@gfdelarue/testkit 0.4.4 → 0.5.0

package/dist/evidence/storage.js

@@ -1,2 +1,2 @@
-import{isWorkObserved as f,recordWork as l}from"../kernel/work-metrics.js";import{isPathWithin as p}from"../process/files/paths.js";import x from"crypto";import i from"fs";import o from"path";import{RUNS_DIRNAME as m}from"./contracts.js";import{isObjectRecord as w,requireManifestRelativePath as v}from"./read-fields.js";export{isObjectRecord}from"./read-fields.js";export function readJsonFile(r){try{let t;if(f()){const n=i.readFileSync(r);l("json.filesRead",1),l("json.bytesRead",n.byteLength),t=n.toString("utf8")}else t=i.readFileSync(r,"utf8");return JSON.parse(t)}catch(t){throw new Error(`Invalid JSON in ${r}: ${errorMessage(t)}`,{cause:t})}}export function runIncludesFile(r,t){const e=normalizePath(t);return r.services.some(n=>n.suites.some(u=>u.files?.some(s=>s.path===e||s.path.endsWith(e))))}export function requireRunId(r){const t=r.run.id==null?null:normalizeRunId(r.run.id);if(t===null)throw new Error("Cannot seal a run bundle without a run id");return t}export function normalizeRunId(r){const t=typeof r=="string"?r:"";if(!t||t==="."||t===".."||t.includes("\0")||t.includes("/")||t.includes("\\"))throw new Error(`Invalid Testkit run id: ${t||"<empty>"}`);return t}export function walkFiles(r){if(!i.existsSync(r))return[];const t=[];for(const e of i.readdirSync(r,{withFileTypes:!0})){const n=o.join(r,e.name);e.isDirectory()?t.push(...walkFiles(n)):e.isFile()&&t.push(n)}return t}export function treeBytes(r){return walkFiles(r).reduce((t,e)=>t+i.statSync(e).size,0)}export function writeBufferAtomic(r,t){i.mkdirSync(o.dirname(r),{recursive:!0});const e=`${r}.${String(process.pid)}.${String(Date.now())}.tmp`;i.writeFileSync(e,t);try{i.renameSync(e,r)}catch(n){if(i.rmSync(e,{force:!0}),!i.existsSync(r))throw n}}export function writeJson(r,t){i.mkdirSync(o.dirname(r),{recursive:!0});const e=JSON.stringify(t,null,2);l("json.serializations"),f()&&l("json.bytesSerialized",Buffer.byteLength(e)),i.writeFileSync(r,`${e}
-`)}export function hashFile(r){const t=i.readFileSync(r);return l("evidence.hashFilesRead",1),l("evidence.hashBytesRead",t.byteLength),sha256(t)}export function sha256(r){return x.createHash("sha256").update(r).digest("hex")}export function stableJson(r){const t=JSON.stringify(d(r));return l("json.canonicalSerializations"),f()&&l("json.canonicalBytesSerialized",Buffer.byteLength(t)),t}function d(r){return Array.isArray(r)?r.map(d):w(r)?Object.fromEntries(Object.keys(r).sort().map(t=>[t,d(r[t])])):r}export function objectRecords(r){return Array.isArray(r)?r.filter(w):[]}export function resolveRunBundleDirectory(r,t){const e=resolveRunsRoot(r,!1),n=o.join(e,t),u=i.lstatSync(n,{throwIfNoEntry:!1});if(u===void 0)return n;if(u.isSymbolicLink())throw new Error(`Immutable run bundle directory must not be a symbolic link: ${t}`);if(!u.isDirectory())throw new Error(`Immutable run bundle path must be a directory: ${t}`);const s=i.realpathSync(e),c=i.realpathSync(n),a=o.relative(s,c);if(a.length===0||a===".."||a.startsWith(`..${o.sep}`)||o.isAbsolute(a))throw new Error(`Immutable run bundle directory must resolve within the runs root: ${t}`);return n}export function resolveRunsRoot(r,t){const e=o.resolve(r),n=resultsRoot(e),u=o.join(n,m);if(t)g(e,n,"Testkit results root"),i.mkdirSync(n,{recursive:!0});else if(!i.existsSync(n))return u;const s=S(n,"Testkit results root");if(y(i.realpathSync(e),s,"Testkit results root must resolve within the product directory"),t)i.mkdirSync(u,{recursive:!0});else if(!i.existsSync(u))return u;const c=S(u,"Immutable run bundles root");return y(s,c,"Immutable run bundles root must resolve within .testkit/results"),u}function g(r,t,e){const n=o.resolve(r),u=i.realpathSync(n);let s=o.resolve(t),c=i.lstatSync(s,{throwIfNoEntry:!1});for(;c===void 0;){const a=o.dirname(s);if(a===s)throw new Error(`${e} has no existing parent directory`);s=a,c=i.lstatSync(s,{throwIfNoEntry:!1})}if(s!==n&&c.isSymbolicLink())throw new Error(`${e} must not traverse a symbolic link`);if(!c.isDirectory())throw new Error(`${e} parent must be a directory`);y(u,i.realpathSync(s),`${e} must resolve within the product directory`,!0)}function S(r,t){const e=i.lstatSync(r,{throwIfNoEntry:!1});if(e===void 0)throw new Error(`${t} does not exist`);if(e.isSymbolicLink())throw new Error(`${t} must not be a symbolic link`);if(!e.isDirectory())throw new Error(`${t} must be a directory`);return i.realpathSync(r)}function y(r,t,e,n=!1){const u=o.relative(r,t);if(!n&&u.length===0||u===".."||u.startsWith(`..${o.sep}`)||o.isAbsolute(u))throw new Error(e)}export function requirePublicationPathOutsideResults(r,t){const e=o.resolve(resultsRoot(r)),n=o.resolve(t);if(p(e,n))throw new Error("Publication directory must be outside .testkit/results");const u=i.realpathSync(e);let s=n,c=i.lstatSync(s,{throwIfNoEntry:!1});for(;c===void 0;){const h=o.dirname(s);if(h===s)throw new Error("Publication directory has no existing parent");s=h,c=i.lstatSync(s,{throwIfNoEntry:!1})}const a=i.realpathSync(s);if(p(u,a))throw new Error("Publication directory must be outside .testkit/results")}export function resolveManifestEntryPath(r,t){const e=o.resolve(r),n=o.resolve(e,v(t,"manifest entry path"));return b(e,n,t),i.existsSync(n)&&b(i.realpathSync(e),i.realpathSync(n),t),n}function b(r,t,e){const n=o.relative(r,t);if(n.length===0||n===".."||n.startsWith(`..${o.sep}`)||o.isAbsolute(n))throw new Error(`manifest path escapes bundle directory: ${e}`)}export function optionalStringArray(r){return Array.isArray(r)?r.filter(t=>typeof t=="string"):[]}export function optionalUnknownArray(r){return Array.isArray(r)?r:[]}export function errorMessage(r){return r instanceof Error?r.message:String(r)}export function bundleRelativePath(r,t){return normalizePath(o.join(".testkit","results",m,r,t))}export function resultsRoot(r){return o.join(r,".testkit","results")}export function normalizePath(r){return r.split(o.sep).join("/")}export function sanitizeSegment(r){return r.toLowerCase().replace(/[^a-z0-9._-]+/gu,"-").replace(/^-+|-+$/gu,"")||"product"}
+import{isWorkObserved as f,recordWork as l}from"../kernel/work-metrics.js";import{isPathWithin as p}from"../process/files/paths.js";import{isUnknownRecord as x}from"../kernel/unknown-values.js";import v from"crypto";import i from"fs";import o from"path";import{RUNS_DIRNAME as m}from"./contracts.js";import{requireManifestRelativePath as g}from"./read-fields.js";import{posixPath as w}from"../process/files/paths.js";import{errorMessage as E}from"../kernel/error-serialization.js";export function readJsonFile(r){try{let t;if(f()){const n=i.readFileSync(r);l("json.filesRead",1),l("json.bytesRead",n.byteLength),t=n.toString("utf8")}else t=i.readFileSync(r,"utf8");return JSON.parse(t)}catch(t){throw new Error(`Invalid JSON in ${r}: ${E(t)}`,{cause:t})}}export function runIncludesFile(r,t){const e=w(t);return r.groups.some(n=>n.suites.some(u=>u.files.some(s=>s.path===e||s.path.endsWith(e))))}export function requireRunId(r){const t=r.run.id==null?null:normalizeRunId(r.run.id);if(t===null)throw new Error("Cannot seal a run bundle without a run id");return t}export function normalizeRunId(r){const t=typeof r=="string"?r:"";if(!t||t==="."||t===".."||t.includes("\0")||t.includes("/")||t.includes("\\"))throw new Error(`Invalid Testkit run id: ${t||"<empty>"}`);return t}export function walkFiles(r){if(!i.existsSync(r))return[];const t=[];for(const e of i.readdirSync(r,{withFileTypes:!0})){const n=o.join(r,e.name);e.isDirectory()?t.push(...walkFiles(n)):e.isFile()&&t.push(n)}return t}export function treeBytes(r){return walkFiles(r).reduce((t,e)=>t+i.statSync(e).size,0)}export function writeBufferAtomic(r,t){i.mkdirSync(o.dirname(r),{recursive:!0});const e=`${r}.${String(process.pid)}.${String(Date.now())}.tmp`;i.writeFileSync(e,t);try{i.renameSync(e,r)}catch(n){if(i.rmSync(e,{force:!0}),!i.existsSync(r))throw n}}export function writeJson(r,t){i.mkdirSync(o.dirname(r),{recursive:!0});const e=JSON.stringify(t,null,2);l("json.serializations"),f()&&l("json.bytesSerialized",Buffer.byteLength(e)),i.writeFileSync(r,`${e}
+`)}export function hashFile(r){const t=i.readFileSync(r);return l("evidence.hashFilesRead",1),l("evidence.hashBytesRead",t.byteLength),sha256(t)}export function sha256(r){return v.createHash("sha256").update(r).digest("hex")}export function stableJson(r){const t=JSON.stringify(d(r));return l("json.canonicalSerializations"),f()&&l("json.canonicalBytesSerialized",Buffer.byteLength(t)),t}function d(r){return Array.isArray(r)?r.map(d):x(r)?Object.fromEntries(Object.keys(r).sort().map(t=>[t,d(r[t])])):r}export function resolveRunBundleDirectory(r,t){const e=resolveRunsRoot(r,!1),n=o.join(e,t),u=i.lstatSync(n,{throwIfNoEntry:!1});if(u===void 0)return n;if(u.isSymbolicLink())throw new Error(`Immutable run bundle directory must not be a symbolic link: ${t}`);if(!u.isDirectory())throw new Error(`Immutable run bundle path must be a directory: ${t}`);const s=i.realpathSync(e),c=i.realpathSync(n),a=o.relative(s,c);if(a.length===0||a===".."||a.startsWith(`..${o.sep}`)||o.isAbsolute(a))throw new Error(`Immutable run bundle directory must resolve within the runs root: ${t}`);return n}export function resolveRunsRoot(r,t){const e=o.resolve(r),n=resultsRoot(e),u=o.join(n,m);if(t)k(e,n,"Testkit results root"),i.mkdirSync(n,{recursive:!0});else if(!i.existsSync(n))return u;const s=S(n,"Testkit results root");if(y(i.realpathSync(e),s,"Testkit results root must resolve within the product directory"),t)i.mkdirSync(u,{recursive:!0});else if(!i.existsSync(u))return u;const c=S(u,"Immutable run bundles root");return y(s,c,"Immutable run bundles root must resolve within .testkit/results"),u}function k(r,t,e){const n=o.resolve(r),u=i.realpathSync(n);let s=o.resolve(t),c=i.lstatSync(s,{throwIfNoEntry:!1});for(;c===void 0;){const a=o.dirname(s);if(a===s)throw new Error(`${e} has no existing parent directory`);s=a,c=i.lstatSync(s,{throwIfNoEntry:!1})}if(s!==n&&c.isSymbolicLink())throw new Error(`${e} must not traverse a symbolic link`);if(!c.isDirectory())throw new Error(`${e} parent must be a directory`);y(u,i.realpathSync(s),`${e} must resolve within the product directory`,!0)}function S(r,t){const e=i.lstatSync(r,{throwIfNoEntry:!1});if(e===void 0)throw new Error(`${t} does not exist`);if(e.isSymbolicLink())throw new Error(`${t} must not be a symbolic link`);if(!e.isDirectory())throw new Error(`${t} must be a directory`);return i.realpathSync(r)}function y(r,t,e,n=!1){const u=o.relative(r,t);if(!n&&u.length===0||u===".."||u.startsWith(`..${o.sep}`)||o.isAbsolute(u))throw new Error(e)}export function requirePublicationPathOutsideResults(r,t){const e=o.resolve(resultsRoot(r)),n=o.resolve(t);if(p(e,n))throw new Error("Publication directory must be outside .testkit/results");const u=i.realpathSync(e);let s=n,c=i.lstatSync(s,{throwIfNoEntry:!1});for(;c===void 0;){const h=o.dirname(s);if(h===s)throw new Error("Publication directory has no existing parent");s=h,c=i.lstatSync(s,{throwIfNoEntry:!1})}const a=i.realpathSync(s);if(p(u,a))throw new Error("Publication directory must be outside .testkit/results")}export function resolveManifestEntryPath(r,t){const e=o.resolve(r),n=o.resolve(e,g(t,"manifest entry path"));return b(e,n,t),i.existsSync(n)&&b(i.realpathSync(e),i.realpathSync(n),t),n}function b(r,t,e){const n=o.relative(r,t);if(n.length===0||n===".."||n.startsWith(`..${o.sep}`)||o.isAbsolute(n))throw new Error(`manifest path escapes bundle directory: ${e}`)}export function optionalStringArray(r){return Array.isArray(r)?r.filter(t=>typeof t=="string"):[]}export function optionalUnknownArray(r){return Array.isArray(r)?r:[]}export function bundleRelativePath(r,t){return w(o.join(".testkit","results",m,r,t))}export function resultsRoot(r){return o.join(r,".testkit","results")}export function sanitizeSegment(r){return r.toLowerCase().replace(/[^a-z0-9._-]+/gu,"-").replace(/^-+|-+$/gu,"")||"product"}

