@descryy/runtime-orchestrator 0.4.8 → 0.4.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@descryy/runtime-orchestrator",
-  "version": "0.4.8",
+  "version": "0.4.9",
   "type": "module",
   "description": "Assembles the runtime: controller-spawned services, live process output, collectors from a RuntimeAdapter, and a CollectorContext that can resolve script origins to source roots.",
   "license": "UNLICENSED",
@@ -25,13 +25,10 @@
     "registry": "https://registry.npmjs.org",
     "access": "public"
   },
-  "scripts": {
-    "build": "tsc -b"
-  },
   "dependencies": {
     "@descryy/runtime-contracts": "0.3.3",
     "@descryy/runtime-backend-observation": "0.3.6",
-    "@descryy/runtime-controller": "0.3.7",
+    "@descryy/runtime-controller": "0.3.8",
     "@descryy/runtime-evidence-store": "0.4.2",
     "@descryy/runtime-adapter-typescript": "0.3.7",
     "@descryy/runtime-environment-profile": "0.4.5",
@@ -47,5 +44,8 @@
     "@descryy/runtime-adapter-ruby": "0.0.4",
     "@descryy/runtime-adapter-rust": "0.1.5",
     "@descryy/runtime-adapter-swift": "0.1.5"
+  },
+  "scripts": {
+    "build": "tsc -b"
   }
-}
+}

package/dist/attach-to-running-jvm-process.d.ts

@@ -1,86 +0,0 @@
-/**
- * Retroactive attach to an already-running **JVM (Java/Kotlin/…)** process. Not a
- * full CDP-equivalent; see `RT-attach-to-running-jvm-process.md` (decisions-inbox)
- * for what was measured before this was written.
- *
- * **Mechanism, measured against a live JVM, not assumed from docs.** The JVM has
- * no `SIGUSR1`-equivalent, but ships (since JDK 6) HotSpot Dynamic Attach:
- * `VirtualMachine.attach(pid)` creates `.attach_pid<pid>`, signals `SIGQUIT`, and
- * the target's attach-listener thread (already running in every stock HotSpot
- * JVM, nothing to enable at launch) opens a Unix socket at `.java_pid<pid>` and
- * accepts commands — the same thing `jcmd`/`jstack`/`VisualVM` use. Measured:
- * attached to a plain `java QuietServer` with no special flags and no restart,
- * confirming this is genuinely retroactive.
- *
- * **Narrower than CDP.** `VirtualMachine.loadAgent(jar, args)` loads a real Java
- * agent (`Instrumentation`) — more powerful than CDP's remote-debugging protocol
- * in principle, but this slice only uses `Thread.setDefaultUncaughtExceptionHandler`
- * (`jvm-agent/Agent.java`), so it never sees an exception a framework already
- * caught (a try/catch, a servlet error page, `@ExceptionHandler`). RT-201 closed
- * one specific instance of that gap: `Agent.java` also installs a ByteBuddy
- * `ClassFileTransformer` tapping
- * `DispatcherServlet#processHandlerException` — Spring MVC's single stable
- * exception choke point — reported as `"framework-caught-exception"`, parsed
- * below and emitted with `payload.handled === true`. This closes only that one
- * choke point: a catch absorbed inside a `@Service` method, or any non-Spring
- * framework, is still invisible.
- *
- * **No console-output capture** — `System.out`/`err` aren't intercepted; that's
- * `attachToRunningProcess`'s job for a target already logging to a file.
- * `capabilities()` reports `backendLogAccess` unavailable for that reason.
- *
- * **Launcher is a real JDK tool process, not a library call** — no Node/native
- * Attach-API binding exists or is added. `jvm-agent/build.ts` compiles
- * `Attacher.java` once (mtime-cached) and this module spawns it as a short-lived
- * `java` child process.
- */
-import type { Collector } from "@descryy/runtime-contracts";
-export interface AttachToRunningJvmProcessOptions {
-    readonly processId: string;
-    /** The pid of the already-running target JVM. Verified alive before attach is attempted, and never spawned or supervised by this collector. */
-    readonly pid: number;
-    readonly service?: string;
-    /** How long to wait for the Attacher helper process to complete the attach + loadAgent call. The attach itself is normally sub-second; generous default for a loaded machine. */
-    readonly attachTimeoutMs?: number;
-    /** How often to check the agent's output file for new events. */
-    readonly pollIntervalMs?: number;
-    /**
-     * Repo-relative source roots plus the absolute repo root, so a JVM frame's bare
-     * basename can be reconstructed into a repo-relative path graph correlation can
-     * join on (RT-202, extending RT-162's fix from the log-tailing path to this one).
-     *
-     * The JVM prints a bare basename (`ProbeApplication.java`), never a path, so
-     * `resolveSymbolNode` refuses to match on it alone (RT-031). This collector builds
-     * `StackFrame.location` straight from the agent's captured `StackTraceElement`
-     * fields, bypassing `createJvmStackTraceParser` entirely, so RT-162's earlier fix
-     * there never reached this path — invisible until RT-202, since this mechanism's
-     * only prior fixture was in the default package, where reconstruction is a no-op.
