@greppleai/grip 0.0.0-stage → 0.1.3

package/dist/core/remote-workspace-protocol/guest-shared-uplink.js

@@ -0,0 +1,243 @@
+import { randomBytes } from "node:crypto";
+import WebSocket from "ws";
+import { VERSION } from "../../config.js";
+import { DEFAULT_REMOTE_WORKSPACE_PROTOCOL_LIMITS as limits, parseRemoteWorkspaceClientMessage, } from "./contract.js";
+import { GuestOutboundScheduler } from "./guest-shared-outbound-scheduler.js";
+import { parseSharedWorkspaceServerFrame, SHARED_WORKSPACE_WEBSOCKET_PROTOCOL, } from "./shared-transport.js";
+/** Owns one v2 physical socket. Loss invalidates every channel; nothing is replayed. */
+export class GuestSharedUplink {
+    channels = new Map();
+    opens = new Map();
+    failure;
+    outbound;
+    socket;
+    epoch;
+    /** Resolves on any terminal uplink failure (including explicit disposal); never reconnects. */
+    whenFailed;
+    resolveFailure;
+    constructor(socket, epoch) {
+        this.socket = socket;
+        this.epoch = epoch;
+        this.whenFailed = new Promise((resolve) => {
+            this.resolveFailure = resolve;
+        });
+        this.outbound = new GuestOutboundScheduler((bytes, callback) => socket.send(bytes, { binary: false, compress: false }, (error) => callback(error ?? undefined)), () => socket.bufferedAmount, (error) => this.fail(error));
+        socket.on("message", (data, isBinary) => this.receive(data, isBinary));
+        socket.on("close", () => this.fail(new Error("Shared workspace uplink disconnected; operations may have committed")));
+        socket.on("error", () => this.fail(new Error("Shared workspace uplink failed; operations may have committed")));
+        if (socket.readyState !== WebSocket.OPEN)
+            this.fail(new Error("Shared workspace uplink disconnected"));
+    }
+    receive(data, isBinary) {
+        try {
+            if (isBinary)
+                throw new Error("Unexpected binary shared workspace frame");
+            this.route(parseSharedWorkspaceServerFrame(data, limits));
+        }
+        catch {
+            this.fail(new Error("Invalid or unrouteable shared workspace response"));
+        }
+    }
+    routeControl(frame) {
+        const pending = this.opens.get(frame.id);
+        if (!pending)
+            throw new Error("Unknown shared workspace control ID");
+        this.opens.delete(frame.id);
+        if (frame.type === "opened")
+            pending.resolve(frame.channelId);
+        else
+            pending.reject(new Error(`Shared workspace open failed: ${frame.code}`));
+    }
+    route(frame) {
+        if (frame.type === "hello_ack")
+            throw new Error("Unexpected shared workspace hello acknowledgement");
+        if (frame.type === "opened" || frame.type === "control_error") {
+            this.routeControl(frame);
+            return;
+        }
+        const channel = this.channels.get(frame.channelId);
+        if (!channel)
+            throw new Error("Unknown shared workspace channel ID");
+        if (frame.type === "closed") {
+            this.channels.delete(frame.channelId);
+            if (frame.reason || !channel.closing) {
+                const error = new Error(frame.reason?.message ?? "Shared workspace channel closed unexpectedly");
+                channel.rejectClose?.(error);
+                channel.onFailure(error);
+            }
+            else
+                channel.resolveClose?.();
+            return;
+        }
+        // An in-flight response can race a requested detach; deliver until closed is acknowledged.
+        channel.onMessage(frame.payload);
+    }
+    static async connect(url, token) {
+        const endpoint = new URL(url);
+        if (!["ws:", "wss:"].includes(endpoint.protocol) ||
+            endpoint.username ||
+            endpoint.password ||
+            endpoint.hash) {
+            throw new Error("Invalid shared workspace endpoint");
+        }
+        const socket = new WebSocket(endpoint.toString(), SHARED_WORKSPACE_WEBSOCKET_PROTOCOL, {
+            perMessageDeflate: false,
+            ...(token ? { headers: { authorization: `Bearer ${token}` } } : {}),
+        });
+        try {
+            await new Promise((resolve, reject) => {
+                const timer = setTimeout(() => reject(new Error("Shared workspace connection timed out")), 5000);
+                socket.once("open", () => {
+                    clearTimeout(timer);
+                    resolve();
+                });
+                socket.once("error", () => {
+                    clearTimeout(timer);
+                    reject(new Error("Shared workspace connection failed"));
+                });
+            });
+            if (socket.protocol !== SHARED_WORKSPACE_WEBSOCKET_PROTOCOL) {
+                throw new Error("Daemon does not support grip.workspace.v2");
+            }
+            const id = randomBytes(12).toString("hex");
+            const epoch = await new Promise((resolve, reject) => {
+                let settled = false;
+                const timer = setTimeout(() => settle(undefined, new Error("Shared workspace hello timed out")), 5000);
+                const settle = (value, error) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    clearTimeout(timer);
+                    socket.off("message", onMessage);
+                    socket.off("close", onClose);
+                    socket.off("error", onError);
+                    if (error)
+                        reject(error);
+                    else
+                        resolve(value);
+                };
+                const onError = () => settle(undefined, new Error("Shared workspace hello failed"));
+                const onClose = () => settle(undefined, new Error("Shared workspace hello failed"));
+                const onMessage = (data, isBinary) => {
+                    try {
+                        if (isBinary)
+                            throw new Error("Unexpected binary frame");
+                        const frame = parseSharedWorkspaceServerFrame(Buffer.from(data), limits);
+                        if (frame.type !== "hello_ack" || frame.id !== id)
+                            throw new Error("Unexpected hello response");
+                        if (frame.daemonVersion !== VERSION) {
+                            settle(undefined, new Error("Shared workspace daemon version mismatch"));
+                            return;
+                        }
+                        settle(frame.epoch);
+                    }
+                    catch {
+                        settle(undefined, new Error("Invalid shared workspace hello response"));
+                    }
+                };
+                socket.on("message", onMessage);
+                socket.once("close", onClose);
+                socket.once("error", onError);
+                socket.send(JSON.stringify({ type: "hello", version: 2, id }), (error) => {
+                    if (error)
+                        settle(undefined, new Error("Shared workspace hello send failed"));
+                });
+            });
+            return new GuestSharedUplink(socket, epoch);
+        }
+        catch (error) {
+            socket.on("error", () => undefined);
+            socket.terminate();
+            throw error;
+        }
+    }
+    async open(root, onMessage, onFailure) {
+        if (this.failure)
+            throw this.failure;
+        if (this.channels.size + this.opens.size >= 32)
+            throw new Error("Shared workspace channel limit exceeded");
+        const id = randomBytes(12).toString("hex");
+        const channelId = await new Promise((resolve, reject) => {
+            const timer = setTimeout(() => this.fail(new Error("Shared workspace open timed out; operations may have committed")), 5000);
+            this.opens.set(id, {
+                resolve: (openedId) => {
+                    clearTimeout(timer);
+                    resolve(openedId);
+                },
+                reject: (error) => {
+                    clearTimeout(timer);
+                    reject(error);
+                },
+            });
+            void this.send({ type: "open", id, root }).catch((error) => {
+                const pending = this.opens.get(id);
+                this.opens.delete(id);
+                pending?.reject(error);
+            });
+        });
+        if (this.failure)
+            throw this.failure;
+        const channel = { onMessage, onFailure, closing: false };
+        this.channels.set(channelId, channel);
+        return {
+            id: channelId,
+            send: (payload) => {
+                if (channel.closing || this.channels.get(channelId) !== channel) {
+                    return Promise.reject(new Error("Shared workspace channel is closed"));
+                }
+                parseRemoteWorkspaceClientMessage(payload, limits);
+                return this.send({ type: "channel", channelId, payload });
+            },
+            close: () => {
+                if (channel.closePromise)
+                    return channel.closePromise;
+                if (this.channels.get(channelId) !== channel)
+                    return Promise.resolve();
+                channel.closing = true;
+                channel.closePromise = new Promise((resolve, reject) => {
+                    const timer = setTimeout(() => {
+                        this.fail(new Error("Shared workspace detach timed out; operations may have committed"));
+                    }, 5000);
+                    channel.resolveClose = () => {
+                        clearTimeout(timer);
+                        resolve();
+                    };
+                    channel.rejectClose = (error) => {
+                        clearTimeout(timer);
+                        reject(error);
+                    };
+                    void this.send({ type: "close", channelId }).catch(channel.rejectClose);
+                });
+                return channel.closePromise;
+            },
+        };
+    }
+    send(frame) {
+        return this.outbound.send(frame);
+    }
+    fail(error) {
+        if (this.failure)
+            return;
+        this.failure = error;
+        this.outbound.fail(error);
+        this.socket.terminate();
+        for (const pending of this.opens.values())
+            pending.reject(error);
+        this.opens.clear();
+        for (const channel of this.channels.values()) {
+            channel.rejectClose?.(error);
+            try {
+                channel.onFailure(error);
+            }
+            catch {
+                // Do not let one local callback block failure delivery to sibling channels.
+            }
+        }
+        this.channels.clear();
+        this.resolveFailure();
+    }
+    dispose() {
+        this.fail(new Error("Shared workspace uplink stopped; operations may have committed"));
+    }
+}
+//# sourceMappingURL=guest-shared-uplink.js.map

