mid-sequence.
- *
- * Start order and port injection are declared, never inferred (RT-023's "ask, don't
- * guess"): a `${name.port}` reference alone doesn't create an ordering guarantee --
- * `name` must also appear in the referencing service's `dependsOn`, or validation refuses.
- */
-import type { ServiceConfiguration } from "@descryy/runtime-contracts";
-export type ServicesValidation = {
-    readonly valid: true;
-    readonly order: readonly string[];
-} | {
-    readonly valid: false;
-    readonly reason: string;
-};
-/**
- * Validates a `services` map and returns a topological spawn order. Checks, all
- * before anything is spawned: every `dependsOn` names a real key; the `dependsOn`
- * graph has no cycle; every `${name}.port` placeholder in a service's `env` has
- * `name` in that service's own `dependsOn`.
- */
-export declare function validateServicesConfiguration(services: Readonly<Record<string, ServiceConfiguration>>): ServicesValidation;
-/**
- * Replaces every `${name}.port` in `env`'s values with the resolved port for `name`.
- * Assumes `validateServicesConfiguration` already confirmed the reference. An
- * unresolvable reference is left untouched, not dropped -- a caller that skipped
- * validation sees an obviously-wrong literal instead of a silent empty substitution.
- */
-export declare function substitutePortPlaceholders(env: Readonly<Record<string, string>> | undefined, resolvedPorts: ReadonlyMap<string, number>): Record<string, string>;
-export type CommandTokenization = {
-    readonly ok: true;
-    readonly command: string;
-    readonly args: readonly string[];
-} | {
-    readonly ok: false;
-    readonly reason: string;
-};
-/**
- * POSIX-style tokenizer for `ServiceConfiguration.command`: single quotes (literal),
- * double quotes (`\` escapes `"` and `\`), backslash escapes outside quotes. Needed
- * because config carries one string (§6) but `spawnProcess` wants `command`/`args`
- * separately, and plain whitespace-split breaks paths with spaces.
- *
- * Refuses rather than guesses on an unterminated quote, trailing backslash, or
- * unquoted shell operator -- a plausible-but-wrong tokenization would disguise a
- * config error as an application failure.
- *
- * Globs and `~` pass through literally, unrefused -- exactly what happens with no
- * shell, and frequently intended literally.
- */
-export declare function tokenizeCommand(raw: string): CommandTokenization;
-//# sourceMappingURL=orchestration.d.ts.map

package/dist/orchestration.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"orchestration.d.ts","sourceRoot":"","sources":["../src/orchestration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAUvE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,GACvD,kBAAkB,CAyDpB;AAkCD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,EACjD,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACzC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACjF;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAWpD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CA6EhE"}