-     *
-     * `reconstructJvmSourcePath` below is a deliberate second copy of
-     * `jvm-stack-trace-parser.ts`'s algorithm, not a shared import: this package
-     * never takes a real dependency on any `@descryy/runtime-adapter-*` package
-     * (JVM's included), and importing the JVM-specific function here would be a
-     * bigger architectural change than this gap warrants. Both copies are tiny,
-     * pure, and named after the one behaviour they implement.
-     */
-    readonly sourceRoots?: {
-        readonly repoRoot: string;
-        readonly roots: readonly string[];
-    };
-}
-/**
- * Attach to an already-running JVM process via the HotSpot Dynamic Attach
- * mechanism, load a minimal Java agent, and start capturing genuinely
- * uncaught exceptions as `EXCEPTION` evidence from that moment forward.
- *
- * **Retroactive, not historical** — same as the Node slice: an exception
- * thrown before the agent finishes loading is not captured, because the
- * default handler was not installed yet. There is no backlog to catch up on.
- *
- * Discovery, build, and attach all happen inside `start()`, matching every
- * other `Collector` in this repo — a routine failure to attach resolves as
- * `{ available: false, reason }`, never a thrown exception a caller has to
- * remember to catch.
- */
-export declare function attachToRunningJvmProcess(options: AttachToRunningJvmProcessOptions): Collector;
-//# sourceMappingURL=attach-to-running-jvm-process.d.ts.map

package/dist/attach-to-running-jvm-process.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attach-to-running-jvm-process.d.ts","sourceRoot":"","sources":["../src/attach-to-running-jvm-process.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAOH,OAAO,KAAK,EAAE,SAAS,EAAyF,MAAM,4BAA4B,CAAC;AAMnJ,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,+IAA+I;IAC/I,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iLAAiL;IACjL,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KACnC,CAAC;CACH;AAoLD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gCAAgC,GAAG,SAAS,CA0N9F"}

package/dist/attach-to-running-jvm-process.js

@@ -1,408 +0,0 @@
-/**
- * Retroactive attach to an already-running **JVM (Java/Kotlin/…)** process. Not a
- * full CDP-equivalent; see `RT-attach-to-running-jvm-process.md` (decisions-inbox)
- * for what was measured before this was written.
- *
- * **Mechanism, measured against a live JVM, not assumed from docs.** The JVM has
- * no `SIGUSR1`-equivalent, but ships (since JDK 6) HotSpot Dynamic Attach:
- * `VirtualMachine.attach(pid)` creates `.attach_pid<pid>`, signals `SIGQUIT`, and
- * the target's attach-listener thread (already running in every stock HotSpot
- * JVM, nothing to enable at launch) opens a Unix socket at `.java_pid<pid>` and
- * accepts commands — the same thing `jcmd`/`jstack`/`VisualVM` use. Measured:
- * attached to a plain `java QuietServer` with no special flags and no restart,
- * confirming this is genuinely retroactive.
- *
- * **Narrower than CDP.** `VirtualMachine.loadAgent(jar, args)` loads a real Java
- * agent (`Instrumentation`) — more powerful than CDP's remote-debugging protocol
- * in principle, but this slice only uses `Thread.setDefaultUncaughtExceptionHandler`
- * (`jvm-agent/Agent.java`), so it never sees an exception a framework already
- * caught (a try/catch, a servlet error page, `@ExceptionHandler`). RT-201 closed
- * one specific instance of that gap: `Agent.java` also installs a ByteBuddy
- * `ClassFileTransformer` tapping
- * `DispatcherServlet#processHandlerException` — Spring MVC's single stable
- * exception choke point — reported as `"framework-caught-exception"`, parsed
- * below and emitted with `payload.handled === true`. This closes only that one
- * choke point: a catch absorbed inside a `@Service` method, or any non-Spring
- * framework, is still invisible.
- *
- * **No console-output capture** — `System.out`/`err` aren't intercepted; that's
- * `attachToRunningProcess`'s job for a target already logging to a file.
- * `capabilities()` reports `backendLogAccess` unavailable for that reason.
- *
- * **Launcher is a real JDK tool process, not a library call** — no Node/native
- * Attach-API binding exists or is added. `jvm-agent/build.ts` compiles
- * `Attacher.java` once (mtime-cached) and this module spawns it as a short-lived
- * `java` child process.
- */
-import { existsSync, mkdtempSync, readFileSync, writeFileSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { spawnSync } from "node:child_process";
-import { isProcessAlive } from "./attach-to-running-process.js";
-import { buildJvmAgentJar, buildAttacherClass, findToolsJarIfPresent } from "./jvm-agent/build.js";
-import { COLLECTOR_VERSION } from "./collector-version.js";
-/**
- * Reconstructs a repo-relative source path from a JVM frame's fully-qualified
- * declaring class name and basename, or `null` when it can't be done exactly
- * (no source roots, no basename, default-package class, or no candidate exists
- * on disk). See `sourceRoots` doc above for why this duplicates
- * `jvm-stack-trace-parser.ts`'s `reconstructPath` rather than importing it.
