@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/runtime/process/resource/managed-tree.d.ts

@@ -0,0 +1,28 @@
+import { Deferred, Effect, type Semaphore } from "effect";
+import { type NodeRuntimeError } from "../../errors.js";
+import type { ProcessTerminationReason, RegisteredProcessResourceLaunchRequest } from "./contract.js";
+import type { GatedProcess } from "./launch-gate.js";
+import type { LinuxProcessIdentity } from "./linux-process-identity.js";
+import { type LaunchLeaderIdentity } from "./process-identity.js";
+import { type SnapshotEntry } from "./snapshot.js";
+export type AdmissionLease = {
+    cleanupUnknown: boolean;
+    released: boolean;
+};
+export type ManagedEntry = SnapshotEntry & {
+    cleanupAttempts: number;
+    cleanupCompleted: Deferred.Deferred<NodeRuntimeError | undefined>;
+    cleanupReason?: ProcessTerminationReason;
+    cleanupStarted: boolean;
+    readonly leaderIdentity: LaunchLeaderIdentity;
+    readonly permit: AdmissionLease;
+    readonly trackedMembers: Map<number, LinuxProcessIdentity>;
+};
+export type ManagerState = {
+    readonly admission: Semaphore.Semaphore;
+    readonly entries: Map<string, ManagedEntry>;
+};
+/** Replaces stale identities atomically and never retains more than the cap. */
+export declare const replaceTrackedMembers: (entry: ManagedEntry, identities: readonly LinuxProcessIdentity[]) => boolean;
+export declare const createManagedEntry: (gated: GatedProcess, permit: AdmissionLease, request: RegisteredProcessResourceLaunchRequest) => Effect.Effect<ManagedEntry, NodeRuntimeError, never>;
+//# sourceMappingURL=managed-tree.d.ts.map

package/dist/runtime/process/resource/managed-tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-tree.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/managed-tree.ts"],"names":[],"mappings":"AAEA,OAAO,EAAS,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEjE,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EACV,wBAAwB,EACxB,sCAAsC,EACvC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAyB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAE1E,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG;IACzC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAClE,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;CAC5D,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CAC7C,CAAC;AAuDF,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,GAChC,OAAO,YAAY,EACnB,YAAY,SAAS,oBAAoB,EAAE,KAC1C,OAoBF,CAAC;AAEF,eAAO,MAAM,kBAAkB,wJA0B7B,CAAC"}

package/dist/runtime/process/resource/managed-tree.js

@@ -0,0 +1,79 @@
+import { randomUUID } from "node:crypto";
+import { Clock, Deferred, Effect } from "effect";
+import { makeNodeRuntimeError } from "../../errors.js";
+import { processResourcePolicy } from "./policy.js";
+import { captureLaunchLeaderIdentity, } from "./process-identity.js";
+import { createInitialSnapshot } from "./snapshot.js";
+const buildEntry = (input) => {
+    const treeId = `process_${randomUUID().replaceAll("-", "")}`;
+    const partial = {
+        child: input.gated.child,
+        cleanupAttempts: 0,
+        cleanupCompleted: Deferred.makeUnsafe(),
+        cleanupStarted: false,
+        leaderIdentity: input.leaderIdentity,
+        permit: input.permit,
+        processGroupId: input.processGroupId,
+        recent: [],
+        request: input.request,
+        startedAtNanos: input.startedAtNanos,
+        trackedMembers: new Map(),
+        treeId,
+    };
+    return {
+        ...partial,
+        latest: createInitialSnapshot(partial, {
+            currentTimeMillis: input.currentTimeMillis,
+            monotonicTimeNanos: input.startedAtNanos,
+        }),
+    };
+};
+const requireProcessGroupId = (gated) => gated.child.pid === undefined
+    ? Effect.fail(makeNodeRuntimeError("transport_failed", "The managed process did not start."))
+    : Effect.succeed(gated.child.pid);
+const trackLaunchLeader = (entry) => {
+    if (entry.leaderIdentity.state === "available") {
+        entry.trackedMembers.set(entry.processGroupId, entry.leaderIdentity.value);
+    }
+};
+/** Replaces stale identities atomically and never retains more than the cap. */
+export const replaceTrackedMembers = (entry, identities) => {
+    const replacement = identities.reduce((tracked, identity) => {
+        if (identity.processGroupId === entry.processGroupId) {
+            tracked.set(identity.processId, identity);
+        }
+        return tracked;
+    }, new Map());
+    if (entry.leaderIdentity.state === "available") {
+        replacement.set(entry.processGroupId, entry.leaderIdentity.value);
+    }
+    if (replacement.size > processResourcePolicy.maximumTrackedMembersPerTree) {
+        entry.trackedMembers.clear();
+        trackLaunchLeader(entry);
+        return false;
+    }
+    entry.trackedMembers.clear();
+    replacement.forEach((identity, processId) => {
+        entry.trackedMembers.set(processId, identity);
+    });
+    return true;
+};
+export const createManagedEntry = Effect.fn("ProcessResourceManager.createManagedEntry")(function* (gated, permit, request) {
+    const processGroupId = yield* requireProcessGroupId(gated);
+    const leaderIdentity = yield* captureLaunchLeaderIdentity(processGroupId, processGroupId);
+    const currentTimeMillis = yield* Clock.currentTimeMillis;
+    const startedAtNanos = yield* Clock.monotonicTimeNanos;
+    const entry = buildEntry({
+        currentTimeMillis,
+        gated,
+        leaderIdentity,
+        permit,
+        processGroupId,
+        request,
+        startedAtNanos,
+    });
+    trackLaunchLeader(entry);
+    entry.recent.push(entry.latest);
+    return entry;
+});
+//# sourceMappingURL=managed-tree.js.map