package/dist/orchestration.js

@@ -1,219 +0,0 @@
-/**
- * Turns a declarative `services` map (§6, RT-028) into a concrete spawn order for
- * `ExecutionController.run()` (RT-032). Pure and side-effect-free -- validated and
- * ordered before anything is spawned, so a bad reference is refused atomically
- * rather than discovered mid-sequence.
- *
- * Start order and port injection are declared, never inferred (RT-023's "ask, don't
- * guess"): a `${name.port}` reference alone doesn't create an ordering guarantee --
- * `name` must also appear in the referencing service's `dependsOn`, or validation refuses.
- */
-// Bounded at {1,256}, not `+`: RT-070's regex audit (after RT-069's ReDoS finding in
-// evidence-store/redaction.ts) flagged this exact shape -- unbounded class followed by
-// a literal (`.port}`) that can be absent -- as O(n^2) backtracking on a long
-// unterminated string. Low-risk since `service.env` is developer-authored, not
-// adversarial, but the shape matches a real same-day DoS elsewhere. 256 is far more
-// than any real name needs.
-const PORT_PLACEHOLDER = /\$\{([^}]{1,256})\.port\}/g;
-/**
- * Validates a `services` map and returns a topological spawn order. Checks, all
- * before anything is spawned: every `dependsOn` names a real key; the `dependsOn`
- * graph has no cycle; every `${name}.port` placeholder in a service's `env` has
- * `name` in that service's own `dependsOn`.
- */
-export function validateServicesConfiguration(services) {
-    const names = Object.keys(services);
-    for (const name of names) {
-        for (const dep of services[name]?.dependsOn ?? []) {
-            if (!(dep in services)) {
-                return { valid: false, reason: `service "${name}" depends on "${dep}", which is not in services` };
-            }
-        }
-    }
-    const orderResult = topologicalOrder(services, names);
-    if (!orderResult.valid) {
-        return orderResult;
-    }
-    for (const name of names) {
-        const declared = new Set(services[name]?.dependsOn ?? []);
-        for (const value of Object.values(services[name]?.env ?? {})) {
-            for (const match of value.matchAll(PORT_PLACEHOLDER)) {
-                const referenced = match[1];
-                if (referenced !== undefined && !declared.has(referenced)) {
-                    return {
-                        valid: false,
-                        reason: `service "${name}" references "\${${referenced}.port}" in env but does not declare "${referenced}" in dependsOn`,
-                    };
-                }
-            }
-        }
-    }
-    // Exactly one of `command`/`attach` per service, checked before spawning.
-    // Neither: nothing tells run() how to start it. Both: ambiguous, don't guess.
-    for (const name of names) {
-        const service = services[name];
-        const hasCommand = service?.command !== undefined;
-        const hasAttach = service?.attach !== undefined;
-        if (hasCommand === hasAttach) {
-            return {
-                valid: false,
-                reason: `service "${name}" must declare exactly one of "command" (spawn) or "attach" (attach to an already-running process), not ${hasCommand ? "both" : "neither"}`,
-            };
-        }
-    }
-    // A command that can't be tokenized is a config error -- check before spawning
-    // rather than discovering it mid-sequence with earlier services already running.
-    for (const name of names) {
-        const command = services[name]?.command;
-        if (command === undefined)
-            continue;
-        const tokenized = tokenizeCommand(command);
-        if (!tokenized.ok) {
-            return { valid: false, reason: `service "${name}": ${tokenized.reason}` };
-        }
-    }
-    return orderResult;
-}
-function topologicalOrder(services, names) {
-    const order = [];
-    const visited = new Set();
-    const visiting = new Set();
-    function visit(name) {
-        if (visited.has(name))
-            return null;
-        if (visiting.has(name))
-            return `cycle detected in dependsOn involving "${name}"`;
-        visiting.add(name);
-        for (const dep of services[name]?.dependsOn ?? []) {
-            const err = visit(dep);
-            if (err !== null)
-                return err;
-        }
-        visiting.delete(name);
-        visited.add(name);
-        order.push(name);
-        return null;
-    }
-    for (const name of names) {
-        const err = visit(name);
-        if (err !== null) {
-            return { valid: false, reason: err };
-        }
-    }
-    return { valid: true, order };
-}
-/**
- * Replaces every `${name}.port` in `env`'s values with the resolved port for `name`.
- * Assumes `validateServicesConfiguration` already confirmed the reference. An
- * unresolvable reference is left untouched, not dropped -- a caller that skipped
- * validation sees an obviously-wrong literal instead of a silent empty substitution.
- */
-export function substitutePortPlaceholders(env, resolvedPorts) {
-    const result = {};
-    for (const [key, value] of Object.entries(env ?? {})) {
-        result[key] = value.replace(PORT_PLACEHOLDER, (literal, name) => {
-            const port = resolvedPorts.get(name);
-            return port === undefined ? literal : String(port);
-        });
-    }
-    return result;
-}
-/**
- * Shell operators that only mean anything to a shell. `spawnProcess` uses
- * `child_process.spawn` without one -- no implicit shell, no injection surface. A
- * command containing these was never going to behave as written; refusing beats the
- * old whitespace-split behavior of silently passing `> out.log` as literal args to
- * `node`. `sh -c "..."` still works for anyone who wants a real shell.
- */
-const SHELL_OPERATORS = new Set(["|", "&", ";", "<", ">", "`", "$"]);
-/**
- * POSIX-style tokenizer for `ServiceConfiguration.command`: single quotes (literal),
- * double quotes (`\` escapes `"` and `\`), backslash escapes outside quotes. Needed
- * because config carries one string (§6) but `spawnProcess` wants `command`/`args`
- * separately, and plain whitespace-split breaks paths with spaces.
- *
- * Refuses rather than guesses on an unterminated quote, trailing backslash, or
- * unquoted shell operator -- a plausible-but-wrong tokenization would disguise a
- * config error as an application failure.
- *
- * Globs and `~` pass through literally, unrefused -- exactly what happens with no
- * shell, and frequently intended literally.
- */
-export function tokenizeCommand(raw) {
-    const tokens = [];
-    let current = "";
-    let started = false; // distinguishes an empty quoted token ('') from no token
-    let quote = null;
-    for (let i = 0; i < raw.length; i++) {
-        const char = raw[i];
-        if (quote === "'") {
-            if (char === "'")
-                quote = null;
-            else
-                current += char;
-            continue;
-        }
-        if (quote === '"') {
-            if (char === "\\") {
-                const next = raw[i + 1];
-                if (next === undefined)
-                    return { ok: false, reason: 'command ends with a trailing backslash inside a double-quoted string, which escapes nothing' };
-                // Only `"` and `\` are escapable in double quotes; else keep the backslash.
-                if (next === '"' || next === "\\") {
-                    current += next;
-                    i++;
-                }
-                else {
-                    current += char;
-                }
-                continue;
-            }
-            if (char === '"')
-                quote = null;
-            else
-                current += char;
-            continue;
-        }
-        if (char === "'" || char === '"') {
-            quote = char;
-            started = true;
-            continue;
-        }
-        if (char === "\\") {
-            const next = raw[i + 1];
-            if (next === undefined)
-                return { ok: false, reason: "command ends with a trailing backslash, which escapes nothing" };
-            current += next;
-            started = true;
-            i++;
-            continue;
-        }
-        if (SHELL_OPERATORS.has(char)) {
-            return {
-                ok: false,
-                reason: `command contains the shell operator "${char}" outside quotes, but processes are spawned without a shell — ` +
-                    `it would be passed to the program as a literal argument rather than interpreted. ` +
-                    `Use an explicit shell (sh -c "...") if that is what you meant.`,
-            };
-        }
-        if (/\s/.test(char)) {
-            if (started) {
-                tokens.push(current);
-                current = "";
-                started = false;
-            }
-            continue;
-        }
-        current += char;
-        started = true;
-    }
-    if (quote !== null)
-        return { ok: false, reason: `command has an unterminated ${quote === '"' ? "double" : "single"} quote` };
-    if (started)
-        tokens.push(current);
-    const [head, ...rest] = tokens;
-    if (head === undefined || head === "")
-        return { ok: false, reason: "command is empty" };
-    return { ok: true, command: head, args: rest };
-}
-//# sourceMappingURL=orchestration.js.map