package/dist/evidence/timing.js

@@ -1 +1 @@
-export function createEmptyTimings(){return{version:2,files:{}}}export function normalizeTimings(t){if(!m(t)||t.version!==2||!m(t.files))return createEmptyTimings();const n={};for(const[e,r]of Object.entries(t.files)){if(!m(r))continue;const u=D(r);u&&(n[e]=u)}return{version:2,files:n}}export function applyTimingUpdates(t,n,e=new Date().toISOString()){const r={...t.files},u=e||null;for(const o of n){const i=Math.max(1,Math.round(o.durationMs)),s=r[o.key];if(!s){r[o.key]={durationMs:i,avgDurationMs:i,lastDurationMs:i,minDurationMs:i,maxDurationMs:i,runs:1,lastStatus:o.status||null,updatedAt:u};continue}const M=s.runs,c=M+1,d=s.avgDurationMs||s.durationMs||i,f=Math.max(1,Math.round((d*M+i)/c));r[o.key]={durationMs:f,avgDurationMs:f,lastDurationMs:i,minDurationMs:Math.min(s.minDurationMs||i,i),maxDurationMs:Math.max(s.maxDurationMs||i,i),runs:c,lastStatus:(o.status||null)??s.lastStatus,updatedAt:u}}return{version:2,files:r}}function D(t){if(!p(t.durationMs))return null;const n=a(t.durationMs);return{durationMs:n,avgDurationMs:a(t.avgDurationMs,n),lastDurationMs:a(t.lastDurationMs,n),minDurationMs:a(t.minDurationMs,n),maxDurationMs:a(t.maxDurationMs,n),runs:g(t.runs),lastStatus:l(t.lastStatus),updatedAt:l(t.updatedAt)}}function p(t){return typeof t=="number"?Number.isFinite(t):typeof t!="string"||t.trim().length===0?!1:Number.isFinite(Number(t))}function a(t,n=0){const r=Number(t||n);return Number.isFinite(r)?Math.max(0,Math.round(r)):n}function g(t){const n=Number(t||0);return Number.isFinite(n)?Math.max(0,Math.floor(n)):0}function l(t){return typeof t=="string"&&t.length>0?t:null}function m(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)}
+import{isUnknownRecord as m,optionalString as l}from"../kernel/unknown-values.js";export function createEmptyTimings(){return{version:2,files:{}}}export function normalizeTimings(t){if(!m(t)||t.version!==2||!m(t.files))return createEmptyTimings();const n={};for(const[e,r]of Object.entries(t.files)){if(!m(r))continue;const u=D(r);u&&(n[e]=u)}return{version:2,files:n}}export function applyTimingUpdates(t,n,e=new Date().toISOString()){const r={...t.files},u=e||null;for(const o of n){const i=Math.max(1,Math.round(o.durationMs)),s=r[o.key];if(!s){r[o.key]={durationMs:i,avgDurationMs:i,lastDurationMs:i,minDurationMs:i,maxDurationMs:i,runs:1,lastStatus:o.status||null,updatedAt:u};continue}const M=s.runs,c=M+1,d=s.avgDurationMs||s.durationMs||i,f=Math.max(1,Math.round((d*M+i)/c));r[o.key]={durationMs:f,avgDurationMs:f,lastDurationMs:i,minDurationMs:Math.min(s.minDurationMs||i,i),maxDurationMs:Math.max(s.maxDurationMs||i,i),runs:c,lastStatus:(o.status||null)??s.lastStatus,updatedAt:u}}return{version:2,files:r}}function D(t){if(!p(t.durationMs))return null;const n=a(t.durationMs);return{durationMs:n,avgDurationMs:a(t.avgDurationMs,n),lastDurationMs:a(t.lastDurationMs,n),minDurationMs:a(t.minDurationMs,n),maxDurationMs:a(t.maxDurationMs,n),runs:g(t.runs),lastStatus:l(t.lastStatus),updatedAt:l(t.updatedAt)}}function p(t){return typeof t=="number"?Number.isFinite(t):typeof t!="string"||t.trim().length===0?!1:Number.isFinite(Number(t))}function a(t,n=0){const r=Number(t||n);return Number.isFinite(r)?Math.max(0,Math.round(r)):n}function g(t){const n=Number(t||0);return Number.isFinite(n)?Math.max(0,Math.floor(n)):0}

package/dist/kernel/error-serialization.js

@@ -1 +1 @@
-const g="testkitOperation",m="testkitDiagnostics",c=String;export function attachErrorOperation(t,n){if(!r(t)||!r(n)||s(t,g))return t;const e=y(n);return e!==null&&d(t,g,e),t}export function attachErrorDiagnostics(t,n){if(!r(t)||!r(n))return t;const e=getErrorDiagnostics(t),i={...f(e),...f(n)};return d(t,m,i),t}export function getErrorOperation(t){return r(t)?y(s(t,g)||s(t,"operation")):null}export function getErrorDiagnostics(t){return r(t)?f(s(t,m)||s(t,"diagnostics")):{}}export function errorMessage(t){return t instanceof Error?t.message:c(t)}export function formatError(t){return sanitizeErrorMessage(errorMessage(t))}export function sanitizeErrorMessage(t){return t.replace(/(postgres(?:ql)?:\/\/[^:\s"'@]+:)[^@\s"']+(@)/gi,"$1<redacted>$2").replace(/("password"\s*:\s*")[^"]*(")/gi,"$1<redacted>$2").replace(/('password'\s*:\s*')[^']*(')/gi,"$1<redacted>$2").replace(/(PGPASSWORD=)[^\s'"\\]+/g,"$1<redacted>")}export function errorDetail(t){if(r(t)){const n=s(t,"stack");if(typeof n=="string"&&n.length>0)return n;const e=s(t,"message");if(typeof e=="string"&&e.length>0)return e}return t instanceof Error?t.stack||t.message:c(t)}export function serializeError(t,{includeStack:n=!1}={}){if(t instanceof Error){const e=getErrorOperation(t),i=getErrorDiagnostics(t),o=s(t,"code"),u=s(t,"exitCode"),a=s(t,"status");return{name:t.name||"Error",message:t.message||c(t),...typeof o=="string"?{code:o}:{},...typeof u=="number"&&Number.isInteger(u)?{exitCode:u}:{},...typeof a=="number"&&Number.isInteger(a)?{status:a}:{},...e?{phase:e.name,operation:e}:{},...Object.keys(i).length>0?{diagnostics:i}:{},...n&&typeof t.stack=="string"?{stack:t.stack}:{}}}return{name:"Error",message:c(t)}}function d(t,n,e){Object.defineProperty(t,n,{value:e,configurable:!0,enumerable:!1,writable:!0})}function y(t){if(!r(t))return null;const n=s(t,"id"),e=s(t,"source"),i=s(t,"name"),o=s(t,"kind"),u=s(t,"summary"),a=s(t,"status"),p=s(t,"error");return{...n?{id:c(n)}:{},source:typeof e=="string"?e:"testkit",name:typeof i=="string"&&i?i:"operation",kind:typeof o=="string"&&o?o:"operation",...u?{summary:c(u)}:{},scope:f(s(t,"scope")),...a?{status:c(a)}:{},...p?{error:c(p)}:{}}}function f(t){if(!r(t)||E(t))return{};const n=[];for(const e of Object.keys(t)){const i=s(t,e);i!==void 0&&n.push([e,l(i)])}return Object.fromEntries(n)}function l(t){return t===null?null:typeof t=="string"||typeof t=="number"||typeof t=="boolean"?t:E(t)?t.map(n=>l(n)):r(t)?f(t):c(t)}function s(t,n){return Reflect.get(t,n)}function E(t){return Array.isArray(t)}function r(t){return t!==null&&typeof t=="object"}
+import{redactSensitiveText as O}from"./redaction.js";import{isPropertyContainer as k,isNonNullObject as r,isUnknownArray as p}from"./unknown-values.js";const m="testkitOperation",y="testkitDiagnostics",o=String;export function attachErrorOperation(t,n){if(!r(t)||!r(n)||s(t,m))return t;const e=E(n);return e!==null&&d(t,m,e),t}export function attachErrorDiagnostics(t,n){if(!r(t)||!r(n))return t;const e=getErrorDiagnostics(t),i={...a(e),...a(n)};return d(t,y,i),t}export function getErrorOperation(t){return r(t)?E(s(t,m)||s(t,"operation")):null}export function getErrorDiagnostics(t){return r(t)?a(s(t,y)||s(t,"diagnostics")):{}}export function errorMessage(t){return t instanceof Error?t.message:o(t)}export function formatError(t){return sanitizeErrorMessage(errorMessage(t))}export function sanitizeErrorMessage(t){return O(t)}export function errorDetail(t){if(r(t)){const n=s(t,"stack");if(typeof n=="string"&&n.length>0)return n;const e=s(t,"message");if(typeof e=="string"&&e.length>0)return e}return t instanceof Error?t.stack||t.message:o(t)}export function serializeError(t,{includeStack:n=!1}={}){if(t instanceof Error){const e=getErrorOperation(t),i=getErrorDiagnostics(t),c=s(t,"code"),u=s(t,"exitCode"),f=s(t,"status");return{name:t.name||"Error",message:t.message||o(t),...typeof c=="string"?{code:c}:{},...typeof u=="number"&&Number.isInteger(u)?{exitCode:u}:{},...typeof f=="number"&&Number.isInteger(f)?{status:f}:{},...e?{phase:e.name,operation:e}:{},...Object.keys(i).length>0?{diagnostics:i}:{},...n&&typeof t.stack=="string"?{stack:t.stack}:{}}}return{name:"Error",message:o(t)}}function d(t,n,e){Object.defineProperty(t,n,{value:e,configurable:!0,enumerable:!1,writable:!0})}function E(t){if(!r(t))return null;const n=s(t,"id"),e=s(t,"source"),i=s(t,"name"),c=s(t,"kind"),u=s(t,"summary"),f=s(t,"status"),g=s(t,"error");return{...n?{id:o(n)}:{},source:typeof e=="string"?e:"testkit",name:typeof i=="string"&&i?i:"operation",kind:typeof c=="string"&&c?c:"operation",...u?{summary:o(u)}:{},scope:a(s(t,"scope")),...f?{status:o(f)}:{},...g?{error:o(g)}:{}}}function a(t){if(!r(t)||p(t))return{};const n=[];for(const e of Object.keys(t)){const i=s(t,e);i!==void 0&&n.push([e,l(i)])}return Object.fromEntries(n)}function l(t){return t===null?null:typeof t=="string"||typeof t=="number"||typeof t=="boolean"?t:p(t)?t.map(n=>l(n)):r(t)?a(t):o(t)}function s(t,n){return Reflect.get(t,n)}export function toError(t){return t instanceof Error?t:new Error(String(t))}export function hasErrorCode(t,n){return k(t)&&Reflect.get(t,"code")===n}

package/dist/kernel/redaction-targets.js

@@ -0,0 +1 @@
+import{REDACTED as m,SENSITIVE_KEY_PATTERN as E}from"./redaction.js";import{recordWork as A}from"./work-metrics.js";export const MIN_REDACTION_TARGET_LENGTH=8;const l=/^[a-z][a-z0-9+.-]*:\/\/([^/?#]*)/iu,M=/^postgres(?:ql)?:\/\//iu,u=/["'`]?(?:…|\.\.\.)/gu;export function sensitiveKeyMatcher(t=[]){const r=new Set(t.map(n=>n.toUpperCase()));return n=>E.test(n)||r.has(n.toUpperCase())}export function isRedactionTarget(t){return t.length>=MIN_REDACTION_TARGET_LENGTH}export function envRedactionTargets(t,r=sensitiveKeyMatcher()){return Object.entries(t).flatMap(([n,e])=>e===void 0?[]:valueRedactionTargets(n,e,r))}export function valueRedactionTargets(t,r,n=sensitiveKeyMatcher()){return l.test(r)?urlRedactionTargets(r):n(t)&&isRedactionTarget(r)?[r]:[]}export function jsonRedactionTargets(t,r,n=sensitiveKeyMatcher()){return typeof r=="string"?valueRedactionTargets(t,r,n):Array.isArray(r)?r.flatMap(e=>jsonRedactionTargets(t,e,n)):r!==null&&typeof r=="object"?Object.entries(r).flatMap(([e,o])=>jsonRedactionTargets(e,o,n)):[]}export function urlRedactionTargets(t){const r=l.exec(t);if(r===null)return[];const n=r[1].slice(0,Math.max(r[1].lastIndexOf("@"),0)),e=n.indexOf(":"),o=[...e<0?[]:[n.slice(e+1)],...M.test(t)?O(t.slice(r[0].length)):[]];return[...new Set(o.flatMap(s=>[s,x(s)]))].filter(isRedactionTarget)}function O(t){return(/\?([^#]*)/u.exec(t)?.[1]??"").split("&").flatMap(n=>{const e=n.indexOf("=");return e>0&&x(n.slice(0,e))==="password"?[n.slice(e+1)]:[]})}export function orderRedactionTargets(t){const r=[...t].filter(isRedactionTarget).flatMap(n=>[n,...n.split(/\r?\n/u)]).flatMap(n=>{const e=T(n);return[n,e,T(e)]});return[...new Set(r)].filter(isRedactionTarget).sort((n,e)=>e.length-n.length)}export function replaceRedactionTargets(t,r,n=()=>m){let e=t,o=0;for(const c of r){if(!e.includes(c))continue;const i=e.split(c);o+=i.length-1,e=i.join(n(c))}const s=N(e,r,n);return{replacements:o+s.replacements,text:s.text}}export function redactionTargetSpans(t,r){const n=[];for(const e of r)for(let o=t.indexOf(e);o!==-1;o=t.indexOf(e,o+1))n.push({cut:!1,end:o+e.length,start:o});for(const e of t.matchAll(u)){const o=h(t,e.index,0,r);o>0&&n.push({cut:!0,end:e.index,start:e.index-o})}return n}function N(t,r,n){const e=[];let o=0,s=0;for(const c of t.matchAll(u)){const i=h(t,c.index,o,r);i!==0&&(e.push(t.slice(o,c.index-i),n(t.slice(c.index-i,c.index))),o=c.index,s+=1)}return e.push(t.slice(o)),{replacements:s,text:e.join("")}}const d=new WeakMap;function h(t,r,n,e){let o=d.get(e);o===void 0&&(o=e.map(_),d.set(e,o));let s=0,c=0;return e.forEach((i,R)=>{const p=Math.max(n,r-(i.length-1));if(r-p<=s||r-p<MIN_REDACTION_TARGET_LENGTH)return;const g=o[R];let f=0;for(let a=p;a<r;a++){for(c+=1;f>0&&i[f]!==t[a];)f=g[f-1],c+=1;i[f]===t[a]&&(f+=1)}f>=MIN_REDACTION_TARGET_LENGTH&&f>s&&(s=f)}),A("redaction.truncationSteps",c),s}function _(t){const r=new Int32Array(t.length);let n=0;for(let e=1;e<t.length;e++){for(;n>0&&t[n]!==t[e];)n=r[n-1];t[n]===t[e]&&(n+=1),r[e]=n}return r}function T(t){return JSON.stringify(t).slice(1,-1)}function x(t){try{return decodeURIComponent(t)}catch{return t}}