package/dist/runtime/process/resource/managed-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-tree.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/managed-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAEjE,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iBAAiB,CAAC;AAQ9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,2BAA2B,GAE5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAsB,MAAM,eAAe,CAAC;AAgC1E,MAAM,UAAU,GAAG,CAAC,KAAsB,EAAgB,EAAE;IAC1D,MAAM,MAAM,GAAG,WAAW,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;QACxB,eAAe,EAAE,CAAC;QAClB,gBAAgB,EAAE,QAAQ,CAAC,UAAU,EAAgC;QACrE,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,IAAI,GAAG,EAAgC;QACvD,MAAM;KACP,CAAC;IACF,OAAO;QACL,GAAG,OAAO;QACV,MAAM,EAAE,qBAAqB,CAAC,OAAO,EAAE;YACrC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,kBAAkB,EAAE,KAAK,CAAC,cAAc;SACzC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,KAAmB,EACsB,EAAE,CAC3C,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,oBAAoB,CAClB,kBAAkB,EAClB,oCAAoC,CACrC,CACF;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAEtC,MAAM,iBAAiB,GAAG,CAAC,KAAmB,EAAQ,EAAE;IACtD,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAC/C,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAmB,EACnB,UAA2C,EAClC,EAAE;IACX,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC1D,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,EAAE,IAAI,GAAG,EAAgC,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAC/C,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,GAAG,qBAAqB,CAAC,4BAA4B,EAAE,CAAC;QAC1E,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC7B,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC7B,WAAW,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE;QAC1C,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CACzC,2CAA2C,CAC5C,CAAC,QAAQ,CAAC,EACT,KAAmB,EACnB,MAAsB,EACtB,OAA+C;IAE/C,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,2BAA2B,CACvD,cAAc,EACd,cAAc,CACf,CAAC;IACF,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACzD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvD,MAAM,KAAK,GAAG,UAAU,CAAC;QACvB,iBAAiB;QACjB,KAAK;QACL,cAAc;QACd,MAAM;QACN,cAAc;QACd,OAAO;QACP,cAAc;KACf,CAAC,CAAC;IACH,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC"}

package/dist/runtime/process/resource/native-host-adapter.d.ts

@@ -0,0 +1,17 @@
+import { Context, Layer } from "effect";
+import type { NativeProcessHostArtifactExpectation } from "./native-host-artifact.js";
+import type { NativeProcessHostBootstrap } from "./native-host-bootstrap.js";
+import type { NativeProcessHostAdapterService } from "./native-host-contract.js";
+export type NativeProcessHostAdapterOptions = {
+    /** ProcessResourceManager passes its authority through the internal
+     * composition. The standalone adapter retains its own hard bound. */
+    readonly admissionAuthority?: "adapter" | "process_resource_manager";
+    readonly artifact: NativeProcessHostArtifactExpectation;
+    readonly bootstrap: NativeProcessHostBootstrap;
+};
+declare const NativeProcessHostAdapter_base: Context.ServiceClass<NativeProcessHostAdapter, "@maiaos/node/runtime/process/NativeProcessHostAdapter", NativeProcessHostAdapterService>;
+export declare class NativeProcessHostAdapter extends NativeProcessHostAdapter_base {
+}
+export declare const nativeProcessHostAdapterLayer: (options: NativeProcessHostAdapterOptions) => Layer.Layer<NativeProcessHostAdapter>;
+export {};
+//# sourceMappingURL=native-host-adapter.d.ts.map

package/dist/runtime/process/resource/native-host-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-host-adapter.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/native-host-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,OAAO,EAKP,KAAK,EAIN,MAAM,QAAQ,CAAC;AAUhB,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,2BAA2B,CAAC;AAEtF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAG7E,OAAO,KAAK,EACV,+BAA+B,EAGhC,MAAM,2BAA2B,CAAC;AA2CnC,MAAM,MAAM,+BAA+B,GAAG;IAC5C;yEACqE;IACrE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,GAAG,0BAA0B,CAAC;IACrE,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;CAChD,CAAC;;AAgSF,qBAAa,wBAAyB,SAAQ,6BAGc;CAAG;AAE/D,eAAO,MAAM,6BAA6B,GACxC,SAAS,+BAA+B,KACvC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CACuB,CAAC"}

