@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/runtime/connection-descriptor.js

@@ -0,0 +1,136 @@
+import { constants } from "node:fs";
+import { lstat, open, rename, unlink } from "node:fs/promises";
+import { localNodeConnectionDescriptorSchema, MAX_LOCAL_NODE_CONNECTION_DESCRIPTOR_BYTES, } from "@maiaos/protocol";
+import { Context, Effect, Layer } from "effect";
+import { asNodeRuntimeError, makeNodeRuntimeError, } from "./errors.js";
+const PRIVATE_MODE_MASK = 0o077;
+const TEMPORARY_SUFFIX = ".tmp";
+const isMissing = (error) => error instanceof Error && "code" in error && error.code === "ENOENT";
+const ownedByCurrentUser = (metadata) => typeof process.getuid !== "function" ||
+    metadata.uid === BigInt(process.getuid());
+const validateDescriptorMetadata = (metadata) => {
+    if (!metadata.isFile() ||
+        metadata.isSymbolicLink() ||
+        metadata.nlink !== 1n ||
+        metadata.size > BigInt(MAX_LOCAL_NODE_CONNECTION_DESCRIPTOR_BYTES) ||
+        !ownedByCurrentUser(metadata) ||
+        (process.platform !== "win32" &&
+            (Number(metadata.mode) & PRIVATE_MODE_MASK) !== 0)) {
+        throw makeNodeRuntimeError("path_invalid", "The Maia local connection descriptor path is unsafe.");
+    }
+};
+const inspectDescriptor = async (path) => {
+    try {
+        const metadata = await lstat(path, { bigint: true });
+        validateDescriptorMetadata(metadata);
+        return metadata;
+    }
+    catch (error) {
+        if (isMissing(error))
+            return;
+        throw error;
+    }
+};
+const removeExistingDescriptor = async (path) => {
+    if ((await inspectDescriptor(path)) !== undefined)
+        await unlink(path);
+};
+const sameIdentity = (metadata, identity) => metadata.ctimeNs === identity.changedAtNanoseconds &&
+    metadata.birthtimeNs === identity.createdAtNanoseconds &&
+    metadata.dev === identity.device &&
+    metadata.ino === identity.inode &&
+    metadata.mtimeNs === identity.modifiedAtNanoseconds &&
+    metadata.size === identity.size;
+const removeExactDescriptor = async (path, identity) => {
+    const metadata = await inspectDescriptor(path);
+    if (metadata === undefined)
+        return;
+    if (!sameIdentity(metadata, identity)) {
+        throw makeNodeRuntimeError("resource_cleanup_failed", "The Maia local connection descriptor changed before cleanup.");
+    }
+    await unlink(path);
+};
+const writeTemporaryDescriptor = async (path, content) => {
+    const flags = constants.O_CREAT |
+        constants.O_EXCL |
+        constants.O_WRONLY |
+        (process.platform === "win32" ? 0 : constants.O_NOFOLLOW);
+    const handle = await open(path, flags, 0o600);
+    try {
+        await handle.writeFile(content, "utf8");
+        if (process.platform !== "win32")
+            await handle.chmod(0o600);
+        const metadata = await handle.stat({ bigint: true });
+        validateDescriptorMetadata(metadata);
+    }
+    finally {
+        await handle.close();
+    }
+};
+const writeTemporaryDescriptorWithStaleRecovery = async (path, content) => {
+    try {
+        await writeTemporaryDescriptor(path, content);
+    }
+    catch (error) {
+        if (!(error instanceof Error &&
+            "code" in error &&
+            error.code === "EEXIST")) {
+            throw error;
+        }
+        await removeExistingDescriptor(path);
+        await writeTemporaryDescriptor(path, content);
+    }
+};
+const encodeDescriptor = (input) => {
+    const descriptor = localNodeConnectionDescriptorSchema.parse(input.descriptor);
+    const content = `${JSON.stringify(descriptor)}\n`;
+    if (Buffer.byteLength(content, "utf8") >
+        MAX_LOCAL_NODE_CONNECTION_DESCRIPTOR_BYTES) {
+        throw makeNodeRuntimeError("internal_error", "The Maia local connection descriptor exceeds its size limit.");
+    }
+    return content;
+};
+const installDescriptor = async (input, temporaryPath, content) => {
+    await writeTemporaryDescriptorWithStaleRecovery(temporaryPath, content);
+    await rename(temporaryPath, input.path);
+    const metadata = await lstat(input.path, { bigint: true });
+    validateDescriptorMetadata(metadata);
+    return {
+        changedAtNanoseconds: metadata.ctimeNs,
+        createdAtNanoseconds: metadata.birthtimeNs,
+        device: metadata.dev,
+        inode: metadata.ino,
+        modifiedAtNanoseconds: metadata.mtimeNs,
+        size: metadata.size,
+    };
+};
+const createDescriptor = async (input) => {
+    const content = encodeDescriptor(input);
+    const temporaryPath = `${input.path}${TEMPORARY_SUFFIX}`;
+    await removeExistingDescriptor(input.path);
+    try {
+        return await installDescriptor(input, temporaryPath, content);
+    }
+    catch (error) {
+        await unlink(temporaryPath).catch((cleanupError) => {
+            if (!isMissing(cleanupError))
+                throw cleanupError;
+        });
+        throw error;
+    }
+};
+const releaseDescriptor = (path, identity) => Effect.tryPromise({
+    catch: (error) => asNodeRuntimeError(error, "resource_cleanup_failed", "The Maia local connection descriptor could not be removed safely."),
+    try: () => removeExactDescriptor(path, identity),
+}).pipe(Effect.catch((error) => Effect.logError("maia.node.connection_descriptor_cleanup_failed", new Map([["code", error.code]]))));
+const acquire = Effect.fn("LocalConnectionDescriptor.acquire")(function* (input) {
+    const identity = yield* Effect.tryPromise({
+        catch: (error) => asNodeRuntimeError(error, "internal_error", "Could not publish the Maia local connection descriptor."),
+        try: () => createDescriptor(input),
+    });
+    return { release: releaseDescriptor(input.path, identity) };
+});
+export class LocalConnectionDescriptor extends Context.Service()("@maiaos/node/runtime/LocalConnectionDescriptor") {
+    static layer = Layer.succeed(LocalConnectionDescriptor, LocalConnectionDescriptor.of({ acquire }));
+}
+//# sourceMappingURL=connection-descriptor.js.map

