@dsh-enhanced/plugin-control-plane 0.1.32 → 0.1.34

package/lib/replay-grant.js

@@ -0,0 +1,208 @@
+import { createPublicKey, verify } from 'node:crypto';
+import { isAbsolute, resolve } from 'node:path';
+import { hostAttestationRequestDigest } from './attestation.js';
+import { validateReplayCases } from './effect-blocked-replay.js';
+import { runtimeConfigDigest } from './runtime-observer-protocol.js';
+const ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/u;
+const OPERATION_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,119}$/u;
+const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/u;
+const DIGEST = /^[a-f0-9]{64}$/u;
+const BASE64 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u;
+const DOMAIN = 'dsh-effect-replay-grant/v1';
+function fail(message) { throw new Error(`replay grant: ${message}`); }
+function exact(value, fields, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)
+        || Object.keys(value).sort().join('\0') !== [...fields].sort().join('\0'))
+        fail(`${label} has unknown or missing fields`);
+}
+function integer(value, label, minimum = 1) {
+    if (!Number.isSafeInteger(value) || typeof value !== 'number' || value < minimum)
+        fail(`${label} is invalid`);
+    return value;
+}
+function text(value, label, pattern = ID) {
+    if (typeof value !== 'string' || !pattern.test(value))
+        fail(`${label} is invalid`);
+    return value;
+}
+function path(value, label) {
+    if (typeof value !== 'string' || value.length < 1 || value.length > 4096 || !isAbsolute(value) || resolve(value) !== value
+        || Array.from(value).some(character => character.charCodeAt(0) < 32))
+        fail(`${label} is invalid`);
+    return value;
+}
+function digest(value, label) { return text(value, label, DIGEST); }
+function assertIssuer(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        fail('request issuer is invalid');
+    if (value.mode === 'owner-manual') {
+        exact(value, ['mode'], 'request issuer');
+        return;
+    }
+    exact(value, ['mode', 'id', 'version', 'path', 'sha256', 'interpreter', 'authority', 'keyId'], 'request issuer');
+    if (value.mode !== 'configured-executable')
+        fail('request issuer mode is invalid');
+    text(value.id, 'request issuer id');
+    text(value.version, 'request issuer version');
+    path(value.path, 'request issuer path');
+    digest(value.sha256, 'request issuer sha256');
+    text(value.authority, 'request issuer authority');
+    text(value.keyId, 'request issuer keyId');
+    if (value.interpreter === null)
+        return;
+    exact(value.interpreter, ['path', 'sha256'], 'request issuer interpreter');
+    path(value.interpreter.path, 'request issuer interpreter path');
+    digest(value.interpreter.sha256, 'request issuer interpreter sha256');
+}
+function assertReplayRequest(value) {
+    exact(value, ['schemaVersion', 'kind', 'operationId', 'requestedAt', 'receiptTtlMs', 'installationId', 'ledger', 'plan', 'activation', 'profile', 'issuer', 'phase', 'requirements', 'predecessor'], 'request');
+    if (value.schemaVersion !== 2 || value.kind !== 'dsh-host-attestation-request' || value.phase !== 'effect-blocked-replay')
+        fail('request schema or phase is invalid');
+    text(value.operationId, 'request operationId', OPERATION_ID);
+    integer(value.requestedAt, 'request requestedAt');
+    integer(value.receiptTtlMs, 'request receiptTtlMs', 1_000);
+    if (value.receiptTtlMs > 300_000)
+        fail('request receiptTtlMs is invalid');
+    text(value.installationId, 'request installationId', UUID);
+    exact(value.ledger, ['id', 'path'], 'request ledger');
+    text(value.ledger.id, 'request ledger id', UUID);
+    path(value.ledger.path, 'request ledger path');
+    exact(value.plan, ['id', 'digest'], 'request plan');
+    text(value.plan.id, 'request plan id');
+    digest(value.plan.digest, 'request plan digest');
+    exact(value.activation, ['id', 'fence'], 'request activation');
+    text(value.activation.id, 'request activation id');
+    integer(value.activation.fence, 'request activation fence');
+    exact(value.profile, ['name', 'path'], 'request profile');
+    text(value.profile.name, 'request profile name');
+    path(value.profile.path, 'request profile path');
+    assertIssuer(value.issuer);
+    exact(value.requirements, ['kind', 'minimumDeliveryAttempts', 'minimumToolExecutionAttempts', 'maximumExternalEffects'], 'request requirements');
+    if (value.requirements.kind !== 'effect-blocked-replay' || value.requirements.maximumExternalEffects !== 0)
+        fail('request requirements are invalid');
+    integer(value.requirements.minimumDeliveryAttempts, 'request minimumDeliveryAttempts');
+    integer(value.requirements.minimumToolExecutionAttempts, 'request minimumToolExecutionAttempts');
+    exact(value.predecessor, ['operationId', 'receiptId', 'phase', 'receiptDigest', 'hostGeneration'], 'request predecessor');
+    if (value.predecessor.phase !== 'readiness' || value.predecessor.operationId === value.operationId)
+        fail('request predecessor is invalid');
+    text(value.predecessor.operationId, 'request predecessor operationId', OPERATION_ID);
+    text(value.predecessor.receiptId, 'request predecessor receiptId');
+    digest(value.predecessor.receiptDigest, 'request predecessor receiptDigest');
+    integer(value.predecessor.hostGeneration, 'request predecessor hostGeneration');
+}
+function assertScope(value) {
+    exact(value, ['installationId', 'ledger', 'plan', 'activation', 'profile'], 'authority scope');
+    text(value.installationId, 'authority installationId', UUID);
+    exact(value.ledger, ['id', 'path'], 'authority ledger');
+    text(value.ledger.id, 'authority ledger id', UUID);
+    path(value.ledger.path, 'authority ledger path');
+    exact(value.plan, ['id', 'digest'], 'authority plan');
+    text(value.plan.id, 'authority plan id');
+    digest(value.plan.digest, 'authority plan digest');
+    exact(value.activation, ['id', 'fence'], 'authority activation');