package/dist/runtime/process/resource/native-host-adapter.js

@@ -0,0 +1,169 @@
+import { randomBytes } from "node:crypto";
+import { Context, Effect, Exit, Fiber, FiberSet, Layer, Ref, Scope, Semaphore, } from "effect";
+import { makeNodeRuntimeError } from "../../errors.js";
+import { PROCESS_HOST_NONCE_BYTES, processHostMessageType, } from "./host-protocol-contract.js";
+import { openNativeProcessHostArtifact } from "./native-host-artifact.js";
+import { NativeProcessHostConnection } from "./native-host-connection.js";
+import { makeNativeProcessHostOutput } from "./native-host-output.js";
+import { processResourcePolicy } from "./policy.js";
+const validateAdapterTarget = (runtime, input) => input.targetTriple === runtime.options.artifact.targetTriple
+    ? Effect.void
+    : Effect.fail(adapterError("transport_failed", "The Maia native process-host target is not qualified."));
+const adapterError = (code, message) => makeNodeRuntimeError(code, message);
+const releaseAdmissionIf = (admission, disposition, predicate) => Ref.modify(disposition, (current) => {
+    const release = predicate(current) && current !== "released";
+    return [release, release ? "released" : current];
+}).pipe(Effect.flatMap((release) => release ? admission.release(1).pipe(Effect.asVoid) : Effect.void));
+const requireAdmission = Effect.fn("NativeProcessHostAdapter.admit")(function* (admission) {
+    const admitted = yield* admission.takeIfAvailable(1);
+    if (!admitted) {
+        return yield* Effect.fail(adapterError("saturated", "The Maia native process-host capacity is exhausted."));
+    }
+    const disposition = yield* Ref.make("uncommitted");
+    return {
+        fence: Ref.update(disposition, (current) => current === "uncommitted" ? "fenced" : current),
+        releaseClean: releaseAdmissionIf(admission, disposition, () => true),
+        releaseUncommitted: releaseAdmissionIf(admission, disposition, (current) => current === "uncommitted"),
+    };
+});
+const managerOwnedAdmission = {
+    fence: Effect.void,
+    releaseClean: Effect.void,
+    releaseUncommitted: Effect.void,
+};
+const admissionFor = (admission) => admission === undefined
+    ? Effect.succeed(managerOwnedAdmission)
+    : requireAdmission(admission);
+const launchPayload = (request, targetTriple) => ({
+    arguments_: request.arguments_,
+    environment: Object.fromEntries(Object.entries(request.environment).filter((entry) => entry[1] !== undefined)),
+    executable: request.executable,
+    ...(request.interactiveTerminal === undefined
+        ? {}
+        : { interactiveTerminal: request.interactiveTerminal }),
+    limits: request.limits,
+    selectedTier: request.selectedTier,
+    standardInput: request.standardInput,
+    streamLimits: request.streamLimits,
+    targetTriple,
+    workingDirectory: request.workingDirectory,
+});
+const launchDeadline = (effect, phase) => effect.pipe(Effect.timeoutOrElse({
+    duration: processResourcePolicy.launchAcknowledgementDeadline,
+    orElse: () => Effect.fail(adapterError("deadline_exceeded", `The Maia native process host missed its ${phase} deadline.`)),
+}));
+const validTreeId = (treeId) => treeId.length > 0 &&
+    Buffer.byteLength(treeId, "utf8") <=
+        processResourcePolicy.maximumIdentifierBytes &&
+    !treeId.includes("\0");
+const buildProcess = (connection, capabilityBitmap, treeId) => ({
+    capabilityBitmap,
+    cleanup: connection.cleanup,
+    exit: connection.exit,
+    latestSnapshot: connection.latestSnapshot,
+    recentSnapshots: connection.recentSnapshots,
+    samplingDiagnostics: connection.samplingDiagnostics,
+    ...(connection.standardInput === undefined
+        ? {}
+        : { standardInput: connection.standardInput }),
+    standardError: connection.standardError,
+    standardOutput: connection.standardOutput,
+    ...(connection.terminalControl === undefined
+        ? {}
+        : { terminalControl: connection.terminalControl }),
+    terminate: connection.terminate,
+    treeId,
+});
+const buildConnection = Effect.fn("NativeProcessHostAdapter.buildConnection")(function* (input) {
+    const output = yield* makeNativeProcessHostOutput(input.input.request.streamLimits.maximumPendingOutputBytes);
+    const inputAdmission = yield* Semaphore.make(input.input.request.streamLimits.maximumPendingInputBytes);
+    const protocolAdmission = yield* Semaphore.make(1);
+    const terminalAdmission = yield* Semaphore.make(1);
+    return yield* NativeProcessHostConnection.make({
+        fibers: input.runtime.fibers,
+        inputAdmission,
+        nonce: randomBytes(PROCESS_HOST_NONCE_BYTES),
+        output,
+        protocolAdmission,
+        releaseAdmission: input.permit.releaseClean,
+        request: input.input.request,
+        serializedInbound: input.runtime.admission === undefined,
+        terminalAdmission,
+        transport: input.transport,
+    });
+});
+const openBootstrapTransport = (runtime, input) => Effect.acquireUseRelease(Scope.make("sequential"), (artifactScope) => Scope.provide(artifactScope)(openNativeProcessHostArtifact(runtime.options.artifact)).pipe(Effect.flatMap((artifact) => runtime.options.bootstrap.open(artifact, input.request, input.authorization))), (artifactScope, exit) => Scope.close(artifactScope, exit));
+const prepareConnection = Effect.fnUntraced(function* (runtime, input) {
+    yield* validateAdapterTarget(runtime, input);
+    const permit = yield* admissionFor(runtime.admission);
+    yield* Effect.addFinalizer(() => permit.releaseUncommitted);
+    const transport = yield* openBootstrapTransport(runtime, input);
+    const connection = yield* buildConnection({
+        input,
+        permit,
+        runtime,
+        transport,
+    });
+    const reader = yield* FiberSet.run(runtime.fibers, connection.runReader);
+    yield* Effect.addFinalizer(() => Fiber.interrupt(reader));
+    yield* Effect.addFinalizer(() => connection.scopeCleanup);
+    return { connection, permit };
+});
+const dispatchRegistered = Effect.fn("NativeProcessHostAdapter.dispatch")(function* (preparedConnection, input) {
+    const { connection, permit } = preparedConnection;
+    yield* permit.fence;
+    yield* connection.launch({
+        body: launchPayload(input.request, input.targetTriple),
+        type: processHostMessageType.launch,
+    });
+    const prepared = yield* launchDeadline(connection.prepared, "preparation");
+    const registration = yield* input.registerPrepared(prepared);
+    if (!validTreeId(registration.treeId)) {
+        return yield* Effect.fail(adapterError("transport_failed", "The Maia native process-host registration is invalid."));
+    }
+    yield* connection.sendStart;
+    yield* launchDeadline(connection.started, "start");
+    return buildProcess(connection, prepared.capabilityBitmap, registration.treeId);
+});
+const launchInScope = Effect.fnUntraced(function* (runtime, input) {
+    const prepared = yield* prepareConnection(runtime, input);
+    return yield* dispatchRegistered(prepared, input);
+});
+const closeProcessScope = (effect, scope) => effect.pipe(Effect.onExit((exit) => Scope.close(scope, exit)));
+// The manager owns the standalone spawn span and this child scope owns one
+// standalone lifecycle span. Keep the internal resource phases untraced so
+// their stack/span ancestry is not retained by long-lived finalizers.
+const launchProcess = Effect.fnUntraced(function* (runtime, input) {
+    const parentScope = yield* Scope.Scope;
+    const childScope = yield* Scope.fork(parentScope, "sequential");
+    const process_ = yield* Scope.provide(childScope)(launchInScope(runtime, input)).pipe(Effect.onExit((exit) => Exit.isFailure(exit) ? Scope.close(childScope, exit) : Effect.void));
+    yield* Scope.provide(childScope)(Effect.makeSpanScoped("maia.node.process_host.lifecycle", {
+        attributes: Object.fromEntries([
+            ["maia.process.tree_id", process_.treeId],
+        ]),
+        root: true,
+    }));
+    return {
+        ...process_,
+        cleanup: closeProcessScope(process_.cleanup, childScope),
+        ...(process_.terminalControl === undefined
+            ? {}
+            : { terminalControl: process_.terminalControl }),
+        terminate: closeProcessScope(process_.terminate, childScope),
+    };
+});
+const makeAdapter = Effect.fn("NativeProcessHostAdapter.make")(function* (options) {
+    const admission = options.admissionAuthority === "process_resource_manager"
+        ? undefined
+        : yield* Semaphore.make(processResourcePolicy.maximumActiveTrees);
+    const fibers = yield* FiberSet.make();
+    const runtime = { admission, fibers, options };
+    return NativeProcessHostAdapter.of({
+        admissionAuthority: options.admissionAuthority ?? "adapter",
+        launch: (input) => launchProcess(runtime, input),
+    });
+});
+export class NativeProcessHostAdapter extends Context.Service()("@maiaos/node/runtime/process/NativeProcessHostAdapter") {
+}
+export const nativeProcessHostAdapterLayer = (options) => Layer.effect(NativeProcessHostAdapter, makeAdapter(options));
+//# sourceMappingURL=native-host-adapter.js.map