- */
-function reconstructJvmSourcePath(declaringType, file, sourceRoots) {
-    if (sourceRoots === undefined || file === null)
-        return null;
-    if (file.includes("/"))
-        return null;
-    const lastDot = declaringType.lastIndexOf(".");
-    if (lastDot === -1)
-        return null;
-    const packagePath = declaringType.slice(0, lastDot).split(".").join("/");
-    for (const root of sourceRoots.roots) {
-        const candidate = `${root}/${packagePath}/${file}`;
-        if (existsSync(join(sourceRoots.repoRoot, candidate)))
-            return candidate;
-    }
-    return null;
-}
-function isUncaughtExceptionEvent(value) {
-    return typeof value === "object" && value !== null && value.type === "uncaught-exception";
-}
-function isFrameworkCaughtExceptionEvent(value) {
-    return typeof value === "object" && value !== null && value.type === "framework-caught-exception";
-}
-/** A-F8: target's writer thread confirming detach completed (see `Agent.java`'s `detach()`); `stop()`'s poll loop waits for this. */
-function isAgentDetachedEvent(value) {
-    return typeof value === "object" && value !== null && value.type === "agent-detached";
-}
-/** A-F8: target's writer thread disclosing its bounded queue overflowed and events were dropped — never silent (honest-degradation rule). `count` is cumulative since `agentmain` last ran, not a per-tick delta. */
-function isEventsDroppedEvent(value) {
-    const v = value;
-    return typeof value === "object" && value !== null && v.type === "events-dropped" && typeof v.count === "number";
-}
-/**
- * `StackTraceElement.getFileName()` is always a bare name (`"ProbeApplication.java"`,
- * never `"probe/ProbeApplication.java"`) — the JVM never records a package-relative
- * path, only a plain source-file attribute, so it resolves nothing against a graph
- * whose nodes carry repo-relative paths.
- *
- * `className` (fully-qualified, always present) recovers the missing directory.
- * `className.split("$")[0]` drops a nested/anonymous-class suffix (`Outer$Inner`,
- * `Outer$1`) to recover the OUTER class's package — nested classes live in their
- * outer class's file. Result is package-relative, not repo-relative — the fallback
- * `frameToStackFrame` uses when `reconstructJvmSourcePath` can't produce a
- * validated repo-relative path.
- *
- * Deliberately does NOT rename/reshape `frame.fileName` itself — Kotlin breaks the
- * "file name matches class name" assumption (a class `Foo` may live in `Bar.kt`),
- * so only the directory is derived from the class name.
- */
-function packageRelativeFile(frame) {
-    if (frame.fileName === null)
-        return null;
-    const outerClassName = frame.className.split("$")[0];
-    const lastDot = outerClassName.lastIndexOf(".");
-    if (lastDot === -1)
-        return frame.fileName; // default package — no directory to prepend
-    const packagePath = outerClassName.slice(0, lastDot).replaceAll(".", "/");
-    return `${packagePath}/${frame.fileName}`;
-}
-function frameToStackFrame(frame, sourceRoots) {
-    return {
-        location: {
-            file: reconstructJvmSourcePath(frame.className, frame.fileName, sourceRoots) ?? packageRelativeFile(frame),
-            line: frame.lineNumber > 0 ? frame.lineNumber : null,
-            column: null,
-            functionName: `${frame.className}.${frame.methodName}`,
-            // self-contained: the JVM's own reported state, captured live, never a
-            // side artifact resolved through -- same standing as CDP's frames
-            reliability: "self-contained",
-            resolvedVia: null,
-        },
-        raw: `${frame.className}.${frame.methodName}(${frame.fileName ?? "unknown"}:${String(frame.lineNumber)})`,
-    };
-}
-/**
- * A-F10: a lighter check than the Node sibling's, deliberately — HotSpot's own
- * Dynamic Attach already enforces same-uid at the OS level (`VirtualMachine.attach`
- * fails for a different-user pid regardless). What's NOT already enforced is "this
- * pid actually looks like a JVM" — attaching against a non-JVM same-user pid
- * wastes a real attempt for a confusing downstream failure instead of a clear
- * refusal here. `ps`, not `/proc`, for the same Linux/macOS portability reason.
- */
-function verifyLikelyJvmProcess(pid) {
-    const result = spawnSync("ps", ["-o", "comm=", "-p", String(pid)], { encoding: "utf8" });
-    const comm = (result.stdout ?? "").trim().split("\n")[0]?.trim().toLowerCase();
-    if (result.status !== 0 || comm === undefined || comm === "") {
-        return { ok: false, reason: `could not verify pid ${String(pid)}'s command via ps (exit ${String(result.status)}) — refusing to attempt a JVM attach against a process this module cannot confirm the identity of` };
-    }
-    // covers "java", "javaw", and "java (someapp)" truncation -- allowlists the
-    // launcher, never app names
-    if (!comm.includes("java")) {
-        return { ok: false, reason: `pid ${String(pid)}'s command is "${comm}", which does not look like a JVM — refusing to attempt a Dynamic Attach against a process that is unlikely to have one` };
-    }
-    return { ok: true };
-}
-function notThisCollectorsJob(what) {
-    return { availability: "unavailable", reason: `attachToRunningJvmProcess observes only genuinely uncaught JVM exceptions via a loaded agent's default handler, not ${what}.` };
-}
-/** A-F8: the sentinel `agentmain` argument that means "detach, do not install" — must match `Agent.java`'s own `DETACH_COMMAND` exactly. */
-const DETACH_COMMAND = "DETACH";
-const CAPABILITIES = {
-    domObservation: notThisCollectorsJob("DOM inspection"),
-    consoleObservation: notThisCollectorsJob("a browser page's console"),
-    networkObservation: notThisCollectorsJob("network traffic"),
-    // unavailable unlike the Node slice: doesn't intercept System.out/err, that's
-    // attachToRunningProcess's job for a target logging to a file
-    backendLogAccess: notThisCollectorsJob("console/log output — see attachToRunningProcess for a target logging to a file"),
-    distributedTrace: notThisCollectorsJob("trace-id/request-id correlation — the loaded agent extracts none"),
-    sourceMapping: { availability: "available", reason: null },
-    stackCapture: { availability: "available", reason: null },
-    processLifecycle: notThisCollectorsJob("process lifecycle — spawn/ready/exit are ProcessCollector's to observe"),
-    databaseObservation: notThisCollectorsJob("database queries"),
-    externalServiceObservation: notThisCollectorsJob("outbound external requests"),
-};
-/**
- * Runs the compiled `Attacher` helper against `pid`, loading `agent.jar`
- * with `outputFilePath` as its argument. Resolves once the helper process
- * exits 0 (attach + loadAgent both succeeded); rejects with the helper's own
- * stderr otherwise — never guesses at success from silence.