package/dist/orchestration.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"orchestration.js","sourceRoot":"","sources":["../src/orchestration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,qFAAqF;AACrF,uFAAuF;AACvF,8EAA8E;AAC9E,+EAA+E;AAC/E,oFAAoF;AACpF,4BAA4B;AAC5B,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAMtD;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAwD;IAExD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;YAClD,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,IAAI,iBAAiB,GAAG,6BAA6B,EAAE,CAAC;YACrG,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACrD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC1D,OAAO;wBACL,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,YAAY,IAAI,oBAAoB,UAAU,wCAAwC,UAAU,gBAAgB;qBACzH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,8EAA8E;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC;QAClD,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC;QAChD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,YAAY,IAAI,2GAA2G,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE;aACrK,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,iFAAiF;IACjF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,IAAI,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAwD,EACxD,KAAwB;IAExB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,SAAS,KAAK,CAAC,IAAY;QACzB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,0CAA0C,IAAI,GAAG,CAAC;QACjF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAC;QAC/B,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAiD,EACjD,aAA0C;IAE1C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,IAAY,EAAE,EAAE;YACtE,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAMD;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,yDAAyD;IAC9E,IAAI,KAAK,GAAqB,IAAI,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QAErB,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,IAAI,IAAI,KAAK,GAAG;gBAAE,KAAK,GAAG,IAAI,CAAC;;gBAC1B,OAAO,IAAI,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QAED,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxB,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6FAA6F,EAAE,CAAC;gBACpJ,4EAA4E;gBAC5E,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClC,OAAO,IAAI,IAAI,CAAC;oBAChB,CAAC,EAAE,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,IAAI,CAAC;gBAClB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,GAAG;gBAAE,KAAK,GAAG,IAAI,CAAC;;gBAC1B,OAAO,IAAI,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAC;YACb,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAC;YACtH,OAAO,IAAI,IAAI,CAAC;YAChB,OAAO,GAAG,IAAI,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,wCAAwC,IAAI,gEAAgE;oBAC5G,mFAAmF;oBACnF,gEAAgE;aACnE,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,SAAS;QACX,CAAC;QAED,OAAO,IAAI,IAAI,CAAC;QAChB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC;IAC7H,IAAI,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;IAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC"}

