@gfdelarue/testkit 0.3.0

package/dist/kernel/error-serialization.js

@@ -0,0 +1 @@
+const g="testkitOperation",m="testkitDiagnostics",c=String;export function attachErrorOperation(t,n){if(!r(t)||!r(n)||s(t,g))return t;const e=y(n);return e!==null&&d(t,g,e),t}export function attachErrorDiagnostics(t,n){if(!r(t)||!r(n))return t;const e=getErrorDiagnostics(t),i={...f(e),...f(n)};return d(t,m,i),t}export function getErrorOperation(t){return r(t)?y(s(t,g)||s(t,"operation")):null}export function getErrorDiagnostics(t){return r(t)?f(s(t,m)||s(t,"diagnostics")):{}}export function errorMessage(t){return t instanceof Error?t.message:c(t)}export function formatError(t){return sanitizeErrorMessage(errorMessage(t))}export function sanitizeErrorMessage(t){return t.replace(/(postgres(?:ql)?:\/\/[^:\s"'@]+:)[^@\s"']+(@)/gi,"$1<redacted>$2").replace(/("password"\s*:\s*")[^"]*(")/gi,"$1<redacted>$2").replace(/('password'\s*:\s*')[^']*(')/gi,"$1<redacted>$2").replace(/(PGPASSWORD=)[^\s'"\\]+/g,"$1<redacted>")}export function errorDetail(t){if(r(t)){const n=s(t,"stack");if(typeof n=="string"&&n.length>0)return n;const e=s(t,"message");if(typeof e=="string"&&e.length>0)return e}return t instanceof Error?t.stack||t.message:c(t)}export function serializeError(t,{includeStack:n=!1}={}){if(t instanceof Error){const e=getErrorOperation(t),i=getErrorDiagnostics(t),o=s(t,"code"),u=s(t,"exitCode"),a=s(t,"status");return{name:t.name||"Error",message:t.message||c(t),...typeof o=="string"?{code:o}:{},...typeof u=="number"&&Number.isInteger(u)?{exitCode:u}:{},...typeof a=="number"&&Number.isInteger(a)?{status:a}:{},...e?{phase:e.name,operation:e}:{},...Object.keys(i).length>0?{diagnostics:i}:{},...n&&typeof t.stack=="string"?{stack:t.stack}:{}}}return{name:"Error",message:c(t)}}function d(t,n,e){Object.defineProperty(t,n,{value:e,configurable:!0,enumerable:!1,writable:!0})}function y(t){if(!r(t))return null;const n=s(t,"id"),e=s(t,"source"),i=s(t,"name"),o=s(t,"kind"),u=s(t,"summary"),a=s(t,"status"),p=s(t,"error");return{...n?{id:c(n)}:{},source:typeof e=="string"?e:"testkit",name:typeof i=="string"&&i?i:"operation",kind:typeof o=="string"&&o?o:"operation",...u?{summary:c(u)}:{},scope:f(s(t,"scope")),...a?{status:c(a)}:{},...p?{error:c(p)}:{}}}function f(t){if(!r(t)||E(t))return{};const n=[];for(const e of Object.keys(t)){const i=s(t,e);i!==void 0&&n.push([e,l(i)])}return Object.fromEntries(n)}function l(t){return t===null||typeof t=="string"||typeof t=="number"||typeof t=="boolean"?t:E(t)?t.map(n=>l(n)):r(t)?f(t):c(t)}function s(t,n){return Reflect.get(t,n)}function E(t){return Array.isArray(t)}function r(t){return t!==null&&typeof t=="object"}

package/dist/kernel/redaction.d.ts

@@ -0,0 +1 @@
+export declare function redactSensitiveText(value: unknown): string;

package/dist/kernel/redaction.js

@@ -0,0 +1 @@
+const S=/\b([A-Z0-9_]+)=([^\s]+)/giu,T=/PASSWORD|TOKEN|SECRET|PRIVATE_KEY|AUTH|COOKIE|SESSION|API_KEY/iu,a=/(:\/\/[^:\s/@]+:)([^@\s/]+)(@)/gu,o=String;export function redactSensitiveText(r){return u(o(r??"").replace(S,(e,t,s)=>T.test(t)?/(^|_)URL$/iu.test(t)?`${t}=${u(s)}`:`${t}=<redacted>`:e))}function u(r){return r.replace(a,(e,t,s,c,E)=>{for(let n=E-1;n>=0;n--){const i=r[n];if(/[a-z]/iu.test(i))return`${t}<redacted>${c}`;if(!/[0-9+.-]/u.test(i))break}return e})}

package/dist/kernel/unknown-values.d.ts

@@ -0,0 +1,6 @@
+export type UnknownRecord = Record<string, unknown>;
+export declare function isUnknownRecord(value: unknown): value is UnknownRecord;
+export declare function asUnknownRecord(value: unknown): UnknownRecord | null;
+/** A non-empty string, or null for an empty string and every other value. */
+export declare function optionalString(value: unknown): string | null;
+export declare function displayString(value: unknown, fallback: string): string;

package/dist/kernel/unknown-values.js

@@ -0,0 +1 @@
+export function isUnknownRecord(n){return typeof n=="object"&&n!==null&&!Array.isArray(n)}export function asUnknownRecord(n){return isUnknownRecord(n)?n:null}export function optionalString(n){return typeof n=="string"&&n.length>0?n:null}export function displayString(n,r){return optionalString(n)??r}

package/dist/process/capture-output.d.ts

@@ -0,0 +1,7 @@
+export type OutputLineHandler = (line: string) => void;
+export interface CaptureOutputOptions {
+    livePrefix?: string | null;
+    liveWriter?: OutputLineHandler | null;
+    onLine?: OutputLineHandler | null;
+}
+export declare function captureOutput(stream: NodeJS.ReadableStream | null | undefined, options?: Readonly<CaptureOutputOptions>): Promise<void>;

package/dist/process/capture-output.js

@@ -0,0 +1 @@
+const c=String;export function captureOutput(t,e={}){if(!t)return Promise.resolve();const u=t;if(u.destroyed===!0||u.readableEnded===!0)return Promise.resolve();const l=g(e.onLine),r=g(e.liveWriter),i=a(e.livePrefix);let n="";return new Promise(d=>{let s=!1;const f=()=>{s||(s=!0,d())};t.on("data",y=>{n+=v(y);const p=n.split(/\r?\n/);n=p.pop()||"";for(const o of p)o.length!==0&&(l?.(o),r&&r(i?`${i} ${o}`:o))}),t.on("end",()=>{n.length>0&&(l?.(n),r&&r(i?`${i} ${n}`:n)),f()}),t.on("close",f),t.on("error",f)})}function g(t){return typeof t!="function"?null:e=>{Reflect.apply(t,void 0,[e])}}function v(t){if(t==null)throw new TypeError("Output chunks must provide toString()");if(typeof t=="string")return t;if(typeof t=="number"||typeof t=="boolean"||typeof t=="bigint"||typeof t=="symbol")return t.toString();const e=Reflect.get(t,"toString");if(!S(e))throw new TypeError("Output chunks must provide toString()");return c(Reflect.apply(e,t,[]))}function S(t){return typeof t=="function"}function a(t){return t??""}

package/dist/process/command-shell.d.ts

@@ -0,0 +1 @@
+export declare function resolvePosixCommandShell(env: Readonly<NodeJS.ProcessEnv>, ambientEnv?: Readonly<NodeJS.ProcessEnv>): string;

package/dist/process/command-shell.js

@@ -0,0 +1 @@
+import l from"path";export function resolvePosixCommandShell(e,o=process.env){const n=(e.SHELL??o.SHELL??"").trim();return n.length>0&&!s(n)?n:"sh"}function s(e){return["false","nologin"].includes(l.basename(e).toLowerCase())}

package/dist/process/environment-overlay.d.ts

@@ -0,0 +1,17 @@
+export declare const MANAGED_PROCESS_ENVIRONMENT_OVERLAY_STATE_SYMBOL = "elench.testkit.engine-process.environment-overlay.v1";
+export interface ManagedProcessEnvironmentOverlayOptions {
+    readonly environment: Readonly<Record<string, string>>;
+    readonly label: string;
+}
+/**
+ * Adds file-backed consumer values to `process.env` without adding them to the
+ * physical environment block inherited by native processes.
+ *
+ * Managed values behave like immutable, non-enumerable own properties. A Node
+ * child that inherits the adapter-owned bootstrap controls can therefore
+ * rehydrate the same values without transporting them through its OS spawn
+ * environment.
+ */
+export declare function installManagedProcessEnvironmentOverlay(options: Readonly<ManagedProcessEnvironmentOverlayOptions>): NodeJS.ProcessEnv;
+/** Returns the exact shared installer as a self-contained ESM source fragment. */
+export declare function managedProcessEnvironmentOverlayInstallerSource(): string;