package/dist/kernel/redaction.js

@@ -1 +1,4 @@
-const S=/\b([A-Z0-9_]+)=([^\s]+)/giu;export const SENSITIVE_KEY_PATTERN=/PASSWORD|TOKEN|SECRET|PRIVATE_KEY|AUTH|COOKIE|SESSION|API_KEY/iu;const T=/(:\/\/[^:\s/@]+:)([^@\s/]+)(@)/gu,a=String;export function redactSensitiveText(r){return u(a(r??"").replace(S,(e,t,s)=>SENSITIVE_KEY_PATTERN.test(t)?/(^|_)URL$/iu.test(t)?`${t}=${u(s)}`:`${t}=<redacted>`:e))}function u(r){return r.replace(T,(e,t,s,c,E)=>{for(let n=E-1;n>=0;n--){const i=r[n];if(/[a-z]/iu.test(i))return`${t}<redacted>${c}`;if(!/[0-9+.-]/u.test(i))break}return e})}
+export const SENSITIVE_KEY_PATTERN=/PASSWORD|TOKEN|SECRET|PRIVATE_KEY|AUTH|COOKIE|SESSION|API_KEY/iu,REDACTED="<redacted>";const I=/\b([A-Z0-9_]+)=(?=\S)/giu,a=/(?:^|_)URL$/iu,P=/["']?[a-z][a-z0-9+.-]*:\/\//iuy,m=/(?:basic|bearer|digest|negotiate|token)[ \t]/iuy,O=/(:\/\/[^:\s/@]*:|%3A\/\/(?:(?!%3A)[^:\s/@])*%3A)[^\s/]+(?=@)/giu,l=/\s/u,b=/(["'`]?)(?:\b|(?<=\\[nrt]))(?:(?:proxy-)?authorization|(?:set-)?cookie)[ \t]*(?::|%3A)[ \t]*(?=\S)/giu,$=/'password'\s*(?::|%3A)\s*'/giu,w=/\\(?:u([\dA-Fa-f]{4})|([\s\S]))/gu,D={b:"\b",f:"\f",n:`
+`,r:"\r",t:"	"},U=8,C=String,E=["\uE000","\uE001","\uE002","\uE003","\uE004","\uE005","\uE006","\uE007","\0"],g=()=>REDACTED;export function redactSensitiveText(n){return _(C(n??""),g)}export function sensitiveTextRanges(n){const e=E.find(s=>!n.includes(s))??E[E.length-1],r=_(n,s=>e.repeat(s.length)),t=[];for(let s=r.indexOf(e);s!==-1;s=r.indexOf(e,s)){let c=s;for(;r[c]===e;)c+=1;t.push({end:c,start:s}),s=c}return t}function _(n,e){return redactUntilUnchanged(n,r=>L(M(K(V(k(r,e),e),e),e),e),e)}export function redactUntilUnchanged(n,e,r=g){let t=n;for(let s=0;s<U;s+=1){const c=e(t);if(c===t)return t;t=c}return r(t)}function k(n,e){const r=[];let t=0;for(const s of n.matchAll(I)){if(s.index<t)continue;const c=s[1];if(!SENSITIVE_KEY_PATTERN.test(c))continue;const i=s.index+s[0].length;if(a.test(c)&&p(P,n,i))continue;const d=y(n,i,e);r.push(n.slice(t,i),d.text),t=d.end}return r.push(n.slice(t)),r.join("")}function y(n,e,r){const t=n[e];if(t==='"'||t==="'"){const o=u(n,e+1,t),f=r(n.slice(e+1,o));return n[o]===t?{end:o+1,text:`${t}${f}${t}`}:{end:o,text:`${t}${f}`}}let s=0;for(;n[e+s]==="\\";)s+=1;const c=n[e+s],i=s>0&&(c==='"'||c==="'")?x(c,s):0;if(i>0&&Number.isFinite(i)){const o=e+s+1,f=A(n,o,c,i),h=n.slice(e,o);return{end:f.end,text:f.closed?`${h}${r(n.slice(o,f.contentEnd))}${n.slice(f.contentEnd,f.end)}`:`${h}${r(n.slice(o,f.end))}`}}let d=n.length;if(p(m,n,e))d=u(n,e,"");else for(let o=e;o<n.length;o+=1)if(l.test(n[o])){d=o;break}return{end:d,text:r(n.slice(e,d))}}function p(n,e,r){return n.lastIndex=r,n.test(e)}function V(n,e){return n.replace(O,(r,t)=>`${t}${e(r.slice(t.length))}`)}function K(n,e){const r=[];let t=0;for(const s of n.matchAll(b)){if(s.index<t)continue;const c=s.index+s[0].length,i=u(n,c,s[1]);r.push(n.slice(t,c),e(n.slice(c,i))),t=i}return r.push(n.slice(t)),r.join("")}function L(n,e){const r=[];let t=0;for(const s of n.matchAll($)){if(s.index<t)continue;const c=s.index+s[0].length,i=u(n,c,"'");r.push(n.slice(t,c),e(n.slice(c,i))),t=i}return r.push(n.slice(t)),r.join("")}function u(n,e,r){for(let t=e;t<n.length;t+=1){const s=n[t];if(s==="\r"||s===`
+`||s===r&&n[t-1]!=="\\")return t}return n.length}function R(n,e,r){let t=0;for(;e-t>r&&n[e-1-t]==="\\";)t+=1;return t}function A(n,e,r,t){const s=r==="'"?t-1:t,c=i=>({closed:!1,contentEnd:i,end:i});for(let i=e;i<n.length;i+=1){const d=n[i];if(d==="\r"||d===`
+`)return c(i);if(d!==r&&d!=='"'&&d!=="n"&&d!=="r")continue;const o=R(n,i,e);if(d===r){const f=x(r,o);if(f===t)return{closed:!0,contentEnd:i-T(r,t),end:i+1};if(f<t)return c(i-T(r,f))}else if(d==='"'){const f=S(o);if(f<s)return c(i-T('"',f))}else if(o>0&&N(o)<=s)return c(i-2**(N(o)-1))}return c(n.length)}function x(n,e){if(n==='"')return S(e);if(e===0)return Number.POSITIVE_INFINITY;let r=e,t=0;for(;r%2===0;)r/=2,t+=1;return r===1?t+1:Number.POSITIVE_INFINITY}function T(n,e){return n==='"'?2**e-1:2**(e-1)}function S(n){let e=n,r=0;for(;e%2===1;)e=(e-1)/2,r+=1;return r}function N(n){let e=n,r=1;for(;e%2===0;)e/=2,r+=1;return r}function M(n,e){const r=[];let t=0;for(let s=n.indexOf('"');s!==-1;s=n.indexOf('"',s+1)){if(s<t)continue;const c=H(n,s);if(c===null)continue;const i=A(n,c.valueStart,'"',c.depth).contentEnd;r.push(n.slice(t,c.valueStart),e(n.slice(c.valueStart,i))),t=i,s=Math.max(s,t-1)}return r.push(n.slice(t)),r.join("")}function H(n,e){const r=S(R(n,e,0)),t=A(n,e+1,'"',r);if(!t.closed)return null;let s=t.end;for(;l.test(n[s]??"");)s+=1;const c=/^(?::|%3A)/iu.exec(n.slice(s,s+3))?.[0].length;if(c===void 0)return null;for(s+=c;l.test(n[s]??"");)s+=1;return s=J(n,s,2**r-1),s<0||!SENSITIVE_KEY_PATTERN.test(Y(n.slice(e+1,t.contentEnd),r))?null:{depth:r,valueStart:s}}function Y(n,e){let r=n;for(let t=0;t<=e&&r.includes("\\");t+=1)r=r.replace(w,(s,c,i)=>c===void 0?D[i]??i:String.fromCharCode(Number.parseInt(c,16)));return r}function J(n,e,r){for(let t=0;t<r;t+=1)if(n[e+t]!=="\\")return-1;return n[e+r]==='"'?e+r+1:-1}

package/dist/kernel/unknown-values.js

@@ -1 +1 @@
-export function isUnknownRecord(n){return typeof n=="object"&&n!==null&&!Array.isArray(n)}export function asUnknownRecord(n){return isUnknownRecord(n)?n:null}export function optionalString(n){return typeof n=="string"&&n.length>0?n:null}export function displayString(n,r){return optionalString(n)??r}
+export function isUnknownRecord(n){return typeof n=="object"&&n!==null&&!Array.isArray(n)}export function asUnknownRecord(n){return isUnknownRecord(n)?n:null}export function optionalString(n){return typeof n=="string"&&n.length>0?n:null}export function displayString(n,t){return optionalString(n)??t}export function isNonNullObject(n){return n!==null&&typeof n=="object"}export function normalizeOptionalString(n){if(typeof n!="string")return null;const t=n.trim();return t.length>0?t:null}export function isUnknownArray(n){return Array.isArray(n)}export function isPropertyContainer(n){return typeof n=="object"&&n!==null||typeof n=="function"}export function readDynamicProperty(n,t){return isPropertyContainer(n)?Reflect.get(n,t):void 0}export function isNullableString(n){return n===null||typeof n=="string"}

package/dist/process/environment.js

@@ -1 +1 @@
-import c from"node:fs/promises";import A from"node:os";import n from"node:path";export const ENGINE_PROCESS_RESERVED_ENVIRONMENT_KEYS=Object.freeze(["APPDATA","ComSpec","HOME","LANG","LC_ALL","LOCALAPPDATA","PATH","PATHEXT","SystemRoot","TEMP","TMP","TMPDIR","USERPROFILE","XDG_CACHE_HOME","XDG_CONFIG_HOME","XDG_DATA_HOME"]);export function nativeTemporaryRoot(t=process.env,o=process.platform){return T(t,o)}export async function createInvocationProcessEnvironment(t,o=process.env,r=process.platform){const e=n.join(t,"tmp");return w(t,e,!0,o,r)}export async function createNativeInvocationProcessEnvironment(t,o={}){const r=o.platform??process.platform,e=o.ambientEnvironment??process.env,s=await v(o.nativeTemporaryRootDirectory??nativeTemporaryRoot(e,r));let a=null;try{const i=await c.mkdtemp(n.join(s,"testkit-engine-"));return a=i,r!=="win32"&&await c.chmod(i,448),a=await P(i,s,r),await w(t,a,!1,e,r)}catch(i){if(a===null)throw i;try{await c.rm(a,{force:!0,recursive:!0})}catch(p){throw new AggregateError([d(i),d(p)],`Could not initialize or remove native invocation temporary directory ${a}`,{cause:p})}throw i}}async function w(t,o,r,e,s){if(!n.isAbsolute(t))throw new Error("Engine invocation directory must be absolute");if(!n.isAbsolute(o))throw new Error("Engine invocation temporary directory must be absolute");const a=n.join(t,"home"),i=n.join(t,"cache"),p=n.join(t,"config"),l=n.join(t,"data"),f=n.join(t,"local-app-data"),E=n.join(t,"app-data");await Promise.all([a,...r?[o]:[],i,p,l,f,E].map(y=>c.mkdir(y,{mode:448})));const m={APPDATA:E,HOME:a,LOCALAPPDATA:f,TEMP:o,TMP:o,TMPDIR:o,USERPROFILE:a,XDG_CACHE_HOME:i,XDG_CONFIG_HOME:p,XDG_DATA_HOME:l};return u(m,e,"LANG"),u(m,e,"LC_ALL"),s==="win32"&&(m.PATH="",u(m,e,"ComSpec"),u(m,e,"SystemRoot")),Object.freeze({environment:Object.freeze(m),homeDirectory:a,temporaryDirectory:o})}async function v(t){if(!n.isAbsolute(t))throw new Error("Native invocation temporary root must be absolute");const o=await c.realpath(t);if(!(await c.stat(o)).isDirectory())throw new Error("Native invocation temporary root must be a directory");return o}async function P(t,o,r){const e=await c.lstat(t);if(!e.isDirectory()||e.isSymbolicLink())throw new Error("Native invocation temporary directory must be a non-symbolic-link directory");if(r!=="win32"&&(e.mode&63)!==0)throw new Error("Native invocation temporary directory must not grant group or other access");const s=await c.realpath(t);if(n.dirname(s)!==o)throw new Error("Native invocation temporary directory escaped its operating-system root");return s}function T(t,o){if(o!=="win32")return"/tmp";const r=t.TEMP??t.TMP;return r===void 0||r.length===0?A.tmpdir():r}function u(t,o,r){const e=o[r];e!==void 0&&(t[r]=e)}function d(t){return t instanceof Error?t:new Error(String(t))}
+import c from"node:fs/promises";import y from"node:os";import a from"node:path";import{toError as w}from"../kernel/error-serialization.js";export const ENGINE_PROCESS_RESERVED_ENVIRONMENT_KEYS=Object.freeze(["APPDATA","ComSpec","HOME","LANG","LC_ALL","LOCALAPPDATA","PATH","PATHEXT","SystemRoot","TEMP","TMP","TMPDIR","USERPROFILE","XDG_CACHE_HOME","XDG_CONFIG_HOME","XDG_DATA_HOME"]);export async function createInvocationProcessEnvironment(t,o=process.env,r=process.platform){const e=a.join(t,"tmp");return d(t,e,!0,o,r)}export async function createNativeInvocationProcessEnvironment(t,o={}){const r=o.platform??process.platform,e=o.ambientEnvironment??process.env,s=await v(o.nativeTemporaryRootDirectory??T(e,r));let n=null;try{const i=await c.mkdtemp(a.join(s,"testkit-engine-"));return n=i,r!=="win32"&&await c.chmod(i,448),n=await P(i,s,r),await d(t,n,!1,e,r)}catch(i){if(n===null)throw i;try{await c.rm(n,{force:!0,recursive:!0})}catch(p){throw new AggregateError([w(i),w(p)],`Could not initialize or remove native invocation temporary directory ${n}`,{cause:p})}throw i}}async function d(t,o,r,e,s){if(!a.isAbsolute(t))throw new Error("Engine invocation directory must be absolute");if(!a.isAbsolute(o))throw new Error("Engine invocation temporary directory must be absolute");const n=a.join(t,"home"),i=a.join(t,"cache"),p=a.join(t,"config"),l=a.join(t,"data"),E=a.join(t,"local-app-data"),f=a.join(t,"app-data");await Promise.all([n,...r?[o]:[],i,p,l,E,f].map(A=>c.mkdir(A,{mode:448})));const m={APPDATA:f,HOME:n,LOCALAPPDATA:E,TEMP:o,TMP:o,TMPDIR:o,USERPROFILE:n,XDG_CACHE_HOME:i,XDG_CONFIG_HOME:p,XDG_DATA_HOME:l};return u(m,e,"LANG"),u(m,e,"LC_ALL"),s==="win32"&&(m.PATH="",u(m,e,"ComSpec"),u(m,e,"SystemRoot")),Object.freeze({environment:Object.freeze(m),homeDirectory:n,temporaryDirectory:o})}async function v(t){if(!a.isAbsolute(t))throw new Error("Native invocation temporary root must be absolute");const o=await c.realpath(t);if(!(await c.stat(o)).isDirectory())throw new Error("Native invocation temporary root must be a directory");return o}async function P(t,o,r){const e=await c.lstat(t);if(!e.isDirectory()||e.isSymbolicLink())throw new Error("Native invocation temporary directory must be a non-symbolic-link directory");if(r!=="win32"&&(e.mode&63)!==0)throw new Error("Native invocation temporary directory must not grant group or other access");const s=await c.realpath(t);if(a.dirname(s)!==o)throw new Error("Native invocation temporary directory escaped its operating-system root");return s}function T(t,o){if(o!=="win32")return"/tmp";const r=t.TEMP??t.TMP;return r===void 0||r.length===0?y.tmpdir():r}function u(t,o,r){const e=o[r];e!==void 0&&(t[r]=e)}

package/dist/process/execa-bundle.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": 1,
   "entrypoint": "dist/process/process.js",
-  "sourceSha256": "a54f01864b603cee568b2945390dff35d578e07f6d26b5add06014169c3d17b0",
-  "bundleSha256": "62f76cf9fd019f6c552bfde2787f058917caf279670a62e7a6bfa12be34cb4b1",
-  "packageLockSha256": "28279c7026f88509edb7789fec03c29abb05f0699247e3f69e695b81a8349cbc",
+  "sourceSha256": "6607c0273f046a00eb72ed4a0cac0f9b1c54d638be535b11188e1c8e20cdea67",
+  "bundleSha256": "6ce5a9db43a95cc11dd3f265a67cbad9bd4c492ea2f33187c6c2474150ce16df",
+  "packageLockSha256": "53ab4740dd4220dec486ba6f21059b6307964fea2ef9b1635598b131ef0a10de",
   "esbuildVersion": "0.28.1",
   "options": {
     "format": "esm",