package/dist/core/remote-workspace-protocol/guest-shared-uplink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-shared-uplink.js","sourceRoot":"","sources":["../../../src/core/remote-workspace-protocol/guest-shared-uplink.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EACN,wCAAwC,IAAI,MAAM,EAClD,iCAAiC,GAGjC,MAAM,eAAe,CAAC;AACvB,OAAO,EAA2B,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AACvG,OAAO,EACN,+BAA+B,EAC/B,mCAAmC,GAEnC,MAAM,uBAAuB,CAAC;AAsB/B,wFAAwF;AACxF,MAAM,OAAO,iBAAiB;IACZ,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,KAAK,GAAG,IAAI,GAAG,EAA6E,CAAC;IACtG,OAAO,CAAS;IACP,QAAQ,CAAyB;IACjC,MAAM,CAAY;IAC1B,KAAK,CAAS;IACvB,+FAA+F;IACtF,UAAU,CAAgB;IAC3B,cAAc,CAAc;IAEpC,YAAoB,MAAiB,EAAE,KAAa,EAAE;QACrD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;QAAA,CAC9B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAsB,CACzC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CACnB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,EAChG,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAC3B,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CACvB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC,CAC3F,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC,CAAC,CAAC;QAChH,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;IAAA,CACvG;IAEO,OAAO,CAAC,IAAY,EAAE,QAAiB,EAAQ;QACtD,IAAI,CAAC;YACJ,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC;QAC1E,CAAC;IAAA,CACD;IAEO,YAAY,CAAC,KAAwB,EAAQ;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;;YACzD,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAAA,CAC9E;IAEO,KAAK,CAAC,KAAiC,EAAQ;QACtD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACrG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC/D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,8CAA8C,CAAC,CAAC;gBACjG,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;gBAC7B,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;;gBAAM,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;YAChC,OAAO;QACR,CAAC;QACD,2FAA2F;QAC3F,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAA,CACjC;IAED,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,KAAc,EAA8B;QAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IACC,CAAE,CAAC,KAAK,EAAE,MAAM,CAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1D,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,IAAI,EACZ,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,mCAAmC,EAAE;YACtF,iBAAiB,EAAE,KAAK;YACxB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,IAAI,CAAC;YACJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBACjG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;oBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,EAAE,CAAC;gBAAA,CACV,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;oBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBAAA,CACxD,CAAC,CAAC;YAAA,CACH,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,KAAK,mCAAmC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;gBAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBACvG,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,KAAa,EAAE,EAAE,CAAC;oBACjD,IAAI,OAAO;wBAAE,OAAO;oBACpB,OAAO,GAAG,IAAI,CAAC;oBACf,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC7B,IAAI,KAAK;wBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;wBACpB,OAAO,CAAC,KAAM,CAAC,CAAC;gBAAA,CACrB,CAAC;gBACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;gBACpF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;gBACpF,MAAM,SAAS,GAAG,CAAC,IAAuB,EAAE,QAAiB,EAAE,EAAE,CAAC;oBACjE,IAAI,CAAC;wBACJ,IAAI,QAAQ;4BAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;wBACzD,MAAM,KAAK,GAAG,+BAA+B,CAAC,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,EAAE,MAAM,CAAC,CAAC;wBACnF,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE;4BAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;wBAChG,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;4BACrC,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;4BACzE,OAAO;wBACR,CAAC;wBACD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACrB,CAAC;oBAAC,MAAM,CAAC;wBACR,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;oBACzE,CAAC;gBAAA,CACD,CAAC;gBACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;oBACzE,IAAI,KAAK;wBAAE,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBAAA,CAC9E,CAAC,CAAC;YAAA,CACH,CAAC,CAAC;YACH,OAAO,IAAI,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAED,KAAK,CAAC,IAAI,CACT,IAAY,EACZ,SAAoC,EACpC,SAAoC,EACN;QAC9B,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC;QACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC3G,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,UAAU,CACvB,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC,EAC5F,IAAI,CACJ,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;gBAClB,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;oBACtB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAA,CAClB;gBACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;oBAClB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAA,CACd;aACD,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE,CAAC;gBAClE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAAA,CACvB,CAAC,CAAC;QAAA,CACH,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC;QACrC,MAAM,OAAO,GAAY,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO;YACN,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClB,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO,EAAE,CAAC;oBACjE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,iCAAiC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACnD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAAA,CAC1D;YACD,KAAK,EAAE,GAAG,EAAE,CAAC;gBACZ,IAAI,OAAO,CAAC,YAAY;oBAAE,OAAO,OAAO,CAAC,YAAY,CAAC;gBACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO;oBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBACvE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;gBACvB,OAAO,CAAC,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;oBAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;wBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC,CAAC;oBAAA,CACzF,EAAE,IAAI,CAAC,CAAC;oBACT,OAAO,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC;wBAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,OAAO,EAAE,CAAC;oBAAA,CACV,CAAC;oBACF,OAAO,CAAC,WAAW,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;wBAChC,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,MAAM,CAAC,KAAK,CAAC,CAAC;oBAAA,CACd,CAAC;oBACF,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAAA,CACxE,CAAC,CAAC;gBACH,OAAO,OAAO,CAAC,YAAY,CAAC;YAAA,CAC5B;SACD,CAAC;IAAA,CACF;IAEO,IAAI,CAAC,KAAyB,EAAiB;QACtD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAAA,CACjC;IAEO,IAAI,CAAC,KAAY,EAAQ;QAChC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC;gBACJ,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACR,4EAA4E;YAC7E,CAAC;QACF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,EAAE,CAAC;IAAA,CACtB;IAED,OAAO,GAAS;QACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC,CAAC;IAAA,CACvF;CACD","sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport WebSocket from \"ws\";\nimport { VERSION } from \"../../config.ts\";\nimport {\n\tDEFAULT_REMOTE_WORKSPACE_PROTOCOL_LIMITS as limits,\n\tparseRemoteWorkspaceClientMessage,\n\ttype RemoteWorkspaceClientMessage,\n\ttype RemoteWorkspaceServerMessage,\n} from \"./contract.ts\";\nimport { type GuestOutboundFrame, GuestOutboundScheduler } from \"./guest-shared-outbound-scheduler.ts\";\nimport {\n\tparseSharedWorkspaceServerFrame,\n\tSHARED_WORKSPACE_WEBSOCKET_PROTOCOL,\n\ttype SharedWorkspaceServerFrame,\n} from \"./shared-transport.ts\";\n\nexport interface GuestUplinkChannel {\n\treadonly id: string;\n\tsend(message: RemoteWorkspaceClientMessage): Promise<void>;\n\tclose(): Promise<void>;\n}\n\nexport type GuestUplinkMessageHandler = (message: RemoteWorkspaceServerMessage) => void;\nexport type GuestUplinkFailureHandler = (error: Error) => void;\n\ntype Channel = {\n\tonMessage: GuestUplinkMessageHandler;\n\tonFailure: GuestUplinkFailureHandler;\n\tclosing: boolean;\n\tclosePromise?: Promise<void>;\n\tresolveClose?: () => void;\n\trejectClose?: (error: Error) => void;\n};\n\ntype GuestControlFrame = Extract<SharedWorkspaceServerFrame, { type: \"opened\" | \"control_error\" }>;\n\n/** Owns one v2 physical socket. Loss invalidates every channel; nothing is replayed. */\nexport class GuestSharedUplink {\n\tprivate readonly channels = new Map<string, Channel>();\n\tprivate readonly opens = new Map<string, { resolve: (id: string) => void; reject: (error: Error) => void }>();\n\tprivate failure?: Error;\n\tprivate readonly outbound: GuestOutboundScheduler;\n\tprivate readonly socket: WebSocket;\n\treadonly epoch: string;\n\t/** Resolves on any terminal uplink failure (including explicit disposal); never reconnects. */\n\treadonly whenFailed: Promise<void>;\n\tprivate resolveFailure!: () => void;\n\n\tprivate constructor(socket: WebSocket, epoch: string) {\n\t\tthis.socket = socket;\n\t\tthis.epoch = epoch;\n\t\tthis.whenFailed = new Promise<void>((resolve) => {\n\t\t\tthis.resolveFailure = resolve;\n\t\t});\n\t\tthis.outbound = new GuestOutboundScheduler(\n\t\t\t(bytes, callback) =>\n\t\t\t\tsocket.send(bytes, { binary: false, compress: false }, (error) => callback(error ?? undefined)),\n\t\t\t() => socket.bufferedAmount,\n\t\t\t(error) => this.fail(error),\n\t\t);\n\t\tsocket.on(\"message\", (data, isBinary) => this.receive(data as Buffer, isBinary));\n\t\tsocket.on(\"close\", () =>\n\t\t\tthis.fail(new Error(\"Shared workspace uplink disconnected; operations may have committed\")),\n\t\t);\n\t\tsocket.on(\"error\", () => this.fail(new Error(\"Shared workspace uplink failed; operations may have committed\")));\n\t\tif (socket.readyState !== WebSocket.OPEN) this.fail(new Error(\"Shared workspace uplink disconnected\"));\n\t}\n\n\tprivate receive(data: Buffer, isBinary: boolean): void {\n\t\ttry {\n\t\t\tif (isBinary) throw new Error(\"Unexpected binary shared workspace frame\");\n\t\t\tthis.route(parseSharedWorkspaceServerFrame(data, limits));\n\t\t} catch {\n\t\t\tthis.fail(new Error(\"Invalid or unrouteable shared workspace response\"));\n\t\t}\n\t}\n\n\tprivate routeControl(frame: GuestControlFrame): void {\n\t\tconst pending = this.opens.get(frame.id);\n\t\tif (!pending) throw new Error(\"Unknown shared workspace control ID\");\n\t\tthis.opens.delete(frame.id);\n\t\tif (frame.type === \"opened\") pending.resolve(frame.channelId);\n\t\telse pending.reject(new Error(`Shared workspace open failed: ${frame.code}`));\n\t}\n\n\tprivate route(frame: SharedWorkspaceServerFrame): void {\n\t\tif (frame.type === \"hello_ack\") throw new Error(\"Unexpected shared workspace hello acknowledgement\");\n\t\tif (frame.type === \"opened\" || frame.type === \"control_error\") {\n\t\t\tthis.routeControl(frame);\n\t\t\treturn;\n\t\t}\n\t\tconst channel = this.channels.get(frame.channelId);\n\t\tif (!channel) throw new Error(\"Unknown shared workspace channel ID\");\n\t\tif (frame.type === \"closed\") {\n\t\t\tthis.channels.delete(frame.channelId);\n\t\t\tif (frame.reason || !channel.closing) {\n\t\t\t\tconst error = new Error(frame.reason?.message ?? \"Shared workspace channel closed unexpectedly\");\n\t\t\t\tchannel.rejectClose?.(error);\n\t\t\t\tchannel.onFailure(error);\n\t\t\t} else channel.resolveClose?.();\n\t\t\treturn;\n\t\t}\n\t\t// An in-flight response can race a requested detach; deliver until closed is acknowledged.\n\t\tchannel.onMessage(frame.payload);\n\t}\n\n\tstatic async connect(url: string, token?: string): Promise<GuestSharedUplink> {\n\t\tconst endpoint = new URL(url);\n\t\tif (\n\t\t\t!([\"ws:\", \"wss:\"] as string[]).includes(endpoint.protocol) ||\n\t\t\tendpoint.username ||\n\t\t\tendpoint.password ||\n\t\t\tendpoint.hash\n\t\t) {\n\t\t\tthrow new Error(\"Invalid shared workspace endpoint\");\n\t\t}\n\t\tconst socket = new WebSocket(endpoint.toString(), SHARED_WORKSPACE_WEBSOCKET_PROTOCOL, {\n\t\t\tperMessageDeflate: false,\n\t\t\t...