package/dist/process-collector.d.ts

@@ -1,20 +0,0 @@
-/**
- * `ProcessCollector`: turns `ProcessLifecycleEvent` (`controller.ts`) into
- * `PROCESS_STARTED` / `PROCESS_READY` / `PROCESS_EXITED` Evidence. A plain translator
- * with no lifecycle logic of its own — `ExecutionController` decides when each
- * transition happens and calls `RunOptions.onProcessLifecycleEvent`; this collector
- * just turns that call into one `context.emit()`.
- *
- * **Wiring order is load-bearing.** `start(context)` must run before
- * `onProcessLifecycleEvent` can fire. `handleLifecycleEvent` throws rather than
- * silently dropping an event on violation — a lost PROCESS_STARTED would otherwise
- * read downstream as "never observed," a worse, quieter failure than a thrown error.
- */
-import type { Collector } from "@descryy/runtime-contracts";
-import type { ProcessLifecycleEvent } from "./controller.ts";
-export interface ProcessCollector extends Collector {
-    /** Wire as `RunOptions.onProcessLifecycleEvent` — see the module doc for the ordering this depends on. */
-    handleLifecycleEvent(event: ProcessLifecycleEvent): void;
-}
-export declare function createProcessCollector(): ProcessCollector;
-//# sourceMappingURL=process-collector.d.ts.map

package/dist/process-collector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-collector.d.ts","sourceRoot":"","sources":["../src/process-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmF,MAAM,4BAA4B,CAAC;AAC7I,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG7D,MAAM,WAAW,gBAAiB,SAAQ,SAAS;IACjD,0GAA0G;IAC1G,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC1D;AA6DD,wBAAgB,sBAAsB,IAAI,gBAAgB,CAoDzD"}