package/dist/process/environment-overlay.js

@@ -0,0 +1 @@
+export const MANAGED_PROCESS_ENVIRONMENT_OVERLAY_STATE_SYMBOL="elench.testkit.engine-process.environment-overlay.v1";export function installManagedProcessEnvironmentOverlay(f){const v=Symbol.for("elench.testkit.engine-process.environment-overlay.v1"),c=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),a=e=>process.platform==="win32"?e.toUpperCase():e,b=(e,n)=>{const t=Object.entries(e),o=Object.entries(n);return t.length===o.length&&t.every(([E,O])=>n[E]===O)},w=e=>c(e)&&c(e.environment)&&typeof e.label=="string"&&c(e.proxy),r=f.label.trim();if(r.length===0)throw new TypeError("Managed process environment label must be non-empty");if(!c(f.environment))throw new TypeError(`${r} managed process environment must be an object`);const y=Object.entries(f.environment),l=Object.freeze(Object.fromEntries(y)),g=new Set;for(const[e,n]of y){if(e.length===0||e.includes("=")||e.includes("\0")||typeof n!="string"||n.includes("\0"))throw new TypeError(`${r} managed process environment contains an invalid entry`);const t=a(e);if(g.has(t))throw new TypeError(`${r} managed process environment contains duplicate key ${e}`);g.add(t)}const s=Reflect.get(globalThis,v);if(s!==void 0){if(!w(s)||s.label!==r||s.proxy!==process.env||!b(s.environment,l))throw new Error(`${r} process attempted to install a conflicting managed environment`);return s.proxy}const p=process.env,h=new Set(Object.keys(p).map(e=>a(e))),m=new Map;for(const[e]of y){const n=a(e);if(h.has(n))throw new Error(`${r} physical process environment already contains managed key ${e}`);m.set(n,e)}const i=e=>typeof e=="string"?m.get(a(e)):void 0,d=e=>new TypeError(`${r} managed process environment value ${e} is immutable`),u=new Proxy(p,{defineProperty(e,n,t){const o=i(n);if(o!==void 0)throw d(o);return Reflect.defineProperty(e,n,t)},deleteProperty(e,n){const t=i(n);if(t!==void 0)throw d(t);return Reflect.deleteProperty(e,n)},get(e,n){const t=i(n);return t===void 0?Reflect.get(e,n,e):l[t]},getOwnPropertyDescriptor(e,n){const t=i(n);return t===void 0?Reflect.getOwnPropertyDescriptor(e,n):{configurable:!0,enumerable:!1,value:l[t],writable:!1}},has(e,n){return i(n)!==void 0||Reflect.has(e,n)},ownKeys(e){return[...Reflect.ownKeys(e),...m.values()]},set(e,n,t){const o=i(n);if(o!==void 0)throw d(o);return Reflect.set(e,n,t,e)}});return process.env=u,Object.defineProperty(globalThis,v,{configurable:!0,enumerable:!1,value:Object.freeze({environment:l,label:r,proxy:u}),writable:!1}),u}export function managedProcessEnvironmentOverlayInstallerSource(){return`const installManagedProcessEnvironmentOverlay = (${installManagedProcessEnvironmentOverlay.toString()});`}

package/dist/process/environment.d.ts

@@ -0,0 +1,33 @@
+export declare const ENGINE_PROCESS_RESERVED_ENVIRONMENT_KEYS: readonly ["APPDATA", "ComSpec", "HOME", "LANG", "LC_ALL", "LOCALAPPDATA", "PATH", "PATHEXT", "SystemRoot", "TEMP", "TMP", "TMPDIR", "USERPROFILE", "XDG_CACHE_HOME", "XDG_CONFIG_HOME", "XDG_DATA_HOME"];
+export interface InvocationProcessEnvironment {
+    readonly environment: Readonly<Record<string, string>>;
+    readonly homeDirectory: string;
+    readonly temporaryDirectory: string;
+}
+export interface NativeInvocationProcessEnvironmentOptions {
+    readonly ambientEnvironment?: Readonly<NodeJS.ProcessEnv>;
+    readonly nativeTemporaryRootDirectory?: string;
+    readonly platform?: NodeJS.Platform;
+}
+export declare function nativeTemporaryRoot(ambientEnvironment?: Readonly<NodeJS.ProcessEnv>, platform?: NodeJS.Platform): string;
+/**
+ * Creates the operating-system directories owned by one engine invocation.
+ *
+ * Engine processes must not inherit the orchestrator user's home, temporary,
+ * cache, configuration, or executable search paths. Apart from locale, only
+ * the two Windows variables required to launch native processes are copied
+ * from the host.
+ */
+export declare function createInvocationProcessEnvironment(invocationDirectory: string, ambientEnvironment?: Readonly<NodeJS.ProcessEnv>, platform?: NodeJS.Platform): Promise<InvocationProcessEnvironment>;
+/**
+ * Creates an invocation environment whose native-process temporary directory
+ * has a short, operating-system-owned path.
+ *
+ * Chromium and other native tools create Unix-domain sockets below their
+ * temporary directory. A correctly isolated workspace can still be too deeply
+ * nested for those operating-system path limits, so the directory is a fresh
+ * 0700 allocation rather than a shared alias or inherited host path. The
+ * caller owns removing `temporaryDirectory` after the managed process scope
+ * has terminated.
+ */
+export declare function createNativeInvocationProcessEnvironment(invocationDirectory: string, options?: Readonly<NativeInvocationProcessEnvironmentOptions>): Promise<InvocationProcessEnvironment>;

package/dist/process/environment.js

@@ -0,0 +1 @@
+import c from"node:fs/promises";import A from"node:os";import n from"node:path";export const ENGINE_PROCESS_RESERVED_ENVIRONMENT_KEYS=Object.freeze(["APPDATA","ComSpec","HOME","LANG","LC_ALL","LOCALAPPDATA","PATH","PATHEXT","SystemRoot","TEMP","TMP","TMPDIR","USERPROFILE","XDG_CACHE_HOME","XDG_CONFIG_HOME","XDG_DATA_HOME"]);export function nativeTemporaryRoot(t=process.env,o=process.platform){return T(t,o)}export async function createInvocationProcessEnvironment(t,o=process.env,r=process.platform){const e=n.join(t,"tmp");return w(t,e,!0,o,r)}export async function createNativeInvocationProcessEnvironment(t,o={}){const r=o.platform??process.platform,e=o.ambientEnvironment??process.env,s=await v(o.nativeTemporaryRootDirectory??nativeTemporaryRoot(e,r));let a=null;try{const i=await c.mkdtemp(n.join(s,"testkit-engine-"));return a=i,r!=="win32"&&await c.chmod(i,448),a=await P(i,s,r),await w(t,a,!1,e,r)}catch(i){if(a===null)throw i;try{await c.rm(a,{force:!0,recursive:!0})}catch(p){throw new AggregateError([d(i),d(p)],`Could not initialize or remove native invocation temporary directory ${a}`,{cause:p})}throw i}}async function w(t,o,r,e,s){if(!n.isAbsolute(t))throw new Error("Engine invocation directory must be absolute");if(!n.isAbsolute(o))throw new Error("Engine invocation temporary directory must be absolute");const a=n.join(t,"home"),i=n.join(t,"cache"),p=n.join(t,"config"),l=n.join(t,"data"),f=n.join(t,"local-app-data"),E=n.join(t,"app-data");await Promise.all([a,...r?[o]:[],i,p,l,f,E].map(y=>c.mkdir(y,{mode:448})));const m={APPDATA:E,HOME:a,LOCALAPPDATA:f,TEMP:o,TMP:o,TMPDIR:o,USERPROFILE:a,XDG_CACHE_HOME:i,XDG_CONFIG_HOME:p,XDG_DATA_HOME:l};return u(m,e,"LANG"),u(m,e,"LC_ALL"),s==="win32"&&(m.PATH="",u(m,e,"ComSpec"),u(m,e,"SystemRoot")),Object.freeze({environment:Object.freeze(m),homeDirectory:a,temporaryDirectory:o})}async function v(t){if(!n.isAbsolute(t))throw new Error("Native invocation temporary root must be absolute");const o=await c.realpath(t);if(!(await c.stat(o)).isDirectory())throw new Error("Native invocation temporary root must be a directory");return o}async function P(t,o,r){const e=await c.lstat(t);if(!e.isDirectory()||e.isSymbolicLink())throw new Error("Native invocation temporary directory must be a non-symbolic-link directory");if(r!=="win32"&&(e.mode&63)!==0)throw new Error("Native invocation temporary directory must not grant group or other access");const s=await c.realpath(t);if(n.dirname(s)!==o)throw new Error("Native invocation temporary directory escaped its operating-system root");return s}function T(t,o){if(o!=="win32")return"/tmp";const r=t.TEMP??t.TMP;return r===void 0||r.length===0?A.tmpdir():r}function u(t,o,r){const e=o[r];e!==void 0&&(t[r]=e)}function d(t){return t instanceof Error?t:new Error(String(t))}

package/dist/process/files/contained-path.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Containment guards for configured relative paths. Callers hand over a
+ * user-authored path plus the product directory that must contain it; these
+ * helpers reject absolute paths, parent-directory escapes, NUL bytes, and
+ * filesystem links that resolve outside that directory.
+ */
+export declare function normalizeContainedRelativePath(value: string, label: string): string;
+export declare function resolveContainedPath(productDir: string, maybeRelative: string | null | undefined, label: string): string;

package/dist/process/files/contained-path.js

@@ -0,0 +1 @@
+import{isPathWithin as d}from"./paths.js";import c from"fs";import s from"path";export function normalizeContainedRelativePath(o,e){const r=o.replaceAll("\\","/");if(s.posix.isAbsolute(r)||s.win32.isAbsolute(o)||/^[A-Za-z]:/u.test(o))throw new Error(`${e} must be relative to the product directory`);const n=r.split("/");if(n.includes(".."))throw new Error(`${e} must not contain parent-directory segments`);if(n.some(t=>t.includes("\0")))throw new Error(`${e} must not contain NUL bytes`);return n.filter(t=>t&&t!==".").join("/")||"."}export function resolveContainedPath(o,e,r){const n=normalizeContainedRelativePath(e||".",r),t=s.resolve(o),i=s.resolve(t,n);if(!d(t,i))throw new Error(`${r} must remain inside the product directory`);if(!c.existsSync(i))return i;const u=c.realpathSync(t),a=c.realpathSync(i);if(!d(u,a))throw new Error(`${r} resolves outside the product directory`);return a}