+    text(value.activation.id, 'authority activation id');
+    integer(value.activation.fence, 'authority activation fence');
+    exact(value.profile, ['name', 'path'], 'authority profile');
+    text(value.profile.name, 'authority profile name');
+    path(value.profile.path, 'authority profile path');
+}
+/** Validates only a public SPKI Ed25519 signer and a bounded authority window. */
+export function validateReplaySignedAuthority(value) {
+    runtimeConfigDigest(value);
+    exact(value, ['mode', 'authority', 'keyId', 'publicKeyPem', 'scope', 'notBefore', 'expiresAt', 'maximumGrantMs', 'cases'], 'signed authority');
+    if (value.mode !== 'signed')
+        fail('authority mode is invalid');
+    text(value.authority, 'authority');
+    text(value.keyId, 'keyId');
+    assertScope(value.scope);
+    integer(value.notBefore, 'authority notBefore');
+    integer(value.expiresAt, 'authority expiresAt');
+    if (value.expiresAt <= value.notBefore || value.expiresAt - value.notBefore > 86_400_000)
+        fail('authority window is invalid');
+    const maximumGrantMs = integer(value.maximumGrantMs, 'maximumGrantMs', 100);
+    if (maximumGrantMs > 60_000)
+        fail('maximumGrantMs is invalid');
+    if (typeof value.publicKeyPem !== 'string')
+        fail('publicKeyPem is invalid');
+    let key;
+    try {
+        key = createPublicKey(value.publicKeyPem);
+    }
+    catch {
+        fail('publicKeyPem is invalid');
+    }
+    if (key.asymmetricKeyType !== 'ed25519' || key.export({ type: 'spki', format: 'pem' }).toString() !== value.publicKeyPem)
+        fail('publicKeyPem is not canonical public Ed25519 SPKI');
+    validateReplayCases(value.cases);
+}
+export function assertReplayGrant(value) {
+    runtimeConfigDigest(value);
+    exact(value, ['schemaVersion', 'kind', 'authority', 'keyId', 'request', 'endpointDigest', 'caseDigest', 'processId', 'invocationId', 'notBefore', 'expiresAt', 'signature'], 'grant');
+    if (value.schemaVersion !== 1 || value.kind !== 'dsh-effect-replay-grant')
+        fail('grant schema is invalid');
+    text(value.authority, 'grant authority');
+    text(value.keyId, 'grant keyId');
+    assertReplayRequest(value.request);
+    digest(value.endpointDigest, 'endpointDigest');
+    digest(value.caseDigest, 'caseDigest');
+    integer(value.processId, 'processId');
+    if (value.invocationId !== null)
+        text(value.invocationId, 'invocationId', /^[a-f0-9]{32}$/u);
+    integer(value.notBefore, 'grant notBefore');
+    integer(value.expiresAt, 'grant expiresAt');
+    if (value.expiresAt <= value.notBefore)
+        fail('grant validity interval is invalid');
+    if (typeof value.signature !== 'string' || !BASE64.test(value.signature))
+        fail('grant signature is invalid');
+    const signature = Buffer.from(value.signature, 'base64');
+    if (signature.length !== 64 || signature.toString('base64') !== value.signature)
+        fail('grant signature is invalid');
+}
+/** The payload contains a bounded canonical digest, so object access happens only after getter rejection. */
+export function replayGrantSigningPayload(grant) {
+    return `${DOMAIN}\n${runtimeConfigDigest(grant)}`;
+}
+export function verifyReplayGrant(grantInput, authorityInput, binding, now) {
+    assertReplayGrant(grantInput);
+    validateReplaySignedAuthority(authorityInput);
+    runtimeConfigDigest(binding);
+    exact(binding, ['endpointDigest', 'caseDigest', 'profilePath', 'operationId', 'requestDigest'], 'binding');
+    digest(binding.endpointDigest, 'binding endpointDigest');
+    digest(binding.caseDigest, 'binding caseDigest');
+    path(binding.profilePath, 'binding profilePath');
+    text(binding.operationId, 'binding operationId', OPERATION_ID);
+    digest(binding.requestDigest, 'binding requestDigest');
+    integer(now, 'now');
+    const grant = grantInput;
+    const authority = authorityInput;
+    const requestDigest = hostAttestationRequestDigest(grant.request);
+    const replay = validateReplayCases(authority.cases);
+    const requirements = grant.request.requirements;
+    if (requirements.kind !== 'effect-blocked-replay' || requirements.maximumExternalEffects !== 0)
+        fail('grant request requirements are invalid');
+    if (grant.authority !== authority.authority || grant.keyId !== authority.keyId || grant.endpointDigest !== binding.endpointDigest
+        || grant.caseDigest !== binding.caseDigest || grant.caseDigest !== replay.caseDigest || grant.request.operationId !== binding.operationId
+        || requestDigest !== binding.requestDigest || grant.request.profile.path !== binding.profilePath
+        || grant.request.installationId !== authority.scope.installationId || grant.request.ledger.id !== authority.scope.ledger.id
+        || grant.request.ledger.path !== authority.scope.ledger.path || grant.request.plan.id !== authority.scope.plan.id
+        || grant.request.plan.digest !== authority.scope.plan.digest || grant.request.activation.id !== authority.scope.activation.id
+        || grant.request.activation.fence !== authority.scope.activation.fence || grant.request.profile.name !== authority.scope.profile.name
+        || grant.request.profile.path !== authority.scope.profile.path)
+        fail('grant is not bound to authority scope and request');
+    const toolCases = replay.cases.filter(item => item.kind === 'tool').length;
+    const deliveryCases = replay.cases.filter(item => item.kind === 'delivery').length;
+    if (toolCases < requirements.minimumToolExecutionAttempts || deliveryCases < requirements.minimumDeliveryAttempts)
+        fail('grant cases do not meet request minimums');
+    if (grant.request.requestedAt > grant.notBefore || grant.notBefore < authority.notBefore || grant.expiresAt > authority.expiresAt
+        || grant.expiresAt - grant.notBefore > authority.maximumGrantMs || grant.expiresAt - grant.request.requestedAt > grant.request.receiptTtlMs
+        || now < grant.notBefore || now >= grant.expiresAt)
+        fail('grant is outside its validity interval');