package/dist/runtime/connection-descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-descriptor.js","sourceRoot":"","sources":["../../src/runtime/connection-descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,SAAS,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAEL,mCAAmC,EACnC,0CAA0C,GAC3C,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,aAAa,CAAC;AAErB,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAoBhC,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE,CAC5C,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAEvE,MAAM,kBAAkB,GAAG,CAAC,QAAqB,EAAW,EAAE,CAC5D,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;IACpC,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAE5C,MAAM,0BAA0B,GAAG,CAAC,QAAqB,EAAQ,EAAE;IACjE,IACE,CAAC,QAAQ,CAAC,MAAM,EAAE;QAClB,QAAQ,CAAC,cAAc,EAAE;QACzB,QAAQ,CAAC,KAAK,KAAK,EAAE;QACrB,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,0CAA0C,CAAC;QAClE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QAC7B,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,EACpD,CAAC;QACD,MAAM,oBAAoB,CACxB,cAAc,EACd,sDAAsD,CACvD,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,KAAK,EAC7B,IAAY,EACsB,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IACrE,IAAI,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS;QAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,QAAqB,EAAE,QAAsB,EAAW,EAAE,CAC9E,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,oBAAoB;IAClD,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,oBAAoB;IACtD,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM;IAChC,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK;IAC/B,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,qBAAqB;IACnD,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;AAElC,MAAM,qBAAqB,GAAG,KAAK,EACjC,IAAY,EACZ,QAAsB,EACP,EAAE;IACjB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,oBAAoB,CACxB,yBAAyB,EACzB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,KAAK,EACpC,IAAY,EACZ,OAAe,EACA,EAAE;IACjB,MAAM,KAAK,GACT,SAAS,CAAC,OAAO;QACjB,SAAS,CAAC,MAAM;QAChB,SAAS,CAAC,QAAQ;QAClB,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,yCAAyC,GAAG,KAAK,EACrD,IAAY,EACZ,OAAe,EACA,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CACH,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB,EAAE,CAAC;YACF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,KAAqC,EAAU,EAAE;IACzE,MAAM,UAAU,GAAG,mCAAmC,CAAC,KAAK,CAC1D,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;IAClD,IACE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;QAClC,0CAA0C,EAC1C,CAAC;QACD,MAAM,oBAAoB,CACxB,gBAAgB,EAChB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,KAAK,EAC7B,KAAqC,EACrC,aAAqB,EACrB,OAAe,EACQ,EAAE;IACzB,MAAM,yCAAyC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO;QACL,oBAAoB,EAAE,QAAQ,CAAC,OAAO;QACtC,oBAAoB,EAAE,QAAQ,CAAC,WAAW;QAC1C,MAAM,EAAE,QAAQ,CAAC,GAAG;QACpB,KAAK,EAAE,QAAQ,CAAC,GAAG;QACnB,qBAAqB,EAAE,QAAQ,CAAC,OAAO;QACvC,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,KAAK,EAC5B,KAAqC,EACd,EAAE;IACzB,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,aAAa,GAAG,GAAG,KAAK,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;IACzD,MAAM,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,YAAqB,EAAE,EAAE;YAC1D,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;gBAAE,MAAM,YAAY,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,QAAsB,EAAE,EAAE,CACjE,MAAM,CAAC,UAAU,CAAC;IAChB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,kBAAkB,CAChB,KAAK,EACL,yBAAyB,EACzB,mEAAmE,CACpE;IACH,GAAG,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC;CACjD,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,QAAQ,CACb,gDAAgD,EAChD,IAAI,GAAG,CAAkB,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CACjD,CACF,CACF,CAAC;AAEJ,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAAC,EACtE,KAAqC;IAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,kBAAkB,CAChB,KAAK,EACL,gBAAgB,EAChB,yDAAyD,CAC1D;QACH,GAAG,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,yBAA0B,SAAQ,OAAO,CAAC,OAAO,EAG3D,CAAC,gDAAgD,CAAC;IACnD,MAAM,CAAU,KAAK,GAAG,KAAK,CAAC,OAAO,CACnC,yBAAyB,EACzB,yBAAyB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAC1C,CAAC"}