package/dist/process/files/directory-status.d.ts

@@ -0,0 +1,14 @@
+export interface DirectoryStatus {
+    exists: boolean;
+    fileCount: number;
+    path: string;
+    sizeBytes: number;
+}
+export interface StatusFile {
+    mtimeMs: number;
+    path: string;
+    size: number;
+}
+export declare function collectDirectorySummary(dir: string): DirectoryStatus;
+export declare function listFiles(dir: string): StatusFile[];
+export declare function pruneEmptyDir(dir: string): void;

package/dist/process/files/directory-status.js

@@ -0,0 +1 @@
+import e from"fs";import f from"path";export function collectDirectorySummary(t){const i=listFiles(t);return{path:t,exists:e.existsSync(t),fileCount:i.length,sizeBytes:i.reduce((r,s)=>r+s.size,0)}}export function listFiles(t){const i=[],r=s=>{if(e.existsSync(s))for(const n of e.readdirSync(s,{withFileTypes:!0})){const o=f.join(s,n.name);if(n.isDirectory())r(o);else if(n.isFile()){const c=e.statSync(o);i.push({path:f.resolve(o),size:c.size,mtimeMs:c.mtimeMs})}}};return r(t),i}export function pruneEmptyDir(t){if(e.existsSync(t))try{e.readdirSync(t).length===0&&e.rmSync(t,{recursive:!0,force:!0})}catch{}}

package/dist/process/files/dotenv.d.ts

@@ -0,0 +1,2 @@
+export declare function parseDotenv(filePath: string): Record<string, string>;
+export declare function parseDotenvString(source: string): Record<string, string>;

package/dist/process/files/dotenv.js

@@ -0,0 +1 @@
+import o from"fs";export function parseDotenv(i){return o.existsSync(i)?parseDotenvString(o.readFileSync(i,"utf8")):{}}export function parseDotenvString(i){const r={};for(const c of i.split(/\r?\n/)){const n=c.trim();if(!n||n.startsWith("#"))continue;const e=n.indexOf("=");if(e===-1)continue;const s=n.slice(0,e).trim();if(s.length===0)continue;let t=n.slice(e+1).trim();(t.startsWith("'")&&t.endsWith("'")||t.startsWith('"')&&t.endsWith('"'))&&(t=t.slice(1,-1)),r[s]=t}return r}

package/dist/process/files/file-snapshot.d.ts

@@ -0,0 +1,34 @@
+export interface FileSnapshotIdentity {
+    readonly ctimeNs: bigint;
+    readonly dev: bigint;
+    readonly ino: bigint;
+    readonly mtimeNs: bigint;
+    readonly size: bigint;
+}
+export interface ReadOnlyOpenFlagConstants {
+    readonly O_NOFOLLOW?: number;
+    readonly O_RDONLY: number;
+}
+/**
+ * Returns the strongest read-only, no-follow open flags available on the host.
+ * Windows does not expose O_NOFOLLOW, so callers must combine its read-only
+ * open with the path/handle identity fencing in this module.
+ */
+export declare function readOnlyNoFollowOpenFlags(platform: NodeJS.Platform, constants: Readonly<ReadOnlyOpenFlagConstants>): number;
+/**
+ * Compares snapshots produced through one filesystem observation channel, such
+ * as two path stats or two stats from the same open handle.
+ */
+export declare function sameFileSnapshot(left: Readonly<FileSnapshotIdentity>, right: Readonly<FileSnapshotIdentity>): boolean;
+/**
+ * Compares a path lstat snapshot with a snapshot from its opened handle.
+ *
+ * Windows path and handle stats are separate observation channels. Node/libuv
+ * can report dev=0 for a path lstat while fstat reports the real nonzero volume
+ * identifier for the same NTFS file, and their timestamp representations can
+ * differ even when both observations name the same file. Device, inode, and
+ * size therefore form the Windows cross-channel identity fence. Callers must
+ * still compare complete snapshots before and after within each individual
+ * channel so timestamp or size mutations remain fail-closed.
+ */
+export declare function samePathAndHandleFileSnapshot(pathIdentity: Readonly<FileSnapshotIdentity>, handleIdentity: Readonly<FileSnapshotIdentity>, platform: NodeJS.Platform): boolean;

package/dist/process/files/file-snapshot.js

@@ -0,0 +1 @@
+export function readOnlyNoFollowOpenFlags(o,e){if(!Number.isInteger(e.O_RDONLY))throw new TypeError("O_RDONLY must be an integer open flag");if(o==="win32")return e.O_RDONLY;const r=e.O_NOFOLLOW;if(typeof r!="number"||!Number.isInteger(r))throw new Error("O_NOFOLLOW is required on non-Windows hosts");return e.O_RDONLY|r}export function sameFileSnapshot(o,e){return o.dev===e.dev&&o.ino===e.ino&&o.size===e.size&&o.mtimeNs===e.mtimeNs&&o.ctimeNs===e.ctimeNs}export function samePathAndHandleFileSnapshot(o,e,r){const s=o.dev===e.dev||r==="win32"&&o.dev===0n&&e.dev!==0n;return r==="win32"?s&&o.ino===e.ino&&o.size===e.size:s&&o.ino===e.ino&&o.size===e.size&&o.mtimeNs===e.mtimeNs&&o.ctimeNs===e.ctimeNs}

package/dist/process/files/json-file.d.ts

@@ -0,0 +1,11 @@
+export declare function isPropertyContainer(value: unknown): value is object;
+export declare function readProperty(value: object, key: PropertyKey): unknown;
+export declare function serializeJson(value: unknown, label: string): string;
+export declare function errorMessage(error: unknown): string;
+export interface AtomicWriteOptions {
+    attempts?: number;
+    baseDelayMs?: number;
+    maxDelayMs?: number;
+}
+export declare function writeJsonFileAtomicWithRetry(filePath: string, value: unknown, options?: AtomicWriteOptions): void;
+export declare function isRetryableAtomicReplaceError(error: unknown): boolean;

package/dist/process/files/json-file.js

@@ -0,0 +1 @@
+import s from"node:fs";import a from"node:path";const p=String;export function isPropertyContainer(t){return typeof t=="object"&&t!==null||typeof t=="function"}export function readProperty(t,e){return Reflect.get(t,e)}export function serializeJson(t,e){let r;try{r=JSON.stringify(t,null,2)}catch(o){throw new Error(`${e} is not JSON serializable`,{cause:o})}if(typeof r!="string")throw new Error(`${e} is not JSON serializable`);return r}export function errorMessage(t){if(t instanceof Error)return t.message;if(isPropertyContainer(t)){const e=readProperty(t,"message");if(typeof e=="string"&&e.length>0)return e}return p(t)}const u=new Set(["EPERM","EACCES","EBUSY"]),y=process.platform==="win32"?100:25,l=10,A=100;class S extends Error{attempts;code="TESTKIT_ATOMIC_WRITE_FAILED";cause;path;tempPath;constructor(e,r,o,n){super(`Failed to atomically replace ${e} after ${o.toString()} attempt${o===1?"":"s"}: ${errorMessage(n)}`,{cause:n}),this.name="AtomicWriteError",this.attempts=o,this.cause=n,this.path=e,this.tempPath=r}}export function writeJsonFileAtomicWithRetry(t,e,r={}){const o=a.dirname(t),n=a.join(o,`.${a.basename(t)}.${process.pid.toString()}.${Date.now().toString()}.${Math.random().toString(16).slice(2)}.tmp`),c=r.attempts??y,f=r.baseDelayMs??l,m=r.maxDelayMs??A;s.writeFileSync(n,serializeJson(e,`atomic JSON file ${t}`));try{for(let i=1;i<=c;i+=1)try{s.renameSync(n,t);return}catch(E){if(!isRetryableAtomicReplaceError(E)||i>=c)throw new S(t,n,i,E);R(Math.min(m,f*i))}}finally{s.rmSync(n,{force:!0})}}export function isRetryableAtomicReplaceError(t){if(!isPropertyContainer(t))return!1;const e=readProperty(t,"code");return typeof e=="string"&&u.has(e)}function R(t){if(t<=0)return;const e=new SharedArrayBuffer(4);Atomics.wait(new Int32Array(e),0,0,t)}

package/dist/process/files/paths.d.ts

@@ -0,0 +1 @@
+export declare function isPathWithin(root: string, candidate: string): boolean;

package/dist/process/files/paths.js

@@ -0,0 +1 @@
+import t from"node:path";export function isPathWithin(r,i){const e=t.relative(t.resolve(r),t.resolve(i));return e===""||!e.startsWith(`..${t.sep}`)&&e!==".."&&!t.isAbsolute(e)}

package/dist/process/files/temp-dir.d.ts

@@ -0,0 +1,11 @@
+export interface MakeTempDirOptions {
+    parentDir?: string | null;
+}
+export interface RemoveTempDirOptions {
+    maxRetries?: number | null;
+    retryDelay?: number | null;
+}
+export declare function defaultTempDirParent(): string;
+export declare function makeTempDir(prefix: string, options?: Readonly<MakeTempDirOptions>): string;
+export declare function makeTempDirAsync(prefix: string, options?: Readonly<MakeTempDirOptions>): Promise<string>;
+export declare function removeTempDir(dir?: string | null, options?: Readonly<RemoveTempDirOptions>): void;