package/dist/runtime/process/resource/native-host-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-host-adapter.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/native-host-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,KAAK,EACL,GAAG,EACH,KAAK,EACL,SAAS,GACV,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iBAAiB,CAAC;AAG9E,OAAO,EACL,wBAAwB,EAExB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAG1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAM1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AA4BpD,MAAM,qBAAqB,GAAG,CAC5B,OAAwC,EACxC,KAA8B,EACS,EAAE,CACzC,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC1D,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,YAAY,CACV,kBAAkB,EAClB,uDAAuD,CACxD,CACF,CAAC;AAUR,MAAM,YAAY,GAAG,CACnB,IAA4D,EAC5D,OAAe,EACG,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAE3D,MAAM,kBAAkB,GAAG,CACzB,SAA8B,EAC9B,WAA0C,EAC1C,SAAqD,EAChC,EAAE,CACvB,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE;IAClC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,UAAU,CAAC;IAC7D,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACjE,CACF,CAAC;AAEJ,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAC5E,SAA8B;IAE9B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,YAAY,CACV,WAAW,EACX,qDAAqD,CACtD,CACF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAuB,aAAa,CAAC,CAAC;IACzE,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CACzC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAC/C;QACD,YAAY,EAAE,kBAAkB,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC;QACpE,kBAAkB,EAAE,kBAAkB,CACpC,SAAS,EACT,WAAW,EACX,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,aAAa,CACvC;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAA+B;IACxD,KAAK,EAAE,MAAM,CAAC,IAAI;IAClB,YAAY,EAAE,MAAM,CAAC,IAAI;IACzB,kBAAkB,EAAE,MAAM,CAAC,IAAI;CAChC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,SAA0C,EACmB,EAAE,CAC/D,SAAS,KAAK,SAAS;IACrB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACvC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAElC,MAAM,aAAa,GAAG,CACpB,OAA+C,EAC/C,YAAqD,EAC3B,EAAE,CAAC,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;IAC9B,WAAW,EAAE,MAAM,CAAC,WAAW,CAC7B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CACxC,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7D,CACF;IACD,UAAU,EAAE,OAAO,CAAC,UAAU;IAC9B,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;QAC3C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;IACzD,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,aAAa,EAAE,OAAO,CAAC,aAAa;IACpC,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,YAAY;IACZ,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;CAC3C,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CACrB,MAAqC,EACrC,KAA8B,EACoB,EAAE,CACpD,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,aAAa,CAAC;IACnB,QAAQ,EAAE,qBAAqB,CAAC,6BAA6B;IAC7D,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CACT,YAAY,CACV,mBAAmB,EACnB,2CAA2C,KAAK,YAAY,CAC7D,CACF;CACJ,CAAC,CACH,CAAC;AAEJ,MAAM,WAAW,GAAG,CAAC,MAAc,EAAW,EAAE,CAC9C,MAAM,CAAC,MAAM,GAAG,CAAC;IACjB,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;QAC/B,qBAAqB,CAAC,sBAAsB;IAC9C,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAEzB,MAAM,YAAY,GAAG,CACnB,UAAuC,EACvC,gBAAwB,EACxB,MAAc,EACY,EAAE,CAAC,CAAC;IAC9B,gBAAgB;IAChB,OAAO,EAAE,UAAU,CAAC,OAAO;IAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;IACrB,cAAc,EAAE,UAAU,CAAC,cAAc;IACzC,eAAe,EAAE,UAAU,CAAC,eAAe;IAC3C,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;IACnD,GAAG,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;QACxC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,aAAa,EAAE,CAAC;IAChD,aAAa,EAAE,UAAU,CAAC,aAAa;IACvC,cAAc,EAAE,UAAU,CAAC,cAAc;IACzC,GAAG,CAAC,UAAU,CAAC,eAAe,KAAK,SAAS;QAC1C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC;IACpD,SAAS,EAAE,UAAU,CAAC,SAAS;IAC/B,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAAC,CAC3E,QAAQ,CAAC,EAAE,KAA2B;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,2BAA2B,CAC/C,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,yBAAyB,CAC3D,CAAC;IACF,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAC1C,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,wBAAwB,CAC1D,CAAC;IACF,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,2BAA2B,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC5B,cAAc;QACd,KAAK,EAAE,WAAW,CAAC,wBAAwB,CAAC;QAC5C,MAAM;QACN,iBAAiB;QACjB,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;QAC3C,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;QACxD,iBAAiB;QACjB,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,OAAwC,EACxC,KAA8B,EAC9B,EAAE,CACF,MAAM,CAAC,iBAAiB,CACtB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EACxB,CAAC,aAAa,EAAE,EAAE,CAChB,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAC1B,6BAA6B,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CACxD,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAC5B,QAAQ,EACR,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,aAAa,CACpB,CACF,CACF,EACH,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAC1D,CAAC;AAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EACnD,OAAwC,EACxC,KAA8B;IAE9B,KAAK,CAAC,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;QACxC,KAAK;QACL,MAAM;QACN,OAAO;QACP,SAAS;KACV,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IACzE,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CACvE,QAAQ,CAAC,EACP,kBAAsC,EACtC,KAA8B;IAE9B,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC;IAClD,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACpB,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC;QACtD,IAAI,EAAE,sBAAsB,CAAC,MAAM;KACpC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,YAAY,CACV,kBAAkB,EAClB,uDAAuD,CACxD,CACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;IAC5B,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,YAAY,CACjB,UAAU,EACV,QAAQ,CAAC,gBAAgB,EACzB,YAAY,CAAC,MAAM,CACpB,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC/C,OAAwC,EACxC,KAA8B;IAE9B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CACxB,MAAoD,EACpD,KAAsB,EACwB,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAEjE,2EAA2E;AAC3E,2EAA2E;AAC3E,sEAAsE;AACtE,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC/C,OAAwC,EACxC,KAA8B;IAE9B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAC/C,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAC9B,CAAC,IAAI,CACJ,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACnE,CACF,CAAC;IACF,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAC9B,MAAM,CAAC,cAAc,CAAC,kCAAkC,EAAE;QACxD,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC;YAC7B,CAAC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC;SAC1C,CAAC;QACF,IAAI,EAAE,IAAI;KACX,CAAC,CACH,CAAC;IACF,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC;QAClD,SAAS,EAAE,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;KAC7D,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EACtE,OAAwC;IAExC,MAAM,SAAS,GACb,OAAO,CAAC,kBAAkB,KAAK,0BAA0B;QACvD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/C,OAAO,wBAAwB,CAAC,EAAE,CAAC;QACjC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,SAAS;QAC3D,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC;KACjD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,wBAAyB,SAAQ,OAAO,CAAC,OAAO,EAG1D,CAAC,uDAAuD,CAAC;CAAG;AAE/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,OAAwC,EACD,EAAE,CACzC,KAAK,CAAC,MAAM,CAAC,wBAAwB,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC"}