+    const unsigned = { schemaVersion: grant.schemaVersion, kind: grant.kind, authority: grant.authority,
+        keyId: grant.keyId, request: grant.request, endpointDigest: grant.endpointDigest, caseDigest: grant.caseDigest,
+        processId: grant.processId, invocationId: grant.invocationId, notBefore: grant.notBefore, expiresAt: grant.expiresAt };
+    const signature = Buffer.from(grant.signature, 'base64');
+    if (!verify(null, Buffer.from(replayGrantSigningPayload(unsigned)), createPublicKey(authority.publicKeyPem), signature))
+        fail('grant signature is invalid');
+    return Object.freeze({ scopeDigest: runtimeConfigDigest(authority.scope), grantDigest: runtimeConfigDigest(grant), expiresAt: grant.expiresAt });
+}
+//# sourceMappingURL=replay-grant.js.map

package/lib/replay-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-grant.js","sourceRoot":"","sources":["../src/replay-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAmB,MAAM,4BAA4B,CAAA;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AAGpE,MAAM,EAAE,GAAG,sCAAsC,CAAA;AACjD,MAAM,YAAY,GAAG,sCAAsC,CAAA;AAC3D,MAAM,IAAI,GAAG,4EAA4E,CAAA;AACzF,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,MAAM,GAAG,mEAAmE,CAAA;AAClF,MAAM,MAAM,GAAG,4BAA4B,CAAA;AAmC3C,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AACrF,SAAS,KAAK,CAAC,KAAc,EAAE,MAAyB,EAAE,KAAa;IACrE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAA;AAC7H,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,KAAa,EAAE,OAAO,GAAG,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,OAAO;QAAE,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,CAAA;IAC7G,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,OAAO,GAAG,EAAE;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,CAAA;IAClF,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK;WACrH,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAAE,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,CAAA;IACnG,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa,IAAY,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA,CAAC,CAAC;AAE5F,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAClG,IAAK,KAAiC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAAC,OAAM;IAAC,CAAC;IACpH,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAA;IAChH,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAClF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;IAC3H,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAA;IAC3I,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;QAAE,OAAM;IACtC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,4BAA4B,CAAC,CAAA;IAC1E,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAA;AACxI,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,KAAK,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,SAAS,CAAC,CAAA;IAC/M,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,8BAA8B,IAAI,KAAK,CAAC,KAAK,KAAK,uBAAuB;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACrK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,EAAE,KAAK,CAAC,CAAA;IAC3K,IAAK,KAAK,CAAC,YAAuB,GAAG,OAAO;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;IACrF,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAA;IAC1D,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;IACvJ,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC7I,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAA;IAC/K,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;IAC7J,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC1B,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,wBAAwB,CAAC,EAAE,sBAAsB,CAAC,CAAA;IAChJ,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,uBAAuB,IAAI,KAAK,CAAC,YAAY,CAAC,sBAAsB,KAAK,CAAC;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACpJ,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,uBAAuB,EAAE,iCAAiC,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,4BAA4B,EAAE,sCAAsC,CAAC,CAAA;IACxL,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,gBAAgB,CAAC,EAAE,qBAAqB,CAAC,CAAA;IACzH,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAC1I,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,iCAAiC,EAAE,YAAY,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAA;IACxJ,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,oCAAoC,CAAC,CAAA;AAC/J,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,KAAK,CAAC,KAAK,EAAE,CAAC,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,iBAAiB,CAAC,CAAA;IAC9F,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAA;IAC5D,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAA;IAC7J,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;IACnJ,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAA;IACrL,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAA;AACrK,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAC1B,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,kBAAkB,CAAC,CAAA;IAC9I,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAC9D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACxF,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAA;IAChG,IAAK,KAAK,CAAC,SAAoB,IAAK,KAAK,CAAC,SAAoB,IAAK,KAAK,CAAC,SAAoB,GAAI,KAAK,CAAC,SAAoB,GAAG,UAAU;QAAE,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAC7K,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAA;IAC3E,IAAI,cAAc,GAAG,MAAM;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAA;IAC9D,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAC3E,IAAI,GAAuC,CAAA;IAC3C,IAAI,CAAC;QAAC,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAAC,CAAC;IAC3F,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,KAAK,CAAC,YAAY;QAAE,IAAI,CAAC,mDAAmD,CAAC,CAAA;IACnL,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAC1B,KAAK,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAA;IACrL,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;QAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAC1G,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9G,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAC7H,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;QAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAA;IAC5F,