package/dist/process/files/temp-dir.js

@@ -0,0 +1 @@
+import n from"fs";import i from"os";import e from"path";export function defaultTempDirParent(){return i.tmpdir()}export function makeTempDir(r,t={}){const o=e.join(t.parentDir||defaultTempDirParent(),r),a=n.mkdtempSync(e.toNamespacedPath(o));return e.join(e.dirname(o),e.basename(a))}export async function makeTempDirAsync(r,t={}){const o=e.join(t.parentDir||defaultTempDirParent(),r),a=await n.promises.mkdtemp(e.toNamespacedPath(o));return e.join(e.dirname(o),e.basename(a))}export function removeTempDir(r,t={}){r&&n.rmSync(r,{recursive:!0,force:!0,maxRetries:t.maxRetries??(process.platform==="win32"?20:5),retryDelay:t.retryDelay??(process.platform==="win32"?250:100)})}

package/dist/process/host/metadata.d.ts

@@ -0,0 +1,6 @@
+export interface PackageMetadata extends Record<string, unknown> {
+    version: string;
+}
+export declare function readPackageMetadata(): PackageMetadata;
+export declare function safeHostname(): null | string;
+export declare function safeUsername(): null | string;

package/dist/process/host/metadata.js

@@ -0,0 +1 @@
+import t from"node:fs";import n from"node:os";export function readPackageMetadata(){try{const r=new URL("../../../package.json",import.meta.url),e=JSON.parse(t.readFileSync(r,"utf8"));return o(e)&&typeof e.version=="string"?{...e,version:e.version}:{version:"unknown"}}catch{return{version:"unknown"}}}export function safeHostname(){try{return n.hostname()}catch{return null}}export function safeUsername(){try{return n.userInfo().username}catch{return process.env.USER||process.env.USERNAME||null}}function o(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}

package/dist/process/host/platform.d.ts

@@ -0,0 +1,57 @@
+export declare const SUPPORTED_PLATFORMS: readonly ["darwin", "linux", "win32"];
+export declare const SUPPORTED_ARCHITECTURES: readonly ["arm64", "x64"];
+export type SupportedPlatform = (typeof SUPPORTED_PLATFORMS)[number];
+export type SupportedArchitecture = (typeof SUPPORTED_ARCHITECTURES)[number];
+export type LinuxLibc = "glibc" | "musl";
+export interface PlatformTarget {
+    readonly arch: SupportedArchitecture;
+    readonly platform: SupportedPlatform;
+}
+export declare const SUPPORTED_PLATFORM_TARGETS: readonly (Readonly<{
+    arch: "arm64";
+    platform: "darwin";
+}> | Readonly<{
+    arch: "x64";
+    platform: "darwin";
+}> | Readonly<{
+    arch: "arm64";
+    platform: "linux";
+}> | Readonly<{
+    arch: "x64";
+    platform: "linux";
+}> | Readonly<{
+    arch: "x64";
+    platform: "win32";
+}>)[];
+export declare class UnsupportedPlatformTargetError extends Error {
+    readonly arch: string;
+    readonly code = "TESTKIT_PLATFORM_TARGET_UNSUPPORTED";
+    readonly platform: string;
+    constructor(platform: string, arch: string, label?: string);
+}
+export declare function platformTargetKey(target: Readonly<PlatformTarget>): string;
+export declare function currentPlatformTarget(platform?: NodeJS.Platform, arch?: string): PlatformTarget;
+export declare function currentLinuxLibc(): LinuxLibc | null;
+export declare function assertSupportedPlatformTarget(target: Readonly<PlatformTarget>, label?: string): void;
+export declare function isSupportedPlatform(value: string): value is SupportedPlatform;
+export declare function isSupportedArchitecture(value: string): value is SupportedArchitecture;
+export interface CommandResolutionOptions {
+    env?: Readonly<NodeJS.ProcessEnv>;
+    extraWindowsDirs?: readonly string[];
+    platform?: NodeJS.Platform;
+}
+export interface PreparedSpawnCommand {
+    args: string[];
+    command: string;
+    windowsVerbatimArguments: boolean;
+}
+export declare function isWindows(platform?: NodeJS.Platform): boolean;
+export declare function commandName(name: unknown, platform?: NodeJS.Platform): string;
+export declare function executableName(name: unknown, platform?: NodeJS.Platform): string;
+export declare function resolveCommandForSpawn(name: unknown, options?: Readonly<CommandResolutionOptions>): string;
+export declare function prepareCommandForSpawn(name: unknown, args?: unknown, options?: Readonly<CommandResolutionOptions>): PreparedSpawnCommand;
+export declare function packageBinPath(cwd: null | string | undefined, name: unknown, platform?: NodeJS.Platform): string;
+export declare function shellQuote(value: unknown, platform?: NodeJS.Platform): string;
+export declare function joinPathList(entries: readonly unknown[], platform?: NodeJS.Platform): string;
+export declare function dockerHostAddress<T>(host: T, platform?: NodeJS.Platform): T | "host.docker.internal";
+export declare function shouldUseDockerHostNetwork(platform?: NodeJS.Platform): boolean;

package/dist/process/host/platform.js

@@ -0,0 +1 @@
+import u from"node:fs";import a from"node:path";export const SUPPORTED_PLATFORMS=["darwin","linux","win32"],SUPPORTED_ARCHITECTURES=["arm64","x64"],SUPPORTED_PLATFORM_TARGETS=Object.freeze([Object.freeze({arch:"arm64",platform:"darwin"}),Object.freeze({arch:"x64",platform:"darwin"}),Object.freeze({arch:"arm64",platform:"linux"}),Object.freeze({arch:"x64",platform:"linux"}),Object.freeze({arch:"x64",platform:"win32"})]);export class UnsupportedPlatformTargetError extends Error{arch;code="TESTKIT_PLATFORM_TARGET_UNSUPPORTED";platform;constructor(t,e,o="platform target"){super(`${o} does not support ${t}-${e}`),this.name="UnsupportedPlatformTargetError",this.platform=t,this.arch=e}}export function platformTargetKey(r){return`${r.platform}-${r.arch}`}export function currentPlatformTarget(r=process.platform,t=process.arch){if(!isSupportedPlatform(r)||!isSupportedArchitecture(t))throw new UnsupportedPlatformTargetError(r,t);const e={platform:r,arch:t};return assertSupportedPlatformTarget(e,"current platform target"),e}export function currentLinuxLibc(){if(process.platform!=="linux")return null;const r=process.report.getReport(),t=f(r)?r.header:null,e=f(t)?t.glibcVersionRuntime:null;return typeof e=="string"&&e.trim().length>0?"glibc":"musl"}export function assertSupportedPlatformTarget(r,t="platform target"){if(r.platform==="win32"&&r.arch!=="x64")throw new UnsupportedPlatformTargetError(r.platform,r.arch,t)}export function isSupportedPlatform(r){return SUPPORTED_PLATFORMS.includes(r)}export function isSupportedArchitecture(r){return SUPPORTED_ARCHITECTURES.includes(r)}function f(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}export function isWindows(r=process.platform){return r==="win32"}export function commandName(r,t=process.platform){const e=i(r||"").trim();if(!e)throw new Error("commandName requires a non-empty command name");return!isWindows(t)||/\.(?:cmd|bat|exe)$/i.test(e)?e:`${e}.cmd`}export function executableName(r,t=process.platform){const e=i(r||"").trim();if(!e)throw new Error("executableName requires a non-empty command name");return!isWindows(t)||/\.exe$/i.test(e)?e:`${e}.exe`}export function resolveCommandForSpawn(r,t={}){const e=t.platform||process.platform,o=t.env||process.env,n=i(r||"").trim();if(!n)throw new Error("resolveCommandForSpawn requires a non-empty command name");if(!isWindows(e))return n;if(/[\\/]/u.test(n)||a.win32.isAbsolute(n))return A(n);const s=P(n,o),c=[...i(o.PATH||o.Path||"").split(d(e)).map(l=>l.trim()).filter(Boolean),...t.extraWindowsDirs||[],...g(n,o)];for(const l of c)for(const x of s){const m=a.join(l,`${n}${x}`);if(u.existsSync(m))return m}return commandName(n,e)}export function prepareCommandForSpawn(r,t=[],e={}){const o=e.platform||process.platform,n=e.env||process.env,s=resolveCommandForSpawn(r,{...e,platform:o,env:n}),c=E(t)?t.map(l=>i(l)):[];return!isWindows(o)||!/\.(?:cmd|bat)$/i.test(s)?{command:s,args:c,windowsVerbatimArguments:!1}:{command:n.ComSpec||n.COMSPEC||"cmd.exe",args:["/d","/s","/c",h([s,...c])],windowsVerbatimArguments:!0}}export function packageBinPath(r,t,e=process.platform){const o=a.resolve(r||process.cwd()),n=i(t||"").trim();if(!/^[A-Za-z0-9@._/-]+$/.test(n))throw new Error(`Invalid package bin name: ${i(t)}`);const s=a.basename(n);return a.join(o,"node_modules",".bin",commandName(s,e))}export function shellQuote(r,t=process.platform){const e=i(r);return isWindows(t)?w(e):/^[A-Za-z0-9_/:.,@%+=-]*$/.test(e)?e:`'${e.replaceAll("'","'\\''")}'`}function w(r){return/^[A-Za-z0-9_/:.,@%+=\\-]*$/.test(r)?r:`"${r.replaceAll('"','\\"')}"`}function h(r){const[t,...e]=r;return`"${[p(t,{force:!0}),...e.map(o=>p(o))].join(" ")}"`}function p(r,t={}){const e=i(r);return!t.force&&e.length>0&&!/[\s&()<>^|"]/u.test(e)?e:`"${e.replace(/(\\*)"/gu,'$1$1\\"').replace(/\\+$/u,"$&$&")}"`}export function joinPathList(r,t=process.platform){const e=r.filter(Boolean).map(c=>i(c)),n=T(t)||d(t),s=Reflect.apply(Array.prototype.join,e,[n]);if(typeof s!="string")throw new Error("Path-list construction returned an invalid result");return s}function d(r){return isWindows(r)?";":":"}function P(r,t){if(/\.(?:cmd|bat|exe|com)$/i.test(r))return[""];const e=i(t.PATHEXT||".COM;.EXE;.BAT;.CMD").split(";").map(o=>o.trim().toLowerCase()).filter(Boolean);return[...new Set([".cmd",".exe",".bat",".com",...e])]}function A(r){if(u.existsSync(r)||/\.(?:cmd|bat|exe|com)$/i.test(r))return r;for(const t of[".cmd",".exe",".bat",".com"]){const e=`${r}${t}`;if(u.existsSync(e))return e}return commandName(r)}function g(r,t){return r.toLowerCase()!=="volta"?[]:[t.VOLTA_HOME,t.ProgramFiles?a.join(t.ProgramFiles,"Volta"):null,t["ProgramFiles(x86)"]?a.join(t["ProgramFiles(x86)"],"Volta"):null,t.LOCALAPPDATA?a.join(t.LOCALAPPDATA,"Volta","bin"):null,t.USERPROFILE?a.join(t.USERPROFILE,"AppData","Local","Volta","bin"):null].filter(e=>!!e)}export function dockerHostAddress(r,t=process.platform){const e=i(r||"").trim().toLowerCase();return["win32","darwin"].includes(t)&&(e==="127.0.0.1"||e==="localhost"||e==="::1")?"host.docker.internal":r}export function shouldUseDockerHostNetwork(r=process.platform){return r==="linux"}function i(r){const t=Reflect.apply(String,void 0,[r]);if(typeof t!="string")throw new Error("String conversion returned an invalid result");return t}function E(r){return Array.isArray(r)}function T(r){const t=a;if(!f(t))return;const e=t.delimiterForPlatform;if(e!=null){if(typeof e!="function")throw new TypeError("path.delimiterForPlatform is not a function");return Reflect.apply(e,t,[r])}}

