@descryy/runtime-orchestrator 0.3.0 → 0.4.1

package/dist/profile-backend-observation.js

@@ -2,45 +2,28 @@
  * Profile-driven backend traffic observation (RT-197, DEC-271).
  *
  * `InboundProxy` (RT-192) is wired into `runInstrumentedExecution` via
- * `frontWithInboundProxy` — the **local, Descry-booted** half of DEC-271.
- * The other half, `@descryy/runtime-remote-log-ingestion`, existed with real
- * tests (`correlator.test.ts`, `file-log-adapter.test.ts`) and **zero
- * callers outside its own package** — the same "built, never wired" shape
- * DEC-270 found for `safety-gate.ts`'s `evaluateAction`. This module is
- * that missing wiring, and the decision point DEC-271's own table
- * describes: given an `EnvironmentProfile`, decide which of the two
- * mechanisms applies, and never both.
+ * `frontWithInboundProxy` — the local, Descry-booted half of DEC-271. This module is
+ * the other half: given an `EnvironmentProfile`, decide which of the two mechanisms
+ * (inbound proxy vs. `@descryy/runtime-remote-log-ingestion`) applies, never both.
  *
- * **The mutual-exclusivity guarantee is structural, not asserted.** This
- * file does not import `createInboundProxy` — nothing in it, in any branch,
- * is capable of constructing a proxy. A profile whose `mode` is `"remote"`
- * or `"production"` can only ever reach `ingestFileLog`; a profile whose
- * mode is `"localBooted"` is refused here with a `validationError` before
- * any ingestion is attempted, on the grounds that DEC-271 names no
- * ingestion mechanism for a profile Descry itself booted (that profile's
- * proxy path is `runInstrumentedExecution`'s `frontWithInboundProxy`,
- * driven by `ExecutionConfiguration`, not by this function).
+ * **Mutual exclusivity is structural, not asserted** — this file never imports
+ * `createInboundProxy`, so nothing here can construct a proxy. `"localBooted"` is
+ * refused with a `validationError`: DEC-271 names no ingestion mechanism for a
+ * profile Descry itself booted (its proxy path is `frontWithInboundProxy`, not this
+ * function).
  *
- * `"localAttached"` is refused the same way, for a different reason,
- * disclosed rather than guessed at: DEC-271's own table names exactly two
- * rows — "local, booted" and "remote (staging/preview) and production" —
- * and says nothing about the third and fourth of DEC-266's four kinds.
- * Local-attached is not remote infra (a proxy is not structurally
- * forbidden the way it is for a target Descry does not own), but it is
- * also not a process Descry started (so `runInstrumentedExecution`'s
- * readiness-then-front sequencing, which RT-024 depends on, does not
- * apply). Inventing an answer for a case the decision text does not cover
- * would be exactly the guess DEC-266/DEC-271 both reject; this function
- * says so and refuses instead.
+ * `"localAttached"` is refused too, disclosed rather than guessed: DEC-271's table
+ * covers only "local, booted" and "remote/production", not `"localAttached"`
+ * (RT-024's readiness-then-front sequencing doesn't apply to a process Descry didn't
+ * start). Inventing an answer here would be the guess DEC-266/DEC-271 both reject.
  */
 import { EvidenceStore } from "@descryy/runtime-evidence-store";
 import { ingestFileLog } from "@descryy/runtime-remote-log-ingestion";
 import { COLLECTOR_VERSION } from "./collector-version.js";
 /**
- * Pure decision function — DEC-271's table read directly off
- * `EnvironmentProfile.mode`. Never reaches the network or the filesystem;
- * see `runRemoteLogObservation` below for the mechanism that actually
- * performs ingestion.
+ * Pure decision function — DEC-271's table read off `EnvironmentProfile.mode`.
+ * Never touches network or filesystem; `runRemoteLogObservation` below does the
+ * actual ingestion.
  */
 export function backendObservationMechanismFor(profile) {
     if (profile.mode === "localBooted") {
@@ -55,31 +38,22 @@ export function backendObservationMechanismFor(profile) {
         }
         return { kind: "remoteLogIngestion", config: profile.remoteLogSource };
     }
-    // mode === "localAttached" -- see this file's header for why this is a
-    // disclosed gap rather than a guessed answer.