package/dist/runtime/process/resource/native-host-artifact.d.ts

@@ -0,0 +1,28 @@
+import { Effect, type Scope } from "effect";
+import { type NodeRuntimeError } from "../../errors.js";
+import { type ProcessHostTargetTriple } from "./host-protocol-contract.js";
+export type NativeProcessHostArtifactExpectation = {
+    readonly basename: string;
+    readonly nodeExecutablePath: string;
+    readonly protocolVersion: number;
+    readonly sha256: string;
+    readonly targetTriple: ProcessHostTargetTriple;
+};
+/**
+ * Private inspected lease passed to the target-specific bootstrap. Platform
+ * signature/ACL checks and descriptor-bound launch remain bootstrap gates; an
+ * artifact lease alone never enables a platform.
+ */
+export type NativeProcessHostArtifactLease = {
+    readonly changedAtNanoseconds: bigint;
+    readonly descriptor: number;
+    readonly device: bigint;
+    readonly inode: bigint;
+    readonly modifiedAtNanoseconds: bigint;
+    readonly path: string;
+    readonly sha256: string;
+    readonly size: bigint;
+    readonly targetTriple: ProcessHostTargetTriple;
+};
+export declare const openNativeProcessHostArtifact: (expectation: NativeProcessHostArtifactExpectation) => Effect.Effect<NativeProcessHostArtifactLease, NodeRuntimeError, Scope.Scope>;
+//# sourceMappingURL=native-host-artifact.d.ts.map

package/dist/runtime/process/resource/native-host-artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-host-artifact.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/native-host-artifact.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE5C,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,6BAA6B,CAAC;AAOrC,MAAM,MAAM,oCAAoC,GAAG;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;CAChD,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;CAChD,CAAC;AAwJF,eAAO,MAAM,6BAA6B,qIAoBxC,CAAC"}