package/dist/process/host-command.d.ts

@@ -0,0 +1,4 @@
+import type { ManagedProcessResult } from "./process.js";
+import { type ManagedHostProcessRequest } from "./host-process.js";
+export declare function runManagedHostCommand(request: Readonly<ManagedHostProcessRequest>): Promise<ManagedProcessResult>;
+export declare function requireManagedHostCommandSuccess(displayLabel: string, result: Readonly<ManagedProcessResult>): ManagedProcessResult;

package/dist/process/host-command.js

@@ -0,0 +1,3 @@
+import{managedHostProcessInfrastructureError as i,runManagedHostProcess as a}from"./host-process.js";const c=4e3;export async function runManagedHostCommand(t){const e=await a(t),r=i(t.displayLabel,e);if(r)throw r;if(e.exitCode===null)throw o(t.displayLabel,e,e.exitSignal?`terminated by signal ${e.exitSignal}`:"ended without an exit code");return e}export function requireManagedHostCommandSuccess(t,e){if(e.exitCode===0)return e;throw o(t,e,`exited with code ${String(e.exitCode)}`)}function o(t,e,r){const n=new Error(`${t} ${r}${d(e.stdout,e.stderr)}`);return Object.defineProperty(n,"result",{enumerable:!1,value:Object.freeze({...e})}),n}function d(t,e){const r=[e,t].filter(Boolean).join(`
+`).trim();return r?`
+${r.slice(-c)}`:""}

package/dist/process/host-inspection-command.d.ts

@@ -0,0 +1,13 @@
+export declare const DARWIN_PS_EXECUTABLE = "/bin/ps";
+export declare const HOST_POSIX_INSPECTION_ENVIRONMENT: Readonly<Record<string, string>>;
+export interface WindowsHostPowerShellCommand {
+    readonly environment: Readonly<Record<string, string>>;
+    readonly executable: string;
+    readonly systemRoot: string;
+}
+/**
+ * Returns the host-owned Windows bootstrap captured when this module loaded.
+ * Consumer request environments and later ambient PATH mutation cannot replace
+ * the executable used for authoritative process inspection.
+ */
+export declare function requireWindowsHostPowerShellCommand(): WindowsHostPowerShellCommand;

package/dist/process/host-inspection-command.js

@@ -0,0 +1 @@
+import l from"node:fs";import o from"node:path";export const DARWIN_PS_EXECUTABLE="/bin/ps",HOST_POSIX_INSPECTION_ENVIRONMENT=Object.freeze({LANG:"C",LC_ALL:"C"});const c=process.platform==="win32"?w(process.env):null;export function requireWindowsHostPowerShellCommand(){if(c===null)throw new Error("Windows PowerShell inspection is unavailable on this host");return c}function w(r){const n=p(r,"SystemRoot");if(n===null||n.includes("\0")||!/^[a-z]:[\\/]/iu.test(n)||!o.win32.isAbsolute(n))throw new Error("Windows SystemRoot must be an absolute drive path for process inspection");const e=o.win32.normalize(n),t=o.win32.join(e,"System32"),s=o.win32.join(t,"WindowsPowerShell","v1.0"),i=o.win32.join(s,"powershell.exe");if(!l.existsSync(i))throw new Error(`Windows process inspection requires the host PowerShell executable at ${i}`);return Object.freeze({environment:Object.freeze({ComSpec:o.win32.join(t,"cmd.exe"),Path:[s,t,e].join(";"),PATHEXT:".COM;.EXE;.BAT;.CMD",SystemRoot:e,TEMP:o.win32.join(e,"Temp"),TMP:o.win32.join(e,"Temp"),WINDIR:e}),executable:i,systemRoot:e})}function p(r,n){const e=n.toUpperCase();for(const[t,s]of Object.entries(r))if(t.toUpperCase()===e&&typeof s=="string")return s;return null}

package/dist/process/host-process.d.ts

@@ -0,0 +1,14 @@
+import { type ManagedProcessRequest, type ManagedProcessResult, type SupervisedProcessHandle, type SupervisedProcessOutputMode } from "./process.js";
+export interface ManagedHostProcessRequest extends Omit<ManagedProcessRequest, "env" | "signal"> {
+    readonly env?: Readonly<NodeJS.ProcessEnv>;
+    readonly signal?: AbortSignal;
+}
+export interface SupervisedHostProcessRequest extends ManagedHostProcessRequest {
+    readonly outputMode: SupervisedProcessOutputMode;
+}
+export declare function runManagedHostProcess(request: Readonly<ManagedHostProcessRequest>): Promise<ManagedProcessResult>;
+export declare function startManagedHostProcess(request: Readonly<SupervisedHostProcessRequest>): SupervisedProcessHandle;
+export declare function managedHostProcessInfrastructureError(displayLabel: string, result: Readonly<ManagedProcessResult>): Error | null;
+export declare function normalizeManagedHostEnvironment(environment?: Readonly<NodeJS.ProcessEnv>, platform?: NodeJS.Platform): Record<string, string>;
+export declare function resolveManagedHostExecutable(executable: string, cwd: string, environment: Readonly<Record<string, string>>, platform?: NodeJS.Platform): string;
+export declare function resolveManagedHostExecutableIfAvailable(executable: string, cwd: string, environment: Readonly<Record<string, string>>, platform?: NodeJS.Platform): string | null;