package/dist/process/files/json-file.js

@@ -1 +1 @@
-import s from"node:fs";import c from"node:path";const p=String;export function isPropertyContainer(t){return typeof t=="object"&&t!==null||typeof t=="function"}export function readProperty(t,r){return Reflect.get(t,r)}export function serializeJson(t,r){let e;try{e=JSON.stringify(t,null,2)}catch(o){throw new Error(`${r} is not JSON serializable`,{cause:o})}if(typeof e!="string")throw new Error(`${r} is not JSON serializable`);return e}export function errorMessage(t){if(t instanceof Error)return t.message;if(isPropertyContainer(t)){const r=readProperty(t,"message");if(typeof r=="string"&&r.length>0)return r}return p(t)}const y=new Set(["EPERM","EACCES","EBUSY"]),u=process.platform==="win32"?100:25,l=10,A=100;class S extends Error{attempts;code="TESTKIT_ATOMIC_WRITE_FAILED";cause;path;tempPath;constructor(r,e,o,n){super(`Failed to atomically replace ${r} after ${o.toString()} attempt${o===1?"":"s"}: ${errorMessage(n)}`,{cause:n}),this.name="AtomicWriteError",this.attempts=o,this.cause=n,this.path=r,this.tempPath=e}}export function writeJsonFileAtomicWithRetry(t,r,e={}){writeTextFileAtomicWithRetry(t,serializeJson(r,`atomic JSON file ${t}`),e)}export function writeTextFileAtomicWithRetry(t,r,e={}){const o=c.dirname(t),n=c.join(o,`.${c.basename(t)}.${process.pid.toString()}.${Date.now().toString()}.${Math.random().toString(16).slice(2)}.tmp`),a=e.attempts??u,E=e.baseDelayMs??l,m=e.maxDelayMs??A;s.writeFileSync(n,r);try{for(let i=1;i<=a;i+=1)try{s.renameSync(n,t);return}catch(f){if(!isRetryableAtomicReplaceError(f)||i>=a||R(t))throw new S(t,n,i,f);T(Math.min(m,E*i))}}finally{s.rmSync(n,{force:!0})}}export function isRetryableAtomicReplaceError(t){if(!isPropertyContainer(t))return!1;const r=readProperty(t,"code");return typeof r=="string"&&y.has(r)}function R(t){try{return s.lstatSync(t).isDirectory()}catch{return!1}}function T(t){if(t<=0)return;const r=new SharedArrayBuffer(4);Atomics.wait(new Int32Array(r),0,0,t)}
+import s from"node:fs";import a from"node:path";import{isPropertyContainer as p}from"../../kernel/unknown-values.js";const E=String;export function readProperty(t,r){return Reflect.get(t,r)}export function readJsonFileOrNull(t){try{return JSON.parse(s.readFileSync(t,"utf8"))}catch{return null}}export function serializeJson(t,r){let e;try{e=JSON.stringify(t,null,2)}catch(o){throw new Error(`${r} is not JSON serializable`,{cause:o})}if(typeof e!="string")throw new Error(`${r} is not JSON serializable`);return e}export function errorMessage(t){if(t instanceof Error)return t.message;if(p(t)){const r=readProperty(t,"message");if(typeof r=="string"&&r.length>0)return r}return E(t)}const l=new Set(["EPERM","EACCES","EBUSY"]),y=process.platform==="win32"?100:25,S=10,A=100;class R extends Error{attempts;code="TESTKIT_ATOMIC_WRITE_FAILED";cause;path;tempPath;constructor(r,e,o,n){super(`Failed to atomically replace ${r} after ${o.toString()} attempt${o===1?"":"s"}: ${errorMessage(n)}`,{cause:n}),this.name="AtomicWriteError",this.attempts=o,this.cause=n,this.path=r,this.tempPath=e}}export function writeJsonFileAtomicWithRetry(t,r,e={}){writeTextFileAtomicWithRetry(t,serializeJson(r,`atomic JSON file ${t}`),e)}export function writeTextFileAtomicWithRetry(t,r,e={}){const o=a.dirname(t),n=a.join(o,`.${a.basename(t)}.${process.pid.toString()}.${Date.now().toString()}.${Math.random().toString(16).slice(2)}.tmp`),c=e.attempts??y,f=e.baseDelayMs??S,u=e.maxDelayMs??A;s.writeFileSync(n,r);try{for(let i=1;i<=c;i+=1)try{s.renameSync(n,t);return}catch(m){if(!isRetryableAtomicReplaceError(m)||i>=c||T(t))throw new R(t,n,i,m);_(Math.min(u,f*i))}}finally{s.rmSync(n,{force:!0})}}export function isRetryableAtomicReplaceError(t){if(!p(t))return!1;const r=readProperty(t,"code");return typeof r=="string"&&l.has(r)}function T(t){try{return s.lstatSync(t).isDirectory()}catch{return!1}}function _(t){if(t<=0)return;const r=new SharedArrayBuffer(4);Atomics.wait(new Int32Array(r),0,0,t)}

package/dist/process/files/paths.js

@@ -1 +1 @@
-import t from"node:path";export function isPathWithin(r,i){const e=t.relative(t.resolve(r),t.resolve(i));return e===""||!e.startsWith(`..${t.sep}`)&&e!==".."&&!t.isAbsolute(e)}
+import t from"node:path";export function isPathWithin(i,r){const e=t.relative(t.resolve(i),t.resolve(r));return e===""||!e.startsWith(`..${t.sep}`)&&e!==".."&&!t.isAbsolute(e)}export function posixPath(i){return i.split(t.sep).join("/")}

package/dist/process/host/metadata.js

@@ -1 +1 @@
-import t from"node:fs";import n from"node:os";export function readPackageMetadata(){try{const r=new URL("../../../package.json",import.meta.url),e=JSON.parse(t.readFileSync(r,"utf8"));return o(e)&&typeof e.version=="string"?{...e,version:e.version}:{version:"unknown"}}catch{return{version:"unknown"}}}export function safeHostname(){try{return n.hostname()}catch{return null}}export function safeUsername(){try{return n.userInfo().username}catch{return process.env.USER||process.env.USERNAME||null}}function o(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}
+import t from"node:fs";import n from"node:os";import{isUnknownRecord as o}from"../../kernel/unknown-values.js";export function readPackageMetadata(){try{const e=new URL("../../../package.json",import.meta.url),r=JSON.parse(t.readFileSync(e,"utf8"));return o(r)&&typeof r.version=="string"?{...r,version:r.version}:{version:"unknown"}}catch{return{version:"unknown"}}}export function safeHostname(){try{return n.hostname()}catch{return null}}export function safeUsername(){try{return n.userInfo().username}catch{return process.env.USER||process.env.USERNAME||null}}

package/dist/process/host/platform.js

@@ -1 +1 @@
-import u from"node:fs";import a from"node:path";export const SUPPORTED_PLATFORMS=["darwin","linux","win32"],SUPPORTED_ARCHITECTURES=["arm64","x64"],SUPPORTED_PLATFORM_TARGETS=Object.freeze([Object.freeze({arch:"arm64",platform:"darwin"}),Object.freeze({arch:"x64",platform:"darwin"}),Object.freeze({arch:"arm64",platform:"linux"}),Object.freeze({arch:"x64",platform:"linux"}),Object.freeze({arch:"x64",platform:"win32"})]);export class UnsupportedPlatformTargetError extends Error{arch;code="TESTKIT_PLATFORM_TARGET_UNSUPPORTED";platform;constructor(t,e,o="platform target"){super(`${o} does not support ${t}-${e}`),this.name="UnsupportedPlatformTargetError",this.platform=t,this.arch=e}}export function platformTargetKey(r){return`${r.platform}-${r.arch}`}export function currentPlatformTarget(r=process.platform,t=process.arch){if(!isSupportedPlatform(r)||!isSupportedArchitecture(t))throw new UnsupportedPlatformTargetError(r,t);const e={platform:r,arch:t};return assertSupportedPlatformTarget(e,"current platform target"),e}export function currentLinuxLibc(){if(process.platform!=="linux")return null;const r=process.report.getReport(),t=f(r)?r.header:null,e=f(t)?t.glibcVersionRuntime:null;return typeof e=="string"&&e.trim().length>0?"glibc":"musl"}export function assertSupportedPlatformTarget(r,t="platform target"){if(r.platform==="win32"&&r.arch!=="x64")throw new UnsupportedPlatformTargetError(r.platform,r.arch,t)}export function isSupportedPlatform(r){return SUPPORTED_PLATFORMS.includes(r)}export function isSupportedArchitecture(r){return SUPPORTED_ARCHITECTURES.includes(r)}function f(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}export function isWindows(r=process.platform){return r==="win32"}export function commandName(r,t=process.platform){const e=i(r||"").trim();if(!e)throw new Error("commandName requires a non-empty command name");return!isWindows(t)||/\.(?:cmd|bat|exe)$/i.test(e)?e:`${e}.cmd`}export function executableName(r,t=process.platform){const e=i(r||"").trim();if(!e)throw new Error("executableName requires a non-empty command name");return!isWindows(t)||/\.exe$/i.test(e)?e:`${e}.exe`}export function resolveCommandForSpawn(r,t={}){const e=t.platform||process.platform,o=t.env||process.env,n=i(r||"").trim();if(!n)throw new Error("resolveCommandForSpawn requires a non-empty command name");if(!isWindows(e))return n;if(/[\\/]/u.test(n)||a.win32.isAbsolute(n))return A(n);const s=P(n,o),c=[...i(o.PATH||o.Path||"").split(d(e)).map(l=>l.trim()).filter(Boolean),...t.extraWindowsDirs||[],...g(n,o)];for(const l of c)for(const x of s){const m=a.join(l,`${n}${x}`);if(u.existsSync(m))return m}return commandName(n,e)}export function prepareCommandForSpawn(r,t=[],e={}){const o=e.platform||process.platform,n=e.env||process.env,s=resolveCommandForSpawn(r,{...e,platform:o,env:n}),c=E(t)?t.map(l=>i(l)):[];return!isWindows(o)||!/\.(?:cmd|bat)$/i.test(s)?{command:s,args:c,windowsVerbatimArguments:!1}:{command:n.ComSpec||n.COMSPEC||"cmd.exe",args:["/d","/s","/c",h([s,...c])],windowsVerbatimArguments:!0}}export function packageBinPath(r,t,e=process.platform){const o=a.resolve(r||process.cwd()),n=i(t||"").trim();if(!/^[A-Za-z0-9@._/-]+$/.test(n))throw new Error(`Invalid package bin name: ${i(t)}`);const s=a.basename(n);return a.join(o,"node_modules",".bin",commandName(s,e))}export function shellQuote(r,t=process.platform){const e=i(r);return isWindows(t)?w(e):/^[A-Za-z0-9_/:.,@%+=-]*$/.test(e)?e:`'${e.replaceAll("'","'\\''")}'`}function w(r){return/^[A-Za-z0-9_/:.,@%+=\\-]*$/.test(r)?r:`"${r.replaceAll('"','\\"')}"`}function h(r){const[t,...e]=r;return`"${[p(t,{force:!0}),...e.map(o=>p(o))].join(" ")}"`}function p(r,t={}){const e=i(r);return!t.force&&e.length>0&&!/[\s&()<>^|"]/u.test(e)?e:`"${e.replace(/(\\*)"/gu,'$1$1\\"').replace(/\\+$/u,"$&$&")}"`}export function joinPathList(r,t=process.platform){const e=r.filter(Boolean).map(c=>i(c)),n=T(t)||d(t),s=Reflect.apply(Array.prototype.join,e,[n]);if(typeof s!="string")throw new Error("Path-list construction returned an invalid result");return s}function d(r){return isWindows(r)?";":":"}function P(r,t){if(/\.(?:cmd|bat|exe|com)$/i.test(r))return[""];const e=i(t.PATHEXT||".COM;.EXE;.BAT;.CMD").split(";").map(o=>o.trim().toLowerCase()).filter(Boolean);return[...new Set([".cmd",".exe",".bat",".com",...e])]}function A(r){if(u.existsSync(r)||/\.(?:cmd|bat|exe|com)$/i.test(r))return r;for(const t of[".cmd",".exe",".bat",".com"]){const e=`${r}${t}`;if(u.existsSync(e))return e}return commandName(r)}function g(r,t){return r.toLowerCase()!=="volta"?[]:[t.VOLTA_HOME,t.ProgramFiles?a.join(t.ProgramFiles,"Volta"):null,t["ProgramFiles(x86)"]?a.join(t["ProgramFiles(x86)"],"Volta"):null,t.LOCALAPPDATA?a.join(t.LOCALAPPDATA,"Volta","bin"):null,t.USERPROFILE?a.join(t.USERPROFILE,"AppData","Local","Volta","bin"):null].filter(e=>!!e)}export function dockerHostAddress(r,t=process.platform){const e=i(r||"").trim().toLowerCase();return["win32","darwin"].includes(t)&&(e==="127.0.0.1"||e==="localhost"||e==="::1")?"host.docker.internal":r}export function shouldUseDockerHostNetwork(r=process.platform){return r==="linux"}function i(r){const t=Reflect.apply(String,void 0,[r]);if(typeof t!="string")throw new Error("String conversion returned an invalid result");return t}function E(r){return Array.isArray(r)}function T(r){const t=a;if(!f(t))return;const e=t.delimiterForPlatform;if(e!=null){if(typeof e!="function")throw new TypeError("path.delimiterForPlatform is not a function");return Reflect.apply(e,t,[r])}}
+import l from"node:fs";import s from"node:path";import{isUnknownArray as x,isUnknownRecord as u}from"../../kernel/unknown-values.js";export const SUPPORTED_PLATFORMS=["darwin","linux","win32"],SUPPORTED_ARCHITECTURES=["arm64","x64"],SUPPORTED_PLATFORM_TARGETS=Object.freeze([Object.freeze({arch:"arm64",platform:"darwin"}),Object.freeze({arch:"x64",platform:"darwin"}),Object.freeze({arch:"arm64",platform:"linux"}),Object.freeze({arch:"x64",platform:"linux"}),Object.freeze({arch:"x64",platform:"win32"})]);export class UnsupportedPlatformTargetError extends Error{arch;code="TESTKIT_PLATFORM_TARGET_UNSUPPORTED";platform;constructor(t,e,o="platform target"){super(`${o} does not support ${t}-${e}`),this.name="UnsupportedPlatformTargetError",this.platform=t,this.arch=e}}export function platformTargetKey(r){return`${r.platform}-${r.arch}`}export function currentPlatformTarget(r=process.platform,t=process.arch){if(!isSupportedPlatform(r)||!isSupportedArchitecture(t))throw new UnsupportedPlatformTargetError(r,t);const e={platform:r,arch:t};return assertSupportedPlatformTarget(e,"current platform target"),e}export function currentLinuxLibc(){if(process.platform!=="linux")return null;const r=process.report.getReport(),t=u(r)?r.header:null,e=u(t)?t.glibcVersionRuntime:null;return typeof e=="string"&&e.trim().length>0?"glibc":"musl"}export function assertSupportedPlatformTarget(r,t="platform target"){if(r.platform==="win32"&&r.arch!=="x64")throw new UnsupportedPlatformTargetError(r.platform,r.arch,t)}export function isSupportedPlatform(r){return SUPPORTED_PLATFORMS.includes(r)}export function isSupportedArchitecture(r){return SUPPORTED_ARCHITECTURES.includes(r)}export function isWindows(r=process.platform){return r==="win32"}export function commandName(r,t=process.platform){const e=stringifyUnknown(r||"").trim();if(!e)throw new Error("commandName requires a non-empty command name");return!isWindows(t)||/\.(?:cmd|bat|exe)$/i.test(e)?e:`${e}.cmd`}export function executableName(r,t=process.platform){const e=stringifyUnknown(r||"").trim();if(!e)throw new Error("executableName requires a non-empty command name");return!isWindows(t)||/\.exe$/i.test(e)?e:`${e}.exe`}export function resolveCommandForSpawn(r,t={}){const e=t.platform||process.platform,o=t.env||process.env,n=stringifyUnknown(r||"").trim();if(!n)throw new Error("resolveCommandForSpawn requires a non-empty command name");if(!isWindows(e))return n;if(/[\\/]/u.test(n)||s.win32.isAbsolute(n))return g(n);const i=P(n,o),a=[...stringifyUnknown(o.PATH||o.Path||"").split(p(e)).map(c=>c.trim()).filter(Boolean),...A(n,o)];for(const c of a)for(const d of i){const m=s.join(c,`${n}${d}`);if(l.existsSync(m))return m}return commandName(n,e)}export function prepareCommandForSpawn(r,t=[],e={}){const o=e.platform||process.platform,n=e.env||process.env,i=resolveCommandForSpawn(r,{...e,platform:o,env:n}),a=x(t)?t.map(c=>stringifyUnknown(c)):[];return!isWindows(o)||!/\.(?:cmd|bat)$/i.test(i)?{command:i,args:a,windowsVerbatimArguments:!1}:{command:n.ComSpec||n.COMSPEC||"cmd.exe",args:["/d","/s","/c",h([i,...a])],windowsVerbatimArguments:!0}}export function packageBinPath(r,t,e=process.platform){const o=s.resolve(r||process.cwd()),n=stringifyUnknown(t||"").trim();if(!/^[A-Za-z0-9@._/-]+$/.test(n))throw new Error(`Invalid package bin name: ${stringifyUnknown(t)}`);const i=s.basename(n);return s.join(o,"node_modules",".bin",commandName(i,e))}export function shellQuote(r,t=process.platform){const e=stringifyUnknown(r);return isWindows(t)?w(e):/^[A-Za-z0-9_/:.,@%+=-]*$/.test(e)?e:`'${e.replaceAll("'","'\\''")}'`}function w(r){return/^[A-Za-z0-9_/:.,@%+=\\-]*$/.test(r)?r:`"${r.replaceAll('"','\\"')}"`}function h(r){const[t,...e]=r;return`"${[f(t,{force:!0}),...e.map(o=>f(o))].join(" ")}"`}function f(r,t={}){const e=stringifyUnknown(r);return!t.force&&e.length>0&&!/[\s&()<>^|"]/u.test(e)?e:`"${e.replace(/(\\*)"/gu,'$1$1\\"').replace(/\\+$/u,"$&$&")}"`}export function joinPathList(r,t=process.platform){const e=r.filter(Boolean).map(a=>stringifyUnknown(a)),n=E(t)||p(t),i=Reflect.apply(Array.prototype.join,e,[n]);if(typeof i!="string")throw new Error("Path-list construction returned an invalid result");return i}function p(r){return isWindows(r)?";":":"}function P(r,t){if(/\.(?:cmd|bat|exe|com)$/i.test(r))return[""];const e=stringifyUnknown(t.PATHEXT||".COM;.EXE;.BAT;.CMD").split(";").map(o=>o.trim().toLowerCase()).filter(Boolean);return[...new Set([".cmd",".exe",".bat",".com",...e])]}function g(r){if(l.existsSync(r)||/\.(?:cmd|bat|exe|com)$/i.test(r))return r;for(const t of[".cmd",".exe",".bat",".com"]){const e=`${r}${t}`;if(l.existsSync(e))return e}return commandName(r)}function A(r,t){return r.toLowerCase()!=="volta"?[]:[t.VOLTA_HOME,t.ProgramFiles?s.join(t.ProgramFiles,"Volta"):null,t["ProgramFiles(x86)"]?s.join(t["ProgramFiles(x86)"],"Volta"):null,t.LOCALAPPDATA?s.join(t.LOCALAPPDATA,"Volta","bin"):null,t.USERPROFILE?s.join(t.USERPROFILE,"AppData","Local","Volta","bin"):null].filter(e=>!!e)}export function dockerHostAddress(r,t=process.platform){const e=stringifyUnknown(r||"").trim().toLowerCase();return["win32","darwin"].includes(t)&&(e==="127.0.0.1"||e==="localhost"||e==="::1")?"host.docker.internal":r}export function shouldUseDockerHostNetwork(r=process.platform){return r==="linux"}export function stringifyUnknown(r){const t=Reflect.apply(String,void 0,[r]);if(typeof t!="string")throw new Error("String conversion returned an invalid result");return t}function E(r){const t=s;if(!u(t))return;const e=t.delimiterForPlatform;if(e!=null){if(typeof e!="function")throw new TypeError("path.delimiterForPlatform is not a function");return Reflect.apply(e,t,[r])}}