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAA;IACxF,IAAK,KAAK,CAAC,SAAoB,IAAK,KAAK,CAAC,SAAoB;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;IAC1G,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IAC5G,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IACxD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,SAAS;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;AACrH,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,yBAAyB,CAAC,KAAqC;IAC7E,OAAO,GAAG,MAAM,KAAK,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAA;AACnD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAuB,EAAE,cAAqC,EAAE,OAMjG,EAAE,GAAW;IACZ,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAAC,6BAA6B,CAAC,cAAc,CAAC,CAAC;IAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC1G,KAAK,CAAC,OAAO,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,CAAA;IAC1G,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAA;IAC5J,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC;IAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC3I,MAAM,KAAK,GAAG,UAAU,CAAC;IAAC,MAAM,SAAS,GAAG,cAAc,CAAA;IAC1D,MAAM,aAAa,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACjE,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACnD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAA;IAC/C,IAAI,YAAY,CAAC,IAAI,KAAK,uBAAuB,IAAI,YAAY,CAAC,sBAAsB,KAAK,CAAC;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;IAC9I,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;WAC5H,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;WACtI,aAAa,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW;WAC7F,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;WACxH,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;WAC9G,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;WAC1H,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI;WAClI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI;QAAE,IAAI,CAAC,mDAAmD,CAAC,CAAA;IAC3H,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM,CAAA;IAC1E,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,MAAM,CAAA;IAClF,IAAI,SAAS,GAAG,YAAY,CAAC,4BAA4B,IAAI,aAAa,GAAG,YAAY,CAAC,uBAAuB;QAAE,IAAI,CAAC,0CAA0C,CAAC,CAAA;IACnK,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS;WAC5H,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY;WACxI,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;IACpG,MAAM,QAAQ,GAAmC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;QACjI,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;QAC9G,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;IACxH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IACxD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;QAAE,IAAI,CAAC,4BAA4B,CAAC,CAAA;IAC3J,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;AAClJ,CAAC"}

package/lib/replay-journal.d.ts

@@ -0,0 +1,25 @@
+import type { EffectBlockedReplayResult } from './effect-blocked-replay.js';
+export interface ReplayAuthorization {
+    scopeDigest: string;
+    grantDigest: string;
+}
+/** A reserved operation never regains dispatch authority, including after process death. */
+export declare class ReplayJournal {
+    private readonly path;
+    private readonly db;
+    private readonly fileIdentity;
+    constructor(path: string);
+    private checkFiles;
+    private syncDirectory;
+    private operation;
+    private grantForOperation;
+    private result;
+    get(operationId: string, bindingDigest: string, signed?: ReplayAuthorization): {
+        status: 'admitted' | 'completed';
+        result: EffectBlockedReplayResult | null;
+    } | undefined;
+    reserve(operationId: string, bindingDigest: string, requestDigest: string, caseDigest: string, signed?: ReplayAuthorization): boolean;
+    complete(operationId: string, bindingDigest: string, result: EffectBlockedReplayResult): void;
+    close(): void;
+}
+//# sourceMappingURL=replay-journal.d.ts.map

package/lib/replay-journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-journal.d.ts","sourceRoot":"","sources":["../src/replay-journal.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAA;AAkB3E,MAAM,WAAW,mBAAmB;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AAajF,4FAA4F;AAC5F,qBAAa,aAAa;IAGZ,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8B;gBAC9B,IAAI,EAAE,MAAM;IA8CzC,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,SAAS;IAGjB,OAAO,CAAC,iBAAiB;IAGzB,OAAO,CAAC,MAAM;IAWd,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB,GAAG;QAAE,MAAM,EAAE,UAAU,GAAG,WAAW,CAAC;QAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS;IAgBzK,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO;IAkCrI,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,GAAG,IAAI;IAuB7F,KAAK,IAAI,IAAI;CACd"}

package/lib/replay-journal.js

@@ -0,0 +1,275 @@
+import { constants, closeSync, fstatSync, fsyncSync, lstatSync, openSync, realpathSync } from 'node:fs';
+import { dirname, isAbsolute, resolve } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { assertReplayEndpointResponse } from './replay-endpoint-protocol.js';
+import { privateRuntimeObserverDirectory, runtimeConfigDigest } from './runtime-observer-protocol.js';
+const APP_ID = 0x44535250;
+function fail() { throw new Error('replay journal: unsafe file, incompatible journal or conflicting operation'); }
+function identity(operationId, bindingDigest) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,119}$/u.test(operationId) || !/^[a-f0-9]{64}$/u.test(bindingDigest))
+        fail();
+}
+function checkFile(path) {
+    const stat = lstatSync(path);
+    if (realpathSync(path) !== path || !stat.isFile() || stat.nlink !== 1 || stat.uid !== process.getuid() || (stat.mode & 0o077) !== 0)
+        fail();
+}
+function optionalFile(path) {
+    try {
+        checkFile(path);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+}
+function authorization(value) {
+    if (value === undefined)
+        return undefined;
+    if (!value || typeof value !== 'object' || (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null))
+        fail();
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    if (Reflect.ownKeys(descriptors).length !== 2)