package/dist/process/host-process.js

@@ -0,0 +1 @@
+import d from"node:fs";import s from"node:path";import{runManagedProcess as h,startSupervisedProcess as E}from"./process.js";export function runManagedHostProcess(e){const t=f(e);return h(t)}export function startManagedHostProcess(e){const t=f(e);return E({...t,outputMode:e.outputMode})}export function managedHostProcessInfrastructureError(e,t){const o=[];if(t.terminationError&&o.push(`process-scope termination was incomplete: ${t.terminationError.message}`),t.error&&o.push(`could not execute: ${t.error.message}`),t.timedOut&&o.push("exceeded its managed deadline"),t.cancelled&&o.push("was cancelled"),t.outputLimitExceeded&&o.push("exceeded the managed stdout/stderr capture limit"),o.length===0)return null;const n=new Error(`${e} ${o.join("; ")}`);return Object.defineProperty(n,"result",{enumerable:!1,value:Object.freeze({...t})}),n}export function normalizeManagedHostEnvironment(e=process.env,t=process.platform){const o=Object.entries(e).filter(r=>typeof r[1]=="string");if(t!=="win32")return Object.fromEntries(o);const n=new Map;for(const[r,a]of o){const c=r.toLowerCase();n.set(c,{key:v(c,r),value:a})}return Object.fromEntries([...n.entries()].sort(([r],[a])=>r.localeCompare(a)).map(([,r])=>[r.key,r.value]))}export function resolveManagedHostExecutable(e,t,o,n=process.platform){const r=resolveManagedHostExecutableIfAvailable(e,t,o,n);if(r)return r;throw o.PATH?new Error(`Could not resolve managed host executable ${JSON.stringify(e)}`):new Error(`Could not resolve managed host executable ${JSON.stringify(e)} because PATH is unavailable`)}export function resolveManagedHostExecutableIfAvailable(e,t,o,n=process.platform){if(e.trim().length===0)throw new Error("Managed host process executable must be non-empty");if(!s.isAbsolute(t))throw new Error("Managed host process working directory must be absolute");if(s.isAbsolute(e))return m(e,n);if(e.includes("/")||e.includes("\\"))throw new Error(`Managed host process executable paths must be absolute, got ${JSON.stringify(e)}`);const r=o.PATH;if(!r)return null;const a=b(e,o,n),c=n==="win32"?";":":";for(const u of r.split(c)){if(u.length===0)continue;const g=s.isAbsolute(u)?u:s.resolve(t,u);for(const w of a){const l=s.join(g,`${e}${w}`);try{const i=d.statSync(l);if(i.isFile()&&(n==="win32"||(i.mode&73)!==0))return m(l,n)}catch(i){if(!p(i,"ENOENT")&&!p(i,"ENOTDIR"))throw i}}}return null}function f(e){const t=s.resolve(e.cwd),o=normalizeManagedHostEnvironment(e.env);return{args:e.args,cwd:t,displayLabel:e.displayLabel,env:o,executable:resolveManagedHostExecutable(e.executable,t,o),signal:e.signal??new AbortController().signal,timeoutMs:e.timeoutMs,windowsVerbatimArguments:e.windowsVerbatimArguments}}function b(e,t,o){return o!=="win32"?[""]:s.extname(e).length>0?[""]:(t.PATHEXT||".COM;.EXE").split(";").map(r=>r.trim()).filter(r=>[".com",".exe"].includes(r.toLowerCase()))}function m(e,t){if(t==="win32"&&[".bat",".cmd"].includes(s.extname(e).toLowerCase()))throw new Error(`Windows batch wrappers are not managed host executables: ${e}`);const o=d.statSync(e);if(!o.isFile())throw new Error(`Managed host executable is not a regular file: ${e}`);if(t!=="win32"&&(o.mode&73)===0)throw new Error(`Managed host executable is not executable: ${e}`);return e}function v(e,t){return e==="path"?"PATH":e==="pathext"?"PATHEXT":e==="comspec"?"ComSpec":t}function p(e,t){return e!==null&&typeof e=="object"&&"code"in e&&Reflect.get(e,"code")===t}

package/dist/process/index.d.ts

@@ -0,0 +1,9 @@
+export { runManagedProcess, ProcessExitedBeforeReadyError, startSupervisedProcess, terminateAttributedProcessLineage, terminateOwnedPosixProcessGroup, type AttributedProcessLineageTerminationRequest, type ManagedProcessCancellationSignal, type ManagedProcessRequest, type ManagedProcessResult, type OwnedPosixProcessGroupTerminationRequest, type SupervisedProcessHandle, type SupervisedProcessOutputMode, type SupervisedProcessRecoveryIdentity, type SupervisedProcessReady, type SupervisedProcessRequest, } from "./process.js";
+export { managedHostProcessInfrastructureError, normalizeManagedHostEnvironment, resolveManagedHostExecutable, resolveManagedHostExecutableIfAvailable, runManagedHostProcess, startManagedHostProcess, type ManagedHostProcessRequest, type SupervisedHostProcessRequest, } from "./host-process.js";
+export { requireManagedHostCommandSuccess, runManagedHostCommand } from "./host-command.js";
+export { resolvePosixCommandShell } from "./command-shell.js";
+export { captureOutput, type CaptureOutputOptions, type OutputLineHandler } from "./capture-output.js";
+export { captureProcessCreationIdentity, observeProcessCreationIdentity, processCreationIdentityMatches, type ProcessCreationIdentityObservation, type ProcessCreationIdentityObservationOptions, } from "./process-identity.js";
+export { createInvocationProcessEnvironment, createNativeInvocationProcessEnvironment, ENGINE_PROCESS_RESERVED_ENVIRONMENT_KEYS, type InvocationProcessEnvironment, type NativeInvocationProcessEnvironmentOptions, } from "./environment.js";
+export { installManagedProcessEnvironmentOverlay, managedProcessEnvironmentOverlayInstallerSource, MANAGED_PROCESS_ENVIRONMENT_OVERLAY_STATE_SYMBOL, type ManagedProcessEnvironmentOverlayOptions, } from "./environment-overlay.js";
+export { DEFAULT_SHUTDOWN_TIMEOUT_MS } from "./shutdown.js";

package/dist/process/index.js

@@ -0,0 +1 @@
+export{runManagedProcess,ProcessExitedBeforeReadyError,startSupervisedProcess,terminateAttributedProcessLineage,terminateOwnedPosixProcessGroup}from"./process.js";export{managedHostProcessInfrastructureError,normalizeManagedHostEnvironment,resolveManagedHostExecutable,resolveManagedHostExecutableIfAvailable,runManagedHostProcess,startManagedHostProcess}from"./host-process.js";export{requireManagedHostCommandSuccess,runManagedHostCommand}from"./host-command.js";export{resolvePosixCommandShell}from"./command-shell.js";export{captureOutput}from"./capture-output.js";export{captureProcessCreationIdentity,observeProcessCreationIdentity,processCreationIdentityMatches}from"./process-identity.js";export{createInvocationProcessEnvironment,createNativeInvocationProcessEnvironment,ENGINE_PROCESS_RESERVED_ENVIRONMENT_KEYS}from"./environment.js";export{installManagedProcessEnvironmentOverlay,managedProcessEnvironmentOverlayInstallerSource,MANAGED_PROCESS_ENVIRONMENT_OVERLAY_STATE_SYMBOL}from"./environment-overlay.js";export{DEFAULT_SHUTDOWN_TIMEOUT_MS}from"./shutdown.js";

package/dist/process/lifecycle-fence.d.ts

@@ -0,0 +1,11 @@
+import { type ProcessLockAttempt, type ProcessLockOptions } from "./locks.js";
+declare const PRODUCT_LIFECYCLE_FENCE_BRAND: unique symbol;
+export interface ProductLifecycleFence {
+    readonly [PRODUCT_LIFECYCLE_FENCE_BRAND]: true;
+    readonly productDir: string;
+}
+export declare function resolveProductLifecycleLockPath(productDir: string): string;
+export declare function withProductLifecycleFence<Result>(productDir: string, operation: (fence: ProductLifecycleFence) => Result | PromiseLike<Result>, options?: Readonly<Pick<ProcessLockOptions, "signal">>): Promise<Result>;
+export declare function tryWithProductLifecycleFence<Result>(productDir: string, operation: (fence: ProductLifecycleFence) => Result | PromiseLike<Result>): Promise<ProcessLockAttempt<Result>>;
+export declare function requireProductLifecycleFenceProductDir(fence: Readonly<ProductLifecycleFence>): string;
+export {};

package/dist/process/lifecycle-fence.js

@@ -0,0 +1 @@
+import o from"node:fs";import c from"node:path";import{tryWithProcessLock as l,withProcessLock as f}from"./locks.js";const d=Object.freeze([".testkit","_locks"]),y="run-maintenance.lock",L=Symbol("ProductLifecycleFence"),i=new WeakSet;export function resolveProductLifecycleLockPath(e){const r=o.realpathSync.native(c.resolve(e));return c.join(r,...d,y)}export async function withProductLifecycleFence(e,r,n={}){const t=a(e),u=resolveProductLifecycleLockPath(t.productDir);return o.mkdirSync(c.dirname(u),{recursive:!0}),f(u,()=>s(t,r),{signal:n.signal,timeoutMs:null})}export async function tryWithProductLifecycleFence(e,r){const n=a(e),t=resolveProductLifecycleLockPath(n.productDir);return o.mkdirSync(c.dirname(t),{recursive:!0}),l(t,()=>s(n,r))}export function requireProductLifecycleFenceProductDir(e){if(!i.has(e))throw new Error("Product lifecycle mutation requires an active lifecycle fence");return e.productDir}function a(e){return Object.freeze({[L]:!0,productDir:o.realpathSync.native(c.resolve(e))})}async function s(e,r){i.add(e);try{return await r(e)}finally{i.delete(e)}}

package/dist/process/locks.d.ts

@@ -0,0 +1,28 @@
+interface ProcessLockIdentityObservation {
+    readonly checkedAtMs: number;
+    readonly ownerKey: string;
+}
+export type ProcessLockIdentityObservations = Map<string, ProcessLockIdentityObservation>;
+export interface ProcessLockOptions {
+    /**
+     * Allows reclaiming an aged owner from another hostname only when the lock
+     * path itself is guaranteed to be private to this host.
+     */
+    readonly hostScope?: "current-host" | "shared";
+    readonly identityObservations?: ProcessLockIdentityObservations;
+    readonly retryIntervalMs?: number;
+    readonly signal?: AbortSignal;
+    /** Null, and the default, means wait until ownership changes or aborts. */
+    readonly timeoutMs?: number | null;
+}
+export type ProcessLockAttempt<Result> = {
+    readonly acquired: false;
+} | {
+    readonly acquired: true;
+    readonly value: Result;
+};
+type ProcessLockProbe = "active" | "absent";
+export declare function withProcessLock<Result>(lockPath: string, operation: () => Result | PromiseLike<Result>, options?: Readonly<ProcessLockOptions>): Promise<Result>;
+export declare function tryWithProcessLock<Result>(lockPath: string, operation: () => Result | PromiseLike<Result>, options?: Readonly<Omit<ProcessLockOptions, "timeoutMs">>): Promise<ProcessLockAttempt<Result>>;
+export declare function probeProcessLock(lockPath: string, options?: Readonly<ProcessLockOptions>): ProcessLockProbe;
+export {};