+    // localAttached: disclosed gap, see file header.
     return {
         kind: "none",
         reason: `profile "${profile.name}" is mode "localAttached" -- DEC-271 names a mechanism for neither local-attached nor any third case; not guessed at here.`,
     };
 }
 /**
- * The remote/production half of DEC-271, run against one profile's
- * declared `remoteLogSource`. Reads the source **once** (today's only
- * concrete adapter, `ingestFileLog`, is one-shot per its own doc — see
- * `file-log-adapter.ts`) and writes every line through `EvidenceStore` as
- * `BACKEND_LOG` evidence, so redaction runs (plan §28) exactly the same
- * way it does for `LogCollector`'s local-process output.
+ * The remote/production half of DEC-271. Reads the profile's `remoteLogSource`
+ * **once** (`ingestFileLog` is one-shot, see `file-log-adapter.ts`) and writes each
+ * line through `EvidenceStore` as `BACKEND_LOG`, so redaction runs the same as it
+ * does for `LogCollector`'s local-process output.
  *
- * **Refuses rather than guesses** in three cases, each reported as a
- * `validationError` rather than a silently empty result:
- * 1. `profile.mode` is not `"remote"`/`"production"` (see this file's own
- *    header for the disclosed local-attached gap).
- * 2. no `remoteLogSource` is declared (DEC-271's "not observable here").
- * 3. `remoteLogSource.location.kind` is not `"file"` — the only concrete
- *    adapter this pass has; `"command"`/`"url"` are named-and-typed but
- *    unbuilt, per `log-source-config.ts`'s own doc.
- *
- * **Never constructs `InboundProxy`.** This file does not import it.
+ * Refuses (via `validationError`, never silently empty) when: mode isn't
+ * remote/production; no `remoteLogSource` declared; or `location.kind` isn't
+ * `"file"` — the only built adapter (`"command"`/`"url"` are typed but unbuilt, see
+ * `log-source-config.ts`). Never constructs `InboundProxy` — not imported here.
  */
 export async function runRemoteLogObservation(input) {
     const { profile, executionId, store } = input;
@@ -122,11 +96,8 @@ export async function runRemoteLogObservation(input) {
             graphNodeId: null,
             sourceLocation: null,
             stackTrace: null,
-            // The observation itself (a line the target already logged) is not
-            // probabilistic -- same reasoning LogCollector's own emit gives
-            // for confidence: 1. Whether a LATER correlation to a captured
-            // request holds is a separate, lower-confidence question
-            // (`correlateLogLine`'s own confidence tiers), not this field's.
+            // the line itself isn't probabilistic; a later correlation to a captured
+            // request is a separate, lower-confidence question (correlateLogLine's tiers)
             confidence: 1,
             collectorVersion: COLLECTOR_VERSION,
         }));

package/dist/profile-backend-observation.js.map

@@ -1 +1 @@
-{"version":3,"file":"profile-backend-observation.js","sourceRoot":"","sources":["../src/profile-backend-observation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAwD,MAAM,uCAAuC,CAAC;AAE5H,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAc3D;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAA2B;IACxE,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;YACpC,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,YAAY,OAAO,CAAC,IAAI,cAAc,OAAO,CAAC,IAAI,4FAA4F;aACvJ,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;IACzE,CAAC;IACD,uEAAuE;IACvE,8CAA8C;IAC9C,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,YAAY,OAAO,CAAC,IAAI,4HAA4H;KAC7J,CAAC;AACJ,CAAC;AAeD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAmC;IAC/E,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,SAAS,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAE1D,IAAI,SAAS,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC5C,MAAM,MAAM,GACV,SAAS,CAAC,IAAI,KAAK,MAAM;YACvB,CAAC,CAAC,SAAS,CAAC,MAAM;YAClB,CAAC,CAAC,YAAY,OAAO,CAAC,IAAI,4BAA4B,SAAS,CAAC,IAAI,4IAA4I,CAAC;QACrN,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,eAAe,EAAE,kCAAkC,MAAM,CAAC,QAAQ,CAAC,IAAI,kHAAkH;SAC1L,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAwB,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAEjF,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,4CAA4C,OAAO,CAAC,IAAI,MAAM,MAAM,EAAE,EAAE,CAAC;IACnH,CAAC;IAED,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CACX,KAAK,CAAC,KAAK,CAAC;YACV,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrD,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,aAAa;YACxB,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YACtF,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,mEAAmE;YACnE,gEAAgE;YAChE,+DAA+D;YAC/D,yDAAyD;YACzD,iEAAiE;YACjE,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"profile-backend-observation.js","sourceRoot":"","sources":["../src/profile-backend-observation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAwD,MAAM,uCAAuC,CAAC;AAE5H,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAY3D;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAA2B;IACxE,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;YACpC,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,YAAY,OAAO,CAAC,IAAI,cAAc,OAAO,CAAC,IAAI,4FAA4F;aACvJ,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;IACzE,CAAC;IACD,iDAAiD;IACjD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,YAAY,OAAO,CAAC,IAAI,4HAA4H;KAC7J,CAAC;AACJ,CAAC;AAeD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAmC;IAC/E,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,SAAS,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAE1D,IAAI,SAAS,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC5C,MAAM,MAAM,GACV,SAAS,CAAC,IAAI,KAAK,MAAM;YACvB,CAAC,CAAC,SAAS,CAAC,MAAM;YAClB,CAAC,CAAC,YAAY,OAAO,CAAC,IAAI,4BAA4B,SAAS,CAAC,IAAI,4IAA4I,CAAC;QACrN,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,eAAe,EAAE,kCAAkC,MAAM,CAAC,QAAQ,CAAC,IAAI,kHAAkH;SAC1L,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAwB,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAEjF,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,4CAA4C,OAAO,CAAC,IAAI,MAAM,MAAM,EAAE,EAAE,CAAC;IACnH,CAAC;IAED,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CACX,KAAK,CAAC,KAAK,CAAC;YACV,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrD,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,aAAa;YACxB,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YACtF,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,yEAAyE;YACzE,8EAA8E;YAC9E,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC"}

package/dist/respawn-and-supervise.d.ts

@@ -1,54 +1,34 @@
 /**
- * Respawn-and-supervise: a real, separate execution mode next to attach
- * mode, not a change to attach mode itself.
+ * Respawn-and-supervise: a separate execution mode next to attach mode, not a
+ * change to attach mode itself.
  *
- * **The tradeoff this makes, stated up front, because it must never be
- * applied silently.** Attach mode (`attach-to-running-process.ts` and its
- * siblings) reaches a process that was already running, unconfined, before
- * Descry touched it -- `sandbox.ts`'s own module doc (`@descryhq-wq/runtime-
- * controller`) says plainly there is no honest way to retroactively contain
- * that process. This module does not try. It kills the attached target and
- * spawns a fresh, equivalent process through the EXISTING `spawnProcess()`
- * (`@descryy/runtime-controller`), which already gets full sandboxing
- * (`applySandbox`, `applyResourceLimits`) for anything it spawns -- the same
- * mechanism `ExecutionController.run()` uses, not a parallel one. The price
- * is real: in-memory state, open connections, anything the old process held
- * that was never persisted is gone the moment it is killed. A caller must
- * choose this explicitly; nothing in this repo switches a running attach
- * into a respawn on its own.
+ * **The tradeoff, stated up front — must never apply silently.** Attach mode
+ * reaches an already-running, unconfined process; there is no honest way to
+ * retroactively sandbox it (`sandbox.ts`). This module doesn't try — it kills the
+ * attached target and spawns a fresh equivalent via the existing `spawnProcess()`,
+ * which gets full sandboxing for anything it spawns. Price: in-memory state, open
+ * connections, anything unpersisted is gone the moment the old process is killed.
+ * A caller must choose this explicitly — nothing upgrades an attach into a respawn
+ * on its own.
  *
- * **How this module learns what to respawn -- the design question this
- * lane was told not to guess past.** This repo has a standing, named
- * precedent for exactly this shape of question: RT-032 ("declared, never
- * inferred" -- `ServiceConfiguration.dependsOn`, `substitutePortPlaceholders`,
- * `discoverRunner`'s refusal to sniff a test framework from `package.json`).
- * The caller-declared path (`RespawnCommand` with `source: "caller-declared"`)
- * is the one this module recommends and the only one its own convenience
- * default reaches for. A `/proc/<pid>/cmdline` readback (Linux-only, and
- * genuinely insufficient on its own -- it cannot recover env vars set
- * programmatically before `exec`, file descriptors already open and handed
- * off, or a cwd that changed after launch) is real, but explicitly a
- * best-effort convenience, never the default: `inferRespawnCommandFromProc`
- * exists, is opt-in, and labels its own output `source: "proc-cmdline-
- * inferred"` so nothing downstream can mistake an inference for a
- * declaration. The two are never blurred into one shape.
+ * **How this learns what to respawn.** Follows RT-032's "declared, never inferred"
+ * precedent: caller-declared (`source: "caller-declared"`) is the recommended,
+ * default path. `/proc/<pid>/cmdline` readback is a real but best-effort,
+ * opt-in-only fallback (`inferRespawnCommandFromProc`), labelled `source:
+ * "proc-cmdline-inferred"` so it's never mistaken for a declaration.