(token ? { headers: { authorization: `Bearer ${token}` } } : {}),\n\t\t});\n\t\ttry {\n\t\t\tawait new Promise<void>((resolve, reject) => {\n\t\t\t\tconst timer = setTimeout(() => reject(new Error(\"Shared workspace connection timed out\")), 5000);\n\t\t\t\tsocket.once(\"open\", () => {\n\t\t\t\t\tclearTimeout(timer);\n\t\t\t\t\tresolve();\n\t\t\t\t});\n\t\t\t\tsocket.once(\"error\", () => {\n\t\t\t\t\tclearTimeout(timer);\n\t\t\t\t\treject(new Error(\"Shared workspace connection failed\"));\n\t\t\t\t});\n\t\t\t});\n\t\t\tif (socket.protocol !== SHARED_WORKSPACE_WEBSOCKET_PROTOCOL) {\n\t\t\t\tthrow new Error(\"Daemon does not support grip.workspace.v2\");\n\t\t\t}\n\t\t\tconst id = randomBytes(12).toString(\"hex\");\n\t\t\tconst epoch = await new Promise<string>((resolve, reject) => {\n\t\t\t\tlet settled = false;\n\t\t\t\tconst timer = setTimeout(() => settle(undefined, new Error(\"Shared workspace hello timed out\")), 5000);\n\t\t\t\tconst settle = (value?: string, error?: Error) => {\n\t\t\t\t\tif (settled) return;\n\t\t\t\t\tsettled = true;\n\t\t\t\t\tclearTimeout(timer);\n\t\t\t\t\tsocket.off(\"message\", onMessage);\n\t\t\t\t\tsocket.off(\"close\", onClose);\n\t\t\t\t\tsocket.off(\"error\", onError);\n\t\t\t\t\tif (error) reject(error);\n\t\t\t\t\telse resolve(value!);\n\t\t\t\t};\n\t\t\t\tconst onError = () => settle(undefined, new Error(\"Shared workspace hello failed\"));\n\t\t\t\tconst onClose = () => settle(undefined, new Error(\"Shared workspace hello failed\"));\n\t\t\t\tconst onMessage = (data: WebSocket.RawData, isBinary: boolean) => {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tif (isBinary) throw new Error(\"Unexpected binary frame\");\n\t\t\t\t\t\tconst frame = parseSharedWorkspaceServerFrame(Buffer.from(data as Buffer), limits);\n\t\t\t\t\t\tif (frame.type !== \"hello_ack\" || frame.id !== id) throw new Error(\"Unexpected hello response\");\n\t\t\t\t\t\tif (frame.daemonVersion !== VERSION) {\n\t\t\t\t\t\t\tsettle(undefined, new Error(\"Shared workspace daemon version mismatch\"));\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tsettle(frame.epoch);\n\t\t\t\t\t} catch {\n\t\t\t\t\t\tsettle(undefined, new Error(\"Invalid shared workspace hello response\"));\n\t\t\t\t\t}\n\t\t\t\t};\n\t\t\t\tsocket.on(\"message\", onMessage);\n\t\t\t\tsocket.once(\"close\", onClose);\n\t\t\t\tsocket.once(\"error\", onError);\n\t\t\t\tsocket.send(JSON.stringify({ type: \"hello\", version: 2, id }), (error) => {\n\t\t\t\t\tif (error) settle(undefined, new Error(\"Shared workspace hello send failed\"));\n\t\t\t\t});\n\t\t\t});\n\t\t\treturn new GuestSharedUplink(socket, epoch);\n\t\t} catch (error) {\n\t\t\tsocket.on(\"error\", () => undefined);\n\t\t\tsocket.terminate();\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync open(\n\t\troot: string,\n\t\tonMessage: GuestUplinkMessageHandler,\n\t\tonFailure: GuestUplinkFailureHandler,\n\t): Promise<GuestUplinkChannel> {\n\t\tif (this.failure) throw this.failure;\n\t\tif (this.channels.size + this.opens.size >= 32) throw new Error(\"Shared workspace channel limit exceeded\");\n\t\tconst id = randomBytes(12).toString(\"hex\");\n\t\tconst channelId = await new Promise<string>((resolve, reject) => {\n\t\t\tconst timer = setTimeout(\n\t\t\t\t() => this.fail(new Error(\"Shared workspace open timed out; operations may have committed\")),\n\t\t\t\t5000,\n\t\t\t);\n\t\t\tthis.opens.set(id, {\n\t\t\t\tresolve: (openedId) => {\n\t\t\t\t\tclearTimeout(timer);\n\t\t\t\t\tresolve(openedId);\n\t\t\t\t},\n\t\t\t\treject: (error) => {\n\t\t\t\t\tclearTimeout(timer);\n\t\t\t\t\treject(error);\n\t\t\t\t},\n\t\t\t});\n\t\t\tvoid this.send({ type: \"open\", id, root }).catch((error: Error) => {\n\t\t\t\tconst pending = this.opens.get(id);\n\t\t\t\tthis.opens.delete(id);\n\t\t\t\tpending?.reject(error);\n\t\t\t});\n\t\t});\n\t\tif (this.failure) throw this.failure;\n\t\tconst channel: Channel = { onMessage, onFailure, closing: false };\n\t\tthis.channels.set(channelId, channel);\n\t\treturn {\n\t\t\tid: channelId,\n\t\t\tsend: (payload) => {\n\t\t\t\tif (channel.closing || this.channels.get(channelId) !== channel) {\n\t\t\t\t\treturn Promise.reject(new Error(\"Shared workspace channel is closed\"));\n\t\t\t\t}\n\t\t\t\tparseRemoteWorkspaceClientMessage(payload, limits);\n\t\t\t\treturn this.send({ type: \"channel\", channelId, payload });\n\t\t\t},\n\t\t\tclose: () => {\n\t\t\t\tif (channel.closePromise) return channel.closePromise;\n\t\t\t\tif (this.channels.get(channelId) !== channel) return Promise.resolve();\n\t\t\t\tchannel.closing = true;\n\t\t\t\tchannel.closePromise = new Promise<void>((resolve, reject) => {\n\t\t\t\t\tconst timer = setTimeout(() => {\n\t\t\t\t\t\tthis.fail(new Error(\"Shared workspace detach timed out; operations may have committed\"));\n\t\t\t\t\t}, 5000);\n\t\t\t\t\tchannel.resolveClose = () => {\n\t\t\t\t\t\tclearTimeout(timer);\n\t\t\t\t\t\tresolve();\n\t\t\t\t\t};\n\t\t\t\t\tchannel.rejectClose = (error) => {\n\t\t\t\t\t\tclearTimeout(timer);\n\t\t\t\t\t\treject(error);\n\t\t\t\t\t};\n\t\t\t\t\tvoid this.send({ type: \"close\", channelId }).catch(channel.rejectClose);\n\t\t\t\t});\n\t\t\t\treturn channel.closePromise;\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate send(frame: GuestOutboundFrame): Promise<void> {\n\t\treturn this.outbound.send(frame);\n\t}\n\n\tprivate fail(error: Error): void {\n\t\tif (this.failure) return;\n\t\tthis.failure = error;\n\t\tthis.outbound.fail(error);\n\t\tthis.socket.terminate();\n\t\tfor (const pending of this.opens.values()) pending.reject(error);\n\t\tthis.opens.clear();\n\t\tfor (const channel of this.channels.values()) {\n\t\t\tchannel.rejectClose?.(error);\n\t\t\ttry {\n\t\t\t\tchannel.onFailure(error);\n\t\t\t} catch {\n\t\t\t\t// Do not let one local callback block failure delivery to sibling channels.\n\t\t\t}\n\t\t}\n\t\tthis.channels.clear();\n\t\tthis.resolveFailure();\n\t}\n\n\tdispose(): void {\n\t\tthis.fail(new Error(\"Shared workspace uplink stopped; operations may have committed\"));\n\t}\n}\n"]}