+        fail();
+    const scope = descriptors.scopeDigest, grant = descriptors.grantDigest;
+    if (!scope || !grant || !('value' in scope) || !('value' in grant) || typeof scope.value !== 'string' || typeof grant.value !== 'string')
+        fail();
+    identity('authorization', scope.value);
+    identity('authorization', grant.value);
+    return { scopeDigest: scope.value, grantDigest: grant.value };
+}
+/** A reserved operation never regains dispatch authority, including after process death. */
+export class ReplayJournal {
+    path;
+    db;
+    fileIdentity;
+    constructor(path) {
+        this.path = path;
+        if (process.platform !== 'linux' || !isAbsolute(path) || resolve(path) !== path)
+            fail();
+        privateRuntimeObserverDirectory(dirname(path));
+        try {
+            const fd = openSync(path, constants.O_CREAT | constants.O_EXCL | constants.O_RDWR | constants.O_NOFOLLOW, 0o600);
+            try {
+                fsyncSync(fd);
+            }
+            finally {
+                closeSync(fd);
+            }
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+        }
+        const before = lstatSync(path);
+        this.fileIdentity = { dev: before.dev, ino: before.ino };
+        this.checkFiles();
+        this.db = new DatabaseSync(path);
+        try {
+            this.checkFiles();
+            const after = lstatSync(path);
+            if (before.dev !== after.dev || before.ino !== after.ino)
+                fail();
+            this.db.exec('PRAGMA busy_timeout = 1000; PRAGMA synchronous = FULL; BEGIN IMMEDIATE;');
+            try {
+                const version = this.db.prepare('PRAGMA user_version').get().user_version;
+                const app = this.db.prepare('PRAGMA application_id').get().application_id;
+                if (version === 0 && app === 0 && this.db.prepare('SELECT name FROM sqlite_master').all().length === 0) {
+                    this.db.exec(`CREATE TABLE replay_operations (
+            operation_id TEXT PRIMARY KEY, binding_digest TEXT NOT NULL, request_digest TEXT NOT NULL, case_digest TEXT NOT NULL,
+            result_json TEXT, result_digest TEXT, admission_mode TEXT NOT NULL,
+            CHECK((result_json IS NULL AND result_digest IS NULL) OR
+              (json_valid(result_json) AND length(result_digest) = 64))
+          ) STRICT, WITHOUT ROWID;
+          CREATE TABLE replay_grants (
+            scope_digest TEXT PRIMARY KEY, grant_digest TEXT NOT NULL, operation_id TEXT NOT NULL UNIQUE,
+            FOREIGN KEY(operation_id) REFERENCES replay_operations(operation_id)
+          ) STRICT, WITHOUT ROWID;
+          PRAGMA application_id = ${APP_ID}; PRAGMA user_version = 2;`);
+                }
+                else if (version === 1 && app === APP_ID) {
+                    // Version 1 had only fixed-operation admission. Existing rows remain fixed.
+                    this.db.exec(`ALTER TABLE replay_operations ADD COLUMN admission_mode TEXT NOT NULL DEFAULT 'fixed';
+            CREATE TABLE replay_grants (
+              scope_digest TEXT PRIMARY KEY, grant_digest TEXT NOT NULL, operation_id TEXT NOT NULL UNIQUE,
+              FOREIGN KEY(operation_id) REFERENCES replay_operations(operation_id)
+            ) STRICT, WITHOUT ROWID;
+            PRAGMA user_version = 2;`);
+                }
+                else if (version !== 2 || app !== APP_ID)
+                    fail();
+                this.db.exec('COMMIT; PRAGMA journal_mode = WAL;');
+            }
+            catch (error) {
+                try {
+                    this.db.exec('ROLLBACK');
+                }
+                catch { /* A completed commit cannot be rolled back. */ }
+                throw error;
+            }
+            this.checkFiles();
+            this.syncDirectory();
+        }
+        catch (error) {
+            this.db.close();
+            throw error;
+        }
+    }
+    checkFiles() {
+        privateRuntimeObserverDirectory(dirname(this.path));
+        checkFile(this.path);
+        const current = lstatSync(this.path);
+        if (current.dev !== this.fileIdentity.dev || current.ino !== this.fileIdentity.ino)
+            fail();
+        for (const suffix of ['-wal', '-shm', '-journal'])
+            optionalFile(this.path + suffix);
+    }
+    syncDirectory() {
+        this.checkFiles();
+        const fd = openSync(dirname(this.path), constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+        try {
+            if (!fstatSync(fd).isDirectory())
+                fail();
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    operation(operationId) {
+        return this.db.prepare('SELECT binding_digest, request_digest, case_digest, result_json, result_digest, admission_mode FROM replay_operations WHERE operation_id = ?').get(operationId);
+    }
+    grantForOperation(operationId) {
+        return this.db.prepare('SELECT scope_digest, grant_digest, operation_id FROM replay_grants WHERE operation_id = ?').get(operationId);
+    }
+    result(operationId, row) {
+        if (row.result_json === null) {
+            if (row.result_digest !== null)
+                fail();
+            return { status: 'admitted', result: null };
+        }
+        if (Buffer.byteLength(row.result_json) > 65_536)
+            fail();
+        const result = JSON.parse(row.result_json);
+        assertReplayEndpointResponse({ schemaVersion: 1, challenge: '0'.repeat(64), operationId,
+            requestDigest: row.request_digest, status: 'completed', result, observedAt: Date.now() });
+        if (runtimeConfigDigest(result) !== row.result_digest || result.operationId !== operationId
+            || result.requestDigest !== row.request_digest || result.caseDigest !== row.case_digest
+            || result.schemaVersion !== 1 || result.kind !== 'dsh-effect-blocked-replay-observation' || result.quiescent !== true)
+            fail();
+        return { status: 'completed', result };
+    }
+    get(operationId, bindingDigest, signed) {