  *
- * **Killing the old process.** `respawnAndSupervise` does not assume it owns
- * the target's process group -- an attached-to process was not spawned by
- * this runtime and may not even be its own group leader, so this signals
- * the individual pid only (SIGTERM, then SIGKILL after `gracePeriodMs` if
- * still alive), mirroring `process-manager.ts`'s own two-stage `kill()`
- * without reusing its group-kill (`signalGroup`), which is `spawnProcess`'s
- * own escape hatch for a group *it* created.
+ * **Killing the old process.** Doesn't assume ownership of the target's process
+ * group — it may not even be its own group leader — so this signals the individual
+ * pid only (SIGTERM, then SIGKILL after `gracePeriodMs`), not `spawnProcess`'s
+ * group-kill escape hatch (`signalGroup`), which is only valid for a group it
+ * created itself.
  */
 import { type ManagedProcess, type SpawnProcessOptions } from "@descryy/runtime-controller";
 export type RespawnCommandSource = "caller-declared" | "proc-cmdline-inferred";
 /**
- * Everything `spawnProcess` needs to relaunch an equivalent of the killed
- * target, plus `source` -- the one field that is never optional, so a
- * caller (and anything logging or auditing this decision later) can always
- * tell a real declaration from a best-effort guess at a glance, never by
- * inspecting provenance out of band.
+ * Everything `spawnProcess` needs to relaunch the killed target, plus `source`
+ * (never optional) so a real declaration is always distinguishable from a
+ * best-effort guess.
  */
 export interface RespawnCommand {
     readonly command: string;
@@ -61,7 +41,7 @@ export interface RespawnAndSuperviseOptions {
     readonly processId: string;
     /** The pid of the already-running, attached-to target. Verified alive before anything is killed. */
     readonly targetPid: number;
-    /** How the replacement process is launched. See this module's own doc for why `source: "caller-declared"` is the recommended, default-reachable path. */
+    /** How the replacement process is launched. See file header: `source: "caller-declared"` is the recommended path. */
     readonly respawn: RespawnCommand;
     /** How long to wait for the old target to exit after SIGTERM before escalating to SIGKILL. Same default as `ManagedProcess.kill()`. */
     readonly gracePeriodMs?: number;
@@ -72,7 +52,7 @@ export interface RespawnAndSuperviseOptions {
     readonly networkPolicy?: SpawnProcessOptions["networkPolicy"];
 }
 export interface RespawnAndSuperviseResult {
-    /** The freshly spawned, fully-supervised (and, if declared, sandboxed) replacement -- everything `spawnProcess()` itself returns, unwrapped. */
+    /** The freshly spawned, supervised (sandboxed if declared) replacement — `spawnProcess()`'s own return, unwrapped. */
     readonly managedProcess: ManagedProcess;
     readonly killedPid: number;
     /** Whether the old target was observed to exit within `gracePeriodMs` of SIGTERM, or needed SIGKILL. Either way this does not return until the old pid is confirmed dead. */
@@ -81,39 +61,26 @@ export interface RespawnAndSuperviseResult {
 }
 /**
  * Kills the process at `options.targetPid` and spawns a fresh, supervised,
- * (optionally) sandboxed replacement via `spawnProcess()`.
+ * optionally sandboxed replacement via `spawnProcess()`.
  *
- * **Not a silent behavior change to attach mode.** A caller reaches this
- * function by name, explicitly, instead of one of the `attachToRunning*`
- * functions -- there is no code path in this repo that upgrades an attach
- * into a respawn on its own. `ATTACH_MODE_SCOPE_DISCLOSURE`
- * (`@descryy/runtime-controller`) still governs attach mode itself,
- * unconditionally, whether or not a caller ever reaches for this
- * alternative.
+ * Not a silent behavior change to attach mode — reached only by explicit call,
+ * never an automatic upgrade path. `ATTACH_MODE_SCOPE_DISCLOSURE` still governs
+ * attach mode itself regardless.
  *
- * Throws (does not silently proceed) if `targetPid` is not alive at call
- * time, matching `attachToRunningProcess`'s own "refuse rather than operate
- * on a target that does not exist" contract.
+ * Throws if `targetPid` isn't alive at call time, matching `attachToRunningProcess`'s
+ * refuse-rather-than-operate-on-nonexistent-target contract.
  */
 export declare function respawnAndSupervise(options: RespawnAndSuperviseOptions): Promise<RespawnAndSuperviseResult>;
 /**
- * The opt-in, disclosed, BEST-EFFORT convenience this module's own doc
- * names -- never the default `respawnAndSupervise` reaches for on its own.