package/dist/core/remote-workspace-protocol/lima-owner-directory.d.ts

@@ -0,0 +1,3 @@
+/** Private host location for named-VM owner locks. Keep the established directory identity. */
+export declare function prepareSharedLimaOwnerDirectory(baseDirectory: string): Promise<string>;
+//# sourceMappingURL=lima-owner-directory.d.ts.map

package/dist/core/remote-workspace-protocol/lima-owner-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lima-owner-directory.d.ts","sourceRoot":"","sources":["../../../src/core/remote-workspace-protocol/lima-owner-directory.ts"],"names":[],"mappings":"AAGA,+FAA+F;AAC/F,wBAAsB,+BAA+B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAyB5F","sourcesContent":["import { lstat, mkdir, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\n/** Private host location for named-VM owner locks. Keep the established directory identity. */\nexport async function prepareSharedLimaOwnerDirectory(baseDirectory: string): Promise<string> {\n\tif (process.platform === \"win32\" || !process.getuid) throw new Error(\"Shared Lima owner requires Unix credentials\");\n\tconst base = await realpath(baseDirectory);\n\tconst baseInfo = await lstat(base);\n\tconst uid = process.getuid();\n\tif (\n\t\t!baseInfo.isDirectory() ||\n\t\t(baseInfo.uid !== uid && baseInfo.uid !== 0) ||\n\t\t((baseInfo.mode & 0o022) !== 0 && (baseInfo.mode & 0o1000) === 0)\n\t) {\n\t\tthrow new Error(\"Shared Lima owner base directory is not owned or sticky-safe\");\n\t}\n\t// Existing owner locks live here; changing this path could bypass a live lock.\n\tconst directory = join(base, `grip-broker-${uid}`);\n\ttry {\n\t\tawait mkdir(directory, { mode: 0o700 });\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n\t}\n\t// Never repair an existing directory: it might belong to another principal.\n\tconst info = await lstat(directory);\n\tif (!info.isDirectory() || info.uid !== uid || (info.mode & 0o077) !== 0) {\n\t\tthrow new Error(\"Shared Lima owner directory is not private and owned by this user\");\n\t}\n\treturn directory;\n}\n"]}