package/dist/process/locks.js

@@ -0,0 +1,4 @@
+import{AsyncLocalStorage as te}from"node:async_hooks";import{randomUUID as re}from"node:crypto";import c from"node:fs";import ne from"node:os";import l from"node:path";import{setTimeout as oe}from"node:timers/promises";import{captureProcessCreationIdentity as F}from"./process-identity.js";function se(e){try{c.mkdirSync(e,{mode:448})}catch(t){if(!i(t,"EEXIST"))throw t}return x(e)}function ce(e){try{const t=c.lstatSync(e);return t.isDirectory()&&!t.isSymbolicLink()?"real":"unsafe"}catch(t){if(i(t,"ENOENT"))return"absent";throw t}}function j(e){const t=c.lstatSync(e,{bigint:!0});if(!t.isDirectory()||t.isSymbolicLink())throw new Error(`Process lock path is not a real directory: ${e}`);return{birthtimeNs:t.birthtimeNs,dev:t.dev,ino:t.ino}}function x(e){try{return j(e)}catch(t){if(i(t,"ENOENT")||ae(t))return null;throw t}}function h(e,t){const n=x(e);return n!==null&&n.birthtimeNs===t.birthtimeNs&&n.dev===t.dev&&n.ino===t.ino}function ie(e,t,n){return h(e,t)?M(n)?"unsafe":"retry":h(n,t)?"published":"unsafe"}function ae(e){return e instanceof Error&&e.message.startsWith("Process lock path is not a real directory:")}const K="owner.json",R=1,A="claim-",g="choosing",V="ticket",ue=100,U=65e3,le=100,fe=new Set(["EACCES","EBUSY","EPERM"]),de=5e3,W=ne.hostname(),me=process.platform==="win32"?de:0,T=new te;class q extends Error{constructor(t,n){super(`Timed out waiting for process lock ${l.basename(t)}${ve(n)}`),this.name="ProcessLockTimeoutError"}}export async function withProcessLock(e,t,n={}){const r=z(e);_e(r);const o=await he(r,n),s=T.getStore(),d=new Set(s??[]);d.add(r);try{return await T.run(d,t)}finally{o()}}export async function tryWithProcessLock(e,t,n={}){let r;try{r=await withProcessLock(e,async()=>{try{return{ok:!0,value:await t()}}catch(o){return{error:o,ok:!1}}},{...n,timeoutMs:0})}catch(o){if(o instanceof q)return{acquired:!1};throw o}if(!r.ok)throw r.error;return{acquired:!0,value:r.value}}export function probeProcessLock(e,t={}){const n=z(e),r=X(n);if(!M(r))return"absent";const o=t.identityObservations??new Map,s=b(r,o,t);return s.rootAvailable&&s.claims.length===0?(P(r),"absent"):"active"}async function he(e,t){const n=De(t.timeoutMs,null,"process lock timeout"),r=Fe(t.retryIntervalMs,ue,"process lock retry interval"),o=t.identityObservations??new Map,s=Q(process.pid);if(s===null)throw new Error(`Cannot acquire process lock ${e}: current process creation identity is unavailable`);const d=Date.now(),f={createdAt:new Date(d).toISOString(),hostname:W,pid:process.pid,processIdentity:s,schemaVersion:R,token:re()},a=X(e),u=l.join(a,`${A}${f.token}`),p=`${a}.preparing-${f.token}`;Ee(p,f);let y=null,v=!1,w=null,S=!1,D=0;try{for(y=j(p);;){N(t.signal,e);const E=se(a);if(E!==null){try{c.renameSync(p,u),S=!0,w=E}catch(m){if(!i(m,"ENOENT"))if(ye(m)){const k=ie(p,y,u);if(k==="published")S=!0,w=E;else if(k==="retry"&&D<le)D+=1;else throw m}else throw m}if(S){if(!h(a,E))throw new Error(`Process lock directory changed during claim publication: ${a}`);if(!h(u,y))throw new Error(`Process lock claim changed during publication: ${u}`);break}}else b(a,o,t);G(e,null,d,n),await J(r,t.signal,e)}if(w===null)throw new Error(`Process lock claim was published without its directory identity: ${u}`);const I=w,Z=b(a,o,t,I),L=we(Z.claims);for(pe(u,L);;){N(t.signal,e);const E=b(a,o,t,I),m=E.claims.find(ee=>ee.claimDirectory===u);if(m?.state!=="ready"||m.ticket!==L||m.ownerRecord===null||!B(m.ownerRecord,f))throw new Error(`Process lock claim disappeared or changed before acquisition: ${u}`);const k=ke(E.claims,m);if(k===null)return v=!0,()=>{Re(u,a,I,f,L)};G(e,k.ownerRecord,d,n),await J(r,t.signal,e)}}finally{S?!v&&w!==null&&y!==null&&h(a,w)&&h(u,y)&&(c.rmSync(u,{force:!0,recursive:!0}),o.delete(u),P(a)):y!==null&&h(p,y)&&c.rmSync(p,{force:!0,recursive:!0})}}function ye(e){return process.platform==="win32"&&C(e)&&typeof e.code=="string"&&fe.has(e.code)}function Ee(e,t){c.mkdirSync(e,{mode:448});try{c.writeFileSync(l.join(e,K),`${JSON.stringify(t)}
+`,{encoding:"utf8",flag:"wx",mode:384}),c.writeFileSync(l.join(e,g),`${t.token}
+`,{encoding:"utf8",flag:"wx",mode:384})}catch(n){throw c.rmSync(e,{force:!0,recursive:!0}),n}}function pe(e,t){c.writeFileSync(l.join(e,V),`${t.toString()}
+`,{encoding:"utf8",flag:"wx",mode:384}),c.rmSync(l.join(e,g))}function we(e){const t=e.reduce((n,r)=>r.ticket===null?n:Math.max(n,r.ticket),0);if(t>=Number.MAX_SAFE_INTEGER)throw new Error("Process lock ticket space is exhausted");return t+1}function ke(e,t){if(t.ticket===null||t.ownerRecord===null)return t;const n=t.ownerRecord.token;for(const r of e){if(r.claimDirectory===t.claimDirectory)continue;if(r.state!=="ready"||r.ticket===null||r.ownerRecord===null)return r;const o=r.ownerRecord.token;if(Se(r.ticket,o,t.ticket,n)<0)return r}return null}function Se(e,t,n,r){return e===n?t.localeCompare(r):e-n}function b(e,t,n,r=null){const o=ce(e);if(o==="absent")return{claims:[],rootAvailable:!0};if(o==="unsafe"){const f=O(e);return Le(e,t,n)?{claims:[],rootAvailable:!0}:{claims:[f],rootAvailable:!1}}if(r!==null&&!h(e,r))return{claims:[O(e)],rootAvailable:!1};let s;try{s=c.readdirSync(e,{withFileTypes:!0})}catch(f){if(i(f,"ENOENT"))return{claims:[],rootAvailable:!0};throw f}const d=[];for(const f of s){const a=l.join(e,f.name),u=!f.name.startsWith(A)||!f.isDirectory()?O(a):Y(a);Ne(u,t,n)?Ie(a,t):d.push(u)}return{claims:d,rootAvailable:!0}}function O(e){return{claimDirectory:e,ownerRecord:null,state:"malformed",ticket:null}}function Y(e){const t=Te(e),n=M(l.join(e,g)),r=be(e),o=l.basename(e).slice(A.length),s=t===null||t.token===o;return{claimDirectory:e,ownerRecord:t,state:t===null||!s?"malformed":n?"choosing":r===null?"malformed":"ready",ticket:r}}function be(e){try{const t=c.readFileSync(l.join(e,V),"utf8").trim(),n=Number(t);return Number.isSafeInteger(n)&&n>0?n:null}catch{return null}}function Ne(e,t,n){const r=e.ownerRecord;if(r===null||r.hostname!==W)return n.hostScope==="current-host"&&Me(e.claimDirectory)>=U;if(Ce(r.pid)==="absent")return!0;const o=_(r),s=t.get(e.claimDirectory);if(s?.ownerKey===o&&Date.now()-s.checkedAtMs<me)return!1;const d=Q(r.pid);return t.set(e.claimDirectory,{checkedAtMs:Date.now(),ownerKey:o}),d!==null&&d!==r.processIdentity}function Ie(e,t){t.delete(e),c.rmSync(e,{force:!0,recursive:!0})}function Le(e,t,n){if(n.hostScope!=="current-host")return!1;const r=H(e);if(r==="absent")return!0;if(r==="real-directory"||ge(r)<U)return!1;const o=H(e);if(o==="absent")return!0;if(o==="real-directory"||!Ae(o,r))return!1;try{return c.unlinkSync(e),t.delete(e),!0}catch(s){if(i(s,"ENOENT"))return!0;if(i(s,"EISDIR")||i(s,"EPERM"))return!1;throw s}}function Re(e,t,n,r,o){if(!h(t,n))throw new Error(`Process lock directory changed before release: ${t}`);const s=Y(e);if(s.state!=="ready"||s.ticket!==o||s.ownerRecord===null||!B(s.ownerRecord,r))throw new Error(`Process lock ownership changed before release: ${e}`);c.rmSync(e,{force:!0,recursive:!0}),P(t)}function H(e){try{const t=c.lstatSync(e,{bigint:!0});return t.isDirectory()&&!t.isSymbolicLink()?"real-directory":{birthtimeNs:t.birthtimeNs,ctimeNs:t.ctimeNs,dev:t.dev,ino:t.ino,mode:t.mode,mtimeNs:t.mtimeNs,size:t.size}}catch(t){if(i(t,"ENOENT"))return"absent";throw t}}function Ae(e,t){return e.birthtimeNs===t.birthtimeNs&&e.ctimeNs===t.ctimeNs&&e.dev===t.dev&&e.ino===t.ino&&e.mode===t.mode&&e.mtimeNs===t.mtimeNs&&e.size===t.size}function ge(e){return Math.max(0,Date.now()-Number(e.mtimeNs)/1e6)}function P(e){try{c.rmdirSync(e)}catch(t){if(!i(t,"ENOENT")&&!i(t,"ENOTEMPTY")&&!i(t,"EEXIST"))throw t}}function Te(e){let t;try{t=JSON.parse(c.readFileSync(l.join(e,K),"utf8"))}catch{return null}return C(t)?Oe(t):null}function Oe(e){const t=Object.keys(e).sort(),n=["createdAt","hostname","pid","processIdentity","schemaVersion","token"];return t.length!==n.length||t.some((r,o)=>r!==n[o])||e.schemaVersion!==R||!je(e.createdAt)||typeof e.hostname!="string"||e.hostname.length===0||!xe(e.pid)||typeof e.processIdentity!="string"||e.processIdentity.length===0||typeof e.token!="string"||e.token.length===0?null:{createdAt:e.createdAt,hostname:e.hostname,pid:e.pid,processIdentity:e.processIdentity,schemaVersion:R,token:e.token}}function B(e,t){return _(e)===_(t)}function _(e){return[e.hostname,e.pid.toString(),e.processIdentity,e.token,e.createdAt].join("\0")}function X(e){return`${e}.dir`}function z(e){const t=l.resolve(Pe(e)),n=c.realpathSync.native(l.dirname(t));return l.join(n,l.basename(t))}function Pe(e){if(e.trim().length===0)throw new Error("Process lock path must not be empty");return e}function _e(e){if(T.getStore()?.has(e))throw new Error(`Reentrant process lock acquisition is not allowed: ${e}`)}function G(e,t,n,r){if(r!==null&&Date.now()-n>=r)throw new q(e,t)}function Me(e){try{return Math.max(0,Date.now()-c.lstatSync(e).mtimeMs)}catch(t){if(i(t,"ENOENT"))return Number.POSITIVE_INFINITY;throw t}}function Ce(e){try{return process.kill(e,0),"alive"}catch(t){return i(t,"ESRCH")?"absent":i(t,"EPERM")?"alive":"unknown"}}async function J(e,t,n){N(t,n);try{await oe(e,void 0,{signal:t})}catch(r){throw N(t,n),r}}function N(e,t){if(e?.aborted)throw $e(e,t)}function $e(e,t){return e.reason instanceof Error?e.reason:new Error(`Waiting for process lock was aborted: ${t}`)}function ve(e){return e===null?"":` (host=${e.hostname} pid=${e.pid.toString()} identity=${e.processIdentity} createdAt=${e.createdAt})`}function De(e,t,n){const r=e===void 0?t:e;if(r!==null&&(!Number.isSafeInteger(r)||r<0))throw new Error(`${n} must be null or a non-negative safe integer`);return r}function Fe(e,t,n){const r=e??t;if(!Number.isSafeInteger(r)||r<=0)throw new Error(`${n} must be a positive safe integer`);return r}function je(e){return typeof e=="string"&&e.length>0&&Number.isFinite(Date.parse(e))}function xe(e){return Number.isSafeInteger(e)&&Number(e)>0}function M(e){try{return c.lstatSync(e),!0}catch(t){if(i(t,"ENOENT"))return!1;throw t}}function i(e,t){return C(e)&&e.code===t}function C(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}let $;function Q(e){return e!==process.pid?F(e):($===void 0&&($=F(e)),$)}