- * Reads `/proc/<pid>/cmdline`, `/proc/<pid>/cwd` and `/proc/<pid>/environ`
- * to reconstruct a `RespawnCommand`, labelling it `source:
- * "proc-cmdline-inferred"` so it can never be mistaken for a caller
- * declaration downstream.
+ * Opt-in, best-effort convenience — never the default. Reads `/proc/<pid>/cmdline`,
+ * `/cwd` and `/environ` to reconstruct a `RespawnCommand`, labelled `source:
+ * "proc-cmdline-inferred"` so it's never mistaken for a caller declaration.
  *
- * **Real, disclosed limitations, not hypothetical ones:** Linux-only (no
- * `/proc` on macOS/Windows); env vars a process set on itself
- * programmatically after `exec` (as opposed to what it was launched with)
- * are invisible here, because `/proc/<pid>/environ` only ever reflects the
- * environment at `execve()` time; already-open file descriptors handed to
- * the original process (an inherited socket, a pipe from its own parent)
- * have no representation in a command line at all and cannot be recovered
- * by any means this function has. Returns `null` -- never throws, never
- * guesses a partial answer -- when `/proc/<pid>/cmdline` cannot be read
- * (platform mismatch, pid gone, permission denied) or is empty.
+ * Disclosed limitations: Linux-only; `/proc/<pid>/environ` reflects only the
+ * environment at `execve()` time, so env vars set programmatically after exec are
+ * invisible; already-open file descriptors (inherited sockets/pipes) have no
+ * command-line representation and can't be recovered. Returns `null` — never
+ * throws, never guesses partially — when cmdline can't be read or is empty.
  */
 export declare function inferRespawnCommandFromProc(pid: number, platform?: NodeJS.Platform): RespawnCommand | null;
 //# sourceMappingURL=respawn-and-supervise.d.ts.map

package/dist/respawn-and-supervise.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"respawn-and-supervise.d.ts","sourceRoot":"","sources":["../src/respawn-and-supervise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAgB,KAAK,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAI1G,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,GAAG,uBAAuB,CAAC;AAE/E;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;CACvC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oGAAoG;IACpG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yJAAyJ;IACzJ,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,uIAAuI;IACvI,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IACpE,QAAQ,CAAC,aAAa,CAAC,EAAE,mBAAmB,CAAC,eAAe,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,yBAAyB;IACxC,gJAAgJ;IAChJ,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6KAA6K;IAC7K,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;CAC9C;AAyDD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA6BjH;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,cAAc,GAAG,IAAI,CAgD5H"}
+{"version":3,"file":"respawn-and-supervise.d.ts","sourceRoot":"","sources":["../src/respawn-and-supervise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAgB,KAAK,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAI1G,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,GAAG,uBAAuB,CAAC;AAE/E;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;CACvC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oGAAoG;IACpG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qHAAqH;IACrH,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,uIAAuI;IACvI,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IACpE,QAAQ,CAAC,aAAa,CAAC,EAAE,mBAAmB,CAAC,eAAe,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,yBAAyB;IACxC,sHAAsH;IACtH,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6KAA6K;IAC7K,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;CAC9C;AAmDD;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA6BjH;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,cAAc,GAAG,IAAI,CA4C5H"}

package/dist/respawn-and-supervise.js

@@ -1,45 +1,27 @@
 /**
- * Respawn-and-supervise: a real, separate execution mode next to attach
- * mode, not a change to attach mode itself.
+ * Respawn-and-supervise: a separate execution mode next to attach mode, not a
+ * change to attach mode itself.
  *
- * **The tradeoff this makes, stated up front, because it must never be
- * applied silently.** Attach mode (`attach-to-running-process.ts` and its
- * siblings) reaches a process that was already running, unconfined, before
- * Descry touched it -- `sandbox.ts`'s own module doc (`@descryhq-wq/runtime-
- * controller`) says plainly there is no honest way to retroactively contain
- * that process. This module does not try. It kills the attached target and
- * spawns a fresh, equivalent process through the EXISTING `spawnProcess()`
- * (`@descryy/runtime-controller`), which already gets full sandboxing
- * (`applySandbox`, `applyResourceLimits`) for anything it spawns -- the same
- * mechanism `ExecutionController.run()` uses, not a parallel one. The price
- * is real: in-memory state, open connections, anything the old process held
- * that was never persisted is gone the moment it is killed. A caller must
- * choose this explicitly; nothing in this repo switches a running attach
- * into a respawn on its own.
+ * **The tradeoff, stated up front — must never apply silently.** Attach mode
+ * reaches an already-running, unconfined process; there is no honest way to
+ * retroactively sandbox it (`sandbox.ts`). This module doesn't try — it kills the
+ * attached target and spawns a fresh equivalent via the existing `spawnProcess()`,
+ * which gets full sandboxing for anything it spawns. Price: in-memory state, open
+ * connections, anything unpersisted is gone the moment the old process is killed.