package/dist/process-collector.js

@@ -1,116 +0,0 @@
-/**
- * `ProcessCollector`: turns `ProcessLifecycleEvent` (`controller.ts`) into
- * `PROCESS_STARTED` / `PROCESS_READY` / `PROCESS_EXITED` Evidence. A plain translator
- * with no lifecycle logic of its own — `ExecutionController` decides when each
- * transition happens and calls `RunOptions.onProcessLifecycleEvent`; this collector
- * just turns that call into one `context.emit()`.
- *
- * **Wiring order is load-bearing.** `start(context)` must run before
- * `onProcessLifecycleEvent` can fire. `handleLifecycleEvent` throws rather than
- * silently dropping an event on violation — a lost PROCESS_STARTED would otherwise
- * read downstream as "never observed," a worse, quieter failure than a thrown error.
- */
-import { COLLECTOR_VERSION } from "./collector-version.js";
-// None of `CollectorCapabilities`' fields is "process lifecycle observation" — the
-// one thing this collector does. Reported `unavailable` on the others with an honest
-// reason rather than inventing a field outside this lane's boundary (`contracts`).
-// This collector doing its job while capabilities() shows all-unavailable is a
-// disclosed gap in the capability model, not a bug here.
-function computeCapabilities() {
-    const reason = "ProcessCollector observes process lifecycle (started/ready/exited) only — the capability model has no field for that yet.";
-    const status = { availability: "unavailable", reason };
-    return {
-        domObservation: status,
-        consoleObservation: status,
-        networkObservation: status,
-        backendLogAccess: status,
-        distributedTrace: status,
-        sourceMapping: status,
-        stackCapture: status,
-        processLifecycle: { availability: "available", reason: null },
-        databaseObservation: status,
-        externalServiceObservation: status,
-    };
-}
-function eventTypeOf(kind) {
-    switch (kind) {
-        case "process-started":
-            return "PROCESS_STARTED";
-        case "process-ready":
-        case "process-ready-failed":
-            return "PROCESS_READY";
-        case "process-exited":
-            return "PROCESS_EXITED";
-    }
-}
-// `process-ready-failed` still emits `PROCESS_READY` — no separate vocabulary type,
-// and adding one here is the wrong layer. `payload.ready: false` plus the full
-// `ReadinessResult` lets a reader distinguish success from failure via payload, not
-// event type (same shape as `ServiceStartResult`'s `succeeded` + `stage`).
-function payloadOf(event) {
-    switch (event.kind) {
-        case "process-started":
-            return { processId: event.handle.processId, serviceName: event.serviceName, pid: event.handle.pid, command: event.handle.command, startedAt: event.handle.startedAt };
-        case "process-ready":
-        case "process-ready-failed":
-            return { processId: event.handle.processId, serviceName: event.serviceName, ready: event.readiness.ready, readiness: event.readiness };
-        case "process-exited":
-            // `phase` distinguishes "crashed on boot" from "finished/stopped after
-            // running" — see `ProcessLifecycleEvent` in controller.ts.
-            return {
-                processId: event.handle.processId,
-                serviceName: event.serviceName,
-                exitCode: event.handle.exitCode,
-                signal: event.handle.signal,
-                exitedAt: event.handle.exitedAt,
-                phase: event.phase,
-            };
-    }
-}
-export function createProcessCollector() {
-    const capabilities = computeCapabilities();
-    let context = null;
-    return {
-        collectorId: "process-collector",
-        start(ctx) {
-            context = ctx;
-            return Promise.resolve({ available: true });
-        },
-        stop() {
-            // Idempotent per the Collector contract; nothing to release -- owns
-            // only a reference to the emit context, no process/socket/file handle.
-            context = null;
-            return Promise.resolve();
-        },
-        capabilities() {
-            return capabilities;
-        },
-        handleLifecycleEvent(event) {
-            if (context === null) {
-                throw new Error(`ProcessCollector.handleLifecycleEvent("${event.kind}") called before start() — ` +
-                    `wire handleLifecycleEvent as RunOptions.onProcessLifecycleEvent only after start() has resolved, ` +
-                    `or this event (and everything downstream of it) is silently unobserved rather than loudly wrong.`);
-            }
-            context.emit({
-                timestamp: new Date().toISOString(),
-                source: event.kind === "process-exited" ? "process-exit" : "backend-process",
-                service: event.serviceName,
-                process: event.handle.processId,
-                eventType: eventTypeOf(event.kind),
-                payload: payloadOf(event),
-                traceId: null,
-                requestId: null,
-                correlationId: null,
-                graphNodeId: null,
-                sourceLocation: null,
-                stackTrace: null,
-                // Direct observation of our own orchestration state, never inferred --
-                // same basis as LogCollector's verbatim-capture confidence of 1.
-                confidence: 1,
-                redactionStatus: "pending-redaction",
-                collectorVersion: COLLECTOR_VERSION,
-            });
-        },
-    };
-}
-//# sourceMappingURL=process-collector.js.map

package/dist/process-collector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-collector.js","sourceRoot":"","sources":["../src/process-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAO3D,mFAAmF;AACnF,qFAAqF;AACrF,mFAAmF;AACnF,+EAA+E;AAC/E,yDAAyD;AACzD,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,2HAA2H,CAAC;IAC3I,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,aAAsB,EAAE,MAAM,EAAE,CAAC;IAChE,OAAO;QACL,cAAc,EAAE,MAAM;QACtB,kBAAkB,EAAE,MAAM;QAC1B,kBAAkB,EAAE,MAAM;QAC1B,gBAAgB,EAAE,MAAM;QACxB,gBAAgB,EAAE,MAAM;QACxB,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;QAC7D,mBAAmB,EAAE,MAAM;QAC3B,0BAA0B,EAAE,MAAM;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAmC;IACtD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,eAAe,CAAC;QACrB,KAAK,sBAAsB;YACzB,OAAO,eAAe,CAAC;QACzB,KAAK,gBAAgB;YACnB,OAAO,gBAAgB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,+EAA+E;AAC/E,oFAAoF;AACpF,2EAA2E;AAC3E,SAAS,SAAS,CAAC,KAA4B;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iBAAiB;YACpB,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACxK,KAAK,eAAe,CAAC;QACrB,KAAK,sBAAsB;YACzB,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACzI,KAAK,gBAAgB;YACnB,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO;gBACL,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;gBACjC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC3B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAC3C,IAAI,OAAO,GAA4B,IAAI,CAAC;IAE5C,OAAO;QACL,WAAW,EAAE,mBAAmB;QAEhC,KAAK,CAAC,GAAqB;YACzB,OAAO,GAAG,GAAG,CAAC;YACd,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI;YACF,oEAAoE;YACpE,uEAAuE;YACvE,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,YAAY;YACV,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,oBAAoB,CAAC,KAA4B;YAC/C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,0CAA0C,KAAK,CAAC,IAAI,6BAA6B;oBAC/E,mGAAmG;oBACnG,kGAAkG,CACrG,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,iBAAiB;gBAC5E,OAAO,EAAE,KAAK,CAAC,WAAW;gBAC1B,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;gBAC/B,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;gBAClC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC;gBACzB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,IAAI;gBAChB,uEAAuE;gBACvE,iEAAiE;gBACjE,UAAU,EAAE,CAAC;gBACb,eAAe,EAAE,mBAAmB;gBACpC,gBAAgB,EAAE,iBAAiB;aACpC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/process-identity.d.ts