package/dist/runtime/errors.d.ts

@@ -0,0 +1,21 @@
+import { Schema } from "effect";
+export declare const nodeRuntimeErrorCodeSchema: Schema.Literals<readonly ["already_running", "authentication_failed", "command_not_implemented", "configuration_ambiguous", "configuration_conflict", "configuration_invalid", "configuration_recovery_required", "configuration_write_failed", "deadline_exceeded", "frame_invalid", "frame_too_large", "internal_error", "mailbox_saturated", "outcome_unknown", "path_invalid", "resource_cleanup_failed", "repository_invalid", "repository_unavailable", "resource_not_found", "saturated", "storage_conflict", "storage_corrupt", "storage_failed", "transport_failed"]>;
+export type NodeRuntimeErrorCode = typeof nodeRuntimeErrorCodeSchema.Type;
+export declare const nodeRuntimeErrorSchema: Schema.TaggedStruct<"NodeRuntimeError", {
+    readonly code: Schema.Literals<readonly ["already_running", "authentication_failed", "command_not_implemented", "configuration_ambiguous", "configuration_conflict", "configuration_invalid", "configuration_recovery_required", "configuration_write_failed", "deadline_exceeded", "frame_invalid", "frame_too_large", "internal_error", "mailbox_saturated", "outcome_unknown", "path_invalid", "resource_cleanup_failed", "repository_invalid", "repository_unavailable", "resource_not_found", "saturated", "storage_conflict", "storage_corrupt", "storage_failed", "transport_failed"]>;
+    readonly message: Schema.String;
+    readonly retryable: Schema.Boolean;
+}>;
+export declare class NodeRuntimeError extends Error {
+    readonly _tag = "NodeRuntimeError";
+    readonly code: NodeRuntimeErrorCode;
+    readonly retryable: boolean;
+    constructor(options: {
+        readonly code: NodeRuntimeErrorCode;
+        readonly message: string;
+        readonly retryable: boolean;
+    });
+}
+export declare const makeNodeRuntimeError: (code: NodeRuntimeErrorCode, message: string, retryable?: boolean) => NodeRuntimeError;
+export declare const asNodeRuntimeError: (error: unknown, code: NodeRuntimeErrorCode, message: string) => NodeRuntimeError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/runtime/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/runtime/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,eAAO,MAAM,0BAA0B,gjBAyBrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,OAAO,0BAA0B,CAAC,IAAI,CAAC;AAE1E,eAAO,MAAM,sBAAsB;;;;EAIjC,CAAC;AAEH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,OAAO,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;QACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;KAC7B;CAMF;AAED,eAAO,MAAM,oBAAoB,GAC/B,MAAM,oBAAoB,EAC1B,SAAS,MAAM,EACf,mBAAiB,KAChB,gBAAsE,CAAC;AAE1E,eAAO,MAAM,kBAAkB,GAC7B,OAAO,OAAO,EACd,MAAM,oBAAoB,EAC1B,SAAS,MAAM,KACd,gBAGsC,CAAC"}