package/dist/process/host-process.js

@@ -1 +1 @@
-import l from"node:fs";import s from"node:path";import{runManagedProcess as E,startSupervisedProcess as f}from"./process.js";export function runManagedHostProcess(e){const t=m(e);return E(t)}export function startManagedHostProcess(e){const t=m(e);return e.recoveryIdentity==="none"?f({...t,outputMode:e.outputMode,recoveryIdentity:"none"}):f({...t,outputMode:e.outputMode})}export function managedHostProcessInfrastructureError(e,t){const o=[];if(t.terminationError&&o.push(`process-scope termination was incomplete: ${t.terminationError.message}`),t.error&&o.push(`could not execute: ${t.error.message}`),t.timedOut&&o.push("exceeded its managed deadline"),t.cancelled&&o.push("was cancelled"),t.outputLimitExceeded&&o.push("exceeded the managed stdout/stderr capture limit"),o.length===0)return null;const r=new Error(`${e} ${o.join("; ")}`);return Object.defineProperty(r,"result",{enumerable:!1,value:Object.freeze({...t})}),r}export function normalizeManagedHostEnvironment(e=process.env,t=process.platform){const o=Object.entries(e).filter(n=>typeof n[1]=="string");if(t!=="win32")return Object.fromEntries(o);const r=new Map;for(const[n,a]of o){const c=n.toLowerCase();r.set(c,{key:y(c,n),value:a})}return Object.fromEntries([...r.entries()].sort(([n],[a])=>n.localeCompare(a)).map(([,n])=>[n.key,n.value]))}export function resolveManagedHostExecutable(e,t,o,r=process.platform){const n=resolveManagedHostExecutableIfAvailable(e,t,o,r);if(n)return n;throw o.PATH?new Error(`Could not resolve managed host executable ${JSON.stringify(e)}`):new Error(`Could not resolve managed host executable ${JSON.stringify(e)} because PATH is unavailable`)}export function resolveManagedHostExecutableIfAvailable(e,t,o,r=process.platform){if(e.trim().length===0)throw new Error("Managed host process executable must be non-empty");if(!s.isAbsolute(t))throw new Error("Managed host process working directory must be absolute");if(s.isAbsolute(e))return p(e,r);if(e.includes("/")||e.includes("\\"))throw new Error(`Managed host process executable paths must be absolute, got ${JSON.stringify(e)}`);const n=o.PATH;if(!n)return null;const a=b(e,o,r),c=r==="win32"?";":":";for(const u of n.split(c)){if(u.length===0)continue;const g=s.isAbsolute(u)?u:s.resolve(t,u);for(const h of a){const d=s.join(g,`${e}${h}`);try{const i=l.statSync(d,{throwIfNoEntry:!1});if(i!==void 0&&i.isFile()&&(r==="win32"||(i.mode&73)!==0))return p(d,r)}catch(i){if(!w(i,"ENOENT")&&!w(i,"ENOTDIR"))throw i}}}return null}function m(e){const t=s.resolve(e.cwd),o=normalizeManagedHostEnvironment(e.env);return{args:e.args,cwd:t,displayLabel:e.displayLabel,env:o,executable:resolveManagedHostExecutable(e.executable,t,o),signal:e.signal??new AbortController().signal,timeoutMs:e.timeoutMs,windowsVerbatimArguments:e.windowsVerbatimArguments}}function b(e,t,o){return o!=="win32"?[""]:s.extname(e).length>0?[""]:(t.PATHEXT||".COM;.EXE").split(";").map(n=>n.trim()).filter(n=>[".com",".exe"].includes(n.toLowerCase()))}function p(e,t){if(t==="win32"&&[".bat",".cmd"].includes(s.extname(e).toLowerCase()))throw new Error(`Windows batch wrappers are not managed host executables: ${e}`);const o=l.statSync(e);if(!o.isFile())throw new Error(`Managed host executable is not a regular file: ${e}`);if(t!=="win32"&&(o.mode&73)===0)throw new Error(`Managed host executable is not executable: ${e}`);return e}function y(e,t){return e==="path"?"PATH":e==="pathext"?"PATHEXT":e==="comspec"?"ComSpec":t}function w(e,t){return e!==null&&typeof e=="object"&&"code"in e&&Reflect.get(e,"code")===t}
+import f from"node:fs";import s from"node:path";import{runManagedProcess as E,startSupervisedProcess as l}from"./process.js";import{hasErrorCode as m}from"../kernel/error-serialization.js";export function runManagedHostProcess(e){const t=p(e);return E(t)}export function startManagedHostProcess(e){const t=p(e);return e.recoveryIdentity==="none"?l({...t,outputMode:e.outputMode,recoveryIdentity:"none"}):l({...t,outputMode:e.outputMode})}export function managedHostProcessInfrastructureError(e,t){const r=[];if(t.terminationError&&r.push(`process-scope termination was incomplete: ${t.terminationError.message}`),t.error&&r.push(`could not execute: ${t.error.message}`),t.timedOut&&r.push("exceeded its managed deadline"),t.cancelled&&r.push("was cancelled"),t.outputLimitExceeded&&r.push("exceeded the managed stdout/stderr capture limit"),r.length===0)return null;const n=new Error(`${e} ${r.join("; ")}`);return Object.defineProperty(n,"result",{enumerable:!1,value:Object.freeze({...t})}),n}export function normalizeManagedHostEnvironment(e=process.env,t=process.platform){const r=Object.entries(e).filter(o=>typeof o[1]=="string");if(t!=="win32")return Object.fromEntries(r);const n=new Map;for(const[o,a]of r){const c=o.toLowerCase();n.set(c,{key:y(c,o),value:a})}return Object.fromEntries([...n.entries()].sort(([o],[a])=>o.localeCompare(a)).map(([,o])=>[o.key,o.value]))}export function resolveManagedHostExecutable(e,t,r,n=process.platform){const o=resolveManagedHostExecutableIfAvailable(e,t,r,n);if(o)return o;throw r.PATH?new Error(`Could not resolve managed host executable ${JSON.stringify(e)}`):new Error(`Could not resolve managed host executable ${JSON.stringify(e)} because PATH is unavailable`)}export function resolveManagedHostExecutableIfAvailable(e,t,r,n=process.platform){if(e.trim().length===0)throw new Error("Managed host process executable must be non-empty");if(!s.isAbsolute(t))throw new Error("Managed host process working directory must be absolute");if(s.isAbsolute(e))return w(e,n);if(e.includes("/")||e.includes("\\"))throw new Error(`Managed host process executable paths must be absolute, got ${JSON.stringify(e)}`);const o=r.PATH;if(!o)return null;const a=b(e,r,n),c=n==="win32"?";":":";for(const u of o.split(c)){if(u.length===0)continue;const h=s.isAbsolute(u)?u:s.resolve(t,u);for(const g of a){const d=s.join(h,`${e}${g}`);try{const i=f.statSync(d,{throwIfNoEntry:!1});if(i!==void 0&&i.isFile()&&(n==="win32"||(i.mode&73)!==0))return w(d,n)}catch(i){if(!m(i,"ENOENT")&&!m(i,"ENOTDIR"))throw i}}}return null}function p(e){const t=s.resolve(e.cwd),r=normalizeManagedHostEnvironment(e.env);return{args:e.args,cwd:t,displayLabel:e.displayLabel,env:r,executable:resolveManagedHostExecutable(e.executable,t,r),signal:e.signal??new AbortController().signal,timeoutMs:e.timeoutMs,...e.timeoutStartsWhenReady===void 0?{}:{timeoutStartsWhenReady:e.timeoutStartsWhenReady},windowsVerbatimArguments:e.windowsVerbatimArguments}}function b(e,t,r){return r!=="win32"?[""]:s.extname(e).length>0?[""]:(t.PATHEXT||".COM;.EXE").split(";").map(o=>o.trim()).filter(o=>[".com",".exe"].includes(o.toLowerCase()))}function w(e,t){if(t==="win32"&&[".bat",".cmd"].includes(s.extname(e).toLowerCase()))throw new Error(`Windows batch wrappers are not managed host executables: ${e}`);const r=f.statSync(e);if(!r.isFile())throw new Error(`Managed host executable is not a regular file: ${e}`);if(t!=="win32"&&(r.mode&73)===0)throw new Error(`Managed host executable is not executable: ${e}`);return e}function y(e,t){return e==="path"?"PATH":e==="pathext"?"PATHEXT":e==="comspec"?"ComSpec":t}

package/dist/process/index.js

@@ -1 +1 @@
-export{runManagedProcess,ProcessExitedBeforeReadyError,startSupervisedProcess,terminateAttributedProcessLineage,terminateOwnedPosixProcessGroup}from"./process.js";export{managedHostProcessInfrastructureError,normalizeManagedHostEnvironment,resolveManagedHostExecutable,resolveManagedHostExecutableIfAvailable,runManagedHostProcess,startManagedHostProcess}from"./host-process.js";export{requireManagedHostCommandSuccess,runManagedHostCommand}from"./host-command.js";export{resolvePosixCommandShell}from"./command-shell.js";export{captureOutput}from"./capture-output.js";export{captureProcessCreationIdentity,observeProcessCreationIdentity,processCreationIdentityMatches}from"./process-identity.js";export{createInvocationProcessEnvironment,createNativeInvocationProcessEnvironment,ENGINE_PROCESS_RESERVED_ENVIRONMENT_KEYS}from"./environment.js";export{installManagedProcessEnvironmentOverlay,managedProcessEnvironmentOverlayInstallerSource,MANAGED_PROCESS_ENVIRONMENT_OVERLAY_STATE_SYMBOL}from"./environment-overlay.js";export{DEFAULT_SHUTDOWN_TIMEOUT_MS}from"./shutdown.js";
+export{runManagedProcess,ProcessExitedBeforeReadyError,startSupervisedProcess,terminateAttributedProcessLineage,terminateOwnedPosixProcessGroup}from"./process.js";export{managedHostProcessInfrastructureError,normalizeManagedHostEnvironment,resolveManagedHostExecutable,resolveManagedHostExecutableIfAvailable,runManagedHostProcess,startManagedHostProcess}from"./host-process.js";export{requireManagedHostCommandSuccess,runManagedHostCommand}from"./host-command.js";export{resolvePosixCommandShell}from"./command-shell.js";export{captureOutput}from"./capture-output.js";export{captureProcessCreationIdentity,observeProcessCreationIdentity,processCreationIdentityMatches}from"./process-identity.js";export{createInvocationProcessEnvironment,createNativeInvocationProcessEnvironment,ENGINE_PROCESS_RESERVED_ENVIRONMENT_KEYS}from"./environment.js";export{installManagedProcessEnvironmentOverlay,managedProcessEnvironmentOverlayInstallerSource,MANAGED_PROCESS_ENVIRONMENT_OVERLAY_STATE_SYMBOL}from"./environment-overlay.js";export{DEFAULT_SHUTDOWN_TIMEOUT_MS}from"./shutdown.js";export{startReadyDeadline}from"./ready-deadline.js";