+        const auth = authorization(signed);
+        identity(operationId, bindingDigest);
+        this.checkFiles();
+        if (auth) {
+            const grant = this.db.prepare('SELECT scope_digest, grant_digest, operation_id FROM replay_grants WHERE scope_digest = ?').get(auth.scopeDigest);
+            if (!grant) {
+                if (this.operation(operationId))
+                    fail();
+                return;
+            }
+            if (grant.grant_digest !== auth.grantDigest || grant.operation_id !== operationId)
+                fail();
+            const row = this.operation(operationId);
+            if (!row || row.admission_mode !== 'signed' || row.binding_digest !== bindingDigest)
+                fail();
+            return this.result(operationId, row);
+        }
+        const row = this.operation(operationId);
+        if (!row)
+            return;
+        if (row.admission_mode !== 'fixed' || this.grantForOperation(operationId) || row.binding_digest !== bindingDigest)
+            fail();
+        return this.result(operationId, row);
+    }
+    reserve(operationId, bindingDigest, requestDigest, caseDigest, signed) {
+        const auth = authorization(signed);
+        identity(operationId, bindingDigest);
+        this.checkFiles();
+        identity(operationId, requestDigest);
+        identity(operationId, caseDigest);
+        this.db.exec('BEGIN IMMEDIATE');
+        try {
+            if (auth) {
+                const grant = this.db.prepare('SELECT scope_digest, grant_digest, operation_id FROM replay_grants WHERE scope_digest = ?').get(auth.scopeDigest);
+                if (grant) {
+                    if (grant.grant_digest !== auth.grantDigest || grant.operation_id !== operationId)
+                        fail();
+                    const existing = this.operation(operationId);
+                    if (!existing || existing.admission_mode !== 'signed' || existing.binding_digest !== bindingDigest
+                        || existing.request_digest !== requestDigest || existing.case_digest !== caseDigest)
+                        fail();
+                    this.db.exec('COMMIT');
+                    this.syncDirectory();
+                    return false;
+                }
+                if (this.operation(operationId))
+                    fail();
+                this.db.prepare("INSERT INTO replay_operations(operation_id, binding_digest, request_digest, case_digest, admission_mode) VALUES (?, ?, ?, ?, 'signed')")
+                    .run(operationId, bindingDigest, requestDigest, caseDigest);
+                this.db.prepare('INSERT INTO replay_grants(scope_digest, grant_digest, operation_id) VALUES (?, ?, ?)').run(auth.scopeDigest, auth.grantDigest, operationId);
+            }
+            else {
+                const existing = this.operation(operationId);
+                if (existing) {
+                    if (existing.admission_mode !== 'fixed' || this.grantForOperation(operationId) || existing.binding_digest !== bindingDigest
+                        || existing.request_digest !== requestDigest || existing.case_digest !== caseDigest)
+                        fail();
+                    this.db.exec('COMMIT');
+                    this.syncDirectory();
+                    return false;
+                }
+                this.db.prepare("INSERT INTO replay_operations(operation_id, binding_digest, request_digest, case_digest, admission_mode) VALUES (?, ?, ?, ?, 'fixed')")
+                    .run(operationId, bindingDigest, requestDigest, caseDigest);
+            }
+            this.db.exec('COMMIT');
+            this.syncDirectory();
+            return true;
+        }
+        catch (error) {
+            try {
+                this.db.exec('ROLLBACK');
+            }
+            catch { /* A completed commit cannot be rolled back. */ }
+            throw error;
+        }
+    }
+    complete(operationId, bindingDigest, result) {
+        identity(operationId, bindingDigest);
+        runtimeConfigDigest(result);
+        result = structuredClone(result);
+        const digest = runtimeConfigDigest(result);
+        if (result.operationId !== operationId || result.kind !== 'dsh-effect-blocked-replay-observation' || result.quiescent !== true)
+            fail();
+        this.db.exec('BEGIN IMMEDIATE');
+        try {
+            const pins = this.operation(operationId);
+            if (!pins || (pins.admission_mode !== 'fixed' && pins.admission_mode !== 'signed') || pins.binding_digest !== bindingDigest
+                || (pins.admission_mode === 'signed' && !this.grantForOperation(operationId))
+                || (pins.admission_mode === 'fixed' && this.grantForOperation(operationId))
+                || result.requestDigest !== pins.request_digest || result.caseDigest !== pins.case_digest)
+                fail();
+            assertReplayEndpointResponse({ schemaVersion: 1, challenge: '0'.repeat(64), operationId,
+                requestDigest: pins.request_digest, status: 'completed', result, observedAt: Date.now() });
+            const prior = this.result(operationId, pins);
+            if (prior.result && runtimeConfigDigest(prior.result) !== digest)
+                fail();
+            if (!prior.result)
+                this.db.prepare('UPDATE replay_operations SET result_json = ?, result_digest = ? WHERE operation_id = ? AND result_json IS NULL')
+                    .run(JSON.stringify(result), digest, operationId);
+            this.db.exec('COMMIT');
+            this.syncDirectory();
+        }
+        catch (error) {
+            try {
+                this.db.exec('ROLLBACK');
+            }
+            catch { /* A completed commit cannot be rolled back. */ }
+            throw error;
+        }
+    }
+    close() { this.db.close(); }
+}
+//# sourceMappingURL=replay-journal.js.map