package/dist/runtime/errors.js

@@ -0,0 +1,48 @@
+import { Schema } from "effect";
+export const nodeRuntimeErrorCodeSchema = Schema.Literals([
+    "already_running",
+    "authentication_failed",
+    "command_not_implemented",
+    "configuration_ambiguous",
+    "configuration_conflict",
+    "configuration_invalid",
+    "configuration_recovery_required",
+    "configuration_write_failed",
+    "deadline_exceeded",
+    "frame_invalid",
+    "frame_too_large",
+    "internal_error",
+    "mailbox_saturated",
+    "outcome_unknown",
+    "path_invalid",
+    "resource_cleanup_failed",
+    "repository_invalid",
+    "repository_unavailable",
+    "resource_not_found",
+    "saturated",
+    "storage_conflict",
+    "storage_corrupt",
+    "storage_failed",
+    "transport_failed",
+]);
+export const nodeRuntimeErrorSchema = Schema.TaggedStruct("NodeRuntimeError", {
+    code: nodeRuntimeErrorCodeSchema,
+    message: Schema.String,
+    retryable: Schema.Boolean,
+});
+export class NodeRuntimeError extends Error {
+    _tag = "NodeRuntimeError";
+    code;
+    retryable;
+    constructor(options) {
+        super(options.message);
+        this.name = "NodeRuntimeError";
+        this.code = options.code;
+        this.retryable = options.retryable;
+    }
+}
+export const makeNodeRuntimeError = (code, message, retryable = false) => new NodeRuntimeError({ code, message, retryable });
+export const asNodeRuntimeError = (error, code, message) => error instanceof NodeRuntimeError
+    ? error
+    : makeNodeRuntimeError(code, message);
+//# sourceMappingURL=errors.js.map

package/dist/runtime/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/runtime/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,QAAQ,CAAC;IACxD,iBAAiB;IACjB,uBAAuB;IACvB,yBAAyB;IACzB,yBAAyB;IACzB,wBAAwB;IACxB,uBAAuB;IACvB,iCAAiC;IACjC,4BAA4B;IAC5B,mBAAmB;IACnB,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,cAAc;IACd,yBAAyB;IACzB,oBAAoB;IACpB,wBAAwB;IACxB,oBAAoB;IACpB,WAAW;IACX,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,kBAAkB;CACnB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,YAAY,CAAC,kBAAkB,EAAE;IAC5E,IAAI,EAAE,0BAA0B;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,SAAS,EAAE,MAAM,CAAC,OAAO;CAC1B,CAAC,CAAC;AAEH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,GAAG,kBAAkB,CAAC;IAC1B,IAAI,CAAuB;IAC3B,SAAS,CAAU;IAE5B,YAAY,OAIX;QACC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACrC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAA0B,EAC1B,OAAe,EACf,SAAS,GAAG,KAAK,EACC,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,KAAc,EACd,IAA0B,EAC1B,OAAe,EACG,EAAE,CACpB,KAAK,YAAY,gBAAgB;IAC/B,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC"}

package/dist/runtime/framing.d.ts

@@ -0,0 +1,9 @@
+export type DecodedFrame = {
+    readonly state: "complete";
+    readonly value: unknown;
+} | {
+    readonly state: "incomplete";
+};
+export declare const encodeFrame: (value: unknown) => Buffer;
+export declare const decodeSingleFrame: (frame: Buffer) => DecodedFrame;
+//# sourceMappingURL=framing.d.ts.map