- */
-function runAttacher(pid, agentJarPath, outputFilePath, attacherDir, attachTimeoutMs) {
-    const toolsJar = findToolsJarIfPresent();
-    const classpath = toolsJar !== null ? `${attacherDir}:${toolsJar}` : attacherDir;
-    const result = spawnSync("java", ["-cp", classpath, "Attacher", String(pid), agentJarPath, outputFilePath], {
-        encoding: "utf8",
-        timeout: attachTimeoutMs,
-    });
-    if (result.error !== undefined) {
-        return { ok: false, reason: `attachToRunningJvmProcess: could not launch the java Attacher helper: ${result.error.message}` };
-    }
-    if (result.status !== 0) {
-        const detail = (result.stderr ?? "").trim() || (result.stdout ?? "").trim() || `exit code ${String(result.status)}`;
-        return { ok: false, reason: `attachToRunningJvmProcess: Attacher failed to attach to pid ${String(pid)}: ${detail}` };
-    }
-    return { ok: true };
-}
-/**
- * Attach to an already-running JVM process via the HotSpot Dynamic Attach
- * mechanism, load a minimal Java agent, and start capturing genuinely
- * uncaught exceptions as `EXCEPTION` evidence from that moment forward.
- *
- * **Retroactive, not historical** — same as the Node slice: an exception
- * thrown before the agent finishes loading is not captured, because the
- * default handler was not installed yet. There is no backlog to catch up on.
- *
- * Discovery, build, and attach all happen inside `start()`, matching every
- * other `Collector` in this repo — a routine failure to attach resolves as
- * `{ available: false, reason }`, never a thrown exception a caller has to
- * remember to catch.
- */
-export function attachToRunningJvmProcess(options) {
-    let stopped = false;
-    // A-F8: set once start() actually attaches -- stop() uses this to know whether
-    // there's anything to detach, and null means stop() is a pure no-op
-    let attached = null;
-    // captured so stop() can disclose a detach failure through the same evidence
-    // stream start()'s poll loop uses
-    let capturedContext = null;
-    let detachConfirmed = false;
-    function emitCollectorError(reason) {
-        const context = capturedContext;
-        if (context === null)
-            return; // start() never ran far enough to have one
-        context.emit({
-            timestamp: new Date().toISOString(),
-            source: "backend-process",
-            service: options.service ?? null,
-            process: options.processId,
-            eventType: "COLLECTOR_ERROR",
-            payload: { raw: reason, collectorId: `attach-jvm-agent:${options.processId}`, error: reason },
-            traceId: null,
-            requestId: null,
-            correlationId: null,
-            graphNodeId: null,
-            sourceLocation: null,
-            stackTrace: null,
-            confidence: 1,
-            redactionStatus: "pending-redaction",
-            collectorVersion: COLLECTOR_VERSION,
-        });
-    }
-    return {
-        collectorId: `attach-jvm-agent:${options.processId}`,
-        async start(context) {
-            capturedContext = context;
-            if (!isProcessAlive(options.pid)) {
-                return { available: false, reason: `attachToRunningJvmProcess: pid ${String(options.pid)} is not running — cannot attach to a target that does not exist.` };
-            }
-            if (process.platform === "win32") {
-                return { available: false, reason: "attachToRunningJvmProcess: HotSpot Dynamic Attach as used here relies on a Unix domain socket; not available on win32." };
-            }
-            // A-F10: checked before spawning the Attacher helper, not after —
-            // see verifyLikelyJvmProcess's own doc for why this is a lighter check
-            // than the Node sibling's (the OS already enforces same-uid here).
-            const identity = verifyLikelyJvmProcess(options.pid);
-            if (!identity.ok) {
-                return { available: false, reason: `attachToRunningJvmProcess: ${identity.reason}.` };
-            }
-            let agentJarPath;
-            let attacherDir;
-            try {
-                agentJarPath = await buildJvmAgentJar();
-                attacherDir = buildAttacherClass();
-            }
-            catch (error) {
-                return { available: false, reason: error instanceof Error ? error.message : String(error) };
-            }
-            const dir = mkdtempSync(join(tmpdir(), "descry-jvm-attach-"));
-            const outFile = join(dir, "events.log");
-            writeFileSync(outFile, "");
-            const attachTimeoutMs = options.attachTimeoutMs ?? 10_000;
-            const attachResult = runAttacher(options.pid, agentJarPath, outFile, attacherDir, attachTimeoutMs);
-            if (!attachResult.ok) {
-                return { available: false, reason: attachResult.reason };
-            }
-            // A-F8: recorded so stop() can run the same Attacher helper a second
-            // time with DETACH_COMMAND, and know which output file to watch for
-            // confirmation.