package/lib/replay-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-journal.js","sourceRoot":"","sources":["../src/replay-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACvG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAA;AAC5E,OAAO,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AAErG,MAAM,MAAM,GAAG,UAAU,CAAA;AACzB,SAAS,IAAI,KAAY,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA,CAAC,CAAC;AACxH,SAAS,QAAQ,CAAC,WAAmB,EAAE,aAAqB;IAC1D,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC;QAAE,IAAI,EAAE,CAAA;AACjH,CAAC;AACD,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;AAC9I,CAAC;AACD,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IAAC,CAAC;AAC/G,CAAC;AAKD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;QAAE,IAAI,EAAE,CAAA;IAC/I,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;IAC3D,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACrD,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,GAAG,WAAW,CAAC,WAAW,CAAA;IACtE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,IAAI,EAAE,CAAA;IAChJ,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAC9E,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;AAC/D,CAAC;AAED,4FAA4F;AAC5F,MAAM,OAAO,aAAa;IAGK;IAFZ,EAAE,CAAc;IAChB,YAAY,CAA8B;IAC3D,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,IAAI,EAAE,CAAA;QACvF,+BAA+B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;YAChH,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAA;YAAC,CAAC;oBAAS,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAA;YAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAAC,CAAC;QACvF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,YAAY,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAA;QACxD,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,IAAI,CAAC,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,CAAA;YACjB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC7B,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;gBAAE,IAAI,EAAE,CAAA;YAChE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAA;YACvF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA+B,CAAC,YAAY,CAAA;gBACvG,MAAM,GAAG,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,GAAG,EAAiC,CAAC,cAAc,CAAA;gBACzG,IAAI,OAAO,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;oCAUa,MAAM,4BAA4B,CAAC,CAAA;gBAC/D,CAAC;qBAAM,IAAI,OAAO,KAAK,CAAC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;oBAC3C,4EAA4E;oBAC5E,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;qCAKc,CAAC,CAAA;gBAC9B,CAAC;qBAAM,IAAI,OAAO,KAAK,CAAC,IAAI,GAAG,KAAK,MAAM;oBAAE,IAAI,EAAE,CAAA;gBAClD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAA;YAAC,CAAC;YAC1H,IAAI,CAAC,UAAU,EAAE,CAAA;YACjB,IAAI,CAAC,aAAa,EAAE,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;IAClD,CAAC;IACO,UAAU;QAChB,+BAA+B,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACnD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,YAAY,CAAC,GAAG;YAAE,IAAI,EAAE,CAAA;QAC1F,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAA;IACrF,CAAC;IACO,aAAa;QACnB,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QAC1G,IAAI,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;gBAAE,IAAI,EAAE,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;IAC3F,CAAC;IACO,SAAS,CAAC,WAAmB;QACnC,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8IAA8I,CAAC,CAAC,GAAG,CAAC,WAAW,CAAoB,CAAA;IAC5M,CAAC;IACO,iBAAiB,CAAC,WAAmB;QAC3C,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAC,GAAG,CAAC,WAAW,CAAyB,CAAA;IAC9J,CAAC;IACO,MAAM,CAAC,WAAmB,EAAE,GAAQ;QAC1C,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI;gBAAE,IAAI,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QAAC,CAAC;QACrH,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,MAAM;YAAE,IAAI,EAAE,CAAA;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA8B,CAAA;QACvE,4BAA4B,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW;YACrF,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC3F,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW;eACtF,MAAM,CAAC,aAAa,KAAK,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,CAAC,WAAW;eACpF,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,uCAAuC,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;YAAE,IAAI,EAAE,CAAA;QAC/H,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAAA;IACxC,CAAC;IACD,GAAG,CAAC,WAAmB,EAAE,aAAqB,EAAE,MAA4B;QAC1E,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;QAClC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAAC,IAAI,CAAC,UAAU,EAAE,CAAA;QACvD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAyB,CAAA;YACxK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBAAE,IAAI,EAAE,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC/D,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW;gBAAE,IAAI,EAAE,CAAA;YACzF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;YACvC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,KAAK,aAAa;gBAAE,IAAI,EAAE,CAAA;YAC3F,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QACtC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,IAAI,GAAG,CAAC,cAAc,KAAK,OAAO,IAAI,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,cAAc,KAAK,aAAa;YAAE,IAAI,EAAE,CAAA;QACzH,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,CAAC,WAAmB,EAAE,aAAqB,EAAE,aAAqB,EAAE,UAAkB,EAAE,MAA4B;QACzH,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;QAClC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAAC,IAAI,CAAC,UAAU,EAAE,CAAA;QACvD,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QACvE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC/B,IAAI,CAAC;YACH,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAyB,CAAA;gBACxK,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW;wBAAE,IAAI,EAAE,CAAA;oBACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;oBAC5C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,IAAI,QAAQ,CAAC,cAAc,KAAK,aAAa;2BAC7F,QAAQ,CAAC,cAAc,KAAK,aAAa,IAAI,QAAQ,CAAC,WAAW,KAAK,UAAU;wBAAE,IAAI,EAAE,CAAA;oBAC7F,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBAAC,OAAO,KAAK,CAAA;gBAC5D,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBAAE,IAAI,EAAE,CAAA;gBACvC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wIAAwI,CAAC;qBACtJ,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;gBAC7D,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