package/dist/runtime/framing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framing.d.ts","sourceRoot":"","sources":["../../src/runtime/framing.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAErC,eAAO,MAAM,WAAW,GAAI,OAAO,OAAO,KAAG,MAe5C,CAAC;AAmCF,eAAO,MAAM,iBAAiB,GAAI,OAAO,MAAM,KAAG,YAejD,CAAC"}

package/dist/runtime/framing.js

@@ -0,0 +1,48 @@
+import { LOCAL_NODE_FRAME_HEADER_BYTES, MAX_LOCAL_NODE_FRAME_BYTES, } from "@maiaos/protocol";
+import { makeNodeRuntimeError } from "./errors.js";
+const utf8Decoder = new TextDecoder("utf-8", { fatal: true });
+export const encodeFrame = (value) => {
+    const payload = Buffer.from(JSON.stringify(value), "utf8");
+    if (payload.byteLength > MAX_LOCAL_NODE_FRAME_BYTES) {
+        throw makeNodeRuntimeError("frame_too_large", "The local IPC response exceeds the frame limit.");
+    }
+    const frame = Buffer.allocUnsafe(LOCAL_NODE_FRAME_HEADER_BYTES + payload.byteLength);
+    frame.writeUInt32BE(payload.byteLength, 0);
+    payload.copy(frame, LOCAL_NODE_FRAME_HEADER_BYTES);
+    return frame;
+};
+const expectedFrameLength = (frame) => {
+    const payloadLength = frame.readUInt32BE(0);
+    if (payloadLength > MAX_LOCAL_NODE_FRAME_BYTES) {
+        throw makeNodeRuntimeError("frame_too_large", "The local IPC request exceeds the frame limit.");
+    }
+    return LOCAL_NODE_FRAME_HEADER_BYTES + payloadLength;
+};
+const decodeJsonPayload = (frame) => {
+    let json;
+    try {
+        json = utf8Decoder.decode(frame.subarray(LOCAL_NODE_FRAME_HEADER_BYTES));
+    }
+    catch {
+        throw makeNodeRuntimeError("frame_invalid", "The local IPC request is not valid UTF-8.");
+    }
+    try {
+        return JSON.parse(json);
+    }
+    catch {
+        throw makeNodeRuntimeError("frame_invalid", "The local IPC request is not valid JSON.");
+    }
+};
+export const decodeSingleFrame = (frame) => {
+    if (frame.byteLength < LOCAL_NODE_FRAME_HEADER_BYTES) {
+        return { state: "incomplete" };
+    }
+    const expectedLength = expectedFrameLength(frame);
+    if (frame.byteLength < expectedLength)
+        return { state: "incomplete" };
+    if (frame.byteLength !== expectedLength) {
+        throw makeNodeRuntimeError("frame_invalid", "A local IPC connection may contain only one request frame.");
+    }
+    return { state: "complete", value: decodeJsonPayload(frame) };
+};
+//# sourceMappingURL=framing.js.map

package/dist/runtime/framing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framing.js","sourceRoot":"","sources":["../../src/runtime/framing.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAM9D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAU,EAAE;IACpD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,UAAU,GAAG,0BAA0B,EAAE,CAAC;QACpD,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,iDAAiD,CAClD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,6BAA6B,GAAG,OAAO,CAAC,UAAU,CACnD,CAAC;IACF,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAU,EAAE;IACpD,MAAM,aAAa,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,aAAa,GAAG,0BAA0B,EAAE,CAAC;QAC/C,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,6BAA6B,GAAG,aAAa,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAW,EAAE;IACnD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,oBAAoB,CACxB,eAAe,EACf,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,oBAAoB,CACxB,eAAe,EACf,0CAA0C,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAgB,EAAE;IAC/D,IAAI,KAAK,CAAC,UAAU,GAAG,6BAA6B,EAAE,CAAC;QACrD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,UAAU,GAAG,cAAc;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACtE,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,oBAAoB,CACxB,eAAe,EACf,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;AAChE,CAAC,CAAC"}