+ * A caller must choose this explicitly — nothing upgrades an attach into a respawn
+ * on its own.
  *
- * **How this module learns what to respawn -- the design question this
- * lane was told not to guess past.** This repo has a standing, named
- * precedent for exactly this shape of question: RT-032 ("declared, never
- * inferred" -- `ServiceConfiguration.dependsOn`, `substitutePortPlaceholders`,
- * `discoverRunner`'s refusal to sniff a test framework from `package.json`).
- * The caller-declared path (`RespawnCommand` with `source: "caller-declared"`)
- * is the one this module recommends and the only one its own convenience
- * default reaches for. A `/proc/<pid>/cmdline` readback (Linux-only, and
- * genuinely insufficient on its own -- it cannot recover env vars set
- * programmatically before `exec`, file descriptors already open and handed
- * off, or a cwd that changed after launch) is real, but explicitly a
- * best-effort convenience, never the default: `inferRespawnCommandFromProc`
- * exists, is opt-in, and labels its own output `source: "proc-cmdline-
- * inferred"` so nothing downstream can mistake an inference for a
- * declaration. The two are never blurred into one shape.
+ * **How this learns what to respawn.** Follows RT-032's "declared, never inferred"
+ * precedent: caller-declared (`source: "caller-declared"`) is the recommended,
+ * default path. `/proc/<pid>/cmdline` readback is a real but best-effort,
+ * opt-in-only fallback (`inferRespawnCommandFromProc`), labelled `source:
+ * "proc-cmdline-inferred"` so it's never mistaken for a declaration.
  *
- * **Killing the old process.** `respawnAndSupervise` does not assume it owns
- * the target's process group -- an attached-to process was not spawned by
- * this runtime and may not even be its own group leader, so this signals
- * the individual pid only (SIGTERM, then SIGKILL after `gracePeriodMs` if
- * still alive), mirroring `process-manager.ts`'s own two-stage `kill()`
- * without reusing its group-kill (`signalGroup`), which is `spawnProcess`'s
- * own escape hatch for a group *it* created.
+ * **Killing the old process.** Doesn't assume ownership of the target's process
+ * group — it may not even be its own group leader — so this signals the individual
+ * pid only (SIGTERM, then SIGKILL after `gracePeriodMs`), not `spawnProcess`'s
+ * group-kill escape hatch (`signalGroup`), which is only valid for a group it
+ * created itself.
  */
 import { spawnProcess } from "@descryy/runtime-controller";
 import { readFileSync, readlinkSync } from "node:fs";
@@ -62,14 +44,10 @@ async function waitForDeath(pid, deadlineMs) {
     return !isProcessAlive(pid);
 }
 /**
- * Kills `pid` directly (not its process group -- see this module's own doc
- * for why), escalating from SIGTERM to SIGKILL after `gracePeriodMs`.
- * Resolves once the pid is confirmed dead, or throws if it survives even
- * SIGKILL (a defunct-but-unreapable zombie owned by another process tree,
- * or a permission boundary this caller's uid cannot cross) -- refusing to
- * report success it did not actually observe, the same discipline
- * `ManagedProcess.kill()` already holds for processes this runtime spawned
- * itself.
+ * Kills `pid` directly (not its process group, see file header), escalating
+ * SIGTERM to SIGKILL after `gracePeriodMs`. Throws if it survives even SIGKILL
+ * (unreapable zombie, or a permission boundary) rather than reporting an unobserved
+ * success.
  */
 async function killTarget(pid, gracePeriodMs) {
     if (!isProcessAlive(pid))
@@ -78,9 +56,7 @@ async function killTarget(pid, gracePeriodMs) {
         process.kill(pid, "SIGTERM");
     }
     catch {
-        // Already gone between the isProcessAlive check and this signal -- a
-        // real, if narrow, race; fall through to the death check below rather
-        // than treating a caught error here as failure.
+        // race: already gone between the isProcessAlive check and this signal
     }
     if (await waitForDeath(pid, gracePeriodMs))
         return { killedViaSigkill: false };
@@ -88,7 +64,7 @@ async function killTarget(pid, gracePeriodMs) {
         process.kill(pid, "SIGKILL");
     }
     catch {
-        // Same race, at the SIGKILL stage.