package/dist/process/process-contracts.d.ts

@@ -0,0 +1,70 @@
+import type { Readable, Writable } from "node:stream";
+export interface ManagedProcessCancellationSignal {
+    readonly aborted: boolean;
+    addEventListener(type: "abort", listener: () => void, options?: Readonly<{
+        once?: boolean;
+    }>): void;
+    removeEventListener(type: "abort", listener: () => void): void;
+}
+export interface ManagedProcessRequest {
+    readonly args: readonly string[];
+    readonly cwd: string;
+    readonly displayLabel: string;
+    readonly env: Readonly<Record<string, string>>;
+    readonly executable: string;
+    readonly signal: ManagedProcessCancellationSignal;
+    readonly timeoutMs: number;
+    readonly windowsVerbatimArguments?: boolean;
+}
+export type SupervisedProcessOutputMode = "bounded-capture" | "caller-drained";
+export interface SupervisedProcessRequest extends Omit<ManagedProcessRequest, "timeoutMs"> {
+    readonly shutdownTimeoutMs?: number;
+    readonly outputMode: SupervisedProcessOutputMode;
+    readonly timeoutMs: number | null;
+}
+export interface ManagedProcessResult {
+    readonly cancelled: boolean;
+    readonly error: Error | null;
+    readonly exitCode: number | null;
+    readonly exitSignal: NodeJS.Signals | null;
+    readonly outputLimitExceeded: boolean;
+    readonly stderr: string;
+    readonly stdout: string;
+    /** An observed cleanup failure. Null does not prove that every descendant exited. */
+    readonly terminationError: Error | null;
+    readonly timedOut: boolean;
+}
+export interface SupervisedProcessReady {
+    readonly pid: number;
+    readonly recovery: SupervisedProcessRecoveryIdentity;
+}
+export interface SupervisedProcessRecoveryIdentity {
+    readonly creationIdentity: string;
+    readonly processGroupId: number | null;
+}
+/** A live child handle plus the identity needed for later best-effort recovery. */
+export interface SupervisedProcessHandle {
+    readonly completion: Promise<ManagedProcessResult>;
+    readonly ready: Promise<SupervisedProcessReady>;
+    readonly stderr: Readable;
+    readonly stdin: Writable;
+    readonly stdout: Readable;
+    readonly pid: number;
+    readonly shutdownTimeoutMs: number;
+    readonly shutdownDeadlineAt: number | null;
+    onShutdownStarted(listener: (deadlineAt: number) => void): () => void;
+    stop(deadlineAt?: number): Promise<ManagedProcessResult>;
+}
+export interface AttributedProcessLineageTerminationRequest {
+    readonly displayLabel: string;
+    readonly expectedCreationIdentity?: string;
+    readonly pid: number;
+    readonly signal: NodeJS.Signals;
+}
+export interface OwnedPosixProcessGroupTerminationRequest {
+    readonly displayLabel: string;
+    readonly graceMs: number;
+    readonly leaderCreationIdentity: string;
+    readonly leaderPid: number;
+    readonly processGroupId: number;
+}

package/dist/process/process-contracts.js

@@ -0,0 +1 @@
+export{};

package/dist/process/process-group.d.ts

@@ -0,0 +1,12 @@
+export interface ProcessGroupCleanupOptions {
+    readonly forceWaitMs?: number;
+    readonly initialSignalSent?: boolean;
+    readonly graceMs?: number;
+    readonly remainingMs?: () => number;
+    readonly groupExists?: (processGroupId: number) => boolean;
+    readonly platform?: NodeJS.Platform;
+    readonly sendSignal?: (processGroupId: number, signal: NodeJS.Signals) => void;
+    readonly sleep?: (ms: number) => Promise<void>;
+}
+export declare function cleanupExitedProcessGroup(pid: number, options?: Readonly<ProcessGroupCleanupOptions>): Promise<Error | null>;
+export declare function processGroupExists(pid: number): boolean;

package/dist/process/process-group.js

@@ -0,0 +1 @@
+import{DEFAULT_SHUTDOWN_TIMEOUT_MS as f,FORCE_TERMINATION_WAIT_MS as E}from"./shutdown.js";export async function cleanupExitedProcessGroup(r,t={}){if((t.platform??process.platform)==="win32")return null;const n=t.groupExists??processGroupExists,e=t.sendSignal??g,o=t.sleep??m,c=t.graceMs??f,l=t.forceWaitMs??E;try{return!n(r)||(t.initialSignalSent||e(r,"SIGTERM"),await i(r,c,n,o,t.remainingMs))?null:(e(r,"SIGKILL"),await i(r,l,n,o)?null:new Error(`Managed process group ${r.toString()} did not stop`))}catch(u){return a(u,"ESRCH")?null:M(u)}}async function i(r,t,s,n,e){const o=performance.now(),c=e??(()=>t-(performance.now()-o));for(;c()>0;){if(!s(r))return!0;await n(Math.min(25,Math.max(1,c())))}return!s(r)}function g(r,t){process.kill(-r,t)}function m(r){return new Promise(t=>setTimeout(t,r))}export function processGroupExists(r){try{return process.kill(-r,0),!0}catch(t){if(a(t,"ESRCH"))return!1;if(a(t,"EPERM"))return!0;throw t}}function M(r){return r instanceof Error?r:new Error(String(r))}function a(r,t){return typeof r=="object"&&r!==null&&Reflect.get(r,"code")===t}