package/dist/runtime/process/resource/native-host-artifact.js

@@ -0,0 +1,110 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { constants } from "node:fs";
+import { lstat, open } from "node:fs/promises";
+import { basename, dirname, isAbsolute, resolve } from "node:path";
+import { Effect } from "effect";
+import { asNodeRuntimeError, makeNodeRuntimeError, } from "../../errors.js";
+import { PROCESS_HOST_PROTOCOL_VERSION, } from "./host-protocol-contract.js";
+const maximumNativeHostArtifactBytes = 4 * 1024 * 1024;
+const SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/u;
+const POSIX_WRITABLE_BY_OTHERS = 0o022;
+const POSIX_EXECUTABLE = 0o100;
+const artifactError = () => makeNodeRuntimeError("path_invalid", "The Maia native process-host artifact is not qualified.");
+const ownedByCurrentUser = (metadata) => typeof process.getuid !== "function" ||
+    metadata.uid === BigInt(process.getuid());
+const safeArtifactMetadata = (metadata) => metadata.isFile() &&
+    !metadata.isSymbolicLink() &&
+    metadata.nlink === 1n &&
+    metadata.size > 0n &&
+    metadata.size <= BigInt(maximumNativeHostArtifactBytes) &&
+    ownedByCurrentUser(metadata) &&
+    (process.platform === "win32" ||
+        ((Number(metadata.mode) & POSIX_WRITABLE_BY_OTHERS) === 0 &&
+            (Number(metadata.mode) & POSIX_EXECUTABLE) !== 0));
+const identityOf = (metadata) => ({
+    changedAtNanoseconds: metadata.ctimeNs,
+    device: metadata.dev,
+    inode: metadata.ino,
+    modifiedAtNanoseconds: metadata.mtimeNs,
+    size: metadata.size,
+});
+const sameIdentity = (metadata, identity) => metadata.ctimeNs === identity.changedAtNanoseconds &&
+    metadata.dev === identity.device &&
+    metadata.ino === identity.inode &&
+    metadata.mtimeNs === identity.modifiedAtNanoseconds &&
+    metadata.size === identity.size;
+const expectedArtifactPath = (expectation) => {
+    if (!isAbsolute(expectation.nodeExecutablePath) ||
+        expectation.basename.length === 0 ||
+        basename(expectation.basename) !== expectation.basename ||
+        expectation.protocolVersion !== PROCESS_HOST_PROTOCOL_VERSION ||
+        !SHA256_HEX_PATTERN.test(expectation.sha256)) {
+        throw artifactError();
+    }
+    return resolve(dirname(expectation.nodeExecutablePath), expectation.basename);
+};
+const digestMatches = (actual, expected) => {
+    const expectedBytes = Buffer.from(expected, "hex");
+    return (actual.byteLength === expectedBytes.byteLength &&
+        timingSafeEqual(actual, expectedBytes));
+};
+const openArtifactHandle = async (path, pathMetadata) => {
+    const flags = constants.O_RDONLY |
+        (process.platform === "win32" ? 0 : constants.O_NOFOLLOW);
+    const handle = await open(path, flags);
+    const openedMetadata = await handle.stat({ bigint: true });
+    const identity = identityOf(openedMetadata);
+    if (!safeArtifactMetadata(openedMetadata) ||
+        !sameIdentity(pathMetadata, identity)) {
+        await handle.close();
+        throw artifactError();
+    }
+    return { handle, identity };
+};
+const verifyArtifactContent = async (input) => {
+    const content = await input.handle.readFile();
+    const digest = createHash("sha256").update(content).digest();
+    const currentPathMetadata = await lstat(input.path, { bigint: true });
+    if (!digestMatches(digest, input.expectedDigest) ||
+        !sameIdentity(currentPathMetadata, input.identity)) {
+        throw artifactError();
+    }
+};
+const artifactLease = (input) => ({
+    ...input.identity,
+    descriptor: input.handle.fd,
+    path: input.path,
+    sha256: input.expectation.sha256,
+    targetTriple: input.expectation.targetTriple,
+});
+const inspectOpenedArtifact = async (expectation) => {
+    const path = expectedArtifactPath(expectation);
+    const pathMetadata = await lstat(path, { bigint: true });
+    if (!safeArtifactMetadata(pathMetadata))
+        throw artifactError();
+    const { handle, identity } = await openArtifactHandle(path, pathMetadata);
+    try {
+        await verifyArtifactContent({
+            expectedDigest: expectation.sha256,
+            handle,
+            identity,
+            path,
+        });
+        return {
+            handle,
+            lease: artifactLease({ expectation, handle, identity, path }),
+        };
+    }
+    catch (error) {
+        await handle.close();
+        throw error;
+    }
+};
+export const openNativeProcessHostArtifact = Effect.fnUntraced(function* (expectation) {
+    const opened = yield* Effect.acquireRelease(Effect.tryPromise({
+        catch: (error) => asNodeRuntimeError(error, "path_invalid", "The Maia native process-host artifact is not qualified."),
+        try: () => inspectOpenedArtifact(expectation),
+    }), ({ handle }) => Effect.promise(() => handle.close()).pipe(Effect.ignore));
+    return opened.lease;
+});
+//# sourceMappingURL=native-host-artifact.js.map