+        // same race, at the SIGKILL stage
     }
     const dead = await waitForDeath(pid, Math.max(gracePeriodMs, 2000));
     if (!dead) {
@@ -99,19 +75,14 @@ async function killTarget(pid, gracePeriodMs) {
 }
 /**
  * Kills the process at `options.targetPid` and spawns a fresh, supervised,
- * (optionally) sandboxed replacement via `spawnProcess()`.
+ * optionally sandboxed replacement via `spawnProcess()`.
  *
- * **Not a silent behavior change to attach mode.** A caller reaches this
- * function by name, explicitly, instead of one of the `attachToRunning*`
- * functions -- there is no code path in this repo that upgrades an attach
- * into a respawn on its own. `ATTACH_MODE_SCOPE_DISCLOSURE`
- * (`@descryy/runtime-controller`) still governs attach mode itself,
- * unconditionally, whether or not a caller ever reaches for this
- * alternative.
+ * Not a silent behavior change to attach mode — reached only by explicit call,
+ * never an automatic upgrade path. `ATTACH_MODE_SCOPE_DISCLOSURE` still governs
+ * attach mode itself regardless.
  *
- * Throws (does not silently proceed) if `targetPid` is not alive at call
- * time, matching `attachToRunningProcess`'s own "refuse rather than operate
- * on a target that does not exist" contract.
+ * Throws if `targetPid` isn't alive at call time, matching `attachToRunningProcess`'s
+ * refuse-rather-than-operate-on-nonexistent-target contract.
  */
 export async function respawnAndSupervise(options) {
     if (!isProcessAlive(options.targetPid)) {
@@ -139,23 +110,15 @@ export async function respawnAndSupervise(options) {
     };
 }
 /**
- * The opt-in, disclosed, BEST-EFFORT convenience this module's own doc
- * names -- never the default `respawnAndSupervise` reaches for on its own.
- * Reads `/proc/<pid>/cmdline`, `/proc/<pid>/cwd` and `/proc/<pid>/environ`
- * to reconstruct a `RespawnCommand`, labelling it `source:
- * "proc-cmdline-inferred"` so it can never be mistaken for a caller
- * declaration downstream.
+ * Opt-in, best-effort convenience — never the default. Reads `/proc/<pid>/cmdline`,
+ * `/cwd` and `/environ` to reconstruct a `RespawnCommand`, labelled `source:
+ * "proc-cmdline-inferred"` so it's never mistaken for a caller declaration.
  *
- * **Real, disclosed limitations, not hypothetical ones:** Linux-only (no
- * `/proc` on macOS/Windows); env vars a process set on itself
- * programmatically after `exec` (as opposed to what it was launched with)
- * are invisible here, because `/proc/<pid>/environ` only ever reflects the
- * environment at `execve()` time; already-open file descriptors handed to
- * the original process (an inherited socket, a pipe from its own parent)
- * have no representation in a command line at all and cannot be recovered
- * by any means this function has. Returns `null` -- never throws, never
- * guesses a partial answer -- when `/proc/<pid>/cmdline` cannot be read
- * (platform mismatch, pid gone, permission denied) or is empty.
+ * Disclosed limitations: Linux-only; `/proc/<pid>/environ` reflects only the
+ * environment at `execve()` time, so env vars set programmatically after exec are
+ * invisible; already-open file descriptors (inherited sockets/pipes) have no
+ * command-line representation and can't be recovered. Returns `null` — never
+ * throws, never guesses partially — when cmdline can't be read or is empty.
  */
 export function inferRespawnCommandFromProc(pid, platform = process.platform) {
     if (platform !== "linux")
@@ -167,8 +130,7 @@ export function inferRespawnCommandFromProc(pid, platform = process.platform) {
     catch {
         return null;
     }
-    // /proc/<pid>/cmdline is NUL-separated, with a trailing NUL -- split and
-    // drop the empty tail entry it always produces.
+    // NUL-separated with a trailing NUL; drop the empty tail entry
     const parts = cmdlineRaw.split("\0").filter((part) => part !== "");
     if (parts.length === 0)
         return null;
@@ -194,11 +156,8 @@ export function inferRespawnCommandFromProc(pid, platform = process.platform) {
         }
     }
     catch {
-        // /proc/<pid>/environ is real but commonly permission-denied for a
-        // process owned by a different uid, even when cmdline/cwd were
-        // readable -- degrades to no env recovered rather than failing the
-        // whole inference, since command/args/cwd alone are still a real,
-        // usable (if incomplete) answer.