package/dist/core/remote-workspace-protocol/lima-owner-directory.js

@@ -0,0 +1,31 @@
+import { lstat, mkdir, realpath } from "node:fs/promises";
+import { join } from "node:path";
+/** Private host location for named-VM owner locks. Keep the established directory identity. */
+export async function prepareSharedLimaOwnerDirectory(baseDirectory) {
+    if (process.platform === "win32" || !process.getuid)
+        throw new Error("Shared Lima owner requires Unix credentials");
+    const base = await realpath(baseDirectory);
+    const baseInfo = await lstat(base);
+    const uid = process.getuid();
+    if (!baseInfo.isDirectory() ||
+        (baseInfo.uid !== uid && baseInfo.uid !== 0) ||
+        ((baseInfo.mode & 0o022) !== 0 && (baseInfo.mode & 0o1000) === 0)) {
+        throw new Error("Shared Lima owner base directory is not owned or sticky-safe");
+    }
+    // Existing owner locks live here; changing this path could bypass a live lock.
+    const directory = join(base, `grip-broker-${uid}`);
+    try {
+        await mkdir(directory, { mode: 0o700 });
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+    }
+    // Never repair an existing directory: it might belong to another principal.
+    const info = await lstat(directory);
+    if (!info.isDirectory() || info.uid !== uid || (info.mode & 0o077) !== 0) {
+        throw new Error("Shared Lima owner directory is not private and owned by this user");
+    }
+    return directory;
+}
+//# sourceMappingURL=lima-owner-directory.js.map

package/dist/core/remote-workspace-protocol/lima-owner-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lima-owner-directory.js","sourceRoot":"","sources":["../../../src/core/remote-workspace-protocol/lima-owner-directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,aAAqB,EAAmB;IAC7F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACpH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC7B,IACC,CAAC,QAAQ,CAAC,WAAW,EAAE;QACvB,CAAC,QAAQ,CAAC,GAAG,KAAK,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC;QAC5C,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAChE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACjF,CAAC;IACD,+EAA+E;IAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,GAAG,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACrE,CAAC;IACD,4EAA4E;IAC5E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB","sourcesContent":["import { lstat, mkdir, realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\n/** Private host location for named-VM owner locks. Keep the established directory identity. */\nexport async function prepareSharedLimaOwnerDirectory(baseDirectory: string): Promise<string> {\n\tif (process.platform === \"win32\" || !process.getuid) throw new Error(\"Shared Lima owner requires Unix credentials\");\n\tconst base = await realpath(baseDirectory);\n\tconst baseInfo = await lstat(base);\n\tconst uid = process.getuid();\n\tif (\n\t\t!baseInfo.isDirectory() ||\n\t\t(baseInfo.uid !== uid && baseInfo.uid !== 0) ||\n\t\t((baseInfo.mode & 0o022) !== 0 && (baseInfo.mode & 0o1000) === 0)\n\t) {\n\t\tthrow new Error(\"Shared Lima owner base directory is not owned or sticky-safe\");\n\t}\n\t// Existing owner locks live here; changing this path could bypass a live lock.\n\tconst directory = join(base, `grip-broker-${uid}`);\n\ttry {\n\t\tawait mkdir(directory, { mode: 0o700 });\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n\t}\n\t// Never repair an existing directory: it might belong to another principal.\n\tconst info = await lstat(directory);\n\tif (!info.isDirectory() || info.uid !== uid || (info.mode & 0o077) !== 0) {\n\t\tthrow new Error(\"Shared Lima owner directory is not private and owned by this user\");\n\t}\n\treturn directory;\n}\n"]}

package/dist/core/remote-workspace-protocol/lima-owner-lock.d.ts

@@ -0,0 +1,9 @@
+export interface SharedLimaOwnerLock {
+    readonly path: string;
+    readonly instanceName: string;
+    assertHeld(): Promise<void>;
+    release(): Promise<void>;
+}
+/** Exclusive owner lifetime, not a client lease. Never silently steal a stale lock. */
+export declare function acquireSharedLimaOwnerLock(instanceName: string, baseDirectory?: string): Promise<SharedLimaOwnerLock>;
+//# sourceMappingURL=lima-owner-lock.d.ts.map