package/dist/process/lifecycle-fence.js

@@ -1 +1 @@
-import o from"node:fs";import c from"node:path";import{tryWithProcessLock as l,withProcessLock as f}from"./locks.js";const d=Object.freeze([".testkit","_locks"]),y="run-maintenance.lock",L=Symbol("ProductLifecycleFence"),i=new WeakSet;export function resolveProductLifecycleLockPath(e){const r=o.realpathSync.native(c.resolve(e));return c.join(r,...d,y)}export async function withProductLifecycleFence(e,r,n={}){const t=a(e),u=resolveProductLifecycleLockPath(t.productDir);return o.mkdirSync(c.dirname(u),{recursive:!0}),f(u,()=>s(t,r),{signal:n.signal,timeoutMs:null})}export async function tryWithProductLifecycleFence(e,r){const n=a(e),t=resolveProductLifecycleLockPath(n.productDir);return o.mkdirSync(c.dirname(t),{recursive:!0}),l(t,()=>s(n,r))}export function requireProductLifecycleFenceProductDir(e){if(!i.has(e))throw new Error("Product lifecycle mutation requires an active lifecycle fence");return e.productDir}function a(e){return Object.freeze({[L]:!0,productDir:o.realpathSync.native(c.resolve(e))})}async function s(e,r){i.add(e);try{return await r(e)}finally{i.delete(e)}}
+import c from"node:fs";import r from"node:path";import{withProcessLock as a}from"./locks.js";const l=Object.freeze([".testkit","_locks"]),s="run-maintenance.lock",f=Symbol("ProductLifecycleFence"),n=new WeakSet;export function resolveProductLifecycleLockPath(e){const t=c.realpathSync.native(r.resolve(e));return r.join(t,...l,s)}export async function withProductLifecycleFence(e,t,u={}){const o=E(e),i=resolveProductLifecycleLockPath(o.productDir);return c.mkdirSync(r.dirname(i),{recursive:!0}),a(i,()=>L(o,t),{signal:u.signal,timeoutMs:null})}export function requireProductLifecycleFenceProductDir(e){if(!n.has(e))throw new Error("Product lifecycle mutation requires an active lifecycle fence");return e.productDir}function E(e){return Object.freeze({[f]:!0,productDir:c.realpathSync.native(r.resolve(e))})}async function L(e,t){n.add(e);try{return await t(e)}finally{n.delete(e)}}