-            attached = { agentJarPath, attacherDir, outFile, dir, attachTimeoutMs };
-            const pollIntervalMs = options.pollIntervalMs ?? 50;
-            let consumed = 0;
-            const poll = async () => {
-                for (;;) {
-                    if (stopped)
-                        return;
-                    if (!existsSync(outFile)) {
-                        await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
-                        continue;
-                    }
-                    const whole = readFileSync(outFile, "utf8");
-                    if (whole.length > consumed) {
-                        const chunk = whole.slice(consumed);
-                        consumed = whole.length;
-                        for (const rawLine of chunk.split("\n")) {
-                            const line = rawLine.trim();
-                            if (line === "")
-                                continue;
-                            let parsed;
-                            try {
-                                parsed = JSON.parse(line);
-                            }
-                            catch {
-                                // in practice cannot happen: Agent.java opens, writes one full
-                                // line, and closes the file per event, so a poll tick never
-                                // observes a half-written line. Dropped rather than guessed at
-                                // if it ever does.
-                                continue;
-                            }
-                            if (isUncaughtExceptionEvent(parsed) || isFrameworkCaughtExceptionEvent(parsed)) {
-                                const frames = parsed.frames.map((frame) => frameToStackFrame(frame, options.sourceRoots));
-                                const stackTrace = frames.length > 0
-                                    ? { fidelity: "synchronous", frames, primaryFrameIndex: 0 }
-                                    : { fidelity: "synchronous", frames: [], primaryFrameIndex: 0 };
-                                context.emit({
-                                    timestamp: new Date().toISOString(),
-                                    source: "backend-process",
-                                    service: options.service ?? null,
-                                    process: options.processId,
-                                    eventType: "EXCEPTION",
-                                    // `handled` distinguishes the two channels within one event type
-                                    // rather than adding a new member to a closed vocabulary -- true
-                                    // for RT-201's DispatcherServlet tap, false for genuinely
-                                    // uncaught. Additive: existing .message/.stack consumers unaffected.
-                                    payload: { message: `${parsed.exceptionClass}: ${parsed.message ?? ""}`.trim(), stack: null, handled: parsed.type === "framework-caught-exception" },
-                                    traceId: null,
-                                    requestId: null,
-                                    correlationId: null,
-                                    graphNodeId: null,
-                                    sourceLocation: frames[0]?.location ?? null,
-                                    stackTrace: frames.length > 0 ? stackTrace : null,
-                                    confidence: 1,
-                                    redactionStatus: "pending-redaction",
-                                    collectorVersion: COLLECTOR_VERSION,
-                                });
-                            }
-                            else if (isAgentDetachedEvent(parsed)) {
-                                // A-F8: unblocks stop()'s wait loop -- internal bookkeeping, not
-                                // something observed about the target
-                                detachConfirmed = true;
-                            }
-                            else if (isEventsDroppedEvent(parsed)) {
-                                // A-F8: the target's bounded queue overflowed, real evidence was
-                                // lost -- disclosed, not silent. De-duplicated on the Java side
-                                // (marker written only when the count changes).
-                                emitCollectorError(`attachToRunningJvmProcess: the target's own event queue has dropped ${String(parsed.count)} event(s) so far (queue capacity exceeded) — some EXCEPTION evidence from this process was never captured.`);
-                            }
-                            // "agent-loaded", "framework-instrumentation-installed",
-                            // "framework-instrumentation-unavailable", "detach-started",
-                            // "detach-uncaught-handler-restored" / "-restore-failed",
-                            // "detach-transformer-reset" / "-incomplete" / "-failed", and
-                            // any future purely-internal marker type: acknowledged by
-                            // being parsed, not turned into evidence.
-                        }
-                    }
-                    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
-                }
-            };
-            void poll();
-            return { available: true };
-        },
-        /**
-         * A-F8: a real detach, not just halting this module's own poller. Runs the
-         * Attacher helper again with `DETACH_COMMAND`, which drives `Agent.java`'s own
-         * `detach()` — restoring the JVM's prior default uncaught-exception handler
-         * and calling ByteBuddy's `reset()` to remove the `DispatcherServlet`
-         * transformer — because leaving either installed for the rest of the target's
-         * life is exactly the kind of state a "detach" must not leave behind.
-         *
-         * `stopped` is deliberately NOT set until after detach is attempted and
-         * (bounded) awaited: `poll()` checks `stopped` first on every tick, so setting
-         * it early would stop this module from ever reading the target's own
-         * "agent-detached" confirmation line.