package/dist/core/remote-workspace-protocol/lima-owner-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lima-owner-lock.d.ts","sourceRoot":"","sources":["../../../src/core/remote-workspace-protocol/lima-owner-lock.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAiBD,uFAAuF;AACvF,wBAAsB,0BAA0B,CAC/C,YAAY,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,mBAAmB,CAAC,CA+D9B","sourcesContent":["import { createHash, randomBytes } from \"node:crypto\";\nimport { type FileHandle, lstat, open, readFile, unlink } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { prepareSharedLimaOwnerDirectory } from \"./lima-owner-directory.ts\";\n\nexport interface SharedLimaOwnerLock {\n\treadonly path: string;\n\treadonly instanceName: string;\n\tassertHeld(): Promise<void>;\n\trelease(): Promise<void>;\n}\n\ninterface LockRecord {\n\tpid: number;\n\tnonce: string;\n}\n\nfunction isAlive(pid: number): boolean {\n\tif (!Number.isSafeInteger(pid) || pid < 1) return false;\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (error) {\n\t\treturn (error as NodeJS.ErrnoException).code === \"EPERM\";\n\t}\n}\n\n/** Exclusive owner lifetime, not a client lease. Never silently steal a stale lock. */\nexport async function acquireSharedLimaOwnerLock(\n\tinstanceName: string,\n\tbaseDirectory?: string,\n): Promise<SharedLimaOwnerLock> {\n\tif (!/^[a-z0-9][a-z0-9-]*$/.test(instanceName)) throw new Error(\"Invalid shared Lima instance name\");\n\t// The production lock must not follow TMPDIR: separate processes can otherwise\n\t// claim the same named VM through different private temporary directories.\n\t// An explicit base is reserved for isolated embedded tests.\n\tconst directory = await prepareSharedLimaOwnerDirectory(baseDirectory ?? \"/tmp\");\n\tconst digest = createHash(\"sha256\").update(instanceName).digest(\"hex\").slice(0, 32);\n\tconst path = join(directory, `lima-owner-${digest}.lock`);\n\tconst record: LockRecord = { pid: process.pid, nonce: randomBytes(16).toString(\"hex\") };\n\tlet handle: FileHandle;\n\ttry {\n\t\thandle = await open(path, \"wx\", 0o600);\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n\t\t// Even a dead PID is ambiguous (crash during a mutation or VM startup). Manual\n\t\t// reconciliation is required; another owner must not implicitly take over.\n\t\tlet state = \"unverifiable\";\n\t\ttry {\n\t\t\tconst info = await lstat(path);\n\t\t\tif (info.isFile() && info.uid === process.getuid?.() && (info.mode & 0o077) === 0) {\n\t\t\t\tconst existing = JSON.parse(await readFile(path, \"utf8\")) as Partial<LockRecord>;\n\t\t\t\tstate = typeof existing.pid === \"number\" && isAlive(existing.pid) ? \"occupied\" : \"stale\";\n\t\t\t}\n\t\t} catch {\n\t\t\t// A racing file change is not grounds for a new owner.\n\t\t}\n\t\tthrow new Error(`Shared Lima owner lock ${state}; inspect and reconcile before retrying`);\n\t}\n\ttry {\n\t\tawait handle.writeFile(JSON.stringify(record));\n\t\tconst identity = await handle.stat();\n\t\tlet released = false;\n\t\tconst assertHeld = async (): Promise<void> => {\n\t\t\tif (released) throw new Error(\"Shared Lima owner lock already released\");\n\t\t\tconst current = await lstat(path);\n\t\t\tif (current.dev !== identity.dev || current.ino !== identity.ino || !current.isFile()) {\n\t\t\t\tthrow new Error(\"Shared Lima owner lock identity changed; refusing operation\");\n\t\t\t}\n\t\t\tconst content = JSON.parse(await readFile(path, \"utf8\")) as Partial<LockRecord>;\n\t\t\tif (content.pid !== record.pid || content.nonce !== record.nonce) {\n\t\t\t\tthrow new Error(\"Shared Lima owner lock contents changed; refusing operation\");\n\t\t\t}\n\t\t};\n\t\treturn {\n\t\t\tpath,\n\t\t\tinstanceName,\n\t\t\tassertHeld,\n\t\t\tasync release(): Promise<void> {\n\t\t\t\tif (released) return;\n\t\t\t\ttry {\n\t\t\t\t\tawait assertHeld();\n\t\t\t\t\tawait unlink(path);\n\t\t\t\t\treleased = true;\n\t\t\t\t} finally {\n\t\t\t\t\tawait handle.close();\n\t\t\t\t}\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tawait handle.close();\n\t\t// Do not unlink an ambiguous lock after an interrupted write.\n\t\tthrow error;\n\t}\n}\n"]}

package/dist/core/remote-workspace-protocol/lima-owner-lock.js

@@ -0,0 +1,89 @@
+import { createHash, randomBytes } from "node:crypto";
+import { lstat, open, readFile, unlink } from "node:fs/promises";
+import { join } from "node:path";
+import { prepareSharedLimaOwnerDirectory } from "./lima-owner-directory.js";
+function isAlive(pid) {
+    if (!Number.isSafeInteger(pid) || pid < 1)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+/** Exclusive owner lifetime, not a client lease. Never silently steal a stale lock. */
+export async function acquireSharedLimaOwnerLock(instanceName, baseDirectory) {
+    if (!/^[a-z0-9][a-z0-9-]*$/.test(instanceName))
+        throw new Error("Invalid shared Lima instance name");
+    // The production lock must not follow TMPDIR: separate processes can otherwise
+    // claim the same named VM through different private temporary directories.
+    // An explicit base is reserved for isolated embedded tests.
+    const directory = await prepareSharedLimaOwnerDirectory(baseDirectory ?? "/tmp");
+    const digest = createHash("sha256").update(instanceName).digest("hex").slice(0, 32);
+    const path = join(directory, `lima-owner-${digest}.lock`);
+    const record = { pid: process.pid, nonce: randomBytes(16).toString("hex") };
+    let handle;
+    try {
+        handle = await open(path, "wx", 0o600);
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+        // Even a dead PID is ambiguous (crash during a mutation or VM startup). Manual
+        // reconciliation is required; another owner must not implicitly take over.
+        let state = "unverifiable";
+        try {
+            const info = await lstat(path);
+            if (info.isFile() && info.uid === process.getuid?.() && (info.mode & 0o077) === 0) {
+                const existing = JSON.parse(await readFile(path, "utf8"));
+                state = typeof existing.pid === "number" && isAlive(existing.pid) ? "occupied" : "stale";
+            }
+        }
+        catch {
+            // A racing file change is not grounds for a new owner.
+        }
+        throw new Error(`Shared Lima owner lock ${state}; inspect and reconcile before retrying`);
+    }
+    try {
+        await handle.writeFile(JSON.stringify(record));
+        const identity = await handle.stat();
+        let released = false;
+        const assertHeld = async () => {
+            if (released)
+                throw new Error("Shared Lima owner lock already released");
+            const current = await lstat(path);
+            if (current.dev !== identity.dev || current.ino !== identity.ino || !current.isFile()) {
+                throw new Error("Shared Lima owner lock identity changed; refusing operation");
+            }
+            const content = JSON.parse(await readFile(path, "utf8"));
+            if (content.pid !== record.pid || content.nonce !== record.nonce) {
+                throw new Error("Shared Lima owner lock contents changed; refusing operation");
+            }
+        };
+        return {
+            path,
+            instanceName,
+            assertHeld,
+            async release() {
+                if (released)
+                    return;
+                try {
+                    await assertHeld();
+                    await unlink(path);
+                    released = true;
+                }
+                finally {
+                    await handle.close();
+                }
+            },
+        };
+    }
+    catch (error) {
+        await handle.close();
+        // Do not unlink an ambiguous lock after an interrupted write.
+        throw error;
+    }
+}
+//# sourceMappingURL=lima-owner-lock.js.map