package/dist/process/locks.js

@@ -1,4 +1,4 @@
-import{AsyncLocalStorage as te}from"node:async_hooks";import{randomUUID as re}from"node:crypto";import i from"node:fs";import ne from"node:os";import a from"node:path";import{setTimeout as oe}from"node:timers/promises";import{captureProcessCreationIdentity as j}from"./process-identity.js";import{channel as se}from"node:diagnostics_channel";const x=se("testkit.work");function ie(e){try{i.mkdirSync(e,{mode:448})}catch(t){if(!c(t,"EEXIST"))throw t}return V(e)}function ce(e){try{const t=i.lstatSync(e);return t.isDirectory()&&!t.isSymbolicLink()?"real":"unsafe"}catch(t){if(c(t,"ENOENT"))return"absent";throw t}}function K(e){const t=i.lstatSync(e,{bigint:!0});if(!t.isDirectory()||t.isSymbolicLink())throw new Error(`Process lock path is not a real directory: ${e}`);return{birthtimeNs:t.birthtimeNs,dev:t.dev,ino:t.ino}}function V(e){try{return K(e)}catch(t){if(c(t,"ENOENT")||ue(t))return null;throw t}}function h(e,t){const n=V(e);return n!==null&&n.birthtimeNs===t.birthtimeNs&&n.dev===t.dev&&n.ino===t.ino}function ae(e,t,n){return h(e,t)?v(n)?"unsafe":"retry":h(n,t)?"published":"unsafe"}function ue(e){return e instanceof Error&&e.message.startsWith("Process lock path is not a real directory:")}const U="owner.json",g=1,T="claim-",M="choosing",W="ticket",le=100,q=65e3,fe=100,me=new Set(["EACCES","EBUSY","EPERM"]),de=5e3,Y=ne.hostname(),he=process.platform==="win32"?de:0,O=new te;class H extends Error{constructor(t,n){super(`Timed out waiting for process lock ${a.basename(t)}${Fe(n)}`),this.name="ProcessLockTimeoutError"}}export async function withProcessLock(e,t,n={}){const r=J(e);_e(r);const o=await ye(r,n),s=O.getStore(),u=new Set(s??[]);u.add(r);try{return await O.run(u,t)}finally{o()}}export async function tryWithProcessLock(e,t,n={}){let r;try{r=await withProcessLock(e,async()=>{try{return{ok:!0,value:await t()}}catch(o){return{error:o,ok:!1}}},{...n,timeoutMs:0})}catch(o){if(o instanceof H)return{acquired:!1};throw o}if(!r.ok)throw r.error;return{acquired:!0,value:r.value}}export function probeProcessLock(e,t={}){const n=J(e),r=G(n);if(!v(r))return"absent";const o=t.identityObservations??new Map,s=R(r,o,t);return s.rootAvailable&&s.claims.length===0?(_(r),"absent"):"active"}async function ye(e,t){const n=je(t.timeoutMs,null,"process lock timeout"),r=xe(t.retryIntervalMs,le,"process lock retry interval");let o=t.retryIntervalMs===void 0?10:r;async function s(){const b=o;o=Math.min(r,o*2),await $e(b,t.signal,e)}const u=t.identityObservations??new Map,f=j(process.pid);if(f===null)throw new Error(`Cannot acquire process lock ${e}: current process creation identity is unavailable`);const E=Date.now(),y={createdAt:new Date(E).toISOString(),hostname:Y,pid:process.pid,processIdentity:f,schemaVersion:g,token:re()},m=G(e),l=a.join(m,`${T}${y.token}`),k=`${m}.preparing-${y.token}`;we(k,y);let w=null,D=!1,S=null,I=!1,F=0;try{for(w=K(k);;){L(t.signal,e);const p=ie(m);if(p!==null){try{i.renameSync(k,l),I=!0,S=p}catch(d){if(!c(d,"ENOENT"))if(Ee(d)){const N=ae(k,w,l);if(N==="published")I=!0,S=p;else if(N==="retry"&&F<fe)F+=1;else throw d}else throw d}if(I){if(!h(m,p))throw new Error(`Process lock directory changed during claim publication: ${m}`);if(!h(l,w))throw new Error(`Process lock claim changed during publication: ${l}`);break}}else R(m,u,t);Q(e,null,E,n),await s()}if(S===null)throw new Error(`Process lock claim was published without its directory identity: ${l}`);const b=S,Z=R(m,u,t,b),A=ke(Z.claims);for(pe(l,A);;){L(t.signal,e);const p=R(m,u,t,b),d=p.claims.find(ee=>ee.claimDirectory===l);if(d?.state!=="ready"||d.ticket!==A||d.ownerRecord===null||!X(d.ownerRecord,y))throw new Error(`Process lock claim disappeared or changed before acquisition: ${l}`);const N=Se(p.claims,d);if(N===null)return D=!0,()=>{Ae(l,m,b,y,A)};Q(e,N.ownerRecord,E,n),await s()}}finally{I?!D&&S!==null&&w!==null&&h(m,S)&&h(l,w)&&(i.rmSync(l,{force:!0,recursive:!0}),u.delete(l),_(m)):w!==null&&h(k,w)&&i.rmSync(k,{force:!0,recursive:!0})}}function Ee(e){return process.platform==="win32"&&$(e)&&typeof e.code=="string"&&me.has(e.code)}function we(e,t){i.mkdirSync(e,{mode:448});try{i.writeFileSync(a.join(e,U),`${JSON.stringify(t)}
-`,{encoding:"utf8",flag:"wx",mode:384}),i.writeFileSync(a.join(e,M),`${t.token}
-`,{encoding:"utf8",flag:"wx",mode:384})}catch(n){throw i.rmSync(e,{force:!0,recursive:!0}),n}}function pe(e,t){i.writeFileSync(a.join(e,W),`${t.toString()}
-`,{encoding:"utf8",flag:"wx",mode:384}),i.rmSync(a.join(e,M))}function ke(e){const t=e.reduce((n,r)=>r.ticket===null?n:Math.max(n,r.ticket),0);if(t>=Number.MAX_SAFE_INTEGER)throw new Error("Process lock ticket space is exhausted");return t+1}function Se(e,t){if(t.ticket===null||t.ownerRecord===null)return t;const n=t.ownerRecord.token;for(const r of e){if(r.claimDirectory===t.claimDirectory)continue;if(r.state!=="ready"||r.ticket===null||r.ownerRecord===null)return r;const o=r.ownerRecord.token;if(be(r.ticket,o,t.ticket,n)<0)return r}return null}function be(e,t,n,r){return e===n?t.localeCompare(r):e-n}function R(e,t,n,r=null){const o=ce(e);if(o==="absent")return{claims:[],rootAvailable:!0};if(o==="unsafe"){const f=P(e);return Le(e,t,n)?{claims:[],rootAvailable:!0}:{claims:[f],rootAvailable:!1}}if(r!==null&&!h(e,r))return{claims:[P(e)],rootAvailable:!1};let s;try{s=i.readdirSync(e,{withFileTypes:!0})}catch(f){if(c(f,"ENOENT"))return{claims:[],rootAvailable:!0};throw f}const u=[];for(const f of s){const E=a.join(e,f.name),y=!f.name.startsWith(T)||!f.isDirectory()?P(E):z(E);Ie(y,t,n)?Re(E,t):u.push(y)}return{claims:u,rootAvailable:!0}}function P(e){return{claimDirectory:e,ownerRecord:null,state:"malformed",ticket:null}}function z(e){const t=Me(e),n=v(a.join(e,M)),r=Ne(e),o=a.basename(e).slice(T.length),s=t===null||t.token===o;return{claimDirectory:e,ownerRecord:t,state:t===null||!s?"malformed":n?"choosing":r===null?"malformed":"ready",ticket:r}}function Ne(e){try{const t=i.readFileSync(a.join(e,W),"utf8").trim(),n=Number(t);return Number.isSafeInteger(n)&&n>0?n:null}catch{return null}}function Ie(e,t,n){const r=e.ownerRecord;if(r===null||r.hostname!==Y)return n.hostScope==="current-host"&&Ce(e.claimDirectory)>=q;if(ve(r.pid)==="absent")return!0;const o=C(r),s=t.get(e.claimDirectory);if(s?.ownerKey===o&&Date.now()-s.checkedAtMs<he)return!1;const u=j(r.pid);return t.set(e.claimDirectory,{checkedAtMs:Date.now(),ownerKey:o}),u!==null&&u!==r.processIdentity}function Re(e,t){t.delete(e),i.rmSync(e,{force:!0,recursive:!0})}function Le(e,t,n){if(n.hostScope!=="current-host")return!1;const r=B(e);if(r==="absent")return!0;if(r==="real-directory"||Te(r)<q)return!1;const o=B(e);if(o==="absent")return!0;if(o==="real-directory"||!ge(o,r))return!1;try{return i.unlinkSync(e),t.delete(e),!0}catch(s){if(c(s,"ENOENT"))return!0;if(c(s,"EISDIR")||c(s,"EPERM"))return!1;throw s}}function Ae(e,t,n,r,o){if(!h(t,n))throw new Error(`Process lock directory changed before release: ${t}`);const s=z(e);if(s.state!=="ready"||s.ticket!==o||s.ownerRecord===null||!X(s.ownerRecord,r))throw new Error(`Process lock ownership changed before release: ${e}`);i.rmSync(e,{force:!0,recursive:!0}),_(t)}function B(e){try{const t=i.lstatSync(e,{bigint:!0});return t.isDirectory()&&!t.isSymbolicLink()?"real-directory":{birthtimeNs:t.birthtimeNs,ctimeNs:t.ctimeNs,dev:t.dev,ino:t.ino,mode:t.mode,mtimeNs:t.mtimeNs,size:t.size}}catch(t){if(c(t,"ENOENT"))return"absent";throw t}}function ge(e,t){return e.birthtimeNs===t.birthtimeNs&&e.ctimeNs===t.ctimeNs&&e.dev===t.dev&&e.ino===t.ino&&e.mode===t.mode&&e.mtimeNs===t.mtimeNs&&e.size===t.size}function Te(e){return Math.max(0,Date.now()-Number(e.mtimeNs)/1e6)}function _(e){try{i.rmdirSync(e)}catch(t){if(!c(t,"ENOENT")&&!c(t,"ENOTEMPTY")&&!c(t,"EEXIST"))throw t}}function Me(e){let t;try{t=JSON.parse(i.readFileSync(a.join(e,U),"utf8"))}catch{return null}return $(t)?Oe(t):null}function Oe(e){const t=Object.keys(e).sort(),n=["createdAt","hostname","pid","processIdentity","schemaVersion","token"];return t.length!==n.length||t.some((r,o)=>r!==n[o])||e.schemaVersion!==g||!Ke(e.createdAt)||typeof e.hostname!="string"||e.hostname.length===0||!Ve(e.pid)||typeof e.processIdentity!="string"||e.processIdentity.length===0||typeof e.token!="string"||e.token.length===0?null:{createdAt:e.createdAt,hostname:e.hostname,pid:e.pid,processIdentity:e.processIdentity,schemaVersion:g,token:e.token}}function X(e,t){return C(e)===C(t)}function C(e){return[e.hostname,e.pid.toString(),e.processIdentity,e.token,e.createdAt].join("\0")}function G(e){return`${e}.dir`}function J(e){const t=a.resolve(Pe(e)),n=i.realpathSync.native(a.dirname(t));return a.join(n,a.basename(t))}function Pe(e){if(e.trim().length===0)throw new Error("Process lock path must not be empty");return e}function _e(e){if(O.getStore()?.has(e))throw new Error(`Reentrant process lock acquisition is not allowed: ${e}`)}function Q(e,t,n,r){if(r!==null&&Date.now()-n>=r)throw new H(e,t)}function Ce(e){try{return Math.max(0,Date.now()-i.lstatSync(e).mtimeMs)}catch(t){if(c(t,"ENOENT"))return Number.POSITIVE_INFINITY;throw t}}function ve(e){try{return process.kill(e,0),"alive"}catch(t){return c(t,"ESRCH")?"absent":c(t,"EPERM")?"alive":"unknown"}}async function $e(e,t,n){L(t,n),x.hasSubscribers&&x.publish({metric:"locks.contentionRetries",amount:1});try{await oe(e,void 0,{signal:t})}catch(r){throw L(t,n),r}}function L(e,t){if(e?.aborted)throw De(e,t)}function De(e,t){return e.reason instanceof Error?e.reason:new Error(`Waiting for process lock was aborted: ${t}`)}function Fe(e){return e===null?"":` (host=${e.hostname} pid=${e.pid.toString()} identity=${e.processIdentity} createdAt=${e.createdAt})`}function je(e,t,n){const r=e===void 0?t:e;if(r!==null&&(!Number.isSafeInteger(r)||r<0))throw new Error(`${n} must be null or a non-negative safe integer`);return r}function xe(e,t,n){const r=e??t;if(!Number.isSafeInteger(r)||r<=0)throw new Error(`${n} must be a positive safe integer`);return r}function Ke(e){return typeof e=="string"&&e.length>0&&Number.isFinite(Date.parse(e))}function Ve(e){return Number.isSafeInteger(e)&&Number(e)>0}function v(e){try{return i.lstatSync(e),!0}catch(t){if(c(t,"ENOENT"))return!1;throw t}}function c(e,t){return $(e)&&e.code===t}function $(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}
+import{AsyncLocalStorage as we}from"node:async_hooks";import{randomUUID as P}from"node:crypto";import i from"node:fs";import Ee from"node:os";import u from"node:path";import{setTimeout as q}from"node:timers/promises";import{captureProcessCreationIdentity as Y,inspectProcessLiveness as pe}from"./process-identity.js";import{retireWindowsClaim as ke}from"./windows-native.js";import{channel as Se}from"node:diagnostics_channel";const I=Se("testkit.work");import{isUnknownRecord as H}from"../kernel/unknown-values.js";import{hasErrorCode as a}from"../kernel/error-serialization.js";function Ne(e){try{i.mkdirSync(e,{mode:448})}catch(t){if(!a(t,"EEXIST"))throw t}return B(e)}function be(e){try{const t=i.lstatSync(e);return t.isDirectory()&&!t.isSymbolicLink()?"real":"unsafe"}catch(t){if(a(t,"ENOENT"))return"absent";throw t}}function X(e){const t=i.lstatSync(e,{bigint:!0});if(!t.isDirectory()||t.isSymbolicLink())throw new Error(`Process lock path is not a real directory: ${e}`);return{birthtimeNs:t.birthtimeNs,dev:t.dev,ino:t.ino}}function B(e){try{return X(e)}catch(t){if(a(t,"ENOENT")||Ie(t))return null;throw t}}function y(e,t){return G(B(e),t)}function G(e,t){return e!==null&&e.birthtimeNs===t.birthtimeNs&&e.dev===t.dev&&e.ino===t.ino}export function processLockClaimPublicationState(e,t,r){if(y(e,t))try{return K(r)?"unsafe":"retry"}catch(o){if(C(o))return"retry";throw o}return y(r,t)?"published":"unsafe"}function Ie(e){return e instanceof Error&&e.message.startsWith("Process lock path is not a real directory:")}const J="owner.json",v=1,$="claim-",D="choosing",z="ticket",Q=100,Z=65e3,Re=100,Le=new Set(["EACCES","EBUSY","EPERM"]),Te=1e4,_e=3,ge=20,Ae=5,Me=20,Ce=5e3,ee=Ee.hostname(),Oe=process.platform==="win32"?Ce:0,x=new we;class te extends Error{constructor(t,r){super(`Timed out waiting for process lock ${u.basename(t)}${Qe(r)}`),this.name="ProcessLockTimeoutError"}}export async function withProcessLock(e,t,r={}){const n=he(e);Ge(n);const o=await Pe(n,r),s=x.getStore(),c=new Set(s??[]);c.add(n);try{return await x.run(c,t)}finally{await o()}}export async function tryWithProcessLock(e,t,r={}){let n;try{n=await withProcessLock(e,async()=>{try{return{ok:!0,value:await t()}}catch(o){return{error:o,ok:!1}}},{...r,timeoutMs:0})}catch(o){if(o instanceof te)return{acquired:!1};throw o}if(!n.ok)throw n.error;return{acquired:!0,value:n.value}}export function probeProcessLock(e,t={}){const r=he(e),n=me(r);if(!K(n))return"absent";const o=t.identityObservations??new Map,s=oe(n,ne(n),o,re(),t);return s.rootAvailable&&s.claims.length===0?(j(n),"absent"):"active"}async function Pe(e,t){const r=Ze(t.timeoutMs,null,"process lock timeout"),n=et(t.retryIntervalMs,Q,"process lock retry interval");let o=t.retryIntervalMs===void 0?10:n;async function s(){const h=o;o=Math.min(n,o*2),await Je(h,t.signal,e)}const c=t.identityObservations??new Map,E=re(),l=async h=>oe(m,await _(()=>ne(m,h),t.signal,e),c,E,t),w=Y(process.pid);if(w===null)throw new Error(`Cannot acquire process lock ${e}: current process creation identity is unavailable`);const p=Date.now(),R={createdAt:new Date(p).toISOString(),hostname:ee,pid:process.pid,processIdentity:w,schemaVersion:v,token:P()},m=me(e),f=u.join(m,`${$}${R.token}`),N=`${m}.preparing-${R.token}`;ve(N,R);let k=null,U=!1,b=null,A=!1,V=0;try{for(k=X(N);;){g(t.signal,e);const S=await _(()=>Ne(m),t.signal,e);if(S!==null){try{i.renameSync(N,f),A=!0,b=S}catch(d){if(!a(d,"ENOENT"))if(C(d)){const T=processLockClaimPublicationState(N,k,f);if(T==="published")A=!0,b=S;else if(T==="retry"&&V<Re)V+=1;else throw d}else throw d}if(A){if(!y(m,S))throw new Error(`Process lock directory changed during claim publication: ${m}`);if(!y(f,k))throw new Error(`Process lock claim changed during publication: ${f}`);break}}else await l(null);O(e,null,p,r),await s()}if(b===null)throw new Error(`Process lock claim was published without its directory identity: ${f}`);const h=b;let L=nextProcessLockTicket((await l(h)).claims);for(;L===null;)O(e,null,p,r),await s(),L=nextProcessLockTicket((await l(h)).claims);const M=L;for($e(f,M);;){g(t.signal,e);const S=await l(h),d=S.claims.find(ye=>ye.claimDirectory===f);if(d?.state==="changing"){O(e,null,p,r),await s();continue}if(d?.state!=="ready"||d.ticket!==M||d.ownerRecord===null||!de(d.ownerRecord,R))throw new Error(`Process lock claim disappeared or changed before acquisition: ${f}`);const T=firstElectionBlocker(S.claims,d);if(T===null)return U=!0,()=>Ve(f,m,h,R,M);O(e,T.ownerRecord,p,r),await s()}}finally{if(!A)k!==null&&y(N,k)&&i.rmSync(N,{force:!0,recursive:!0});else if(!U&&b!==null&&k!==null){const h=b,L=k;await le(f,m,()=>y(m,h)&&y(f,L))&&c.delete(f)}}}function C(e,t=process.platform){return t==="win32"&&H(e)&&typeof e.code=="string"&&Le.has(e.code)}export function tolerateTransientClaimFailure(e,t,r,n=Date.now(),o=process.platform){if(!C(r,o))throw r;const s=e.get(t),c={count:(s?.count??0)+1,firstAtMs:s?.firstAtMs??n};if(c.count>=_e&&n-c.firstAtMs>=Te)throw r;e.set(t,c)}export function transientWindowsLockRetryDelayMs(e,t,r=process.platform){return!C(e,r)||t>=ge?null:Math.min(Q,10*t)}async function _(e,t,r=""){for(let n=1;;n+=1)try{return e()}catch(o){const s=transientWindowsLockRetryDelayMs(o,n);if(s===null)throw o;I.hasSubscribers&&I.publish({metric:"locks.transientWindowsRetries",amount:1});try{await q(s,void 0,{signal:t})}catch(c){throw g(t,r),c}}}function re(){return{entryReads:new Map,retirements:new Map}}function ve(e,t){i.mkdirSync(e,{mode:448});try{i.writeFileSync(u.join(e,J),`${JSON.stringify(t)}
+`,{encoding:"utf8",flag:"wx",mode:384}),i.writeFileSync(u.join(e,D),`${t.token}
+`,{encoding:"utf8",flag:"wx",mode:384})}catch(r){throw i.rmSync(e,{force:!0,recursive:!0}),r}}function $e(e,t){i.writeFileSync(u.join(e,z),`${t.toString()}
+`,{encoding:"utf8",flag:"wx",mode:384}),i.rmSync(u.join(e,D))}export function nextProcessLockTicket(e){if(e.some(r=>r.state==="changing"))return null;const t=e.reduce((r,n)=>n.ticket===null?r:Math.max(r,n.ticket),0);if(t>=Number.MAX_SAFE_INTEGER)throw new Error("Process lock ticket space is exhausted");return t+1}export function firstElectionBlocker(e,t){if(t.ticket===null||t.ownerRecord===null)return t;const r=t.ownerRecord.token;for(const n of e){if(n.claimDirectory===t.claimDirectory)continue;if(n.state!=="ready"||n.ticket===null||n.ownerRecord===null)return n;const o=n.ownerRecord.token;if(De(n.ticket,o,t.ticket,r)<0)return n}return null}function De(e,t,r,n){return e===r?t.localeCompare(n):e-r}function ne(e,t=null){const r=be(e);if(r!=="real")return{state:r};if(t!==null&&!y(e,t))return{state:"changed"};try{return{entries:i.readdirSync(e,{withFileTypes:!0}),state:"listed"}}catch(n){if(a(n,"ENOENT"))return{state:"absent"};throw n}}function oe(e,t,r,n,o){if(t.state!=="listed")return t.state==="absent"?{claims:[],rootAvailable:!0}:t.state==="unsafe"&&Ue(e,r,o)?{claims:[],rootAvailable:!0}:{claims:[ie(e)],rootAvailable:!1};const{entries:s}=t,c=[];for(const E of s){const l=u.join(e,E.name);let w;try{w=xe(E,l)}catch(p){tolerateTransientClaimFailure(n.entryReads,l,p),c.push(ce(l));continue}n.entryReads.delete(l),w===null?n.retirements.delete(l):Fe(w,r,o)?Ke(e,l,w.identity,r,n.retirements)==="held"&&c.push(ce(l)):(n.retirements.delete(l),c.push(w.claim))}return{claims:c,rootAvailable:!0}}function xe(e,t){const r=W(t);if(r===null)return null;const n=!e.name.startsWith($)||!e.isDirectory()?ie(t):ae(t),o=W(t);return o===null?null:{claim:n,identity:se(r),modifiedAtMs:Number(o.mtimeMs)}}function We(e){const t=W(e);return t===null?null:se(t)}function W(e){try{return i.lstatSync(e,{bigint:!0})}catch(t){if(a(t,"ENOENT"))return null;throw t}}function se(e){return{birthtimeNs:e.birthtimeNs,dev:e.dev,ino:e.ino}}function ie(e){return{claimDirectory:e,ownerRecord:null,state:"malformed",ticket:null}}function ce(e){return{claimDirectory:e,ownerRecord:null,state:"changing",ticket:null}}function ae(e){const t=He(e),r=K(u.join(e,D)),n=je(e),o=u.basename(e).slice($.length),s=t===null||t.token===o;return{claimDirectory:e,ownerRecord:t,state:t===null||!s?"malformed":r?"choosing":n===null?"malformed":"ready",ticket:n}}function je(e){const t=ue(u.join(e,z));if(t===null)return null;const r=Number(t.trim());return Number.isSafeInteger(r)&&r>0?r:null}function ue(e){try{return i.readFileSync(e,"utf8")}catch(t){if(a(t,"ENOENT")||a(t,"EISDIR"))return null;throw t}}function Fe({claim:e,modifiedAtMs:t},r,n){const o=e.ownerRecord;if(o===null||o.hostname!==ee)return n.hostScope==="current-host"&&Date.now()-t>=Z;if(pe(o.pid)==="absent")return!0;const s=F(o),c=r.get(e.claimDirectory);if(c?.ownerKey===s&&Date.now()-c.checkedAtMs<Oe)return!1;const E=Y(o.pid);return r.set(e.claimDirectory,{checkedAtMs:Date.now(),ownerKey:s}),E!==null&&E!==o.processIdentity}function Ke(e,t,r,n,o){n.delete(t);const s=`${e}.reclaiming-${P()}`;try{if(process.platform==="win32"){if(ke(t,s,r)==="absent")return o.delete(t),"removed"}else i.renameSync(t,s)}catch(c){return process.platform!=="win32"&&a(c,"ENOENT")?(o.delete(t),"removed"):(tolerateTransientClaimFailure(o,t,c),"held")}if(o.delete(t),!G(We(s),r))throw new Error(`Process lock claim ${t} changed before reclamation and is now at ${s}`);return i.rmSync(s,{maxRetries:Ae,recursive:!0,retryDelay:Me}),I.hasSubscribers&&I.publish({metric:"locks.reclaimedClaims",amount:1}),"removed"}function Ue(e,t,r){if(r.hostScope!=="current-host")return!1;const n=fe(e);if(n==="absent")return!0;if(n==="real-directory"||Ye(n)<Z)return!1;const o=fe(e);if(o==="absent")return!0;if(o==="real-directory"||!qe(o,n))return!1;try{return i.unlinkSync(e),t.delete(e),!0}catch(s){if(a(s,"ENOENT"))return!0;if(a(s,"EISDIR")||a(s,"EPERM"))return!1;throw s}}async function Ve(e,t,r,n,o){await le(e,t,()=>{if(!y(t,r))throw new Error(`Process lock directory changed before release: ${t}`);const s=ae(e);if(s.state!=="ready"||s.ticket!==o||s.ownerRecord===null||!de(s.ownerRecord,n))throw new Error(`Process lock ownership changed before release: ${e}`);return!0})}async function le(e,t,r){if(process.platform!=="win32")return r()?(i.rmSync(e,{force:!0,recursive:!0}),j(t),!0):!1;const n=`${t}.releasing-${P()}`;return await _(()=>r()?(i.renameSync(e,n),!0):!1)?(await _(()=>{i.rmSync(n,{force:!0,recursive:!0})}),await _(()=>{j(t)}),!0):!1}function fe(e){try{const t=i.lstatSync(e,{bigint:!0});return t.isDirectory()&&!t.isSymbolicLink()?"real-directory":{birthtimeNs:t.birthtimeNs,ctimeNs:t.ctimeNs,dev:t.dev,ino:t.ino,mode:t.mode,mtimeNs:t.mtimeNs,size:t.size}}catch(t){if(a(t,"ENOENT"))return"absent";throw t}}function qe(e,t){return e.birthtimeNs===t.birthtimeNs&&e.ctimeNs===t.ctimeNs&&e.dev===t.dev&&e.ino===t.ino&&e.mode===t.mode&&e.mtimeNs===t.mtimeNs&&e.size===t.size}function Ye(e){return Math.max(0,Date.now()-Number(e.mtimeNs)/1e6)}function j(e){try{i.rmdirSync(e)}catch(t){if(!a(t,"ENOENT")&&!a(t,"ENOTEMPTY")&&!a(t,"EEXIST"))throw t}}function He(e){const t=ue(u.join(e,J));if(t===null)return null;let r;try{r=JSON.parse(t)}catch{return null}return H(r)?Xe(r):null}function Xe(e){const t=Object.keys(e).sort(),r=["createdAt","hostname","pid","processIdentity","schemaVersion","token"];return t.length!==r.length||t.some((n,o)=>n!==r[o])||e.schemaVersion!==v||!tt(e.createdAt)||typeof e.hostname!="string"||e.hostname.length===0||!rt(e.pid)||typeof e.processIdentity!="string"||e.processIdentity.length===0||typeof e.token!="string"||e.token.length===0?null:{createdAt:e.createdAt,hostname:e.hostname,pid:e.pid,processIdentity:e.processIdentity,schemaVersion:v,token:e.token}}function de(e,t){return F(e)===F(t)}function F(e){return[e.hostname,e.pid.toString(),e.processIdentity,e.token,e.createdAt].join("\0")}function me(e){return`${e}.dir`}function he(e){const t=u.resolve(Be(e)),r=i.realpathSync.native(u.dirname(t));return u.join(r,u.basename(t))}function Be(e){if(e.trim().length===0)throw new Error("Process lock path must not be empty");return e}function Ge(e){if(x.getStore()?.has(e))throw new Error(`Reentrant process lock acquisition is not allowed: ${e}`)}function O(e,t,r,n){if(n!==null&&Date.now()-r>=n)throw new te(e,t)}async function Je(e,t,r){g(t,r),I.hasSubscribers&&I.publish({metric:"locks.contentionRetries",amount:1});try{await q(e,void 0,{signal:t})}catch(n){throw g(t,r),n}}function g(e,t){if(e?.aborted)throw ze(e,t)}function ze(e,t){return e.reason instanceof Error?e.reason:new Error(`Waiting for process lock was aborted: ${t}`)}function Qe(e){return e===null?"":` (host=${e.hostname} pid=${e.pid.toString()} identity=${e.processIdentity} createdAt=${e.createdAt})`}function Ze(e,t,r){const n=e===void 0?t:e;if(n!==null&&(!Number.isSafeInteger(n)||n<0))throw new Error(`${r} must be null or a non-negative safe integer`);return n}function et(e,t,r){const n=e??t;if(!Number.isSafeInteger(n)||n<=0)throw new Error(`${r} must be a positive safe integer`);return n}function tt(e){return typeof e=="string"&&e.length>0&&Number.isFinite(Date.parse(e))}function rt(e){return Number.isSafeInteger(e)&&Number(e)>0}function K(e){try{return i.lstatSync(e),!0}catch(t){if(a(t,"ENOENT"))return!1;throw t}}