-         *
-         * Where a JVM limitation makes true removal impossible, this discloses it via
-         * `COLLECTOR_ERROR` rather than pretending `stop()` stopped it. Two disclosed
-         * failure shapes: the Attacher helper itself couldn't run (target unreachable,
-         * permission denied), or it ran but the writer thread never confirmed detach
-         * within the timeout (target under load, or the JVM's own handler/transformer
-         * restoration genuinely failed inside `detach()` — narrower diagnostic detail
-         * then only visible in the raw output file).
-         *
-         * A target that has already exited needs no detach — silently a no-op, not a
-         * disclosed failure.
-         */
-        async stop() {
-            const state = attached;
-            if (state === null) {
-                stopped = true;
-                return;
-            }
-            if (isProcessAlive(options.pid)) {
-                const detachAttempt = runAttacher(options.pid, state.agentJarPath, DETACH_COMMAND, state.attacherDir, state.attachTimeoutMs);
-                if (detachAttempt.ok) {
-                    const deadline = Date.now() + Math.min(state.attachTimeoutMs, 5000);
-                    while (!detachConfirmed && Date.now() < deadline) {
-                        await new Promise((resolve) => setTimeout(resolve, 25));
-                    }
-                    if (!detachConfirmed) {
-                        emitCollectorError(`attachToRunningJvmProcess: detach was requested but never confirmed by the target within the timeout — its default uncaught-exception handler and DispatcherServlet instrumentation (if installed) may remain in place until the target process itself exits.`);
-                    }
-                }
-                else {
-                    emitCollectorError(`attachToRunningJvmProcess: detach could not be attempted (${detachAttempt.reason}) — the target's default uncaught-exception handler and DispatcherServlet instrumentation (if installed) remain in place until the target process itself exits.`);
-                }
-            }
-            stopped = true; // safe now: any detach confirmation has already been drained by poll().
-            try {
-                rmSync(state.dir, { recursive: true, force: true });
-            }
-            catch {
-                // best-effort cleanup; not worth failing stop() over a leftover temp dir
-            }
-        },
-        capabilities() {
-            return CAPABILITIES;
-        },
-    };
-}
-//# sourceMappingURL=attach-to-running-jvm-process.js.map

package/dist/attach-to-running-jvm-process.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"attach-to-running-jvm-process.js","sourceRoot":"","sources":["../src/attach-to-running-jvm-process.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAI/C,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAoC3D;;;;;;GAMG;AACH,SAAS,wBAAwB,CAC/B,aAAqB,EACrB,IAAmB,EACnB,WAA4D;IAE5D,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEzE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACnD,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA0BD,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAA4B,CAAC,IAAI,KAAK,oBAAoB,CAAC;AACpH,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc;IACrD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAA4B,CAAC,IAAI,KAAK,4BAA4B,CAAC;AAC5H,CAAC;AAED,qIAAqI;AACrI,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAA4B,CAAC,IAAI,KAAK,gBAAgB,CAAC;AAChH,CAAC;AAED,qNAAqN;AACrN,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,CAAC,GAAG,KAA4C,CAAC;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;AACnH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,mBAAmB,CAAC,KAAwB;IACnD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACtD,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,4CAA4C;IACvF,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1E,OAAO,GAAG,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAwB,EAAE,WAA4D;IAC/G,OAAO;QACL,QAAQ,EAAE;YACR,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC;YAC1G,IAAI,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YACpD,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE;YACtD,uEAAuE;YACvE,kEAAkE;YAClE,WAAW,EAAE,gBAAgB;YAC7B,WAAW,EAAE,IAAI;SAClB;QACD,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG;KAC1G,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,MAAM,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,mGAAmG,EAAE,CAAC;IACvN,CAAC;IACD,4EAA4E;IAC5E,4BAA4B;IAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,MAAM,CAAC,GAAG,CAAC,kBAAkB,IAAI,yHAAyH,EAAE,CAAC;IAClM,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,uHAAuH,IAAI,GAAG,EAAE,CAAC;AACjL,CAAC;AAED,4IAA4I;AAC5I,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEhC,MAAM,YAAY,GAA0B;IAC1C,cAAc,EAAE,oBAAoB,CAAC,gBAAgB,CAAC;IACtD,kBAAkB,EAAE,oBAAoB,CAAC,0BAA0B,CAAC;IACpE,kBAAkB,EAAE,oBAAoB,CAAC,iBAAiB,CAAC;IAC3D,8EAA8E;IAC9E,8DAA8D;IAC9D,gBAAgB,EAAE,oBAAoB,CAAC,gFAAgF,CAAC;IACxH,gBAAgB,EAAE,oBAAoB,CAAC,kEAAkE,CAAC;IAC1G,aAAa,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;IAC1D,YAAY,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;IACzD,gBAAgB,EAAE,oBAAoB,CAAC,wEAAwE,CAAC;IAChH,mBAAmB,EAAE,oBAAoB,CAAC,kBAAkB,CAAC;IAC7D,0BAA0B,EAAE,oBAAoB,CAAC,4BAA4B,CAAC;CAC/E,CAAC;AAEF;;;;;GAKG;AACH,SAAS,WAAW,CAAC,GAAW,EAAE,YAAoB,EAAE,cAAsB,EAAE,WAAmB,EAAE,eAAuB;IAC1H,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IACjF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE;QAC1G,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