package/dist/runtime/instance-lock.d.ts

@@ -0,0 +1,54 @@
+import { type Stats } from "node:fs";
+import { Context, Effect, Layer, Option, Schema } from "effect";
+import { NodeRuntimeError } from "./errors.js";
+import type { ResolvedProfilePaths } from "./profile-paths.js";
+declare const instanceMetadataSchema: Schema.Struct<{
+    readonly instanceId: Schema.String;
+    readonly pid: Schema.Int;
+    readonly startedAt: Schema.String;
+}>;
+export type InstanceMetadata = typeof instanceMetadataSchema.Type;
+export type InstanceLockResource = {
+    readonly release: Effect.Effect<void>;
+};
+export type ProcessOwnedLockResource = {
+    readonly release: Effect.Effect<void, NodeRuntimeError>;
+};
+type LockOwner = {
+    readonly entry: string;
+    readonly instanceId: string;
+    readonly pid: number;
+};
+type LockDirectoryGeneration = {
+    readonly dev: number;
+    readonly ino: number;
+};
+export declare const validateOwnerMetadata: (metadata: Stats) => "changing" | "valid";
+export declare const readLockDirectoryGeneration: (lockPath: string) => Promise<LockDirectoryGeneration | undefined>;
+type OwnerRemovalReconciliation = {
+    readonly expectedGeneration: LockDirectoryGeneration;
+    readonly operationError: unknown;
+    readonly ownerEntry: string;
+};
+export declare const reconcileOwnerRemoval: (lockPath: string, input: OwnerRemovalReconciliation) => Promise<void>;
+export declare const reconcileLockRemoval: (lockPath: string, expectedGeneration: LockDirectoryGeneration, operationError: unknown) => Promise<void>;
+export declare const readOwnerMetadata: (lockPath: string, entry: string) => Effect.Effect<Option.Option<LockOwner>, NodeRuntimeError, never>;
+export declare const installPreparedClaim: (preparedPath: string, destinationPath: string) => Promise<boolean>;
+export declare const acquireProcessOwnedLock: (lockPath: string, metadata: {
+    readonly instanceId: string;
+    readonly pid: number;
+    readonly startedAt: string;
+}) => Effect.Effect<ProcessOwnedLockResource, NodeRuntimeError, never>;
+declare const acquire: (paths: ResolvedProfilePaths, metadata: {
+    readonly instanceId: string;
+    readonly pid: number;
+    readonly startedAt: string;
+}) => Effect.Effect<InstanceLockResource, NodeRuntimeError, never>;
+declare const InstanceLock_base: Context.ServiceClass<InstanceLock, "@maiaos/node/runtime/InstanceLock", {
+    readonly acquire: typeof acquire;
+}>;
+export declare class InstanceLock extends InstanceLock_base {
+    static readonly layer: Layer.Layer<InstanceLock, never, never>;
+}
+export {};
+//# sourceMappingURL=instance-lock.d.ts.map

package/dist/runtime/instance-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-lock.d.ts","sourceRoot":"","sources":["../../src/runtime/instance-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAY1D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhE,OAAO,EAGL,gBAAgB,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAQ/D,QAAA,MAAM,sBAAsB;;;;EAU1B,CAAC;AAMH,MAAM,MAAM,gBAAgB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAC;AAElE,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;CACzD,CAAC;AASF,KAAK,SAAS,GAAG;IACf,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC;AASF,KAAK,uBAAuB,GAAG;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC;AA0DF,eAAO,MAAM,qBAAqB,GAChC,UAAU,KAAK,KACd,UAAU,GAAG,OAwBf,CAAC;AA+BF,eAAO,MAAM,2BAA2B,GACtC,UAAU,MAAM,KACf,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAO7C,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;IACrD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,UAAU,MAAM,EAChB,OAAO,0BAA0B,KAChC,OAAO,CAAC,IAAI,CAwBd,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,UAAU,MAAM,EAChB,oBAAoB,uBAAuB,EAC3C,gBAAgB,OAAO,KACtB,OAAO,CAAC,IAAI,CAqBd,CAAC;AAoJF,eAAO,MAAM,iBAAiB,uGAoB5B,CAAC;AAoFH,eAAO,MAAM,oBAAoB,GAC/B,cAAc,MAAM,EACpB,iBAAiB,MAAM,KACtB,OAAO,CAAC,OAAO,CAQjB,CAAC;AAgWF,eAAO,MAAM,uBAAuB;;;;sEAQnC,CAAC;AAEF,QAAA,MAAM,OAAO;;;;kEAMX,CAAC;;sBAImB,OAAO,OAAO;;AAFpC,qBAAa,YAAa,SAAQ,iBAGM;IACtC,MAAM,CAAC,QAAQ,CAAC,KAAK,0CAGnB;CACH"}