+        // environ is commonly permission-denied across uids even when cmdline/cwd
+        // are readable; degrade to no env rather than failing the whole inference
         env = undefined;
     }
     return {

package/dist/respawn-and-supervise.js.map

@@ -1 +1 @@
-{"version":3,"file":"respawn-and-supervise.js","sourceRoot":"","sources":["../src/respawn-and-supervise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,YAAY,EAAiD,MAAM,6BAA6B,CAAC;AAC1G,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AA2ChE,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,UAAkB;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,aAAqB;IAC1D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAC7D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,sEAAsE;QACtE,gDAAgD;IAClD,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAE/E,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,CAAC,GAAG,CAAC,uFAAuF;YAC5H,8IAA8I,CACjJ,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAmC;IAC3E,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,OAAO,CAAC,SAAS,sBAAsB;YACnG,4FAA4F,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC,CAAC;IAEnH,MAAM,cAAc,GAAG,YAAY,CAAC;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;QAChC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;QAChC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG;QACxB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1E,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3F,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;KACzF,CAAC,CAAC;IAEH,OAAO;QACL,cAAc;QACd,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,gBAAgB;QAChB,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAW,EAAE,WAA4B,OAAO,CAAC,QAAQ;IACnG,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAEtC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,yEAAyE;IACzE,gDAAgD;IAChD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEvC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAmD,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxE,GAAG,GAAG,EAAE,CAAC;QACT,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC;YACzE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,EAAE,KAAK,CAAC,CAAC;gBAAE,SAAS;YACxB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,+DAA+D;QAC/D,mEAAmE;QACnE,kEAAkE;QAClE,iCAAiC;QACjC,GAAG,GAAG,SAAS,CAAC;IAClB,CAAC;IAED,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QACrC,MAAM,EAAE,uBAAuB;KAChC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"respawn-and-supervise.js","sourceRoot":"","sources":["../src/respawn-and-supervise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,YAAY,EAAiD,MAAM,6BAA6B,CAAC;AAC1G,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAyChE,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,UAAkB;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,aAAqB;IAC1D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAC7D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC;QAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAE/E,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,CAAC,GAAG,CAAC,uFAAuF;YAC5H,8IAA8I,CACjJ,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAmC;IAC3E,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,OAAO,CAAC,SAAS,sBAAsB;YACnG,4FAA4F,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC,CAAC;IAEnH,MAAM,cAAc,GAAG,YAAY,CAAC;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;QAChC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;QAChC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG;QACxB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1E,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3F,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;KACzF,CAAC,CAAC;IAEH,OAAO;QACL,cAAc;QACd,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,gBAAgB;QAChB,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAW,EAAE,WAA4B,OAAO,CAAC,QAAQ;IACnG,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAEtC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,+DAA+D;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEvC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAmD,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxE,GAAG,GAAG,EAAE,CAAC;QACT,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC;YACzE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,EAAE,KAAK,CAAC,CAAC;gBAAE,SAAS;YACxB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,0EAA0E;QAC1E,GAAG,GAAG,SAAS,CAAC;IAClB,CAAC;IAED,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG;QACH,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QACrC,MAAM,EAAE,uBAAuB;KAChC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,9 +1,14 @@
 {
   "name": "@descryy/runtime-orchestrator",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "type": "module",
   "description": "Assembles the runtime: controller-spawned services, live process output, collectors from a RuntimeAdapter, and a CollectorContext that can resolve script origins to source roots.",
   "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/descryhq-wq/descry-runtime.git",
+    "directory": "packages/orchestrator"
+  },
   "engines": {
     "node": ">=22.5"
   },
@@ -24,14 +29,14 @@
     "build": "tsc -b"
   },
   "dependencies": {
-    "@descryy/runtime-contracts": "0.2.0",
-    "@descryy/runtime-backend-observation": "0.2.0",
-    "@descryy/runtime-controller": "0.2.1",
-    "@descryy/runtime-evidence-store": "0.3.0",
-    "@descryy/runtime-adapter-typescript": "0.2.0",
-    "@descryy/runtime-environment-profile": "0.3.0",
-    "@descryy/runtime-remote-log-ingestion": "0.3.0",
-    "@descryy/runtime-external-service-observation": "0.2.0"
+    "@descryy/runtime-contracts": "0.3.1",
+    "@descryy/runtime-backend-observation": "0.3.1",
+    "@descryy/runtime-controller": "0.3.1",
+    "@descryy/runtime-evidence-store": "0.4.0",
+    "@descryy/runtime-adapter-typescript": "0.3.0",
+    "@descryy/runtime-environment-profile": "0.4.0",
+    "@descryy/runtime-remote-log-ingestion": "0.4.0",
+    "@descryy/runtime-external-service-observation": "0.3.0"
   },
   "devDependencies": {
     "@descryy/runtime-adapter-csharp": "*",