@@ -1,46 +0,0 @@
-/**
- * RT-024's named hole, closed for the two mechanisms that can carry it:
- * "none of readiness's five mechanisms confirm the listener is THIS run's
- * process -- a stale listener from a dead run satisfies http/tcp-port
- * identically." Ephemeral-by-default (`allocateEphemeralPort`) closes the
- * common case by construction; this closes the fixed-port case by
- * detection, for real, via `/proc` -- not a heuristic guess.
- *
- * **Mechanism.** A TCP listening socket on Linux is a row in `/proc/net/tcp`
- * (or `/proc/net/tcp6`) carrying an inode; a process's open file descriptors
- * are symlinks under `/proc/<pid>/fd/*` named `socket:[<inode>]` when that fd
- * is a socket. If the expected pid's fd table holds a socket whose inode
- * matches a LISTEN row for the target port, that pid really does own the
- * listener -- not a name-based guess, a kernel-backed fact.
- *
- * **Scope, disclosed rather than silently narrowed.** Linux only (`/proc`
- * doesn't exist elsewhere) and only for a process in the same pid namespace
- * as this one -- true for every spawn this repo produces today: a direct
- * spawn, and a bwrap-wrapped one (bwrap execs into the target without
- * `--unshare-pid`, so `child.pid` names the real process, not a wrapper).
- * **Not true for `sandboxBackend: "container"`** -- a published Docker port
- * is commonly owned by a host-side `docker-proxy` process, not the pid this
- * module would be asked to verify, so a mismatch there would be a false
- * positive. Callers must not invoke this for the container backend; See
- * `controller.ts`'s call site, which guards on exactly that condition.
- * Anything this function cannot determine returns `"unsupported"`, never a
- * fabricated "verified" or a false "mismatch".
- *
- * **The spawned pid, or any of its descendants.** A launcher that forks the
- * real server is the ordinary case: `sh -c "..."`, `npm run dev`, `dotnet run`
- * (which builds and then runs the app as its child). The pid this run holds is
- * the launcher's, and the listener belongs to a process under it — still this
- * run's own process tree, which is exactly the property RT-024 asked for. The
- * tree is walked from `/proc/<pid>/stat`'s parent-pid field, a kernel fact like
- * the fd table, and a decoy outside that tree is refused exactly as before.
- * Checking the spawned pid alone made every forking launcher time out at
- * readiness (every .NET managed-lifecycle test, found at release integration).
- */
-export type IdentityVerification = "verified" | "mismatch" | "unsupported";
-/**
- * Does `expectedPid` -- or a process descended from it -- own the socket
- * listening on `port`, on this host, right now? A real kernel-state check, not
- * a guess -- see module header for the mechanism and its disclosed scope.
- */
-export declare function verifyListeningSocketOwner(port: number, expectedPid: number): IdentityVerification;
-//# sourceMappingURL=process-identity.d.ts.map

package/dist/process-identity.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-identity.d.ts","sourceRoot":"","sources":["../src/process-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAIH,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;AAgH3E;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,oBAAoB,CAqBlG"}