yEAAyE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IAChI,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,aAAa,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACpH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+DAA+D,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,EAAE,CAAC;IACxH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAyC;IACjF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,+EAA+E;IAC/E,oEAAoE;IACpE,IAAI,QAAQ,GAA6J,IAAI,CAAC;IAC9K,6EAA6E;IAC7E,kCAAkC;IAClC,IAAI,eAAe,GAA4B,IAAI,CAAC;IACpD,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,SAAS,kBAAkB,CAAC,MAAc;QACxC,MAAM,OAAO,GAAG,eAAe,CAAC;QAChC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,CAAC,2CAA2C;QACzE,OAAO,CAAC,IAAI,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAChC,OAAO,EAAE,OAAO,CAAC,SAAS;YAC1B,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;YAC7F,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,mBAAmB;YACpC,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW,EAAE,oBAAoB,OAAO,CAAC,SAAS,EAAE;QAEpD,KAAK,CAAC,KAAK,CAAC,OAAyB;YACnC,eAAe,GAAG,OAAO,CAAC;YAC1B,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kEAAkE,EAAE,CAAC;YAC/J,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,wHAAwH,EAAE,CAAC;YAChK,CAAC;YACD,kEAAkE;YAClE,uEAAuE;YACvE,mEAAmE;YACnE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC;YACxF,CAAC;YAED,IAAI,YAAoB,CAAC;YACzB,IAAI,WAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,YAAY,GAAG,MAAM,gBAAgB,EAAE,CAAC;gBACxC,WAAW,GAAG,kBAAkB,EAAE,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9F,CAAC;YAED,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACxC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAE3B,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,MAAM,CAAC;YAC1D,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YACnG,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;YAC3D,CAAC;YACD,qEAAqE;YACrE,oEAAoE;YACpE,gBAAgB;YAChB,QAAQ,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC;YAExE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;YACpD,IAAI,QAAQ,GAAG,CAAC,CAAC;YAEjB,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;gBACrC,SAAS,CAAC;oBACR,IAAI,OAAO;wBAAE,OAAO;oBACpB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;wBACzB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;wBACpE,SAAS;oBACX,CAAC;oBACD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;wBAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBACpC,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;wBACxB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;4BACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;4BAC5B,IAAI,IAAI,KAAK,EAAE;gCAAE,SAAS;4BAC1B,IAAI,MAAe,CAAC;4BACpB,IAAI,CAAC;gCACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;4BAC5B,CAAC;4BAAC,MAAM,CAAC;gCACP,+DAA+D;gCAC/D,4DAA4D;gCAC5D,+DAA+D;gCAC/D,mBAAmB;gCACnB,SAAS;4BACX,CAAC;4BACD,IAAI,wBAAwB,CAAC,MAAM,CAAC,IAAI,+BAA+B,CAAC,MAAM,CAAC,EAAE,CAAC;gCAChF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;gCAC3F,MAAM,UAAU,GAAe,MAAM,CAAC,MAAM,GAAG,CAAC;oCAC9C,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,EAAE;oCAC3D,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;gCAClE,OAAO,CAAC,IAAI,CAAC;oCACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oCACnC,MAAM,EAAE,iBAAiB;oCACzB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;oCAChC,OAAO,EAAE,OAAO,CAAC,SAAS;oCAC1B,SAAS,EAAE,WAAW;oCACtB,iEAAiE;oCACjE,iEAAiE;oCACjE,0DAA0D;oCAC1D,qEAAqE;oCACrE,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,4BAA4B,EAAE;oCACpJ,OAAO,EAAE,IAAI;oCACb,SAAS,EAAE,IAAI;oCACf,aAAa,EAAE,IAAI;oCACnB,WAAW,EAAE,IAAI;oCACjB,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,IAAI;oCAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;oCACjD,UAAU,EAAE,CAAC;oCACb,eAAe,EAAE,mBAAmB;oCACpC,gBAAgB,EAAE,iBAAiB;iCACpC,CAAC,CAAC;4BACL,CAAC;iCAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;gCACxC,iEAAiE;gCACjE,sCAAsC;gCACtC,eAAe,GAAG,IAAI,CAAC;4BACzB,CAAC;iCAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;gCACxC,iEAAiE;gCACjE,gEAAgE;gCAChE,gDAAgD;gCAChD,kBAAkB,CAChB,uEAAuE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,4GAA4G,CACxM,CAAC;4BACJ,CAAC;4BACD,yDAAyD;4BACzD,6DAA6D;4BAC7D,0DAA0D;4BAC1D,8DAA8D;4BAC9D,0DAA0D;4BAC1D,0CAA0C;wBAC5C,CAAC;oBACH,CAAC;oBACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC,CAAC;YACF,KAAK,IAAI,EAAE,CAAC;YAEZ,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QAED;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH,KAAK,CAAC,IAAI;YACR,MAAM,KAAK,GAAG,QAAQ,CAAC;YACvB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO;YACT,CAAC;YAED,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;gBAC7H,IAAI,aAAa,CAAC,EAAE,EAAE,CAAC;oBACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;oBACpE,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;wBACjD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;oBAC1D,CAAC;oBACD,IAAI,CAAC,eAAe,EAAE,CAAC;wBACrB,kBAAkB,CAChB,+PAA+P,CAChQ,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,kBAAkB,CAChB,6DAA6D,aAAa,CAAC,MAAM,iKAAiK,CACnP,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,GAAG,IAAI,CAAC,CAAC,wEAAwE;YAExF,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;QACH,CAAC;QAED,YAAY;YACV,OAAO,YAAY,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/attach-to-running-node-process.d.ts

@@ -1,80 +0,0 @@
-/**
- * Retroactive attach to an already-running **Node** process, via its own inspector
- * protocol (JVM Attach API and ptrace remain out of scope, per
- * `documents/decisions-inbox/RT-attach-to-running-process-scope.md`).