package/dist/runtime/process/resource/native-host-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-host-artifact.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/native-host-artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAoB,SAAS,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAmB,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AAE5C,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,6BAA6B,GAE9B,MAAM,6BAA6B,CAAC;AAErC,MAAM,8BAA8B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAC7C,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAmC/B,MAAM,aAAa,GAAG,GAAqB,EAAE,CAC3C,oBAAoB,CAClB,cAAc,EACd,yDAAyD,CAC1D,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CAAC,QAAqB,EAAW,EAAE,CAC5D,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;IACpC,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAE5C,MAAM,oBAAoB,GAAG,CAAC,QAAqB,EAAW,EAAE,CAC9D,QAAQ,CAAC,MAAM,EAAE;IACjB,CAAC,QAAQ,CAAC,cAAc,EAAE;IAC1B,QAAQ,CAAC,KAAK,KAAK,EAAE;IACrB,QAAQ,CAAC,IAAI,GAAG,EAAE;IAClB,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,8BAA8B,CAAC;IACvD,kBAAkB,CAAC,QAAQ,CAAC;IAC5B,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC3B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,KAAK,CAAC;YACvD,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEzD,MAAM,UAAU,GAAG,CAAC,QAAqB,EAAoB,EAAE,CAAC,CAAC;IAC/D,oBAAoB,EAAE,QAAQ,CAAC,OAAO;IACtC,MAAM,EAAE,QAAQ,CAAC,GAAG;IACpB,KAAK,EAAE,QAAQ,CAAC,GAAG;IACnB,qBAAqB,EAAE,QAAQ,CAAC,OAAO;IACvC,IAAI,EAAE,QAAQ,CAAC,IAAI;CACpB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CACnB,QAAqB,EACrB,QAA0B,EACjB,EAAE,CACX,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,oBAAoB;IAClD,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM;IAChC,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK;IAC/B,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,qBAAqB;IACnD,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;AAElC,MAAM,oBAAoB,GAAG,CAC3B,WAAiD,EACzC,EAAE;IACV,IACE,CAAC,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAAC;QAC3C,WAAW,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACjC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,WAAW,CAAC,QAAQ;QACvD,WAAW,CAAC,eAAe,KAAK,6BAA6B;QAC7D,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAC5C,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;AAChF,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAW,EAAE;IAClE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnD,OAAO,CACL,MAAM,CAAC,UAAU,KAAK,aAAa,CAAC,UAAU;QAC9C,eAAe,CAAC,MAAM,EAAE,aAAa,CAAC,CACvC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAY,EACZ,YAAyB,EAIxB,EAAE;IACH,MAAM,KAAK,GACT,SAAS,CAAC,QAAQ;QAClB,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IAC5C,IACE,CAAC,oBAAoB,CAAC,cAAc,CAAC;QACrC,CAAC,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,EACrC,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,KAAK,EAAE,KAKpC,EAAiB,EAAE;IAClB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7D,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,IACE,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC;QAC5C,CAAC,YAAY,CAAC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,CAAC,EAClD,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAKtB,EAAkC,EAAE,CAAC,CAAC;IACrC,GAAG,KAAK,CAAC,QAAQ;IACjB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;IAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM;IAChC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,YAAY;CAC7C,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,KAAK,EACjC,WAAiD,EAIhD,EAAE;IACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC;QAAE,MAAM,aAAa,EAAE,CAAC;IAC/D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,qBAAqB,CAAC;YAC1B,cAAc,EAAE,WAAW,CAAC,MAAM;YAClC,MAAM;YACN,QAAQ;YACR,IAAI;SACL,CAAC,CAAC;QACH,OAAO;YACL,MAAM;YACN,KAAK,EAAE,aAAa,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EACtE,WAAiD;IAMjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CACzC,MAAM,CAAC,UAAU,CAAC;QAChB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,kBAAkB,CAChB,KAAK,EACL,cAAc,EACd,yDAAyD,CAC1D;QACH,GAAG,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC;KAC9C,CAAC,EACF,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CACzE,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC,CAAC,CAAC"}

package/dist/runtime/process/resource/native-host-bootstrap.d.ts

@@ -0,0 +1,29 @@
+import type { Effect, Scope, Stream } from "effect";
+import type { NodeRuntimeError } from "../../errors.js";
+import type { ProcessLaunchAuthorization, RegisteredProcessResourceLaunchRequest } from "./contract.js";
+import type { NativeProcessHostArtifactLease } from "./native-host-artifact.js";
+export type NativeProcessHostHelperExit = {
+    readonly code: null | number;
+    readonly signal: null | string;
+};
+/**
+ * Private control channel. A target-specific bootstrap owns exact artifact
+ * launch and never returns a PID, ChildProcess, kernel handle, or kill token.
+ */
+export type NativeProcessHostTransport = {
+    readonly abortHelper: Effect.Effect<void>;
+    readonly closeInput: Effect.Effect<void>;
+    readonly exit: Effect.Effect<NativeProcessHostHelperExit, NodeRuntimeError>;
+    /**
+     * Platform transports may expose their already-serialized byte callback to
+     * avoid a per-snapshot Stream scheduling hop. Throwing from the callback
+     * fails the listener and closes the process-host connection.
+     */
+    readonly listenSerialized?: (accept: (chunk: Uint8Array) => void) => Effect.Effect<void, NodeRuntimeError>;
+    readonly read: Stream.Stream<Uint8Array, NodeRuntimeError>;
+    readonly write: (bytes: Uint8Array) => Effect.Effect<void, NodeRuntimeError>;
+};
+export type NativeProcessHostBootstrap = {
+    readonly open: (artifact: NativeProcessHostArtifactLease, request: RegisteredProcessResourceLaunchRequest, authorization?: ProcessLaunchAuthorization) => Effect.Effect<NativeProcessHostTransport, NodeRuntimeError, Scope.Scope>;
+};
+//# sourceMappingURL=native-host-bootstrap.d.ts.map

package/dist/runtime/process/resource/native-host-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-host-bootstrap.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/native-host-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,EACV,0BAA0B,EAC1B,sCAAsC,EACvC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAEhF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC;CAChC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAAC;IAC5E;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAC1B,MAAM,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,KAChC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;CAC9E,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,IAAI,EAAE,CACb,QAAQ,EAAE,8BAA8B,EACxC,OAAO,EAAE,sCAAsC,EAC/C,aAAa,CAAC,EAAE,0BAA0B,KACvC,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;CAC/E,CAAC"}

package/dist/runtime/process/resource/native-host-bootstrap.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=native-host-bootstrap.js.map