package/dist/core/remote-workspace-protocol/lima-owner-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lima-owner-lock.js","sourceRoot":"","sources":["../../../src/core/remote-workspace-protocol/lima-owner-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAmB,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAc5E,SAAS,OAAO,CAAC,GAAW,EAAW;IACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC1D,CAAC;AAAA,CACD;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,YAAoB,EACpB,aAAsB,EACS;IAC/B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACrG,+EAA+E;IAC/E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,MAAM,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAe,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,+EAA+E;QAC/E,2EAA2E;QAC3E,IAAI,KAAK,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;gBACjF,KAAK,GAAG,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1F,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,uDAAuD;QACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,yCAAyC,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,UAAU,GAAG,KAAK,IAAmB,EAAE,CAAC;YAC7C,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACzE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;YAChF,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YAChF,CAAC;QAAA,CACD,CAAC;QACF,OAAO;YACN,IAAI;YACJ,YAAY;YACZ,UAAU;YACV,KAAK,CAAC,OAAO,GAAkB;gBAC9B,IAAI,QAAQ;oBAAE,OAAO;gBACrB,IAAI,CAAC;oBACJ,MAAM,UAAU,EAAE,CAAC;oBACnB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;oBACnB,QAAQ,GAAG,IAAI,CAAC;gBACjB,CAAC;wBAAS,CAAC;oBACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtB,CAAC;YAAA,CACD;SACD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,8DAA8D;QAC9D,MAAM,KAAK,CAAC;IACb,CAAC;AAAA,CACD","sourcesContent":["import { createHash, randomBytes } from \"node:crypto\";\nimport { type FileHandle, lstat, open, readFile, unlink } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { prepareSharedLimaOwnerDirectory } from \"./lima-owner-directory.ts\";\n\nexport interface SharedLimaOwnerLock {\n\treadonly path: string;\n\treadonly instanceName: string;\n\tassertHeld(): Promise<void>;\n\trelease(): Promise<void>;\n}\n\ninterface LockRecord {\n\tpid: number;\n\tnonce: string;\n}\n\nfunction isAlive(pid: number): boolean {\n\tif (!Number.isSafeInteger(pid) || pid < 1) return false;\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (error) {\n\t\treturn (error as NodeJS.ErrnoException).code === \"EPERM\";\n\t}\n}\n\n/** Exclusive owner lifetime, not a client lease. Never silently steal a stale lock. */\nexport async function acquireSharedLimaOwnerLock(\n\tinstanceName: string,\n\tbaseDirectory?: string,\n): Promise<SharedLimaOwnerLock> {\n\tif (!/^[a-z0-9][a-z0-9-]*$/.test(instanceName)) throw new Error(\"Invalid shared Lima instance name\");\n\t// The production lock must not follow TMPDIR: separate processes can otherwise\n\t// claim the same named VM through different private temporary directories.\n\t// An explicit base is reserved for isolated embedded tests.\n\tconst directory = await prepareSharedLimaOwnerDirectory(baseDirectory ?? \"/tmp\");\n\tconst digest = createHash(\"sha256\").update(instanceName).digest(\"hex\").slice(0, 32);\n\tconst path = join(directory, `lima-owner-${digest}.lock`);\n\tconst record: LockRecord = { pid: process.pid, nonce: randomBytes(16).toString(\"hex\") };\n\tlet handle: FileHandle;\n\ttry {\n\t\thandle = await open(path, \"wx\", 0o600);\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n\t\t// Even a dead PID is ambiguous (crash during a mutation or VM startup). Manual\n\t\t// reconciliation is required; another owner must not implicitly take over.\n\t\tlet state = \"unverifiable\";\n\t\ttry {\n\t\t\tconst info = await lstat(path);\n\t\t\tif (info.isFile() && info.uid === process.getuid?.() && (info.mode & 0o077) === 0) {\n\t\t\t\tconst existing = JSON.parse(await readFile(path, \"utf8\")) as Partial<LockRecord>;\n\t\t\t\tstate = typeof existing.pid === \"number\" && isAlive(existing.pid) ? \"occupied\" : \"stale\";\n\t\t\t}\n\t\t} catch {\n\t\t\t// A racing file change is not grounds for a new owner.\n\t\t}\n\t\tthrow new Error(`Shared Lima owner lock ${state}; inspect and reconcile before retrying`);\n\t}\n\ttry {\n\t\tawait handle.writeFile(JSON.stringify(record));\n\t\tconst identity = await handle.stat();\n\t\tlet released = false;\n\t\tconst assertHeld = async (): Promise<void> => {\n\t\t\tif (released) throw new Error(\"Shared Lima owner lock already released\");\n\t\t\tconst current = await lstat(path);\n\t\t\tif (current.dev !== identity.dev || current.ino !== identity.ino || !current.isFile()) {\n\t\t\t\tthrow new Error(\"Shared Lima owner lock identity changed; refusing operation\");\n\t\t\t}\n\t\t\tconst content = JSON.parse(await readFile(path, \"utf8\")) as Partial<LockRecord>;\n\t\t\tif (content.pid !== record.pid || content.nonce !== record.nonce) {\n\t\t\t\tthrow new Error(\"Shared Lima owner lock contents changed; refusing operation\");\n\t\t\t}\n\t\t};\n\t\treturn {\n\t\t\tpath,\n\t\t\tinstanceName,\n\t\t\tassertHeld,\n\t\t\tasync release(): Promise<void> {\n\t\t\t\tif (released) return;\n\t\t\t\ttry {\n\t\t\t\t\tawait assertHeld();\n\t\t\t\t\tawait unlink(path);\n\t\t\t\t\treleased = true;\n\t\t\t\t} finally {\n\t\t\t\t\tawait handle.close();\n\t\t\t\t}\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tawait handle.close();\n\t\t// Do not unlink an ambiguous lock after an interrupted write.\n\t\tthrow error;\n\t}\n}\n"]}