sFAAsF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YAC9J,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;gBAC5C,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,IAAI,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,cAAc,KAAK,aAAa;2BACtH,QAAQ,CAAC,cAAc,KAAK,aAAa,IAAI,QAAQ,CAAC,WAAW,KAAK,UAAU;wBAAE,IAAI,EAAE,CAAA;oBAC7F,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBAAC,OAAO,KAAK,CAAA;gBAC5D,CAAC;gBACD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uIAAuI,CAAC;qBACrJ,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;YAC/D,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtB,IAAI,CAAC,aAAa,EAAE,CAAA;YACpB,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;IAC5H,CAAC;IACD,QAAQ,CAAC,WAAmB,EAAE,aAAqB,EAAE,MAAiC;QACpF,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QACpC,mBAAmB,CAAC,MAAM,CAAC,CAAA;QAC3B,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,uCAAuC,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;YAAE,IAAI,EAAE,CAAA;QACtI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;YACxC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,cAAc,KAAK,aAAa;mBACtH,CAAC,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;mBAC1E,CAAC,IAAI,CAAC,cAAc,KAAK,OAAO,IAAI,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;mBACxE,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,WAAW;gBAAE,IAAI,EAAE,CAAA;YACnG,4BAA4B,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW;gBACrF,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YAC5C,IAAI,KAAK,CAAC,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM;gBAAE,IAAI,EAAE,CAAA;YACxE,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gHAAgH,CAAC;qBACjJ,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;YACnD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtB,IAAI,CAAC,aAAa,EAAE,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;IAC5H,CAAC;IACD,KAAK,KAAW,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAA,CAAC,CAAC;CAClC"}

package/lib/runtime-observer-protocol.d.ts

@@ -0,0 +1,63 @@
+export interface RuntimeObserverTarget {
+    entryId: string;
+    module: string;
+    configDigest: string;
+    services: string[];
+}
+export interface RuntimeObserverConfig {
+    socketPath: string;
+    keyPath: string;
+    profilePath: string;
+    targets: RuntimeObserverTarget[];
+}
+export declare const RUNTIME_OBSERVER_MAX_BYTES = 65536;
+export declare const RUNTIME_OBSERVER_TIMEOUT = 2000;
+export declare function runtimeObserverFail(): never;
+export declare function assertRuntimeObserverExact(value: unknown, fields: string[]): asserts value is Record<string, unknown>;
+export declare function assertRuntimeObserverText(value: unknown, pattern?: RegExp): asserts value is string;
+/** Bounded JSON digest; never invokes a config object's toJSON/getter. */
+export declare function runtimeConfigDigest(value: unknown): string;
+export declare function privateRuntimeObserverDirectory(path: string): void;
+export declare function readPrivateRuntimeObserverKey(path: string): Buffer;
+export declare function validateRuntimeObserverConfig(value: unknown): asserts value is RuntimeObserverConfig;
+export type RuntimeObserverInstance = {
+    uid: number;
+    epoch: number;
+};
+export interface RuntimeEntryObservation {
+    entryId: string;
+    module: string | null;
+    configDigest: string | null;
+    active: boolean;
+    instance: RuntimeObserverInstance | null;
+    dependencies: Array<{
+        name: string;
+        instance: RuntimeObserverInstance | null;
+    }>;
+    services: Array<{
+        name: string;
+        instance: RuntimeObserverInstance | null;
+    }>;
+}
+export interface RuntimeObservation {
+    schemaVersion: 1;
+    kind: 'dsh-runtime-observation';
+    observerId: string;
+    observerConfigDigest: string;
+    challenge: string;
+    processId: number;
+    invocationId: string | null;
+    profilePath: string;
+    observedAt: number;
+    entries: RuntimeEntryObservation[];
+}
+export declare function runtimeObserverMac(key: Buffer, domain: string, value: unknown): string;
+export declare function equalRuntimeObserverMac(actual: unknown, expected: string): boolean;
+export declare function assertRuntimeObservation(value: unknown): asserts value is RuntimeObservation;
+/** Owner caller supplies no claimed state; fresh challenge authenticates the observed response. */
+export declare function queryRuntimeObserver(input: {
+    socketPath: string;
+    keyPath: string;
+    signal?: AbortSignal;
+}): Promise<RuntimeObservation>;
+//# sourceMappingURL=runtime-observer-protocol.d.ts.map

package/lib/runtime-observer-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-observer-protocol.d.ts","sourceRoot":"","sources":["../src/runtime-observer-protocol.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,qBAAqB,EAAE,CAAA;CACjC;AAID,eAAO,MAAM,0BAA0B,QAAS,CAAA;AAChD,eAAO,MAAM,wBAAwB,OAAQ,CAAA;AAE7C,wBAAgB,mBAAmB,IAAI,KAAK,CAAsG;AAClJ,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGrH;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,SAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAE/F;AAED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAkC1D;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAGlE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAclE;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,qBAAqB,CA2BpG;AAED,MAAM,MAAM,uBAAuB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AACpE,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAA;IACxC,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAC/E,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;CAC5E;AACD,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,CAAC,CAAA;IAChB,IAAI,EAAE,yBAAyB,CAAA;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,uBAAuB,EAAE,CAAA;CACnC;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAEtF;AACD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAElF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAoC5F;AAED,mGAAmG;AACnG,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAgD5I"}