package/dist/runtime/process/resource/native-host-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-host-bootstrap.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/native-host-bootstrap.ts"],"names":[],"mappings":""}

package/dist/runtime/process/resource/native-host-capability.d.ts

@@ -0,0 +1,5 @@
+import type { ProcessContainmentTier, ProcessResourceCapability, ProcessResourceSource } from "./contract.js";
+import { type ProcessHostTargetTriple } from "./host-protocol-contract.js";
+export declare const nativeHostCapability: (bitmap: bigint, tier: ProcessContainmentTier, targetTriple: ProcessHostTargetTriple) => ProcessResourceCapability;
+export declare const nativeHostTargetSource: (targetTriple: ProcessHostTargetTriple, tier: ProcessContainmentTier) => ProcessResourceSource;
+//# sourceMappingURL=native-host-capability.d.ts.map

package/dist/runtime/process/resource/native-host-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-host-capability.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/native-host-capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,6BAA6B,CAAC;AAwKrC,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,MAAM,EACd,MAAM,sBAAsB,EAC5B,cAAc,uBAAuB,KACpC,yBAcF,CAAC;AAEF,eAAO,MAAM,sBAAsB,iBAxKnB,uBAAuB,QAC/B,sBAAsB,KAC3B,qBAsK+C,CAAC"}

package/dist/runtime/process/resource/native-host-capability.js

@@ -0,0 +1,86 @@
+import { processHostCapabilityBit, } from "./host-protocol-contract.js";
+const unavailable = (semantic) => ({
+    reason: "not_exposed",
+    semantic,
+    state: "unavailable",
+});
+const available = (semantic, source, enforcement) => ({
+    enforcement,
+    semantic,
+    source,
+    state: "available",
+});
+const targetSource = (targetTriple, tier) => {
+    switch (targetTriple) {
+        case "darwin-arm64":
+            return tier === "cooperative_multi_pgid" ||
+                tier === "cooperative_pi_rpc_conversation" ||
+                tier === "local_user_interactive_terminal"
+                ? "darwin_descendant_snapshot"
+                : "darwin_process_group";
+        case "linux-arm64":
+        case "linux-x64":
+            return "linux_cgroup";
+        case "win32-x64":
+            return "windows_job";
+    }
+};
+const capability = (input) => (input.bitmap & input.bit) === 0n
+    ? unavailable(input.semantic)
+    : available(input.semantic, input.source, input.enforcement);
+const capabilityFor = (bitmap, source) => (bit, semantic, enforcement = "observed") => capability({ bit, bitmap, enforcement, semantic, source });
+const targetLimitCapabilities = (input) => {
+    const target = capabilityFor(input.bitmap, input.source);
+    return {
+        cpuTime: target(processHostCapabilityBit.targetCpuTimeLimit, input.targetTriple === "win32-x64"
+            ? "cumulative_user_mode_time_limit"
+            : "cumulative_cpu_time_limit", "hard"),
+        memory: target(processHostCapabilityBit.targetMemoryLimit, input.targetTriple === "win32-x64"
+            ? "aggregate_committed_memory_limit"
+            : "aggregate_memory_limit", "hard"),
+        processCount: target(processHostCapabilityBit.targetProcessCountLimit, "active_process_limit", "hard"),
+    };
+};
+const limitCapabilities = (input) => ({
+    ...targetLimitCapabilities(input),
+    wallTime: capabilityFor(input.bitmap, "process_host")(processHostCapabilityBit.targetWallTimeLimit, "wall_time_limit", input.tier === "hard_containment" ? "hard" : "cooperative"),
+});
+const coreMetricCapabilities = (input) => {
+    const target = capabilityFor(input.bitmap, input.source);
+    return {
+        cpuTime: target(processHostCapabilityBit.targetCpuTimeMetric, "cumulative_cpu_time"),
+        memory: target(processHostCapabilityBit.targetMemoryMetric, input.targetTriple === "win32-x64"
+            ? "peak_job_committed_memory_bytes"
+            : "aggregate_memory_bytes"),
+        observedPeakRss: target(processHostCapabilityBit.targetObservedPeakRssMetric, "observed_peak_resident_set_bytes"),
+        processCount: target(processHostCapabilityBit.targetProcessCountMetric, "active_process_count"),
+        rss: target(processHostCapabilityBit.targetRssMetric, "resident_set_bytes"),
+    };
+};
+const extendedMetricCapabilities = (bitmap, source) => {
+    const target = capabilityFor(bitmap, source);
+    const host = capabilityFor(bitmap, "process_host");
+    return {
+        fileDescriptorCount: target(processHostCapabilityBit.targetFileDescriptorMetric, "open_descriptor_count"),
+        ioRead: target(processHostCapabilityBit.targetIoReadMetric, "cumulative_io_read_bytes"),
+        ioWrite: target(processHostCapabilityBit.targetIoWriteMetric, "cumulative_io_write_bytes"),
+        wallTime: host(processHostCapabilityBit.targetWallTimeMetric, "wall_time"),
+    };
+};
+const metricCapabilities = (input) => ({
+    ...coreMetricCapabilities(input),
+    ...extendedMetricCapabilities(input.bitmap, input.source),
+});
+export const nativeHostCapability = (bitmap, tier, targetTriple) => {
+    const source = targetSource(targetTriple, tier);
+    const target = capabilityFor(bitmap, source);
+    const input = { bitmap, source, targetTriple, tier };
+    return {
+        limits: limitCapabilities(input),
+        metrics: metricCapabilities(input),
+        survivorCleanup: target(processHostCapabilityBit.survivorCleanup, "owned_set_empty", "hard"),
+        tier,
+    };
+};
+export const nativeHostTargetSource = targetSource;
+//# sourceMappingURL=native-host-capability.js.map