package/dist/process/port-listener.js

@@ -0,0 +1,2 @@
+import{spawn as u}from"node:child_process";import{once as f}from"node:events";import c from"node:fs";import{windowsCliOwned as d}from"./windows-cli-owner.js";import{windowsOwnerExecutable as p}from"./windows-native.js";const a=1e4;export async function portListenerOwner(r,i){try{if(process.platform==="linux")return l(m(r),i);if(process.platform!=="win32"||!d())return"unknown";const o=u(p(),["job-listener",String(r)],{detached:!0,stdio:["ignore","pipe","ignore"],timeout:a,windowsHide:!0});let t="";o.stdout.setEncoding("utf8").on("data",e=>t+=e);const[n]=await f(o,"close");return n===0&&(t==="ours"||t==="foreign")?t:"unknown"}catch{return"unknown"}}function l(r,i){return r.length===0?"unknown":r.every(o=>o.length===0||o.includes(i))?"ours":"foreign"}function m(r){const i=new Set;for(const t of["/proc/net/tcp","/proc/net/tcp6"])if(c.existsSync(t))for(const n of c.readFileSync(t,"utf8").trim().split(`
+`).slice(1)){const e=n.trim().split(/\s+/u);e[3]==="0A"&&Number.parseInt(e[1]?.split(":")[1]??"",16)===r&&i.add(e[9])}const o=new Map;for(const t of c.readdirSync("/proc").filter(n=>/^\d+$/u.test(n))){let n;try{n=c.readdirSync(`/proc/${t}/fd`)}catch{continue}for(const e of n){const s=/^socket:\[(\d+)\]$/u.exec(w(`/proc/${t}/fd/${e}`))?.[1];s!==void 0&&i.has(s)&&o.set(s,[...o.get(s)??[],Number(t)])}}return[...i].map(t=>(o.get(t)??[]).map(n=>{const e=c.readFileSync(`/proc/${n.toString()}/stat`,"utf8");return Number(e.slice(e.lastIndexOf(")")+2).split(" ")[2])}))}function w(r){try{return c.readlinkSync(r)}catch{return""}}

package/dist/process/process-group.js

@@ -1 +1 @@
-import{DEFAULT_SHUTDOWN_TIMEOUT_MS as f,FORCE_TERMINATION_WAIT_MS as E}from"./shutdown.js";export async function cleanupExitedProcessGroup(r,t={}){if((t.platform??process.platform)==="win32")return null;const n=t.groupExists??processGroupExists,e=t.sendSignal??g,o=t.sleep??m,c=t.graceMs??f,l=t.forceWaitMs??E;try{return!n(r)||(t.initialSignalSent||e(r,"SIGTERM"),await i(r,c,n,o,t.remainingMs))?null:(e(r,"SIGKILL"),await i(r,l,n,o)?null:new Error(`Managed process group ${r.toString()} did not stop`))}catch(u){return a(u,"ESRCH")?null:M(u)}}async function i(r,t,s,n,e){const o=performance.now(),c=e??(()=>t-(performance.now()-o));for(;c()>0;){if(!s(r))return!0;await n(Math.min(25,Math.max(1,c())))}return!s(r)}function g(r,t){process.kill(-r,t)}function m(r){return new Promise(t=>setTimeout(t,r))}export function processGroupExists(r){try{return process.kill(-r,0),!0}catch(t){if(a(t,"ESRCH"))return!1;if(a(t,"EPERM"))return!0;throw t}}function M(r){return r instanceof Error?r:new Error(String(r))}function a(r,t){return typeof r=="object"&&r!==null&&Reflect.get(r,"code")===t}
+import{DEFAULT_SHUTDOWN_TIMEOUT_MS as f,FORCE_TERMINATION_WAIT_MS as m}from"./shutdown.js";import{hasErrorCode as c,toError as E}from"../kernel/error-serialization.js";export async function cleanupExitedProcessGroup(e,r={}){if((r.platform??process.platform)==="win32")return null;const t=r.groupExists??processGroupExists,n=r.sendSignal??M,o=r.sleep??delay,s=r.graceMs??f,l=r.forceWaitMs??m;try{return!t(e)||(r.initialSignalSent||n(e,"SIGTERM"),await i(e,s,t,o,r.remainingMs))?null:(n(e,"SIGKILL"),await i(e,l,t,o)?null:new Error(`Managed process group ${e.toString()} did not stop`))}catch(u){return c(u,"ESRCH")?null:E(u)}}async function i(e,r,a,t,n){const o=performance.now(),s=n??(()=>r-(performance.now()-o));for(;s()>0;){if(!a(e))return!0;await t(Math.min(25,Math.max(1,s())))}return!a(e)}function M(e,r){process.kill(-e,r)}export function delay(e){return new Promise(r=>setTimeout(r,e))}export function processGroupExists(e){try{return process.kill(-e,0),!0}catch(r){if(c(r,"ESRCH"))return!1;if(c(r,"EPERM"))return!0;throw r}}

package/dist/process/process-identity.js

@@ -1 +1 @@
-import{execFileSync as a}from"node:child_process";import d from"node:fs";import{DARWIN_PS_EXECUTABLE as l,HOST_POSIX_INSPECTION_ENVIRONMENT as f,requireWindowsHostPowerShellCommand as m}from"./host-inspection-command.js";import{formatWindowsKernelProcessIdentity as p,parseWindowsKernelProcessIdentity as w}from"./windows-process-identity.js";import{windowsOwnerExecutable as I}from"./windows-native.js";const S=3e3,E=16*1024,T=8e3;let o;export function captureProcessCreationIdentity(e){const t=Number(e);if(!Number.isSafeInteger(t)||t<=0)return null;if(t===process.pid&&o!==void 0)return o;try{let r=null;return process.platform==="linux"?r=y(t):process.platform==="darwin"?r=P(t):process.platform==="win32"&&(r=g(t)),t===process.pid&&r!==null&&(o=r),r}catch{return null}}export function processCreationIdentityMatches(e,t){return observeProcessCreationIdentity(e,t)==="matches"}export function observeProcessCreationIdentity(e,t,r={}){const n=Number(e);if(!Number.isSafeInteger(n)||n<=0||typeof t!="string"||t.length===0)return"unknown";const i=(r.captureIdentity??captureProcessCreationIdentity)(n);return i!==null?i===t?"matches":"different":(r.inspectLiveness??inspectProcessLiveness)(n)==="absent"?"different":"unknown"}export function parseWindowsProcessCreationIdentity(e){return w(e)}function y(e){return parseLinuxProcessCreationIdentity(e,d.readFileSync(`/proc/${e.toString()}/stat`,"utf8"))}export function parseLinuxProcessCreationIdentity(e,t){if(!Number.isSafeInteger(e)||e<=0)throw new Error("Linux process stat identity requires a positive pid");const r=t.trim(),n=r.lastIndexOf(")"),i=r.indexOf(" ");if(n<0||i<1||Number(r.slice(0,i))!==e)throw new Error("Linux process stat identity is malformed");const s=r.slice(n+1).trim().split(/\s+/u)[19];if(!/^\d+$/u.test(s))throw new Error("Linux process stat start time is malformed");return`linux-proc-start:${s}`}function P(e){const t=runBoundedProcessIdentityQuery({args:["-p",e.toString(),"-o","pid=,lstart="],environment:f,executable:l,timeoutMs:S,windowsHide:!1});return parseDarwinProcessCreationIdentity(e,t)}export function parseDarwinProcessCreationIdentity(e,t){if(!Number.isSafeInteger(e)||e<=0)throw new Error("Darwin process start identity requires a positive pid");const r=t.trim().replace(/\s+/gu," "),n=/^(\d+) ((?:Sun|Mon|Tue|Wed|Thu|Fri|Sat) (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) (?:[1-9]|[12]\d|3[01]) (?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d \d{4})$/u.exec(r);if(n===null||Number(n[1])!==e)throw new Error("Darwin process start identity is malformed");return`darwin-ps-start:${n[2]}`}function g(e){const t=runBoundedProcessIdentityQuery({args:["process-identity",e.toString()],environment:m().environment,executable:I(),timeoutMs:T,windowsHide:!0});if(!/^\d+$/u.test(t))throw new Error("Windows process creation identity is malformed");return p(t)}export function windowsProcessCreationIdentityScript(e){if(!Number.isSafeInteger(e)||e<=0)throw new Error("Windows process creation identity script requires a positive pid");return`$ErrorActionPreference = "Stop"; $p = [Diagnostics.Process]::GetProcessById(${e.toString()}); try { $fileTime = [Int64]$p.StartTime.ToUniversalTime().ToFileTimeUtc(); if ($fileTime -le 0) { exit 3 }; [Console]::Write($fileTime.ToString([Globalization.CultureInfo]::InvariantCulture)) } finally { $p.Dispose() }`}export function runBoundedProcessIdentityQuery(e){if(!Number.isSafeInteger(e.timeoutMs)||e.timeoutMs<=0)throw new Error("Process identity query timeout must be a positive safe integer in milliseconds");return a(e.executable,[...e.args],{encoding:"utf8",env:e.environment,killSignal:"SIGKILL",maxBuffer:E,stdio:["ignore","pipe","ignore"],timeout:e.timeoutMs,windowsHide:e.windowsHide}).trim()}export function inspectProcessLiveness(e){try{return process.kill(e,0),"alive"}catch(t){return u(t,"ESRCH")?"absent":u(t,"EPERM")?"alive":"unknown"}}function u(e,t){return typeof e=="object"&&e!==null&&Reflect.get(e,"code")===t}
+import{execFileSync as c}from"node:child_process";import d from"node:fs";import{DARWIN_PS_EXECUTABLE as f,HOST_POSIX_INSPECTION_ENVIRONMENT as l,requireWindowsHostPowerShellCommand as m}from"./host-inspection-command.js";import{formatWindowsKernelProcessIdentity as p,parseWindowsKernelProcessIdentity as w}from"./windows-process-identity.js";import{windowsOwnerExecutable as I}from"./windows-native.js";import{hasErrorCode as u}from"../kernel/error-serialization.js";const S=3e3,E=16*1024,T=8e3;let o;export function captureProcessCreationIdentity(e){const t=Number(e);if(!Number.isSafeInteger(t)||t<=0)return null;if(t===process.pid&&o!==void 0)return o;try{let r=null;return process.platform==="linux"?r=P(t):process.platform==="darwin"?r=y(t):process.platform==="win32"&&(r=g(t)),t===process.pid&&r!==null&&(o=r),r}catch{return null}}export function processCreationIdentityMatches(e,t){return observeProcessCreationIdentity(e,t)==="matches"}export function observeProcessCreationIdentity(e,t,r={}){const n=Number(e);if(!Number.isSafeInteger(n)||n<=0||typeof t!="string"||t.length===0)return"unknown";const i=(r.captureIdentity??captureProcessCreationIdentity)(n);return i!==null?i===t?"matches":"different":(r.inspectLiveness??inspectProcessLiveness)(n)==="absent"?"different":"unknown"}export function parseWindowsProcessCreationIdentity(e){return w(e)}function P(e){return parseLinuxProcessCreationIdentity(e,d.readFileSync(`/proc/${e.toString()}/stat`,"utf8"))}export function parseLinuxProcessCreationIdentity(e,t){if(!Number.isSafeInteger(e)||e<=0)throw new Error("Linux process stat identity requires a positive pid");const r=t.trim(),n=r.lastIndexOf(")"),i=r.indexOf(" ");if(n<0||i<1||Number(r.slice(0,i))!==e)throw new Error("Linux process stat identity is malformed");const s=r.slice(n+1).trim().split(/\s+/u)[19];if(!/^\d+$/u.test(s))throw new Error("Linux process stat start time is malformed");return`linux-proc-start:${s}`}function y(e){const t=runBoundedProcessIdentityQuery({args:["-p",e.toString(),"-o","pid=,lstart="],environment:l,executable:f,timeoutMs:S,windowsHide:!1});return parseDarwinProcessCreationIdentity(e,t)}export function parseDarwinProcessCreationIdentity(e,t){if(!Number.isSafeInteger(e)||e<=0)throw new Error("Darwin process start identity requires a positive pid");const r=t.trim().replace(/\s+/gu," "),n=/^(\d+) ((?:Sun|Mon|Tue|Wed|Thu|Fri|Sat) (?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) (?:[1-9]|[12]\d|3[01]) (?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d \d{4})$/u.exec(r);if(n===null||Number(n[1])!==e)throw new Error("Darwin process start identity is malformed");return`darwin-ps-start:${n[2]}`}function g(e){const t=runBoundedProcessIdentityQuery({args:["process-identity",e.toString()],environment:m().environment,executable:I(),timeoutMs:T,windowsHide:!0});if(!/^\d+$/u.test(t))throw new Error("Windows process creation identity is malformed");return p(t)}export function windowsProcessCreationIdentityScript(e){if(!Number.isSafeInteger(e)||e<=0)throw new Error("Windows process creation identity script requires a positive pid");return`$ErrorActionPreference = "Stop"; $p = [Diagnostics.Process]::GetProcessById(${e.toString()}); try { $fileTime = [Int64]$p.StartTime.ToUniversalTime().ToFileTimeUtc(); if ($fileTime -le 0) { exit 3 }; [Console]::Write($fileTime.ToString([Globalization.CultureInfo]::InvariantCulture)) } finally { $p.Dispose() }`}export function runBoundedProcessIdentityQuery(e){if(!Number.isSafeInteger(e.timeoutMs)||e.timeoutMs<=0)throw new Error("Process identity query timeout must be a positive safe integer in milliseconds");return c(e.executable,[...e.args],{encoding:"utf8",env:e.environment,killSignal:"SIGKILL",maxBuffer:E,stdio:["ignore","pipe","ignore"],timeout:e.timeoutMs,windowsHide:e.windowsHide}).trim()}export function inspectProcessLiveness(e){try{return process.kill(e,0),"alive"}catch(t){return u(t,"ESRCH")?"absent":u(t,"EPERM")?"alive":"unknown"}}