- *
- * Unlike the file-based `attachToRunningProcess`, this needs nothing declared at
- * launch: `SIGUSR1` (POSIX only) turns on the target's inspector after the fact,
- * making `http://127.0.0.1:<port>/json` reachable even on a process never started
- * with `--inspect`.
- *
- * **Disclosed limit:** `SIGUSR1` doesn't report which port the inspector bound —
- * Node prints that to the target's own stderr, unreadable for a process we didn't
- * spawn (RT-024). So discovery tries the default port (9229) unless the caller
- * supplies `discoveryPort`; a genuinely unknown non-default port cannot be
- * discovered (not guessed at by port-scanning, which risks attaching to the wrong
- * process).
- *
- * CDP client is `cdp-client.ts`, not Playwright's console API, which assumes a
- * Target/Page-domain session a Node inspector doesn't have (see that file).
- *
- * **Measured:** a freshly-spawned target has a brief window (sometimes under
- * 100ms) before Node installs its `SIGUSR1` handler; a signal sent inside it hits
- * POSIX's default terminate action instead of toggling the inspector. Irrelevant
- * to attaching to something already running, but real for a caller attaching
- * right after spawning.
- *
- * **Measured side effect:** once CDP connects, V8 no longer terminates on an
- * uncaught exception — it blocks ("Waiting for the debugger to disconnect...")
- * exactly as under `--inspect-brk`, until `stop()` closes the session. Standard
- * CDP/V8 behaviour, not worked around; a caller checking "did the target exit
- * yet?" must call `stop()` first.
- *
- * **Vocabulary:** `Runtime.consoleAPICalled`→`CONSOLE_MESSAGE`,
- * `Runtime.exceptionThrown`→`EXCEPTION`, same `RuntimeEventType`s
- * `browser-console-collector.ts` uses for the browser-page analogues.
- * `source: "backend-process"` (not a new value — `EvidenceSource` names what was
- * observed, not the mechanism). `capabilities()` reports `backendLogAccess`, not
- * `consoleObservation` (reserved for a browser page's console).
- */
-import type { Collector } from "@descryy/runtime-contracts";
-export interface AttachToRunningNodeProcessOptions {
-    readonly processId: string;
-    /** The pid of the already-running target. Verified alive before SIGUSR1 is sent, and never spawned or supervised by this collector. */
-    readonly pid: number;
-    readonly service?: string;
-    /** Node's own default inspector bind address. Overridable for a target known to bind elsewhere. */
-    readonly discoveryHost?: string;
-    /** Node's default inspector port — the only one `SIGUSR1` reliably produces on an unmodified target. See module doc: a non-default port must be supplied here. */
-    readonly discoveryPort?: number;
-    /** How long to poll the discovery endpoint after sending SIGUSR1 before giving up. The inspector does not bind instantaneously. */
-    readonly discoveryTimeoutMs?: number;
-}
-/**
- * Sends `SIGUSR1` to `pid`, then polls `http://<host>:<port>/json` until the
- * inspector answers or `timeoutMs` elapses. Resolves with the first entry's
- * `webSocketDebuggerUrl` — a Node process presents exactly one inspectable
- * target, unlike a browser's `/json` (one per tab).
- *
- * Rejects naming the exact blocker rather than hanging or guessing: dead pid,
- * non-POSIX platform, or a port that never answers (see module doc).
- */
-export declare function discoverNodeInspectorUrl(pid: number, options?: {
-    readonly host?: string;
-    readonly port?: number;
-    readonly timeoutMs?: number;
-}): Promise<string>;
-/**
- * Attach to an already-running Node process via `SIGUSR1` + CDP, capturing
- * `CONSOLE_MESSAGE`/`EXCEPTION` evidence from that moment forward.
- *
- * **Retroactive, not historical.** Anything logged or thrown before attach is
- * gone — CDP is a live event stream with no buffer of its own (unlike the
- * file-based `attachToRunningProcess`, which recovers pre-attach lines from disk).
- *
- * Discovery/connection happen inside `start()`, matching every other `Collector`
- * here: a routine failure resolves as `{ available: false, reason }`, never a
- * thrown exception.
- */
-export declare function attachToRunningNodeProcess(options: AttachToRunningNodeProcessOptions): Collector;
-//# sourceMappingURL=attach-to-running-node-process.d.ts.map

package/dist/attach-to-running-node-process.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attach-to-running-node-process.d.ts","sourceRoot":"","sources":["../src/attach-to-running-node-process.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAyG,MAAM,4BAA4B,CAAC;AAsCnK,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uIAAuI;IACvI,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mGAAmG;IACnG,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,kKAAkK;IAClK,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,mIAAmI;IACnI,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAOD;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC5F,OAAO,CAAC,MAAM,CAAC,CA+CjB;AAsED;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iCAAiC,GAAG,SAAS,CAmHhG"}